Package: mplayer
Version: 2:1.0~rc4.dfsg1+svn34540-1
Severity: important
Tags: patch
Please enable hardened build flags through dpkg-buildflags.
Patch attached. The more stringent format string checks
unveiled a missing format string in the streaming code
and the GUI, please contact upstream on these.
Cheers,
Moritz
diff -aur mplayer-1.0~rc4.dfsg1+svn34540.harden/debian/rules mplayer-1.0~rc4.dfsg1+svn34540/debian/rules
--- mplayer-1.0~rc4.dfsg1+svn34540.harden/debian/rules 2012-01-12 22:22:22.000000000 +0100
+++ mplayer-1.0~rc4.dfsg1+svn34540/debian/rules 2012-01-30 22:30:39.000000000 +0100
@@ -27,6 +27,9 @@
UPSTREAM_VERSION := $(shell echo $(DEB_VERSION) | sed -r 's/[^:]+://; s/-[^-]+$$//')
SVN_VERSION := $(shell echo $(UPSTREAM_VERSION) | sed -nr 's/^[0-9.:-~]+\+svn([0-9]+)$$/\1/p')
+CFLAGS = `dpkg-buildflags --get CFLAGS`
+CFLAGS += `dpkg-buildflags --get CPPFLAGS`
+LDFLAGS = `dpkg-buildflags --get LDFLAGS`
DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE)
DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE)
@@ -48,6 +51,8 @@
--disable-libdvdcss-internal \
--disable-libmpeg2-internal \
--disable-ffmpeg_a \
+ --extra-cflags="${CFLAGS}" \
+ --extra-ldflags="${LDFLAGS}" \
$(archconf)
ifeq ($(DEB_HOST_ARCH),i386)
Nur in mplayer-1.0~rc4.dfsg1+svn34540/debian: rules~.