[Bug c/72783] Fortify scanf %s, %[ conversion specifiers

[msebor at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=72783

--- Comment #5 from Martin Sebor <msebor at gcc dot gnu.org> ---
(In reply to felix from comment #4)
> 
> By the way: in my report, I suggested making -Wformat-security enable this
> warning. Will -Wformat-length be implied by -Wformat-security?

I think the role of -Wformat-security and its impact on the overflow/truncation
options is worth considering.  (For finer control the -Wformat-length option
has been split into two: -Wformat-overflow and -Wformat-truncation, and the
original has been removed).