diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 162bfe378..2abf305d8 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -72,11 +72,8 @@ jobs:
       - run: c++ --version
       - run: make gmp-bootstrap
       - run: make gtest-bootstrap
-      # disable Werror on gcc 12 until #3533 is fixed.
-      #- run: CFLAGS=-Werror make -j$(nproc) all plugin test
-      - run: make -j$(nproc) all plugin test
-      #- run: meson builddir --werror
-      - run: meson builddir
+      - run: CFLAGS=-Werror make -j$(nproc) all plugin test
+      - run: meson builddir --werror
       - run: ninja -C builddir -v
       - run: meson test -C builddir -v
 
@@ -117,6 +114,15 @@ jobs:
       - run: c++ --version
       - run: CFLAGS=-Werror make -j$(sysctl -n hw.ncpu) ARCH=arm64
 
+  ios-cross-arm64:
+    runs-on: macos-latest
+    steps:
+      - uses: actions/checkout@v3
+      - run: make gmp-bootstrap
+      - run: make gtest-bootstrap
+      - run: c++ --version
+      - run: CFLAGS=-Werror make -j$(sysctl -n hw.ncpu) OS=ios ARCH=arm64
+
   fuzzing:
     runs-on: ubuntu-latest
     steps:
diff --git a/test/api/simple_test.cpp b/test/api/simple_test.cpp
index 41b2f84cf..ca570a1b0 100644
--- a/test/api/simple_test.cpp
+++ b/test/api/simple_test.cpp
@@ -13,7 +13,7 @@ int main (int argc, char** argv) {
 
 #if (defined(ANDROID_NDK)||defined(APPLE_IOS)||defined(WINDOWS_PHONE))
   char xmlPath[1024] = "";
-  sprintf (xmlPath, "xml:%s", argv[1]);
+  snprintf (xmlPath, sizeof(xmlPath), "xml:%s", argv[1]);
   ::testing::GTEST_FLAG (output) = xmlPath;
 #endif
   ::testing::InitGoogleTest (&argc, argv);