[Pkg-nlp-ja-devel] Bug#859354: chasen shouldn't disable PIE
Adrian Bunk
bunk @ debian.org
2017年 4月 2日 (日) 18:34:23 UTC
Source: chasen
Version: 2.4.5-33
Severity: normal
Tags: patch
With gcc in stretch defaulting to PIE, hardening=+all,-pie changed
semantics from "enable hardening but not PIE" to "enable all hardening
and explicitely disable the default PIE".
The latter is usually not intended.
For packages like chasen that include static libraries the situation
is even worse, since non-PIE static libraries cannot be used with
the stretch gcc unless -no-pie is explicitly passed when linking.
The -pie in hardening flags was in some cases required in pre-stretch
releases to avoid build failures caused by (incorrectly) passing -fPIE
to the compiler when building shared libraries or plugins.
This problem does no longer exist.
Please consider applying the following change:
--- debian/rules.old 2017-03-20 10:26:29.000000000 +0000
+++ debian/rules 2017-03-20 10:26:33.000000000 +0000
@@ -1,7 +1,7 @@
#!/usr/bin/make -f
#export DH_VERBOSE=1
-export DEB_BUILD_MAINT_OPTIONS := hardening=+all,-pie
+export DEB_BUILD_MAINT_OPTIONS := hardening=+all
%:
dh $@ --with autoreconf
Pkg-nlp-ja-devel メーリングリストの案内