Dear maintainer:

During a rebuild of all packages in unstable, this package failed to build.

Below you will find the last part of the build log (probably the most
relevant part, but not necessarily). If required, the full build log
is available here:

https://people.debian.org/~sanvila/build-logs/202606/

About the archive rebuild: The build was made on virtual machines from AWS,
using sbuild and a reduced chroot with only build-essential packages.

If you cannot reproduce the bug please contact me privately, as I
am willing to provide ssh access to a virtual machine where the bug is
fully reproducible.

If this is really a bug in one of the build-depends, please use
reassign and add an affects on src:qatzip, so that this is still
visible in the BTS web page for this package.

Thanks.
--------------------------------------------------------------------------------
[...]
In function 'metrixReset',
    inlined from 'qzSetupSessionInternal' at qatzip_utils.c:390:9:
qatzip_utils.c:1589:28: error: argument 1 range [18446744071562067968, 18446744073709551615] exceeds maximum object size 9223372036854775807 [-Werror=alloc-size-larger-than=]
 1589 |         m->latency_array = calloc(LSM_MET_DEPTH, sizeof(*(m->latency_array)));
      |                            ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In file included from qatzip_utils.c:36:
/usr/include/stdlib.h: In function 'qzSetupSessionInternal':
/usr/include/stdlib.h:675:14: note: in a call to allocation function 'calloc' declared here
  675 | extern void *calloc (size_t __nmemb, size_t __size)
      |              ^~~~~~
In function 'metrixReset',
    inlined from 'qzSetupSessionInternal' at qatzip_utils.c:389:9:
qatzip_utils.c:1589:28: error: argument 1 range [18446744071562067968, 18446744073709551615] exceeds maximum object size 9223372036854775807 [-Werror=alloc-size-larger-than=]
 1589 |         m->latency_array = calloc(LSM_MET_DEPTH, sizeof(*(m->latency_array)));
      |                            ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/usr/include/stdlib.h: In function 'qzSetupSessionInternal':
/usr/include/stdlib.h:675:14: note: in a call to allocation function 'calloc' declared here
  675 | extern void *calloc (size_t __nmemb, size_t __size)
      |              ^~~~~~
libtool: compile:  x86_64-linux-gnu-gcc -DPACKAGE_NAME=\"qat [too-long-redacted] la-qatzip_lz4.o >/dev/null 2>&1
/bin/bash ../libtool  --tag=CC   --mode=compile x86_64-linux [too-long-redacted] xxhash.c' || echo './'`xxhash.c
libtool: compile:  x86_64-linux-gnu-gcc -DPACKAGE_NAME=\"qat [too-long-redacted]  -o .libs/libqatzip_la-xxhash.o
cc1: all warnings being treated as errors
make[2]: *** [Makefile:574: libqatzip_la-qatzip_utils.lo] Error 1
make[2]: *** Waiting for unfinished jobs....
libtool: compile:  x86_64-linux-gnu-gcc -DPACKAGE_NAME=\"qat [too-long-redacted] zip_la-xxhash.o >/dev/null 2>&1
make[2]: Leaving directory '/<<PKGBUILDDIR>>/src'
make[1]: *** [Makefile:582: all-recursive] Error 1
make[1]: Leaving directory '/<<PKGBUILDDIR>>'
dh_auto_build: error: make -j2 returned exit code 2
make: *** [debian/rules:6: binary] Error 25
dpkg-buildpackage: error: debian/rules binary subprocess failed with exit status 2
--------------------------------------------------------------------------------

Dear Maintainer,

This is the fix for this FTBFS issue.
The patch has been sent upstream at: https://github.com/intel/QATzip/pull/152

  * d/p/fix-Werror-alloc-size-larger-than-in-metrixReset.patch: Fix
    build error because of allocation size out of range
    (Closes: #1139485).


Thanks for considering the patch.

Hi Hector,

upstream said yesterday, they will release a new version within this
week, so it makes sense to wait for that rather than than to apply the
downstream patch (and then revert it again).

https://github.com/intel/QATzip/issues/148

Regards,
Daniel

We believe that the bug you reported is fixed in the latest version of
qatzip, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1139485@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Daniel Baumann <daniel@debian.org> (supplier of updated qatzip package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 14 Aug 2026 12:59:50 +0200
Source: qatzip
Architecture: source
Version: 2.0.0-1
Distribution: sid
Urgency: medium
Maintainer: Daniel Baumann <daniel@debian.org>
Changed-By: Daniel Baumann <daniel@debian.org>
Closes: 1139485
Changes:
 qatzip (2.0.0-1) sid; urgency=medium
 .
   * Harmonizing watch file.
   * Updating to standards version 4.7.4.
   * Updating to debhelper 14.
   * Merging upstream version 2.0.0:
     - fixes FTBFS with newer gcc (Closes: #1139485).
   * Adding newly required libzstd-dev to build-depends.
   * Updating libqatzip3 symbols.
Checksums-Sha1:
 d2568e3237f5f6ff7174ce7a69349fcb5728c4af 1416 qatzip_2.0.0-1.dsc
 74ae562544d79b5d370abed018b652a139c0f047 587624 qatzip_2.0.0.orig.tar.xz
 8dafb2f4ad34f5218cc51b5a9c845fad470aef02 5736 qatzip_2.0.0-1.debian.tar.xz
 392d3a25f7acd80a7b68f6ab00ccf0752f478344 6492 qatzip_2.0.0-1_amd64.buildinfo
Checksums-Sha256:
 171b3af3e2bd90ffd0a8765ab5cb492fc3944103999e5f8afb0776515c834d62 1416 qatzip_2.0.0-1.dsc
 0b81f55f68b8651066f10a8a40aef930436e9537820cbf69f8febcd2df6fd50a 587624 qatzip_2.0.0.orig.tar.xz
 debdccaf86663093b2b1ae48fa65f2d086af4461b3b78c8e3fb37a24a51697ae 5736 qatzip_2.0.0-1.debian.tar.xz
 e88fa39bde88d11ae98f6e986cbad529b1a065ac26df2ac841d0f7d21289733c 6492 qatzip_2.0.0-1_amd64.buildinfo
Files:
 9ef75dea7631c85bd460c6ab70a577ce 1416 utils optional qatzip_2.0.0-1.dsc
 a30346800a4922fda93ddc37f30ddacc 587624 utils optional qatzip_2.0.0.orig.tar.xz
 edda66d66079d100d48744bfb4e56f8e 5736 utils optional qatzip_2.0.0-1.debian.tar.xz
 ab8807f9aaf229f1ba475acb9cabf903 6492 utils optional qatzip_2.0.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQQmmGg4gLaoSj0ERgL7tPDoCoAiLwUCan73CQAKCRD7tPDoCoAi
L4cHAP4gll8rIV1DYMgwmV0+lDaPFYHsAtqO+SvCa0fJntdREwEAwtUjNIv+Oy2z
Rte84r78Ors2POB0QqJaZNCfRdZvDwY=
=mbov
-----END PGP SIGNATURE-----