about summary refs log tree commit diff
path: root/pkgs/tools/networking
diff options
context:
space:
mode:
authorIngo Blechschmidt <iblech@speicherleck.de>2021-01-06 17:00:52 +0100
committerIngo Blechschmidt <iblech@web.de>2021-01-07 00:30:10 +0100
commit0f15ca239d19edbd84ae7638b8ecd7e222aae355 (patch)
tree7ece8bf72ae2b9bb6f9ff398d7b9cec43cce88d9 /pkgs/tools/networking
parent44c443a7a602e7752641aac21e4ad17061761290 (diff)
downloadnixlib-0f15ca239d19edbd84ae7638b8ecd7e222aae355.tar
nixlib-0f15ca239d19edbd84ae7638b8ecd7e222aae355.tar.gz
nixlib-0f15ca239d19edbd84ae7638b8ecd7e222aae355.tar.bz2
nixlib-0f15ca239d19edbd84ae7638b8ecd7e222aae355.tar.lz
nixlib-0f15ca239d19edbd84ae7638b8ecd7e222aae355.tar.xz
nixlib-0f15ca239d19edbd84ae7638b8ecd7e222aae355.tar.zst
nixlib-0f15ca239d19edbd84ae7638b8ecd7e222aae355.zip
dsniff: unbreak the build
We revert to using GCC 9 for compilation, in order to work around a GCC 10 bug
resulting in a segfault when compiling.

The alternative would be to restrict to optimization level -O1, but this
disables fortify.
Diffstat (limited to 'pkgs/tools/networking')
-rw-r--r--pkgs/tools/networking/dsniff/default.nix10
1 files changed, 7 insertions, 3 deletions
diff --git a/pkgs/tools/networking/dsniff/default.nix b/pkgs/tools/networking/dsniff/default.nix
index db9c608e931b..3a8eab862cb1 100644
--- a/pkgs/tools/networking/dsniff/default.nix
+++ b/pkgs/tools/networking/dsniff/default.nix
@@ -1,6 +1,10 @@
-{ stdenv, fetchFromGitLab, autoreconfHook, libpcap, db, glib, libnet, libnids, symlinkJoin, openssl
+{ gcc9Stdenv, lib, fetchFromGitLab, autoreconfHook, libpcap, db, glib, libnet, libnids, symlinkJoin, openssl
 , rpcsvc-proto, libtirpc, libnsl
 }:
+
+# We compile with GCC 9 since GCC 10 segfaults on the code
+# (see https://bugzilla.redhat.com/show_bug.cgi?id=1862809).
+
 let
   /*
   dsniff's build system unconditionnaly wants static libraries and does not
@@ -38,7 +42,7 @@ let
     inherit (openssl) name;
     paths = with openssl.override { static = true; }; [ out dev ];
   };
-in stdenv.mkDerivation rec {
+in gcc9Stdenv.mkDerivation rec {
   pname = "dsniff";
   version = "2.4b1";
   # upstream is so old that nearly every distribution packages the beta version.
@@ -71,7 +75,7 @@ in stdenv.mkDerivation rec {
     "--with-openssl=${ssl}"
   ];
 
-  meta = with stdenv.lib; {
+  meta = with lib; {
     description = "collection of tools for network auditing and penetration testing";
     longDescription = ''
       dsniff, filesnarf, mailsnarf, msgsnarf, urlsnarf, and webspy passively monitor a network for interesting data (passwords, e-mail, files, etc.). arpspoof, dnsspoof, and macof facilitate the interception of network traffic normally unavailable to an attacker (e.g, due to layer-2 switching). sshmitm and webmitm implement active monkey-in-the-middle attacks against redirected SSH and HTTPS sessions by exploiting weak bindings in ad-hoc PKI.