ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/a/allegro4.2/allegro4.2_4.2.2.orig.tar.gz
./src/unix/umodules.c:127:46: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
         snprintf(fullpath, sizeof fullpath, filename);
                                             ^~~~~~~~
./src/unix/umodules.c:131:83: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
         snprintf(fullpath_slash+1, (sizeof fullpath) - (fullpath_slash - fullpath) - 1, filename);
                                                                                         ^~~~~~~~
./src/linux/ljoy.c:92:55: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
         uszprintf(allegro_error, ALLEGRO_ERROR_SIZE, get_config_text("Your Linux joystick API is version 0.x which is unsupported."));
                                                      ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/a/ap-utils/ap-utils_1.5.orig.tar.gz
sysinfo.c:389:19: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        sprintf(message, _("Product Name:"));
                         ^~~~~~~~~~~~~~~~~~
sysinfo.c:395:19: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        sprintf(message, _("Product ID:"));
                         ^~~~~~~~~~~~~~~~
sysinfo.c:401:19: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        sprintf(message, _("Product Version:"));
                         ^~~~~~~~~~~~~~~~~~~~~
ap-mrtg.c:41:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("\nUsage:\n"));
           ^~~~~~~~~~~~~~~
ap-mrtg.c:42:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("\tap-mrtg -i ip -c community -t type [-b bssid] [-n name] "
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-mrtg.c:44:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("Get stats from AP and return it in MRTG parsable format\n\n"));
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-mrtg.c:45:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("-i ip        - AP ip address\n"));
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-mrtg.c:46:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("-c community - SNMP community string\n"));
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-mrtg.c:47:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("-t type      - statistics type <w>ireless, <e>thernet, "
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-mrtg.c:49:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("work with ATMEL410 MIB devices in AP Client mode)\n"));
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-mrtg.c:50:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("-b bssid     - mac address of the AP from which get link quality"
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-mrtg.c:52:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("-n name      - AP name - for check only\n")); 
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-mrtg.c:53:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("-v           - report MRTG about problems connecting to AP\n"));
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-mrtg.c:54:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("-r           - reset AP when getting LinkQuality stats\n"));
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-mrtg.c:55:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("-h           - print this help screen\n\n"));
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-mrtg.c:132:10: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                printf(_("Error: invalid IP-address.\n"));
                       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-mrtg.c:204:10: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                printf(_("Unable to determine AP MIB type "
                       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-mrtg.c:248:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            printf(ERR_STR);
                   ^~~~~~~
ap-mrtg.c:260:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            printf(ERR_STR);
                   ^~~~~~~
ap-mrtg.c:272:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            printf(ERR_STR);
                   ^~~~~~~
ap-mrtg.c:290:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            printf(ERR_STR);
                   ^~~~~~~
ap-mrtg.c:305:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            printf(ERR_STR);
                   ^~~~~~~
ap-mrtg.c:325:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            printf(ERR_STR);
                   ^~~~~~~
ap-mrtg.c:339:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            printf(ERR_STR);
                   ^~~~~~~
ap-mrtg.c:344:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            printf(ERR_STR);
                   ^~~~~~~
ap-mrtg.c:350:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                    printf(ERR_STR);
                           ^~~~~~~
ap-mrtg.c:362:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            printf(ERR_STR);
                   ^~~~~~~
ap-mrtg.c:387:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            printf(ERR_STR);
                   ^~~~~~~
ap-auth.c:44:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("\nUsage:\n"));
           ^~~~~~~~~~~~~~~
ap-auth.c:45:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("\tap-auth -i ip -c community -d filename [-h]\n"));
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-auth.c:46:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("\tap-auth -i ip -c community -u filename [-h]\n\n"));
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-auth.c:47:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("Change accesspoint's list of authorised MAC addresses\n\n"));
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-auth.c:48:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("-i ip        - AP ip address\n"));
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-auth.c:49:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("-c community - SNMP community string\n"));
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-auth.c:50:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("-d filename  - download list of authorised MAC addresses from AP"
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-auth.c:52:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("-u filename  - upload list of authorised MAC addresses from"
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-auth.c:54:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("-h           - print this help screen\n\n"));
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-auth.c:138:10: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                printf(_("Error: invalid IP-address.\n"));
                       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-auth.c:203:10: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                printf(_("Unable to determine AP MIB type "
                       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-auth.c:211:9: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        printf(_("NWN devices are not yet supported."));
               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-auth.c:239:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                printf(ERR_RET);
                       ^~~~~~~
ap-auth.c:252:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                printf(ERROR_PACKET);
                       ^~~~~~~~~~~~
ap-auth.c:311:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                    printf(ERROR_DATA);
                           ^~~~~~~~~~
ap-auth.c:318:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                    printf(ERROR_DATA);
                           ^~~~~~~~~~
ap-auth.c:354:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                printf(ERR_RET);
                       ^~~~~~~
ap-auth.c:359:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                printf(ERROR_PACKET);
                       ^~~~~~~~~~~~
ap-tftp.c:157:10: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                printf(_("Remote-filename too long.\n"));
                       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-tftp.c:317:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                    printf(_("Finished successfully.\n"));
                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-tftp.c:335:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf (_("PLEASE BE _ABSOLUTELY_ SURE TO READ MANPAGE PRIOR USE!!!\n"));
            ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-tftp.c:361:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf (_("TFTP client for upgrading firmware in ATMEL AT76C510 "
            ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-tftp.c:363:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf (_("(C) 2004-2005 Jan Rafaj "
            ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-tftp.c:379:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                    printf(_("Error: invalid IP address format given.\n"));
                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-tftp.c:405:9: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        printf(_("Error: invalid argument combination.\n"));
               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-tftp.c:419:9: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        printf(_("Error: invalid firmware file given.\n"));
               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-tftp.c:472:9: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        printf(_("Error: invalid firmware file given.\n"));
