Bug#657853: Building perl with hardened build flags

Niko Tyni ntyni at debian.org
Wed Feb 8 07:46:22 UTC 2012


On Tue, Feb 07, 2012 at 10:13:58PM +0000, Dominic Hargreaves wrote:
> On Tue, Feb 07, 2012 at 08:48:12PM +0000, Dominic Hargreaves wrote:
> > I've just kicked off a test rebuild of all CPAN 
> > modules in Debian with the perl from experimental, to try and catch any
> > severe breakage introduced by this.
> 
> Early indications from my rebuilds indicate that we will have some
> new FTBFS bugs with
> 
> -Wformat-security -Werror=format-security

I suspect we need to patch ExtUtils::CBuilder to invoke dpkg-buildflags
at XS module build time rather than blindly use $Config{ccflags} from
perl. That way XS module packages can disable some hardening flags if
necessary.

No idea how to do that yet :)
-- 
Niko






More information about the Perl-maintainers mailing list