Source: chroma
Version: 1.18-2
Severity: serious
Justification: FTBFS
Tags: bookworm sid ftbfs

Hi,

During a rebuild of all packages in sid, your package failed to build
on amd64.


Relevant part (hopefully):
> gcc -g -O2 -ffile-prefix-map=/<<PKGBUILDDIR>>=. -fstack-protector-strong 
> -Wformat -Werror=format-security -I/usr/include/SDL -D_GNU_SOURCE=1 
> -D_REENTRANT -I/usr/include/freetype2 -I/usr/include/libpng16 -Wdate-time 
> -D_FORTIFY_SOURCE=2 -DCHROMA_CURSES_HEADER=\<ncurses.h\> 
> -DCHROMA_DATA_DIR=\"/usr/share/chroma/\" -Wdate-time -D_FORTIFY_SOURCE=2  -c 
> -o cursesmenudisplay.o cursesmenudisplay.c
> cursesdisplay.c: In function ‘display_play’:
> cursesdisplay.c:497:29: error: format not a string literal and no format 
> arguments [-Werror=format-security]
>   497 |                             printw(buffer + x);
>       |                             ^~~~~~
> cursesmenudisplay.c: In function ‘menu_displayentry’:
> cursesmenudisplay.c:135:28: error: format not a string literal and no format 
> arguments [-Werror=format-security]
>   135 |             mvprintw(y, x, buffer);
>       |                            ^~~~~~
> cursesmenudisplay.c:151:28: error: format not a string literal and no format 
> arguments [-Werror=format-security]
>   151 |             mvprintw(y, x, buffer);
>       |                            ^~~~~~
> cursesmenudisplay.c:200:28: error: format not a string literal and no format 
> arguments [-Werror=format-security]
>   200 |             mvprintw(y, x, buffer);
>       |                            ^~~~~~
> cursesmenudisplay.c:211:28: error: format not a string literal and no format 
> arguments [-Werror=format-security]
>   211 |             mvprintw(y, x, buffer);
>       |                            ^~~~~~
> cursesmenudisplay.c: In function ‘menu_display’:
> cursesmenudisplay.c:360:32: error: format not a string literal and no format 
> arguments [-Werror=format-security]
>   360 |                 mvprintw(2, x, buffer);
>       |                                ^~~~~~
> cursesmenudisplay.c:376:17: error: format not a string literal and no format 
> arguments [-Werror=format-security]
>   376 |                 mvprintw(y, x, pmenu->title);
>       |                 ^~~~~~~~
> cursesmenudisplay.c:390:36: error: format not a string literal and no format 
> arguments [-Werror=format-security]
>   390 |                     mvprintw(y, x, buffer);
>       |                                    ^~~~~~
> graphics.c: In function ‘graphics_loadimage’:
> graphics.c:427:34: warning: ‘__builtin___sprintf_chk’ may write a terminating 
> nul past the end of the destination [-Wformat-overflow=]
>   427 |     sprintf(fullfilename, "%s%s%s", directory, "/", filename);
>       |                                  ^
> In file included from /usr/include/stdio.h:866,
>                  from graphics.c:21:
> /usr/include/x86_64-linux-gnu/bits/stdio2.h:38:10: note: 
> ‘__builtin___sprintf_chk’ output 2 or more bytes (assuming 4097) into a 
> destination of size 4096
>    38 |   return __builtin___sprintf_chk (__s, __USE_FORTIFY_LEVEL - 1,
>       |          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>    39 |                                   __bos (__s), __fmt, __va_arg_pack 
> ());
>       |                                   
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> cc1: some warnings being treated as errors
> make[2]: *** [<builtin>: cursesmenudisplay.o] Error 1


The full build log is available from:
http://qa-logs.debian.net/2021/10/23/chroma_1.18-2_unstable.log

A list of current common problems and possible solutions is available at
http://wiki.debian.org/qa.debian.org/FTBFS . You're welcome to contribute!

If you reassign this bug to another package, please marking it as 'affects'-ing
this package. See https://www.debian.org/Bugs/server-control#affects

If you fail to reproduce this, please provide a build log and diff it with mine
so that we can identify if something relevant changed in the meantime.

Reply via email to