Hi,

The debian build files are stored upstream at https://github.com/DOCGroup/ACE_TAO/tree/master/ACE/debian. I recommend to open pull requests with the proposed patches there.

Johnny


On 2/27/25 11:55, Emanuele Rocca wrote:
Source: ace
Version: 8.0.2+dfsg-2
Tags: patch

Hi,

ace currently does not use the flags set by dpkg-buildflags, despite
obviously wanting to do so in d/rules. The reason is that the upstream
build system is using CCFLAGS instead of CXXFLAGS.

Please consider applying the following patch to actually build with hardening
flags, and enable branch protection.

Thanks!
   Emanuele

diff --git a/debian/rules b/debian/rules
index a1da33b..5e37786 100755
--- a/debian/rules
+++ b/debian/rules
@@ -9,11 +9,10 @@
  # Copyright © 2010-2014 Johnny Willemsen <jwillem...@remedy.nl>
#export DEB_BUILD_MAINT_OPTIONS = hardening=+all
-export DEB_BUILD_MAINT_OPTIONS = 
hardening=+format,+fortify,+stackprotector,+relro,+bindnow
+export DEB_BUILD_MAINT_OPTIONS = 
hardening=+format,+fortify,+stackprotector,+relro,+bindnow,+branch
  DPKG_EXPORT_BUILDFLAGS = 1
  include /usr/share/dpkg/buildflags.mk
-export DEB_CFLAGS_MAINT_APPEND = $(CPPFLAGS)
-export DEB_CXXFLAGS_MAINT_APPEND = $(CPPFLAGS)
+export CCFLAGS = $(CXXFLAGS)
  export DEB_CPPFLAGS_MAINT_APPEND = -g
MWCFLAGS := -type gnuace -noreldefs


Reply via email to