From b02d4b6e386b0e6c02ede532f06ccf615e8b72c5 Mon Sep 17 00:00:00 2001 From: Benjamin Barenblat Date: Sat, 30 May 2020 15:38:23 -0400 Subject: Use -D_FORTIFY_SOURCE=1 instead of 2 Prevent major performance regressions by forcing -D_FORTIFY_SOURCE=1 instead of -D_FORTIFY_SOURCE=2. See https://bugs.debian.org/934722 for details. --- debian/rules | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'debian/rules') diff --git a/debian/rules b/debian/rules index a7ae92ed..43395a92 100755 --- a/debian/rules +++ b/debian/rules @@ -11,6 +11,10 @@ export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed # arm64 and mips64el. See https://bugs.debian.org/871572 for details. export DEB_CFLAGS_MAINT_APPEND := -fno-code-hoisting +# Use -D_FORTIFY_SOURCE=1 instead of -D_FORTIFY_SOURCE=2 to prevent performance +# problems with %n specifiers. See https://bugs.debian.org/934722 for details. +export DEB_CPPFLAGS_MAINT_APPEND := -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=1 + # Harden SML executables. export DEB_BUILD_MAINT_OPTIONS := hardening=+all export MLTONARGS := \ -- cgit v1.2.3