GNU bug report logs - #36930
NSS 3.45 fails to build on armhf-linux

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 36930 in the body.
You can then email your comments to 36930 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Marius Bakke <mbakke <at> fastmail.com>
To: bug-guix <at> gnu.org
Subject: NSS 3.45 fails to build on armhf-linux
Date: Mon, 05 Aug 2019 14:20:20 +0200

[Message part 1 (text/plain, inline)]

Hello,

On armhf-linux, 'nss' fails early in the build process due to an
undefined reference to "PR_Assert":

https://ci.guix.gnu.org/log/5cqmmjd9a8h05l8y352z1pq4mlyd6w21-nss-3.45

This is almost certainly because of this upstream commit, which swaps
out the curve25519 implementation for 32-bit ARM systems:

https://hg.mozilla.org/projects/nss/rev/7b749ff400db3ecab87f394c091ea0831254e674

There is some discussion about it in this ticket:
https://bugzilla.mozilla.org/show_bug.cgi?id=1550579

I don't know how all those people were able to benchmark the change.
Perhaps we are missing something in our build flags?

With NSS 3.45 now in the 'master' branch, we should fix this issue
quickly as armhf users are currently unable to update their systems.

I filed an upstream ticket here, but no response yet:
https://bugzilla.mozilla.org/show_bug.cgi?id=1571316

[signature.asc (application/pgp-signature, inline)]

Message #8 received at 36930 <at> debbugs.gnu.org (full text, mbox):

From: Mark H Weaver <mhw <at> netris.org>
To: Marius Bakke <mbakke <at> fastmail.com>
Cc: 36930 <at> debbugs.gnu.org
Subject: Re: bug#36930: NSS 3.45 fails to build on armhf-linux
Date: Mon, 05 Aug 2019 11:52:22 -0400

Hi Marius,

Marius Bakke <mbakke <at> fastmail.com> writes:

> On armhf-linux, 'nss' fails early in the build process due to an
> undefined reference to "PR_Assert":
>
> https://ci.guix.gnu.org/log/5cqmmjd9a8h05l8y352z1pq4mlyd6w21-nss-3.45
>
> This is almost certainly because of this upstream commit, which swaps
> out the curve25519 implementation for 32-bit ARM systems:
>
> https://hg.mozilla.org/projects/nss/rev/7b749ff400db3ecab87f394c091ea0831254e674
>
> There is some discussion about it in this ticket:
> https://bugzilla.mozilla.org/show_bug.cgi?id=1550579
>
> I don't know how all those people were able to benchmark the change.
> Perhaps we are missing something in our build flags?
>
> With NSS 3.45 now in the 'master' branch, we should fix this issue
> quickly as armhf users are currently unable to update their systems.
>
> I filed an upstream ticket here, but no response yet:
> https://bugzilla.mozilla.org/show_bug.cgi?id=1571316

For now, we could simply revert my commit that updates NSS to 3.45.
Although I mentioned in the commit log that it fixed some CVEs, I later
discovered that 3.44.1 includes fixes for the same CVEs.  NSS 3.44.1 was
the version of NSS in 'master' before my commit.

       Mark

Message #11 received at 36930 <at> debbugs.gnu.org (full text, mbox):

From: Mark H Weaver <mhw <at> netris.org>
To: Marius Bakke <mbakke <at> fastmail.com>
Cc: 36930 <at> debbugs.gnu.org
Subject: Re: bug#36930: NSS 3.45 fails to build on armhf-linux
Date: Mon, 05 Aug 2019 12:51:10 -0400

Earlier, I wrote:
> For now, we could simply revert my commit that updates NSS to 3.45.
> Although I mentioned in the commit log that it fixed some CVEs, I later
> discovered that 3.44.1 includes fixes for the same CVEs.  NSS 3.44.1 was
> the version of NSS in 'master' before my commit.

I reverted it in commit 0fae1b6deeabe15fa8c0c1623b46c9b7f2814295 on the
master branch.

     Thanks,
       Mark

Message #14 received at 36930 <at> debbugs.gnu.org (full text, mbox):

From: Marius Bakke <mbakke <at> fastmail.com>
To: Mark H Weaver <mhw <at> netris.org>
Cc: 36930 <at> debbugs.gnu.org
Subject: Re: bug#36930: NSS 3.45 fails to build on armhf-linux
Date: Mon, 05 Aug 2019 19:46:01 +0200

[Message part 1 (text/plain, inline)]

Mark H Weaver <mhw <at> netris.org> writes:

> Earlier, I wrote:
>> For now, we could simply revert my commit that updates NSS to 3.45.
>> Although I mentioned in the commit log that it fixed some CVEs, I later
>> discovered that 3.44.1 includes fixes for the same CVEs.  NSS 3.44.1 was
>> the version of NSS in 'master' before my commit.
>
> I reverted it in commit 0fae1b6deeabe15fa8c0c1623b46c9b7f2814295 on the
> master branch.

Thanks!

NSS is still broken on 'staging', so this issue remains open.

[signature.asc (application/pgp-signature, inline)]

Message #19 received at 36930-done <at> debbugs.gnu.org (full text, mbox):

From: Marius Bakke <mbakke <at> fastmail.com>
To: 36930-done <at> debbugs.gnu.org
Subject: Re: bug#36930: NSS 3.45 fails to build on armhf-linux
Date: Tue, 07 Apr 2020 14:33:49 +0200

This was fixed a while back, closing.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.