bin/59524: ssh dumped core

[rwhitlock22%gmail.com@localhost]

>Number:         59524
>Category:       bin
>Synopsis:       ssh dumped core
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Jul 11 10:50:00 +0000 2025
>Originator:     Robert Whitlock
>Release:        NetBSD current, July 10, 2025
>Organization:
>Environment:
NetBSD thinkpad 10.99.14 NetBSD 10.99.14 (kerncompile) #1: Thu Jul 10 14:29:24 EDT 2025  root@thinkpad:/usr/netbsd/current/build/THINKPAD/kerncompile amd64

a stripped down GENERIC
>Description:
I built and installed a recent NetBSD-current, restarted, ran cvs -q up -PdA and at the end of its run I got a message that it had a segmentation fault and it had dumped core.

thinkpad# TERM=dumb gdb ssh ssh.core
GNU gdb (GDB) 15.1
Copyright (C) 2024 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "x86_64--netbsd".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<https://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
    <http://www.gnu.org/software/gdb/documentation/>.

For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from ssh...
Reading symbols from /usr/libdata/debug//usr/bin/ssh.debug...
[New process 4272]
Core was generated by `ssh'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x0000702a534cbcb0 in _fini () from /usr/lib/libhx509.so.7
(gdb) bt full
#0  0x0000702a534cbcb0 in _fini () from /usr/lib/libhx509.so.7
No symbol table info available.
#1  0x00007f7ff7989be1 in _rtld_call_initfini_function (mask=0x7f7fff0402f0, 
    func=0x702a534cbcb0 <_fini>)
    at /usr/netbsd/current/src/libexec/ld.elf_so/rtld.c:152
No locals.
#2  _rtld_call_fini_function (obj=0x702a535c2400, mask=0x7f7fff0402f0, 
    cur_objgen=2) at /usr/netbsd/current/src/libexec/ld.elf_so/rtld.c:167
        fini = <optimized out>
#3  0x00007f7ff798a6a6 in _rtld_call_fini_functions (force=1, 
    mask=0x7f7fff0402f0)
    at /usr/netbsd/current/src/libexec/ld.elf_so/rtld.c:213
        obj = <optimized out>
        elm = 0x702a535beec0
        finilist = {sqh_first = 0x702a535bef80, sqh_last = 0x702a535bedc0}
        cur_objgen = 2
        restart = <optimized out>
        elm = <optimized out>
        finilist = <optimized out>
        cur_objgen = <optimized out>
        restart = <optimized out>
        obj = <optimized out>
        obj = <optimized out>
#4  _rtld_exit () at /usr/netbsd/current/src/libexec/ld.elf_so/rtld.c:431
        mask = {__bits = {0, 0, 0, 0}}
#5  0x0000702a52ba292f in __cxa_finalize (dso=dso@entry=0x0)
    at /usr/netbsd/current/src/lib/libc/stdlib/atexit.c:222
        p = 0x702a52e5f120 <atexit_handler0>
        call_depth = 1
        ah = 0x702a52e5f120 <atexit_handler0>
        dead_handlers = 0x0
        prevp = 0x702a52e5f118 <atexit_handler_stack>
        cxa_func = <optimized out>
        atexit_func = <optimized out>
#6  0x0000702a52ba250b in exit (status=0)
    at /usr/netbsd/current/src/lib/libc/stdlib/exit.c:60
No locals.
#7  0x0000000000369df2 in ___start (cleanup=<optimized out>, 
    ps_strings=0x7f7fff040fe0)
    at /usr/netbsd/current/src/lib/csu/common/crt0-common.c:375
No locals.
#8  0x00007f7ff79908c0 in ?? () from /usr/libexec/ld.elf_so
No symbol table info available.
#9  0x0000000000000006 in ?? ()
No symbol table info available.
#10 0x00007f7fff040990 in ?? ()
--Type <RET> for more, q to quit, c to continue without paging--c
No symbol table info available.
#11 0x00007f7fff040994 in ?? ()
No symbol table info available.
#12 0x00007f7fff040997 in ?? ()
No symbol table info available.
#13 0x00007f7fff04099f in ?? ()
No symbol table info available.
#14 0x00007f7fff0409a2 in ?? ()
No symbol table info available.
#15 0x00007f7fff0409b5 in ?? ()
No symbol table info available.
#16 0x0000000000000000 in ?? ()
No symbol table info available.
(gdb) q
thinkpad# ^D
>How-To-Repeat:
cd /usr/pkgsrc
cvs -q up -PdA
>Fix: