wformat

The flag is -Wformat-nonliteral or -Wformat=2.

In particular, this one is reported by -Wformat-nonliteral or -Wformat-security.

They should just let the compiler do the job like Wformat=2 and skip any preprocess and constexpr function.

You get type safety with std::printf, with most compilers, assuming you enable -Wformat on GCC or similar options in other compilers.

From the gcc docs: -Wformat is included in -Wall.

-Wformat-security only includes a weaker variant that will warn if you pass a variable and no arguments to printf.

For more control over some aspects of format checking, the options -Wformat-y2k, -Wno-format-extra-args, -Wno-format-zero-length, -Wformat-nonliteral, -Wformat-security, and -Wformat=2 are available, but are not included in -Wall.

* -Wformat-security: adds some extra warnings around possible misuse of printf and scanf.

Yes, but gcc gives you no way to explain to the compiler that %Q takes a struct foobar* as argument, so either you don't use extensions, and have the seatbelts provided by -Wformat, or you use extensions and have no seatbelts at all.

The flag is -Wformat-nonliteral or -Wformat=2.

In particular, this one is reported by -Wformat-nonliteral or -Wformat-security.

They should just let the compiler do the job like Wformat=2 and skip any preprocess and constexpr function.