build with -fno-strict-aliasing use PIC/PIE because SANE-enabled software

is likely to deal with data coming from untrusted sources (client <->
    saned via network)
This commit is contained in:
Nils Philippsen 2010-06-25 15:35:25 +00:00
parent dec6ea9071
commit 00cdd7b9ef

View File

@ -1,7 +1,7 @@
Summary: Scanner access software Summary: Scanner access software
Name: sane-backends Name: sane-backends
Version: 1.0.21 Version: 1.0.21
Release: 2%{?dist} Release: 3%{?dist}
# lib/ is LGPLv2+, backends are GPLv2+ with exceptions # lib/ is LGPLv2+, backends are GPLv2+ with exceptions
# Tools are GPLv2+, docs are public domain # Tools are GPLv2+, docs are public domain
# see LICENSE for details # see LICENSE for details
@ -90,6 +90,10 @@ want to access digital cameras.
%patch100 -p1 -b .automake %patch100 -p1 -b .automake
%build %build
# use PIC/PIE because SANE-enabled software is likely to deal with data coming
# from untrusted sources (client <-> saned via network)
CFLAGS="-fPIC %optflags -fno-strict-aliasing"
LDFLAGS="-pie"
%configure \ %configure \
--with-gphoto2=%{_prefix} \ --with-gphoto2=%{_prefix} \
--with-docdir=%{_docdir}/%{name}-%{version} \ --with-docdir=%{_docdir}/%{name}-%{version} \
@ -158,6 +162,11 @@ rm -rf %{buildroot}
%{_libdir}/pkgconfig/sane-backends.pc %{_libdir}/pkgconfig/sane-backends.pc
%changelog %changelog
* Fri Jun 25 2010 Nils Philippsen <nils@redhat.com> - 1.0.21-3
- build with -fno-strict-aliasing
- use PIC/PIE because SANE-enabled software is likely to deal with data coming
from untrusted sources (client <-> saned via network)
* Mon Jun 07 2010 Nils Philippsen <nils@redhat.com> * Mon Jun 07 2010 Nils Philippsen <nils@redhat.com>
- rectify devel subpackage description - rectify devel subpackage description