Gerhard Schwanzer
a6e06b6c68
Backport upstream commit edbb085e, which sanitizes values substituted into storescp execution hooks to prevent remote command injection. Assisted-by: pi coding agent / Mika (OpenAI gpt-5.6-sol)
93 lines
2.9 KiB
Nix
93 lines
2.9 KiB
Nix
{
|
|
lib,
|
|
stdenv,
|
|
fetchFromGitHub,
|
|
fetchpatch,
|
|
fetchurl,
|
|
zlib,
|
|
libtiff,
|
|
libxml2,
|
|
openssl,
|
|
libiconv,
|
|
libpng,
|
|
cmake,
|
|
}:
|
|
|
|
stdenv.mkDerivation (finalAttrs: {
|
|
pname = "dcmtk";
|
|
version = "3.7.0";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "DCMTK";
|
|
repo = "dcmtk";
|
|
tag = "DCMTK-${finalAttrs.version}";
|
|
hash = "sha256-JUF3IX0LOtpeAJPuTbAJo79sCuPuhh7KNIuQJfcFN/A=";
|
|
};
|
|
|
|
patches = [
|
|
# Remove when updating past 3.7.0.
|
|
(fetchpatch {
|
|
name = "CVE-2026-5663.patch";
|
|
url = "https://github.com/DCMTK/dcmtk/commit/edbb085e45788dccaf0e64d71534cfca925784b8.patch";
|
|
hash = "sha256-aSK/G5zI1Zyz0aonxnbWP/W5Ra6xCBYGxgPhM+05LXs=";
|
|
})
|
|
# The following patches are taken from the Debian package
|
|
# See https://salsa.debian.org/med-team/dcmtk
|
|
(fetchurl {
|
|
url = "https://salsa.debian.org/med-team/dcmtk/-/raw/debian/3.6.9-4/debian/patches/01_dcmtk_3.6.0-1.patch";
|
|
hash = "sha256-kDEZvPqcF8+PYID24srMoPSBPltmnGiJ67LHsLVcPYM=";
|
|
})
|
|
(fetchurl {
|
|
url = "https://salsa.debian.org/med-team/dcmtk/-/raw/debian/3.6.9-4/debian/patches/07_dont_export_all_executables.patch";
|
|
hash = "sha256-5slFod+S7Yuj0u2CfTUw+MWZYuqQs4hgoGmh3KAUo+c=";
|
|
})
|
|
(fetchurl {
|
|
url = "https://salsa.debian.org/med-team/dcmtk/-/raw/debian/3.6.9-4/debian/patches/remove_version.patch";
|
|
hash = "sha256-jcV2xQzKdNiBgcaFtaxdJpJCCSVOqGIsi/A4iqVM8U8=";
|
|
})
|
|
];
|
|
|
|
nativeBuildInputs = [ cmake ];
|
|
buildInputs = [
|
|
libpng
|
|
zlib
|
|
libtiff
|
|
libxml2
|
|
openssl
|
|
libiconv
|
|
];
|
|
|
|
cmakeFlags = [
|
|
(lib.cmakeFeature "CMAKE_CXX_STANDARD" "17")
|
|
(lib.cmakeBool "CMAKE_SKIP_RPATH" true)
|
|
"-DCMAKE_VERBOSE_MAKEFILE=ON"
|
|
(lib.cmakeBool "DCMTK_ENABLE_PRIVATE_TAGS" true)
|
|
(lib.cmakeBool "DCMTK_ENABLE_STL" true)
|
|
(lib.cmakeBool "DCMTK_WITH_ICONV" true)
|
|
(lib.cmakeBool "DCMTK_WITH_ICU" true)
|
|
(lib.cmakeBool "DCMTK_WITH_OPENSSL" true)
|
|
(lib.cmakeBool "DCMTK_WITH_TIFF" true)
|
|
(lib.cmakeBool "DCMTK_WITH_XML" true)
|
|
(lib.cmakeBool "DCMTK_WITH_ZLIB" true)
|
|
(lib.cmakeBool "USE_COMPILER_HIDDEN_VISIBILITY" true)
|
|
(lib.cmakeBool "BUILD_TESTING" false)
|
|
];
|
|
|
|
doCheck = true;
|
|
|
|
meta = {
|
|
description = "Collection of libraries and applications implementing large parts of the DICOM standard";
|
|
longDescription = ''
|
|
DCMTK is a collection of libraries and applications implementing large parts of the DICOM standard.
|
|
It includes software for examining, constructing and converting DICOM image files, handling offline media,
|
|
sending and receiving images over a network connection, as well as demonstrative image storage and worklist servers.
|
|
DCMTK is is written in a mixture of ANSI C and C++.
|
|
It comes in complete source code and is made available as "open source" software.
|
|
'';
|
|
homepage = "https://dicom.offis.de/dcmtk";
|
|
license = lib.licenses.bsd3;
|
|
maintainers = with lib.maintainers; [ iimog ];
|
|
platforms = with lib.platforms; linux ++ darwin;
|
|
};
|
|
})
|