Security: Format string is not a string literal - Rebuild of the Debian archive with clang

"Security: Format string is not a string literal" build failure(s) — clang 13.0.0

The following code builds without any issue with gcc and fails with clang:

#include <stdio.h>

void foo(void) {
    char buffer[1024];
    sprintf(buffer, "%n", 2);
}

gcc -Werror -c foo.c
clang -Werror -c foo.c

Package	Version	Supposed error message	Full log
anjuta	2:3.34.0-4	anjuta-status.c:215:30: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
brasero	3.12.3-1	gtype.h:661brasero-misc.c:115:11: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
bubblewrap	0.5.0-1	tests/test-utils.c:35:12: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
cpl-plugin-xshoo	3.5.0+dfsg-4	xsh_model_io.c:691:35: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
cronutils	1.9-3	runstat.c:79:31: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
gnome-desktop-testing	2021.1-2	src/gnome-desktop-testing-runner.c:94:31: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
gnome-screensaver	3.6.1-13	gs-listener-dbus.c:362:39: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
kylin-burner	3.0.10-1.1	gmacros.h:1102:37: note: burner-misc.c:116:11: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
muffin	5.0.1-2	clutter-main.c:3719:46: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
ncap	1.9.2-7	asprintf.c:35:30: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
phoc	0.8.0-2	../src/main.c:59:33: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
rcs	5.10.0-2	b-excwho.c:126:15: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
ukwm	1.2.0-1	clutter-main.c:3692:46: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
vinagre	3.22.0-8.1	vinagre/vinagre-utils.c:686:29: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log

14 errors

← Return to the list