FTBFS if "-Werror=format-security" flag is used

Brendan Jones brendan.jones.it at gmail.com
Fri Dec 6 11:25:45 UTC 2013


On 12/06/2013 11:30 AM, Adam Williamson wrote:
> On Fri, 2013-12-06 at 10:37 +0100, Ralf Corsepius wrote:
>> On 12/05/2013 07:43 PM, Jan Lieskovsky wrote:
>>
>>>> From: "Ralf Corsepius"
>>
>>>> Would you mind to explain why you guys are putting such an emphasize on
>>>> -Wformat-security?
>>>
>>> Some possible ways how to look at it:
>>> * because when all reported packages are patched, it would remove one
>>>     whole class of security flaws,
>>
>> Iff the tools being utilized were reliable and if the findings are fixed
>> by skilled people, who really understand what they are doing.
>> Both does NOT APPLY in Fedora. Fedora/RH's GCC produces false diagnoses
>> and the average Fedora packager is not an experienced C-developer.
>
> The intent is not for Fedora packagers to patch problems downstream, it
> is for them to report bugs upstream and have the problems fixed there.
>
What world are you living in? gcc fixes have always been fixed in Fedora 
first.


More information about the devel mailing list