libraw: disable JPEG2000 support by default

jasper has many security issues and it's only used for some
old Redcine cameras. See:
https://github.com/LibRaw/LibRaw/issues/69
This commit is contained in:
c0bw3b 2019-11-17 22:14:08 +01:00
parent 329270e852
commit 9ee141e8c4

View File

@ -1,4 +1,7 @@
{ stdenv, fetchurl, lcms2, jasper, pkgconfig }:
{ stdenv, fetchurl, lcms2, pkgconfig
, jasper ? null, withJpeg2k ? false
# disable JPEG2000 support by default as jasper has many CVE
}:
stdenv.mkDerivation rec {
pname = "libraw";
@ -11,7 +14,7 @@ stdenv.mkDerivation rec {
outputs = [ "out" "lib" "dev" "doc" ];
buildInputs = [ jasper ];
buildInputs = stdenv.lib.optionals withJpeg2k [ jasper ];
propagatedBuildInputs = [ lcms2 ];