FTBFS if "-Werror=format-security" flag is used

mrnuke mr.nuke.me at gmail.com
Thu Dec 5 14:37:14 UTC 2013


On 12/05/2013 07:38 AM, Ralf Corsepius wrote:
> As I see it, GCC's -Wformat-security is too unreliable to be used in
> production. It certainly diagnoses valid security leaks in some cases,
> but all it does in other cases is to enforce stylishness to work outs
> GCC's limitations. I.e. in these case it effectively only causes churn.
> 
> I.e. I see sense in adding it to %optflags as a warning (-W...), but
> raising this warning to an error (-Werror=...) at this point in time
> qualifies as not helpful.
> 
+1


More information about the devel mailing list