Package: mplayer2
Version: 2.0-426-gc32b3ed-2
Severity: important
Tags: patch
Please enable hardened build flags through dpkg-buildflags.
Patch attached. The more stringent format string checks
unveiled a missing format string in the streaming code,
please contact upstream on that one.
Cheers,
Moritz
diff -aur mplayer2-2.0-426-gc32b3ed.harden/debian/rules mplayer2-2.0-426-gc32b3ed/debian/rules
--- mplayer2-2.0-426-gc32b3ed.harden/debian/rules 2012-01-05 18:00:37.000000000 +0100
+++ mplayer2-2.0-426-gc32b3ed/debian/rules 2012-01-30 22:14:06.000000000 +0100
@@ -12,10 +12,16 @@
endif
endif
+CFLAGS = `dpkg-buildflags --get CFLAGS`
+CFLAGS += `dpkg-buildflags --get CPPFLAGS`
+LDFLAGS = `dpkg-buildflags --get LDFLAGS`
+
confflags := --prefix=/usr \
--confdir=/etc/mplayer \
--enable-translation \
--disable-svga \
+ --extra-cflags="${CFLAGS}" \
+ --extra-ldflags="${LDFLAGS}" \
--enable-debug=3
# runtime cpu detection works on x86 and ppc only. These checks also work on kfreebsd!
