[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#734639: Hardening support for libxp



Package: libxp
Severity: important

If libxp should not be removed in jessie, we could enable hardened
build flags, patch attached.

Cheers,
        Moritz
diff -aur libxp-1.0.2.orig/debian/rules libxp-1.0.2/debian/rules
--- libxp-1.0.2.orig/debian/rules	2014-01-08 19:40:49.000000000 +0100
+++ libxp-1.0.2/debian/rules	2014-01-08 19:42:41.387565709 +0100
@@ -12,12 +12,8 @@
 
 include debian/xsfbs/xsfbs.mk
 
-CFLAGS = -Wall -g
-ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
-	CFLAGS += -O0
-else
-	CFLAGS += -O2
-endif
+export DEB_CFLAGS_MAINT_APPEND  = -Wall
+
 ifeq (,$(findstring nostrip,$(DEB_BUILD_OPTIONS)))
 	INSTALL_PROGRAM += -s
 endif
@@ -43,7 +39,7 @@
 	../configure --prefix=/usr --mandir=\$${prefix}/share/man \
 	             --infodir=\$${prefix}/share/info $(confflags) \
 		     --libdir=\$${prefix}/lib/$(DEB_HOST_MULTIARCH) \
-	             CFLAGS="$(CFLAGS)"
+	             $(shell dpkg-buildflags --export=configure)
 	$(MAKE) -C build
 
 	touch build-stamp
Nur in libxp-1.0.2/debian: rules~.

Reply to: