Now with patch...

On 12.07.2014 21:27, Andreas Cadhalpun wrote:
Hi,

the hardening flags used by Debian contain -Wformat and
-Werror=format-security to make sure printf and friends are used in a
safe way. [1]

To detect such problems as early as possible, I think it makes sense to
use these flags always.

Best regards,
Andreas


1:
https://wiki.debian.org/Hardening#DEB_BUILD_HARDENING_FORMAT_.28gcc.2Fg.2B-.2B-_-Wformat_-Wformat-security_-Werror.3Dformat-security.29


>From eec36c7a6ba3c1e1bfd8646956053cc16b9bc9c6 Mon Sep 17 00:00:00 2001
From: Andreas Cadhalpun <andreas.cadhal...@googlemail.com>
Date: Sat, 12 Jul 2014 20:32:53 +0200
Subject: [PATCH] Add -Wformat and -Werror=format-security compiler flags

These are part of the hardening flags used by Debian.
---
 configure | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/configure b/configure
index e39ecb9..25911fa 100755
--- a/configure
+++ b/configure
@@ -5070,6 +5070,8 @@ elif enabled gcc; then
     check_cflags -Werror=missing-prototypes
     check_cflags -Werror=return-type
     check_cflags -Werror=vla
+    check_cflags -Wformat
+    check_cflags -Werror=format-security
     enabled extra_warnings || check_disable_warning -Wno-maybe-uninitialized
 elif enabled llvm_gcc; then
     check_cflags -mllvm -stack-alignment=16
-- 
2.0.1

_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
http://ffmpeg.org/mailman/listinfo/ffmpeg-devel

Reply via email to