Re: FTBFS if "-Werror=format-security" flag is used

2013-12-04 Thread mrnuke
On 12/04/2013 12:10 PM, Brendan Jones wrote: > > This is just a pain. Can someone explain to me why this is good? > Good or not, this is not the right question to ask. * Is this necessarry, and are the benefits worth the pains? * This change is Sofa King stupid. Why couldn't we have just enabl

Re: FTBFS if "-Werror=format-security" flag is used

2013-12-05 Thread mrnuke
On 12/05/2013 07:38 AM, Ralf Corsepius wrote: > As I see it, GCC's -Wformat-security is too unreliable to be used in > production. It certainly diagnoses valid security leaks in some cases, > but all it does in other cases is to enforce stylishness to work outs > GCC's limitations. I.e. in these ca

Re: FTBFS if "-Werror=format-security" flag is used

2013-12-05 Thread mrnuke
On 12/05/2013 09:41 AM, Florian Weimer wrote: > For the current stage (filing bugs for known failures), it does not make > much of a difference how the data is obtained about future build > failures. Filing bugs seems reasonable for tracking purposes. > The FESCO ticket is about enabling -Werror=

Re: FTBFS if "-Werror=format-security" flag is used

2013-12-05 Thread mrnuke
On 12/05/2013 11:38 AM, Michael scherer wrote: > On Wed, Dec 04, 2013 at 08:25:54PM -0600, mrnuke wrote: >> >> This change is Sofa King stupid. Why couldn't we have just enabled the >> warning without turning it into an error, THEN let packagers work with >> u