-
Notifications
You must be signed in to change notification settings - Fork 31
/
flake-example.nix
42 lines (35 loc) · 1.25 KB
/
flake-example.nix
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
{
inputs = {
flake-utils.url = "github:numtide/flake-utils";
ropfuscator.url = "github:ropfuscator/ropfuscator";
};
outputs = { self, flake-utils, ropfuscator }:
flake-utils.lib.eachDefaultSystem (system:
let
pkgs = ropfuscator.pkgs.${system};
# wrappers to obfuscate using ROPfuscator's default configs
ropfuscateAllAddresses = ropfuscator.ropfuscateAllAddresses.${system};
ropfuscateFull = ropfuscator.ropfuscateFull.${system};
ropfuscateHalfAddresses = ropfuscator.ropfuscateHalfAddresses.${system};
ropfuscateRopOnly = ropfuscator.ropfuscateRopOnly.${system};
inherit (ropfuscator.packages.${system})
# this stdenv uses unmodified nix packages
# ropfuscator acts like a "vanilla" clang
vanillaRopStdenv
# this stdenv uses libc to extract gadgets from
libcRopStdenv
# this stdenv uses librop to extract gadgets from
libropRopStdenv;
obfuscatedHello = ropfuscateFull {
deriv = pkgs.hello;
stdenv = libropRopStdenv;
};
in
{
packages = {
inherit obfuscatedHello;
hello = pkgs.hello;
default = obfuscatedHello;
};
});
}