nixpkgs/pkgs/development/libraries/openjpeg/2.x.nix

{ callPackage, fetchpatch, ... } @ args:

callPackage ./generic.nix (args // rec {
  version = "2.3.1";
  branch = "2.3";
  revision = "v${version}";
  sha256 = "1dn98d2dfa1lqyxxmab6rrcv52dyhjr4g7i4xf2w54fqsx14ynrb";

  extraFlags = [
    "-DOPENJPEG_INSTALL_INCLUDE_DIR=${placeholder "dev"}/include/openjpeg-${branch}"
    "-DOPENJPEG_INSTALL_PACKAGE_DIR=${placeholder "dev"}/lib/openjpeg-${branch}"
  ];

  patches = [
    ./fix-cmake-config-includedir.patch
    (fetchpatch {
      url = "https://github.com/uclouvain/openjpeg/commit/21399f6b7d318fcdf4406d5e88723c4922202aa3.patch";
      name = "CVE-2019-12973-1.patch";
      sha256 = "161yvnfbzy2016qqapm0ywfgglgs1v8ljnk6fj8d2bwdh1cxxz8f";
    })
    (fetchpatch {
      url = "https://github.com/uclouvain/openjpeg/commit/3aef207f90e937d4931daf6d411e092f76d82e66.patch";
      name = "CVE-2019-12973-2.patch";
      sha256 = "1jkkfw13l7nx4hxdhc7z17f4vfgqcaf09zpl235kypbxx1ygc7vq";
    })
    (fetchpatch {
      url = "https://github.com/uclouvain/openjpeg/commit/024b8407392cb0b82b04b58ed256094ed5799e04.patch";
      name = "CVE-2020-6851.patch";
      sha256 = "1lfwlzqxb69cwzjp8v9lijz4c2qhf3b8m6sq1khipqlgrb3l58xw";
    })
    (fetchpatch {
      url = "https://github.com/uclouvain/openjpeg/commit/05f9b91e60debda0e83977e5e63b2e66486f7074.patch";
      name = "CVE-2020-8112.patch";
      sha256 = "16kykc8wbq9kx9w9kkf3i7snak82m184qrl9bpxvkjl7h0n9aw49";
    })
  ];
})
openjpeg2: patch for multiple CVEs - Floating Point Exception (aka FPE or divide by zero) in opj_pi_next_cprl function in openjp2/pi.c:523 in OpenJPEG 2.1.2. (CVE-2016-9112) - There is a NULL Pointer Access in function imagetopnm of convert.c:1943(jp2) of OpenJPEG 2.1.2. image->comps[compno].data is not assigned a value after initialization(NULL). Impact is Denial of Service. (CVE-2016-9114) - NULL Pointer Access in function imagetopnm of convert.c:2226(jp2) in OpenJPEG 2.1.2. Impact is Denial of Service. Someone must open a crafted j2k file. (CVE-2016-9116) - Heap Buffer Overflow (WRITE of size 4) in function pnmtoimage of convert.c:1719 in OpenJPEG 2.1.2. (CVE-2016-9118) 2017-01-07 11:50:02 +00:00			`{ callPackage, fetchpatch, ... } @ args:`
Resurrect openjpeg 2.0.x and use it for mupdf mupdf doesn't compile with 2.1 due to API changes cc @codyopel who made the openjpeg update 2015-02-25 01:50:06 +00:00
			`callPackage ./generic.nix (args // rec {`
openjpeg: 2.3.0 -> 2.3.1 bug fixes, security fixes* I /think/ we had patches for the mentioned CVE's, but another pair of eyes is appreciated. 2019-04-06 17:03:39 +01:00			`version = "2.3.1";`
openjpeg: 2.1.2 -> 2.3.0 for multiple CVEs Fixes: * CVE-2016-10504 * CVE-2016-10505 * CVE-2016-10506 * CVE-2016-10507 * CVE-2016-9112 * CVE-2016-9113 * CVE-2016-9114 * CVE-2016-9115 * CVE-2016-9116 * CVE-2016-9117 * CVE-2016-9118 cc #30959 2017-11-19 18:32:17 +00:00			`branch = "2.3";`
			`revision = "v${version}";`
openjpeg: 2.3.0 -> 2.3.1 bug fixes, security fixes* I /think/ we had patches for the mentioned CVE's, but another pair of eyes is appreciated. 2019-04-06 17:03:39 +01:00			`sha256 = "1dn98d2dfa1lqyxxmab6rrcv52dyhjr4g7i4xf2w54fqsx14ynrb";`
openjpeg: adding patch for CVE-2018-7648 (cherry picked from commit 3dc0838450ad5ec8c25adcd1c7bfe3b8b630b7e5) Forward-picking from staging-next. The CVE is marked as critical, and the amount of rebuilds isn't that high (~500 linux, ~100 darwin). 2018-10-27 14:25:52 +01:00
openjpeg: fix includedir in cmake config files 2018-12-23 01:01:49 +00:00			`extraFlags = [`
			`"-DOPENJPEG_INSTALL_INCLUDE_DIR=${placeholder "dev"}/include/openjpeg-${branch}"`
			`"-DOPENJPEG_INSTALL_PACKAGE_DIR=${placeholder "dev"}/lib/openjpeg-${branch}"`
			`];`

