%undefine __cmake_in_source_build
%global plugins_version 4.4

Summary:	Network traffic analyzer
Name:		wireshark
Version:	4.4.6
Release:	1
Epoch:		1
License:	BSD-1-Clause AND BSD-2-Clause AND BSD-3-Clause AND MIT AND GPL-2.0-or-later AND LGPL-2.0-or-later AND Zlib AND ISC AND (BSD-3-Clause OR GPL-2.0-only) AND (GPL-2.0-or-later AND Zlib)
Url:		https://www.wireshark.org/

Source0:	https://wireshark.org/download/src/%{name}-%{version}.tar.xz
Source2:	90-wireshark-usbmon.rules
Source3:	wireshark.sysusers

Patch2:         wireshark-0002-Customize-permission-denied-error.patch
Patch3:         wireshark-0003-fix-string-overrun-in-plugins-profinet.patch
Patch4:         wireshark-0004-Restore-Fedora-specific-groups.patch
Patch5:         wireshark-0005-Fix-paths-in-a-wireshark.desktop-file.patch
Patch6:         wireshark-0006-Move-tmp-to-var-tmp.patch
Patch7:         wireshark-0007-cmakelists.patch
Patch8:         wireshark-0008-pkgconfig.patch

Requires:	xdg-utils
Requires:	hicolor-icon-theme
BuildRequires:  brotli-devel
BuildRequires:  bzip2-devel
BuildRequires:  c-ares-devel
BuildRequires:  elfutils-devel
BuildRequires:  gcc-c++
BuildRequires:  glib2-devel
BuildRequires:  gnutls-devel
BuildRequires:  krb5-devel
BuildRequires:  libcap-devel
BuildRequires:  libgcrypt-devel
BuildRequires:  libmaxminddb-devel
BuildRequires:  libnl3-devel
BuildRequires:  libpcap-devel >= 0.9
BuildRequires:  libselinux-devel
BuildRequires:  libsmi-devel
BuildRequires:  libxml2-devel
BuildRequires:  lz4-devel
BuildRequires:  openssl-devel
BuildRequires:  desktop-file-utils
BuildRequires:  xdg-utils
BuildRequires:  bison
BuildRequires:  flex
BuildRequires:  pcre-devel
BuildRequires:  perl
BuildRequires:  perl(Pod::Html)
BuildRequires:  perl(Pod::Man)
BuildRequires:  perl(open)
Buildrequires:	libssh-devel
BuildRequires:  qt6-qttools-devel
BuildRequires:  qt6-linguist
BuildRequires:  qt6-qtbase-devel
BuildRequires:  qt6-qt5compat-devel
BuildRequires:  qt6-qtmultimedia-devel
BuildRequires:  qt6-qtsvg-devel
BuildRequires:  speexdsp-devel
BuildRequires:  zlib-devel
BuildRequires:  asciidoctor
Buildrequires:  cmake
BuildRequires:  systemd-devel
BuildRequires:  systemd
BuildRequires:  libnghttp2-devel
BuildRequires:  gettext
BuildRequires:  pulseaudio
Obsoletes:      wireshark-gtk < %{epoch}:%{version}-%{release}

%description
Wireshark allows you to examine protocol data stored in files or as it is
captured from wired or wireless (WiFi or Bluetooth) networks, USB devices,
and many other sources.  It supports dozens of protocol capture file formats
and understands more than a thousand protocols.

It has many powerful features including a rich display filter language
and the ability to reassemble multiple protocol packets in order to, for
example, view a complete TCP stream, save the contents of a file which was
transferred over HTTP or CIFS, or play back an RTP audio stream.

%package	cli
Summary:	Network traffic analyzer
Conflicts:      %{name} < 1:4.4.3-2
Requires(pre):  shadow-utils
Requires(post): systemd-udev

%description cli
This package contains command-line utilities, plugins, and documentation for
Wireshark.

%package        qt
Summary:        Network traffic analyzer - Qt GUI
Obsoletes:      %{name} < 1:4.4.3-2
Provides:       %{name} = %{epoch}:%{version}-%{release}
Requires:       %{name}-cli = %{epoch}:%{version}-%{release}
Requires:       hicolor-icon-theme

%description qt
This package contains qt gui components for Wireshark.

%package devel
Summary:	Development headers and libraries for wireshark
Requires:	%{name}-cli = %{epoch}:%{version}-%{release}

%description devel
The wireshark-devel package contains the header files, developer
documentation, and libraries required for development of wireshark scripts
and plugins.

