guix: disable libsanitizer in Linux GCC build
What the developer wrote
Authored by fanquake
guix: disable libsanitizer in Linux GCC build
This causes issues when building against newer glibcs (i.e 2.42), and isn't needed
in any case.
```bash
../../../../gcc-14.3.0/libsanitizer/sanitizer_common/sanitizer_platform_limits_posix.cpp:483:31: error: invalid application of ‘sizeof’ to incomplete type ‘__sanitizer::termio’
483 | unsigned struct_termio_sz = sizeof(struct termio);
| ^~~~~~~~~~~~~~~~~~~~~
```
Extracted from #25573.
What changed, and why it matters
This commit changes the build setup for Bitcoin Core's Linux releases so that a GCC component called libsanitizer is not compiled. The change is purely a build-compatibility fix: newer versions of glibc (the GNU C library) cause libsanitizer to fail to compile, so the Bitcoin Core developers disabled it because they do not need it for their release builds. There is no indication this fixes a security vulnerability in Bitcoin Core itself.
No security action required. Treat as a normal build-system maintenance commit. Reviewers may verify that release build reproducibility and output binaries are unchanged.
Security signals we found
No security-relevant code change in Bitcoin Core runtime
Change is in build/toolchain configuration only
No mention of vulnerability, CVE, bug bounty, or security advisory in commit message
Disabling libsanitizer removes a toolchain component, not a runtime feature
Evidence from the diff
The patch adds –disable-libsanitizer to the Guix manifest used to build the Linux GCC toolchain for Bitcoin Core release builds. libsanitizer is the runtime support library for GCC’s AddressSanitizer, ThreadSanitizer, etc. It is not used in Bitcoin Core’s release binaries; it is only part of the compiler toolchain being bootstrapped. The change is extracted from a larger PR and addresses a compilation failure against glibc 2.42 caused by an incomplete struct termio definition in GCC’s sanitizer_platform_limits_posix.cpp.
Changed components
contrib/guix/manifest.scmGuix-based Linux release build toolchainInspect captured patch +1 / −0
diff --git a/contrib/guix/manifest.scm b/contrib/guix/manifest.scm
index 59837e96..3670fcec 100644
--- a/contrib/guix/manifest.scm
+++ b/contrib/guix/manifest.scm
@@ -438,6 +438,7 @@ inspecting signatures in Mach-O binaries.")
"--enable-standard-branch-protection=yes",
"--enable-cet=yes",
"--disable-gcov",
+ "--disable-libsanitizer",
building-on)))
((#:phases phases)
`(modify-phases ,phases
Why this scored 17/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.