This is an automated email from the git hooks/post-receive script. nthykier pushed a commit to branch master in repository lintian.
commit 06379d325e32f72126e6e320e8cd9daa6cfdfa80 Author: Niels Thykier <[email protected]> Date: Sat Sep 17 19:27:16 2016 +0000 c/binaries: Implemented hardening-no-relro directly Signed-off-by: Niels Thykier <[email protected]> --- checks/binaries.pm | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/checks/binaries.pm b/checks/binaries.pm index 4785bd0..5497660 100644 --- a/checks/binaries.pm +++ b/checks/binaries.pm @@ -554,6 +554,12 @@ sub run { } } + if ( $arch_hardening->{'hardening-no-relro'} + and not $built_with_golang + and not $objdump->{'PH'}{'RELRO'}) { + tag 'hardening-no-relro', $file; + } + # Check for missing hardening characteristics. This currently # handles the following checks: # no-relro no-fortify-functions no-stackprotector no-bindnow no-pie @@ -561,6 +567,8 @@ sub run { if ($arch_hardening) { foreach my $t (@{$info->hardening_info->{$fname}}) { my $tag = "hardening-$t"; + # Implemented elsewhere + next if $t eq 'no-relro'; # Binaries built by the Go compiler do not support all # hardening measures. next -- Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/lintian/lintian.git
