Ihar Hrachyshka
567e8dfd8e
This commit was created by a combination of scripts and tools: - an ast-grep script to prefix things in meta with `lib.`, - a modified nixf-diagnose / nixf combination to remove unused `with lib;`, and - regular nixfmt. Co-authored-by: Wolfgang Walther <walther@technowledgy.de>
40 lines
1021 B
Nix
40 lines
1021 B
Nix
{
|
|
fetchurl,
|
|
lib,
|
|
stdenv,
|
|
flex,
|
|
}:
|
|
|
|
stdenv.mkDerivation rec {
|
|
pname = "splint";
|
|
version = "3.1.2";
|
|
|
|
src = fetchurl {
|
|
url = "https://www.splint.org/downloads/${pname}-${version}.src.tgz";
|
|
sha256 = "02pv8kscsrkrzip9r08pfs9xs98q74c52mlxzbii6cv6vx1vd3f7";
|
|
};
|
|
|
|
patches = [ ./tmpdir.patch ] ++ lib.optional stdenv.hostPlatform.isDarwin ./darwin.patch;
|
|
|
|
buildInputs = [ flex ];
|
|
|
|
doCheck = true;
|
|
|
|
meta = {
|
|
homepage = "http://www.splint.org/";
|
|
description = "Annotation-assisted lightweight static analyzer for C";
|
|
mainProgram = "splint";
|
|
|
|
longDescription = ''
|
|
Splint is a tool for statically checking C programs for security
|
|
vulnerabilities and coding mistakes. With minimal effort, Splint
|
|
can be used as a better lint. If additional effort is invested
|
|
adding annotations to programs, Splint can perform stronger
|
|
checking than can be done by any standard lint.
|
|
'';
|
|
|
|
license = lib.licenses.gpl2Plus;
|
|
platforms = lib.platforms.unix;
|
|
};
|
|
}
|