> Some warning may be ignored, and imho should be because they may hide other
> more important one:
> 
> /usr/local/lib/libevent_core.a(evutil.o)(.text+0x5e1): In function
> `_evutil_weakrand':
> : warning: random() isn't random; consider using arc4random()
> 
> Is it possible to ignore this ?

Yeah, you can manually ignore it yourself, much like so many people
ignored the crap inside the OpenSSL code base for decades.

More likely their reason for having that API at all is totally stupid
and from the past, and thus the warning should remain.  Until they
make a sensible decision and improve it.

In a related note, there are random() calls in our ksh and awk code.
The linker warns for them.  They are there due to standards mandated
behaviour.  We've changed the runtime behaviour to avoid this
standards mandated behaviour when possible, but we still have to link
in the bad function, and get the warning.

And that is how it will stay.  We will not add hacks so that people
can take away these warnings.  Your 

> same question for all the strl*, like strlcpy is great but sometimes
> useless.

You are saying people can use strcpy and strcat safely.  Yes.
Children can carry loaded guns safely too.  And nothing ever goes
wrong.

Reply via email to