forked from mirrors/nixpkgs
f9099deb8e
CVE-2016-3068
Blake Burkhart discovered that Mercurial allows URLs for Git
subrepositories that could result in arbitrary code execution on
clone.
CVE-2016-3069
Blake Burkhart discovered that Mercurial allows arbitrary code
execution when converting Git repositories with specially
crafted names.
CVE-2016-3630
It was discovered that Mercurial does not properly perform bounds-
checking in its binary delta decoder, which may be exploitable for
remote code execution via clone, push or pull.
72 lines
2.2 KiB
Nix
72 lines
2.2 KiB
Nix
{ stdenv, fetchurl, python, makeWrapper, docutils, unzip, hg-git, dulwich
|
|
, guiSupport ? false, tk ? null, curses
|
|
, ApplicationServices, cf-private }:
|
|
|
|
let
|
|
version = "3.7.3";
|
|
name = "mercurial-${version}";
|
|
in
|
|
|
|
stdenv.mkDerivation {
|
|
inherit name;
|
|
|
|
src = fetchurl {
|
|
url = "http://mercurial.selenic.com/release/${name}.tar.gz";
|
|
sha256 = "0c2vkad9piqkggyk8y310rf619qgdfcwswnk3nv21mg2fhnw96f0";
|
|
};
|
|
|
|
inherit python; # pass it so that the same version can be used in hg2git
|
|
pythonPackages = [ curses ];
|
|
|
|
buildInputs = [ python makeWrapper docutils unzip ];
|
|
|
|
propagatedBuildInputs = stdenv.lib.optionals stdenv.isDarwin
|
|
[ ApplicationServices cf-private ];
|
|
|
|
makeFlags = "PREFIX=$(out)";
|
|
|
|
postInstall = (stdenv.lib.optionalString guiSupport
|
|
''
|
|
mkdir -p $out/etc/mercurial
|
|
cp contrib/hgk $out/bin
|
|
cat >> $out/etc/mercurial/hgrc << EOF
|
|
[extensions]
|
|
hgk=$out/lib/${python.libPrefix}/site-packages/hgext/hgk.py
|
|
EOF
|
|
# setting HG so that hgk can be run itself as well (not only hg view)
|
|
WRAP_TK=" --set TK_LIBRARY \"${tk}/lib/${tk.libPrefix}\"
|
|
--set HG \"$out/bin/hg\"
|
|
--prefix PATH : \"${tk}/bin\" "
|
|
'') +
|
|
''
|
|
for i in $(cd $out/bin && ls); do
|
|
wrapProgram $out/bin/$i \
|
|
--prefix PYTHONPATH : "$(toPythonPath "$out ${curses}"):$(toPythonPath "$out ${hg-git}"):$(toPythonPath "$out ${dulwich}")" \
|
|
$WRAP_TK
|
|
done
|
|
|
|
mkdir -p $out/etc/mercurial
|
|
cat >> $out/etc/mercurial/hgrc << EOF
|
|
[web]
|
|
cacerts = /etc/ssl/certs/ca-certificates.crt
|
|
EOF
|
|
|
|
# copy hgweb.cgi to allow use in apache
|
|
mkdir -p $out/share/cgi-bin
|
|
cp -v hgweb.cgi contrib/hgweb.wsgi $out/share/cgi-bin
|
|
chmod u+x $out/share/cgi-bin/hgweb.cgi
|
|
|
|
# install bash completion
|
|
install -D -v contrib/bash_completion $out/share/bash-completion/completions/mercurial
|
|
'';
|
|
|
|
meta = {
|
|
inherit version;
|
|
description = "A fast, lightweight SCM system for very large distributed projects";
|
|
homepage = "http://mercurial.selenic.com/";
|
|
downloadPage = "http://mercurial.selenic.com/release/";
|
|
license = stdenv.lib.licenses.gpl2;
|
|
maintainers = [ stdenv.lib.maintainers.eelco ];
|
|
};
|
|
}
|