Source: libpng
Severity: important
Tags: patch
Please enabled hardened build flags through dpkg-buildflags.
Patch attached. (dpkg-buildflags abides "noopt" from DEB_BUILD_OPTIONS)
Cheers,
Moritz
diff -aur libpng-1.2.46.orig/debian/rules libpng-1.2.46/debian/rules
--- libpng-1.2.46.orig/debian/rules 2011-07-27 04:44:37.000000000 +0200
+++ libpng-1.2.46/debian/rules 2012-01-02 03:07:13.000000000 +0100
@@ -10,13 +10,11 @@
DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE)
DEB_HOST_MULTIARCH ?= $(shell dpkg-architecture -qDEB_HOST_MULTIARCH)
-CFLAGS = -Wall -g
-
-ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
- CFLAGS += -O0
-else
- CFLAGS += -O2
-endif
+CFLAGS = `dpkg-buildflags --get CFLAGS`
+CFLAGS += -Wall
+LDFLAGS = `dpkg-buildflags --get LDFLAGS`
+LDFLAGS += "-Wl,-z,defs"
+CPPFLAGS = `dpkg-buildflags --get CPPFLAGS`
config.status: configure
dh_testdir
@@ -26,7 +24,7 @@
--prefix=/usr --mandir=\$${prefix}/share/man \
--infodir=\$${prefix}/share/info \
--libdir=\$${prefix}/lib/$(DEB_HOST_MULTIARCH) \
- CFLAGS="$(CFLAGS)" LDFLAGS="-Wl,-z,defs"
+ CFLAGS="$(CFLAGS)" CPPFLAGS="$(CPPFLAGS)" LDFLAGS="$(LDFLAGS)"
build: build-arch build-indep
build-arch: build-stamp
Nur in libpng-1.2.46/debian: rules~.
