Blame SOURCES/0031-efikeygen-Fix-the-build-with-nss-3.44.patch

34bac8
From d1a7496d18dc1e230115b30fa09e4481c485a27d Mon Sep 17 00:00:00 2001
34bac8
From: Peter Jones <pjones@redhat.com>
34bac8
Date: Tue, 14 May 2019 11:28:38 -0400
34bac8
Subject: [PATCH] efikeygen: Fix the build with nss 3.44
34bac8
34bac8
NSS 3.44 adds some certificate types, which changes a type and makes
34bac8
some encoding stuff weird.  As a result, we get:
34bac8
34bac8
gcc8 -I/wrkdirs/usr/ports/sysutils/pesign/work/pesign-0.110/include -O2 -pipe  -fstack-protector-strong -Wl,-rpath=/usr/local/lib/gcc8 -isystem /usr/local/include -fno-strict-aliasing  -g -O0 -g -O0  -Wall -fshort-wchar -fno-strict-aliasing -fno-merge-constants --std=gnu99 -D_GNU_SOURCE -Wno-unused-result -Wno-unused-function -I../include/  -I/usr/local/include/nss -I/usr/local/include/nss/nss -I/usr/local/include/nspr  -Werror -fPIC -isystem /usr/local/include -DCONFIG_amd64 -DCONFIG_amd64 -c efikeygen.c -o efikeygen.o
34bac8
In file included from /usr/local/include/nss/nss/cert.h:22,
34bac8
                 from efikeygen.c:39:
34bac8
efikeygen.c: In function 'add_cert_type':
34bac8
/usr/local/include/nss/nss/certt.h:445:5: error: unsigned conversion from 'int' to 'unsigned char' changes value from '496' to '240' [-Werror=overflow]
34bac8
     (NS_CERT_TYPE_SSL_CLIENT | NS_CERT_TYPE_SSL_SERVER | NS_CERT_TYPE_EMAIL | \
34bac8
     ^
34bac8
efikeygen.c:208:23: note: in expansion of macro 'NS_CERT_TYPE_APP'
34bac8
  unsigned char type = NS_CERT_TYPE_APP;
34bac8
                       ^~~~~~~~~~~~~~~~
34bac8
cc1: all warnings being treated as errors
34bac8
34bac8
This is fixed by just making it an int.
34bac8
34bac8
Fixes github issue #48.
34bac8
34bac8
Signed-off-by: Peter Jones <pjones@redhat.com>
34bac8
(cherry picked from commit b535d1ac5cbcdf18a97d97a92581e38080d9e521)
34bac8
---
34bac8
 src/efikeygen.c | 2 +-
34bac8
 1 file changed, 1 insertion(+), 1 deletion(-)
34bac8
34bac8
diff --git a/src/efikeygen.c b/src/efikeygen.c
34bac8
index 9390578..089e6a7 100644
34bac8
--- a/src/efikeygen.c
34bac8
+++ b/src/efikeygen.c
34bac8
@@ -206,7 +206,7 @@ static int
34bac8
 add_cert_type(cms_context *cms, void *extHandle, int is_ca)
34bac8
 {
34bac8
 	SECItem bitStringValue;
34bac8
-	unsigned char type = NS_CERT_TYPE_APP;
34bac8
+	int type = NS_CERT_TYPE_APP;
34bac8
 
34bac8
 	if (is_ca)
34bac8
 		type |= NS_CERT_TYPE_SSL_CA |
34bac8
-- 
34bac8
2.33.0
34bac8