[Debian-iot-maintainers] Bug#1126815: liboauth2: FTBFS with glibc 2.43 due to ISO C23 const return types

[Aurelien Jarno]

Source: liboauth2
Version: 2.2.0-1
Severity: important
Tags: ftbfs upstream
Justification: fails to build from source
User: debian-glibc at lists.debian.org
Usertags: glibc-2.43

Dear maintainer,

liboauth2 fails to build from source with glibc 2.43, currently in
experimental. From the build log:

| libtool: compile:  gcc -DPACKAGE_NAME=\"liboauth2\" -DPACKAGE_TARNAME=\"liboauth2\" -DPACKAGE_VERSION=\"2.2.0\" "-DPACKAGE_STRING=\"liboauth2 2.2.0\"" -DPACKAGE_BUGREPORT=\"hans.zandbelt at openidc.com\" -DPACKAGE_URL=\"\" -DHAVE_STDIO_H=1 -DHAVE_STDLIB_H=1 -DHAVE_STRING_H=1 -DHAVE_INTTYPES_H=1 -DHAVE_STDINT_H=1 -DHAVE_STRINGS_H=1 -DHAVE_SYS_STAT_H=1 -DHAVE_SYS_TYPES_H=1 -DHAVE_UNISTD_H=1 -DSTDC_HEADERS=1 -DHAVE_DLFCN_H=1 -DLT_OBJDIR=\".libs/\" -I. -Wall -Werror -Wno-error=deprecated-declarations -I./include -I./src -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/include/x86_64-linux-gnu -isystem /usr/include/mit-krb5 -isystem /usr/include/mit-krb5 -I/usr/include/p11-kit-1 -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/liboauth2-2.2.0=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c src/jose.c  -fPIC -DPIC -o src/.libs/liboauth2_la-jose.o
| src/jose.c: In function 'oauth2_jose_jwt_header_peek':
| src/jose.c:1003:11: error: assignment discards 'const' qualifier from pointer target type [-Werror=discarded-qualifiers]
|  1003 |         p = strstr(compact_encoded_jwt, ".");
|       |           ^
| cc1: all warnings being treated as errors
| make[1]: *** [Makefile:1387: src/liboauth2_la-jose.lo] Error 1
| make[1]: Leaving directory '/build/reproducible-path/liboauth2-2.2.0'
| dh_auto_build: error: make -j1 returned exit code 2
| make: *** [debian/rules:13: binary] Error 25
| dpkg-buildpackage: error: debian/rules binary subprocess failed with exit status 2

The full build log is attached to this bug report.

The issue is due to ISO C23 declaration of strstr, which now returns a
pointer to a const-qualified type when the input argument is a pointer
to a const-qualified type [1].

Regards
Aurelien

[1] https://sourceware.org/git/?p=glibc.git;a=blob;f=NEWS;h=e271fb2e4d76903c77a302aaec1ca22ce31027d0;hb=f762ccf84f122d1354f103a151cba8bde797d521#l19
-------------- next part --------------
A non-text attachment was scrubbed...
Name: liboauth2_amd64-2026-01-31T22:51:07Z.build.gz
Type: application/gzip
Size: 17934 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/debian-iot-maintainers/attachments/20260201/72941707/attachment-0001.gz>