Re: pkg/60292: haproxy 3.3.5 on NetBSD 11.0_RC4 crashes randomly due to OpenSSL errors

["Bartek Krawczyk via gnats" <gnats-admin%NetBSD.org@localhost>]

The following reply was made to PR pkg/60292; it has been noted by GNATS.

From: Bartek Krawczyk <bbartlomiej%gmail.com@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: 
Subject: Re: pkg/60292: haproxy 3.3.5 on NetBSD 11.0_RC4 crashes randomly due
 to OpenSSL errors
Date: Sat, 6 Jun 2026 17:19:58 +0200

 On 6/5/26 13:25, Bartek Krawczyk via gnats wrote:
 > The following reply was made to PR pkg/60292; it has been noted by GNATS.
 > 
 > From: Bartek Krawczyk <bbartlomiej%gmail.com@localhost>
 > To: gnats-bugs%netbsd.org@localhost
 > Cc:
 > Subject: Re: pkg/60292: haproxy 3.3.5 on NetBSD 11.0_RC4 crashes randomly due
 >   to OpenSSL errors
 > Date: Fri, 5 Jun 2026 13:20:25 +0200
 > 
 >   On 6/4/26 16:10, Thomas Klausner via gnats wrote:
 >   > The following reply was made to PR pkg/60292; it has been noted by GNATS.
 >   >
 >   > From: Thomas Klausner <wiz%netbsd.org@localhost>
 >   > To: NetBSD bugtracking <gnats-bugs%netbsd.org@localhost>
 >   > Cc:
 >   > Subject: Re: pkg/60292: haproxy 3.3.5 on NetBSD 11.0_RC4 crashes randomly due
 >   >   to OpenSSL errors
 >   > Date: Thu, 4 Jun 2026 16:05:21 +0200
 >   >
 >   >   Can one of you please check if the patch from
 >   >   https://github.com/openssl/openssl/pull/31021/commits/9fda8a3f4aa6d3a49b8657a49633bb19a7a98930
 >   >   (applies to the base system OpenSSL)
 >   >   fixes the problem?
 >   
 >   I applied these changes manually (there were more differences between
 >   this file and the one shipped in NetBSD) and this part built OK however
 >   the full distribution build fails with:
 >   
 >   --- kexmlkem768x25519.pico ---
 >   cc1: all warnings being treated as errors
 >   
 >   *** Failed target: kexmlkem768x25519.pico
 >   *** In directory: /home/bartek/netbsd/src/crypto/external/bsd/openssh/lib
 >   *** Failed commands:
 >            ${_MKTARGET_COMPILE}
 >            => @echo '#  ' "compile " lib/kexmlkem768x25519.pico
 >            ${COMPILE.c} ${COPTS.${.IMPSRC:T}} ${CPUFLAGS.${.IMPSRC:T}}
 >   ${CPPFLAGS.${.IMPSRC:T}} ${CSHLIBFLAGS} ${CSHLIBFLAGS.${.IMPSRC:T}}
 >   ${.IMPSRC} -o ${.TARGET}
 >            =>
 >   /home/bartek/netbsd/src/obj/tooldir.NetBSD-11.0_RC4-amd64/bin/x86_64--netbsd-gcc
 >   -O2   -std=gnu11    -Wall -Wstrict-prototypes -Wmissing-prototypes
 >   -Wpointer-arith -Wno-sign-compare  -Wsystem-headers   -Wno-traditional
 >   -Wa,--fatal-warnings  -Wreturn-type -Wswitch -Wshadow -Wcast-qual
 >   -Wwrite-strings -Wextra -Wno-unused-parameter -Wno-sign-compare
 >   -Wsign-compare -Wformat=2  -Wno-format-zero-length  -Werror  -pipe -O2
 >   -mtune=native -march=native -fPIE
 >   --sysroot=/home/bartek/netbsd/src/obj/destdir.amd64
 >   -I/home/bartek/netbsd/src/crypto/external/bsd/openssh/dist
 >   -D_OPENBSD_SOURCE -DHAVE_DLOPEN -DHAVE_HEADER_AD -DHAVE_LOGIN_CAP
 >   -DHAVE_STDLIB_H -DWITH_OPENSSL -DENABLE_PKCS11 -DWITH_ZLIB -DHAVE_DLOPEN
 >   -DUSE_PAM -DGSSAPI -DKRB5 -DHEIMDAL -DWITH_LDAP_PUBKEY
 >   -DX11BASE=\"/usr/X11R7\" -DSUPPORT_UTMP -DSUPPORT_UTMPX -DLIBWRAP
 >   -DHAVE_BLF_H -I/home/bartek/netbsd/src/crypto/external/bsd/openssh/dist
 >   -I/home/bartek/netbsd/src/crypto/external/bsd/openssh/dist
 >   -D_OPENBSD_SOURCE -DHAVE_DLOPEN -DHAVE_HEADER_AD -DHAVE_LOGIN_CAP
 >   -DHAVE_STDLIB_H -DWITH_OPENSSL -DENABLE_PKCS11 -DWITH_ZLIB -DHAVE_DLOPEN
 >   -DUSE_PAM -DGSSAPI -DKRB5 -DHEIMDAL -DWITH_LDAP_PUBKEY
 >   -DX11BASE=\"/usr/X11R7\" -DSUPPORT_UTMP -DSUPPORT_UTMPX -DLIBWRAP  -c
 >   -fPIC
 >   /home/bartek/netbsd/src/crypto/external/bsd/openssh/dist/kexmlkem768x25519.c
 >   -o kexmlkem768x25519.pico
 >            ${OBJCOPY} ${OBJCOPYLIBFLAGS} ${.TARGET}
 >            =>
 >   /home/bartek/netbsd/src/obj/tooldir.NetBSD-11.0_RC4-amd64/bin/x86_64--netbsd-objcopy
 >   -x  kexmlkem768x25519.pico
 >   *** [kexmlkem768x25519.pico] Error code 1
 >   
 >   This was using the "netbsd-11" branch.
 >   I'll try with netbsd-11-0-RC4 tag.
 >   
 >   So if I understand correctly:
 >   1. I need to apply the patch
 >   2. Build distribution and sets
 >   3. install new base set
 >   4. build haproxy from pkgsrc
 >   5. test
 >   
 >   Right?
 
