"Security: Format string is not a string literal" build failure(s)
clang 6.0
The following code builds without any issue with gcc and fails with clang:
#include <stdio.h>
void foo(void) {
char buffer[1024];
sprintf(buffer, "%n", 2);
}
gcc -Werror -c foo.c
clang -Werror -c foo.c
| Package | Version | Supposed error message | Full log |
Bug report |
|---|
| casync | 2+20180321-1 | ../src/log.c:59:26: error: format string is not a string literal [-Werror,-Wformat-nonliteral]
| Log |
|
| cpl-plugin-amber | 4.3.8+dfsg-1 | amber_ascii_export.c:466:23: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]
| Log |
|
| cpl-plugin-xshoo | 3.1.0+dfsg-1 | xsh_model_io.c:691:35: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]
| Log |
|
| cronutils | 1.9-1 | runstat.c:79:31: error: format string is not a string literal [-Werror,-Wformat-nonliteral]
| Log |
|
| fcoe-utils | 1.0.31+git20160622.5dfd3e4-2 | fcping.c:218:28: error: format string is not a string literal [-Werror,-Wformat-nonliteral]
| Log |
|
| gmsh | 3.0.6+dfsg1-1 | MeshOpt.cpp:164:34: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]
| Log |
|
| gtksourceview2 | 2.10.5-3 | test-widget.c:271:26: error: format string is not a string literal [-Werror,-Wformat-nonliteral]
| Log |
|
| libbonoboui | 2.24.5-4 | bonobo-ui-node.c:844:40: error: format string is not a string literal [-Werror,-Wformat-nonliteral]
| Log |
|
| lldpad | 1.0.1+git20150824.036e314-2 | lldp_dcbx_nl.c:810:17: error: format string is not a string literal [-Werror,-Wformat-nonliteral]
| Log |
|
| ncap | 1.9.2-2.2 | asprintf.c:35:30: error: format string is not a string literal [-Werror,-Wformat-nonliteral]
| Log |
|
| osmo-pcu | 0.4.0-3 | encoding.cpp:325:30: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]
| Log |
|
| rcs | 5.9.4-4 | b-excwho.c:126:15: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]
| Log |
|
| tulip | 4.8.0dfsg-2 | CoinMessageHandler.cpp:764:26: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]
| Log |
|
13 errors
