# Contributor: Sergei Lukin <sergej.lukin@gmail.com>
# Contributor: Łukasz Jendrysik <scadu@yandex.com>
# Contributor: Jeremy Thomerson <jeremy@thomersonfamily.com>
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=wireshark
# check if these are stable first.
pkgver=4.0.7
pkgrel=0
pkgdesc="Network protocol analyzer"
url="https://www.wireshark.org/"
arch="all !armhf" # blocked by qt5-qtdeclarative
license="GPL-2.0-or-later"
pkggroups="wireshark"
makedepends="
	asciidoctor
	bison
	c-ares-dev
	cmake
	doxygen
	flex
	glib
	glib-dev
	gnutls-dev
	krb5-dev
	libcap-dev
	libcap-utils
	libgcrypt-dev
	libmaxminddb-dev
	libnl3-dev
	libpcap-dev
	libssh-dev
	libxml2-dev
	lua5.2-dev
	lz4-dev
	nghttp2-dev
	pcre2-dev
	perl-dev
	portaudio-dev
	qt6-qt5compat-dev
	qt6-qtbase-dev
	qt6-qtmultimedia-dev
	qt6-qtsvg-dev
	qt6-qttools-dev
	samurai
	zlib-dev
	zstd-dev
	"
checkdepends="py3-pytest py3-pytest-xdist"
subpackages="$pkgname-dev $pkgname-doc $pkgname-common tshark"
options="setcap"
source="https://www.wireshark.org/download/src/all-versions/wireshark-$pkgver.tar.xz"

# secfixes:
#   4.0.4-r0:
#     - CVE-2023-1161
#   3.6.8-r0:
#     - CVE-2022-3190
#   3.4.13-r0:
#     - CVE-2022-0581
#     - CVE-2022-0582
#     - CVE-2022-0583
#     - CVE-2022-0585
#     - CVE-2022-0586
#   3.4.11-r0:
#     - CVE-2021-39920
#     - CVE-2021-39921
#     - CVE-2021-39922
#     - CVE-2021-39924
#     - CVE-2021-39925
#     - CVE-2021-39926
#     - CVE-2021-39928
#     - CVE-2021-39929
#     - CVE-2021-4181
#     - CVE-2021-4182
#     - CVE-2021-4184
#     - CVE-2021-4185
#     - CVE-2021-4186
#   3.4.7-r0:
#     - CVE-2021-22235
#   3.4.6-r0:
#     - CVE-2021-22222
#   3.4.5-r0:
#     - CVE-2021-22207
#   3.4.4-r0:
#     - CVE-2021-22191
#   3.4.3-r0:
#     - CVE-2021-22173
#     - CVE-2021-22174
#   3.4.2-r0:
#     - CVE-2020-26422
#   3.4.1-r0:
#     - CVE-2020-26418
#     - CVE-2020-26419
#     - CVE-2020-26420
#     - CVE-2020-26421
#   3.4.0-r0:
#     - CVE-2020-26575
#     - CVE-2020-28030
#   3.2.7-r0:
#     - CVE-2020-25863
#     - CVE-2020-25862
#     - CVE-2020-25866
#   3.2.6-r0:
#     - CVE-2020-17498
#   3.2.5-r0:
#     - CVE-2020-15466
#   3.2.4-r0:
#     - CVE-2020-13164
#   3.2.3-r0:
#     - CVE-2020-11647
#   3.2.2-r0:
#     - CVE-2020-9428
#     - CVE-2020-9430
#     - CVE-2020-9431
#   3.0.8-r0:
#     - CVE-2020-7045
#   3.0.7-r0:
#     - CVE-2019-19553
#   3.0.4-r0:
#     - CVE-2019-16319
#   3.0.3-r0:
#     - CVE-2019-13619
#   3.0.2-r0:
#     - CVE-2019-12295
#   3.0.1-r0:
#     - CVE-2019-10897
#     - CVE-2019-10898
#     - CVE-2019-10900
#     - CVE-2019-10902
#   2.6.8-r0:
#     - CVE-2019-10894
#     - CVE-2019-10895
#     - CVE-2019-10896
#     - CVE-2019-10899
#     - CVE-2019-10901
#     - CVE-2019-10903
#   2.6.7-r0:
#     - CVE-2019-9208
#     - CVE-2019-9209
#     - CVE-2019-9214
#   2.6.6-r0:
#     - CVE-2019-5717
#     - CVE-2019-5718
#     - CVE-2019-5719
#     - CVE-2019-5721
#   2.6.5-r0:
#     - CVE-2018-19622
#     - CVE-2018-19623
#     - CVE-2018-19624
#     - CVE-2018-19625
#     - CVE-2018-19626
#     - CVE-2018-19627
#     - CVE-2018-19628
#   2.6.4-r0:
#     - CVE-2018-12086
#     - CVE-2018-18225
#     - CVE-2018-18226
#     - CVE-2018-18227
#   2.6.3-r0:
#     - CVE-2018-16056
#     - CVE-2018-16057
#     - CVE-2018-16058
#   2.6.2-r0:
#     - CVE-2018-14339
#     - CVE-2018-14340
#     - CVE-2018-14341
#     - CVE-2018-14342
#     - CVE-2018-14343
#     - CVE-2018-14344
#     - CVE-2018-14367
#     - CVE-2018-14368
#     - CVE-2018-14369
#     - CVE-2018-14370
#   2.4.7-r0:
#     - CVE-2018-11356
#     - CVE-2018-11357
#     - CVE-2018-11358
#     - CVE-2018-11359
#     - CVE-2018-11360
#     - CVE-2018-11362
#   2.4.6-r0:
#     - CVE-2018-9256
#     - CVE-2018-9257
#     - CVE-2018-9258
#     - CVE-2018-9260
#     - CVE-2018-9261
#     - CVE-2018-9262
#     - CVE-2018-9263
#     - CVE-2018-9264
#     - CVE-2018-9267
#     - CVE-2018-10194
#   2.4.5-r0:
#     - CVE-2018-7320
#     - CVE-2018-7321
#     - CVE-2018-7322
#     - CVE-2018-7323
#     - CVE-2018-7324
#     - CVE-2018-7325
#     - CVE-2018-7326
#     - CVE-2018-7327
#     - CVE-2018-7328
#     - CVE-2018-7329
#     - CVE-2018-7330
#     - CVE-2018-7331
#     - CVE-2018-7332
#     - CVE-2018-7333
#     - CVE-2018-7334
#     - CVE-2018-7335
#     - CVE-2018-7336
#     - CVE-2018-7337
#     - CVE-2018-7417
#     - CVE-2018-7418
#     - CVE-2018-7419
#     - CVE-2018-7420
#   2.4.4-r0:
#     - CVE-2018-5334
#     - CVE-2018-5335
#     - CVE-2018-5336
#   2.4.3-r0:
#     - CVE-2017-17083
#     - CVE-2017-17084
#     - CVE-2017-17085
#   2.2.10-r0:
#     - CVE-2017-15191
#     - CVE-2017-15192
#     - CVE-2017-15193
#   2.2.9-r0:
#     - CVE-2017-13765
#     - CVE-2017-13766
#     - CVE-2017-13767
#   2.2.8-r0:
#     - CVE-2017-11406
#     - CVE-2017-11407
#     - CVE-2017-11408
#   2.2.7-r0:
#     - CVE-2017-9343
#     - CVE-2017-9344
#     - CVE-2017-9345
#     - CVE-2017-9346
#     - CVE-2017-9347
#     - CVE-2017-9348
#     - CVE-2017-9349
#     - CVE-2017-9350
#     - CVE-2017-9351
#     - CVE-2017-9352
#     - CVE-2017-9353
#     - CVE-2017-9354
#   2.2.6-r0:
#     - CVE-2017-7700
#     - CVE-2017-7701
#     - CVE-2017-7702
#     - CVE-2017-7703
#     - CVE-2017-7704
#     - CVE-2017-7705
#   2.2.5-r0:
#     - CVE-2017-6467
#     - CVE-2017-6468
#     - CVE-2017-6469
#     - CVE-2017-6470
#     - CVE-2017-6471
#     - CVE-2017-6472
#     - CVE-2017-6473
#     - CVE-2017-6474
#   2.2.4-r1:
#     - CVE-2017-6014
#   2.0.5-r0:
#     - CVE-2016-6505
#     - CVE-2016-6506
#     - CVE-2016-6508
#     - CVE-2016-6509
#     - CVE-2016-6510
#     - CVE-2016-6511
#     - CVE-2016-6512
#     - CVE-2016-6513

