Dear maintainer:
During a rebuild of all packages in unstable, this package failed to build.
Below you will find the last part of the build log (probably the most
relevant part, but not necessarily). If required, the full build log
is available here:
https://people.debian.org/~sanvila/build-logs/202608/
About the archive rebuild: The build was made on virtual machines from AWS,
using sbuild and a reduced chroot with only build-essential packages.
If you cannot reproduce the bug please contact me privately, as I
am willing to provide ssh access to a virtual machine where the bug is
fully reproducible.
If this is really a bug in one of the build-depends, please use
reassign and add an affects on src:freehsm-c, so that this is still
visible in the BTS web page for this package.
Thanks.
--------------------------------------------------------------------------------
[...]
debian/rules clean
dh clean
dh_auto_clean
make -j2 distclean
make[1]: Entering directory '/<<PKGBUILDDIR>>'
rm -f libfreehsm-fips.so src/fhsm_state.o src/fhsm_memory.o src/fhsm_crypto.o src/fhsm_audit.o src/fhsm_pkcs11.o src/fhsm_ecdsa_raw.o src/fhsm_pq_params.o src/fhsm_create_attrs.o src/fhsm_token.o src/fhsm_session.o src/fhsm_integrity.o src/fhsm_pairwise.o src/fhsm_drbg.o src/fhsm_tpm.o src/fhsm_token_tpm.o src/fhsm_mode.o src/dispatch/fhsm_dispatch_legacy.o src/gen/fhsm_dispatch.o src/dispatch/fhsm_dispatch_common.o src/dispatch/fhsm_dispatch_digest.o src/dispatch/fhsm_dispatch_hmac.o src/dispatch/fhsm_dispatch_aes.o src/dispatch/fhsm_dispatch_kdf.o src/dispatch/fhsm_dispatch_pkey.o src/dispatch/fhsm_dispatch_pq.o src/dispatch/fhsm_dispatch_kmac.o src/dispatch/fhsm_dispatch_concat.o src/dispatch/fhsm_dispatch_hybrid.o kat/fhsm_kat_vectors.o kat/cavp_extended.o tests/test_smoke tests/*.o
rm -f freehsm-c-src.tar.xz freehsm-c-src.tar.xz.sha256
rm -rf out/
rm -f include/fhsm_pkcs11_mechanisms.h
rm -f src/gen/fhsm_dispatch.c
rm -f docs/MECHANISMS.md
rm -rf __pycache__ scripts/__pycache__
make[1]: Leaving directory '/<<PKGBUILDDIR>>'
dh_clean
debian/rules binary
dh binary
dh_update_autotools_config
dh_autoreconf
dh_auto_configure
debian/rules override_dh_auto_build
make[1]: Entering directory '/<<PKGBUILDDIR>>'
python3 scripts/gen_p11_thunks.py --profile=fips-strict --root=/<<PKGBUILDDIR>>
[gen_p11_thunks] profile=fips-strict approved=66 non-approved=12 total=78
[gen_p11_thunks] wrote /<<PKGBUILDDIR>>/include/fhsm_pkcs11_mechanisms.h
[gen_p11_thunks] wrote /<<PKGBUILDDIR>>/src/gen/fhsm_dispatch.c
[gen_p11_thunks] wrote /<<PKGBUILDDIR>>/docs/MECHANISMS.md
make libfreehsm-fips.so
make[2]: Entering directory '/<<PKGBUILDDIR>>'
cc -Wall -Wextra -Wpedantic -Werror -Wstrict-prototypes -Wshadow -Wpointer-arith -Wcast-align -Wwrite-strings -Wnested-externs -Wmissing-prototypes -Wmissing-declarations -Wredundant-decls -Wstrict-aliasing=2 -Wformat=2 -Wformat-security -Wno-format-nonliteral -Wnull-dereference -Wdouble-promotion -Wconversion -Wno-sign-conversion -Wno-unused-parameter -fstack-protector-strong -D_FORTIFY_SOURCE=2 -fPIC -fstack-clash-protection -fcf-protection=full -fvisibility=hidden -fno-strict-aliasing -fno-omit-frame-pointer -DOPENSSL_API_COMPAT=0x30000000L -ffile-prefix-map=/<<PKGBUILDDIR>>= -fdebug-prefix-map=/<<PKGBUILDDIR>>= -frandom-seed=fhsm-1.4.0-FIPS -Wno-builtin-macro-redefined -D__DATE__='"redacted"' -D__TIME__='"redacted"' -g3 -O2 -std=c11 -D_GNU_SOURCE -Iinclude -I/usr/local/ssl/include -Isrc/dispatch -c -o src/fhsm_state.o src/fhsm_state.c
