Re: pkg/60292: haproxy 3.3.5 on NetBSD 11.0_RC4 crashes randomly due to OpenSSL errors

["Bartek Krawczyk via gnats" <gnats-admin%NetBSD.org@localhost>]

The following reply was made to PR pkg/60292; it has been noted by GNATS.

From: Bartek Krawczyk <bbartlomiej%gmail.com@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: 
Subject: Re: pkg/60292: haproxy 3.3.5 on NetBSD 11.0_RC4 crashes randomly due
 to OpenSSL errors
Date: Fri, 5 Jun 2026 13:20:25 +0200

 On 6/4/26 16:10, Thomas Klausner via gnats wrote:
 > The following reply was made to PR pkg/60292; it has been noted by GNATS.
 > 
 > From: Thomas Klausner <wiz%netbsd.org@localhost>
 > To: NetBSD bugtracking <gnats-bugs%netbsd.org@localhost>
 > Cc:
 > Subject: Re: pkg/60292: haproxy 3.3.5 on NetBSD 11.0_RC4 crashes randomly due
 >   to OpenSSL errors
 > Date: Thu, 4 Jun 2026 16:05:21 +0200
 > 
 >   Can one of you please check if the patch from
 >   https://github.com/openssl/openssl/pull/31021/commits/9fda8a3f4aa6d3a49b8657a49633bb19a7a98930
 >   (applies to the base system OpenSSL)
 >   fixes the problem?
 
 I applied these changes manually (there were more differences between 
 this file and the one shipped in NetBSD) and this part built OK however 
 the full distribution build fails with:
 
 --- kexmlkem768x25519.pico ---
 cc1: all warnings being treated as errors
 
 *** Failed target: kexmlkem768x25519.pico
 *** In directory: /home/bartek/netbsd/src/crypto/external/bsd/openssh/lib
 *** Failed commands:
          ${_MKTARGET_COMPILE}
          => @echo '#  ' "compile " lib/kexmlkem768x25519.pico
          ${COMPILE.c} ${COPTS.${.IMPSRC:T}} ${CPUFLAGS.${.IMPSRC:T}} 
 ${CPPFLAGS.${.IMPSRC:T}} ${CSHLIBFLAGS} ${CSHLIBFLAGS.${.IMPSRC:T}} 
 ${.IMPSRC} -o ${.TARGET}
          => 
 /home/bartek/netbsd/src/obj/tooldir.NetBSD-11.0_RC4-amd64/bin/x86_64--netbsd-gcc 
 -O2   -std=gnu11    -Wall -Wstrict-prototypes -Wmissing-prototypes 
 -Wpointer-arith -Wno-sign-compare  -Wsystem-headers   -Wno-traditional 
 -Wa,--fatal-warnings  -Wreturn-type -Wswitch -Wshadow -Wcast-qual 
 -Wwrite-strings -Wextra -Wno-unused-parameter -Wno-sign-compare 
 -Wsign-compare -Wformat=2  -Wno-format-zero-length  -Werror  -pipe -O2 
 -mtune=native -march=native -fPIE 
 --sysroot=/home/bartek/netbsd/src/obj/destdir.amd64 
 -I/home/bartek/netbsd/src/crypto/external/bsd/openssh/dist 
 -D_OPENBSD_SOURCE -DHAVE_DLOPEN -DHAVE_HEADER_AD -DHAVE_LOGIN_CAP 
 -DHAVE_STDLIB_H -DWITH_OPENSSL -DENABLE_PKCS11 -DWITH_ZLIB -DHAVE_DLOPEN 
 -DUSE_PAM -DGSSAPI -DKRB5 -DHEIMDAL -DWITH_LDAP_PUBKEY 
 -DX11BASE=\"/usr/X11R7\" -DSUPPORT_UTMP -DSUPPORT_UTMPX -DLIBWRAP 
 -DHAVE_BLF_H -I/home/bartek/netbsd/src/crypto/external/bsd/openssh/dist 
 -I/home/bartek/netbsd/src/crypto/external/bsd/openssh/dist 
 -D_OPENBSD_SOURCE -DHAVE_DLOPEN -DHAVE_HEADER_AD -DHAVE_LOGIN_CAP 
 -DHAVE_STDLIB_H -DWITH_OPENSSL -DENABLE_PKCS11 -DWITH_ZLIB -DHAVE_DLOPEN 
 -DUSE_PAM -DGSSAPI -DKRB5 -DHEIMDAL -DWITH_LDAP_PUBKEY 
 -DX11BASE=\"/usr/X11R7\" -DSUPPORT_UTMP -DSUPPORT_UTMPX -DLIBWRAP  -c 
 -fPIC 
 /home/bartek/netbsd/src/crypto/external/bsd/openssh/dist/kexmlkem768x25519.c 
 -o kexmlkem768x25519.pico
          ${OBJCOPY} ${OBJCOPYLIBFLAGS} ${.TARGET}
          => 
 /home/bartek/netbsd/src/obj/tooldir.NetBSD-11.0_RC4-amd64/bin/x86_64--netbsd-objcopy 
 -x  kexmlkem768x25519.pico
 *** [kexmlkem768x25519.pico] Error code 1
 
 This was using the "netbsd-11" branch.
 I'll try with netbsd-11-0-RC4 tag.
 
 So if I understand correctly:
 1. I need to apply the patch
 2. Build distribution and sets
 3. install new base set
 4. build haproxy from pkgsrc
 5. test
 
 Right?
 
 -- 
 Regards,
 Bart Krawczyk