# Contributor: k0r10n <k0r10n.dev@gmail.com>
# Contributor: Jose-Luis Rivas <ghostbar@riseup.net>
# Maintainer: Carlo Landmeter <clandmeter@gmail.com>
pkgname=libzip
pkgver=1.2.0
pkgrel=2
pkgdesc="A C library for reading, creating, and modifying zip archives"
url="http://www.nih.at/libzip/index.html"
arch="all"
license="BSD"
depends=
depends_dev="zlib-dev"
makedepends="$depends_dev perl"
subpackages="$pkgname-dev $pkgname-doc $pkgname-tools"
source="http://www.nih.at/libzip/$pkgname-$pkgver.tar.gz
	CVE-2017-14107.patch
	CVE-2017-12858.patch
	"
builddir="$srcdir/$pkgname-$pkgver"

# secfixes:
#   1.2.0-r2:
#     - CVE-2017-14107
#     - CVE-2017-12858

build() {
	cd "$builddir"
	./configure \
		--build=$CBUILD \
		--host=$CHOST \
		--prefix=/usr \
		--sysconfdir=/etc \
		--mandir=/usr/share/man \
		--localstatedir=/var \
		|| return 1
	make || return 1
}

package() {
	cd "$builddir"
	make DESTDIR="$pkgdir" -j1 install install-man || return 1
	mv "$pkgdir"/usr/lib/libzip/include/* "$pkgdir"/usr/include || return 1
	rm -fr "$pkgdir"/usr/lib/libzip
}

tools() {
	pkgdesc="$pkgname cmp and merge tools"
	install -d "$subpkgdir"/usr
	mv "$pkgdir"/usr/bin "$subpkgdir"/usr || return 1
}

sha512sums="b71642a80f8e2573c9082d513018bfd2d1d155663ac83fdf7ec969a08d5230fcbc76f2cf89c26ff1d1288e9f407ba9fa234604d813ed3bab816ca1670f7a53f3  libzip-1.2.0.tar.gz
ca7123edd1016e5f63922676a826a699cc392ddc634a0efb97d2c66fa8e689ec1cda4482473284d508571b16b03d28f4bae6b44c377b9b69e6e6142ce8dda1be  CVE-2017-14107.patch
f79af2fc90c35aae5586496ae06552762b7bbcfcb358df656f2cba21e3bb1ce1c63781cad3fc56f1e438099fbcb1b4692d14203d434d8f7150d78819e21c1127  CVE-2017-12858.patch"