Re: Hardening code during polyorb packaging
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Le 16/05/2012 20:44, Nicolas Boulenguez a écrit :
> On Wed, May 16, 2012 at 02:30:49PM +0200, Xavier Grave wrote:
>
>> A first look at the dpkg-buildflags output :
>> CFLAGS=-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat
>> - -Werror=format-security
>> isn't really probing for Ada coding.
>
>> Does anyone already played/experimented with this kind of options with
>> Ada code ? I suspect part of it doesn't really make sense for Ada...
>
> (control)
> Build-Depends: dh-ada-library
>
> (rules)
> include /usr/share/dpkg/buildflags.mk
> # (or default.mk that sets many other useful variables)
> include /usr/share/ada/debian-packaging.mk
>
> Please take a quick look at both sources, then
>
> gnatmake $(BUILDER_OPTIONS) -gnatc -$(ADAFLAGS) -gnatl $(LDFLAGS)
> (-gnatg to add gnatmake options)
>
> You may also use a project file containing
>
> package Compiler is
> for Default_Switches ("Ada") use External_As_List ("ADAFLAGS", " ");
> for Default_Switches ("C") use External_As_List ("CFLAGS", " ");
> end Compiler;
> package Linker is
> for Default_Switches ("Ada") use External_As_List ("LDFLAGS", " ");
> end Linker;
>
> but note that setting these options in the project will make gprbuild
> ignore -gnatc -gnatl on the command line.
Thanks, Nicolas ! This will help me to solve my problem and be a good
occasion to start play dh-ada-library :) (I'm sorry not having time
before for testing dh-ada-library)
xavier
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/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=Tgrw
-----END PGP SIGNATURE-----
Reply to: