Browse Source

graphviz_2_0: hide inside monotoneViz

The old Graphviz version is vulnerable, but monotone-viz will never feed
it bad input.
nixos-19.03
Michael Raskin 5 years ago
parent
commit
c731738ecc
  1. 10
      pkgs/applications/version-management/monotone-viz/default.nix
  2. 0
      pkgs/applications/version-management/monotone-viz/graphviz-2.0.nix
  3. 6
      pkgs/top-level/all-packages.nix

10
pkgs/applications/version-management/monotone-viz/default.nix

@ -1,4 +1,12 @@
{stdenv, fetchurl, ocaml, lablgtk, libgnomecanvas, camlp4, glib, pkgconfig, graphviz_2_0, makeWrapper}:
{stdenv, fetchurl, ocaml, lablgtk, libgnomecanvas, camlp4, glib, pkgconfig, makeWrapper
, libtool, libpng, yacc, expat, fontconfig, gd, pango, libjpeg, libwebp, xlibsWrapper, libXaw
}:
# We need an old version of Graphviz for format compatibility reasons.
# This version is vulnerable, but monotone-viz will never feed it bad input.
let graphviz_2_0 = import ./graphviz-2.0.nix {
inherit stdenv fetchurl pkgconfig xlibsWrapper libpng libjpeg expat libXaw
yacc libtool fontconfig pango gd libwebp;
}; in
stdenv.mkDerivation rec {
version = "1.0.2";
name = "monotone-viz-${version}";

0
pkgs/tools/graphics/graphviz/2.0.nix → pkgs/applications/version-management/monotone-viz/graphviz-2.0.nix

6
pkgs/top-level/all-packages.nix

@ -2013,12 +2013,6 @@ with pkgs;
libdevil = libdevil-nox;
};
/* Readded by Michael Raskin. There are programs in the wild
* that do want 2.0 but not 2.22. Please give a day's notice for
* objections before removal. The feature is integer coordinates
*/
graphviz_2_0 = callPackage ../tools/graphics/graphviz/2.0.nix { };
/* Readded by Michael Raskin. There are programs in the wild
* that do want 2.32 but not 2.0 or 2.36. Please give a day's notice for
* objections before removal. The feature is libgraph.

Loading…
Cancel
Save