1 diff -durN gcc-4.4.5.orig/gcc/c-common.c gcc-4.4.5/gcc/c-common.c
2 --- gcc-4.4.5.orig/gcc/c-common.c 2010-07-27 15:07:28.000000000 +0200
3 +++ gcc-4.4.5/gcc/c-common.c 2010-10-09 22:59:03.000000000 +0200
5 /* Warn about format/argument anomalies in calls to formatted I/O functions
6 (*printf, *scanf, strftime, strfmon, etc.). */
11 /* Warn about using __null (as NULL in C++) as sentinel. For code compiled
12 with GCC this doesn't matter as __null is guaranteed to have the right
13 diff -durN gcc-4.4.5.orig/gcc/c.opt gcc-4.4.5/gcc/c.opt
14 --- gcc-4.4.5.orig/gcc/c.opt 2009-09-18 23:53:23.000000000 +0200
15 +++ gcc-4.4.5/gcc/c.opt 2010-10-09 22:59:03.000000000 +0200
17 Warn about format strings that contain NUL bytes
20 -C ObjC C++ ObjC++ Var(warn_format_security) Warning
21 +C ObjC C++ ObjC++ Var(warn_format_security) Init(1) Warning
22 Warn about possible security problems with format functions
25 diff -durN gcc-4.4.5.orig/gcc/doc/invoke.texi gcc-4.4.5/gcc/doc/invoke.texi
26 --- gcc-4.4.5.orig/gcc/doc/invoke.texi 2010-09-08 20:13:03.000000000 +0200
27 +++ gcc-4.4.5/gcc/doc/invoke.texi 2010-10-09 22:59:03.000000000 +0200
29 @option{-Wformat-nonliteral}, @option{-Wformat-security}, and
30 @option{-Wformat=2} are available, but are not included in @option{-Wall}.
32 +NOTE: In Gentoo, this option is enabled by default for C, C++, ObjC, ObjC++.
33 +To disable, use @option{-Wformat=0}.
37 @opindex Wno-format-y2k
38 @@ -2941,6 +2944,11 @@
39 in future warnings may be added to @option{-Wformat-security} that are not
40 included in @option{-Wformat-nonliteral}.)
42 +NOTE: In Gentoo, this option is enabled by default for C, C++, ObjC, ObjC++.
43 +To disable, use @option{-Wno-format-security}, or disable all format warnings
44 +with @option{-Wformat=0}. To make format security warnings fatal, specify
45 +@option{-Werror=format-security}.