Your message dated Fri, 03 Oct 2014 23:35:19 +0000
with message-id <[email protected]>
and subject line Bug#656008: fixed in pcre3 1:8.35-3.1
has caused the Debian Bug report #656008,
regarding Please enabled hardened build flags
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
656008: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=656008
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: pcre3
Severity: important
Tags: patch

Please enabled hardened build flags through dpkg-buildflags.

Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS)

Cheers,
        Moritz
diff -aur pcre3-8.12.harden/debian/rules pcre3-8.12/debian/rules
--- pcre3-8.12.harden/debian/rules	2012-01-15 21:49:46.000000000 +0100
+++ pcre3-8.12/debian/rules	2012-01-15 21:51:04.000000000 +0100
@@ -11,18 +11,17 @@
 DEB_BUILD_GNU_TYPE  ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE)
 DEB_HOST_MULTIARCH  ?= $(shell dpkg-architecture -qDEB_HOST_MULTIARCH)
 
-CFLAGS = -Wall -g
+CFLAGS = `dpkg-buildflags --get CFLAGS`
+CFLAGS += -Wall
+LDFLAGS = `dpkg-buildflags --get LDFLAGS`
+CPPFLAGS = `dpkg-buildflags --get CPPFLAGS`
+
 INSTALL = install
 INSTALL_FILE    = $(INSTALL) -p    -o root -g root  -m  644
 INSTALL_PROGRAM = $(INSTALL) -p    -o root -g root  -m  755
 INSTALL_SCRIPT  = $(INSTALL) -p    -o root -g root  -m  755
 INSTALL_DIR     = $(INSTALL) -p -d -o root -g root  -m  755
 
-ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
-CFLAGS += -O0
-else
-CFLAGS += -O2
-endif
 ifeq (,$(findstring nostrip,$(DEB_BUILD_OPTIONS)))
 INSTALL_PROGRAM += -s
 endif
@@ -31,7 +30,7 @@
 config.status: configure
 	dh_testdir
 	# Add here commands to configure the package.
-	CC_FOR_BUILD=cc CFLAGS="$(CFLAGS)" ./configure \
+	CC_FOR_BUILD=cc CFLAGS="$(CFLAGS)" CPPFLAGS="$(CPPFLAGS)" LDFLAGS="$(LDFLAGS)" ./configure \
 		--host=$(DEB_HOST_GNU_TYPE) --build=$(DEB_BUILD_GNU_TYPE) \
 		--prefix=/usr --mandir=\$${prefix}/share/man \
 		--infodir=\$${prefix}/share/info \
Nur in pcre3-8.12/debian: rules~.

--- End Message ---
--- Begin Message ---
Source: pcre3
Source-Version: 1:8.35-3.1

We believe that the bug you reported is fixed in the latest version of
pcre3, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Michael Gilbert <[email protected]> (supplier of updated pcre3 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 19 Sep 2014 01:48:23 +0000
Source: pcre3
Binary: libpcre3 libpcre3-udeb libpcrecpp0 libpcre3-dev libpcre3-dbg pcregrep
Architecture: source
Version: 1:8.35-3.1
Distribution: unstable
Urgency: medium
Maintainer: Mark Baker <[email protected]>
Changed-By: Michael Gilbert <[email protected]>
Description:
 libpcre3   - Perl 5 Compatible Regular Expression Library - runtime files
 libpcre3-dbg - Perl 5 Compatible Regular Expression Library - debug symbols
 libpcre3-dev - Perl 5 Compatible Regular Expression Library - development files
 libpcre3-udeb - Perl 5 Compatible Regular Expression Library - runtime files 
(ude (udeb)
 libpcrecpp0 - Perl 5 Compatible Regular Expression Library - C++ runtime files
 pcregrep   - grep utility that uses perl 5 compatible regexes.
Closes: 656008
Changes:
 pcre3 (1:8.35-3.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Enable build hardening flags (closes: #656008).
Checksums-Sha1:
 9ac1aeeb4bb78ff34c76fa0e13a46a8267d6014c 2651 pcre3_8.35-3.1.dsc
 65aa2abe783f75fc9a19400523919acd7b5d7562 20955 pcre3_8.35-3.1.debian.tar.gz
Checksums-Sha256:
 ed193e7acf947a9ab35d27ca31392811920df26733c8414aea68c4d9780d997b 2651 
pcre3_8.35-3.1.dsc
 5a151e437283a98be80ce7f1fb022e6a50c53cc58c9d05a8bc45fa58a0c103bf 20955 
pcre3_8.35-3.1.debian.tar.gz
Files:
 324d5f131b2b9a328867995f47638d9a 2651 libs optional pcre3_8.35-3.1.dsc
 3dabc52dac67e18710cd67f92aaff8cb 20955 libs optional 
pcre3_8.35-3.1.debian.tar.gz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=
=oyXy
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to