%package_help

%prep
%autosetup -p1 -n %{name}-%{version}

%build
%cmake \
  -G "Unix Makefiles" \
  -DDISABLE_WERROR=ON \
  -DBUILD_wireshark=ON \
  -DENABLE_LUA=OFF \
  -DBUILD_randpktdump=OFF \
  -DBUILD_androiddump=ON \
  -DENABLE_SMI=ON \
  -DUSE_qt6=ON \
  -DENABLE_PLUGINS=ON \
  -DENABLE_NETLINK=ON \
  -DBUILD_dcerpcidl2wrs=OFF \
  -DBUILD_sdjournal=ON \
  %{nil}

%cmake_build

%install
%cmake_install
%cmake_install --component Development

mv %{buildroot}%{_datadir}/doc/%{name} ./doc_installed

#install devel files (inspired by debian/wireshark-dev.header-files)
install -d -m 0755  %{buildroot}%{_includedir}/wireshark
IDIR="%{buildroot}%{_includedir}/wireshark"
mkdir -p %{buildroot}%{_udevrulesdir}
install -m 644 %{S:2} %{buildroot}%{_udevrulesdir}
install -Dpm 644 %{S:3} %{buildroot}%{_sysusersdir}/%{name}.conf

%check
desktop-file-validate %{buildroot}%{_datadir}/applications/org.wireshark.Wireshark.desktop

%pre cli
%sysusers_create_compat %{SOURCE3}

%post cli
# skip triggering if udevd isn't even accessible, e.g. containers or
# rpm-ostree-based systems
if [ -S /run/udev/control ]; then
    /usr/bin/udevadm trigger --subsystem-match=usbmon
fi

%files cli
%license COPYING
%doc AUTHORS INSTALL README*
%doc doc_installed/*.html doc_installed/*.css
%{_bindir}/capinfos
%{_bindir}/captype
%{_bindir}/editcap
%{_bindir}/mergecap
%{_bindir}/randpkt
%{_bindir}/reordercap
%{_bindir}/sharkd
%{_bindir}/text2pcap
%{_bindir}/tshark
%{_bindir}/mmdbresolve
%attr(0750, root, wireshark) %caps(cap_net_raw,cap_net_admin=ep) %{_bindir}/dumpcap
%{_bindir}/rawshark
%{_udevrulesdir}/90-wireshark-usbmon.rules
%{_libdir}/lib*.so.*
%dir %{_libdir}/wireshark
%dir %{_libdir}/wireshark/extcap
%dir %{_libdir}/wireshark/plugins
%{_libdir}/wireshark/extcap/ciscodump
%{_libdir}/wireshark/extcap/udpdump
%{_libdir}/wireshark/extcap/wifidump
%{_libdir}/wireshark/extcap/sshdump
%{_libdir}/wireshark/extcap/sdjournal
%{_libdir}/wireshark/extcap/dpauxmon
%{_libdir}/wireshark/extcap/androiddump
#the version wireshark uses to store plugins is only x.y, not .z
%dir %{_libdir}/wireshark/plugins/%{plugins_version}
%dir %{_libdir}/wireshark/plugins/%{plugins_version}/epan
%dir %{_libdir}/wireshark/plugins/%{plugins_version}/wiretap
%dir %{_libdir}/wireshark/plugins/%{plugins_version}/codecs
%{_libdir}/wireshark/plugins/%{plugins_version}/epan/*.so
%{_libdir}/wireshark/plugins/%{plugins_version}/wiretap/*.so
%{_libdir}/wireshark/plugins/%{plugins_version}/codecs/*.so
%{_datadir}/wireshark
%{_sysusersdir}/%{name}.conf

%files qt
%{_bindir}/wireshark
%{_datadir}/applications/org.wireshark.Wireshark.desktop
%{_datadir}/metainfo/org.wireshark.Wireshark.metainfo.xml
%{_datadir}/mime/packages/org.wireshark.Wireshark.xml
%{_datadir}/icons/hicolor/*/*/*

%files devel
%{_includedir}/wireshark
%{_libdir}/lib*.so
%{_libdir}/pkgconfig/%{name}.pc
%{_libdir}/cmake/%{name}

%files help
%doc AUTHORS INSTALL README* doc/README.* ChangeLog
%{_mandir}/man?/*

%changelog
* Thu Apr 17 2025 Funda Wang <fundawang@yeah.net> - 1:4.4.6-1
- update to 4.4.6

* Tue Feb 25 2025 Funda Wang <fundawang@yeah.net> - 1:4.4.5-1
- update to 4.4.5

* Thu Feb 20 2025 Funda Wang <fundawang@yeah.net> - 1:4.4.4-1
- update to 4.4.4

* Fri Jan 10 2025 Funda Wang <fundawang@yeah.net> - 1:4.4.3-2
- split qt6 gui into separated package, so that wireshark-cli won't pull whole qt6