openjpeg: adding patch for CVE-2018-7648 (cherry picked from commit 3dc0838450ad5ec8c25adcd1c7bfe3b8b630b7e5) Forward-picking from staging-next. The CVE is marked as critical, and the amount of rebuilds isn't that high (~500 linux, ~100 darwin). 2018-10-27 14:25:52 +01:00			`patches = [`
openjpeg: fix includedir in cmake config files 2018-12-23 01:01:49 +00:00			`./fix-cmake-config-includedir.patch`
openjpeg: CVE-2019-12973 2019-07-06 09:40:29 +01:00			`(fetchpatch {`
			`url = "https://github.com/uclouvain/openjpeg/commit/21399f6b7d318fcdf4406d5e88723c4922202aa3.patch";`
			`name = "CVE-2019-12973-1.patch";`
			`sha256 = "161yvnfbzy2016qqapm0ywfgglgs1v8ljnk6fj8d2bwdh1cxxz8f";`
			`})`
			`(fetchpatch {`
			`url = "https://github.com/uclouvain/openjpeg/commit/3aef207f90e937d4931daf6d411e092f76d82e66.patch";`
			`name = "CVE-2019-12973-2.patch";`
			`sha256 = "1jkkfw13l7nx4hxdhc7z17f4vfgqcaf09zpl235kypbxx1ygc7vq";`
			`})`
openjpeg: add patch for CVE-2020-6851 2020-03-12 17:30:12 +00:00			`(fetchpatch {`
			`url = "https://github.com/uclouvain/openjpeg/commit/024b8407392cb0b82b04b58ed256094ed5799e04.patch";`
			`name = "CVE-2020-6851.patch";`
			`sha256 = "1lfwlzqxb69cwzjp8v9lijz4c2qhf3b8m6sq1khipqlgrb3l58xw";`
			`})`
openjpeg: add patch for CVE-2020-8112 2020-03-12 17:37:41 +00:00			`(fetchpatch {`
			`url = "https://github.com/uclouvain/openjpeg/commit/05f9b91e60debda0e83977e5e63b2e66486f7074.patch";`
			`name = "CVE-2020-8112.patch";`
			`sha256 = "16kykc8wbq9kx9w9kkf3i7snak82m184qrl9bpxvkjl7h0n9aw49";`
			`})`
openjpeg: adding patch for CVE-2018-7648 (cherry picked from commit 3dc0838450ad5ec8c25adcd1c7bfe3b8b630b7e5) Forward-picking from staging-next. The CVE is marked as critical, and the amount of rebuilds isn't that high (~500 linux, ~100 darwin). 2018-10-27 14:25:52 +01:00			`];`
Resurrect openjpeg 2.0.x and use it for mupdf mupdf doesn't compile with 2.1 due to API changes cc @codyopel who made the openjpeg update 2015-02-25 01:50:06 +00:00			`})`