[openwrt/openwrt] fortify-headers: fix -Werror=format-nonliteral in fortify/stdio.h

[LEDE Commits]

hauke pushed a commit to openwrt/openwrt.git, branch main:
https://git.openwrt.org/b23726664090098acb9318caf41f7d6961cd1074

commit b23726664090098acb9318caf41f7d6961cd1074
Author: Hauke Mehrtens <hauke at hauke-m.de>
AuthorDate: Sun Feb 15 16:45:38 2026 +0100

    fortify-headers: fix -Werror=format-nonliteral in fortify/stdio.h
    
    Some applications might activate -Werror=format-nonliteral when building
    their application. This breaks fortify headers build. Tell GCC to ignore
    such warnings for this code.
    
    This fixes the libubox and ucode build:
    ```
    /include/fortify/stdio.h: In function 'snprintf':
    /include/fortify/stdio.h:101:9: error: format not a string literal, argument types not checked [-Werror=format-nonliteral]
      101 |         return __orig_snprintf(__s, __n, __f, __builtin_va_arg_pack());
          |         ^~~~~~
    /include/fortify/stdio.h: In function 'sprintf':
    /include/fortify/stdio.h:110:17: error: format not a string literal, argument types not checked [-Werror=format-nonliteral]
      110 |                 __r = __orig_snprintf(__s, __b, __f, __builtin_va_arg_pack());
          |                 ^~~
    /include/fortify/stdio.h:114:17: error: format not a string literal, argument types not checked [-Werror=format-nonliteral]
      114 |                 __r = __orig_sprintf(__s, __f, __builtin_va_arg_pack());
          |                 ^~~
    cc1: all warnings being treated as errors
    ninja: build stopped: subcommand failed.
    ```
    
    Link: https://github.com/openwrt/openwrt/pull/22042
    Signed-off-by: Hauke Mehrtens <hauke at hauke-m.de>
---
 ...ore-Wformat-nonliteral-in-snprintf-and-sp.patch | 61 ++++++++++++++++++++++
 1 file changed, 61 insertions(+)

diff --git a/toolchain/fortify-headers/patches/003-stdio.h-ignore-Wformat-nonliteral-in-snprintf-and-sp.patch b/toolchain/fortify-headers/patches/003-stdio.h-ignore-Wformat-nonliteral-in-snprintf-and-sp.patch
new file mode 100644
index 0000000000..7af51d360d
--- /dev/null
+++ b/toolchain/fortify-headers/patches/003-stdio.h-ignore-Wformat-nonliteral-in-snprintf-and-sp.patch
@@ -0,0 +1,61 @@
+From 793d85b802e8b1a179134056894249c5a0270c72 Mon Sep 17 00:00:00 2001
+From: Hauke Mehrtens <hauke at hauke-m.de>
+Date: Sun, 15 Feb 2026 19:03:50 +0100
+Subject: stdio.h: ignore -Wformat-nonliteral in snprintf and sprintf
+
+Some applications might activate -Werror=format-nonliteral when building
+their application. This breaks fortify headers build. Tell GCC to ignore
+such warnings for this code.
+
+This fixes the libubox and ucode build:
+```
+/include/fortify/stdio.h: In function 'snprintf':
+/include/fortify/stdio.h:101:9: error: format not a string literal, argument types not checked [-Werror=format-nonliteral]
+  101 |         return __orig_snprintf(__s, __n, __f, __builtin_va_arg_pack());
+      |         ^~~~~~
+/include/fortify/stdio.h: In function 'sprintf':
+/include/fortify/stdio.h:110:17: error: format not a string literal, argument types not checked [-Werror=format-nonliteral]
+  110 |                 __r = __orig_snprintf(__s, __b, __f, __builtin_va_arg_pack());
+      |                 ^~~
+/include/fortify/stdio.h:114:17: error: format not a string literal, argument types not checked [-Werror=format-nonliteral]
+  114 |                 __r = __orig_sprintf(__s, __f, __builtin_va_arg_pack());
+      |                 ^~~
+cc1: all warnings being treated as errors
+ninja: build stopped: subcommand failed.
+```
+
+Signed-off-by: Hauke Mehrtens <hauke at hauke-m.de>
+---
+ include/stdio.h | 6 ++++++
+ 1 file changed, 6 insertions(+)
+
+--- a/include/stdio.h
++++ b/include/stdio.h
+@@ -98,7 +98,10 @@ _FORTIFY_FN(snprintf) int snprintf(char
+ 
+ 	if (__n > __b)
+ 		__builtin_trap();
++#pragma GCC diagnostic push
++#pragma GCC diagnostic ignored "-Wformat-nonliteral"
+ 	return __orig_snprintf(__s, __n, __f, __builtin_va_arg_pack());
++#pragma GCC diagnostic pop
+ }
+ 
+ _FORTIFY_FN(sprintf) int sprintf(char *__s, const char *__f, ...)
+@@ -106,6 +109,8 @@ _FORTIFY_FN(sprintf) int sprintf(char *_
+ 	size_t __b = __builtin_object_size(__s, 0);
+ 	int __r;
+ 
++#pragma GCC diagnostic push
++#pragma GCC diagnostic ignored "-Wformat-nonliteral"
+ 	if (__b != (size_t)-1) {
+ 		__r = __orig_snprintf(__s, __b, __f, __builtin_va_arg_pack());
+ 		if (__r != -1 && (size_t)__r >= __b)
+@@ -114,6 +119,7 @@ _FORTIFY_FN(sprintf) int sprintf(char *_
+ 		__r = __orig_sprintf(__s, __f, __builtin_va_arg_pack());
+ 	}
+ 	return __r;
++#pragma GCC diagnostic pop
+ }
+ 
+ #ifdef __cplusplus