Bug 1359915 - Enable compile-time warnings for security-sensitive patterns. r=froydnj

build/moz.configure/warnings.configure

@@ -112,6 +112,11 @@ check_and_add_gcc_warning('-Wno-format',
 # We hit this all over the place with the gtest INSTANTIATE_TEST_CASE_P macro
 check_and_add_gcc_warning('-Wno-gnu-zero-variadic-macro-arguments')
 
+# Add compile-time warnings for unprotected functions and format functions
+# that represent possible security problems
+check_and_add_gcc_warning('-Wformat-security')
+check_and_add_gcc_warning('-Wformat-overflow=2')
+
 # Please keep these last in this file
 add_old_configure_assignment('_WARNINGS_CFLAGS', warnings_cflags)
 add_old_configure_assignment('_WARNINGS_CXXFLAGS', warnings_cxxflags)