Am Sonntag, den 09.11.2014, 01:02 -0500 schrieb Jason Pleau: 
> Thoughts on this patch? I'm not sure how adding --enable-debug fixes
> this, so it could very well lead to other issues.

The -D_FORTIFY_SOURCE=2 hardening option is only effective if the source
is translated with at least optimization level -O1. Debug builds are
built without any compiler optimization, i.e. -O0. Therefore, the
fortify hardening options is simply not applied if you enable debug
builds. So, this is not really curing the issue, but simply avoiding the
code paths that trigger it.

for more information, please see dpkg-buildflags(1).

- Fabian


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to