build() {
	cmake -B build -G Ninja \
		-DCMAKE_BUILD_TYPE=RelWithDebInfo \
		-DCMAKE_INSTALL_PREFIX=/usr \
		-DCMAKE_INSTALL_LIBDIR=lib \
		-DENABLE_GNUTLS=ON \
		-DENABLE_LTO=ON \
		-DENABLE_LUA=ON \
		-DENABLE_DEBUG=OFF \
		-DUSE_qt6=ON

	cmake --build build
	cmake --build build --target test-programs
}

check() {
	local _exclude='suite_extcaps'
	case "$CARCH" in
		armv7|x86) _exclude="$_exclude|suite_wslua";;
		s390x) _exclude="$_exclude|suite_decryption";;
	esac
	ctest --test-dir build --output-on-failure -E "($_exclude)" -j $(nproc)
}

package() {
	DESTDIR="$pkgdir" cmake --install build

	# Allow users in the wireshark group to capture packages
	# See: https://wiki.wireshark.org/CaptureSetup/CapturePrivileges#Limiting_capture_permission_to_only_one_group
	chmod 0750 "$pkgdir"/usr/bin/dumpcap
	chown root:wireshark "$pkgdir"/usr/bin/dumpcap
	setcap cap_net_raw,cap_net_admin+eip "$pkgdir"/usr/bin/dumpcap

	# Move cmake files to the right location
	mkdir -p "$pkgdir"/usr/lib/cmake/wireshark
	mv "$pkgdir"/usr/lib/wireshark/cmake/*.cmake \
		"$pkgdir"/usr/lib/cmake/wireshark/
	rmdir "$pkgdir"/usr/lib/wireshark/cmake
}

common() {
	pkgdesc="Network protoccol analyzer (Common files)"
	install="$subpkgname.pre-install $subpkgname.pre-upgrade $subpkgname.post-install"

	amove usr/share/wireshark
	amove usr/lib*/*

	# Move all bins except wireshark
	local i
	mkdir -p "$subpkgdir"/usr/bin
	for i in "$pkgdir"/usr/bin/*; do
		case "$i" in
		*/tshark|*/wireshark)
			continue
			;;
		*)
			mv "$i" "$subpkgdir"/usr/bin/
			;;
		esac
	done
}

tshark() {
	pkgdesc="Network protocol analyzer (Console version)"

	amove usr/bin/tshark
}

sha512sums="
98f609405f20a3714e7c5e4f806cae5cc842daaf0219bd92d3130d2930758cce244edca4529db59300b5ca1e1e98d1aa632bc5c85c92f26aa2e0c124e691a5ab  wireshark-4.0.7.tar.xz
"