Source: newt
Severity: important
newt uses dh and debian/compat, which makes it export the new
hardened build flags from dpkg-buildflags. This results in the
following flags being exported:
CFLAGS=-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat
-Wformat-security -Werror=format-security
CPPFLAGS=-D_FORTIFY_SOURCE=2
CXXFLAGS=-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat
-Wformat-security -Werror=format-security
FFLAGS=-g -O2
LDFLAGS=-Wl,-z,relro
However, you're overwriting CFLAGS in your rules file and thus nullifying
the stack protector and the enforced format string checks:
dh_auto_configure -- $(GPMSUPPORT) $(NOSTRIP)
CFLAGS="-I/usr/include/tcl8.5"
Cheers,
Moritz
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
