FTBFS if "-Werror=format-security" flag is used
Adam Williamson
awilliam at redhat.com
Fri Dec 6 10:30:02 UTC 2013
On Fri, 2013-12-06 at 10:37 +0100, Ralf Corsepius wrote:
> On 12/05/2013 07:43 PM, Jan Lieskovsky wrote:
>
> >> From: "Ralf Corsepius"
>
> >> Would you mind to explain why you guys are putting such an emphasize on
> >> -Wformat-security?
> >
> > Some possible ways how to look at it:
> > * because when all reported packages are patched, it would remove one
> > whole class of security flaws,
>
> Iff the tools being utilized were reliable and if the findings are fixed
> by skilled people, who really understand what they are doing.
> Both does NOT APPLY in Fedora. Fedora/RH's GCC produces false diagnoses
> and the average Fedora packager is not an experienced C-developer.
The intent is not for Fedora packagers to patch problems downstream, it
is for them to report bugs upstream and have the problems fixed there.
--
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Twitter: AdamW_Fedora | XMPP: adamw AT happyassassin . net
http://www.happyassassin.net
More information about the devel
mailing list