debugging get's enabled also with --disable-debug
Brought to you by:
cinergi
Menu
▾
▴
#15 debugging get's enabled also with --disable-debug
Due to a bug in the configure-script, --disable-debug also enables debugging.
This can lead to a security issue as debugging leaks information to a file in /tmp. This is documented, so it generally isn't a problem, but as this configure-bug can cause debugging to be enabled when the user explicitely wants to disable it, I consider this a security threat. I've assigned CVE-2010-1483 to this issue.
patch to fix --en/disable-debug in configure.in