[fenix-plugins] 09/10: Override a false positive Lintian hardening warning.

Peter Pentchev roam at ringlet.net
Sat Dec 26 22:38:26 UTC 2015


This is an automated email from the git hooks/post-receive script.

roam-guest pushed a commit to branch master
in repository fenix-plugins.

commit ff997b4e9ff1555f0d34f5ac5134bb67f8f8da3e
Author: Peter Pentchev <roam at ringlet.net>
Date:   Sun Dec 27 00:27:20 2015 +0200

    Override a false positive Lintian hardening warning.
---
 debian/changelog                       | 2 ++
 debian/fenix-plugins.lintian-overrides | 8 ++++++++
 2 files changed, 10 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index 2e90d61..2932091 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -12,6 +12,8 @@ fenix-plugins (0.0.20070803-6) UNRELEASED; urgency=medium
   * Drop the version of the autotools-dev build dependency, satisfied
     even in oldoldstable.
   * Turn on all the build hardening features.
+  * Add a Lintian override for a hardening false positive - the compiler
+    is smart enough to realize that the calls are perfectly safe.
 
  -- Peter Pentchev <roam at ringlet.net>  Mon, 21 Dec 2015 16:25:27 +0200
 
diff --git a/debian/fenix-plugins.lintian-overrides b/debian/fenix-plugins.lintian-overrides
new file mode 100644
index 0000000..97be19e
--- /dev/null
+++ b/debian/fenix-plugins.lintian-overrides
@@ -0,0 +1,8 @@
+# The compiler correctly determines that the strncmp() and
+# the strncpy() calls in there are perfectly safe.
+# As an aside, it just so happens that the strncpy() cannot
+# ever produce a non-null-terminated string, since the static
+# buffer is way longer than the strncpy() size parameter, so
+# it will be zero-padded... a lot.
+#
+fenix-plugins: hardening-no-fortify-functions usr/lib/fenix/plugins/ttf.so

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-games/fenix-plugins.git



More information about the Pkg-games-commits mailing list