[med-svn] [Git][med-team/parsinsert][master] 4 commits: d/rules: disable hardening and enforce -fPIE.

[Étienne Mollier (@emollier)]

Étienne Mollier pushed to branch master at Debian Med / parsinsert


Commits:
dcf353da by Étienne Mollier at 2023-08-28T21:31:23+02:00
d/rules: disable hardening and enforce -fPIE.

This fixes parsinsert self-test failures when a number of optimization
options are applied (e.g. -O2, -O3, LTO) once and for all hopefully;
there have been more than one bug of this kind.

Closes: #964082

- - - - -
e4525413 by Étienne Mollier at 2023-08-28T21:58:30+02:00
d/rules: instruct blhc about the missing flags.

- - - - -
fb0b1f8c by Étienne Mollier at 2023-08-28T21:59:07+02:00
d/lintian-overrides: override hardening flags.

- - - - -
895869d7 by Étienne Mollier at 2023-08-28T22:14:40+02:00
ready for upload to unstable

- - - - -


3 changed files:

- debian/changelog
- + debian/lintian-overrides
- debian/rules


Changes:

=====================================
debian/changelog
=====================================
@@ -1,3 +1,14 @@
+parsinsert (1.04-14) unstable; urgency=medium
+
+  * d/rules: disable hardening and enforce -fPIE.
+    This fixes parsinsert self-test failures when a number of optimization
+    options are applied (e.g. -O2, -O3, LTO) once and for all hopefully;
+    there have been more than one bug of this kind. (Closes: #964082)
+  * d/rules: instruct blhc about the missing flags.
+  * d/lintian-overrides: override missing hardening flags.
+
+ -- Étienne Mollier <emollier at debian.org>  Mon, 28 Aug 2023 22:14:03 +0200
+
 parsinsert (1.04-13) unstable; urgency=medium
 
   * Team upload.


=====================================
debian/lintian-overrides
=====================================
@@ -0,0 +1,4 @@
+# Hardening is disabled in favor of allowing a working build with compiler
+# optimizations; see #964082.
+parsinsert: hardening-no-bindnow [usr/bin/parsinsert]
+parsinsert: hardening-no-fortify-functions [usr/bin/parsinsert]


=====================================
debian/rules
=====================================
@@ -1,18 +1,16 @@
 #!/usr/bin/make -f
 
-# Uncomment this to turn on verbose mode.
-#export DH_VERBOSE=1
-export DEB_BUILD_MAINT_OPTIONS = hardening=+all optimize=-lto
-
-# Trade performances for correctess of result on all architectures; yes, I'm
-# afraid performances are impeded, but wrong results do not serve anything.  :(
-# See bugs #964082, #973789, #976929, and finally #1037816.
-export DEB_CXXFLAGS_MAINT_APPEND = -O1
+# Hardening and lack of position independent executable are causing a number of
+# errors in parsinsert results when a number of compiler optimizations are
+# active.  See #964082 for further details on the issue.
+export DEB_BUILD_MAINT_OPTIONS = hardening=-all
+export DEB_CXXFLAGS_MAINT_APPEND = -fPIE
 
 %:
 	dh $@
 
 override_dh_auto_build:
+	@ echo 'blhc: ignore-line-regexp: ^g\+\+ .* -fPIE.*$$'
 	dh_auto_build
 	mv ParsInsert parsinsert
 



View it on GitLab: https://salsa.debian.org/med-team/parsinsert/-/compare/89bf1cdab62a098dde54b889b8e89546149b910e...895869d75e11e2a2ce9ccfec8fc1291214b06a9a

-- 
View it on GitLab: https://salsa.debian.org/med-team/parsinsert/-/compare/89bf1cdab62a098dde54b889b8e89546149b910e...895869d75e11e2a2ce9ccfec8fc1291214b06a9a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-med-commit/attachments/20230828/53a7063e/attachment-0001.htm>