Bug#759792: icu-devtools: icu-config --cxxflags includes ICU's build-time cxxflags, including hardening flags -like -fPIE

2014-09-05 Thread Jay Berkenbilt
Andreas Metzler ametz...@bebt.de wrote:

 Package: icu-devtools
 Version: 52.1-5
 Severity: normal

 (SID)ametzler@argenau:/tmp/OPENEXR/icu-52.1$ icu-config --cxxflags
 -g -O2 -fPIE -fstack-protector --param=ssp-buffer-size=4 -Wformat 
 -Werror=format -security -W -Wall -pedantic -Wpointer-arith -Wwrite-strings 
 -Wno-long-long --std=c++0x

 It looks like the compiler options used to /build/ icu are propagated
 by icuconfig. Which I think is wrong, this is e.g. the cause of #759247,
 since prelude-lml's build system breaks with -fPIE.

 cu Andreas

This rings a bell and is probably the reason why I was still using
hardening-wrapper instead of dpkg-buildflags until just recently. I had
switched from hardening-wrapper to dpkg-buildflags and then switched
back but (uncharacteristically) didn't record anywhere why I made the
switch.

I will see if I can untangle this, but I'm probably going to face up to
having to find a new maintainer for ICU. I haven't used the package
myself in years, and maintaining it takes a little more work than I can
put into it with my current schedule. ICU's internal build is
complicated and includes lots of code generators. Surely, in the general
case,some of the flags passed in at compile time will be needed and
others won't. Hopefully for the debian build I can come up with some way
of doing it cleanly.

-- 
Jay Berkenbilt q...@debian.org


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#759792: icu-devtools: icu-config --cxxflags includes ICU's build-time cxxflags, including hardening flags -like -fPIE

2014-08-30 Thread Andreas Metzler
Package: icu-devtools
Version: 52.1-5
Severity: normal

(SID)ametzler@argenau:/tmp/OPENEXR/icu-52.1$ icu-config --cxxflags
-g -O2 -fPIE -fstack-protector --param=ssp-buffer-size=4 -Wformat 
-Werror=format -security -W -Wall -pedantic -Wpointer-arith -Wwrite-strings 
-Wno-long-long --std=c++0x

It looks like the compiler options used to /build/ icu are propagated
by icuconfig. Which I think is wrong, this is e.g. the cause of #759247,
since prelude-lml's build system breaks with -fPIE.

cu Andreas

-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org