nixpkgs-suyu/pkgs/development/libraries/gstreamer/bad/default.nix

59 lines
1.7 KiB
Nix
Raw Normal View History

2013-12-23 16:36:37 +01:00
{ stdenv, fetchurl, pkgconfig, python, gst-plugins-base, orc
, faacSupport ? false, faac ? null
, faad2, libass, libkate, libmms
, libmodplug, mpeg2dec, mpg123
2013-12-23 16:36:37 +01:00
, openjpeg, libopus, librsvg
, wildmidi, fluidsynth, libvdpau, wayland
, libwebp, xvidcore, gnutls, mjpegtools
2015-04-09 03:54:51 +02:00
, mesa, libintlOrEmpty
2013-12-23 16:36:37 +01:00
}:
assert faacSupport -> faac != null;
2015-04-09 03:54:51 +02:00
let
inherit (stdenv.lib) optional optionalString;
in
2013-12-23 16:36:37 +01:00
stdenv.mkDerivation rec {
gstreamer-*: 1.10.2 -> 1.10.3 for multiple CVEs gst-plugins-bad: From the Arch Linux advisory: - CVE-2017-5843 (arbitrary code execution): A double-free issue has been found in gstreamer before 1.10.3, in gst_mxf_demux_update_essence_tracks. - CVE-2017-5848 (denial of service): An out-of-bounds read has been found in gstreamer before 1.10.3, in gst_ps_demux_parse_psm. More: https://lwn.net/Vulnerabilities/713772/ gst-plugins-base: From the Arch Linux advisory: - CVE-2017-5837 (denial of service): A floating point exception issue has been found in gstreamer before 1.10.3, in gst_riff_create_audio_caps. - CVE-2017-5839 (denial of service): An endless recursion issue leading to stack overflow has been found in gstreamer before 1.10.3, in gst_riff_create_audio_caps. - CVE-2017-5842 (arbitrary code execution): An off-by-one write has been found in gstreamer before 1.10.3, in html_context_handle_element. - CVE-2017-5844 (denial of service): A floating point exception issue has been found in gstreamer before 1.10.3, in gst_riff_create_audio_caps. More: https://lwn.net/Vulnerabilities/713773/ gst-plugins-good: From the Arch Linux advisory: - CVE-2016-10198 (denial of service): An invalid memory read flaw has been found in gstreamer before 1.10.3, in gst_aac_parse_sink_setcaps. - CVE-2016-10199 (denial of service): An out of bounds read has been found in gstreamer before 1.10.3, in qtdemux_tag_add_str_full. - CVE-2017-5840 (denial of service): An out-of-bounds read has been found in gstreamer before 1.10.3, in qtdemux_parse_samples. - CVE-2017-5841 (denial of service): An out-of-bounds read has been found in gstreamer before 1.10.3, in gst_avi_demux_parse_ncdt. - CVE-2017-5845 (denial of service): An out-of-bounds read has been found in gstreamer before 1.10.3, in gst_avi_demux_parse_ncdt. More: https://lwn.net/Vulnerabilities/713774/ gst-plugins-ugly: From the Arch Linux advisory: - CVE-2017-5846 (denial of service): An out-of-bounds read has been found in gstreamer before 1.10.3, in gst_asf_demux_process_ext_stream_props. - CVE-2017-5847 (denial of service): An out-of-bounds read has been found in gstreamer before 1.10.3, in gst_asf_demux_process_ext_content_desc. More: https://lwn.net/Vulnerabilities/713775/ gstreamer: From the Arch Linux advisory: An out of bounds read has been found in gstreamer before 1.10.3, in gst_date_time_new_from_iso8601_string. More: https://lwn.net/Vulnerabilities/713776/
2017-02-08 14:27:59 +01:00
name = "gst-plugins-bad-1.10.3";
2013-12-23 16:36:37 +01:00
meta = with stdenv.lib; {
description = "Gstreamer Bad Plugins";
homepage = "http://gstreamer.freedesktop.org";
longDescription = ''
a set of plug-ins that aren't up to par compared to the
rest. They might be close to being good quality, but they're missing
something - be it a good code review, some documentation, a set of tests,
a real live maintainer, or some actual wide use.
