[Debian-iot-maintainers] Bug#1085354: mbedtls FTBFS on arm64 with gcc 14

[Adrian Bunk]

Source: mbedtls
Version: 3.6.0-3
Severity: serious
Tags: ftbfs

https://buildd.debian.org/status/fetch.php?pkg=mbedtls&arch=arm64&ver=3.6.0-3&stamp=1729201458&raw=0

...
In file included from /<<PKGBUILDDIR>>/library/ctr_drbg.c:13:
In function ‘mbedtls_xor’,
    inlined from ‘ctr_drbg_update_internal’ at /<<PKGBUILDDIR>>/library/ctr_drbg.c:372:5:
/<<PKGBUILDDIR>>/library/common.h:235:17: error: array subscript 48 is outside array bounds of ‘unsigned char[48]’ [-Werror=array-bounds=]
  235 |         r[i] = a[i] ^ b[i];
      |                ~^~~
/<<PKGBUILDDIR>>/library/ctr_drbg.c: In function ‘ctr_drbg_update_internal’:
/<<PKGBUILDDIR>>/library/ctr_drbg.c:335:19: note: at offset 48 into object ‘tmp’ of size 48
  335 |     unsigned char tmp[MBEDTLS_CTR_DRBG_SEEDLEN];
      |                   ^~~
In function ‘mbedtls_xor’,
    inlined from ‘ctr_drbg_update_internal’ at /<<PKGBUILDDIR>>/library/ctr_drbg.c:372:5:
/<<PKGBUILDDIR>>/library/common.h:235:24: error: array subscript 48 is outside array bounds of ‘const unsigned char[48]’ [-Werror=array-bounds=]
  235 |         r[i] = a[i] ^ b[i];
      |                       ~^~~
/<<PKGBUILDDIR>>/library/ctr_drbg.c: In function ‘ctr_drbg_update_internal’:
/<<PKGBUILDDIR>>/library/ctr_drbg.c:333:57: note: at offset 48 into object ‘data’ of size [0, 48]
  333 |                                     const unsigned char data[MBEDTLS_CTR_DRBG_SEEDLEN])
      |                                     ~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In function ‘mbedtls_xor’,
    inlined from ‘ctr_drbg_update_internal’ at /<<PKGBUILDDIR>>/library/ctr_drbg.c:372:5:
/<<PKGBUILDDIR>>/library/common.h:235:14: error: array subscript 48 is outside array bounds of ‘unsigned char[48]’ [-Werror=array-bounds=]
  235 |         r[i] = a[i] ^ b[i];
      |         ~~~~~^~~~~~~~~~~~~
/<<PKGBUILDDIR>>/library/ctr_drbg.c: In function ‘ctr_drbg_update_internal’:
/<<PKGBUILDDIR>>/library/ctr_drbg.c:335:19: note: at offset 48 into object ‘tmp’ of size 48
  335 |     unsigned char tmp[MBEDTLS_CTR_DRBG_SEEDLEN];
      |                   ^~~
...



Upstream might be qualified to determine whether this is an mbedtls or gcc bug.

The easiest short-term workaround to unblock the transition is
  export DEB_CFLAGS_MAINT_APPEND   = -Wno-error=array-bounds