Bug 714738 – x11-misc/xcave-2.5.1 : callbacks.c: error: format not a string literal and no format arguments [-Werror=format-security]

• Status: RESOLVED INVALID
• Product: Gentoo Linux

[Description Toralf Förster 2020-03-25 16:30:15 UTC]

  551 | struct _GTimeVal
      |        ^~~~~~~~~
callbacks.c: In function quick_message:
callbacks.c:348:38: error: format not a string literal and no format arguments [-Werror=format-security]

  -------------------------------------------------------------------

  This is an unstable amd64 chroot image at a tinderbox (==build bot)
  name: 17.1_developer-libressl-20200323-202147

  -------------------------------------------------------------------

  Please see the tracker bug for details.

gcc-config -l:
 [1] x86_64-pc-linux-gnu-9.3.0 *
clang version 10.0.0 
Target: x86_64-pc-linux-gnu
Thread model: posix
InstalledDir: /usr/lib/llvm/10/bin
/usr/lib/llvm/10
10.0.0
Available Python interpreters, in order of preference:
  [1]   python3.8
  [2]   python3.7
  [3]   python3.6
  [4]   python2.7 (fallback)
Available Ruby profiles:
  [1]   ruby24 (with Rubygems)
  [2]   ruby25 (with Rubygems) *
Available Rust versions:
  [1]   rust-1.42.0 *
The following VMs are available for generation-2:
*)	IcedTea JDK 3.14.0 [icedtea-bin-8]
Available Java Virtual Machines:
  [1]   icedtea-bin-8  system-vm

The Glorious Glasgow Haskell Compilation System, version 8.0.2

timestamp of HEAD at this tinderbox image:
/var/db/repos/gentoo	Wed 25 Mar 2020 12:38:45 PM UTC
/var/db/repos/libressl	Thu 19 Mar 2020 04:37:24 PM UTC

emerge -qpvO x11-misc/xcave
[ebuild  N    ] x11-misc/xcave-2.5.1

[Comment 1 Toralf Förster 2020-03-25 16:30:17 UTC]

Created attachment 625794 [details]
emerge-info.txt

[Comment 2 Toralf Förster 2020-03-25 16:30:20 UTC]

Created attachment 625796 [details]
emerge-history.txt

[Comment 3 Toralf Förster 2020-03-25 16:30:23 UTC]

Created attachment 625798 [details]
environment

[Comment 4 Toralf Förster 2020-03-25 16:30:26 UTC]

Created attachment 625800 [details]
etc.portage.tbz2

[Comment 5 Toralf Förster 2020-03-25 16:30:29 UTC]

Created attachment 625802 [details]
logs.tbz2

[Comment 6 Toralf Förster 2020-03-25 16:30:32 UTC]

Created attachment 625804 [details]
temp.tbz2

[Comment 7 Toralf Förster 2020-03-25 16:30:34 UTC]

Created attachment 625806 [details]
x11-misc:xcave-2.5.1:20200325-132028.log

[Comment 8 Jeroen Roovers (RETIRED) 2020-03-25 18:38:34 UTC]

Comment on attachment 625806 [details]
x11-misc:xcave-2.5.1:20200325-132028.log

void
quick_message (const gchar * buf)
{

    /* desactive window_xcave */
    gtk_widget_set_sensitive(detail.window, FALSE);

    GtkWidget   *dialog;
    dialog = gtk_message_dialog_new ((GtkWindow *)detail.window,
                                     GTK_DIALOG_DESTROY_WITH_PARENT,
                                     GTK_MESSAGE_WARNING,
                                     GTK_BUTTONS_CLOSE,
                                     buf);
    gtk_dialog_run (GTK_DIALOG (dialog));
    gtk_widget_destroy (dialog);

    gtk_widget_set_sensitive(detail.window, TRUE);
}

Um, this is not a programming error or a security issue.