Skip to content

Ui.cpp: always use "%s"-style format for printf()-style functions#21

Open
trofi wants to merge 1 commit intofph:masterfrom
trofi:master
Open

Ui.cpp: always use "%s"-style format for printf()-style functions#21
trofi wants to merge 1 commit intofph:masterfrom
trofi:master

Conversation

@trofi
Copy link

@trofi trofi commented Nov 3, 2021

ncuses-6.3 added printf-style function attributes and now makes
it easier to catch cases when user input is used in palce of format
string when built with CFLAGS=-Werror=format-security:

Ui.cpp:293:16: error: format not a string literal and no format arguments [-Werror=format-security]
  293 |       mvwprintw(w,0,0,msg.c_str());
      |       ~~~~~~~~~^~~~~~~~~~~~~~~~~~~

Let's wrap all the missing places with "%s" format.

`ncuses-6.3` added printf-style function attributes and now makes
it easier to catch cases when user input is used in palce of format
string when built with CFLAGS=-Werror=format-security:

    Ui.cpp:293:16: error: format not a string literal and no format arguments [-Werror=format-security]
      293 |       mvwprintw(w,0,0,msg.c_str());
          |       ~~~~~~~~~^~~~~~~~~~~~~~~~~~~

Let's wrap all the missing places with "%s" format.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant