Issue still present in gcc-6.3. Setting assignee to recipe maintainer. Khem, please feel free to update estimate, target, etc. to suit your workload.

Note: to observe the failures comment out the recipe's SECURITY_STRINGFORMAT entry in security_cflags.inc and build the recipe with a configuration that utilises security_cflags (i.e. the poky-lsb distro).

Can you attach a link to kind of failures seen ?

Created attachment 3627 [details]
log.do_compile from gcc

We're seeing errors like:

../../../../../../../work-shared/gcc-6.3.0-r0/gcc-6.3.0/libcpp/expr.c:686:18: error: format not a string literal and no format arguments [-Werror=format-security]
        0, message);


I've attached a full log.do_compile for a configuration using poky-lsb with the SECURITY_STRINGFORMAT_pn-gcc = "" line commented out in meta/conf/distro/include/security_flags.inc

I think this has been fixed in 2.4 along with secflags reworks, we do not exclude gcc from SECURITY_FLAGS anymore.