Enable -Wconversion tree-wide on darwin. (#25376)

* Enable -Wconversion tree-wide on darwin.

* Also fix mbedtls, since apparently someone is building with that on Darwin.

Author: bzbarsky-apple

build/config/compiler/BUILD.gn

@@ -249,6 +249,10 @@ config("strict_warnings") {
     ]
   }
 
+  if (current_os == "mac" || current_os == "ios") {
+    cflags += [ "-Wconversion" ]
+  }
+
   if (build_java_matter_controller) {
     cflags -= [ "-Wshadow" ]
   }

src/crypto/CHIPCryptoPALmbedTLS.cpp

@@ -1445,8 +1445,9 @@ CHIP_ERROR VerifyAttestationCertificateFormat(const ByteSpan & cert, Attestation
             {
                 bool keyCertSignFlag = keyUsage & MBEDTLS_X509_KU_KEY_CERT_SIGN;
                 bool crlSignFlag     = keyUsage & MBEDTLS_X509_KU_CRL_SIGN;
-                bool otherFlags =
-                    keyUsage & ~(MBEDTLS_X509_KU_CRL_SIGN | MBEDTLS_X509_KU_KEY_CERT_SIGN | MBEDTLS_X509_KU_DIGITAL_SIGNATURE);
+                bool otherFlags      = keyUsage &
+                    ~static_cast<unsigned int>(MBEDTLS_X509_KU_CRL_SIGN | MBEDTLS_X509_KU_KEY_CERT_SIGN |
+                                               MBEDTLS_X509_KU_DIGITAL_SIGNATURE);
                 VerifyOrExit(keyCertSignFlag && crlSignFlag && !otherFlags, error = CHIP_ERROR_INTERNAL);
             }
         }

third_party/boringssl/repo/BUILD.gn

@@ -20,7 +20,10 @@ import("BUILD.generated.gni")
 config("boringssl_config") {
   include_dirs = [ "src/include" ]
 
-  cflags = [ "-Wno-unused-variable" ]
+  cflags = [
+    "-Wno-unused-variable",
+    "-Wno-conversion",
+  ]
 
   if (is_clang) {
     cflags += [ "-Wno-shorten-64-to-32" ]

third_party/editline/BUILD.gn

@@ -18,8 +18,10 @@ import("${build_root}/config/compiler/compiler.gni")
 config("editline_config") {
   include_dirs = [ "repo/include" ]
 
+  cflags = [ "-Wno-conversion" ]
+
   if (is_clang) {
-    cflags = [ "-Wno-shorten-64-to-32" ]
+    cflags += [ "-Wno-shorten-64-to-32" ]
   }
 }
 

third_party/mbedtls/mbedtls.gni

@@ -28,6 +28,7 @@ template("mbedtls_target") {
       "-Wno-string-concatenation",
       "-Wno-unused-but-set-parameter",
       "-Wno-format-nonliteral",  # Because of mbedtls_debug_print_msg
+      "-Wno-conversion",  # Lots of -Wconversion warnings, sadly.
     ]
 
     if (is_clang) {

third_party/nlunit-test/BUILD.gn

@@ -18,8 +18,10 @@ import("${build_root}/config/compiler/compiler.gni")
 config("nlunit-test_config") {
   include_dirs = [ "repo/src" ]
 
+  cflags = [ "-Wno-conversion" ]
+
   if (is_clang) {
-    cflags = [ "-Wno-shorten-64-to-32" ]
+    cflags += [ "-Wno-shorten-64-to-32" ]
   }
 }