Am Montag, den 24.08.2020, 12:11 + schrieb PICCA Frederic-Emmanuel:
Hello Frederic,
yes I think this is a false positive indeed. The flags are correctly
passed.
Thanks for digging,
Thomas
> Hello Thomas,
>
> I am wondering if this is not a false positive.
>
> all the code is compiled with
Hello Thomas,
I am wondering if this is not a false positive.
all the code is compiled with -D_FORTIFY_SOURCE=2
https://salsa.debian.org/science-team/tango/-/jobs/954394/raw
Can you confirm that it is a false positive ?
I am not that confident when it comes to hardening flags.
for the record
In [1] I still have
I: tango-accesscontrol: hardening-no-fortify-functions
usr/lib/tango/TangoAccessControl.
and checking with hardening-check gives the same output as before.
[1]: https://salsa.debian.org/science-team/tango/-/jobs/808832
3 matches
Mail list logo