> Some warning may be ignored, and imho should be because they may hide other > more important one: > > /usr/local/lib/libevent_core.a(evutil.o)(.text+0x5e1): In function > `_evutil_weakrand': > : warning: random() isn't random; consider using arc4random() > > Is it possible to ignore this ?
Yeah, you can manually ignore it yourself, much like so many people ignored the crap inside the OpenSSL code base for decades. More likely their reason for having that API at all is totally stupid and from the past, and thus the warning should remain. Until they make a sensible decision and improve it. In a related note, there are random() calls in our ksh and awk code. The linker warns for them. They are there due to standards mandated behaviour. We've changed the runtime behaviour to avoid this standards mandated behaviour when possible, but we still have to link in the bad function, and get the warning. And that is how it will stay. We will not add hacks so that people can take away these warnings. Your > same question for all the strl*, like strlcpy is great but sometimes > useless. You are saying people can use strcpy and strcat safely. Yes. Children can carry loaded guns safely too. And nothing ever goes wrong.

