Missing Hardening Flags (freefem++)

[François Mazen <francois@mzf.fr>]

Dear Mentors,

I'm updating the freefem++ package to 4.9 release [1] and I get
hardening-no-bindnow lintian warnings on several binary outputs [2].

Of course the appropriate variable is set in debian/rules (export
DEB_BUILD_MAINT_OPTIONS = hardening=+all), see [3]. According to [4] it
means that some flags like CPPFLAGS/CXXFLAGS/LDFLAGS are overridden
somewhere in the configuration.

I can't find where these flags are overridden. Could you please help?

Thanks,
François


[1] https://salsa.debian.org/science-team/freefempp
[2] https://paste.debian.net/1203281
[3] 
https://salsa.debian.org/science-team/freefempp/-/blob/master/debian/rules
[4] https://wiki.debian.org/Hardening