 Unfortunately even clean netbsd-11-0-RC4 sources fail to build 
 distribution and sets for me with this error:above
 
 --- dependall-../crypto/external/bsd/openssh/lib ---
 --- kexmlkem768x25519.pico ---
 cc1: all warnings being treated as errors
 
 *** Failed target: kexmlkem768x25519.pico
 *** In directory: /home/bartek/netbsd/src/crypto/external/bsd/openssh/lib
 *** Failed commands:
          ${_MKTARGET_COMPILE}
          => @echo '#  ' "compile " lib/kexmlkem768x25519.pico
          ${COMPILE.c} ${COPTS.${.IMPSRC:T}} ${CPUFLAGS.${.IMPSRC:T}} 
 ${CPPFLAGS.${.IMPSRC:T}} ${CSHLIBFLAGS} ${CSHLIBFLAGS.${.IMPSRC:T}} 
 ${.IMPSRC} -o ${.TARGET}
          => 
 /home/bartek/netbsd/src/obj/tooldir.NetBSD-11.0_RC4-amd64/bin/x86_64--netbsd-gcc 
 -O2   -std=gnu11    -Wall -Wstrict-prototypes -Wmissing-prototypes 
 -Wpointer-arith -Wno-sign-compare  -Wsystem-headers   -Wno-traditional 
 -Wa,--fatal-warnings  -Wreturn-type -Wswitch -Wshadow -Wcast-qual 
 -Wwrite-strings -Wextra -Wno-unused-parameter -Wno-sign-compare 
 -Wsign-compare -Wformat=2  -Wno-format-zero-length  -Werror  -pipe -O2 
 -mtune=native -march=native -fPIE 
 --sysroot=/home/bartek/netbsd/src/obj/destdir.amd64 
 -I/home/bartek/netbsd/src/crypto/external/bsd/openssh/dist 
 -D_OPENBSD_SOURCE -DHAVE_DLOPEN -DHAVE_HEADER_AD -DHAVE_LOGIN_CAP 
 -DHAVE_STDLIB_H -DWITH_OPENSSL -DENABLE_PKCS11 -DWITH_ZLIB -DHAVE_DLOPEN 
 -DUSE_PAM -DGSSAPI -DKRB5 -DHEIMDAL -DWITH_LDAP_PUBKEY 
 -DX11BASE=\"/usr/X11R7\" -DSUPPORT_UTMP -DSUPPORT_UTMPX -DLIBWRAP 
 -DHAVE_BLF_H -I/home/bartek/netbsd/src/crypto/external/bsd/openssh/dist 
 -I/home/bartek/netbsd/src/crypto/external/bsd/openssh/dist 
 -D_OPENBSD_SOURCE -DHAVE_DLOPEN -DHAVE_HEADER_AD -DHAVE_LOGIN_CAP 
 -DHAVE_STDLIB_H -DWITH_OPENSSL -DENABLE_PKCS11 -DWITH_ZLIB -DHAVE_DLOPEN 
 -DUSE_PAM -DGSSAPI -DKRB5 -DHEIMDAL -DWITH_LDAP_PUBKEY 
 -DX11BASE=\"/usr/X11R7\" -DSUPPORT_UTMP -DSUPPORT_UTMPX -DLIBWRAP  -c 
 -fPIC 
 /home/bartek/netbsd/src/crypto/external/bsd/openssh/dist/kexmlkem768x25519.c 
 -o kexmlkem768x25519.pico
          ${OBJCOPY} ${OBJCOPYLIBFLAGS} ${.TARGET}
          => 
 /home/bartek/netbsd/src/obj/tooldir.NetBSD-11.0_RC4-amd64/bin/x86_64--netbsd-objcopy 
 -x  kexmlkem768x25519.pico
 *** [kexmlkem768x25519.pico] Error code 1
 
 
 -- 
 Regards,
 Bart Krawczyk