# Maintainer: Łukasz Jendrysik <scadu@yandex.com>
# Contributor: Kiyoshi Aman <kiyoshi.aman@gmail.com>

pkgname=python3
# the python2-tkinter's pkgver needs to be synchronized with this.
pkgver=3.6.8
_basever="${pkgver%.*}"
pkgrel=0
pkgdesc="A high-level scripting language"
url="http://www.python.org"
arch="all"
license="custom"
provides="py3-pip"
subpackages="$pkgname-dev $pkgname-doc $pkgname-tests::noarch
	$pkgname-tkinter:tkinter $pkgname-wininst"
depends=""
makedepends="expat-dev libressl-dev zlib-dev ncurses-dev bzip2-dev xz-dev
	sqlite-dev libffi-dev tcl-dev linux-headers gdbm-dev readline-dev
	tk tk-dev"
source="http://www.python.org/ftp/python/$pkgver/Python-$pkgver.tar.xz
	musl-find_library.patch
	fix-xattrs-glibc.patch
	CVE-2019-9636.patch
	"
builddir="$srcdir/Python-$pkgver"

# secfixes:
#   3.6.8-r0:
#   - CVE-2018-14647
#   - CVE-2018-20406
#   - CVE-2019-9636
#   3.6.5-r0:
#   - CVE-2018-1060
#   - CVE-2018-1061

prepare() {
	default_prepare || return 1

	cd "$builddir"
	# force system libs
	rm -r Modules/expat \
		Modules/zlib \
		Modules/_ctypes/darwin* \
		Modules/_ctypes/libffi* \
		|| return 1
}

build() {
	cd "$builddir"

	./configure \
		--prefix=/usr \
		--disable-rpath \
		--enable-ipv6 \
		--enable-loadable-sqlite-extensions \
		--enable-shared \
		--enable-optimize \
		--enable-lto \
		--with-computed-gotos \
		--with-dbmliborder=gdbm:ndbm \
		--with-system-expat \
		--with-system-ffi \
		--with-threads \
		|| return 1

	make EXTRA_CFLAGS="$CFLAGS" || return 1
}

package() {
	cd "$builddir"
	make -j1 DESTDIR="$pkgdir" EXTRA_CFLAGS="$CFLAGS" install maninstall \
		|| return 1
	install -Dm644 LICENSE "$pkgdir"/usr/share/licenses/$pkgname/LICENSE

}

dev() {
	default_dev || return 1

	# pyconfig.h is needed runtime so we move it back
	mkdir -p "$pkgdir"/usr/include/python${_basever}m
	mv "$subpkgdir"/usr/include/python${_basever}m/pyconfig.h \
		"$pkgdir"/usr/include/python${_basever}m/
}

tests() {
	pkgdesc="The test modules from the main python package"

	cd "$pkgdir"/usr/lib/python$_basever
	local i; for i in */test */tests; do
		mkdir -p "$subpkgdir"/usr/lib/python$_basever/"$i"
		mv "$i"/* "$subpkgdir"/usr/lib/python$_basever/"$i"
		rm -rf "$i"
	done
	mv "$pkgdir"/usr/lib/python$_basever/test \
		"$subpkgdir"/usr/lib/python$_basever/
}

tkinter() {
	pkgdesc="A graphical user interface for the Python"
	local libdir="usr/lib/python$_basever/lib-dynload"

	mkdir -p "$subpkgdir"/$libdir
	mv "$pkgdir"/$libdir/_tkinter.*.so "$subpkgdir"/$libdir/
}

wininst() {
	pkgdesc="Python wininst files"
	mkdir -p "$subpkgdir"/usr/lib/python$_basever/distutils/command
	mv "$pkgdir"/usr/lib/python$_basever/distutils/command/*.exe \
		"$subpkgdir"/usr/lib/python$_basever/distutils/command
}

sha512sums="b17867e451ebe662f50df83ed112d3656c089e7d750651ea640052b01b713b58e66aac9e082f71fd16f5b5510bc9b797f5ccd30f5399581e9aa406197f02938a  Python-3.6.8.tar.xz
ab8eaa2858d5109049b1f9f553198d40e0ef8d78211ad6455f7b491af525bffb16738fed60fc84e960c4889568d25753b9e4a1494834fea48291b33f07000ec2  musl-find_library.patch
37b6ee5d0d5de43799316aa111423ba5a666c17dc7f81b04c330f59c1d1565540eac4c585abe2199bbed52ebe7426001edb1c53bd0a17486a2a8e052d0f494ad  fix-xattrs-glibc.patch
bf2ec0bdba63b714f99aa9783a31ab935b234cabe4dc482769462a55bd572c74e03f192fbc5e8a7e2b9a887a5eef7dc0c3819fb464b656f73b500d1b65b591ad  CVE-2019-9636.patch"