               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-tftp.c:568:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                    printf(_("Error: device with the given IP does not seem "
                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-tftp.c:574:10: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                printf(_("Error: SNMP authorization error or device unavailable"
                       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-tftp.c:648:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            printf(ERR_READFW);
                   ^~~~~~~~~~
ap-rrd.c:40:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("\nUsage:\n"));
           ^~~~~~~~~~~~~~~
ap-rrd.c:41:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_
           ^
ap-rrd.c:43:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_
           ^
ap-rrd.c:45:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("-i ip        - AP ip address\n"));
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-rrd.c:46:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("-c community - SNMP community string\n"));
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-rrd.c:47:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_
           ^
ap-rrd.c:49:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("-d db_file   - RRD database file with full path\n"));
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-rrd.c:50:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_
           ^
ap-rrd.c:52:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("-n name     - AP name - for check only\n")); 
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-rrd.c:53:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("-a aptype    - AP type - 410 (default) or 510 for ATMEL12350's, like the ME-102\n"));
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-rrd.c:54:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("-r           - reset AP when getting LinkQuality stats\n"));
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-rrd.c:55:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(_("-h           - print this help screen\n\n"));
           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-rrd.c:133:10: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                printf(_("Invalid IP-address\n"));
                       ^~~~~~~~~~~~~~~~~~~~~~~~~
ap-trapd.c:157:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        syslog(LOG_ERR, _("Unable to fork. Exiting."));
                        ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-trapd.c:161:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        syslog(LOG_ERR, _("Can't create socket. Exiting."));
                        ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ap-trapd.c:167:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        syslog(LOG_ERR, _("Can't bind socket. Exiting."));
                        ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/a/apparix/apparix_07-261.orig.tar.gz
opt.c:1016:24: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      ;  mcxDie(1, me, t->str)
                       ^~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/a/argtable2/argtable2_9.orig.tar.gz
argtable2.c:803:16: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    fprintf(fp,suffix);
               ^~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/b/barcode/barcode_0.98+debian.orig.tar.gz
plessey.c:151:22: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        sprintf(ptr, patterns[checkptr[strlen(text) * 4 + i]]);
                     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/b/blktool/blktool_4.orig.tar.gz
util.c:31:19: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                fprintf(stderr, msg);
                                ^~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/b/bwm-ng/bwm-ng_0.6.orig.tar.gz
output.c:226:34: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            fprintf(tmp_out_file,input2str());
                                 ^~~~~~~~~~~
output.c:227:34: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            fprintf(tmp_out_file,show_all_if2str());
                                 ^~~~~~~~~~~~~~~~~
output.c:237:20: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            printf(input2str());
                   ^~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/c/cdrdao/cdrdao_1.2.3.orig.tar.bz2
gen.c:3869:22: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
/* MR10 */      _gen(Save_argv[i]);
                     ^~~~~~~~~~~~
lex.c:709:27: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
/* MR26 */      fprintf(output,strBetween(pSymbol, t, pSeparator));
                               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
lex.c:774:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(f,strBetween(pDataType, pSymbol, pSeparator));
                  ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
lex.c:855:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                fprintf(f,strBetween(pDataType, pSymbol, pSeparator));
                          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
lex.c:857:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                fprintf(f,strBetween(pSymbol, pEqualSign, pSeparator));
                          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
fset2.c:2213:22: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      fprintf(stdout,TerminalString(tn->token));
                     ^~~~~~~~~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/c/cssed/cssed_0.4.0.orig.tar.gz
cr-statement.c:2430:32: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                fprintf (a_fp, str);
                               ^~~
cr-statement.c:2475:32: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                fprintf (a_fp, str) ;
                               ^~~
cr-statement.c:2499:32: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                fprintf (a_fp, str);
                               ^~~
cr-statement.c:2522:32: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                fprintf (a_fp, str) ;
                               ^~~
cr-statement.c:2545:32: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                fprintf (a_fp, str) ;
                               ^~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/d/dancer-ircd/dancer-ircd_1.0.36.orig.tar.gz
channel.c:3437:51: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
          sendto_local_ops_flag(UMODE_SERVNOTICE, get_str(STR_SPLIT_MODE_OFF));
                                                  ^~~~~~~~~~~~~~~~~~~~~~~~~~~
m_dump.c:163:39: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
              send_markup(sptr, &me, "DUMP", buffer);
                                             ^~~~~~
s_conf.c:630:40: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
          sendto_ops_flag(UMODE_DEBUG, get_str(STR_BUGREPORT));
                                       ^~~~~~~~~~~~~~~~~~~~~~
s_conf.c:654:40: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
          sendto_ops_flag(UMODE_DEBUG, get_str(STR_BUGREPORT));
                                       ^~~~~~~~~~~~~~~~~~~~~~
s_conf.c:788:32: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  sendto_ops_flag(UMODE_DEBUG, get_str(STR_BUGREPORT));
                               ^~~~~~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/d/dash/dash_0.5.8.orig.tar.gz
jobs.c:430:23: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                col = fmtstr(s, 32, strsignal(st));
                                    ^~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/d/detox/detox_1.2.0.orig.tar.gz
parse_options_getopt.c:101:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                printf(usage_message);
                                       ^~~~~~~~~~~~~
parse_options_getopt.c:103:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                printf(help_message);
                                       ^~~~~~~~~~~~
parse_options_getopt.c:141:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                printf(usage_message);
                                       ^~~~~~~~~~~~~
parse_options_getopt.c:198:10: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                printf(usage_message);
                       ^~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/d/didiwiki/didiwiki_0.5.orig.tar.gz
wiki.c:1042:30: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      snprintf(datadir, 512, getenv("DIDIWIKIHOME"));
                             ^~~~~~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/d/dlume/dlume_0.2.4.orig.tar.gz
export.c:507:25: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                fprintf(filehandle, html_head[k]);
                                                    ^~~~~~~~~~~~
prefs.c:129:29: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf (prefs_filehandle, text);
                                   ^~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/d/dopewars/dopewars_1.5.12.orig.tar.gz
gtkport.c:5639:50: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                  type, buttons, Text);
                                                 ^~~~
sound.c:193:41: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      g_log(NULL, G_LOG_LEVEL_CRITICAL, err);
                                        ^~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/e/emu8051/emu8051_1.1.1.orig.tar.gz
