On Wed, Sep 21, 2011 at 10:50 AM, Bollinger, John C
<john.bollin...@stjude.org> wrote:
> On Wednesday, September 21, 2011 3:19 AM, Michal Hocko 
> [mailto:msts...@gmail.com] wrote:
>> On Tue, Sep 20, 2011 at 04:13:37PM -0500, Bollinger, John C wrote:
>> > As I wrote a few minutes ago, I am attempting to build PDFedit v
>> 0.4.5
>> > on CentOS 5, using the distro's provided GCC 4.1.2 toolchain.
>>
>> Don't want to blame gcc here but 4.1.x was plain wrong. I would
>> encourage you to use something newer.
>
> Well, I am in the process of upgrading to CentOS 6, which uses GCC 4.4.  For 
> the time being, however, I still need to support Cent5, which means I have to 
> build (also) on Cent5.  Even there, however, I guess there's a version of GCC 
> 4.4 available, if only I can figure out how to get the build system to use 
> it.  It's probably not worth the effort, however.
>
> [...]
>
>> The warning is bogus. Pointer should just cast real to int
>> (truncate it)
>> and then provide a reference to a temporal int variable.
>
> Well, I wouldn't say the warning is bogus, but I'll accept that it is 
> ignoreable in this situation.  I guess a static_cast<int> would after all be 
> the best way to make the warning go away, since it doesn't in the end matter 
> that a temporal object is involved.
Ah, a fellow clean-compile enthusiast (or security minded individual).
Actually, we (I) treat a clean compile is a security gate. If the code
can't clean compile, it does not meet quality standards and gets
kicked until it can.

You might want to to try -Wall -Wextra -Wformat=2 -Wformat-security
-Woverloaded-virtual -Wreorder -Wno-unused -Wno-type-limits. The last
three ease the use of C++ with -Wall -Wextra.

For linker hardening, try -z relro and -z now for PLT and GOT attacks.

Jeff

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2dcopy1
_______________________________________________
Pdfedit-support mailing list
Pdfedit-support@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/pdfedit-support

Reply via email to