"Security: Format string is not a string literal" build failure(s)
clang 8.0.1
The following code builds without any issue with gcc and fails with clang:
#include <stdio.h>
void foo(void) {
char buffer[1024];
sprintf(buffer, "%n", 2);
}
gcc -Werror -c foo.c
clang -Werror -c foo.c
| Package | Version | Supposed error message | Full log |
Bug report |
|---|
| anjuta | 2:3.34.0-3 | anjuta-status.c:215:30: error: format string is not a string literal [-Werror,-Wformat-nonliteral]
| Log |
|
| brasero | 3.12.2-6 | GCC warning "G_ADD_PRIVATE"brasero-misc.c:115:11: error: format string is not a string literal [-Werror,-Wformat-nonliteral]
| Log |
|
| cpl-plugin-amber | 4.3.9+dfsg-2 | amber_ascii_export.c:466:23: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]
| Log |
|
| cpl-plugin-xshoo | 3.3.5+dfsg-2 | xsh_model_io.c:691:35: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]
| Log |
|
| cronutils | 1.9-1 | runstat.c:79:31: error: format string is not a string literal [-Werror,-Wformat-nonliteral]
| Log |
|
| fcoe-utils | 1.0.32+git20190507.9834b34-2 | fcping.c:218:28: error: format string is not a string literal [-Werror,-Wformat-nonliteral]
| Log |
|
| gmsh | 4.4.1+ds1-2 | MeshOpt.cpp:142:34: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]
| Log |
|
| gnome-screensaver | 3.6.1-11 | gs-listener-dbus.c:362:39: error: format string is not a string literal [-Werror,-Wformat-nonliteral]
| Log |
|
| hyphy | 2.5.1+dfsg-3 | string_file_wrapper.cpp:51:27: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]
| Log |
|
| kylin-burner | 3.0.7-1 | burner-misc.c:116:11: error: format string is not a string literal [-Werror,-Wformat-nonliteral]
| Log |
|
| muffin | 4.4.2-3 | clutter-main.c:3719:46: error: format string is not a string literal [-Werror,-Wformat-nonliteral]
| Log |
|
| ncap | 1.9.2-4 | asprintf.c:35:30: error: format string is not a string literal [-Werror,-Wformat-nonliteral]
| Log |
|
| osmo-pcu | 0.5.1-1 | encoding.cpp:335:30: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]
| Log |
|
| rcs | 5.9.4-6 | b-excwho.c:126:15: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]
| Log |
|
| vinagre | 3.22.0-7 | vinagre/vinagre-utils.c:686:29: error: format string is not a string literal [-Werror,-Wformat-nonliteral]
| Log |
|
15 errors
