Source: cdparanoia Version: 3.10.2+debian-14 Tags: patch User: debian-...@lists.debian.org Usertags: pac-bti
Dear Maintainer, Whilst trying to figure out why a rebuild of cdparanoia on arm64 does not fully enable BTI [1] I have noticed that the program is built without hardening flags on. Please consider the attached patch. Thanks, Emanuele [1] https://wiki.debian.org/ToolChain/PACBTI
diff -Nru cdparanoia-3.10.2+debian/debian/changelog cdparanoia-3.10.2+debian/debian/changelog --- cdparanoia-3.10.2+debian/debian/changelog 2021-03-13 05:58:25.000000000 +0100 +++ cdparanoia-3.10.2+debian/debian/changelog 2024-02-28 10:55:16.000000000 +0100 @@ -1,3 +1,10 @@ +cdparanoia (3.10.2+debian-15) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Build with hardening flags, except for format. + + -- Emanuele Rocca <e...@debian.org> Mon, 06 May 2024 17:42:04 +0200 + cdparanoia (3.10.2+debian-14) unstable; urgency=medium [ Debian Janitor ] diff -Nru cdparanoia-3.10.2+debian/debian/rules cdparanoia-3.10.2+debian/debian/rules --- cdparanoia-3.10.2+debian/debian/rules 2021-03-13 05:58:25.000000000 +0100 +++ cdparanoia-3.10.2+debian/debian/rules 2024-02-28 10:55:16.000000000 +0100 @@ -1,5 +1,10 @@ #!/usr/bin/make -f +# cdparanoia FTBFS with -Werror=format-security +export DEB_BUILD_MAINT_OPTIONS = hardening=+all,-format + +include /usr/share/dpkg/buildflags.mk + export CFLAGS += -fPIC -g export LDFLAGS += -fPIC