* Thu Jan 09 2025 Funda Wang <fundawang@yeah.net> - 1:4.4.3-1
- update to 4.4.3

* Fri Nov 22 2024 yaoxin <yao_xin001@hoperun.com> - 1:4.4.2-1
- Update to 4.4.2
  * wnpa-sec-2024-14 FiveCo RAP dissector infinite loop. Issue 20176. (CVE-2024-11595)
  * wnpa-sec-2024-15 ECMP dissector crash. Issue 20214. (CVE-2024-11596)
  * CIP I/O is not detected by "enip" filter anymore. Issue 19517.
  * Fuzz job issue: fuzz-2024-09-03-7550.pcap. Issue 20041.
  * OSS-Fuzz 71476: wireshark:fuzzshark_ip_proto-udp: Index-out-of-bounds in DOFObjectID_Create_Unmarshal. Issue 20065.
  * JA4_c hashes an empty field to e3b0c44298fc when it should be 000000000000. Issue 20066.
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.2.html

* Tue Nov 05 2024 Funda Wang <fundawang@yeah.net> - 1:4.2.8-3
- adopt to cmake macro change

* Mon Oct 28 2024 Funda Wang <fundawang@yeah.net> - 1:4.2.8-2
- adopt to cmake macro change

* Thu Oct 10 2024 zhangxianting <zhangxianting@uniontech.com> - 1:4.2.8-1
- Update to 4.2.8
  * CVE-2024-9781: AppleTalk and RELOAD Framing dissector crashes. (issue#20114).
- bugs fixed:
  * tools/html2text.py doesn't handle the <sup> tag. (issue#20020).
  * epan/proto.c:failed assertion "length >= 0" (dmp.body). (issue#20110).

* Fri Sep 13 2024 yaoxin <yao_xin001@hoperun.com> - 1:4.2.7-1
- Update to 4.2.7:
  * CVE-2024-8250: NTLMSSP dissector crash (boo#1229907).
  * CVE-2024-8645: SPRT dissector crash.

* Fri Aug 30 2024 wangkai <13474090681@163.com> - 1:4.2.5-2
- Fix CVE-2024-8250

* Wed Jul 03 2024 yaoxin <yao_xin001@hoperun.com> - 1:4.2.5-1
- Update to 4.2.5
- vulnerabilities fixed:
  * CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops
  * CVE-2024-4853: The editcap command line utility could crash
    when chopping bytes from the beginning of a packet
  * CVE-2024-4855: The editcap command line utility could crash
    when injecting secrets while writing multiple files
- bugs fixed:
  * Flow Graph scrolls in the wrong direction vertically when pressing Up/Down.
  * TCP Stream Window Scaling not working in version 2.6.1 and later.
  * TCP stream graphs (Window scaling) axis display is confusing.
  * LUA get_dissector does not give the correct dissector under 32-bit version.

* Wed May 15 2024 yaoxin <yao_xin001@hoperun.com> - 1:4.2.4-2
- Fix CVE-2024-4853,CVE-2024-4854 and CVE-2024-4855

* Wed Apr 24 2024 yaoxin <yao_xin001@hoperun.com> - 1:4.2.4-1
- Upgrade to 4.2.4

* Mon Mar 25 2024 yaoxin <yao_xin001@hoperun.com> - 1:3.6.14-8
- Fix CVE-2023-0666

* Thu Jan 04 2024 wangkai <13474090681@163.com> - 1:3.6.14-7
- Fix CVE-2024-0208,CVE-2024-0209

* Mon Oct 16 2023 zhengting <zhengting13@huawei.com> -1:3.6.14-6
- Fix libvirt build fail problem

* Tue Nov 21 2023 yaoxin <yao_xin001@hoperun.com> - 1:3.6.14-5
- Fix CVE-2023-6175

* Sat Oct 07 2023 wangkai <13474090681@163.com> - 1:3.6.14-4
- Fix CVE-2023-5371

* Wed Sep 06 2023 wangkai <13474090681@163.com> - 1:3.6.14-3
- Fix CVE-2023-3649,CVE-2023-2906,CVE-2023-4511,CVE-2023-4513

* Thu Jul 27 2023 liningjie <liningjie@xfusion.com> - 1:3.6.14-2
- Fix CVE-2023-3648

* Thu Jun 15 2023 wangkai <13474090681@163.com> - 1:3.6.14-1
- Update to 3.6.14 for fix CVE-2023-0667,CVE-2023-2952

* Tue May 30 2023 yaoxin <yao_xin001@hoperun.com> - 1:3.6.11-4
- Fix CVE-2023-0668,CVE-2023-2855,CVE-2023-2856,CVE-2023-2857,CVE-2023-2858 and CVE-2023-2879

* Mon Apr 24 2023 yaoxin <yao_xin001@hoperun.com> - 1:3.6.11-3
- Fix CVE-2023-1992,CVE-2023-1993 and CVE-2023-1994