emuconsole.c:268:10: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                printf(prompt);
                       ^~~~~~
pgmwin.c:74:10: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        g_print(TextTmp);
                ^~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/e/euler/euler_1.61.0.orig.tar.gz
main.c:1530:16: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                fprintf(file,text); 
                             ^~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/e/ez-ipupdate/ez-ipupdate_3.0.11b8.orig.tar.gz
ez-ipupdate.c:801:24: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    syslog(LOG_NOTICE, buf);
                       ^~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/f/freetds/freetds_0.91.orig.tar.gz
bsqldb.c:548:23: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                                fprintf(stdout, metadata[c].format_string); /* col/row separator */
                                                                ^~~~~~~~~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/f/fxt/fxt_0.3.1.orig.tar.gz
fkt_print.c:2169:9: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        printf(info->uname);
               ^~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/g/gadmin-proftpd/gadmin-proftpd_0.4.2.orig.tar.gz
populate_server_settings.c:78:32: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
       sprintf(address_buffer, global_server_address);
                               ^~~~~~~~~~~~~~~~~~~~~
populate_server_settings.c:161:28: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
              sprintf(new_buffer, &old_buffer[x]);
                                  ^~~~~~~~~~~~~~
populate_server_settings.c:487:26: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            sprintf(new_buffer, &old_buffer[10]);
                                ^~~~~~~~~~~~~~~
populate_server_settings.c:541:23: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                sprintf(new_buffer, &old_buffer[7]); 
                                    ^~~~~~~~~~~~~~
populate_server_settings.c:735:42: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        snprintf(new_buffer, old_buffer[x]+x, old_buffer+x);
                                                              ^~~~~~~~~~~~
populate_server_settings.c:750:42: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        snprintf(new_buffer, old_buffer[x]+x, old_buffer+x);
                                                              ^~~~~~~~~~~~
populate_server_settings.c:765:42: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        snprintf(new_buffer, old_buffer[x]+x, old_buffer+x);
                                                              ^~~~~~~~~~~~
populate_server_settings.c:780:42: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        snprintf(new_buffer, old_buffer[x]+x, old_buffer+x);
                                                              ^~~~~~~~~~~~
populate_server_settings.c:795:42: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        snprintf(new_buffer, old_buffer[x]+x, old_buffer+x);
                                                              ^~~~~~~~~~~~
populate_server_settings.c:810:42: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        snprintf(new_buffer, old_buffer[x]+x, old_buffer+x);
                                                              ^~~~~~~~~~~~
populate_server_settings.c:825:42: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        snprintf(new_buffer, old_buffer[x]+x, old_buffer+x);
                                                              ^~~~~~~~~~~~
populate_server_settings.c:843:42: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        snprintf(new_buffer, old_buffer[x]+x, old_buffer+x);
                                                              ^~~~~~~~~~~~
populate_server_settings.c:861:42: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        snprintf(new_buffer, old_buffer[x]+x, old_buffer+x);
                                                              ^~~~~~~~~~~~
populate_users.c:80:32: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
       sprintf(address_buffer, global_server_address);
                               ^~~~~~~~~~~~~~~~~~~~~
populate_user_settings.c:243:32: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
       sprintf(address_buffer, global_server_address);
                               ^~~~~~~~~~~~~~~~~~~~~
apply_user.c:352:32: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
       sprintf(address_buffer, global_server_address);
                               ^~~~~~~~~~~~~~~~~~~~~
delete_user.c:134:32: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
       sprintf(address_buffer, global_server_address);
                               ^~~~~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/g/gbdfed/gbdfed_1.5.orig.tar.gz
bdf.c:2846:28: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
              fprintf(out, eol);
                           ^~~
bdf.c:2853:24: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
          fprintf(out, eol);
                       ^~~
bdf.c:2918:28: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
              fprintf(out, eol);
                           ^~~
bdf.c:2925:24: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
          fprintf(out, eol);
                       ^~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/g/gcc-h8300-hms/gcc-h8300-hms_3.4.6.orig.tar.gz
/home/gdr/build/gcc-3.4.6/gcc-3.4.6/gcc/gengtype-lex.l:340:31: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  error_at_line (&lexer_line, s);
                              ^
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/g/giflib/giflib_4.1.6.orig.tar.gz
gif2epsn.c:149:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
gif2ps.c:132:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
gif2rgb.c:111:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
gifasm.c:101:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
gifbg.c:133:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
gifclip.c:95:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
gifcomb.c:96:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
giffix.c:93:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
gifflip.c:107:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
gifhisto.c:115:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
gifinter.c:101:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
gifinto.c:99:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
gifovly.c:76:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
gifpos.c:93:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
gifrsize.c:116:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
giftext.c:105:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
gifwedge.c:97:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
raw2gif.c:121:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
rgb2gif.c:114:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
text2gif.c:110:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
icon2gif.c:97:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
gifcolor.c:92:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
gifinfo.c:107:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
gifclrmp.c:114:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
gifrotat.c:120:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
gif2x11.c:146:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, VersionStr);
                        ^~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/g/glfer/glfer_0.4.2.orig.tar.gz
mixer.c:38:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      printf(names[i]);
             ^~~~~~~~
mixer.c:54:23: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      fprintf(stderr, names[i]);
                      ^~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/g/global/global_5.7.1.orig.tar.gz
global.c:326:22: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                die_with_code(2, usage);
                                                 ^~~~~
global.c:329:22: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                die_with_code(2, usage);
                                                 ^~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/g/gnome-paint/gnome-paint_0.4.0.orig.tar.gz
toolbar.c:599:8: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                   message);
                                   ^~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/g/gnugo/gnugo_3.8.orig.tar.gz
mkpat.c:1422:37: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      code_pos += sprintf(code_pos, autohelper_functions[funcno].code);
                                    ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
dfa.c:291:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  fprintf(f, line);
             ^~~~
dfa.c:298:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  fprintf(f, line);
             ^~~~
dfa.c:303:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  fprintf(f, line);
             ^~~~
dfa.c:321:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  fprintf(f, line);
             ^~~~
uncompress_fuseki.c:227:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(output_strings[PREAMBLE]);
           ^~~~~~~~~~~~~~~~~~~~~~~~
uncompress_fuseki.c:229:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(output_strings[FOOTER]);
           ^~~~~~~~~~~~~~~~~~~~~~
uncompress_fuseki.c:254:10: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  printf(output_strings[PREAMBLE]);
         ^~~~~~~~~~~~~~~~~~~~~~~~
