Security: Format string is not a string literal - Rebuild of the Debian archive with clang

"Security: Format string is not a string literal" build failure(s) — clang 6.0

The following code builds without any issue with gcc and fails with clang:

#include <stdio.h>

void foo(void) {
    char buffer[1024];
    sprintf(buffer, "%n", 2);
}

gcc -Werror -c foo.c
clang -Werror -c foo.c

Package	Version	Supposed error message	Full log
casync	2+20180321-1	../src/log.c:59:26: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
cpl-plugin-amber	4.3.8+dfsg-1	amber_ascii_export.c:466:23: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
cpl-plugin-xshoo	3.1.0+dfsg-1	xsh_model_io.c:691:35: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
cronutils	1.9-1	runstat.c:79:31: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
fcoe-utils	1.0.31+git20160622.5dfd3e4-2	fcping.c:218:28: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
gmsh	3.0.6+dfsg1-1	MeshOpt.cpp:164:34: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
gtksourceview2	2.10.5-3	test-widget.c:271:26: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
libbonoboui	2.24.5-4	bonobo-ui-node.c:844:40: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
lldpad	1.0.1+git20150824.036e314-2	lldp_dcbx_nl.c:810:17: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
ncap	1.9.2-2.2	asprintf.c:35:30: error: format string is not a string literal [-Werror,-Wformat-nonliteral]	Log
osmo-pcu	0.4.0-3	encoding.cpp:325:30: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
rcs	5.9.4-4	b-excwho.c:126:15: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log
tulip	4.8.0dfsg-2	CoinMessageHandler.cpp:764:26: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]	Log

13 errors

← Return to the list