1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
|
From: Sophie Brun <sophie@kali.org>
Date: Tue, 23 Apr 2024 15:23:01 +0200
Subject: Use distro-wide _FORTIFY_SOURCE
Upstream hardcods the FORTIFY_SOURCE flag in its build-system. Use
distro-wide FORTIFY_SOURCE
Author: florent.jacquet@canonical.com
Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/openvas-scanner/+bug/2058758
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067672
---
CMakeLists.txt | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/CMakeLists.txt b/CMakeLists.txt
index 9dd50d8..e0b86c0 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -201,7 +201,7 @@ if (ENABLE_COVERAGE)
set (COVERAGE_FLAGS "--coverage")
endif (ENABLE_COVERAGE)
-set (HARDENING_FLAGS "-Wformat -Wformat-security -D_FORTIFY_SOURCE=2 -fstack-protector")
+set (HARDENING_FLAGS "-Wformat -Wformat-security -fstack-protector")
set (LINKER_HARDENING_FLAGS "-Wl,-z,relro -Wl,-z,now")
# The "-D_FILE_OFFSET_BITS=64 -DLARGEFILE_SOURCE=1" is necessary for GPGME!
set (GPGME_C_FLAGS "-D_FILE_OFFSET_BITS=64 -DLARGEFILE_SOURCE=1")
|
