Package: firebird2.5
Version: 2.5.2~svn+53897.ds4-1
Severity: important
Tags: patch

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Dear Maintainer,

The hardening flags are partially missing because the build
system ignores them.

The attached patch fixes the issue.

Regards,
Simon

- -- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=C6kx
-----END PGP SIGNATURE-----
Description: Use build flags from environment (dpkg-buildflags).
 Necessary for hardening flags.
Author: Simon Ruderich <[email protected]>
Last-Update: 2012-03-13

Index: firebird2.5-2.5.2~svn+53897.ds4/builds/posix/Makefile.in.firebird
===================================================================
--- firebird2.5-2.5.2~svn+53897.ds4.orig/builds/posix/Makefile.in.firebird	2012-03-13 21:56:23.000000000 +0100
+++ firebird2.5-2.5.2~svn+53897.ds4/builds/posix/Makefile.in.firebird	2012-03-13 22:25:42.069673662 +0100
@@ -444,7 +444,7 @@
 MAKE_HEADER_Bin = ./makeHeader
 
 $(INCLUDE_DEST)/ibase.h: $(SRC_IBASE_ExtraFiles)
-	$(STATICEXE_LINK) -o $(MAKE_HEADER_Bin) $(MAKE_HEADER_Src)
+	$(STATICEXE_LINK) $(CPPFLAGS) $(LINK_OPTS) -o $(MAKE_HEADER_Bin) $(MAKE_HEADER_Src)
 	$(CP) $^ .
 	$(MAKE_HEADER_Bin) <ibase.h >$@
 	$(RM) -f ibase.h
Index: firebird2.5-2.5.2~svn+53897.ds4/extern/btyacc/Makefile
===================================================================
--- firebird2.5-2.5.2~svn+53897.ds4.orig/extern/btyacc/Makefile	2012-03-13 21:56:23.000000000 +0100
+++ firebird2.5-2.5.2~svn+53897.ds4/extern/btyacc/Makefile	2012-03-13 21:56:23.000000000 +0100
@@ -12,7 +12,7 @@
 # across all of our supported compilers/platforms.
 
 # Vanilla CFLAGS
-CFLAGS=
+CFLAGS?=
 
 # No LDFLAGS
 #LDFLAGS=

Reply via email to