Bug#859464: unblock: libhdf4/4.2.12-2

[Bas Couwenberg]

Package: release.debian.org
Severity: normal
User: release.debian.org at packages.debian.org
Usertags: unblock

Please unblock package libhdf4

It fixes #859413 by enabling the PIE hardening buildflags.

unblock libhdf4/4.2.12-2

Kind Regards,

Bas
-------------- next part --------------
diff -Nru libhdf4-4.2.12/debian/changelog libhdf4-4.2.12/debian/changelog
--- libhdf4-4.2.12/debian/changelog	2016-07-06 17:35:44.000000000 +0200
+++ libhdf4-4.2.12/debian/changelog	2017-04-03 14:28:06.000000000 +0200
@@ -1,3 +1,12 @@
+libhdf4 (4.2.12-2) unstable; urgency=medium
+
+  * Team upload.
+  * Enable PIE hardening flags.
+    (closes: #859413)
+  * Drop unused lintian overrides for hardening-no-pie.
+
+ -- Bas Couwenberg <sebastic at debian.org>  Mon, 03 Apr 2017 14:28:06 +0200
+
 libhdf4 (4.2.12-1) unstable; urgency=medium
 
   * Team upload.
diff -Nru libhdf4-4.2.12/debian/hdf4-tools.lintian-overrides libhdf4-4.2.12/debian/hdf4-tools.lintian-overrides
--- libhdf4-4.2.12/debian/hdf4-tools.lintian-overrides	2016-05-20 18:11:05.000000000 +0200
+++ libhdf4-4.2.12/debian/hdf4-tools.lintian-overrides	1970-01-01 01:00:00.000000000 +0100
@@ -1,3 +0,0 @@
-# PIE breaks the build
-hdf4-tools: hardening-no-pie *
-
diff -Nru libhdf4-4.2.12/debian/rules libhdf4-4.2.12/debian/rules
--- libhdf4-4.2.12/debian/rules	2016-06-30 23:28:39.000000000 +0200
+++ libhdf4-4.2.12/debian/rules	2017-04-03 14:26:02.000000000 +0200
@@ -6,7 +6,7 @@
 #
 
 # Enable hardening build flags
-export DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie
+export DEB_BUILD_MAINT_OPTIONS=hardening=+all
 
 DEB_HOST_ARCH ?= $(shell dpkg-architecture -qDEB_HOST_ARCH)
 
@@ -24,9 +24,9 @@
 CXX  := g++
 LIBS := -ljpeg -lz -lm
 
-CFLAGS  = $(shell DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie dpkg-buildflags --get CFLAGS)
-CFLAGS += $(shell DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie dpkg-buildflags --get CPPFLAGS)
-LDFLAGS = $(shell DEB_BUILD_MAINT_OPTIONS=hardening=+all,-pie dpkg-buildflags --get LDFLAGS)
+CFLAGS  = $(shell DEB_BUILD_MAINT_OPTIONS=hardening=+all dpkg-buildflags --get CFLAGS)
+CFLAGS += $(shell DEB_BUILD_MAINT_OPTIONS=hardening=+all dpkg-buildflags --get CPPFLAGS)
+LDFLAGS = $(shell DEB_BUILD_MAINT_OPTIONS=hardening=+all dpkg-buildflags --get LDFLAGS)
 
 ifneq (,$(findstring verbose,$(DEB_BUILD_OPTIONS)))
    DH_VERBOSE=1