uncompress_fuseki.c:311:10: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  printf(output_strings[FOOTER]);
         ^~~~~~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/g/gnuit/gnuit_4.9.5.orig.tar.gz
git.c:1920:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf(copyright);
           ^~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/g/gtalk/gtalk_0.99.10.orig.tar.gz
gtalk.c:738:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      printf(message);
             ^~~~~~~
gt_display.c:887:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      printf(message);
             ^~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/g/gtkballs/gtkballs_3.1.5.orig.tar.gz
gtkutils.c:115:93: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        GtkWidget *dialog = gtk_message_dialog_new(NULL, 0, GTK_MESSAGE_INFO, GTK_BUTTONS_CLOSE, message);
                                                                                                 ^~~~~~~
gtkutils.c:122:93: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        GtkWidget *dialog = gtk_message_dialog_new(NULL, 0, GTK_MESSAGE_INFO, GTK_BUTTONS_CLOSE, message);
                                                                                                 ^~~~~~~
savegame.c:169:28: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                fprintf(f, rules);
                           ^~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/g/gtkextra/gtkextra_3.1.1.orig.tar.gz
gtkplotbubble.c:455:29: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      g_snprintf(text, 100, aux_text);
                            ^~~~~~~~
gtkplotbubble.c:459:29: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      g_snprintf(text, 100, aux_text);
                            ^~~~~~~~
gtkplotbubble.c:534:33: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      g_snprintf(text_max, 100, aux_text);
                                ^~~~~~~~
gtkplotbubble.c:539:33: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      g_snprintf(text_max, 100, aux_text);
                                ^~~~~~~~
gtkplotflux.c:565:29: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      g_snprintf(text, 100, aux_text);
                            ^~~~~~~~
gtkplotflux.c:569:29: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      g_snprintf(text, 100, aux_text);
                            ^~~~~~~~
gtkplotflux.c:650:33: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      g_snprintf(text_max, 100, aux_text);
                                ^~~~~~~~
gtkplotflux.c:655:33: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      g_snprintf(text_max, 100, aux_text);
                                ^~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/g/gtkperf/gtkperf_0.40+ds.orig.tar.gz
timing.c:100:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        g_printf (timestring);
                  ^~~~~~~~~~
timing.c:132:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        g_printf (timestring);
                  ^~~~~~~~~~
timing.c:157:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        g_printf (timestring);
                  ^~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/g/gworldclock/gworldclock_1.4.4.orig.tar.gz
main.c:185:11: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                      msg->str);
                                      ^~~~~~~~
main.c:203:10: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                            msg->str);
                                            ^~~~~~~~
misc.c:68:9: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                    message);
                                    ^~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/h/hdf5/hdf5_1.8.8.orig.tar.gz
h5import.c:1497:32: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        (void) fprintf(stderr, err1);
                               ^~~~
h5import.c:1507:36: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            (void) fprintf(stderr, err1);
                                   ^~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/h/hercules/hercules_3.07.orig.tar.gz
dasdcopy.c:665:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    printf (usage);
            ^~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/i/igraph/igraph_0.7.1.orig.tar.gz
f2c/arithchk.c:125:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        Cray1 = printf(emptyfmt) < 0 ? 0 : 4617762;
                       ^~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/i/inetutils/inetutils_1.9.orig.tar.gz
argp-parse.c:157:30: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        __argp_error (state, dgettext (state->root_argp->argp_domain,
                             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
utilities.c:901:25: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                          fprintf (NetTrace, "\" VALUE " + noquote);
                                             ^~~~~~~~~~~~~~~~~~~~~
utilities.c:919:25: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                          fprintf (NetTrace, "\" VAR " + noquote);
                                             ^~~~~~~~~~~~~~~~~~~
utilities.c:924:23: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        fprintf (NetTrace, "\" ESC " + noquote);
                                           ^~~~~~~~~~~~~~~~~~~
utilities.c:929:23: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        fprintf (NetTrace, "\" USERVAR " + noquote);
                                           ^~~~~~~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/i/iperf/iperf_2.0.5.orig.tar.gz
Thread.c:384:26: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf( stderr, wait_server_threads );
                         ^~~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/i/iptraf-ng/iptraf-ng_1.1.4.orig.tar.gz
src/ipfilter.c:149:27: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                tui_error(ANYKEY_MSG, msgstr);
                                                      ^~~~~~
src/othptab.c:413:24: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        sprintf(scratchpad, rarp_mac_addr);
                                            ^~~~~~~~~~~~~
src/othptab.c:488:22: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        sprintf(protname, protptr->p_aliases[0]);
                                          ^~~~~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/i/ircd-ratbox/ircd-ratbox_3.0.8.dfsg.orig.tar.gz
parse.c:714:49: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        sendto_one_numeric(source_p, ERR_NOPRIVILEGES, form_str(ERR_NOPRIVILEGES));
                                                       ^~~~~~~~~~~~~~~~~~~~~~~~~~
core/m_kill.c:104:52: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                sendto_one_numeric(source_p, ERR_CANTKILLSERVER, form_str(ERR_CANTKILLSERVER));
                                                                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
m_info.c:861:47: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                sendto_one_numeric(source_p, RPL_ENDOFINFO, form_str(RPL_ENDOFINFO));
                                                            ^~~~~~~~~~~~~~~~~~~~~~~
m_info.c:875:46: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        sendto_one_numeric(source_p, RPL_ENDOFINFO, form_str(RPL_ENDOFINFO));
                                                    ^~~~~~~~~~~~~~~~~~~~~~~
m_info.c:900:47: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                sendto_one_numeric(source_p, RPL_ENDOFINFO, form_str(RPL_ENDOFINFO));
                                                            ^~~~~~~~~~~~~~~~~~~~~~~
m_stats.c:230:10: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                                   form_str(ERR_NOPRIVILEGES));
                                                   ^~~~~~~~~~~~~~~~~~~~~~~~~~
m_stats.c:287:50: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                sendto_one_numeric(source_p, ERR_NOPRIVILEGES, form_str(ERR_NOPRIVILEGES));
                                                               ^~~~~~~~~~~~~~~~~~~~~~~~~~
m_stats.c:361:50: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                sendto_one_numeric(source_p, ERR_NOPRIVILEGES, form_str(ERR_NOPRIVILEGES));
                                                               ^~~~~~~~~~~~~~~~~~~~~~~~~~
m_stats.c:473:50: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                sendto_one_numeric(source_p, ERR_NOPRIVILEGES, form_str(ERR_NOPRIVILEGES));
                                                               ^~~~~~~~~~~~~~~~~~~~~~~~~~
m_stats.c:501:50: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                sendto_one_numeric(source_p, ERR_NOPRIVILEGES, form_str(ERR_NOPRIVILEGES));
                                                               ^~~~~~~~~~~~~~~~~~~~~~~~~~
m_stats.c:559:50: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                sendto_one_numeric(source_p, ERR_NOPRIVILEGES, form_str(ERR_NOPRIVILEGES));
                                                               ^~~~~~~~~~~~~~~~~~~~~~~~~~
m_stats.c:624:50: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                sendto_one_numeric(source_p, ERR_NOPRIVILEGES, form_str(ERR_NOPRIVILEGES));
                                                               ^~~~~~~~~~~~~~~~~~~~~~~~~~
m_stats.c:711:50: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                sendto_one_numeric(source_p, ERR_NOPRIVILEGES, form_str(ERR_NOPRIVILEGES));
                                                               ^~~~~~~~~~~~~~~~~~~~~~~~~~
