nmap @7.92_2+pcre+ssl built against openssl3 segfaults

[msbit (Tom Sullivan)]

Running:

nmap -A 192.168.1.0

finishes with:

Segmentation fault: 11

Under lldb the stacktrace is:

* thread #1, queue = 'com.apple.main-thread', stop reason = EXC_BAD_ACCESS (code=1, address=0x0)
  * frame #0: 0x00007fff7a2a1915 libsystem_pthread.dylib`pthread_rwlock_rdlock + 1
    frame #1: 0x0000000100618622 libcrypto.3.dylib`CRYPTO_THREAD_read_lock + 9
    frame #2: 0x000000010060b384 libcrypto.3.dylib`ossl_lib_ctx_get_data + 50
    frame #3: 0x00000001006156aa libcrypto.3.dylib`get_provider_store + 23
    frame #4: 0x000000010061769b libcrypto.3.dylib`ossl_provider_deregister_child_cb + 26
    frame #5: 0x0000000100614da5 libcrypto.3.dylib`child_prov_ossl_ctx_free + 15
    frame #6: 0x000000010060d9cb libcrypto.3.dylib`CRYPTO_free_ex_data + 364
    frame #7: 0x000000010060afe6 libcrypto.3.dylib`context_deinit + 98
    frame #8: 0x000000010060b14d libcrypto.3.dylib`OSSL_LIB_CTX_free + 32
    frame #9: 0x0000000100ce1cba legacy.dylib`legacy_teardown + 22
    frame #10: 0x0000000100615a3c libcrypto.3.dylib`ossl_provider_free + 61
    frame #11: 0x00000001005ed1dd libcrypto.3.dylib`evp_cipher_free_int + 43
    frame #12: 0x000000010047344f libssl.3.dylib`SSL_CTX_free + 482
    frame #13: 0x0000000100081bfb nmap`nsock_pool_delete + 1289
    frame #14: 0x000000010006b5f5 nmap`___lldb_unnamed_symbol503$$nmap + 32
    frame #15: 0x00000001000a06b1 nmap`luaD_precall + 695
    frame #16: 0x00000001000a07fb nmap`luaD_call + 52
    frame #17: 0x00000001000a0848 nmap`luaD_callnoyield + 21
    frame #18: 0x000000010009ff28 nmap`luaD_rawrunprotected + 88
    frame #19: 0x00000001000a0c6a nmap`luaD_pcall + 68
    frame #20: 0x00000001000a267b nmap`___lldb_unnamed_symbol862$$nmap + 252
    frame #21: 0x00000001000a1cba nmap`luaC_freeallobjects + 100
    frame #22: 0x00000001000a8715 nmap`___lldb_unnamed_symbol926$$nmap + 31
    frame #23: 0x00000001000671a9 nmap`close_nse() + 21
    frame #24: 0x0000000100023079 nmap`NmapOps::~NmapOps() + 349
    frame #25: 0x00007fff7a1543cf libsystem_c.dylib`__cxa_finalize_ranges + 319
    frame #26: 0x00007fff7a1546b3 libsystem_c.dylib`exit + 55
    frame #27: 0x00007fff7a0ae3dc libdyld.dylib`start + 8

and otool -L $(which nmap) reports:

/opt/local/bin/nmap:
	/opt/local/lib/libpcre.1.dylib (compatibility version 4.0.0, current version 4.13.0)
	/opt/local/lib/libpcap.A.dylib (compatibility version 1.0.0, current version 1.10.1)
	/opt/local/lib/libssh2.1.dylib (compatibility version 2.0.0, current version 2.1.0)
	/opt/local/libexec/openssl3/lib/libssl.3.dylib (compatibility version 3.0.0, current version 3.0.0)
	/opt/local/libexec/openssl3/lib/libcrypto.3.dylib (compatibility version 3.0.0, current version 3.0.0)
	/opt/local/lib/libz.1.dylib (compatibility version 1.0.0, current version 1.2.11)
	/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1252.250.1)
	/usr/lib/libc++.1.dylib (compatibility version 1.0.0, current version 400.9.4)

so it is linked and running against openssl3 but my sense of the recent-ish relevant commit:

​https://github.com/nmap/nmap/commit/7b73985610ad7506203fd25c8cf93dda1b46527b

is that the project expects to be linked (and built?) against openssl 1.1.1k

[Chris Jones <jonesc@…>]

In 63b69388114642d57a10fef0bc1deef503338a38/macports-ports (master):

nmap: Use openssl PG, pinned to 1.1
Closes: #63920