Package: subversion
Version: 1.7.14-1+b1
Severity: important
Tags: patch
Hi,
please enable hardened build flags for Subversion. Patch attached.
Cheers,
Moritz
diff -aur subversion-1.7.14.orig/debian/rules subversion-1.7.14/debian/rules
--- subversion-1.7.14.orig/debian/rules 2014-01-05 15:36:02.000000000 +0100
+++ subversion-1.7.14/debian/rules 2014-01-05 15:42:09.087084280 +0100
@@ -85,15 +85,15 @@
--with-ruby-sitedir=/usr/lib/ruby \
--with-swig=/usr \
--with-kwallet \
+ $(shell dpkg-buildflags --export=configure) \
--with-gnome-keyring
ifdef DEB_OPT_DEBUG
confflags+= --enable-debug
endif
-export EXTRA_CFLAGS := -O2
-ifdef DEB_OPT_NOOPT
- EXTRA_CFLAGS := -O0
-endif
+
+# dpkg-buildflags respects "noopt"
+export EXTRA_CFLAGS := `dpkg-buildflags --get CFLAGS`
export DH_OPTIONS
ifdef DEB_OPT_WITH_JAVAHL
Nur in subversion-1.7.14/debian: rules~.