m_stats.c:777:50: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                sendto_one_numeric(source_p, ERR_NOPRIVILEGES, form_str(ERR_NOPRIVILEGES));
                                                               ^~~~~~~~~~~~~~~~~~~~~~~~~~
m_stats.c:1045:50: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                sendto_one_numeric(source_p, ERR_NOPRIVILEGES, form_str(ERR_NOPRIVILEGES));
                                                               ^~~~~~~~~~~~~~~~~~~~~~~~~~
m_stats.c:1118:50: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                sendto_one_numeric(source_p, ERR_NOPRIVILEGES, form_str(ERR_NOPRIVILEGES));
                                                               ^~~~~~~~~~~~~~~~~~~~~~~~~~
m_stats.c:1422:50: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                sendto_one_numeric(source_p, ERR_NOPRIVILEGES, form_str(ERR_NOPRIVILEGES));
                                                               ^~~~~~~~~~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/i/iselect/iselect_1.4.0.orig.tar.gz
iselect_browse.c:727:38: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                         sprintf(ca, cpp[y]);
                                     ^~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/j/joe/joe_3.7.orig.tar.gz
b.c:2997:22: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                fprintf(ttsig_f, (char *)joe_gettext(_("\n*** File \'(Unnamed)\'\n")));
                                                 ^       ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
cmd.c:234:5: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                joe_snprintf_0(bf,sizeof(bf),joe_gettext(LOCKMSG2));
                                ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
cmd.c:292:5: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                joe_snprintf_0(bf,sizeof(bf),joe_gettext(LOCKMSG2));
                                ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
main.c:207:19: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                fprintf(stderr, (char *)joe_gettext(_("Couldn't load termcap/terminfo entry\n")));
                                ^       ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
main.c:359:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                fprintf(stderr,(char *)joe_gettext(_("rc file has no :main key binding section or no bindings.  Bye.\n")));
                               ^       ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
rc.c:1492:19: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                fprintf(stderr, (char *)joe_gettext(_("\ndone\n")));
                                ^       ~~~~~~~~~~~~~~~~~~~~~~~~~~
rc.c:1494:19: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                fprintf(stderr, (char *)joe_gettext(_("done\n")));
                                ^       ~~~~~~~~~~~~~~~~~~~~~~~~
scrn.c:720:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr,(char *)joe_gettext(_("Sorry, your terminal can't do absolute cursor positioning.\nIt's broken\n")));
                       ^       ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
termcap.c:216:19: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                fprintf(stderr, (char *)joe_gettext(_("Couldn't load termcap entry.  Using ansi default\n")));
                                ^       ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
tty.c:326:20: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        fprintf(stderr, (char *)joe_gettext(_("Couldn\'t open /dev/tty\n")));
                                        ^       ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
tty.c:743:20: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        fprintf(stderr, (char *)joe_gettext(_("You are at the command shell.  Type 'exit' to return\n")));
                                        ^       ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
tty.c:807:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, (char *)joe_gettext(_("You have suspended the program.  Type 'fg' to return\n")));
                        ^       ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
uerror.c:330:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                joe_snprintf_0(msgbuf, JOE_MSGBUFSIZE, joe_gettext(_("No messages found")));
                ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
uerror.c:344:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                joe_snprintf_0(msgbuf, JOE_MSGBUFSIZE, joe_gettext(_("No messages found")));
                ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ufile.c:65:4: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        joe_snprintf_0(msgbuf, JOE_MSGBUFSIZE, joe_gettext(_("Some files have not been saved.")));
                        ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ufile.c:67:4: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        joe_snprintf_0(msgbuf, JOE_MSGBUFSIZE, joe_gettext(_("All modified files have been saved.")));
                        ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ufile.c:69:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                joe_snprintf_0(msgbuf, JOE_MSGBUFSIZE, joe_gettext(_("No modified files, so no updates needed.")));
                ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/j/jscoverage/jscoverage_0.3.1.orig.tar.gz
src/js.c:163:27: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(gOutFile, prompt);
                          ^~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/j/juman/juman_7.0.orig.tar.bz2
iotool.c:466:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
     fprintf(fp, asctime(tp));
                 ^~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/k/kexec-tools/kexec-tools_2.0.9.orig.tar.gz
kexec/arch/i386/kexec-elf-x86.c:302:7: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                die(error_msg);
                    ^~~~~~~~~
kexec/arch/x86_64/kexec-elf-x86_64.c:279:7: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                die(error_msg);
                    ^~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/l/leafpad/leafpad_0.8.18.1.orig.tar.gz
dialog.c:39:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                str);
                ^~~
dialog.c:64:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                str);
                ^~~
gtkprint.c:168:3: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                message);
                ^~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/l/linux-ntfs/linux-ntfs_2.0.0.orig.tar.gz
logging.c:451:26: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                ret += fprintf(stream, col_prefix);
                                       ^~~~~~~~~~
logging.c:476:26: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                ret += fprintf(stream, col_suffix);
                                       ^~~~~~~~~~
ntfsfix.c:259:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                ntfs_log_info(FAILED);
                              ^~~~~~
ntfsfix.c:265:16: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        ntfs_log_info(OK);
                      ^~
ntfsfix.c:278:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                ntfs_log_info(FAILED);
                              ^~~~~~
ntfsfix.c:282:16: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        ntfs_log_info(OK);
                      ^~
ntfsfix.c:315:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                ntfs_log_info(FAILED);
                              ^~~~~~
ntfsfix.c:321:16: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        ntfs_log_info(OK);
                      ^~
ntfsfix.c:327:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                ntfs_log_info(FAILED);
                              ^~~~~~
ntfsfix.c:333:16: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        ntfs_log_info(OK);
                      ^~
ntfsfix.c:368:19: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                ntfs_log_info(FAILED);
                                              ^~~~~~
ntfsfix.c:376:19: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                ntfs_log_info(FAILED);
                                              ^~~~~~
ntfsfix.c:386:19: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                ntfs_log_info(FAILED);
                                              ^~~~~~
ntfsfix.c:393:19: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                ntfs_log_info(FAILED);
                                              ^~~~~~
ntfsfix.c:406:19: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                ntfs_log_info(FAILED);
                                              ^~~~~~
ntfsfix.c:414:19: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                ntfs_log_info(FAILED);
                                              ^~~~~~
ntfsfix.c:419:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        ntfs_log_info(OK);
                                      ^~
ntfsfix.c:423:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                ntfs_log_info(OK);
                              ^~
ntfsfix.c:447:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                ntfs_log_info(FAILED);
                              ^~~~~~
ntfsfix.c:453:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                ntfs_log_info(FAILED);
                              ^~~~~~
ntfsfix.c:501:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                ntfs_log_info(OK);
                              ^~
ntfsfix.c:505:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                ntfs_log_info(FAILED);
                              ^~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/l/log4c/log4c_1.2.1.orig.tar.gz
appender_type_syslog.c:63:5: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
           a_event->evt_rendered_msg); 
           ^~~~~~~~~~~~~~~~~~~~~~~~~
appender_type_rollingfile.c:168:39: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
   rc = fprintf(rfup->rfu_current_fp, a_event->evt_rendered_msg);
                                      ^~~~~~~~~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/l/lprng/lprng_3.8.B.orig.tar.gz
common/sendjob.c:175:21: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                setstatus(logjob, error );
                                  ^~~~~
common/checkpc.c:117:23: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                if(Verbose)MESSAGE( Version );
                                    ^~~~~~~
common/checkpc.c:1439:21: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        FPRINTF( STDOUT, line );
                                         ^~~~
common/checkpc.c:1448:21: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        FPRINTF( STDOUT, line );
                                         ^~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/l/lyskom-server/lyskom-server_2.1.2.orig.tar.gz
/i/bison/1.35/share/bison/bison.simple:791:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
              yyerror (yymsg);
                       ^~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/m/maloc/maloc_0.2.orig.tar.gz
vnm.c:913:40: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                    fprintf(cons[unit],str);
                                       ^~~
vnm.c:923:40: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                    fprintf(cons[unit],str);
                                       ^~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/m/mboxgrep/mboxgrep_0.7.9.orig.tar.gz
info.c:34:20: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  fprintf (stdout, str);
                   ^~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/m/min12xxw/min12xxw_0.0.9.orig.tar.gz
min12xxw.c:728:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        n = printf(msg);
                   ^~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/m/mp4h/mp4h_1.3.1.orig.tar.gz
mp4h.c:358:28: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
          error (0, errno, optarg);
                           ^~~~~~
mp4h.c:472:34: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                error (0, errno, argv[optind]);
                                 ^~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/n/nap/nap_1.5.4.orig.tar.gz
cmds.c:3316:10: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        wp(win, buf+width+l-columns*width);
                ^~~~~~~~~~~~~~~~~~~~~~~~~
event.c:124:11: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  wp(win, buf);  /* use wp so the output goes to the log file also */
          ^~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/n/nescc/nescc_1.3.5.orig.tar.gz
macro.c:1576:40: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
              cpp_error (pfile, CPP_DL_ERROR, paste_op_error_msg);
                                              ^~~~~~~~~~~~~~~~~~
macro.c:1589:40: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
              cpp_error (pfile, CPP_DL_ERROR, paste_op_error_msg);
                                              ^~~~~~~~~~~~~~~~~~
nesc-generate.c:193:9: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        output((char *)vd->ddecl->name);
               ^       ~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/n/netrek-client-cow/netrek-client-cow_3.3.0.orig.tar.gz
smessage.c:461:36: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      (void) sprintf(&addrmesg[5], teamshort[recip]);
                                   ^~~~~~~~~~~~~~~~
short.c:937:28: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      sprintf(addrbuf + 5, teamshort[me->p_team]);
                           ^~~~~~~~~~~~~~~~~~~~~
docwin.c:60:16: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  sprintf(buf, cbugs);
               ^~~~~
docwin.c:143:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      printf(malloc_fail);
             ^~~~~~~~~~~
docwin.c:186:11: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
          printf(malloc_fail);
                 ^~~~~~~~~~~
docwin.c:223:16: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  sprintf(buf, cbugs);
               ^~~~~
docwin.c:309:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      printf(malloc_fail);
             ^~~~~~~~~~~
docwin.c:340:11: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
          printf(malloc_fail);
                 ^~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/o/omniorb-dfsg/omniorb-dfsg_4.2.0.orig.tar.bz2
cccp.c:8037:48: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        error_with_line (line_for_error (start_line), parse_error);
                                                      ^~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/o/opendchub/opendchub_0.8.2.orig.tar.gz
fileio.c:1898:70: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
   snprintf(nick, (nick_len>MAX_NICK_LEN)?MAX_NICK_LEN+1:nick_len+1, buf);
                                                                     ^~~
fileio.c:2038:38: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        snprintf( working_dir, MAX_FDP_LEN, getenv( "HOME" ) );
                                            ^~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/o/orage/orage_4.8.3.orig.tar.bz2
sspm.c:1493:19: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            sprintf(temp,header->content_type_params[i]);
                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/p/packeth/packeth_1.6.5.orig.tar.bz2
src/callbacks.c:2094:23: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        snprintf(iftext, 19, gtk_entry_get_text(GTK_ENTRY(GTK_COMBO(combo)->entry)));
                             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
src/function.c:3821:40: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        snprintf(buff, strlen(text)+1, text );
                                       ^~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/p/patchutils/patchutils_0.3.4.orig.tar.xz
src/filterdiff.c:1358:28: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        error (EXIT_FAILURE, 0, errstr);
                                                ^~~~~~
src/filterdiff.c:1616:28: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        error (EXIT_FAILURE, 0, errstr);
                                                ^~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/p/pdksh/pdksh_5.2.14.orig.tar.gz
c_ksh.c:561:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        shprintf(newline);
                                 ^~~~~~~
c_ksh.c:861:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                            shprintf(newline);
                                     ^~~~~~~
c_ksh.c:952:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                shprintf(newline);
                                         ^~~~~~~
c_ksh.c:976:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                shprintf(newline);
                                         ^~~~~~~
c_ksh.c:1221:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                bi_errorf(null);
                          ^~~~
c_ksh.c:1242:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        shprintf(newline);
                                 ^~~~~~~
exec.c:147:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                        errorf(null);
                                               ^~~~
expr.c:188:11: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        errorf(null);
                               ^~~~
jobs.c:889:11: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        shprintf(newline);
                 ^~~~~~~
lex.c:859:9: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        errorf(null);
               ^~~~
main.c:546:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                        shellf(newline);
                                               ^~~~~~~
main.c:839:9: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        errorf(null); /* this is never executed - keeps gcc quiet */
               ^~~~
misc.c:251:12: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                shprintf(newline);
                         ^~~~~~~
misc.c:996:15: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                bi_errorf(null);
                                          ^~~~
misc.c:1022:15: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                bi_errorf(null);
                                          ^~~~
misc.c:1073:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        shprintf("'\\'" + 1 - inquote);
                                 ^~~~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/p/pfqueue/pfqueue_0.5.6.orig.tar.gz
fe_socket.c:56:11: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        printf ( b );
                 ^
fe_socket.c:275:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        printf ( buf );
                                 ^~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/p/pipemeter/pipemeter_1.1.3.orig.tar.gz
