This is the mail archive of the
gcc-bugs@gcc.gnu.org
mailing list for the GCC project.
[Bug c/79879] Integer overflow in functions from scanf() family in MinGW, Cygwin, Borland/Embarcadero C environments
- From: "pinskia at gcc dot gnu.org" <gcc-bugzilla at gcc dot gnu dot org>
- To: gcc-bugs at gcc dot gnu dot org
- Date: Sun, 05 Mar 2017 20:42:06 +0000
- Subject: [Bug c/79879] Integer overflow in functions from scanf() family in MinGW, Cygwin, Borland/Embarcadero C environments
- Auto-submitted: auto-generated
- References: <bug-79879-4@http.gcc.gnu.org/bugzilla/>
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=79879
--- Comment #10 from Andrew Pinski <pinskia at gcc dot gnu.org> ---
(In reply to Lukas Wyporek from comment #9)
> No, my mistake. -Wall shows warnings only if format parameter is LITERAL.
> When format parameter is pointer to string (buffer) - there are no warnings.
Try -Wformat-security . This is not enabled by default.