Re: node24 compile issue

Shawn Webb <[email protected]>
Newsgroups gmane.os.freebsd.devel.ports
Message-ID <regdy7gxd3qftn3bxxwm5otsblqfshxdvncv4ij2f7egtc4vbn@otdadldhorho>
On Thu, Apr 16, 2026 at 12:42:59PM +0200, Alexander Leidinger wrote:
> Hi,
> 
> a build of node24 in poudriere on -current gives me:
> ---snip---
> ld-elf.so.1: /usr/local/lib/libhdr_histogram.so.6: Undefined symbol
> "betoh32"
> gmake[1]: *** [libnode.target.mk:13: /wrkdirs/usr/ports/www/node24/work/node-v24.14.1/out/Release/obj/gen/node_javascript.cc]
> Error 1
> ---snip---
> 
> I have this since a while.
> 
> I have deleted the the hdr_histogram package from the poudriere pkg
> directory to have it rebuild, in case there was an issue there. Same result.
> 
> Any ideas?

The issue stems from the addition of graphics/hdr_histogram as a
dependency for node24 and node25. hdr_histogram has quite a few
issues, including unaddressed security issues. I glanced at the code
and came out more confused than before.

https://github.com/HdrHistogram/HdrHistogram_c/issues

Yesterday, I filed a bug report for HardenedBSD users. I've just noted
that FreeBSD is impacted, too:
https://github.com/HdrHistogram/HdrHistogram_c/issues/131

Thanks,

-- 
Shawn Webb
Cofounder / Security Engineer
HardenedBSD

Signal Username:  shawn_webb.74
Tor-ified Signal: +1 303-901-1600 / shawn_webb_opsec.50
https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/03A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc
signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----
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=CWJm
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.