Re: pkg/60292: haproxy 3.3.5 on NetBSD 11.0_RC4 crashes randomly due to OpenSSL errors

["Bartek Krawczyk via gnats" <gnats-admin%NetBSD.org@localhost>]

The following reply was made to PR lib/60292; it has been noted by GNATS.

From: Bartek Krawczyk <bbartlomiej%gmail.com@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: 
Subject: Re: pkg/60292: haproxy 3.3.5 on NetBSD 11.0_RC4 crashes randomly due
 to OpenSSL errors
Date: Sat, 6 Jun 2026 20:56:31 +0200

 On 6/6/26 18:45, Thomas Klausner via gnats wrote:
 > The following reply was made to PR lib/60292; it has been noted by GNATS.
 > 
 > From: Thomas Klausner <wiz%netbsd.org@localhost>
 > To: NetBSD bugtracking <gnats-bugs%netbsd.org@localhost>
 > Cc:
 > Subject: Re: pkg/60292: haproxy 3.3.5 on NetBSD 11.0_RC4 crashes randomly due
 >   to OpenSSL errors
 > Date: Sat, 6 Jun 2026 18:40:27 +0200
 > 
 >   On Fri, Jun 05, 2026 at 11:25:01AM +0100, Bartek Krawczyk via gnats wrote:
 >   >  I applied these changes manually (there were more differences between
 >   >  this file and the one shipped in NetBSD) and this part built OK however
 >   >  the full distribution build fails with:
 >   
 >   The actual error is missing from the output you sent, it's probably a
 >   couple lines higher.
 
 You're right, I missed it:
 
 --- dependall-../crypto/external/bsd/openssh/lib ---
 --- kexmlkem768x25519.pico ---
 In file included from 
 /home/bartek/netbsd/src/crypto/external/bsd/openssh/dist/kexmlkem768x25519.c:46:
 /home/bartek/netbsd/src/crypto/external/bsd/openssh/dist/libcrux_mlkem768_sha3.h: 
 In function 'libcrux_ml_kem_ind_cpa_unpacked_default_8b_1b':
 /home/bartek/netbsd/src/crypto/external/bsd/openssh/dist/libcrux_mlkem768_sha3.h:8112:11: 
 error: array subscript '<unnamed-unsigned:256>[0]' is partly outside 
 array bounds of 'uint8_t[2]' {aka 'unsigned char[2]'} [-Werror=array-bounds]
   8112 |   uint8_t uu____1[32U] = {0U};
        |           ^~~~~~~
 
 I used:
 
 ./build.sh -u -U -j6 tools distribution sets
 
 and my mk.conf:
 
 WRKOBJDIR=/var/tmp/pkg
 MAKE_JOBS=6
 CPUFLAGS+=-pipe -O2 -mtune=native -march=native
 PKG_DEFAULT_OPTIONS+= -avahi -pulseaudio -wayland dbus x11
 SKIP_LICENSE_CHECK= yes
 
 Unfortunately I can't test on -current, I have 11.0_RC4 on my vps and it 
 does other stuff as well which I wouldn't want to interrupt.
 
 -- 
 Regards,
 Bart Krawczyk