internal/rosa/package: migrate many libraries

This also adds more string helpers.

Signed-off-by: Ophestra <cat@gensokyo.uk>

2 files changed, 40 insertions, 0 deletions

diff --git a/internal/rosa/package/libseccomp/fix-export-oob-read.patch b/internal/rosa/package/libseccomp/fix-export-oob-read.patch
new file mode 100644
index 00000000..c399dcc5
--- /dev/null
+++ b/internal/rosa/package/libseccomp/fix-export-oob-read.patch
@@ -0,0 +1,13 @@
+diff --git a/src/api.c b/src/api.c
+index adccef3..65a277a 100644
+--- a/src/api.c
++++ b/src/api.c
+@@ -786,7 +786,7 @@ API int seccomp_export_bpf_mem(const scmp_filter_ctx ctx, void *buf,
+                if (BPF_PGM_SIZE(program) > *len)
+                        rc = _rc_filter(-ERANGE);
+                else
+-                       memcpy(buf, program->blks, *len);
++                       memcpy(buf, program->blks, BPF_PGM_SIZE(program));
+        }
+        *len = BPF_PGM_SIZE(program);
+ 
diff --git a/internal/rosa/package/libseccomp/package.az b/internal/rosa/package/libseccomp/package.az
new file mode 100644
index 00000000..f9dffb43
--- /dev/null
+++ b/internal/rosa/package/libseccomp/package.az
@@ -0,0 +1,27 @@
+package libseccomp {
+	description = "an interface to the Linux Kernel's syscall filtering mechanism";
+	website = "https://github.com/seccomp/libseccomp";
+	anitya = 13823;
+
+	version* = "2.6.0";
+	source = remoteGitHubRelease {
+		suffix = "seccomp/libseccomp";
+		tag = "v"+version;
+		name = "libseccomp-"+version+".tar.gz";
+		checksum = "mMu-iR71guPjFbb31u-YexBaanKE_nYPjPux-vuBiPfS_0kbwJdfCGlkofaUm-EY";
+		compress = gzip;
+	};
+	patches = [ "fix-export-oob-read.patch" ];
+
+	early = "\nln -s ../system/bin/bash /bin/\n";
+
+	exec = make {};
+
+	inputs = [
+		bash,
+		diffutils,
+		gperf,
+
+		kernel-headers,
+	];
+}