cc -Wall -Wextra -Wpedantic -Werror -Wstrict-prototypes -Wshadow -Wpointer-arith -Wcast-align -Wwrite-strings -Wnested-externs -Wmissing-prototypes -Wmissing-declarations -Wredundant-decls -Wstrict-aliasing=2 -Wformat=2 -Wformat-security -Wno-format-nonliteral -Wnull-dereference -Wdouble-promotion -Wconversion -Wno-sign-conversion -Wno-unused-parameter -fstack-protector-strong -D_FORTIFY_SOURCE=2 -fPIC -fstack-clash-protection -fcf-protection=full -fvisibility=hidden -fno-strict-aliasing -fno-omit-frame-pointer -DOPENSSL_API_COMPAT=0x30000000L -ffile-prefix-map=/<<PKGBUILDDIR>>= -fdebug-prefix-map=/<<PKGBUILDDIR>>= -frandom-seed=fhsm-1.4.0-FIPS -Wno-builtin-macro-redefined -D__DATE__='"redacted"' -D__TIME__='"redacted"' -g3 -O2 -std=c11 -D_GNU_SOURCE -Iinclude -I/usr/local/ssl/include -Isrc/dispatch -c -o src/fhsm_memory.o src/fhsm_memory.c
cc -Wall -Wextra -Wpedantic -Werror -Wstrict-prototypes -Wshadow -Wpointer-arith -Wcast-align -Wwrite-strings -Wnested-externs -Wmissing-prototypes -Wmissing-declarations -Wredundant-decls -Wstrict-aliasing=2 -Wformat=2 -Wformat-security -Wno-format-nonliteral -Wnull-dereference -Wdouble-promotion -Wconversion -Wno-sign-conversion -Wno-unused-parameter -fstack-protector-strong -D_FORTIFY_SOURCE=2 -fPIC -fstack-clash-protection -fcf-protection=full -fvisibility=hidden -fno-strict-aliasing -fno-omit-frame-pointer -DOPENSSL_API_COMPAT=0x30000000L -ffile-prefix-map=/<<PKGBUILDDIR>>= -fdebug-prefix-map=/<<PKGBUILDDIR>>= -frandom-seed=fhsm-1.4.0-FIPS -Wno-builtin-macro-redefined -D__DATE__='"redacted"' -D__TIME__='"redacted"' -g3 -O2 -std=c11 -D_GNU_SOURCE -Iinclude -I/usr/local/ssl/include -Isrc/dispatch -c -o src/fhsm_crypto.o src/fhsm_crypto.c
cc -Wall -Wextra -Wpedantic -Werror -Wstrict-prototypes -Wshadow -Wpointer-arith -Wcast-align -Wwrite-strings -Wnested-externs -Wmissing-prototypes -Wmissing-declarations -Wredundant-decls -Wstrict-aliasing=2 -Wformat=2 -Wformat-security -Wno-format-nonliteral -Wnull-dereference -Wdouble-promotion -Wconversion -Wno-sign-conversion -Wno-unused-parameter -fstack-protector-strong -D_FORTIFY_SOURCE=2 -fPIC -fstack-clash-protection -fcf-protection=full -fvisibility=hidden -fno-strict-aliasing -fno-omit-frame-pointer -DOPENSSL_API_COMPAT=0x30000000L -ffile-prefix-map=/<<PKGBUILDDIR>>= -fdebug-prefix-map=/<<PKGBUILDDIR>>= -frandom-seed=fhsm-1.4.0-FIPS -Wno-builtin-macro-redefined -D__DATE__='"redacted"' -D__TIME__='"redacted"' -g3 -O2 -std=c11 -D_GNU_SOURCE -Iinclude -I/usr/local/ssl/include -Isrc/dispatch -c -o src/fhsm_audit.o src/fhsm_audit.c
