[med-svn] [Git][med-team/dextractor][master] 8 commits: d/rules: activate binaries hardening.

Étienne Mollier (@emollier) gitlab at salsa.debian.org
Thu Nov 20 20:34:54 GMT 2025



Étienne Mollier pushed to branch master at Debian Med / dextractor


Commits:
d104872b by Étienne Mollier at 2025-11-20T21:30:05+01:00
d/rules: activate binaries hardening.

- - - - -
738b46e0 by Étienne Mollier at 2025-11-20T21:30:34+01:00
build-flags.patch: new: propagate build flags.

Closes: #1119391

- - - - -
36400f5e by Étienne Mollier at 2025-11-20T21:31:00+01:00
d/watch: convert to v5 Github template.

- - - - -
87d87dec by Étienne Mollier at 2025-11-20T21:31:18+01:00
d/control: drop redundant Rules-Requires-Root: no.

- - - - -
10b991ef by Étienne Mollier at 2025-11-20T21:32:11+01:00
build-flags.patch: fix typo caught by lintian.

Gbp-Dch: ignore

- - - - -
5df48baf by Étienne Mollier at 2025-11-20T21:32:40+01:00
d/control: declare compliance to standards version 4.7.2.

- - - - -
5c457df9 by Étienne Mollier at 2025-11-20T21:33:06+01:00
d/control: add myself to uploaders.

- - - - -
b1bd7ee6 by Étienne Mollier at 2025-11-20T21:34:27+01:00
d/changelog: ready for upload to unstable.

- - - - -


6 changed files:

- debian/changelog
- debian/control
- + debian/patches/build-flags.patch
- debian/patches/series
- debian/rules
- debian/watch


Changes:

=====================================
debian/changelog
=====================================
@@ -1,3 +1,14 @@
+dextractor (1.0-7) unstable; urgency=medium
+
+  * d/rules: activate binaries hardening.
+  * build-flags.patch: new: propagate build flags. (Closes: #1119391)
+  * d/watch: convert to v5 Github template.
+  * d/control: drop redundant Rules-Requires-Root: no.
+  * d/control: declare compliance to standards version 4.7.2.
+  * d/control: add myself to uploaders.
+
+ -- Étienne Mollier <emollier at debian.org>  Thu, 20 Nov 2025 21:33:24 +0100
+
 dextractor (1.0-6) unstable; urgency=medium
 
   * Team upload.


=====================================
debian/control
=====================================
@@ -1,15 +1,15 @@
 Source: dextractor
 Maintainer: Debian Med Packaging Team <debian-med-packaging at lists.alioth.debian.org>
-Uploaders: Shayan Doust <hello at shayandoust.me>
+Uploaders: Shayan Doust <hello at shayandoust.me>,
+           Étienne Mollier <emollier at debian.org>
 Section: science
 Priority: optional
 Build-Depends: debhelper-compat (= 13),
                libhdf5-dev
-Standards-Version: 4.6.1
+Standards-Version: 4.7.2
 Vcs-Browser: https://salsa.debian.org/med-team/dextractor
 Vcs-Git: https://salsa.debian.org/med-team/dextractor.git
 Homepage: https://github.com/thegenemyers/DEXTRACTOR
-Rules-Requires-Root: no
 
