pkg/50975: security/tor-browser is built without -pie

[alnsn%yandex.ru@localhost]

>Number:         50975
>Category:       pkg
>Synopsis:       security/tor-browser is built without -pie
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Mar 17 23:40:00 +0000 2016
>Originator:     Alexander Nasonov
>Release:        NetBSD-current
>Organization:
none
>Environment:
NetBSD neva 7.99.26 NetBSD 7.99.26 (GENERIC) #1: Wed Mar  9 21:48:31 UTC 2016  alnsn@neva:/home/alnsn/netbsd-current/obj/sys/arch/amd64/compile/GENERIC amd64

>Description:
www/firefox is built as a PIE executable but security/tor-browser isn't.
>How-To-Repeat:
readelf -h /usr/pkg/bin/tor-brower | grep Type:
>Fix:
Add

CONFIGURE_ARGS+= --enable-pie

to Makefile or to www/firefox38/mozilla-common.mk.

I don't know if it may lead to failures on some platforms.