[SCM] vlevel/master: Enable all hardening build flags
abe at users.alioth.debian.org
abe at users.alioth.debian.org
Sun Oct 29 23:41:23 UTC 2017
The following commit has been merged in the master branch:
commit 05c32f81aa060f5b9fac7dab5d024ee6df27d221
Author: Axel Beckert <abe at deuxchevaux.org>
Date: Mon Oct 30 00:31:55 2017 +0100
Enable all hardening build flags
Extend fix-hardcoded-makefile-variables.patch to also fix
vlevel-jack/Makefile.
diff --git a/debian/changelog b/debian/changelog
index f738085..9df13e2 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -2,6 +2,9 @@ vlevel (0.5.1-2) UNRELEASED; urgency=medium
* Remove trailing whitespace from debian/rules.
* Switch Vcs-* header and DEP5 format URL to HTTPS.
+ * Enable all hardening build flags.
+ + Extend fix-hardcoded-makefile-variables.patch to also fix
+ vlevel-jack/Makefile.
-- Axel Beckert <abe at debian.org> Mon, 30 Oct 2017 00:20:59 +0100
diff --git a/debian/patches/fix-hardcoded-makefile-variables.patch b/debian/patches/fix-hardcoded-makefile-variables.patch
index 8a0232e..b551498 100644
--- a/debian/patches/fix-hardcoded-makefile-variables.patch
+++ b/debian/patches/fix-hardcoded-makefile-variables.patch
@@ -1,18 +1,16 @@
Description: Fix hardcoded Makefile variables
Needed for proper installation paths as well as compiler flags
Author: Axel Beckert <abe at debian.org>
-Last-Update: 2015-Feb-20
+Last-Update: 2017-Oct-30
-Index: vlevel/Makefile
-===================================================================
---- vlevel.orig/Makefile 2015-02-20 12:53:54.811087786 +0100
-+++ vlevel/Makefile 2015-02-20 12:53:54.811087786 +0100
+--- a/Makefile
++++ b/Makefile
@@ -27,7 +27,7 @@
# on my system, it makes it a bit worse.
#export CXXFLAGS = -Wall -O3 -fPIC -DPIC -g -march=pentium4
-export CXXFLAGS = -Wall -O3 -fPIC -DPIC
-+export CXXFLAGS = $(CFLAGS) $(CPPFLAGS) $(LDFLAGS) -fPIC -DPIC
++export CXXFLAGS += $(CFLAGS) $(CPPFLAGS) $(LDFLAGS) -fPIC -DPIC
# On my system, ICC is quite a bit faster, with these options:
#export CC=icc
@@ -26,3 +24,18 @@ Index: vlevel/Makefile
export LADSPA_PATH = $(PREFIX)/lib/ladspa/
# End of user-editable options.
+--- a/vlevel-jack/Makefile
++++ b/vlevel-jack/Makefile
+@@ -22,10 +22,10 @@
+ # This is evil, but it makes implicit link rules use g++, not gcc
+ CC = $(CXX)
+ #LDFLAGS = -L/opt/local/lib
+-LDFLAGS = ` pkg-config --libs-only-L jack `
++LDFLAGS += ` pkg-config --libs-only-L jack `
+ #LDLIBS = -ljack -lpthread -framework CoreAudio -framework CoreServices -framework AudioUnit
+ LDLIBS = ` pkg-config --libs-only-l jack `
+-CXXFLAGS = ` pkg-config --cflags jack `
++CXXFLAGS += ` pkg-config --cflags jack `
+ #CXXFLAGS= -I/opt/local/include -g -v
+ CFLAGS = $(CXXFLAGS)
+
diff --git a/debian/rules b/debian/rules
index 62394fd..9570c06 100755
--- a/debian/rules
+++ b/debian/rules
@@ -1,4 +1,7 @@
#!/usr/bin/make -f
+
+export DEB_BUILD_MAINT_OPTIONS=hardening=+all
+
%:
dh $@
--
vlevel packaging
More information about the pkg-multimedia-commits
mailing list