# Contributor: Sheila Aman <sheila@vulpine.house>
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=python3
# python3-extra's pkgver needs to be synchronized with this.
pkgver=3.14.8
_basever="${pkgver%.*}"
pkgrel=0
pkgdesc="High-level scripting language"
url="https://www.python.org/"
arch="all"
license="PSF-2.0"
# pyc0 comes last because the files are named without a unique substring
subpackages="
	$pkgname-dbg
	$pkgname-dev
	$pkgname-doc
	$pkgname-idle::noarch
	$pkgname-tests::noarch
	$pkgname-pyc:_default_pyc
	$pkgname-pycache-pyc2
	$pkgname-pycache-pyc1
	$pkgname-pycache-pyc0
	pyc:_pyc_meta:noarch
	"
# explicit expat>=2.8 dependency for hash flooding protection
# https://github.com/python/cpython/issues/149018
depends="libssl3>=3.3.0 libexpat>=2.8.0"
makedepends="
	!gettext-dev
	bluez-headers
	bzip2-dev
	expat-dev>=2.8.0
	libffi-dev
	linux-headers
	mpdecimal-dev
	musl-libintl
	ncurses-dev
	openssl-dev
	readline-dev
	sqlite-dev
	tcl-dev
	xz-dev
	zlib-dev
	"
source="https://www.python.org/ftp/python/$pkgver/Python-$pkgver.tar.xz
	idle.desktop
	externally-managed
	musl-find_library.patch
	"
options="net" # Required for tests
builddir="$srcdir/Python-$pkgver"

# secfixes:
#   3.14.8-r0:
#     - CVE-2026-15310
#     - CVE-2026-15806
#     - CVE-2026-17084
#     - CVE-2026-19445
#     - CVE-2026-19553
#     - CVE-2026-19672
#     - CVE-2026-82049
#   3.14.7-r0:
#     - CVE-2025-15366
#     - CVE-2026-0864
#     - CVE-2026-3276
#     - CVE-2026-4360
#     - CVE-2026-6879
#     - CVE-2026-7210
#     - CVE-2026-7774
#     - CVE-2026-8328
#     - CVE-2026-9669
#     - CVE-2026-11940
#     - CVE-2026-11972
#     - CVE-2026-15308
#   3.14.5-r0:
#     - CVE-2026-2297
#     - CVE-2026-3644
#     - CVE-2026-4224
#   3.12.11-r0:
#     - CVE-2024-12718
#     - CVE-2025-4138
#     - CVE-2025-4330
#     - CVE-2025-4517
#   3.12.10-r1:
#     - CVE-2025-4516
#   3.12.9-r0:
#     - CVE-2025-0938
#   3.12.8-r1:
#     - CVE-2024-12254
#   3.12.8-r0:
#     - CVE-2024-9287
#   3.12.6-r0:
#     - CVE-2015-2104
#     - CVE-2023-27043
#     - CVE-2024-4032
#     - CVE-2024-6232
#     - CVE-2024-7592
#   3.12.5-r1:
#     - CVE-2024-8088
#   3.12.5-r0:
#     - CVE-2024-6923
#   3.11.5-r0:
#     - CVE-2023-40217
#   3.11.1-r0:
#     - CVE-2022-45061
#   3.10.5-r0:
#     - CVE-2015-20107
#   3.9.5-r0:
#     - CVE-2021-29921
#   3.9.4-r0:
#     - CVE-2021-3426
#   3.8.8-r0:
#     - CVE-2021-23336
#   3.8.7-r2:
#     - CVE-2021-3177
#   3.8.5-r0:
#     - CVE-2019-20907
#   3.8.4-r0:
#     - CVE-2020-14422
#   3.8.2-r0:
#     - CVE-2020-8315
#     - CVE-2020-8492
#   3.7.5-r0:
#     - CVE-2019-16056
#     - CVE-2019-16935
#   3.6.8-r1:
#     - CVE-2019-5010

# was briefly present, and is in 3.16
provides="pythonispython3=$pkgver-r$pkgrel"

prepare() {
	default_prepare

	# force system libs
	rm -r Modules/expat
}

build() {
	# set thread stack size to 2MB so we don't segfault before we hit
	# sys.getrecursionlimit()
	# note: raised from 1 as we ran into some stack limit on x86_64 too
	# sometimes, but not recursion
	local stacksize=0x200000

	# we want -O2 here for more speed for such a large interpreter.
	export CFLAGS_NODIST="$CFLAGS -O2 -DTHREAD_STACK_SIZE=$stacksize"
	export CXXFLAGS_NODIST="$CXXFLAGS -O2"
	export LDFLAGS_NODIST="$LDFLAGS -Wl,-z,stack-size=$stacksize"

	case "$CARCH" in
	ppc64le)
		# FIXME: on ppc64le, the stack-clash-protection from gcc seems to segfault
		# python.. sometimes. not sure if python or gcc bug (probably former)
		# for an easy reproduction, run the testsuite of community/py3-lmdb
		export CFLAGS_NODIST="${CFLAGS_NODIST/-fstack-clash-protection}"
		export CXXFLAGS_NODIST="${CXXFLAGS_NODIST/-fstack-clash-protection}"
		# because test_time fails in docker on ppc64le (see check()),
		# we need to exclude that from the tests that run for PGO
		# purposes during the build, as well
		export PROFILE_TASK='-m test --pgo --timeout=$(TESTTIMEOUT) --exclude test_time'
		;;
	esac


