1 files changed, 33 insertions, 0 deletions
diff --git a/infra/libkookie/nixpkgs/pkgs/tools/misc/mcrypt/default.nix b/infra/libkookie/nixpkgs/pkgs/tools/misc/mcrypt/default.nix
new file mode 100644
index 000000000000..afbe811e7f2f
--- /dev/null
+++ b/infra/libkookie/nixpkgs/pkgs/tools/misc/mcrypt/default.nix
@@ -0,0 +1,33 @@
+{ stdenv, fetchurl, libmcrypt, libmhash }:
+
+stdenv.mkDerivation rec {
+  version = "2.6.8";
+  pname = "mcrypt";
+
+  src = fetchurl {
+    url = "mirror://sourceforge/mcrypt/MCrypt/${version}/${pname}-${version}.tar.gz";
+    sha256 = "5145aa844e54cca89ddab6fb7dd9e5952811d8d787c4f4bf27eb261e6c182098";
+  };
+
+  patches = [
+    ./format-string_CVE-2012-4426.patch
+    ./overflow_CVE-2012-4409.patch
+    ./segv.patch
+    ./sprintf_CVE-2012-4527.patch
+  ];
+
+  buildInputs = [ libmcrypt libmhash ];
+
+  meta = {
+    description = "Replacement for old UNIX crypt(1)";
+    longDescription = ''
+      mcrypt, and the accompanying libmcrypt, are intended to be replacements
+      for the old Unix crypt, except that they are under the GPL and support an
+      ever-wider range of algorithms and modes.
+    '';
+    homepage = "http://mcrypt.sourceforge.net";
+    license = stdenv.lib.licenses.gpl2;
+    platforms = stdenv.lib.platforms.all;
+    maintainers = [ stdenv.lib.maintainers.qknight ];
+  };
+}