Source: webkit
Severity: important
Tags: patch

Please enable hardened build flags through dpkg-buildflags.

Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS)

Cheers,
        Moritz
diff -aur webkit-1.6.1.harden/debian/rules webkit-1.6.1/debian/rules
--- webkit-1.6.1.harden/debian/rules	2011-11-02 02:57:30.000000000 +0100
+++ webkit-1.6.1/debian/rules	2012-02-02 22:15:22.000000000 +0100
@@ -8,16 +8,13 @@
 
 GTK_VERSIONS = 2.0 3.0
 
-CFLAGS = -g -Wall -Wl,--as-needed
+CFLAGS = `dpkg-buildflags --get CFLAGS`
+CFLAGS += -Wall -Wl,--as-needed
+LDFLAGS = `dpkg-buildflags --get LDFLAGS`
+CPPFLAGS = `dpkg-buildflags --get CPPFLAGS`
 
-ifneq (,$(filter noopt,$(DEB_BUILD_OPTIONS)))
-        CFLAGS += -O0
-else
 ifeq (armhf,$(filter $(DEB_BUILD_ARCH),armhf))
 	CFLAGS += -O1
-else
-        CFLAGS += -O2
-endif
 endif
 
 ifeq ($(DEB_BUILD_ARCH),alpha)
@@ -82,6 +79,8 @@
 		env AR_FLAGS="cruT" \
 		CFLAGS="$(CFLAGS)" \
 		CXXFLAGS="$(CFLAGS)" \
+		CPPFLAGS="$(CPPFLAGS)" \
+		LDFLAGS="$(LDFLAGS)" \
 		CC="gcc" \
 		CXX="g++" \
 		../configure --prefix=/usr \
Nur in webkit-1.6.1/debian: rules~.

Reply via email to