[Pkg-octave-devel] Bug#646258: dynare: FTBFS with -Werror=format-security

[Julian Taylor]

Source: dynare
Version: 4.2.2-1
Severity: normal
User: debian-qa at lists.debian.org
Usertags: hardening-format-security hardening

the package dynare fails to compile with the new hardened compiler flags
dpkg-buildflag outputs [0].
The problematic flag is: -Werror=format-security
See the ubuntu buildlog:
https://launchpadlibrarian.net/83127971/buildlog_ubuntu-precise-i386.dynare_4.2.2-1_FAILEDTOBUILD.txt.gz
Snippet:
SylvException.cpp: In member function 'void
SylvException::printMessage() const':
SylvException.cpp:29:12: error: format not a string literal and no
format arguments [-Werror=format-security]
cc1plus: some warnings being treated as errors

The buildflags are not exported in debian, but can be enabled e.g. by
adding this to debian/rules:

 DPKG_EXPORT_BUILDFLAGS = 1
 include /usr/share/dpkg/buildflags.mk

Please fix the issues and maybe also enable the hardened build in debian.

[0] http://lists.debian.org/debian-devel-announce/2011/09/msg00001.html

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-octave-devel/attachments/20111022/9092382d/attachment.pgp>