initial debian packaging

Makefile

@@ -1,3 +1,19 @@
+## genmkfile - Makefile - version 1.5
+
+## This is a copy.
+## master location:
+## https://github.com/Whonix/genmkfile/blob/master/usr/share/genmkfile/Makefile
+
+GENMKFILE_PATH := $(strip $(wildcard /usr/share/genmkfile))
+GENMKFILE_ROOT_DIR := $(dir $(abspath $(lastword $(MAKEFILE_LIST))))
+
+export GENMKFILE_PATH
+export GENMKFILE_ROOT_DIR
+
+-include $(GENMKFILE_PATH)/makefile-full
+
+## end genmkfile
+
 CONFIG_NATIVE := true
 CONFIG_CXX_ALLOCATOR := true
 CONFIG_UBSAN := false

debian/changelog

@@ -0,0 +1,11 @@
+hardened-malloc (0.9-1) unstable; urgency=medium
+
+  * New upstream version (local package).
+
+ -- Patrick Schleizer <adrelanos@riseup.net>  Sun, 21 Jul 2019 00:19:12 +0000
+
+hardened-malloc (0:0.8-1) unstable; urgency=medium
+
+  * Initial release (local package).
+
+ -- Patrick Schleizer <adrelanos@riseup.net>  Sat, 20 Jul 2019 23:55:32 +0000

debian/compat

@@ -0,0 +1 @@
+12

debian/control

@@ -0,0 +1,28 @@
+## Copyright (C) 2019 - 2019 Patrick Schleizer <adrelanos@riseup.net>
+## See the file COPYING for copying conditions.
+
+Source: hardened-malloc
+Section: misc
+Priority: optional
+Maintainer: Patrick Schleizer <adrelanos@riseup.net>
+Build-Depends: debhelper (>= 12), genmkfile
+Homepage: https://github.com/GrapheneOS/hardened_malloc
+Vcs-Browser: https://github.com/GrapheneOS/hardened_malloc
+Vcs-Git: https://github.com/GrapheneOS/hardened_malloc.git
+Standards-Version: 4.3.0
+
+Package: hardened-malloc
+Architecture: any
+Depends: ${shlibs:Depends}, ${misc:Depends}
+Description: security-focused general purpose memory allocator
+ This is a security-focused general purpose memory allocator providing the
+ malloc API along with various extensions. It provides substantial hardening
+ against heap corruption vulnerabilities. The security-focused design also
+ leads to much less metadata overhead and memory waste from fragmentation than
+ a more traditional allocator design. It aims to provide decent overall
+ performance with a focus on long-term performance and memory usage rather than
+ allocator micro-benchmarks. It offers scalability via a configurable number of
+ entirely independently arenas, with the internal locking within arenas further
+ divided up per size class.
+ .
+ It can be added as a preloaded library using /etc/ld.so.preload.

debian/copyright

@@ -0,0 +1,22 @@
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+
+Files: *
+Copyright: Copyright (c) 2019 Daniel Micay
+License: MIT
+ Permission is hereby granted, free of charge, to any person obtaining a copy
+ of this software and associated documentation files (the "Software"), to deal
+ in the Software without restriction, including without limitation the rights
+ to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ copies of the Software, and to permit persons to whom the Software is
+ furnished to do so, subject to the following conditions:
+ .
+ The above copyright notice and this permission notice shall be included in
+ all copies or substantial portions of the Software.
+ .
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+ THE SOFTWARE.

debian/rules

@@ -0,0 +1,20 @@
+#!/usr/bin/make -f
+
+## Copyright (C) 2016 - 2016 Patrick Schleizer <adrelanos@riseup.net>
+## See the file COPYING for copying conditions.
+
+export DH_VERBOSE=1
+
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+DPKG_EXPORT_BUILDFLAGS = 1
+include /usr/share/dpkg/buildflags.mk
+
+%:
+	dh $@
+
+override_dh_installchangelogs:
+	dh_installchangelogs changelog.upstream upstream
+
+## https://github.com/GrapheneOS/hardened_malloc/issues/85
+override_dh_dwz:
+	/bin/true

debian/source/format

@@ -0,0 +1 @@
+3.0 (quilt)

debian/source/lintian-overrides

@@ -0,0 +1,2 @@
+## https://phabricator.whonix.org/T277
+debian-watch-does-not-check-gpg-signature

debian/watch

@@ -0,0 +1,6 @@
+## Copyright (C) 2012 - 2019 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>
+## See the file COPYING for copying conditions.
+
+version=4
+opts=filenamemangle=s/.+\/v?(\d\S+)\.tar\.gz/hardened_malloc-$1\.tar\.gz/ \
+  https://github.com/Whonix/hardened_malloc/tags .*/v?(\d\S+)\.tar\.gz

make-helper-overrides.bsh

@@ -0,0 +1,15 @@
+#!/bin/bash
+
+## Copyright (C) 2016 - 2016 Patrick Schleizer <adrelanos@riseup.net>
+## See the file COPYING for copying conditions.
+
+make_install_hook_post() {
+   if [ ! -d "$DESTDIR/usr/lib" ]; then
+      mkdir --parents "$DESTDIR/usr/lib"
+   fi
+   cp libhardened_malloc.so "$DESTDIR/usr/lib/libhardened_malloc.so"
+}
+
+make_all_hook_post() {
+   make libhardened_malloc.so
+}