[Pkg-javascript-devel] Bug#678563: nodejs-dev: node-waf ignores LINKFLAGS (e.g. to enable security hardening LDFLAGS)

[Jonas Smedegaard]

Package: nodejs-dev
Version: 0.6.19~dfsg1-2
Severity: important
Tags: security

node-waf is a wrapper around waf.

waf supports passing LDFLAGS with the LINKFLAGS environment variable.

node-waf ignores LINKFLAGS, and also ignore LDFLAGS stuffed into CFLAGS
or CXXFLAGS, which means no way to enable security hardening flags.

Raising severity as building with hardening flags is a release goal.


 - Jonas