cereal: 1.3.0 -> 1.3.2

{ lib, stdenv, fetchFromGitHub, fetchpatch, cmake }:

stdenv.mkDerivation rec {

  pname = "cereal";

  version = "1.3.0";

{ lib

, stdenv

, fetchFromGitHub

, fetchpatch

, cmake

}:

  nativeBuildInputs = [ cmake ];

stdenv.mkDerivation (finalAttrs: {

  pname = "cereal";

  version = "1.3.2";

  src = fetchFromGitHub {

    owner = "USCiLab";

    repo = "cereal";

    rev = "v${version}";

    sha256 = "0hc8wh9dwpc1w1zf5lfss4vg5hmgpblqxbrpp1rggicpx9ar831p";

    rev = "v${finalAttrs.version}";

    hash = "sha256-HapnwM5oSNKuqoKm5x7+i2zt0sny8z8CePwobz1ITQs=";

  };

  patches = [

    # https://nvd.nist.gov/vuln/detail/CVE-2020-11105

    # serialized std::shared_ptr variables cannot always be expected to

    # serialize back into their original values. This can have any number of

    # consequences, depending on the context within which this manifests.

    (fetchpatch {

      name = "CVE-2020-11105.patch";

      url = "https://github.com/USCiLab/cereal/commit/f27c12d491955c94583512603bf32c4568f20929.patch";

      sha256 = "CIkbJ7bAN0MXBhTXQdoQKXUmY60/wQvsdn99FaWt31w=";

    })

  ];

  nativeBuildInputs = [ cmake ];

  cmakeFlags = [ "-DJUST_INSTALL_CEREAL=yes" ];

  meta = with lib; {

    description = "A header-only C++11 serialization library";

  meta = {

    homepage = "https://uscilab.github.io/cereal/";

    platforms   = platforms.all;

    license     = licenses.mit;

    description = "A header-only C++11 serialization library";

    changelog = "https://github.com/USCiLab/cereal/releases/tag/v${finalAttrs.version}";

    license = lib.licenses.bsd3;

    maintainers = with lib.maintainers; [ AndersonTorres ];

    platforms = lib.platforms.all;

  };

}

})