Hi,

every now and then nss, fails to build from source when built with the
next toolchain version due to employing -Werror by default. This is
unfortunate for architecture bootstrap, which tends to use bleeding edge
toolchains. An example of such a bug is #984258. As a consequence
debian-devel@lists.debian.org discussed ways around this limitation in
the thread at
https://lists.debian.org/debian-devel/2023/02/msg00276.html. The
conclusion was that passing -Wno-error via DEB_CFLAGS_APPEND was an
existing interface that should be easy enough to follow. As such, I am
asking nss to support this interface. Thus regular builds can continue
to default to -Werror while bootstrap builds have a standardized
mechanism to opt out of it. I'm attaching a patch for your convenience.

Helmut