Package: dpkg
glibc-2.16 adds an extra warning when _FORTIFY_SOURCE is defined without -O >1.
This macro should not be defined if noopt is in effect in DEB_BUILD_OPTIONS.
I didn't check for combinations of hardening flags and noopt needing this change
as well.
http://sourceware.org/git/?p=glibc.git;a=commitdiff;h=05c2c9618f583ea4acd69b3fe5ae2a2922dd2ddc
$ dpkg-buildflags
CFLAGS=-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat
-Werror=format-security
CPPFLAGS=-D_FORTIFY_SOURCE=2
CXXFLAGS=-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat
-Werror=format-security
FFLAGS=-g -O2
LDFLAGS=-Wl,-z,relro
(sid)doko@carbon:~$ DEB_BUILD_OPTIONS=noopt dpkg-buildflags
CFLAGS=-g -O0 -fstack-protector --param=ssp-buffer-size=4 -Wformat
-Werror=format-security
CPPFLAGS=-D_FORTIFY_SOURCE=2
CXXFLAGS=-g -O0 -fstack-protector --param=ssp-buffer-size=4 -Wformat
-Werror=format-security
FFLAGS=-g -O0
LDFLAGS=-Wl,-z,relro
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
