Description of problem: There is now a canonical way to disable fortification, see "Fortification level" in the build flags guide: https://src.fedoraproject.org/rpms/redhat-rpm-config/blob/rawhide/f/buildflags.md#source-fortification This way, one doesn't need to mess with RPM_OPT_FLAGS anymore to do this. For Pypy, it seems like this might be a good opportunity to check if _FORTIFY_SOURCE works OK if that's not already been tested before. Otherwise, it would be better to use %undefine _fortify_level to get rid of all fortification flags in one swoop.
On what Fedora releases is %_fortify_level available?
The block of code in spec is unused. it has been removed form pypy3.9+ and will eventually die out when pypy3.8 will be retired once pypy3.10 is introduced. https://src.fedoraproject.org/rpms/pypy3.9/c/70c239aa7011b7fc5973bd54c8010321515efdaa?branch=rawhide
To make your life easier, we can drop the dead code from the spec: https://src.fedoraproject.org/rpms/pypy3.8/pull-request/27
And https://src.fedoraproject.org/rpms/pypy/pull-request/35
Thanks, that should do as well.