Bug 909093

Summary:	media-libs/svt-av1 redefines _FORTIFY_SOURCE (HARDENED-SYSTEM)
Product:	Gentoo Linux	Reporter:	genBTC
Component:	Current packages	Assignee:	Gentoo Media-video project <media-video>
Status:	UNCONFIRMED ---
Severity:	normal	CC:	jstein
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	svt-av1 build.log

Description genBTC 2023-06-24 19:49:22 UTC

Issue: media-libs/svt-av1-1.4.1 overwrites CFLAGS/CXXFLAGS (HARDENED-SYSTEM).

NOTE:
(HARDENED-SYSTEM) in the summary means that the bug was found on a machine that runs an hardened profile with -D_FORTIFY_SOURCE=3 and -D_GLIBCXX_ASSERTIONS (https://www.gentoo.org/support/news-items/2023-01-01-hardening-fortify-assertions.html) but this bug MAY or MAY NOT BE related to the changes related to 

the package likely has _F_S=2 hardcoded internally:
that flag should be stripped so _F_S=3 can take effect from the gcc spec profile without conflict.

Reproducible: Always

Comment 1 genBTC 2023-06-24 19:50:04 UTC

Created attachment 864584 [details]
svt-av1 build.log

 FORTIFY_SOURCE redefined

Comment 2 genBTC 2023-06-24 19:52:32 UTC

additional info: this has been fixed in 1.5.0-r1
warning exists in 1.4.1 and 1.1.0