Merge remote-tracking branch 'upstream/hardened-stdenv' into hardened-stdenv

pkgs/applications/science/math/qalculate-gtk/default.nix

@@ -1,4 +1,5 @@
 { stdenv, fetchurl, intltool, autoreconfHook, pkgconfig, libqalculate, gtk3, wrapGAppsHook }:
+
 stdenv.mkDerivation rec {
   name = "qalculate-gtk-${version}";
   version = "0.9.8";

pkgs/development/interpreters/supercollider/default.nix

@@ -40,5 +40,5 @@ stdenv.mkDerivation rec {
 
   buildInputs = [
     gcc ljack2 libsndfile fftw curl libXt qt readline ]
-    ++ optional useSCEL emacs;
+      ++ optional useSCEL emacs;
 }

pkgs/development/libraries/science/math/atlas/default.nix

@@ -66,6 +66,8 @@ stdenv.mkDerivation {
   patches = optional tolerateCpuTimingInaccuracy ./disable-timing-accuracy-check.patch
     ++ optional stdenv.isDarwin ./tmpdir.patch;
 
+  hardeningDisable = [ "format" ];
+
   # Configure outside of the source directory.
   preConfigure = ''
     mkdir build
@@ -76,7 +78,6 @@ stdenv.mkDerivation {
   # * -t 0 disables use of multi-threading. It's not quite clear what the
   #   consequences of that setting are and whether it's necessary or not.
   configureFlags = [
-    "-Fa alg"
     "-t ${threads}"
     cpuConfig
   ] ++ optional shared "--shared"