Bug#657853: Please enable hardened build flags

[Dominic Hargreaves]

On Mon, Feb 06, 2012 at 06:47:57PM +0200, Niko Tyni wrote:
> On Mon, Feb 06, 2012 at 08:55:25AM +0200, Niko Tyni wrote:
> > On Sun, Feb 05, 2012 at 10:28:55PM +0000, Dominic Hargreaves wrote:
> > > On Sun, Feb 05, 2012 at 08:44:15PM +0200, Niko Tyni wrote:
> > > > On Sun, Jan 29, 2012 at 02:02:31PM +0100, Moritz Muehlenhoff wrote:
> > > > > Package: perl
> > > > > Version: 5.14.2-6
> > > > > Severity: important
> > > > > 
> > > > > Please enable hardened build flags through dpkg-buildflags.
> > > > 
> > > > While perl builds fine on amd64 with the attached patch, I'm slightly
> > > > uneasy about pushing it to unstable without wider testing.
> > > 
> > > Have you verified the output from hardening-flags before and after,
> > > both of perl and of a sample XS module (I used libimager-perl as a test).
> > 
> > No - I just checked the build log, $Config{ccflags} and the like.
> > 
> > Will do that when I have the time.
> 
> Looks good to me FWIW:

Cool.

I'm preparing a fix for #656869 which I wouldn't mind getting a bit
of exposure in experimental, at least for the test suite on different
archs. Shall we aim to do such a build quite soon? Are you happy for
your other changes in -8 to be delayed a bit via experimental, keeping
a linear history?

Cheers,
Dominic.

-- 
Dominic Hargreaves | http://www.larted.org.uk/~dom/
PGP key 5178E2A5 from the.earth.li (keyserver,web,email)