pkg/47833: PHP 5.3.25 w/ suhosin patch fails

[vs%nifelheim.info@localhost]

>Number:         47833
>Category:       pkg
>Synopsis:       PHP 5.3.25 w/ suhosin patch fails
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    pkg-manager
>State:          open
>Class:          support
>Submitter-Id:   net
>Arrival-Date:   Sat May 18 07:15:00 +0000 2013
>Originator:     Volkmar Seifert
>Release:        NetBSD 5.1_STABLE
>Organization:
>Environment:
NetBSD butterfly.nifelheim.info 5.1_STABLE NetBSD 5.1_STABLE (BUTTERFLY-1.1) 
#0: Sat Feb 18 08:55:05 CET 2012  
build%panther.home.nifelheim.info@localhost:/build/work/i386/butterfly/obj/build/src/sys/arch/i386/compile/BUTTERFLY
 i386
>Description:
I am trying to update my installation of PHP 5.3 . 

I am using Suhosin as patch and module.

For some updates now, the patch isn't working anymore. At first, I decided to 
wait, because it's not unusual for Suhosin to be a little behind PHP, but the 
patch never changed into a working state. I checked their website, and there 
nothing is happening. No support-requests, no other notices, no updates.
What's getting worse with every PHP-update, though is what happens to our 
pkgsrc-pkg. At first, there was just an error in the checksum, which I was 
easily able to correct. (That was a previous version of PHP), then the patch 
was impossible to apply, and because I didn't have the time to look into it, I 
was forced to wait again.
Now, the patch-file cannot even be found, because the filename provided by the 
Makefile does not even exist.

I know very well, how limited time can be, but packages, before being uploaded 
into CVS, should be tested - and error like "file doesn't exist", "checksum 
doesn't match" or "patch cannot be applied" are extremely easy to spot. If the 
release is so urgend, the option should be commented out with an appropriate 
note, or the release should be postponed until the problems are fixed.

But this is not really a state that makes a good impression on us.

And these errors...I have a hard time believing that I am the only one having 
that trouble. But may be many others don't care about hardening their PHP.

>How-To-Repeat:
Simply do a "make" in

lang/php53

with suhosin enabled
>Fix: