<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On 24 June 2016 at 11:59, André Draszik <span dir="ltr"><<a href="mailto:git@andred.net" target="_blank">git@andred.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div id=":9mb" class="a3s aXjCH m1558210ba318f2cf">../../libidn-1.32/src/idn.c: In function 'main':<br>
../../libidn-1.32/src/idn.c:172:7: error: format not a string literal and no format arguments [-Werror=format-security]<br>
error (0, 0, _("only one of -s, -e, -d, -a, -u or -n can be specified"));</div></blockquote></div><br>As libidn will be dealing with data from the network it seems like the sort of package that should be built with format-security enabled. Wouldn't it be better to fix up the calls to error() instead?</div><div class="gmail_extra"><br></div><div class="gmail_extra">Ross</div></div>