Package: src:freehsm-c Version: 1.4.0-1 Severity: serious Tags: ftbfs forky sid
Dear maintainer: During a rebuild of all packages in unstable, this package failed to build. Below you will find the last part of the build log (probably the most relevant part, but not necessarily). If required, the full build log is available here: https://people.debian.org/~sanvila/build-logs/202608/ About the archive rebuild: The build was made on virtual machines from AWS, using sbuild and a reduced chroot with only build-essential packages. If you cannot reproduce the bug please contact me privately, as I am willing to provide ssh access to a virtual machine where the bug is fully reproducible. If this is really a bug in one of the build-depends, please use reassign and add an affects on src:freehsm-c, so that this is still visible in the BTS web page for this package. Thanks. -------------------------------------------------------------------------------- [...] debian/rules clean dh clean dh_auto_clean make -j2 distclean make[1]: Entering directory '/<<PKGBUILDDIR>>' rm -f libfreehsm-fips.so src/fhsm_state.o src/fhsm_memory.o src/fhsm_crypto.o src/fhsm_audit.o src/fhsm_pkcs11.o src/fhsm_ecdsa_raw.o src/fhsm_pq_params.o src/fhsm_create_attrs.o src/fhsm_token.o src/fhsm_session.o src/fhsm_integrity.o src/fhsm_pairwise.o src/fhsm_drbg.o src/fhsm_tpm.o src/fhsm_token_tpm.o src/fhsm_mode.o src/dispatch/fhsm_dispatch_legacy.o src/gen/fhsm_dispatch.o src/dispatch/fhsm_dispatch_common.o src/dispatch/fhsm_dispatch_digest.o src/dispatch/fhsm_dispatch_hmac.o src/dispatch/fhsm_dispatch_aes.o src/dispatch/fhsm_dispatch_kdf.o src/dispatch/fhsm_dispatch_pkey.o src/dispatch/fhsm_dispatch_pq.o src/dispatch/fhsm_dispatch_kmac.o src/dispatch/fhsm_dispatch_concat.o src/dispatch/fhsm_dispatch_hybrid.o kat/fhsm_kat_vectors.o kat/cavp_extended.o tests/test_smoke tests/*.o rm -f freehsm-c-src.tar.xz freehsm-c-src.tar.xz.sha256 rm -rf out/ rm -f include/fhsm_pkcs11_mechanisms.h rm -f src/gen/fhsm_dispatch.c rm -f docs/MECHANISMS.md rm -rf __pycache__ scripts/__pycache__ make[1]: Leaving directory '/<<PKGBUILDDIR>>' dh_clean debian/rules binary dh binary dh_update_autotools_config dh_autoreconf dh_auto_configure debian/rules override_dh_auto_build make[1]: Entering directory '/<<PKGBUILDDIR>>' python3 scripts/gen_p11_thunks.py --profile=fips-strict --root=/<<PKGBUILDDIR>> [gen_p11_thunks] profile=fips-strict approved=66 non-approved=12 total=78 [gen_p11_thunks] wrote /<<PKGBUILDDIR>>/include/fhsm_pkcs11_mechanisms.h [gen_p11_thunks] wrote /<<PKGBUILDDIR>>/src/gen/fhsm_dispatch.c [gen_p11_thunks] wrote /<<PKGBUILDDIR>>/docs/MECHANISMS.md make libfreehsm-fips.so make[2]: Entering directory '/<<PKGBUILDDIR>>' cc -Wall -Wextra -Wpedantic -Werror -Wstrict-prototypes -Wshadow -Wpointer-arith -Wcast-align -Wwrite-strings -Wnested-externs -Wmissing-prototypes -Wmissing-declarations -Wredundant-decls -Wstrict-aliasing=2 -Wformat=2 -Wformat-security -Wno-format-nonliteral -Wnull-dereference -Wdouble-promotion -Wconversion -Wno-sign-conversion -Wno-unused-parameter -fstack-protector-strong -D_FORTIFY_SOURCE=2 -fPIC -fstack-clash-protection -fcf-protection=full -fvisibility=hidden -fno-strict-aliasing -fno-omit-frame-pointer -DOPENSSL_API_COMPAT=0x30000000L -ffile-prefix-map=/<<PKGBUILDDIR>>= -fdebug-prefix-map=/<<PKGBUILDDIR>>= -frandom-seed=fhsm-1.4.0-FIPS -Wno-builtin-macro-redefined -D__DATE__='"redacted"' -D__TIME__='"redacted"' -g3 -O2 -std=c11 -D_GNU_SOURCE -Iinclude -I/usr/local/ssl/include -Isrc/dispatch -c -o src/fhsm_state.o src/fhsm_state.c cc -Wall -Wextra -Wpedantic -Werror -Wstrict-prototypes -Wshadow -Wpointer-arith -Wcast-align -Wwrite-strings -Wnested-externs -Wmissing-prototypes -Wmissing-declarations -Wredundant-decls -Wstrict-aliasing=2 -Wformat=2 -Wformat-security -Wno-format-nonliteral -Wnull-dereference -Wdouble-promotion -Wconversion -Wno-sign-conversion -Wno-unused-parameter -fstack-protector-strong -D_FORTIFY_SOURCE=2 -fPIC -fstack-clash-protection -fcf-protection=full -fvisibility=hidden -fno-strict-aliasing -fno-omit-frame-pointer -DOPENSSL_API_COMPAT=0x30000000L -ffile-prefix-map=/<<PKGBUILDDIR>>= -fdebug-prefix-map=/<<PKGBUILDDIR>>= -frandom-seed=fhsm-1.4.0-FIPS -Wno-builtin-macro-redefined -D__DATE__='"redacted"' -D__TIME__='"redacted"' -g3 -O2 -std=c11 -D_GNU_SOURCE -Iinclude -I/usr/local/ssl/include -Isrc/dispatch -c -o src/fhsm_memory.o src/fhsm_memory.c cc -Wall -Wextra -Wpedantic -Werror -Wstrict-prototypes -Wshadow -Wpointer-arith -Wcast-align -Wwrite-strings -Wnested-externs -Wmissing-prototypes -Wmissing-declarations -Wredundant-decls -Wstrict-aliasing=2 -Wformat=2 -Wformat-security -Wno-format-nonliteral -Wnull-dereference -Wdouble-promotion -Wconversion -Wno-sign-conversion -Wno-unused-parameter -fstack-protector-strong -D_FORTIFY_SOURCE=2 -fPIC -fstack-clash-protection -fcf-protection=full -fvisibility=hidden -fno-strict-aliasing -fno-omit-frame-pointer -DOPENSSL_API_COMPAT=0x30000000L -ffile-prefix-map=/<<PKGBUILDDIR>>= -fdebug-prefix-map=/<<PKGBUILDDIR>>= -frandom-seed=fhsm-1.4.0-FIPS -Wno-builtin-macro-redefined -D__DATE__='"redacted"' -D__TIME__='"redacted"' -g3 -O2 -std=c11 -D_GNU_SOURCE -Iinclude -I/usr/local/ssl/include -Isrc/dispatch -c -o src/fhsm_crypto.o src/fhsm_crypto.c cc -Wall -Wextra -Wpedantic -Werror -Wstrict-prototypes -Wshadow -Wpointer-arith -Wcast-align -Wwrite-strings -Wnested-externs -Wmissing-prototypes -Wmissing-declarations -Wredundant-decls -Wstrict-aliasing=2 -Wformat=2 -Wformat-security -Wno-format-nonliteral -Wnull-dereference -Wdouble-promotion -Wconversion -Wno-sign-conversion -Wno-unused-parameter -fstack-protector-strong -D_FORTIFY_SOURCE=2 -fPIC -fstack-clash-protection -fcf-protection=full -fvisibility=hidden -fno-strict-aliasing -fno-omit-frame-pointer -DOPENSSL_API_COMPAT=0x30000000L -ffile-prefix-map=/<<PKGBUILDDIR>>= -fdebug-prefix-map=/<<PKGBUILDDIR>>= -frandom-seed=fhsm-1.4.0-FIPS -Wno-builtin-macro-redefined -D__DATE__='"redacted"' -D__TIME__='"redacted"' -g3 -O2 -std=c11 -D_GNU_SOURCE -Iinclude -I/usr/local/ssl/include -Isrc/dispatch -c -o src/fhsm_audit.o src/fhsm_audit.c cc -Wall -Wextra -Wpedantic -Werror -Wstrict-prototypes -Wshadow -Wpointer-arith -Wcast-align -Wwrite-strings -Wnested-externs -Wmissing-prototypes -Wmissing-declarations -Wredundant-decls -Wstrict-aliasing=2 -Wformat=2 -Wformat-security -Wno-format-nonliteral -Wnull-dereference -Wdouble-promotion -Wconversion -Wno-sign-conversion -Wno-unused-parameter -fstack-protector-strong -D_FORTIFY_SOURCE=2 -fPIC -fstack-clash-protection -fcf-protection=full -fvisibility=hidden -fno-strict-aliasing -fno-omit-frame-pointer -DOPENSSL_API_COMPAT=0x30000000L -ffile-prefix-map=/<<PKGBUILDDIR>>= -fdebug-prefix-map=/<<PKGBUILDDIR>>= -frandom-seed=fhsm-1.4.0-FIPS -Wno-builtin-macro-redefined -D__DATE__='"redacted"' -D__TIME__='"redacted"' -g3 -O2 -std=c11 -D_GNU_SOURCE -Iinclude -I/usr/local/ssl/include -Isrc/dispatch -c -o src/fhsm_pkcs11.o src/fhsm_pkcs11.c src/fhsm_pkcs11.c: In function âaes_gmacâ: src/fhsm_pkcs11.c:3964:53: error: â%zuâ directive output may be truncated writing between 1 and 20 bytes into a region of size 12 [-Werror=format-truncation=] 3964 | snprintf(cipher_name, sizeof(cipher_name), "AES-%zu-GCM", key_len * 8); | ^~~ src/fhsm_pkcs11.c:3964:48: note: directive argument in the range [0, 18446744073709551608] 3964 | snprintf(cipher_name, sizeof(cipher_name), "AES-%zu-GCM", key_len * 8); | ^~~~~~~~~~~~~ In file included from /usr/include/stdio.h:970, from src/fhsm_pkcs11.c:51: In function âsnprintfâ, inlined from âaes_gmacâ at src/fhsm_pkcs11.c:3964:5: /usr/include/x86_64-linux-gnu/bits/stdio2.h:68:10: note: â__builtin___snprintf_chkâ output between 10 and 29 bytes into a destination of size 16 68 | return __builtin___snprintf_chk (__s, __n, __USE_FORTIFY_LEVEL - 1, | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 69 | __glibc_objsize (__s), __fmt, | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 70 | __va_arg_pack ()); | ~~~~~~~~~~~~~~~~~ src/fhsm_pkcs11.c: In function âaes_cmacâ: src/fhsm_pkcs11.c:3992:53: error: â%zuâ directive output may be truncated writing between 1 and 20 bytes into a region of size 12 [-Werror=format-truncation=] 3992 | snprintf(cipher_name, sizeof(cipher_name), "AES-%zu-CBC", key_len * 8); | ^~~ src/fhsm_pkcs11.c:3992:48: note: directive argument in the range [0, 18446744073709551608] 3992 | snprintf(cipher_name, sizeof(cipher_name), "AES-%zu-CBC", key_len * 8); | ^~~~~~~~~~~~~ In function âsnprintfâ, inlined from âaes_cmacâ at src/fhsm_pkcs11.c:3992:5: /usr/include/x86_64-linux-gnu/bits/stdio2.h:68:10: note: â__builtin___snprintf_chkâ output between 10 and 29 bytes into a destination of size 16 68 | return __builtin___snprintf_chk (__s, __n, __USE_FORTIFY_LEVEL - 1, | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 69 | __glibc_objsize (__s), __fmt, | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 70 | __va_arg_pack ()); | ~~~~~~~~~~~~~~~~~ cc1: all warnings being treated as errors make[2]: *** [Makefile:155: src/fhsm_pkcs11.o] Error 1 make[2]: Leaving directory '/<<PKGBUILDDIR>>' make[1]: *** [debian/rules:8: override_dh_auto_build] Error 2 make[1]: Leaving directory '/<<PKGBUILDDIR>>' make: *** [debian/rules:4: binary] Error 2 dpkg-buildpackage: error: debian/rules binary subprocess failed with exit status 2 --------------------------------------------------------------------------------
