Usage: build.sh [-h] [-c|-cc] [-v] [-j <n>] [--gyp|-g] [--opt|-o]

[-t <x64|x86|...>|--target=<x64|x86|...>]

[--clang|--gcc|--msvc] [--scan-build[=dir]] [--disable-tests]

[--pprof] [--asan] [--msan] [--ubsan[=bool,shift,...]

[--fuzz[=tls|oss]] [--sancov[=edge|bb|func|...]]

[--emit-llvm] [--no-zdefs] [--test] [--ct-verif]

[--nspr|--with-nspr=<include>:<lib>|--system-nspr]

[--system-sqlite] [--enable-fips] [--enable-libpkix]

This script builds NSS with gyp and ninja.

NSS build tool options:

-h display this help and exit

-c clean before build

-v verbose build

-j <n> run at most <n> concurrent jobs

--gyp|-g force a rerun of gyp

--opt|-o do an opt build

--clang build with clang and clang++

--gcc build with gcc and g++

--msvc build with MSVC

--scan-build run the build with scan-build

--scan-build=<dir> sets the output path for scan-build

--disable-tests don't build tests and corresponding cmdline utils

--pprof build with gperftool support

--asan enable address sanitizer

--msan enable memory sanitizer

--ubsan enable undefined behavior sanitizer

--ubsan=bool,shift,... sets specific UB sanitizers

--fuzz build fuzzing targets (this always enables test builds)

--fuzz=tls to enable TLS fuzzing mode

--fuzz=oss to build for OSS-Fuzz

--sancov do sanitize coverage builds

--sancov=func sets coverage to function level for example

--emit-llvm emit LLVM bitcode while building

(requires the gold linker, use clang-3.8 for SAW)

--ct-verif build with valgrind for ct-verif

--nspr force a rebuild of NSPR

--with-nspr use the NSPR build at the given locations

--with-nspr=<include>:<lib> sets include and lib paths

--system-nspr attempt to use system nspr

shorthand for --with-nspr=/usr/include/nspr:

--system-sqlite use system sqlite

--enable-fips enable FIPS checks

--enable-libpkix make libpkix part of the build

--mozpkix-only build only static mozpkix and mozpkix-test libraries

support for this build option is limited