Commit c22d65b9 authored by Thomas Gerbet's avatar Thomas Gerbet
Browse files

quickjs: 2024-01-13 -> 2025-04-26 

Fixes CVE-2025-46687.

https://bellard.org/quickjs/Changelog
parent fd3e8568

pkgs/by-name/qu/quickjs/package.nix

+3 −9
Original line number Diff line number Diff line
@@ -8,11 +8,11 @@ 


stdenv.mkDerivation (finalAttrs: {

  pname = "quickjs";

  version = "2024-01-13";

  version = "2025-04-26";



  src = fetchurl {

    url = "https://bellard.org/quickjs/quickjs-${finalAttrs.version}.tar.xz";

    hash = "sha256-PEv4+JW/pUvrSGyNEhgRJ3Hs/FrDvhA2hR70FWghLgM=";

    hash = "sha256-LyAHTCUWbvb3gfOBxQ1XtQLLhdRw1jmrzOu+95VMg78=";

  };



  outputs = [
@@ -38,6 +38,7 @@ stdenv.mkDerivation (finalAttrs: { 
  '';



  postBuild = ''

    make doc/version.texi

    pushd doc

    makeinfo *texi

    popd
@@ -61,7 +62,6 @@ stdenv.mkDerivation (finalAttrs: { 
    ''

      set +o pipefail

      qjs     --help 2>&1 | grep "QuickJS version"

      qjscalc --help 2>&1 | grep "QuickJS version"

      set -o pipefail

    ''
@@ -93,10 +93,6 @@ stdenv.mkDerivation (finalAttrs: { 
      ES2023 specification including modules, asynchronous generators, proxies

      and BigInt.



      It optionally supports mathematical extensions such as big decimal

      floating point numbers (BigDecimal), big binary floating point numbers

      (BigFloat) and operator overloading.



      Main Features:



      - Small and easily embeddable: just a few C files, no external
@@ -112,8 +108,6 @@ stdenv.mkDerivation (finalAttrs: { 
      - Can compile Javascript sources to executables with no external dependency.

      - Garbage collection using reference counting (to reduce memory usage and

        have deterministic behavior) with cycle removal.

      - Mathematical extensions: BigDecimal, BigFloat, operator overloading,

        bigint mode, math mode.

      - Command line interpreter with contextual colorization implemented in

        Javascript.

      - Small built-in standard library with C library wrappers.