Bug#921136: lintian: hardening-no-fortify-functions possible false positive

[Chris Lamb <lamby@debian.org>]

tags 921136 + moreinfo
thanks

Hi Scott,

> I added some debug to binaries.pm and I determined that it is only finding
> wmemcpy function as not being hardened.

I can confirm this. Yes, it does look like these are some sort of
auto-generated C++ function. However, is there any reason why these
should not be subject to hardening too? If they should, then either
we are missing some kind of compiler/linker flag or perhaps even
these functions are being generated incorrectly (!).

If not, then we need to discover how to detect such functions and
ignore them in this Lintian check.

Ideas...?


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org 🍥 chris-lamb.co.uk
       `-