	# we set them via NODIST to not propagate them and duplicate them to modules
	unset LDFLAGS CFLAGS CXXFLAGS CPPFLAGS

	./configure \
		--build=$CBUILD \
		--host=$CHOST \
		--prefix=/usr \
		--enable-ipv6 \
		--enable-loadable-sqlite-extensions \
		--enable-optimizations \
		--enable-shared \
		--with-lto \
		--with-computed-gotos \
		--with-system-expat \
		--with-system-libmpdec \
		--without-ensurepip

	make
}

check() {
	# test that we reach recursionlimit before we segfault
	cat > test-stacksize.py <<-EOF
	import threading
	import sys

	def fun(i):
	  try:
	    fun(i+1)
	  except:
	    sys.exit(0)

	t = threading.Thread(target=fun, args=[1])
	t.start()
EOF
	LD_LIBRARY_PATH=$PWD ./python test-stacksize.py

	local fail
	local ignore

	# musl related
	fail="test__locale"					# various musl locale deficiencies
	fail="$fail test_locale"
	fail="$fail test_re"
	fail="$fail test_c_locale_coercion"
	fail="$fail test_datetime"				# hangs if 'tzdata' installed
	fail="$fail test_os"					# fpathconf, ttyname errno values
	ignore="test.test_strptime.StrptimeTests.test_date_locale2"

	# FIXME: failures needing investigation
	fail="$fail test_ctypes"				# fail on aarch64 (ctypes.test.test_win32.Structures)

	# kernel related
	fail="$fail test_fcntl"					# wants DNOTIFY, we don't have it

	# test_clock_settime returns Function not implemented instead of the
	# expected permission error in docker (CI). Disable for now.
	case "$CARCH" in
		ppc64le) fail="$fail test_time";;
	esac

	make quicktest TESTOPTS="-j${JOBS:-$(nproc)} --exclude $fail --ignore $ignore"
}

package() {
	make -j1 DESTDIR="$pkgdir" EXTRA_CFLAGS="$CFLAGS" install maninstall
	install -Dm644 LICENSE "$pkgdir"/usr/share/licenses/$pkgname/LICENSE

	install -Dm644 "$srcdir"/externally-managed \
		"$pkgdir"/usr/lib/python$_basever/EXTERNALLY-MANAGED

	ln -s python3 "$pkgdir"/usr/bin/python
	ln -s python3-config "$pkgdir"/usr/bin/python-config

	local size
	for size in 16 32 48 256; do
		local dir="$pkgdir"/usr/share/icons/hicolor/"$size"x"$size"/apps
		install -dm755 "$dir"
		ln -s ../../../../../lib/python3.14/idlelib/Icons/idle_$size.png "$dir"/idle.png
	done
	install -Dm0644 "$srcdir"/idle.desktop "$pkgdir"/usr/share/applications/idle.desktop
}

dev() {
	default_dev

	# pyconfig.h is needed runtime so we move it back
	mkdir -p "$pkgdir"/usr/include/python$_basever
	mv "$subpkgdir"/usr/include/python$_basever/pyconfig.h \
		"$pkgdir"/usr/include/python$_basever/
}

idle() {
	pkgdesc="IDE for Python3 using Tkinter"
	depends="$depends python3-tkinter~$pkgver"

	amove usr/bin/idle* usr/lib/python$_basever/idlelib usr/share/icons usr/share/applications
}

tests() {
	pkgdesc="The test modules from the main python package"
	provides="python3-tkinter-tests=$pkgver-r$pkgrel"

	amove usr/lib/python$_basever/test
}

_pyc_meta() {
	pkgdesc="Meta package for pulling in all -pyc packages"
	depends=""
	mkdir -p "$subpkgdir"
}

# python3-pyc, to install pyc by default
_default_pyc() {
	pkgdesc="$pkgdesc (install .pyc cache files)"
	install_if="$pkgname=$pkgver-r$pkgrel"
	provides="python3-tkinter-pyc=$pkgver-r$pkgrel"
	depends="
		$pkgname-pycache-pyc0=$pkgver-r$pkgrel
		pyc
		"

	mkdir -p "$subpkgdir"
}

pyc0() {
	pkgdesc="$pkgdesc (.pyc pycache files)"
	depends=""

	cd "$pkgdir"
	amove $(find usr/lib/python3* -name "*.pyc")
}

pyc1() {
	pkgdesc="$pkgdesc (.opt-1.pyc pycache files)"
	depends=""

	cd "$pkgdir"
	amove $(find usr/lib/python3* -name "*.opt-1.pyc")
}

pyc2() {
	pkgdesc="$pkgdesc (.opt-2.pyc pycache files)"
	depends=""

	cd "$pkgdir"
	amove $(find usr/lib/python3* -name "*.opt-2.pyc")
}

sha512sums="
f9e6809b0c45d90fcc174b8051e15058a3037981c9136c598d110a118a22cbbb8263fbd677e07b2b9d93e1aa83cd9cb835b61b6af898fd301d1080a29c2156fe  Python-3.14.8.tar.xz
f1ecb004871dc7e0c794eebe94ca1084b211924ecc97edc57f32a7c8df5d572e9ca6cdc45d6fc08009e480eb9a2c9f3d359d46989dc72c03679eb94ad97a2916  idle.desktop
46dd8230ee2ab66e9c4157c10b2bd9c414fd7f30be0bee73e21a9eea88f63fff362d47828e0fc77ddc59df097b414b21505f8b5f98bc866381115c58ae3f4862  externally-managed
ab8eaa2858d5109049b1f9f553198d40e0ef8d78211ad6455f7b491af525bffb16738fed60fc84e960c4889568d25753b9e4a1494834fea48291b33f07000ec2  musl-find_library.patch
"