From 504116975ff079dc7a27a93ee743a85d3bbf073d Mon Sep 17 00:00:00 2001
From: Steve Purcell <steve@sanityinc.com>
Date: Sat, 11 Nov 2023 11:23:56 +0000
Subject: ruby-modules/gem-config: relax hardening to avoid google-protobuf
 build failure

---
 pkgs/development/ruby-modules/gem-config/default.nix | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'pkgs/development/ruby-modules')

diff --git a/pkgs/development/ruby-modules/gem-config/default.nix b/pkgs/development/ruby-modules/gem-config/default.nix
index ff9e3b1968c..cd814e4b414 100644
--- a/pkgs/development/ruby-modules/gem-config/default.nix
+++ b/pkgs/development/ruby-modules/gem-config/default.nix
@@ -334,6 +334,13 @@ in
     '';
   };
 
+  google-protobuf = attrs:
+    lib.optionalAttrs (lib.versionAtLeast attrs.version "3.25.0") {
+    # Fails on 3.25.0 with:
+    #   convert.c:312:32: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]
+    hardeningDisable = [ "format" ];
+  };
+
   grpc = attrs: {
     nativeBuildInputs = [ pkg-config ]
       ++ lib.optional stdenv.isDarwin cctools
-- 
cgit 1.4.1