Csound Csound-dev Csound-tekno Search About

[Cs-dev] Csound in Ubuntu and format-security

Date2013-11-20 14:51
FromFelipe Sateler
Subject[Cs-dev] Csound in Ubuntu and format-security
I recently noticed that Ubuntu had get stuck in 5.17 csound. So I had
to do some prodding to update to 6.01 for the next Ubuntu (trusty).

In the process, a build failure emerged, because Ubuntu builds with
-Werror=format-security by default. For some reason, the -Wno-format
in CMakeLists.txt didn't cause the errors to go away (as it does in
debian, which also enables the error flag). I had to explicitly add
-Wno-error=format-security to get the build to succeed.

FWIW, the number of errors are > 1000. They mostly relate to doing the
equivalent of printf(gettext("constant string with no formats")).
Adding a format_arg attribute to csoundLocalizeMessage cuts the number
down to a few hundred errors (now mostly a variable containing one of
many possible errors in a function). I do not plan to fix these
errors, but pass the info along in case anyone actually wants to.

PS: Ubuntu users please tell me when csound is too out of date! As I
don't use Ubuntu I can miss problems like these for long stretches of
time.

-- 

Saludos,
Felipe Sateler

------------------------------------------------------------------------------
Shape the Mobile Experience: Free Subscription
Software experts and developers: Be at the forefront of tech innovation.
Intel(R) Software Adrenaline delivers strategic insight and game-changing 
conversations that shape the rapidly evolving mobile landscape. Sign up now. 
http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk
_______________________________________________
Csound-devel mailing list
Csound-devel@lists.sourceforge.net

Date2013-11-20 15:34
FromSteven Yi
SubjectRe: [Cs-dev] Csound in Ubuntu and format-security
Hi Felipe,

Could you file a bug with this information?  I'd rather we kept track
of this issue and hopefully someone could get around to fixing it when
they have a chance.

Thanks!
steven

On Wed, Nov 20, 2013 at 9:51 AM, Felipe Sateler  wrote:
> I recently noticed that Ubuntu had get stuck in 5.17 csound. So I had
> to do some prodding to update to 6.01 for the next Ubuntu (trusty).
>
> In the process, a build failure emerged, because Ubuntu builds with
> -Werror=format-security by default. For some reason, the -Wno-format
> in CMakeLists.txt didn't cause the errors to go away (as it does in
> debian, which also enables the error flag). I had to explicitly add
> -Wno-error=format-security to get the build to succeed.
>
> FWIW, the number of errors are > 1000. They mostly relate to doing the
> equivalent of printf(gettext("constant string with no formats")).
> Adding a format_arg attribute to csoundLocalizeMessage cuts the number
> down to a few hundred errors (now mostly a variable containing one of
> many possible errors in a function). I do not plan to fix these
> errors, but pass the info along in case anyone actually wants to.
>
> PS: Ubuntu users please tell me when csound is too out of date! As I
> don't use Ubuntu I can miss problems like these for long stretches of
> time.
>
> --
>
> Saludos,
> Felipe Sateler
>
> ------------------------------------------------------------------------------
> Shape the Mobile Experience: Free Subscription
> Software experts and developers: Be at the forefront of tech innovation.
> Intel(R) Software Adrenaline delivers strategic insight and game-changing
> conversations that shape the rapidly evolving mobile landscape. Sign up now.
> http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk
> _______________________________________________
> Csound-devel mailing list
> Csound-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/csound-devel

------------------------------------------------------------------------------
Shape the Mobile Experience: Free Subscription
Software experts and developers: Be at the forefront of tech innovation.
Intel(R) Software Adrenaline delivers strategic insight and game-changing 
conversations that shape the rapidly evolving mobile landscape. Sign up now. 
http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk
_______________________________________________
Csound-devel mailing list
Csound-devel@lists.sourceforge.net

Date2013-11-20 16:00
FromFelipe Sateler
SubjectRe: [Cs-dev] Csound in Ubuntu and format-security
Filed as ticket #74

On Wed, Nov 20, 2013 at 12:34 PM, Steven Yi  wrote:
> Hi Felipe,
>
> Could you file a bug with this information?  I'd rather we kept track
> of this issue and hopefully someone could get around to fixing it when
> they have a chance.
>
> Thanks!
> steven
>
> On Wed, Nov 20, 2013 at 9:51 AM, Felipe Sateler  wrote:
>> I recently noticed that Ubuntu had get stuck in 5.17 csound. So I had
>> to do some prodding to update to 6.01 for the next Ubuntu (trusty).
>>
>> In the process, a build failure emerged, because Ubuntu builds with
>> -Werror=format-security by default. For some reason, the -Wno-format
>> in CMakeLists.txt didn't cause the errors to go away (as it does in
>> debian, which also enables the error flag). I had to explicitly add
>> -Wno-error=format-security to get the build to succeed.
>>
>> FWIW, the number of errors are > 1000. They mostly relate to doing the
>> equivalent of printf(gettext("constant string with no formats")).
>> Adding a format_arg attribute to csoundLocalizeMessage cuts the number
>> down to a few hundred errors (now mostly a variable containing one of
>> many possible errors in a function). I do not plan to fix these
>> errors, but pass the info along in case anyone actually wants to.
>>
>> PS: Ubuntu users please tell me when csound is too out of date! As I
>> don't use Ubuntu I can miss problems like these for long stretches of
>> time.
>>
>> --
>>
>> Saludos,
>> Felipe Sateler
>>
>> ------------------------------------------------------------------------------
>> Shape the Mobile Experience: Free Subscription
>> Software experts and developers: Be at the forefront of tech innovation.
>> Intel(R) Software Adrenaline delivers strategic insight and game-changing
>> conversations that shape the rapidly evolving mobile landscape. Sign up now.
>> http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk
>> _______________________________________________
>> Csound-devel mailing list
>> Csound-devel@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/csound-devel
>
> ------------------------------------------------------------------------------
> Shape the Mobile Experience: Free Subscription
> Software experts and developers: Be at the forefront of tech innovation.
> Intel(R) Software Adrenaline delivers strategic insight and game-changing
> conversations that shape the rapidly evolving mobile landscape. Sign up now.
> http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk
> _______________________________________________
> Csound-devel mailing list
> Csound-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/csound-devel



-- 

Saludos,
Felipe Sateler

------------------------------------------------------------------------------
Shape the Mobile Experience: Free Subscription
Software experts and developers: Be at the forefront of tech innovation.
Intel(R) Software Adrenaline delivers strategic insight and game-changing 
conversations that shape the rapidly evolving mobile landscape. Sign up now. 
http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk
_______________________________________________
Csound-devel mailing list
Csound-devel@lists.sourceforge.net

Date2013-11-20 16:33
FromSteven Yi
SubjectRe: [Cs-dev] Csound in Ubuntu and format-security
Thanks!

On Wed, Nov 20, 2013 at 11:00 AM, Felipe Sateler  wrote:
> Filed as ticket #74
>
> On Wed, Nov 20, 2013 at 12:34 PM, Steven Yi  wrote:
>> Hi Felipe,
>>
>> Could you file a bug with this information?  I'd rather we kept track
>> of this issue and hopefully someone could get around to fixing it when
>> they have a chance.
>>
>> Thanks!
>> steven
>>
>> On Wed, Nov 20, 2013 at 9:51 AM, Felipe Sateler  wrote:
>>> I recently noticed that Ubuntu had get stuck in 5.17 csound. So I had
>>> to do some prodding to update to 6.01 for the next Ubuntu (trusty).
>>>
>>> In the process, a build failure emerged, because Ubuntu builds with
>>> -Werror=format-security by default. For some reason, the -Wno-format
>>> in CMakeLists.txt didn't cause the errors to go away (as it does in
>>> debian, which also enables the error flag). I had to explicitly add
>>> -Wno-error=format-security to get the build to succeed.
>>>
>>> FWIW, the number of errors are > 1000. They mostly relate to doing the
>>> equivalent of printf(gettext("constant string with no formats")).
>>> Adding a format_arg attribute to csoundLocalizeMessage cuts the number
>>> down to a few hundred errors (now mostly a variable containing one of
>>> many possible errors in a function). I do not plan to fix these
>>> errors, but pass the info along in case anyone actually wants to.
>>>
>>> PS: Ubuntu users please tell me when csound is too out of date! As I
>>> don't use Ubuntu I can miss problems like these for long stretches of
>>> time.
>>>
>>> --
>>>
>>> Saludos,
>>> Felipe Sateler
>>>
>>> ------------------------------------------------------------------------------
>>> Shape the Mobile Experience: Free Subscription
>>> Software experts and developers: Be at the forefront of tech innovation.
>>> Intel(R) Software Adrenaline delivers strategic insight and game-changing
>>> conversations that shape the rapidly evolving mobile landscape. Sign up now.
>>> http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk
>>> _______________________________________________
>>> Csound-devel mailing list
>>> Csound-devel@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/csound-devel
>>
>> ------------------------------------------------------------------------------
>> Shape the Mobile Experience: Free Subscription
>> Software experts and developers: Be at the forefront of tech innovation.
>> Intel(R) Software Adrenaline delivers strategic insight and game-changing
>> conversations that shape the rapidly evolving mobile landscape. Sign up now.
>> http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk
>> _______________________________________________
>> Csound-devel mailing list
>> Csound-devel@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/csound-devel
>
>
>
> --
>
> Saludos,
> Felipe Sateler
>
> ------------------------------------------------------------------------------
> Shape the Mobile Experience: Free Subscription
> Software experts and developers: Be at the forefront of tech innovation.
> Intel(R) Software Adrenaline delivers strategic insight and game-changing
> conversations that shape the rapidly evolving mobile landscape. Sign up now.
> http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk
> _______________________________________________
> Csound-devel mailing list
> Csound-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/csound-devel

------------------------------------------------------------------------------
Shape the Mobile Experience: Free Subscription
Software experts and developers: Be at the forefront of tech innovation.
Intel(R) Software Adrenaline delivers strategic insight and game-changing 
conversations that shape the rapidly evolving mobile landscape. Sign up now. 
http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk
_______________________________________________
Csound-devel mailing list
Csound-devel@lists.sourceforge.net