blob: e6113c0d76962a71a94fe8a6fc65167333ccaba6 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
|
{ lib
, stdenv
, buildPackages
, autoreconfHook
, pkg-config
, fetchurl
, fetchpatch
, libedit
, runCommand
, dash
}:
stdenv.mkDerivation rec {
pname = "dash";
version = "0.5.11.5";
src = fetchurl {
url = "http://gondor.apana.org.au/~herbert/dash/files/${pname}-${version}.tar.gz";
sha256 = "sha256-23eBEIkfeTeYXym/I0EP4cXWaVAnYPWE5U4OeynhI70=";
};
hardeningDisable = [ "format" ];
patches = [
(fetchpatch {
# Dash executes code when noexec ("-n") is specified
# https://www.openwall.com/lists/oss-security/2020/11/11/3
url = "https://git.kernel.org/pub/scm/utils/dash/dash.git/patch/?id=29d6f2148f10213de4e904d515e792d2cf8c968e";
sha256 = "0aadb7aaaan6jxmi6icv4p5gqx7k510yszaqsa29b5giyxz5l9i1";
})
# aarch64-darwin fix from upstream; remove on next release
(fetchpatch {
url = "https://git.kernel.org/pub/scm/utils/dash/dash.git/patch/?id=6f6d1f2da03468c0e131fdcbdcfa9771ffca2614";
sha256 = "16iz2ylkyhpxqq411ns8pjk8rizh6afhavvsf052wvzsnmmlvfbw";
})
];
strictDeps = true;
# configure.ac patched; remove on next release
nativeBuildInputs = [ autoreconfHook ]
++ lib.optionals stdenv.hostPlatform.isStatic [ pkg-config ];
depsBuildBuild = [ buildPackages.stdenv.cc ];
buildInputs = [ libedit ];
configureFlags = [ "--with-libedit" ];
preConfigure = lib.optional stdenv.hostPlatform.isStatic ''
export LIBS="$(''${PKG_CONFIG:-pkg-config} --libs --static libedit)"
'';
enableParallelBuilding = true;
meta = with lib; {
homepage = "http://gondor.apana.org.au/~herbert/dash/";
description = "A POSIX-compliant implementation of /bin/sh that aims to be as small as possible";
platforms = platforms.unix;
license = with licenses; [ bsd3 gpl2 ];
};
passthru = {
shellPath = "/bin/dash";
tests = {
"execute-simple-command" = runCommand "${pname}-execute-simple-command" { } ''
mkdir $out
${dash}/bin/dash -c 'echo "Hello World!" > $out/success'
[ -s $out/success ]
grep -q "Hello World" $out/success
'';
};
};
}
|
