[Pkg-freeipa-devel] Bug#1026007: nss-pem FTBFS on s390x: -Werror=stringop-overread

[Helmut Grohne]

Source: nss-pem
Version: 1.0.8-1
Severity: serious
Tags: ftbfs

nss-pem fails to build from source in unstable on s390x. This is not
reproducible on amd64. A build ends as follows:

| cc -o OBJS/hash.o -c -std=c99 -g -O2 -ffile-prefix-map=/home/helmutg/nss-pem/nss-pem-1.0.8/nss=. -fstack-protector-strong -Wformat -Werror=format-security -I../nss/dist/private/nss -I../nss/dist/private/nss -Wall -pipe -Wdate-time -D_FORTIFY_SOURCE=2 -fPIC   -pipe -ffunction-sections -fdata-sections -DHAVE_STRERROR -DLINUX -Dlinux -Wall -Wshadow -Werror -DXP_UNIX -DXP_UNIX -UDEBUG -DNDEBUG -D_DEFAULT_SOURCE -D_BSD_SOURCE -D_POSIX_SOURCE -DSDB_MEASURE_USE_TEMP_DIR -D_REENTRANT -UDEBUG -DNDEBUG -D_DEFAULT_SOURCE -D_BSD_SOURCE -D_POSIX_SOURCE -DSDB_MEASURE_USE_TEMP_DIR -D_REENTRANT -DNSS_DISABLE_AVX2 -DNSS_NO_INIT_SUPPORT -DUSE_UTIL_DIRECTLY -DNO_NSPR_10_SUPPORT -DSSL_DISABLE_DEPRECATED_CIPHER_SUITE_NAMES -DSTDC_HEADERS -DHAVE_STRERROR -DHAVE_SNPRINTF -DMEMMOVE -D__DBINTERFACE_PRIVATE -I/usr/include/nspr -I/home/helmutg/nss-pem/nss-pem-1.0.8/nss/dist/include -I/home/helmutg/nss-pem/nss-pem-1.0.8/nss/dist/public/dbm -I/home/helmutg/nss-pem/nss-pem-1.0.8/nss/dist/private/dbm  hash.c
| hash.c: In function 'flush_meta':
| hash.c:629:19: error: 'write' reading 260 bytes from a region of size 4 [-Werror=stringop-overread]
|   629 |         ((wsize = write(fp, (char *)whdrp, sizeof(HASHHDR))) == -1))
|       |                   ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| In file included from hash.c:71:
| /home/helmutg/nss-pem/nss-pem-1.0.8/nss/dist/private/dbm/hash.h:81:11: note: source object 'magic' of size 4
|    81 |     int32 magic;             /* Magic NO for hash tables */
|       |           ^~~~~
| In file included from hash.c:62:
| /usr/include/unistd.h:378:16: note: in a call to function 'write' declared with attribute 'access (read_only, 2, 3)'
|   378 | extern ssize_t write (int __fd, const void *__buf, size_t __n) __wur
|       |                ^~~~~
| cc1: all warnings being treated as errors
| make[8]: *** [../../../coreconf/rules.mk:292: OBJS/hash.o] Error 1
| make[8]: Leaving directory '/home/helmutg/nss-pem/nss-pem-1.0.8/nss/nss/lib/dbm/src'
| make[7]: *** [../../coreconf/rules.mk:44: src] Error 2
| make[7]: Leaving directory '/home/helmutg/nss-pem/nss-pem-1.0.8/nss/nss/lib/dbm'
| make[6]: *** [../coreconf/rules.mk:44: dbm] Error 2
| make[6]: Leaving directory '/home/helmutg/nss-pem/nss-pem-1.0.8/nss/nss/lib'
| make[5]: *** [coreconf/rules.mk:44: lib] Error 2
| make[5]: Leaving directory '/home/helmutg/nss-pem/nss-pem-1.0.8/nss/nss'
| make[4]: *** [manifest.mn:21: all] Error 2
| make[4]: Leaving directory '/home/helmutg/nss-pem/nss-pem-1.0.8/nss/nss'
| make[3]: *** [debian/rules:101: override_dh_auto_build] Error 2
| make[3]: Leaving directory '/home/helmutg/nss-pem/nss-pem-1.0.8/nss'
| make[2]: *** [debian/rules:195: build] Error 2
| make[2]: Leaving directory '/home/helmutg/nss-pem/nss-pem-1.0.8/nss'
| make[1]: *** [debian/rules:21: override_dh_auto_build] Error 2
| make[1]: Leaving directory '/home/helmutg/nss-pem/nss-pem-1.0.8'
| make: *** [debian/rules:12: build] Error 2
| dpkg-buildpackage: error: debian/rules build subprocess returned exit status 2

The issue also is reproducible by cross building from amd64 to s390x,
but it seems fairly recent as https://crossqa.debian.net/src/nss-pem
doesn't have any trace of it. Also reproducible builds hasn't seen it
either. The build above was performed on zelenka.debian.org to rule out
any local and emulation issues.

Helmut