Re: sharutils does not build with -Werror=format-security
Paul Eggert <[email protected]>
| Newsgroups | gmane.comp.gnu.utils.bugs |
|---|---|
| Organization | UCLA Computer Science Department |
| Message-ID | <[email protected]> |
Bruce Korb wrote: > That makes i18n an interesting challenge. Yes, the assumption is that the translation libraries are protected from tampering, just as much as the application itself is; otherwise, one can attack the application by supplying bogus translations. So you're right that if FOO is safe to use as a format string, then _(FOO) should be safe too.