diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-14 13:42:30 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-14 13:42:30 +0000 |
commit | 75808db17caf8b960b351e3408e74142f4c85aac (patch) | |
tree | 7989e9c09a4240248bf4658a22208a0a52d991c4 /tags/d/debian-rules-should-not-use-sanitize-all-buildflag.tag | |
parent | Initial commit. (diff) | |
download | lintian-75808db17caf8b960b351e3408e74142f4c85aac.tar.xz lintian-75808db17caf8b960b351e3408e74142f4c85aac.zip |
Adding upstream version 2.117.0.upstream/2.117.0upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'tags/d/debian-rules-should-not-use-sanitize-all-buildflag.tag')
-rw-r--r-- | tags/d/debian-rules-should-not-use-sanitize-all-buildflag.tag | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/tags/d/debian-rules-should-not-use-sanitize-all-buildflag.tag b/tags/d/debian-rules-should-not-use-sanitize-all-buildflag.tag new file mode 100644 index 0000000..9147ffe --- /dev/null +++ b/tags/d/debian-rules-should-not-use-sanitize-all-buildflag.tag @@ -0,0 +1,17 @@ +Tag: debian-rules-should-not-use-sanitize-all-buildflag +Severity: error +Check: debian/rules +Explanation: This package's <code>debian/rules</code> file contains a + <code>DEB_BUILD_MAINT_OPTIONS</code> assignment that enables the + <code>sanitize=+all</code> build flag. + . + This option instructs the compiler to enable options designed to + protect the binary against memory corruptions, memory leaks, use after + free, threading data races, and undefined behavior bugs. + . + However, this options should not be used for production Debian binaries + as they can reduce reliability for conformant code, reduce security or + even functionality. + . + Please remove the reference to <code>sanitize=+all</code>. +See-Also: dpkg-buildflags(1), Bug#895811 |