nixpkgs/pkgs/development/libraries/caf/default.nix
Anders Kaseorg 3cd8ce3bce treewide: Fix unsafe concatenation of $LD_LIBRARY_PATH
Naive concatenation of $LD_LIBRARY_PATH can result in an empty
colon-delimited segment; this tells glibc to load libraries from the
current directory, which is definitely wrong, and may be a security
vulnerability if the current directory is untrusted.  (See #67234, for
example.)  Fix this throughout the tree.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2020-01-15 09:47:03 +01:00

37 lines
920 B
Nix

{ stdenv, fetchFromGitHub, cmake, openssl }:
stdenv.mkDerivation rec {
pname = "actor-framework";
version = "0.17.3";
src = fetchFromGitHub {
owner = "actor-framework";
repo = "actor-framework";
rev = version;
sha256 = "187r7vc4kpd0v6bb1y51zwqm9y1lh0m84vkwmrxn8rrp4bwdxlpj";
};
nativeBuildInputs = [ cmake ];
buildInputs = [ openssl ];
cmakeFlags = [
"-DCAF_NO_EXAMPLES:BOOL=TRUE"
];
doCheck = true;
checkTarget = "test";
preCheck = ''
export LD_LIBRARY_PATH=$LD_LIBRARY_PATH''${LD_LIBRARY_PATH:+:}$PWD/lib
export DYLD_LIBRARY_PATH=$DYLD_LIBRARY_PATH''${DYLD_LIBRARY_PATH:+:}$PWD/lib
'';
meta = with stdenv.lib; {
description = "An open source implementation of the actor model in C++";
homepage = http://actor-framework.org/;
license = licenses.bsd3;
platforms = platforms.unix;
maintainers = with maintainers; [ bobakker tobim ];
};
}