Package: mplayer2 Version: 2.0-426-gc32b3ed-2 Severity: important Tags: patch
Please enable hardened build flags through dpkg-buildflags. Patch attached. The more stringent format string checks unveiled a missing format string in the streaming code, please contact upstream on that one. Cheers, Moritz
diff -aur mplayer2-2.0-426-gc32b3ed.harden/debian/rules mplayer2-2.0-426-gc32b3ed/debian/rules --- mplayer2-2.0-426-gc32b3ed.harden/debian/rules 2012-01-05 18:00:37.000000000 +0100 +++ mplayer2-2.0-426-gc32b3ed/debian/rules 2012-01-30 22:14:06.000000000 +0100 @@ -12,10 +12,16 @@ endif endif +CFLAGS = `dpkg-buildflags --get CFLAGS` +CFLAGS += `dpkg-buildflags --get CPPFLAGS` +LDFLAGS = `dpkg-buildflags --get LDFLAGS` + confflags := --prefix=/usr \ --confdir=/etc/mplayer \ --enable-translation \ --disable-svga \ + --extra-cflags="${CFLAGS}" \ + --extra-ldflags="${LDFLAGS}" \ --enable-debug=3 # runtime cpu detection works on x86 and ppc only. These checks also work on kfreebsd!
_______________________________________________ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers