Bug#661382: libcrypt-openssl-dsa-perl: FTBFS with hardening flags enabled: -Werror=format-security

Niko Tyni ntyni at debian.org
Sat Mar 3 19:05:23 UTC 2012


tag 661382 patch
thanks

On Sun, Feb 26, 2012 at 08:15:49PM +0000, Dominic Hargreaves wrote:
> Source: libcrypt-openssl-dsa-perl
> Severity: normal
> Version: 0.13-5
> 
> With hardening flags enabled, this package FTBFS:
> 
> DSA.xs:57:11: error: format not a string literal and no format arguments [-Werror=format-security]
> DSA.c: In function 'XS_Crypt__OpenSSL__DSA_generate_key':

For some reason, I only see this on i386 and not amd64. Weird.

This does not have security impact AFAICS. Patch attached.
-- 
Niko Tyni   ntyni at debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Explicitly-croak-with-a-controlled-format-string.patch
Type: text/x-diff
Size: 967 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-perl-maintainers/attachments/20120303/a3b41ef8/attachment.patch>


More information about the pkg-perl-maintainers mailing list