Security: Format string is not a string literal - Rebuild of the Debian archive with clang

"Security: Format string is not a string literal" build failure(s)
clang 5.0

The following code builds without any issue with gcc and fails with clang:

#include <stdio.h>

void foo(void) {
    char buffer[1024];
    sprintf(buffer, "%n", 2);
}

gcc -Werror -c foo.c
clang -Werror -c foo.c

Versions: 2.9 - 3.0 - 3.1 - 3.2 - 3.3 - 3.4 - 3.4.2 - 3.5.0 - 3.6.0 - 3.8.1 - 3.9.1 - 4.0.1 - 5.0 - 6.0 - 8.0.1 - 9.0.1 - 10.0.0 - 11.0.0 - 12.0.1 - 13.0.0

Package	Version	Supposed error message	Full log
anjuta	2:3.22.0-3	anjuta-status.c:215:30: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
brasero	3.12.1-4	brasero-misc.c:115:11: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
cheese	3.22.1-1	src/cheese-window.c:619:162: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
cpl-plugin-amber	4.3.7+dfsg-1	amber_ascii_export.c:497:23: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
cpl-plugin-xshoo	2.9.3+dfsg-1	xsh_model_io.c:691:35: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
cronutils	1.9-1	runstat.c:79:31: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
evince	3.22.1-4	synctex_parser_utils.c:106:29: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
ghex	3.18.3-1	chartable.c:193:28: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
gitg	3.23.0-1	gitg-diff-image-side-by-side.vala:48:30: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
gmsh	2.15.0+dfsg1-3	MeshOpt.cpp:164:34: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
gnome-chess	1:3.22.2-2	gnome-chess.c:4835:134: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
gnome-nibbles	1:3.22.2.2-1	preferences-dialog.c:918:151: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
gnome-online-accounts	3.22.5-1	goakerberosidentity.c:344:39: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
gnome-pie	0.7.1-1	pieOptionsWindow.c:890:187: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
gnome-screensaver	3.6.1-7	gs-listener-dbus.c:362:39: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
gnome-sudoku	1:3.22.2-1	sudoku-printer.c:130:120: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
gnome-tetravex	1:3.22.0-1	gnome-tetravex.c:1165:134: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
gtksourceview2	2.10.5-3	test-widget.c:271:26: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
gtranslator	2.91.7-3	gtr-viewer.c:154:27: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
libbonoboui	2.24.5-4	bonobo-ui-node.c:844:40: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
lxml	3.8.0-1	src/lxml/lxml.etree.c:187536:75: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
msitools	0.97-1	tools/msiextract.c:606:45: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
mutter	3.22.4-2	clutter-main.c:3691:46: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
ncap	1.9.2-2.2	asprintf.c:35:30: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
rcs	5.9.4-3	b-excwho.c:126:15: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
sound-juicer	3.22.1-1	src/sj-main.c:145:32: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
swi-prolog	7.4.2+dfsg-2	ker/goodies.c:1004:30: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
vinagre	3.22.0-1	vinagre/vinagre-utils.c:686:29: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log

28 errors

Return to the list

Debian Package rebuild

Rebuild of the Debian archive with clang