pkgs/by-name/wa/wasm3/package.nix

   1 {
   2   lib,
   3   stdenv,
   4   cmake,
   5   fetchFromGitHub,
   6 }:
   7
   8 stdenv.mkDerivation rec {
   9   pname = "wasm3";
  10   version = "0.5.0";
  11
  12   src = fetchFromGitHub {
  13     owner = "wasm3";
  14     repo = "wasm3";
  15     rev = "v${version}";
  16     sha256 = "07zzmk776j8ydyxhrnnjiscbhhmz182a62r6aix6kfk5kq2cwia2";
  17   };
  18
  19   nativeBuildInputs = [ cmake ];
  20
  21   cmakeFlags = [
  22     "-DBUILD_WASI=simple"
  23   ];
  24
  25   installPhase = ''
  26     runHook preInstall
  27     install -Dm755 wasm3 -t $out/bin
  28     runHook postInstall
  29   '';
  30
  31   meta = with lib; {
  32     homepage = "https://github.com/wasm3/wasm3";
  33     description = "Fastest WebAssembly interpreter, and the most universal runtime";
  34     platforms = platforms.all;
  35     maintainers = with maintainers; [ malbarbo ];
  36     license = licenses.mit;
  37     knownVulnerabilities = [
  38       # wasm3 expects all wasm code to be pre-validated, any users
  39       # should be aware that running unvalidated wasm will potentially
  40       # lead to RCE until upstream have added a builtin validator
  41       "CVE-2022-39974"
  42       "CVE-2022-34529"
  43       "CVE-2022-28990"
  44       "CVE-2022-28966"
  45       "CVE-2021-45947"
  46       "CVE-2021-45946"
  47       "CVE-2021-45929"
  48       "CVE-2021-38592"
  49     ];
  50   };
  51 }