[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#760100: marked as done (pixman: Simplify handling of dpkg-buildflags)

Your message dated Sat, 12 Sep 2015 11:19:09 +0000
with message-id <E1Zaipp-0007FN-Vk@franck.debian.org>
and subject line Bug#760100: fixed in pixman 0.33.2-1
has caused the Debian Bug report #760100,
regarding pixman: Simplify handling of dpkg-buildflags
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
760100: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=760100
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Source: pixman
Version: 0.32.6-3
Severity: wishlist
Tags: patch
X-Debbugs-Cc: Simon Ruderich <simon@ruderich.org>

Hi,

please consider applying the attached patchset, that simplifies the
handling of dpkg-buildflags, and makes the hardening flags more
future-proof.

Cheers,
--
intrigeri


>From 173bc48d419d88982f1ce8efe389aad51d114f8f Mon Sep 17 00:00:00 2001
From: intrigeri <intrigeri@debian.org>
Date: Sun, 31 Aug 2014 16:53:25 +0000
Subject: [PATCH 1/3] Simplify hardening build flags handling. Thanks to Simon
 Ruderich <simon@ruderich.org> for the patch.

Quoting Simon Ruderich <simon@ruderich.org>:
"There's no need to use dpkg-buildflags manually in debian/rules.
Debhelper with compat=9 automatically enables the hardening flags when
dh_auto_configure is used. So just by calling dh_auto_configure [...]
the hardening flags get automatically passed to the build system.
DEB_BUILD_MAINT_OPTIONS is also respected."
---
 debian/rules | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/debian/rules b/debian/rules
index a8100d2..99d67fc 100755
--- a/debian/rules
+++ b/debian/rules
@@ -11,8 +11,7 @@ override_dh_auto_configure:
 	# changelog entry:
 	LS_CFLAGS=" " dh_auto_configure -- --disable-gtk \
 	  --disable-silent-rules \
-	  --disable-arm-iwmmxt \
-	  $(shell dpkg-buildflags --export=configure)
+	  --disable-arm-iwmmxt
 
 # Install in debian/tmp to retain control through dh_install:
 override_dh_auto_install:
-- 
2.1.0


>From 7a54bf14aaab563d9dda268c14d8116a569385b8 Mon Sep 17 00:00:00 2001
From: intrigeri <intrigeri@debian.org>
Date: Sun, 31 Aug 2014 16:54:54 +0000
Subject: [PATCH 2/3] Enable all hardening build flags. Thanks to Simon
 Ruderich <simon@ruderich.org> for the patch.

Quoting Simon again: "It currently has the same effect as hardening=+bindnow,
but will automatically enable future hardening options and in case the package
will ever build binaries those are immediately protected with PIE as well."
---
 debian/rules | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/debian/rules b/debian/rules
index 99d67fc..a0e0b9e 100755
--- a/debian/rules
+++ b/debian/rules
@@ -3,7 +3,7 @@
 PACKAGE = libpixman-1-0
 SHLIBS  = 0.25.2
 
-export DEB_BUILD_MAINT_OPTIONS = hardening=+bindnow
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
 
 # Disable Gtk+ autodetection:
 override_dh_auto_configure:
-- 
2.1.0


>From 90bc2385a5cda5ed95af24f8b2e183e550175d88 Mon Sep 17 00:00:00 2001
From: intrigeri <intrigeri@debian.org>
Date: Sun, 31 Aug 2014 16:56:42 +0000
Subject: [PATCH 3/3] Update changelog.

Git-Dch: Ignore
---
 debian/changelog | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index f5ebabf..ee81d21 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,13 @@
+pixman (0.32.6-4~1.gbp7a54bf) UNRELEASED; urgency=medium
+
+  ** SNAPSHOT build @7a54bf14aaab563d9dda268c14d8116a569385b8 **
+
+  * Simplify hardening build flags handling.
+    Thanks to Simon Ruderich <simon@ruderich.org> for the patch.
+  * Enable all hardening build flags. Thanks to Simon Ruderich too.
+
+ -- intrigeri <intrigeri@debian.org>  Sun, 31 Aug 2014 09:56:17 -0700
+
 pixman (0.32.6-3) sid; urgency=medium
 
   [ intrigeri ]
-- 
2.1.0

--- End Message ---
--- Begin Message --- 
Source: pixman
Source-Version: 0.33.2-1

We believe that the bug you reported is fixed in the latest version of
pixman, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 760100@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Julien Cristau <jcristau@debian.org> (supplier of updated pixman package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sat, 12 Sep 2015 13:08:02 +0200
Source: pixman
Binary: libpixman-1-0 libpixman-1-0-udeb libpixman-1-0-dbg libpixman-1-dev
Architecture: source
Version: 0.33.2-1
Distribution: sid
Urgency: medium
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Julien Cristau <jcristau@debian.org>
Description:
 libpixman-1-0 - pixel-manipulation library for X and cairo
 libpixman-1-0-dbg - pixel-manipulation library for X and cairo (debugging symbols)
 libpixman-1-0-udeb - pixel-manipulation library for X and cairo (udeb)
 libpixman-1-dev - pixel-manipulation library for X and cairo (development files)
Closes: 760100 786345
Changes:
 pixman (0.33.2-1) sid; urgency=medium
 .
   [ Andreas Boll ]
   * New upstream release candidate.
   * Enable vmx on ppc64el (closes: #786345).
   * Update Vcs-* fields.
   * Add upstream url.
   * Drop XC- prefix from Package-Type field.
   * Bump standards version to 3.9.6.
 .
   [ intrigeri ]
   * Simplify hardening build flags handling (closes: #760100).
     Thanks to Simon Ruderich <simon@ruderich.org> for the patch.
   * Enable all hardening build flags. Thanks to Simon Ruderich too.
Checksums-Sha1:
 5a170e2977e7ea225ae6a53e3874a8475f43289c 2050 pixman_0.33.2-1.dsc
 fa093856557737d0a2e570261bae0f3ae9bc6b45 846982 pixman_0.33.2.orig.tar.gz
 f784f9be2f4c3c5db6987aea187eebb79dfa50ad 305928 pixman_0.33.2-1.diff.gz
Checksums-Sha256:
 d79b492f52da8d6f9bf3b7432839f2d9fd6fc6894b7985f62e7179a901062609 2050 pixman_0.33.2-1.dsc
 fcd593cc841ae7a060814b8b7335be5c5e378b8fbda5054bc423c29993e16007 846982 pixman_0.33.2.orig.tar.gz
 0d9df8c05ef55a55beb90935b5266902c3980c0da42a8d1271b1928cf5a47fc7 305928 pixman_0.33.2-1.diff.gz
Files:
 04119a9657e4a55da86a9795e5cd6491 2050 devel optional pixman_0.33.2-1.dsc
 fdf5211a551ce1a6737bdf9049019df3 846982 devel optional pixman_0.33.2.orig.tar.gz
 cd48a122de9f3a09ef50f1f41c2050fc 305928 devel optional pixman_0.33.2-1.diff.gz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=I7Od
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: