Source: pesign Version: 0.112-5 Severity: serious pesign fails to build from source in unstable:
| /usr/bin/gcc -g -O2 -ffile-prefix-map=/build/1st/pesign-0.112=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -Werror -Wno-cpp -Wsign-compare -Wno-unused-result -Wno-unused-function -std=gnu11 -fshort-wchar -fPIC -flto -fno-strict-aliasing -fno-merge-constants -fkeep-inline-functions -D_GNU_SOURCE -DCONFIG_x86_64 -I/build/1st/pesign-0.112/include -I/usr/include/efivar -I/usr/include/nss -I/usr/include/nspr -I/usr/include/uuid -Werror -Wdate-time -D_FORTIFY_SOURCE=2 -c -o efikeygen.o efikeygen.c | In file included from /usr/include/nss/cert.h:22, | from efikeygen.c:39: | efikeygen.c: In function 'add_cert_type': | /usr/include/nss/certt.h:460:5: error: unsigned conversion from 'int' to 'unsigned char' changes value from '496' to '240' [-Werror=overflow] | 460 | (NS_CERT_TYPE_SSL_CLIENT | NS_CERT_TYPE_SSL_SERVER | NS_CERT_TYPE_EMAIL | \ | | ^ | efikeygen.c:208:23: note: in expansion of macro 'NS_CERT_TYPE_APP' | 208 | unsigned char type = NS_CERT_TYPE_APP; | | ^~~~~~~~~~~~~~~~ | cc1: all warnings being treated as errors | make[2]: *** [/build/1st/pesign-0.112/Make.rules:33: efikeygen.o] Error 1 | make[2]: Leaving directory '/build/1st/pesign-0.112/src' | make[1]: *** [Makefile:25: all] Error 2 | make[1]: Leaving directory '/build/1st/pesign-0.112' | dh_auto_build: make -j1 returned exit code 2 | make: *** [debian/rules:15: build] Error 255 | dpkg-buildpackage: error: debian/rules build subprocess returned exit status 2 Observed by crossqa: http://crossqa.subdivi.de/build/pesign_0.112-5_arm64_20200111051741.log Reproduced by reproducible builds: https://tests.reproducible-builds.org/debian/rbuild/unstable/amd64/pesign_0.112-5.rbuild.log.gz Very likely, this failure is due to a change in nss. I've Cced the mozilla team. Helmut