← Back to team overview

cuneiform team mailing list archive

[Bug 520867] Re: Build-error with CFLAG "-Werror=format-security"

 

You mean revision #462 - change of file:
cuneiform_src/Kern/rpstr/src/rpstr.c  ??

No, applying this to the source doesn't change too much. Build actually breaks here:
...
...
...
Scanning dependencies of target std32
[ 11%] Building CXX object cuneiform_src/Kern/std/CMakeFiles/std32.dir/src/std.cpp.o
[ 11%] Building CXX object cuneiform_src/Kern/std/CMakeFiles/std32.dir/src/stdassrt.cpp.o
[ 11%] Building CXX object cuneiform_src/Kern/std/CMakeFiles/std32.dir/src/stdbits.cpp.o
[ 12%] Building CXX object cuneiform_src/Kern/std/CMakeFiles/std32.dir/src/stdconsl.cpp.o
/home/maxipunkt/rpm/BUILD/cuneiform-linux-0.9.0/cuneiform_src/Kern/std/src/stdconsl.cpp: In function »int stdConsole(const char*, ...)«:
/home/maxipunkt/rpm/BUILD/cuneiform-linux-0.9.0/cuneiform_src/Kern/std/src/stdconsl.cpp:117: Fehler: Format ist kein Zeichenkettenliteral, und keine Formatargumente
/home/maxipunkt/rpm/BUILD/cuneiform-linux-0.9.0/cuneiform_src/Kern/std/src/stdconsl.cpp: In function »int stdConsole_(const char*, ...)«:
/home/maxipunkt/rpm/BUILD/cuneiform-linux-0.9.0/cuneiform_src/Kern/std/src/stdconsl.cpp:154: Fehler: Format ist kein Zeichenkettenliteral, und keine Formatargumente
make[2]: *** [cuneiform_src/Kern/std/CMakeFiles/std32.dir/src/stdconsl.cpp.o] Fehler 1
make[1]: *** [cuneiform_src/Kern/std/CMakeFiles/std32.dir/all] Fehler 2
make: *** [all] Fehler 2


I also guess there more than one files involved in this "-Werror=format-security" issue.

-- 
Build-error with CFLAG "-Werror=format-security"
https://bugs.launchpad.net/bugs/520867
You received this bug notification because you are a member of Cuneiform
Linux, which is a direct subscriber.

Status in Linux port of Cuneiform: Fix Committed

Bug description:
As already mentioned in an old bug (#362224, comment #16), cuneiform has issues with the CFLAG mentioned above which is used by default with Mandriva's %cmake-macro.

Setting this CFLAG leads in several build-errors ("format not a string literal and no format arguments") and the build breaks.

If I disable this CFLAG the source does compile fine.
But this could also be a security issue then, because this CFLAG is used by default to prevent possible format strings-attacks.





References