Bug#948645: pesign FTBFS: nss-induced error: unsigned conversion from ‘int’ to ‘unsigned char’ changes value from ‘496’ to ‘240’ [-Werror=overflow]
Source: pesign
Version: 0.112-5
Severity: serious
pesign fails to build from source in unstable:
| /usr/bin/gcc -g -O2 -ffile-prefix-map=/build/1st/pesign-0.112=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Werror -Wno-cpp -Wsign-compare -Wno-unused-result -Wno-unused-function -std=gnu11 -fshort-wchar -fPIC -flto -fno-strict-aliasing -fno-merge-constants -fkeep-inline-functions -D_GNU_SOURCE -DCONFIG_x86_64 -I/build/1st/pesign-0.112/include -I/usr/include/efivar -I/usr/include/nss -I/usr/include/nspr -I/usr/include/uuid -Werror -Wdate-time -D_FORTIFY_SOURCE=2 -c -o efikeygen.o efikeygen.c
| In file included from /usr/include/nss/cert.h:22,
| from efikeygen.c:39:
| efikeygen.c: In function 'add_cert_type':
| /usr/include/nss/certt.h:460:5: error: unsigned conversion from 'int' to 'unsigned char' changes value from '496' to '240' [-Werror=overflow]
| 460 | (NS_CERT_TYPE_SSL_CLIENT | NS_CERT_TYPE_SSL_SERVER | NS_CERT_TYPE_EMAIL | \
| | ^
| efikeygen.c:208:23: note: in expansion of macro 'NS_CERT_TYPE_APP'
| 208 | unsigned char type = NS_CERT_TYPE_APP;
| | ^~~~~~~~~~~~~~~~
| cc1: all warnings being treated as errors
| make[2]: *** [/build/1st/pesign-0.112/Make.rules:33: efikeygen.o] Error 1
| make[2]: Leaving directory '/build/1st/pesign-0.112/src'
| make[1]: *** [Makefile:25: all] Error 2
| make[1]: Leaving directory '/build/1st/pesign-0.112'
| dh_auto_build: make -j1 returned exit code 2
| make: *** [debian/rules:15: build] Error 255
| dpkg-buildpackage: error: debian/rules build subprocess returned exit status 2
Observed by crossqa:
http://crossqa.subdivi.de/build/pesign_0.112-5_arm64_20200111051741.log
Reproduced by reproducible builds:
https://tests.reproducible-builds.org/debian/rbuild/unstable/amd64/pesign_0.112-5.rbuild.log.gz
Very likely, this failure is due to a change in nss. I've Cced the
mozilla team.
Helmut
Reply to: