[OE-core] [PATCH] security_flags.inc: libidn fails to build w/ -Wformat-security

Burton, Ross ross.burton at intel.com
Mon Jun 27 09:10:40 UTC 2016


On 24 June 2016 at 11:59, André Draszik <git at andred.net> wrote:

> ../../libidn-1.32/src/idn.c: In function 'main':
> ../../libidn-1.32/src/idn.c:172:7: error: format not a string literal and
> no format arguments [-Werror=format-security]
>        error (0, 0, _("only one of -s, -e, -d, -a, -u or -n can be
> specified"));
>

As libidn will be dealing with data from the network it seems like the sort
of package that should be built with format-security enabled.  Wouldn't it
be better to fix up the calls to error() instead?

Ross
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openembedded.org/pipermail/openembedded-core/attachments/20160627/e4144aad/attachment-0002.html>


More information about the Openembedded-core mailing list