Am Sonntag, den 09.11.2014, 01:02 -0500 schrieb Jason Pleau: 
> Thoughts on this patch? I'm not sure how adding --enable-debug fixes
> this, so it could very well lead to other issues.

The -D_FORTIFY_SOURCE=2 hardening option is only effective if the source
is translated with at least optimization level -O1. Debug builds are
built without any compiler optimization, i.e. -O0. Therefore, the
fortify hardening options is simply not applied if you enable debug
builds. So, this is not really curing the issue, but simply avoiding the
code paths that trigger it.

for more information, please see dpkg-buildflags(1).

- Fabian


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to