Bug#643345: aee: FTBFS: aee.c:2496:3: error: format not a string literal and no format arguments [-Werror=format-security]
Source: aee
Version: 2.2.15b-4
Severity: serious
Tags: wheezy sid
User: debian-qa@lists.debian.org
Usertags: qa-ftbfs-20110923 qa-ftbfs hardening-format-security hardening
Justification: FTBFS on amd64
Hi,
During a rebuild of all packages in sid, your package failed to build on
amd64.
Relevant part:
> cc -DSYS5 -DBSD_SELECT -DNCURSE -DHAS_UNISTD -DHAS_STDLIB -DHAS_CTYPE -g -O2 -fstack-protector --param=ssp-buffer-size=4 -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security -Wall -c help.c
> format.c: In function 'Format':
> format.c:53:6: warning: variable 'temp_pos' set but not used [-Wunused-but-set-variable]
> format.c:50:15: warning: variable 'start_line' set but not used [-Wunused-but-set-variable]
> format.c:49:15: warning: variable 'temp_line' set but not used [-Wunused-but-set-variable]
> control.c: In function 'menu_op':
> control.c:30:6: warning: variable 'vert_pos' set but not used [-Wunused-but-set-variable]
> mark.c: In function 'slct_right':
> mark.c:515:6: warning: variable 'tmpi' set but not used [-Wunused-but-set-variable]
> motion.c: In function 'next_page':
> motion.c:779:15: warning: variable 'tmp_line' set but not used [-Wunused-but-set-variable]
> aee.c: In function 'get_input':
> aee.c:740:6: warning: variable 'value' set but not used [-Wunused-but-set-variable]
> motion.c: In function 'prev_page':
> motion.c:821:15: warning: variable 'tmp_line' set but not used [-Wunused-but-set-variable]
> control.c: In function 'dump_aee_conf':
> control.c:2103:7: warning: ignoring return value of 'link', declared with attribute warn_unused_result [-Wunused-result]
> aee.c: In function 'sh_command':
> aee.c:2481:4: warning: implicit declaration of function 'wait' [-Wimplicit-function-declaration]
> aee.c:2496:3: error: format not a string literal and no format arguments [-Werror=format-security]
> aee.c:2370:7: warning: ignoring return value of 'pipe', declared with attribute warn_unused_result [-Wunused-result]
> aee.c:2384:7: warning: ignoring return value of 'dup', declared with attribute warn_unused_result [-Wunused-result]
> aee.c:2390:7: warning: ignoring return value of 'dup', declared with attribute warn_unused_result [-Wunused-result]
> aee.c:2425:8: warning: ignoring return value of 'pipe', declared with attribute warn_unused_result [-Wunused-result]
> aee.c:2442:8: warning: ignoring return value of 'dup', declared with attribute warn_unused_result [-Wunused-result]
> aee.c:2469:12: warning: ignoring return value of 'write', declared with attribute warn_unused_result [-Wunused-result]
> aee.c:2471:57: warning: ignoring return value of 'write', declared with attribute warn_unused_result [-Wunused-result]
> aee.c:2472:12: warning: ignoring return value of 'write', declared with attribute warn_unused_result [-Wunused-result]
> cc1: some warnings being treated as errors
>
> make[1]: *** [aee.o] Error 1
The full build log is available from:
http://people.debian.org/~lucas/logs/2011/09/23/aee_2.2.15b-4_lsid64.buildlog
This happened because since dpkg 1.16.0 [0], hardening flags are enabled
under various conditions.
[0] http://lists.debian.org/debian-devel-announce/2011/09/msg00001.html
A list of current common problems and possible solutions is available at
http://wiki.debian.org/qa.debian.org/FTBFS . You're welcome to contribute!
About the archive rebuild: The rebuild was done on about 50 AMD64 nodes
of the Grid'5000 platform, using a clean chroot. Internet was not
accessible from the build systems.
Reply to: