URL: <http://savannah.gnu.org/bugs/?37738>
Summary: Gets is a security hole Project: GNU GRUB Submitted by: wormzy Submitted on: Thu 15 Nov 2012 03:02:57 AM GMT Category: Compilation Severity: Major Priority: 5 - Normal Item Group: Action Request Status: None Privacy: Public Assigned to: None Originator Name: Originator Email: Open/Closed: Open Discussion Lock: Any Release: Release: Bazaar - trunk Reproducibility: Every Time Planned Release: None _______________________________________________________ Details: Compiling grub2 with glibc 2.16 results in a compilation failure due to 'gets' undeclaration:- x86_64-unknown-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../.. -I../../intl -MT argp-eexst.o -MD -MP -MF .deps/argp-eexst.Tpo -c -o argp-eexst.o argp-eexst.c In file included from argp.h:22:0, from argp-eexst.c:25: ./stdio.h:456:1: error: 'gets' undeclared here (not in a function) ----- Working solution is to remove line 144 -- _GL_WARN_ON_USE (gets, "gets is a security hole - use fgets instead"); -- from grub/grub-core/gnulib/stdio.in.h in svn. Building on Arch Linux. glibc - 2.16.0 gettext - 0.18.1.1 autoconf - 2.69 automake - 1.12.4 binutils - 2.23 gcc - 4.7.2 libtool - 2.4.2 m4 1.4.16 make - 3.82 pkg-config - 0.27.1 _______________________________________________________ File Attachments: ------------------------------------------------------- Date: Thu 15 Nov 2012 03:02:57 AM GMT Name: build.log Size: 50kB By: wormzy Build log of unsuccessful build <http://savannah.gnu.org/bugs/download.php?file_id=26913> _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/bugs/?37738> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/ _______________________________________________ Bug-grub mailing list Bug-grub@gnu.org https://lists.gnu.org/mailman/listinfo/bug-grub