cc -Wall -Wextra -Wpedantic -Werror -Wstrict-prototypes -Wshadow -Wpointer-arith -Wcast-align -Wwrite-strings -Wnested-externs -Wmissing-prototypes -Wmissing-declarations -Wredundant-decls -Wstrict-aliasing=2 -Wformat=2 -Wformat-security -Wno-format-nonliteral -Wnull-dereference -Wdouble-promotion -Wconversion -Wno-sign-conversion -Wno-unused-parameter -fstack-protector-strong -D_FORTIFY_SOURCE=2 -fPIC -fstack-clash-protection -fcf-protection=full -fvisibility=hidden -fno-strict-aliasing -fno-omit-frame-pointer -DOPENSSL_API_COMPAT=0x30000000L -ffile-prefix-map=/<<PKGBUILDDIR>>= -fdebug-prefix-map=/<<PKGBUILDDIR>>= -frandom-seed=fhsm-1.4.0-FIPS -Wno-builtin-macro-redefined -D__DATE__='"redacted"' -D__TIME__='"redacted"' -g3 -O2 -std=c11 -D_GNU_SOURCE -Iinclude -I/usr/local/ssl/include -Isrc/dispatch -c -o src/fhsm_pkcs11.o src/fhsm_pkcs11.c
src/fhsm_pkcs11.c: In function ‘aes_gmac’:
src/fhsm_pkcs11.c:3964:53: error: ‘%zu’ directive output may be truncated writing between 1 and 20 bytes into a region of size 12 [-Werror=format-truncation=]
3964 | snprintf(cipher_name, sizeof(cipher_name), "AES-%zu-GCM", key_len * 8);
| ^~~
src/fhsm_pkcs11.c:3964:48: note: directive argument in the range [0, 18446744073709551608]
3964 | snprintf(cipher_name, sizeof(cipher_name), "AES-%zu-GCM", key_len * 8);
| ^~~~~~~~~~~~~
In file included from /usr/include/stdio.h:970,
from src/fhsm_pkcs11.c:51:
In function ‘snprintf’,
inlined from ‘aes_gmac’ at src/fhsm_pkcs11.c:3964:5:
/usr/include/x86_64-linux-gnu/bits/stdio2.h:68:10: note: ‘__builtin___snprintf_chk’ output between 10 and 29 bytes into a destination of size 16
68 | return __builtin___snprintf_chk (__s, __n, __USE_FORTIFY_LEVEL - 1,
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
69 | __glibc_objsize (__s), __fmt,
| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
70 | __va_arg_pack ());
| ~~~~~~~~~~~~~~~~~
src/fhsm_pkcs11.c: In function ‘aes_cmac’:
src/fhsm_pkcs11.c:3992:53: error: ‘%zu’ directive output may be truncated writing between 1 and 20 bytes into a region of size 12 [-Werror=format-truncation=]
3992 | snprintf(cipher_name, sizeof(cipher_name), "AES-%zu-CBC", key_len * 8);
| ^~~
src/fhsm_pkcs11.c:3992:48: note: directive argument in the range [0, 18446744073709551608]
3992 | snprintf(cipher_name, sizeof(cipher_name), "AES-%zu-CBC", key_len * 8);
| ^~~~~~~~~~~~~
In function ‘snprintf’,
inlined from ‘aes_cmac’ at src/fhsm_pkcs11.c:3992:5:
/usr/include/x86_64-linux-gnu/bits/stdio2.h:68:10: note: ‘__builtin___snprintf_chk’ output between 10 and 29 bytes into a destination of size 16
68 | return __builtin___snprintf_chk (__s, __n, __USE_FORTIFY_LEVEL - 1,
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
69 | __glibc_objsize (__s), __fmt,
| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
70 | __va_arg_pack ());
| ~~~~~~~~~~~~~~~~~
cc1: all warnings being treated as errors
make[2]: *** [Makefile:155: src/fhsm_pkcs11.o] Error 1
make[2]: Leaving directory '/<<PKGBUILDDIR>>'
make[1]: *** [debian/rules:8: override_dh_auto_build] Error 2
make[1]: Leaving directory '/<<PKGBUILDDIR>>'
make: *** [debian/rules:4: binary] Error 2
dpkg-buildpackage: error: debian/rules binary subprocess failed with exit status 2
--------------------------------------------------------------------------------