From 7760d28920a920791645c4485f1345af45ee7787 Mon Sep 17 00:00:00 2001 From: Efraim Flashner Date: Sun, 11 Jul 2021 14:07:00 +0300 Subject: [PATCH] gnu: java-xz: Mark source as zipbomb. * gnu/packages/java-compression.scm (java-xz)[source]: Download source as zipbomb. [argments]: Remove custom 'chdir phase. --- gnu/packages/java-compression.scm | 8 +------- 1 file changed, 1 insertion(+), 7 deletions(-) diff --git a/gnu/packages/java-compression.scm b/gnu/packages/java-compression.scm index 5f653bcc94..19b11954c1 100644 --- a/gnu/packages/java-compression.scm +++ b/gnu/packages/java-compression.scm @@ -291,7 +291,7 @@ (define-public java-xz (name "java-xz") (version "1.6") (source (origin - (method url-fetch) + (method url-fetch/zipbomb) (uri (string-append "https://tukaani.org/xz/xz-java-" version ".zip")) (sha256 (base32 @@ -301,12 +301,6 @@ (define-public java-xz `(#:tests? #f; no tests #:phases (modify-phases %standard-phases - (add-after 'unpack 'chdir - (lambda _ - ;; Our build system enters the first directory in the archive, but - ;; the package is not contained in a subdirectory - (chdir "..") - #t)) (add-before 'install 'generate-pom (lambda _ (copy-file "maven/pom_template.xml" "pom.xml")