mupdf: fix CVE-2021-3407

[dotlambda]

Motivation for this change

fixes #116896

Things done

• Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
• Built on platform(s)
  • NixOS
  • macOS
  • other Linux distributions
• Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
• Tested compilation of all pkgs that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
• Tested execution of all binary files (usually in ./result/bin/)
• Determined the impact on package closure size (by running nix path-info -S before and after)
• Ensured that relevant documentation is up to date
• Fits CONTRIBUTING.md.

[r-rmcgibbo]

Result of nixpkgs-review pr 117040 at 206e3f4 run on x86_64-linux 1

10 packages built successfully:

• cups-filters
• llpp
• mcomix3
• mupdf
• python38Packages.pymupdf
• python39Packages.pymupdf
• splix
• system-config-printer
• termpdfpy
• zathura

5 suggestions:

• error: no-flags-spaces

  makeFlags cannot contain spaces, please use makeFlagsArray in Bash.

  Near pkgs/applications/misc/mupdf/default.nix:55:3:

     |
  55 |   makeFlags = [ "prefix=$(out) USE_SYSTEM_LIBS=yes" ];
     |   ^
  

• warning: missing-patch-comment

  Please add a comment on the line above, explaining the purpose of this patch.
  Near pkgs/applications/misc/mupdf/default.nix:26:5:

     |
  26 |     (fetchpatch {
     |     ^
  

• warning: missing-patch-comment

  Please add a comment on the line above, explaining the purpose of this patch.
  Near pkgs/applications/misc/mupdf/default.nix:31:5:

     |
  31 |     (fetchpatch {
     |     ^
  

• warning: missing-patch-comment

  Please add a comment on the line above, explaining the purpose of this patch.
  Near pkgs/applications/misc/mupdf/default.nix:36:5:

     |
  36 |     (fetchpatch {
     |     ^
  

• warning: missing-patch-comment

  Please add a comment on the line above, explaining the purpose of this patch.
  Near pkgs/applications/misc/mupdf/default.nix:41:5:

     |
  41 |     (fetchpatch {
     |     ^
  

---

Result of nixpkgs-review pr 117040 at 206e3f4 run on aarch64-linux 1

10 packages built successfully:

• cups-filters
• llpp
• mcomix3
• mupdf
• python38Packages.pymupdf
• python39Packages.pymupdf
• splix
• system-config-printer
• termpdfpy
• zathura

5 suggestions:

• error: no-flags-spaces

  makeFlags cannot contain spaces, please use makeFlagsArray in Bash.

  Near pkgs/applications/misc/mupdf/default.nix:55:3:

     |
  55 |   makeFlags = [ "prefix=$(out) USE_SYSTEM_LIBS=yes" ];
     |   ^
  

• warning: missing-patch-comment

  Please add a comment on the line above, explaining the purpose of this patch.
  Near pkgs/applications/misc/mupdf/default.nix:26:5:

     |
  26 |     (fetchpatch {
     |     ^
  

• warning: missing-patch-comment

  Please add a comment on the line above, explaining the purpose of this patch.
  Near pkgs/applications/misc/mupdf/default.nix:31:5:

     |
  31 |     (fetchpatch {
     |     ^
  

• warning: missing-patch-comment

  Please add a comment on the line above, explaining the purpose of this patch.
  Near pkgs/applications/misc/mupdf/default.nix:36:5:

     |
  36 |     (fetchpatch {
     |     ^
  

• warning: missing-patch-comment

  Please add a comment on the line above, explaining the purpose of this patch.
  Near pkgs/applications/misc/mupdf/default.nix:41:5:

     |
  41 |     (fetchpatch {
     |     ^
  

[risicle]

Looks right to me, nixpkgs-review happy for me, linux x86_64, macos 10.14

[dotlambda]

backport: #117199