[Pkg-opt-media-team] Bug#1070653: cdparanoia: Please build with hardening flags

[Emanuele Rocca]

Source: cdparanoia
Version: 3.10.2+debian-14
Tags: patch
User: debian-arm at lists.debian.org
Usertags: pac-bti

Dear Maintainer,

Whilst trying to figure out why a rebuild of cdparanoia on arm64 does
not fully enable BTI [1] I have noticed that the program is built
without hardening flags on. Please consider the attached patch.

Thanks,
  Emanuele

[1] https://wiki.debian.org/ToolChain/PACBTI
-------------- next part --------------
diff -Nru cdparanoia-3.10.2+debian/debian/changelog cdparanoia-3.10.2+debian/debian/changelog
--- cdparanoia-3.10.2+debian/debian/changelog	2021-03-13 05:58:25.000000000 +0100
+++ cdparanoia-3.10.2+debian/debian/changelog	2024-02-28 10:55:16.000000000 +0100
@@ -1,3 +1,10 @@
+cdparanoia (3.10.2+debian-15) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * Build with hardening flags, except for format.
+
+ -- Emanuele Rocca <ema at debian.org>  Mon, 06 May 2024 17:42:04 +0200
+
 cdparanoia (3.10.2+debian-14) unstable; urgency=medium
 
   [ Debian Janitor ]
diff -Nru cdparanoia-3.10.2+debian/debian/rules cdparanoia-3.10.2+debian/debian/rules
--- cdparanoia-3.10.2+debian/debian/rules	2021-03-13 05:58:25.000000000 +0100
+++ cdparanoia-3.10.2+debian/debian/rules	2024-02-28 10:55:16.000000000 +0100
@@ -1,5 +1,10 @@
 #!/usr/bin/make -f
 
+# cdparanoia FTBFS with -Werror=format-security 
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all,-format
+
+include /usr/share/dpkg/buildflags.mk
+
 export CFLAGS += -fPIC -g
 export LDFLAGS += -fPIC