[Gnash-commit] [SCM] Gnash branch, master, updated. release_0_8_9_final-1500-gb1240b2

[Rob Savoye]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "Gnash".

The branch, master has been updated
       via  b1240b2dea588a108154814bf72dd1c18e0ae347 (commit)
       via  e52c4dfd8e17bc0a5ccf849be18490e1e8065c2c (commit)
       via  d2bfed98255ff88b3be763bf889a59b369e81e4b (commit)
      from  6528395caa1c460d80933b7461e805d97b02921c (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
http://git.savannah.gnu.org/cgit//commit/?id=b1240b2dea588a108154814bf72dd1c18e0ae347


commit b1240b2dea588a108154814bf72dd1c18e0ae347
Author: Rob Savoye <address@hidden>
Date:   Tue Jul 3 10:19:31 2012 -0600

    add CPPFLAGS too

diff --git a/configure.ac b/configure.ac
index f96ded6..f3b1ac1 100644
--- a/configure.ac
+++ b/configure.ac
@@ -2854,8 +2854,7 @@ AC_ARG_ENABLE([harden],
 )
 
 if test x"$harden" = x"yes"; then
-   dnl -D_FORTIFY_SOURCE=2
- full debian hardening is this one:
+    CPPFLAGS="${CPPFLAGS} -D_FORTIFY_SOURCE=2"
     CXXFLAGS="${CXXFLAGS} -fPIE -fstack-protector --param ssp-buffer-size=4 
-Wformat -Werror=format-security"
     LDFLAGS="${LDFLAGS} -fPIE -pie -Wl,-z,relro -Wl,-z,now"
 fi

http://git.savannah.gnu.org/cgit//commit/?id=e52c4dfd8e17bc0a5ccf849be18490e1e8065c2c


commit e52c4dfd8e17bc0a5ccf849be18490e1e8065c2c
Author: Rob Savoye <address@hidden>
Date:   Tue Jul 3 09:02:44 2012 -0600

    add al lthe Debian hardening flags

diff --git a/configure.ac b/configure.ac
index 6f9c878..f96ded6 100644
--- a/configure.ac
+++ b/configure.ac
@@ -2855,7 +2855,9 @@ AC_ARG_ENABLE([harden],
 
 if test x"$harden" = x"yes"; then
    dnl -D_FORTIFY_SOURCE=2
-    CXXFLAGS="${CXXFLAGS} -fpie -fPIE -fstack-protector --param 
ssp-buffer-size=4 "
+ full debian hardening is this one:
+    CXXFLAGS="${CXXFLAGS} -fPIE -fstack-protector --param ssp-buffer-size=4 
-Wformat -Werror=format-security"
+    LDFLAGS="${LDFLAGS} -fPIE -pie -Wl,-z,relro -Wl,-z,now"
 fi
 
 dnl Define convenience constants so Gnash can print out the

http://git.savannah.gnu.org/cgit//commit/?id=d2bfed98255ff88b3be763bf889a59b369e81e4b


commit d2bfed98255ff88b3be763bf889a59b369e81e4b
Author: Rob Savoye <address@hidden>
Date:   Sun Jul 1 12:58:46 2012 -0600

    add hardening flags as an option, the default it to harden

diff --git a/configure.ac b/configure.ac
index 0f999be..6f9c878 100644
--- a/configure.ac
+++ b/configure.ac
@@ -2843,6 +2843,21 @@ if test x"$ac_cv_gcc_visibility" = xyes -a 
x"$enable_visibility" != xno; then
   CXXFLAGS="$CXXFLAGS -fvisibility=hidden"
 fi
 
+AC_ARG_ENABLE([harden],
+  AC_HELP_STRING([--disable-harden],[Disable hardening]),
+  [case "${enableval}" in
+    yes) harden=yes ;;
+    no)  harden=no ;;
+    *) AC_MSG_ERROR([bad value ${enableval} for --enable-harden option]) ;;
+  esac],
+  [harden=yes]
+)
+
+if test x"$harden" = x"yes"; then
+   dnl -D_FORTIFY_SOURCE=2
+    CXXFLAGS="${CXXFLAGS} -fpie -fPIE -fstack-protector --param 
ssp-buffer-size=4 "
+fi
+
 dnl Define convenience constants so Gnash can print out the
 dnl default configuration of the build.
 RENDERER_CONFIG="${renderer_list}"

-----------------------------------------------------------------------

Summary of changes:
 configure.ac |   16 ++++++++++++++++
 1 files changed, 16 insertions(+), 0 deletions(-)


hooks/post-receive
-- 
Gnash