* Mon Mar 27 2023 yaoxin <yaoxin30@h-partners.com> - 1:3.6.11-2
- Fix CVE-2023-1161

* Tue Feb 14 2023 liyuxiang<liyuxiang@ncti-gba.cn> - 1:3.6.11-1
- Update to 3.6.11

* Wed Nov 09 2022 liyuxiang<liyuxiang@ncti-gba.cn> - 1:3.6.3-3
- fix CVE-2022-3725

* Tue Sep 27 2022 liyuxiang<liyuxiang@ncti-gba.cn> - 1:3.6.3-2
- fix CVE-2022-3190

* Tue Apr 19 2022 wangkai <wangkai385@huawei.com> - 3.6.3-1
- Update to 3.6.3

* Fri Apr 1 2022 yaoxin <yaoxin30@huawei.com> - 2.6.2-21
- Fix CVE-2021-22191 CVE-2021-22207 CVE-2021-4181 CVE-2021-4185

* Tue Jul 27 2021 wangyue <wangyue92@huawei.com> - 2.6.2-20
- fix CVE-2019-12295

* Tue Jul 27 2021 lingsheng <lingsheng@huawei.com> - 2.6.2-19
- Move headers outside extern C to fix build fail

* Thu Feb 25 2021 wangxiao <wangxiao65@huawei.com> - 2.6.2-18
- Fix CVE-2019-13619 CVE-2019-19553 CVE-2020-9428 CVE-2020-9431

* Mon Feb 08 2021 wangyue <wangyue92@huawei.com> - 2.6.2-17
- fix CVE-2020-26575

* Thu Jan 14 2021 zhanghua <zhanghua40@huawei.com> - 2.6.2-16
- fix CVE-2019-16319

* Wed Dec 16 2020 zhanghua <zhanghua40@huawei.com> - 2.6.2-15
- fix CVE-2020-9430

* Mon Nov 07 2020 wangxiao <wangxiao65@huawei.com> - 2.6.2-14
- fix CVE-2020-28030
  malformed packet on wire could make GQUIC protocol dissector loop

* Mon Nov 02 2020 lingsheng <lingsheng@huawei.com> - 2.6.2-13
- Fix use-of-uninitialized-value in end_string

* Wed Oct 21 2020 wangxiao <wangxiao65@huawei.com> - 2.6.2-12
- Type:cves
- ID: CVE-2020-25862 CVE-2020-25863
- SUG:NA
- DESC: fix CVE-2020-25862 CVE-2020-25863

* Wed Sep 15 2020 wangxiao <wangxiao65@huawei.com> - 2.6.2-11
- Type:cves
- ID: CVE-2018-16056
- SUG:restart
- DESC: fix CVE-2018-16056

* Thu Sep 10 2020 baizhonggui <baizhonggui@huawei.com> - 2.6.2-10
- Modify source0

* Wed Aug 05 2020 yaokai <yaokai13@huawei.com> - 2.6.2-9
- Type:cves
- ID: CVE-2020-15466
- SUG:restart
- DESC: fix CVE-2020-15466

* Tue Jul 21 2020 wangyue <wangyue92@huawei.com> - 2.6.2-8
- Type:cves
- ID: CVE-2020-13164
- SUG:restart
- DESC: fix CVE-2020-13164

* Fri May 15 2020 huanghaitao <huanghaitao8@huawei.com> - 2.6.2-7
- Type:cves
- ID: CVE-2020-11647
- SUG:restart
- DESC: fix CVE-2020-11647

* Sun Feb 2 2020 lingyang <lingyang2@huawei.com> - 2.6.2-6
- Type:cves
- ID: CVE-2019-5719
- SUG:restart
- DESC: fix CVE-2019-5719

* Sun Feb 2 2020 gulining<gulining1@huawei.com> - 2.6.2-5
- Type:cves
- ID: CVE-2019-5716 CVE-2019-5717
- SUG:restart
- DESC: fix CVE-2019-5716 CVE-2019-5717

* Wed Dec 25 2019 gulining <gulining1@huawei.com> - 2.6.2-4
- Type:cves
- ID: CVE-2019-10894 CVE-2019-10896 CVE-2019-10899 CVE-2019-10901 CVE-2019-10903 CVE-2019-10895
- SUG:restart
- DESC: fix CVE-2019-10894 CVE-2019-10896 CVE-2019-10899 CVE-2019-10901 CVE-2019-10903 CVE-2019-10895

* Mon Nov 25 2019 gulining<gulining1@huawei.com> - 2.6.2-3
- revise obsoletes

* Wed Nov 13 2019 gulining<gulining1@huawei.com> - 2.6.2-2
- Package init