pipemeter.c:400:20: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    fprintf(stderr,trailer);
                   ^~~~~~~
pipemeter.c:490:19: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  fprintf(stderr, progressbar);
                  ^~~~~~~~~~~
pipemeter.c:500:20: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    fprintf(stderr,trailer);
                   ^~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/p/pork/pork_0.99.8.1.orig.tar.gz
pork_command.c:2127:62: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                screen_win_msg(cur_window(), 0, 0, 1, MSG_TYPE_CMD_OUTPUT, args);
                                                                           ^~~~
pork_perl_xs.c:292:61: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        screen_win_msg(cur_window(), 0, 0, 1, MSG_TYPE_CMD_OUTPUT, msg);
                                                                   ^~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/p/python2.5/python2.5_2.5.5.orig.tar.gz
Objects/unicodeobject.c:846:32: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        PyErr_Format(PyExc_TypeError, &argparse[4]);
                                      ^~~~~~~~~~~~
Objects/unicodeobject.c:2610:32: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        PyErr_Format(PyExc_TypeError, &argparse[4]);
                                      ^~~~~~~~~~~~
Objects/unicodeobject.c:3883:32: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        PyErr_Format(PyExc_TypeError, &argparse[4]);
                                      ^~~~~~~~~~~~
Modules/main.c:108:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                fprintf(f, usage_1);
                           ^~~~~~~
Modules/main.c:109:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                fprintf(f, usage_2);
                           ^~~~~~~
Modules/main.c:110:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                fprintf(f, usage_3);
                           ^~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/q/qfits/qfits_6.2.0.orig.tar.gz
hierarch28.c:576:22: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    fprintf(convtab, CONVTAB_DEFAULT1);
                     ^~~~~~~~~~~~~~~~
hierarch28.c:577:22: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    fprintf(convtab, CONVTAB_DEFAULT2);
                     ^~~~~~~~~~~~~~~~
hierarch28.c:578:22: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    fprintf(convtab, CONVTAB_DEFAULT3);
                     ^~~~~~~~~~~~~~~~
hierarch28.c:579:22: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    fprintf(convtab, CONVTAB_DEFAULT4);
                     ^~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/r/rbldnsd/rbldnsd_0.997a.orig.tar.gz
rbldnsd.c:962:22: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  dslog(LOG_INFO, 0, ibuf);
                     ^~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/r/rcs-blame/rcs-blame_1.3.1.orig.tar.gz
argp-parse.c:158:23: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        __argp_error (state, dgettext (state->root_argp->argp_domain,
                             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/r/recutils/recutils_1.7.orig.tar.gz
csv2rec.c:265:32: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
              fprintf (stderr, errmsg);
                               ^~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/r/resample/resample_1.8.1.orig.tar.gz
resample.c:126:13: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            printf(resampleVersion);
                   ^~~~~~~~~~~~~~~
filterkit.c:562:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
         printf(help);
                ^~~~
filterkit.c:580:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
         printf(help);
                ^~~~
filterkit.c:598:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
         printf(help);
                ^~~~
filterkit.c:620:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
         printf(help);
                ^~~~
../sndlib-20/audio.c:2016:24: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
              fprintf(stderr, tmp = mus_format("can't set %s fragments to: %d x %d",
                              ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
../sndlib-20/audio.c:9750:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
          mus_print(str);
                    ^~~
../sndlib-20/headers.c:5100:40: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    return(mus_error(local_error_type, local_error_msg)); /* pass error info on up the chain now that we've cleaned up the open file descriptor */
                                       ^~~~~~~~~~~~~~~
../sndlib-20/sound.c:63:23: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      fprintf(stderr, mus_error_buffer);
                      ^~~~~~~~~~~~~~~~
../sndlib-20/sound.c:179:19: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  fprintf(stderr, msg);
                  ^~~
../sndlib-20/sound.c:1034:42: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    return(mus_error(MUS_CANT_OPEN_FILE, errmsg));
                                         ^~~~~~
../sndlib-20/sound.c:1070:42: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    return(mus_error(MUS_CANT_OPEN_FILE, errmsg));
                                         ^~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/r/robodoc/robodoc_4.99.40.orig.tar.gz
troff_generator.c:563:24: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    fprintf( dest_doc, line_number_string );
                       ^~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/r/rplay/rplay_3.3.2.orig.tar.gz
command.c:302:66: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            SNPRINTF(SIZE(b->buf + b->nbytes, BUFFER_SIZE - b->nbytes), fmt);
                                                                        ^~~
command.c:1165:36: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                SNPRINTF(SIZE(buf, sizeof(buf)), sound_name);
                                                 ^~~~~~~~~~
command.c:1634:69: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            SNPRINTF(SIZE(command_buffer + n, sizeof(command_buffer) - n), argv[i]);
                                                                           ^~~~~~~
command.c:1685:43: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        SNPRINTF(SIZE(buf + n, sizeof(buf) - n), argv[i]);
                                                 ^~~~~~~
rptp.c:261:10: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                printf(prompt);
                       ^~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/r/rstatd/rstatd_4.0.1.orig.tar.gz
rup.c:332:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                                printf(version);
                                                       ^~~~~~~
rsysinfo.c:185:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                                printf(version0);
                                                       ^~~~~~~~
rsysinfo.c:186:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                                printf(version);
                                                       ^~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/r/rtpproxy/rtpproxy_1.2.1.orig.tar.gz
rtpp_syslog_async.c:88:38: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                syslog(wi->priority, wi->data);
                                     ^~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/r/rxtx/rxtx_2.2pre2.orig.tar.gz
/home/danielm/daca-clang-everything/rxtx-2.2pre2/./src/SerialImp.c:5099:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, msg);
                        ^~~
/home/danielm/daca-clang-everything/rxtx-2.2pre2/./src/SerialImp.c:5136:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, msg);
                        ^~~
/home/danielm/daca-clang-everything/rxtx-2.2pre2/./src/ParallelImp.c:923:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, msg);
                        ^~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/s/sharutils/sharutils_4.9.orig.tar.bz2
shar.c:485:24: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      error (0, errno, local_name);
                       ^~~~~~~~~~
shar.c:494:24: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      error (0, errno, local_name);
                       ^~~~~~~~~~
shar.c:587:24: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      error (0, errno, local_name);
                       ^~~~~~~~~~
unshar.c:456:41: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            error (EXIT_FAILURE, errno, name_buffer);
                                        ^~~~~~~~~~~
unshar.c:514:35: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      error (EXIT_FAILURE, errno, pz_fname);
                                  ^~~~~~~~
unshar.c:520:33: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    error (EXIT_FAILURE, errno, pz_fname);
                                ^~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/s/shush/shush_1.2.3.orig.tar.gz
analyzer.c:657:24: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            if (fprintf(mail, tag) != strlen(tag))
                              ^~~
analyzer.c:678:24: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            if (fprintf(mail, esc) != strlen(esc))
                              ^~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/s/sqlite/sqlite_2.8.17.orig.tar.gz
./src/shell.c:695:20: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    fprintf(stderr,zHelp);
