diff --git a/ircd/base.cc b/ircd/base.cc
index 818bcbddf..0bc089006 100644
--- a/ircd/base.cc
+++ b/ircd/base.cc
@@ -12,7 +12,7 @@
 #include <boost/archive/iterators/binary_from_base64.hpp>
 #include <boost/archive/iterators/transform_width.hpp>
 
-namespace __attribute__((visibility("internal"))) ircd
+namespace [[gnu::visibility("hidden")]] ircd
 {
 	thread_local char base_conv_tmp_buf[64_KiB];
 }
diff --git a/ircd/ctx_ole.cc b/ircd/ctx_ole.cc
index d92d1fc99..2ab0d69fd 100644
--- a/ircd/ctx_ole.cc
+++ b/ircd/ctx_ole.cc
@@ -91,7 +91,8 @@ ircd::ctx::ole::offload::offload(const opts &opts,
 	// we don't care about eptr anyway.
 	const uninterruptible uninterruptible;
 
-	push(std::move(closure)); do
+	// scope address required for clang-7
+	ole::push(std::move(closure)); do
 	{
 		wait();
 	}
diff --git a/ircd/openssl.cc b/ircd/openssl.cc
index a37872a5a..3248e10f4 100644
--- a/ircd/openssl.cc
+++ b/ircd/openssl.cc
@@ -2288,9 +2288,12 @@ noexcept try
 }
 catch(const std::exception &e)
 {
-	log::critical("OpenSSL thread id callback (tid=%p): %s",
-	              (const void *)tid,
-	              e.what());
+	log::critical
+	{
+		"OpenSSL thread id callback (tid=%p): %s",
+		(const void *)tid,
+		e.what()
+	};
 
 	ircd::terminate();
 }
@@ -2302,7 +2305,11 @@ ircd::openssl::locking::callback(const int mode,
                                  const int line)
 noexcept try
 {
-	log::debug("OpenSSL: %s", debug(mode, num, file, line));
+	log::debug
+	{
+		"OpenSSL: %s",
+		debug(mode, num, file, line)
+	};
 
 	auto &mutex
 	{
@@ -2321,9 +2328,12 @@ noexcept try
 }
 catch(const std::exception &e)
 {
-	log::critical("OpenSSL locking callback (%s): %s",
-	              debug(mode, num, file, line),
-	              e.what());
+	log::critical
+	{
+		"OpenSSL locking callback (%s): %s",
+		debug(mode, num, file, line),
+		e.what()
+	};
 
 	ircd::terminate();
 }