mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-11-28 08:31:59 +00:00
3628595eba
Fixes CVE-2017-12635, CVE-2017-12636. https://blog.couchdb.org/2017/11/14/apache-couchdb-cve-2017-12635-and-cve-2017-12636/
55 lines
1.5 KiB
Nix
55 lines
1.5 KiB
Nix
{ stdenv, fetchurl, erlang, icu, openssl, spidermonkey
|
|
, coreutils, bash, makeWrapper }:
|
|
|
|
stdenv.mkDerivation rec {
|
|
name = "couchdb-${version}";
|
|
version = "2.1.1";
|
|
|
|
src = fetchurl {
|
|
url = "mirror://apache/couchdb/source/${version}/apache-${name}.tar.gz";
|
|
sha256 = "1k3v9v05417087b6fcj5yv03wl6i61xqrrhp0prl9b3ir2mmbwnm";
|
|
};
|
|
|
|
nativeBuildInputs = [ makeWrapper ];
|
|
buildInputs = [ erlang icu openssl spidermonkey ];
|
|
|
|
patches = [ ./jsapi.patch ];
|
|
postPatch = ''
|
|
substituteInPlace src/couch/rebar.config.script --replace '-DHAVE_CURL -I/usr/local/include' "-DHAVE_CURL -I/usr/local/include $NIX_CFLAGS_COMPILE"
|
|
|
|
patch bin/rebar <<EOF
|
|
1c1
|
|
< #!/usr/bin/env escript
|
|
---
|
|
> #!${coreutils}/bin/env escript
|
|
EOF
|
|
|
|
'';
|
|
|
|
# Configure a username. The build system would use "couchdb" as
|
|
# default if none is provided. Note that it is unclear where this
|
|
# username is actually used in the build, as any choice seems to be
|
|
# working.
|
|
configurePhase = ''
|
|
./configure -u nobody
|
|
'';
|
|
|
|
buildPhase = ''
|
|
make release
|
|
'';
|
|
|
|
installPhase = ''
|
|
mkdir -p $out
|
|
cp -r rel/couchdb/* $out
|
|
wrapProgram $out/bin/couchdb --suffix PATH : ${bash}/bin
|
|
'';
|
|
|
|
meta = with stdenv.lib; {
|
|
description = "A database that uses JSON for documents, JavaScript for MapReduce queries, and regular HTTP for an API";
|
|
homepage = http://couchdb.apache.org;
|
|
license = licenses.asl20;
|
|
platforms = platforms.all;
|
|
maintainers = with maintainers; [ garbas ];
|
|
};
|
|
}
|