# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
# Contributor: Sergey Lukin <sergej.lukin@gmail.com>
pkgname=curl
pkgver=7.52.1
pkgrel=1
pkgdesc="An URL retrival utility and library"
url="http://curl.haxx.se"
arch="all"
license="MIT"
depends="ca-certificates"
depends_dev="zlib-dev openssl-dev libssh2-dev"
makedepends="groff $depends_dev perl"
subpackages="$pkgname-doc $pkgname-dev"
source="http://curl.haxx.se/download/curl-$pkgver.tar.bz2
	CVE-2017-2629.patch
	CVE-2017-7407.patch
	CVE-2017-7468.patch
	"

_builddir="$srcdir/$pkgname-$pkgver"

# secfixes:
#   7.52.1-r1:
#     - CVE-2017-7468
#     - CVE-2017-7407
#     - CVE-2017-2629
#   7.52.1-r0:
#     - CVE-2016-9594
#     - CVE-2016-9586
#     - CVE-2016-9952
#     - CVE-2016-9953
#   7.49.1-r4:
#     - CVE-2016-8615
#     - CVE-2016-8616
#     - CVE-2016-8617
#     - CVE-2016-8618
#     - CVE-2016-8619
#     - CVE-2016-8620
#     - CVE-2016-8621
#     - CVE-2016-8622
#     - CVE-2016-8623
#     - CVE-2016-8624
#   7.49.1-r3:
#     - CVE-2016-7167
#   7.49.1-r2:
#     - CVE-2016-7141
#   7.49.1-r1:
#     - CVE-2016-5419
#     - CVE-2016-5420
#     - CVE-2016-5421

prepare() {
	local i
	cd "$_builddir"
	for i in $source; do
		case $i in
		*.patch) msg $i; patch -p1 -i "$srcdir"/$i || return 1;;
		esac
	done
}

build() {
	cd "$_builddir"
	./configure \
		--build=$CBUILD \
		--host=$CHOST \
		--prefix=/usr \
		--mandir=/usr/share/man \
		--without-libidn \
		--enable-ipv6 \
		--disable-ldap \
		|| return 1
	make || return 1
}

package() {
	cd "$_builddir"
	make DESTDIR="$pkgdir" install || return 1
	rm "$pkgdir"/usr/lib/*.la || return 1
}

md5sums="dd014df06ff1d12e173de86873f9f77a  curl-7.52.1.tar.bz2
d2809e105e897b106428909a2e08bd2b  CVE-2017-2629.patch
50cc3a2d1577fc0876aa6baf04a679ff  CVE-2017-7407.patch
0e80ef6bc62f62a0d0fd23a03dc54089  CVE-2017-7468.patch"
sha256sums="d16185a767cb2c1ba3d5b9096ec54e5ec198b213f45864a38b3bda4bbf87389b  curl-7.52.1.tar.bz2
33b55a4e4e88c8589e50fa377cad599df80a6841386f8e872d8eff8c8a970585  CVE-2017-2629.patch
a10711694c64ce77b9528d3b5bfefbf0e4083d1046d7c84952f5728bf431ecc0  CVE-2017-7407.patch
9438f2ee4d9542e492bc31ca1e667c7c4dc534e2503f5d8115b0283e75376f40  CVE-2017-7468.patch"
sha512sums="cf36563c77d096f2c6084354ed6d45ccca7c557828ceab21204e4e8be0d4f0d287839c8cfac906174b86d51a1ee816c2769fc78ef88f039c9645bd2c27982a75  curl-7.52.1.tar.bz2
94b3419b4366f1c404d2f2634485e05d45c9e2ad3bed4a7eba53c17253373ce9b848fc6123b55561f8dac471ab0b2a77f12e22dba8bee9a11d5c531f22fb4b18  CVE-2017-2629.patch
f156c791a8439a4314555ca06c5ee3a23fae77d87d32a19df3c57ea605f9284b66f4a5dcaa5d2c598e93e69bb16c0e51a930c5b39fc8034b517d7b428cdaaf8d  CVE-2017-7407.patch
9e620bac1b92d452992df1388c3b93228bcd6db490bc9f0c93480468a9189c85f20b31f27ec1c79e63cd5ee127c40c416542f4b02ed21af490d2938dcd9215b5  CVE-2017-7468.patch"