Source: cdparanoia
Version: 3.10.2+debian-14
Tags: patch
User: debian-...@lists.debian.org
Usertags: pac-bti

Dear Maintainer,

Whilst trying to figure out why a rebuild of cdparanoia on arm64 does
not fully enable BTI [1] I have noticed that the program is built
without hardening flags on. Please consider the attached patch.

Thanks,
  Emanuele

[1] https://wiki.debian.org/ToolChain/PACBTI
diff -Nru cdparanoia-3.10.2+debian/debian/changelog 
cdparanoia-3.10.2+debian/debian/changelog
--- cdparanoia-3.10.2+debian/debian/changelog   2021-03-13 05:58:25.000000000 
+0100
+++ cdparanoia-3.10.2+debian/debian/changelog   2024-02-28 10:55:16.000000000 
+0100
@@ -1,3 +1,10 @@
+cdparanoia (3.10.2+debian-15) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * Build with hardening flags, except for format.
+
+ -- Emanuele Rocca <e...@debian.org>  Mon, 06 May 2024 17:42:04 +0200
+
 cdparanoia (3.10.2+debian-14) unstable; urgency=medium
 
   [ Debian Janitor ]
diff -Nru cdparanoia-3.10.2+debian/debian/rules 
cdparanoia-3.10.2+debian/debian/rules
--- cdparanoia-3.10.2+debian/debian/rules       2021-03-13 05:58:25.000000000 
+0100
+++ cdparanoia-3.10.2+debian/debian/rules       2024-02-28 10:55:16.000000000 
+0100
@@ -1,5 +1,10 @@
 #!/usr/bin/make -f
 
+# cdparanoia FTBFS with -Werror=format-security 
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all,-format
+
+include /usr/share/dpkg/buildflags.mk
+
 export CFLAGS += -fPIC -g
 export LDFLAGS += -fPIC
 

Reply via email to