guix: remove riscv exclusion from symbol check
What the developer wrote
Authored by fanquake
guix: remove riscv exclusion from symbol check
What changed, and why it matters
This commit removes a special exception that previously let RISC-V builds skip a check for unwanted exported symbols. The change makes the build-time symbol check apply equally to RISC-V binaries, slightly tightening release-build quality controls. It is not a fix for an active vulnerability in running Bitcoin software.
No urgent action. Treat as a minor build-hardening improvement. Review the RISC-V build to ensure it now passes the symbol check, and consider whether the original RISC-V exception was masking any unintended exports.
Security signals we found
Build-time hardening: exported-symbol policy now enforced for RISC-V release binaries
Removal of architecture-specific exception that weakened a release check
No change to consensus, networking, wallet, or node runtime code
Evidence from the diff
In contrib/guix/symbol-check.py, the condition binary.header.machine_type == lief.ELF.ARCH.RISCV or name in IGNORE_EXPORTS is simplified to name in IGNORE_EXPORTS. Previously, all exported symbols on RISC-V were silently accepted regardless of the allow-list. Now RISC-V binaries must also conform to the same exported-symbol policy as other architectures. This is a build/release-hardening change, not a runtime patch.
Changed components
contrib/guix/symbol-check.pyGuix release build symbol-check stepRISC-V release binariesInspect captured patch +1 / −1
diff --git a/contrib/guix/symbol-check.py b/contrib/guix/symbol-check.py
index d31d5aa8..86b79652 100755
--- a/contrib/guix/symbol-check.py
+++ b/contrib/guix/symbol-check.py
@@ -202,7 +202,7 @@ def check_exported_symbols(binary) -> bool:
if not symbol.exported:
continue
name = symbol.name
- if binary.header.machine_type == lief.ELF.ARCH.RISCV or name in IGNORE_EXPORTS:
+ if name in IGNORE_EXPORTS:
continue
print(f'{filename}: export of symbol {name} not allowed!')
ok = False
Why this scored 16/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.