On 24 June 2016 at 11:59, André Draszik <git@andred.net> wrote:

> ../../libidn-1.32/src/idn.c: In function 'main':
> ../../libidn-1.32/src/idn.c:172:7: error: format not a string literal and
> no format arguments [-Werror=format-security]
>        error (0, 0, _("only one of -s, -e, -d, -a, -u or -n can be
> specified"));
>

As libidn will be dealing with data from the network it seems like the sort
of package that should be built with format-security enabled.  Wouldn't it
be better to fix up the calls to error() instead?

Ross