                   ^~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/s/stalonetray/stalonetray_0.8.1.orig.tar.gz
debug.c:39:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr, msg);
                        ^~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/s/sundials/sundials_2.5.0.orig.tar.gz
./cvode.c:4139:21: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    fprintf(stderr, msgfmt);
                    ^~~~~~
./cvodes.c:8961:21: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    fprintf(stderr, msg);
                    ^~~
./ida.c:3381:21: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    fprintf(stderr, msgfmt);
                    ^~~~~~
./idas.c:7182:21: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    fprintf(stderr, msgfmt);
                    ^~~~~~
./kinsol.c:1879:21: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    fprintf(stderr, msgfmt);
                    ^~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/s/swish-e/swish-e_2.4.7.orig.tar.gz
parser.c:1763:38: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    xmlParserError(parse_data->ctxt, str);
                                     ^~~
parser.c:1775:40: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    xmlParserWarning(parse_data->ctxt, str);
                                       ^~~
result_output.c:755:28: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                fprintf(f, s);
                           ^
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/s/sysstat/sysstat_9.0.6.1.orig.tar.gz
prf_stats.c:134:11: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                        printf(txt[isdb]);      /* No args */
                               ^~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/t/t1lib/t1lib_5.1.2.orig.tar.gz
objects.c:960:22: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
       IfTrace0(TRUE,typemsg);
                     ^~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/t/tgif/tgif_4.2.5.orig.tar.gz
arc.c:2044:26: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      sprintf(gszMsgBox, TgLoadString(STID_WARN_INCONSIST_ARC_DIR));
                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
arc.c:2053:26: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      sprintf(gszMsgBox, TgLoadString(STID_WARN_INCONSIST_ARC_DIR));
                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
auxtext.c:116:26: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      sprintf(gszMsgBox, TgLoadString(STID_INPUT_STR));
                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
cutpaste.c:203:26: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      sprintf(gszMsgBox, TgLoadString(STID_CANT_ACQUIRE_X_SELECTION));
                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
cutpaste.c:352:29: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
         sprintf(gszMsgBox, TgLoadString(STID_COPY_FAILED_OBJ_MAYBE_TOO_BIG));
                            ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
cutpaste.c:355:29: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
         sprintf(gszMsgBox, TgLoadString(STID_COPY_BUFFER_UPDATED));
                            ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
drawing.c:3342:22: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      sprintf(title, TgLoadString(STID_EDIT_UNNAME_ATTR_DOTS));
                     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
drawing.c:3463:22: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      sprintf(title, TgLoadString(STID_EDIT_UNNAME_ATTR_DOTS));
                     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/t/tidy/tidy_20091223cvs.orig.tar.gz
localize.c:1376:41: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    messageNode( doc, TidyAccess, node, fmt );
                                        ^~~
localize.c:1383:41: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    messageNode( doc, TidyAccess, node, fmt );
                                        ^~~
localize.c:1402:44: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        messageNode(doc, TidyWarning, rpt, fmt);
                                           ^~~
localize.c:1483:44: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        messageNode(doc, TidyWarning, rpt, fmt);
                                           ^~~
localize.c:1502:45: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        messageNode(doc, TidyWarning, node, fmt);
                                            ^~~
localize.c:1551:42: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        messageNode(doc, TidyError, rpt, fmt);
                                         ^~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/t/timidity/timidity_2.13.2.orig.tar.gz
wrdt_tty.c:295:11: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
          printf(fillbuf);
                 ^~~~~~~
wrdt_tty.c:311:11: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
          printf(fillbuf);
                 ^~~~~~~
timidity.c:3754:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                fprintf(fp, h);
                                            ^
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/t/tnef/tnef_1.4.9.orig.tar.gz
main.c:256:30: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            fprintf (stderr, COPYRIGHTS);
                             ^~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/u/uucp/uucp_1.07.orig.tar.gz
uuconv.c:679:19: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      fprintf (e, *pz);
                  ^~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/v/vde2/vde2_2.3.2.orig.tar.gz
cmdparse.c:287:21: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                                                        fprintf(mf,argv[i]);
                                                                                   ^~~~~~~
cmdparse.c:293:21: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                                                        fprintf(mf,argv[num]);
                                                                                   ^~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/v/viewglob/viewglob_2.0.4.orig.tar.gz
../common/syslogging.c:43:19: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        syslog(priority, message);
                         ^~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/v/vilistextum/vilistextum_2.6.9.orig.tar.gz
main.c:168:9: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        printf(help_text);
               ^~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/w/wavbreaker/wavbreaker_0.11.orig.tar.gz
sample.c:272:38: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                     message);
                                     ^~~~~~~
sample.c:277:55: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    gtk_message_dialog_format_secondary_text( dialog, info_text);
                                                      ^~~~~~~~~
popupmessage.c:41:38: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                     message);
                                     ^~~~~~~
popupmessage.c:43:75: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    gtk_message_dialog_format_secondary_text( GTK_MESSAGE_DIALOG(dialog), description);
                                                                          ^~~~~~~~~~~
reallyquit.c:39:38: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
                                     message);
                                     ^~~~~~~
reallyquit.c:43:55: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
    gtk_message_dialog_format_secondary_text( dialog, info_text);
                                                      ^~~~~~~~~
wavinfo.c:40:21: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            printf( wav_get_error_message());
                    ^~~~~~~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/w/weightwatcher/weightwatcher_1.12.orig.tar.gz
xml.c:569:24: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        sprintf(value, ((char **)key[i].ptr)[0]);
                       ^~~~~~~~~~~~~~~~~~~~~~~~
xml.c:586:22: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      sprintf(value, key[i].keylist[*((int *)key[i].ptr)]);
                     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xml.c:595:24: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        sprintf(value, key[i].keylist[((int *)key[i].ptr)[0]]);
                       ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
xml.c:601:26: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
          sprintf(value, key[i].keylist[((int *)key[i].ptr)[j]]);
                         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/x/xfingerd/xfingerd_0.6.orig.tar.gz
fingerd.c:200:14: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
      printf(fg->refused);
             ^~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/x/xwpe/xwpe_1.5.30a.orig.tar.gz
we_fl_unix.c:1047:20: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
            printf(e_msg[ERR_HITCR]);
                   ^~~~~~~~~~~~~~~~
we_prog.c:1480:10: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
  printf(e_msg[ERR_HITCR]);
         ^~~~~~~~~~~~~~~~
ftp://ftp.sunet.se/pub/Linux/distributions/Debian/debian/pool/main/y/yagiuda/yagiuda_1.19.orig.tar.gz
error_message.c:9:17: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
        fprintf(stderr,str);
                       ^~~
==========================================================
number of projects scanned: 2196
number of warnings: 428