https://blogs.gentoo.org/ago/2020/07/04/gentoo-tinderbox/ Issue: net-irc/scrollz-2.3-r1 fails to compile (lto). Discovered on: amd64 (internal ref: lto_tinderbox) NOTE: This machine uses lto with CFLAGS=-flto -Werror=odr -Werror=lto-type-mismatch -Werror=strict-aliasing Here is a bit of explanation: -Werror=lto-type-mismatch: User to find possible runtime issues in packages. It likely means the package is unsafe to build & use with LTO. For projects using the same identifier but with different types across different files, they must be fixed to be consistent across the codebase. -Werror=odr: Used to find possible runtime issues in packages. These bugs are a problem anyway but may be even worse when combined with LTO. C++ code must comply with the One Definition Rule (ODR) - see https://en.cppreference.com/w/cpp/language/definition#One_Definition_Rule. -Werror=strict-aliasing: Used to find possible runtime issues in packages. These bugs are a problem anyway but may be even worse when combined with LTO. Workarounds: - If upstream is friendly and still active, file a bug upstream. For emulators, codecs, games, or multimedia packages, it may be worth just applying a workaround instead, as upstreams sometimes aren't receptive to these bugs (VALID FOR ALL). - Use the new 'filter-lto' from flag-o-matic.eclass as it's likely to be unsafe with LTO (VALID FOR lto-type-mismatch - odr). - Fix it yourself if interested, of course (VALID FOR ALL). - Append-flags -fno-strict-aliasing (VALID FOR strict-aliasing). - Use memcpy() but a union is sometimes suitable too (VALID FOR strict-aliasing). - -fstrict-aliasing is implied by -O2, so this must be addressed in some form (VALID FOR strict-aliasing). See also: https://marc.info/?l=gentoo-dev&m=165639574126280&w=2
Created attachment 794957 [details] build.log build log and emerge --info
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=55e4a023b11c654b43cc878ba3be7bc9ee4977e5 commit 55e4a023b11c654b43cc878ba3be7bc9ee4977e5 Author: Pascal Jäger <pascal.jaeger@leimstift.de> AuthorDate: 2022-11-15 08:06:33 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2022-11-22 07:04:02 +0000 net-irc/scrollz: version bump to 2.3.1, patch for clang16 Version bump also closes this vulnerability from bug 777987. Bug: https://bugs.gentoo.org/777987 Closes: https://bugs.gentoo.org/731206 Closes: https://bugs.gentoo.org/861467 Closes: https://bugs.gentoo.org/870907 Signed-off-by: Pascal Jäger <pascal.jaeger@leimstift.de> Closes: https://github.com/gentoo/gentoo/pull/28284 Signed-off-by: Sam James <sam@gentoo.org> net-irc/scrollz/Manifest | 2 ++ net-irc/scrollz/scrollz-2.3.1.ebuild | 69 ++++++++++++++++++++++++++++++++++++ 2 files changed, 71 insertions(+)
