From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mark H Weaver Subject: bug#36930: NSS 3.45 fails to build on armhf-linux Date: Mon, 05 Aug 2019 11:52:22 -0400 Message-ID: <87sgqfa9ta.fsf@netris.org> References: <878ss73it7.fsf@devup.no> Mime-Version: 1.0 Content-Type: text/plain Return-path: Received: from eggs.gnu.org ([2001:470:142:3::10]:56690) by lists.gnu.org with esmtp (Exim 4.86_2) (envelope-from ) id 1hufIF-0002gr-R9 for bug-guix@gnu.org; Mon, 05 Aug 2019 11:53:04 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1hufIE-0007AG-PD for bug-guix@gnu.org; Mon, 05 Aug 2019 11:53:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:55113) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1hufIE-0007AB-MG for bug-guix@gnu.org; Mon, 05 Aug 2019 11:53:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1hufIE-0007C6-Ih for bug-guix@gnu.org; Mon, 05 Aug 2019 11:53:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: <878ss73it7.fsf@devup.no> (Marius Bakke's message of "Mon, 05 Aug 2019 14:20:20 +0200") List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Marius Bakke Cc: 36930@debbugs.gnu.org Hi Marius, Marius Bakke writes: > On armhf-linux, 'nss' fails early in the build process due to an > undefined reference to "PR_Assert": > > https://ci.guix.gnu.org/log/5cqmmjd9a8h05l8y352z1pq4mlyd6w21-nss-3.45 > > This is almost certainly because of this upstream commit, which swaps > out the curve25519 implementation for 32-bit ARM systems: > > https://hg.mozilla.org/projects/nss/rev/7b749ff400db3ecab87f394c091ea0831254e674 > > There is some discussion about it in this ticket: > https://bugzilla.mozilla.org/show_bug.cgi?id=1550579 > > I don't know how all those people were able to benchmark the change. > Perhaps we are missing something in our build flags? > > With NSS 3.45 now in the 'master' branch, we should fix this issue > quickly as armhf users are currently unable to update their systems. > > I filed an upstream ticket here, but no response yet: > https://bugzilla.mozilla.org/show_bug.cgi?id=1571316 For now, we could simply revert my commit that updates NSS to 3.45. Although I mentioned in the commit log that it fixed some CVEs, I later discovered that 3.44.1 includes fixes for the same CVEs. NSS 3.44.1 was the version of NSS in 'master' before my commit. Mark