Package: ruby1.8
Version: 1.8.7.352-2
Severity: important
Tags: patch
Please enable hardened build flags through dpkg-buildflags.
Patch attached. cdbs exports hardened build flags since
0.4.106, but an additional changes is needed to not
overwrite CFLAGS and CXXFLAGS.
Cheers,
Moritz
diff -aur ruby1.8-1.8.7.352.harden/debian/control ruby1.8-1.8.7.352/debian/control
--- ruby1.8-1.8.7.352.harden/debian/control 2011-07-03 19:55:41.000000000 +0200
+++ ruby1.8-1.8.7.352/debian/control 2012-04-07 18:26:35.000000000 +0200
@@ -3,7 +3,7 @@
Priority: optional
Maintainer: akira yamada <[email protected]>
Uploaders: Daigo Moriwaki <[email protected]>, Lucas Nussbaum <[email protected]>
-Build-Depends: cdbs, debhelper (>= 5), autotools-dev, autoconf, m4, quilt (>= 0.40), patch, bison, binutils (>= 2.14.90.0.7), libgdbm-dev, libncurses5-dev, libreadline-gplv2-dev, tcl-dev, tk-dev, zlib1g-dev, libssl-dev (>= 0.9.6b), file
+Build-Depends: cdbs (>= 0.4.106), debhelper (>= 5), autotools-dev, autoconf, m4, quilt (>= 0.40), patch, bison, binutils (>= 2.14.90.0.7), libgdbm-dev, libncurses5-dev, libreadline-gplv2-dev, tcl-dev, tk-dev, zlib1g-dev, libssl-dev (>= 0.9.6b), file
Standards-Version: 3.9.2
Homepage: http://www.ruby-lang.org/
Vcs-Git: git://git.debian.org/collab-maint/ruby1.8.git
Nur in ruby1.8-1.8.7.352/debian: control~.
diff -aur ruby1.8-1.8.7.352.harden/debian/rules ruby1.8-1.8.7.352/debian/rules
--- ruby1.8-1.8.7.352.harden/debian/rules 2011-07-24 12:32:15.000000000 +0200
+++ ruby1.8-1.8.7.352/debian/rules 2012-04-07 18:26:06.000000000 +0200
@@ -19,8 +19,8 @@
DEB_AUTO_UPDATE_AUTOCONF = YES
-CFLAGS := -fno-strict-aliasing -g
-CXXFLAGS := -fno-strict-aliasing -g
+CFLAGS += -fno-strict-aliasing -g
+CXXFLAGS += -fno-strict-aliasing -g
ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
CFLAGS += -g -O0
else
Nur in ruby1.8-1.8.7.352/debian: rules~.