 Package: dextractor
 Architecture: any


=====================================
debian/patches/build-flags.patch
=====================================
@@ -0,0 +1,41 @@
+Description: propagate Debian build flags.
+ This is needed for a number of things: debug information, system
+ optimisations and executable hardening.
+Author: Étienne Mollier <emollier at debian.org>
+Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1119391
+Forwarded: no
+Last-Update: 2025-11-20
+---
+This patch header follows DEP-3: http://dep.debian.net/deps/dep3/
+--- dextractor.orig/Makefile
++++ dextractor/Makefile
+@@ -1,23 +1,23 @@
+-CFLAGS = -g -O3 -Wall -Wextra -fno-strict-aliasing
++CFLAGS += -g -O3 -Wall -Wextra -fno-strict-aliasing
+ MACHINE_ARCH := $(shell echo `uname -m`)
+ 
+ all: dextract dexta undexta dexqv undexqv
+ 
+ dextract: dextract.c DB.c DB.h QV.c QV.h
+ 	#gcc $(CFLAGS) -I/usr/include/hdf5/serial/ -L/usr/lib/${MACHINE_ARCH}-linux-gnu/hdf5/serial/ -o dextract dextract.c DB.c QV.c -lhdf5
+-	$(CC) $(CFLAGS) $(ARGS) -o dextract dextract.c DB.c QV.c -lhdf5
++	$(CC) $(CPPFLAGS) $(CFLAGS) $(ARGS) -o dextract dextract.c DB.c QV.c -lhdf5 $(LDFLAGS)
+ 
+ dexta: dexta.c DB.c DB.h QV.c QV.h
+-	$(CC) $(CFLAGS) -o dexta dexta.c DB.c QV.c
++	$(CC) $(CPPFLAGS) $(CFLAGS) -o dexta dexta.c DB.c QV.c $(LDFLAGS)
+ 
+ undexta: undexta.c DB.c DB.h QV.c QV.h
+-	$(CC) $(CFLAGS) -o undexta undexta.c DB.c QV.c
++	$(CC) $(CPPFLAGS) $(CFLAGS) -o undexta undexta.c DB.c QV.c $(LDFLAGS)
+ 
+ dexqv: dexqv.c DB.c DB.h QV.c QV.h
+-	$(CC) $(CFLAGS) -o dexqv dexqv.c DB.c QV.c
++	$(CC) $(CPPFLAGS) $(CFLAGS) -o dexqv dexqv.c DB.c QV.c $(LDFLAGS)
+ 
+ undexqv: undexqv.c DB.c DB.h QV.c QV.h
+-	$(CC) $(CFLAGS) -o undexqv undexqv.c DB.c QV.c
++	$(CC) $(CPPFLAGS) $(CFLAGS) -o undexqv undexqv.c DB.c QV.c $(LDFLAGS)
+ 
+ clean:
+ 	rm -f dextract dexta undexta dexqv undexqv dextract.tar.gz


=====================================
debian/patches/series
=====================================
@@ -1,2 +1,3 @@
 use_system_packaged_libhdf5-dev.patch
 cross.patch
+build-flags.patch


=====================================
debian/rules
=====================================
@@ -1,11 +1,8 @@
 #!/usr/bin/make -f
 
-# DH_VERBOSE := 1
 export LC_ALL=C.UTF-8
-
 include /usr/share/dpkg/default.mk
-
-
+export DEB_BUILD_MAINT_OPTIONS=hardening=+all
 
 %:
 	dh $@


=====================================
debian/watch
=====================================
@@ -1,4 +1,5 @@
-version=4
+Version: 5
 
-opts="filenamemangle=s%(?:.*?)?v?(\d[\d.]*)\.tar\.gz%@PACKAGE at -$1.tar.gz%" \
-  https://github.com/thegenemyers/DEXTRACTOR/tags .*/V?@ANY_VERSION@\.tar\.gz
+Template: Github
+Owner: thegenemyers
+Project: DEXTRACTOR



View it on GitLab: https://salsa.debian.org/med-team/dextractor/-/compare/0f603f2df07b085333acf3c89b4efe44fcffd27c...b1bd7ee6d90c1e5e580b9ed8237f42ed381ca7ac

-- 
View it on GitLab: https://salsa.debian.org/med-team/dextractor/-/compare/0f603f2df07b085333acf3c89b4efe44fcffd27c...b1bd7ee6d90c1e5e580b9ed8237f42ed381ca7ac
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-med-commit/attachments/20251120/6b49a513/attachment-0001.htm>


More information about the debian-med-commit mailing list