[hardening-discuss] Bug#587358: Bug#587358: hardening-wrapper: should -Werror=format and -Werror=format-security be set too?

Raphael Geissert geissert at debian.org
Fri Feb 18 15:43:39 UTC 2011


On Sunday 13 February 2011 19:21:38 Kees Cook wrote:
> On Sun, Feb 13, 2011 at 06:44:01PM -0600, Raphael Geissert wrote:
> > I think now would be a great moment to make this change, don't you think?
> 
> The problem is sorting out how to support the older gcc binaries that don't
> support this option (right now everything links to the single hardened-cc
> option). I'm not sure how to do this without seriously ugly hacks for the
> -wrapper package, and I have no ideas how to sanely do it for the -includes
> package (maybe it should just be turned on there without the option to fall
> back, I'm not sure).

AFAICS even gcc-4.2 supports them. (Okay, I may have cheated, gcc-4.1 was 
removed three days later after my message :)

Cheers,
-- 
Raphael Geissert - Debian Developer
www.debian.org - get.debian.net





More information about the hardening-discuss mailing list