'';
license = licenses.lgpl2Plus;
Disable bunch of non-compiling packages on Darwin These ones have a "Last successful build" timestamp in the 2014s or 2015s. Presumably no one will notice if we now stop building them. softether_4_18 2015-09-20 http://hydra.nixos.org/build/39418483 lensfun 2014-09-30 http://hydra.nixos.org/build/39394104 net_snmp 2015-09-20 http://hydra.nixos.org/build/39410553 djview 2015-08-11 http://hydra.nixos.org/build/39413233 libmusicbrainz2 2015-09-20 http://hydra.nixos.org/build/39410106 fox_1_6 2014-05-07 http://hydra.nixos.org/build/39410858 libofx 2015-09-24 http://hydra.nixos.org/build/39423507 yacas 2014-09-30 http://hydra.nixos.org/build/39393150 iomelt 2014-09-30 http://hydra.nixos.org/build/39408486 softether 2015-09-20 http://hydra.nixos.org/build/39425800 mp4v2 2014-09-30 http://hydra.nixos.org/build/39421899 virtuoso7 2014-09-21 http://hydra.nixos.org/build/39415206 man_db 2015-04-23 http://hydra.nixos.org/build/39404236 libdiscid 2014-09-30 http://hydra.nixos.org/build/39412202 zabbix22.agent 2014-09-21 http://hydra.nixos.org/build/39412149 vidalia 2015-08-06 http://hydra.nixos.org/build/39411500 libmtp 2015-09-20 http://hydra.nixos.org/build/39419199 wxGTK29 2015-09-20 http://hydra.nixos.org/build/39415296 ncmpcpp 2015-11-06 http://hydra.nixos.org/build/39404455 libtorrent 2014-09-21 http://hydra.nixos.org/build/39394646 shishi 2014-03-21 http://hydra.nixos.org/build/39418874 ocaml_3_12_1 2014-09-30 http://hydra.nixos.org/build/39392996 djview4 2015-08-11 http://hydra.nixos.org/build/39427799 vimNox 2014-05-23 http://hydra.nixos.org/build/39397012 ttfautohint 2015-08-06 http://hydra.nixos.org/build/39398330 libraw 2015-09-24 http://hydra.nixos.org/build/39402271 wxGTK30 2015-09-20 http://hydra.nixos.org/build/39401871 sbcl_1_2_5 2015-09-20 http://hydra.nixos.org/build/39426091 prover9 2014-09-30 http://hydra.nixos.org/build/39406476 rcs 2015-08-25 http://hydra.nixos.org/build/39392037 gpac 2015-09-24 http://hydra.nixos.org/build/39399470 virtuoso6 2014-09-30 http://hydra.nixos.org/build/39398651 xlslib 2015-09-24 http://hydra.nixos.org/build/39410387 ucommon 2015-03-27 http://hydra.nixos.org/build/39414040 commoncpp2 2014-09-30 http://hydra.nixos.org/build/39420117 virtuoso 2014-09-21 http://hydra.nixos.org/build/39399978 miniHttpd 2014-09-30 http://hydra.nixos.org/build/39392925 mpack 2014-09-26 http://hydra.nixos.org/build/39399535 nbd 2014-09-26 http://hydra.nixos.org/build/39401367 newsbeuter-dev 2014-07-29 http://hydra.nixos.org/build/39406259 gimp_2_8 2015-09-20 http://hydra.nixos.org/build/39436271 gimp 2015-09-20 http://hydra.nixos.org/build/39435976 zabbix20.agent 2014-09-30 http://hydra.nixos.org/build/39393242 gst_all_1.gst-plugins-good 2015-09-20 http://hydra.nixos.org/build/39408506 ocaml_4_00_1 2014-09-30 http://hydra.nixos.org/build/39399526 inadyn 2014-09-30 http://hydra.nixos.org/build/39426389 gst_all_1.gst-plugins-bad 2015-09-20 http://hydra.nixos.org/build/39392970 zabbix.agent 2014-09-30 http://hydra.nixos.org/build/39421412 cmake-2_8 2015-09-24 http://hydra.nixos.org/build/39399443 liblastfm 2015-08-06 http://hydra.nixos.org/build/39421812 newsbeuter 2014-07-29 http://hydra.nixos.org/build/39396605 sdcv 2014-09-26 http://hydra.nixos.org/build/39412928
2016-09-01 19:39:33 +02:00
platforms = platforms.linux;
2013-12-23 16:36:37 +01:00
};
src = fetchurl {
url = "${meta.homepage}/src/gst-plugins-bad/${name}.tar.xz";
gstreamer-*: 1.10.2 -> 1.10.3 for multiple CVEs gst-plugins-bad: From the Arch Linux advisory: - CVE-2017-5843 (arbitrary code execution): A double-free issue has been found in gstreamer before 1.10.3, in gst_mxf_demux_update_essence_tracks. - CVE-2017-5848 (denial of service): An out-of-bounds read has been found in gstreamer before 1.10.3, in gst_ps_demux_parse_psm. More: https://lwn.net/Vulnerabilities/713772/ gst-plugins-base: From the Arch Linux advisory: - CVE-2017-5837 (denial of service): A floating point exception issue has been found in gstreamer before 1.10.3, in gst_riff_create_audio_caps. - CVE-2017-5839 (denial of service): An endless recursion issue leading to stack overflow has been found in gstreamer before 1.10.3, in gst_riff_create_audio_caps. - CVE-2017-5842 (arbitrary code execution): An off-by-one write has been found in gstreamer before 1.10.3, in html_context_handle_element. - CVE-2017-5844 (denial of service): A floating point exception issue has been found in gstreamer before 1.10.3, in gst_riff_create_audio_caps. More: https://lwn.net/Vulnerabilities/713773/ gst-plugins-good: From the Arch Linux advisory: - CVE-2016-10198 (denial of service): An invalid memory read flaw has been found in gstreamer before 1.10.3, in gst_aac_parse_sink_setcaps. - CVE-2016-10199 (denial of service): An out of bounds read has been found in gstreamer before 1.10.3, in qtdemux_tag_add_str_full. - CVE-2017-5840 (denial of service): An out-of-bounds read has been found in gstreamer before 1.10.3, in qtdemux_parse_samples. - CVE-2017-5841 (denial of service): An out-of-bounds read has been found in gstreamer before 1.10.3, in gst_avi_demux_parse_ncdt. - CVE-2017-5845 (denial of service): An out-of-bounds read has been found in gstreamer before 1.10.3, in gst_avi_demux_parse_ncdt. More: https://lwn.net/Vulnerabilities/713774/ gst-plugins-ugly: From the Arch Linux advisory: - CVE-2017-5846 (denial of service): An out-of-bounds read has been found in gstreamer before 1.10.3, in gst_asf_demux_process_ext_stream_props. - CVE-2017-5847 (denial of service): An out-of-bounds read has been found in gstreamer before 1.10.3, in gst_asf_demux_process_ext_content_desc. More: https://lwn.net/Vulnerabilities/713775/ gstreamer: From the Arch Linux advisory: An out of bounds read has been found in gstreamer before 1.10.3, in gst_date_time_new_from_iso8601_string. More: https://lwn.net/Vulnerabilities/713776/
2017-02-08 14:27:59 +01:00
sha256 = "1rwla1p57yzygb68z2xk5l5kvqzj5w3nxq0davkwk139zd8r6294";
2013-12-23 16:36:37 +01:00
};
outputs = [ "out" "dev" ];
2016-04-24 14:39:30 +02:00
2013-12-23 16:36:37 +01:00
nativeBuildInputs = [ pkgconfig python ];
buildInputs = [
gst-plugins-base orc
faad2 libass libkate libmms
libmodplug mpeg2dec mpg123
2013-12-23 16:36:37 +01:00
openjpeg libopus librsvg
2015-04-09 03:54:51 +02:00
fluidsynth libvdpau
libwebp xvidcore gnutls mesa
mjpegtools
2015-04-09 03:54:51 +02:00
]
++ libintlOrEmpty
++ optional faacSupport faac
++ optional stdenv.isLinux wayland
# wildmidi requires apple's OpenAL
# TODO: package apple's OpenAL, fix wildmidi, include on Darwin
++ optional (!stdenv.isDarwin) wildmidi;
LDFLAGS = optionalString stdenv.isDarwin "-lintl";
2013-12-23 16:36:37 +01:00
}