Package: mplayer
Version: 2:1.0~rc4.dfsg1+svn34540-1
Severity: important
Tags: patch

Please enable hardened build flags through dpkg-buildflags.

Patch attached. The more stringent format string checks
unveiled a missing format string in the streaming code
and the GUI, please contact upstream on these.

Cheers,
        Moritz
diff -aur mplayer-1.0~rc4.dfsg1+svn34540.harden/debian/rules mplayer-1.0~rc4.dfsg1+svn34540/debian/rules
--- mplayer-1.0~rc4.dfsg1+svn34540.harden/debian/rules	2012-01-12 22:22:22.000000000 +0100
+++ mplayer-1.0~rc4.dfsg1+svn34540/debian/rules	2012-01-30 22:30:39.000000000 +0100
@@ -27,6 +27,9 @@
 UPSTREAM_VERSION := $(shell echo $(DEB_VERSION) | sed -r 's/[^:]+://; s/-[^-]+$$//')
 SVN_VERSION := $(shell echo $(UPSTREAM_VERSION) | sed -nr 's/^[0-9.:-~]+\+svn([0-9]+)$$/\1/p')
 
+CFLAGS = `dpkg-buildflags --get CFLAGS`
+CFLAGS += `dpkg-buildflags --get CPPFLAGS`
+LDFLAGS = `dpkg-buildflags --get LDFLAGS`
 
 DEB_HOST_GNU_TYPE   ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE)
 DEB_BUILD_GNU_TYPE  ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE)
@@ -48,6 +51,8 @@
 	--disable-libdvdcss-internal \
 	--disable-libmpeg2-internal \
 	--disable-ffmpeg_a \
+	--extra-cflags="${CFLAGS}" \
+	--extra-ldflags="${LDFLAGS}" \
 	$(archconf)
 
 ifeq ($(DEB_HOST_ARCH),i386)
Nur in mplayer-1.0~rc4.dfsg1+svn34540/debian: rules~.

Reply via email to