Paul Eggert wrote: > > - Therefore you can either use gcc instead of clang, or modify clang to > > hide such warnings like gcc does. > > Should Gnulib's lib/gettext.h disable -Wformat-security if Clang is > being used? Although a bit of a blunderbuss, that might save time > overall, as we are likely to get more well-meaning but incorrect bug > reports like this in the future.
I admit that I never thought of this idea :-) But well, some people might be really upset when they specify '-Wformat-security' and some GNU header turns this option off. That would not resonate well in a security-centric developer community... And it's actually the wrong place to fix things. The right place is inside the clang compiler. Bruno
