What the developer wrote
Authored by fanquake
guix: disable libquadmath in GCC
Prunes:
libquadmath.a
libquadmath.la
libquadmath.so
libquadmath.so.0
libquadmath.so.0.0.0
What changed, and why it matters
This commit changes Bitcoin Core's Guix build recipe to stop GCC from building the libquadmath library. Quadmath provides extra-precision floating-point math, which Bitcoin Core does not need. Removing it shrinks the build environment and reduces the chance that unnecessary code accidentally gets linked into release binaries. There is no direct evidence in the commit that this fixes an active security bug.
Treat as a routine build-hardening improvement. No urgent action is required. Reviewers may verify that release binaries no longer reference libquadmath and that the change does not break cross-compilation targets.
Security signals we found
Reduces build-toolchain attack surface by removing an unused GCC runtime library
Prevents potential accidental linkage of libquadmath into release binaries
Aligns with deterministic-build minimization practices
No direct vulnerability or exploit path is described in the commit
Evidence from the diff
The patch adds –disable-libquadmath to the GCC configure flags in contrib/guix/manifest.scm. libquadmath is an optional GCC runtime library for __float128 arithmetic. Bitcoin Core’s consensus and wallet code does not use __float128, so the library is build-time dead weight. Disabling it is a hardening/cleanliness measure: it removes a shared library and static archive from the deterministic build toolchain and prevents any future accidental runtime dependency on quad-precision routines. The change is defensive and supply-chain oriented, not a patch for a known vulnerability.
Changed components
contrib/guix/manifest.scmGuix deterministic build toolchainGCC build configuration in release buildsInspect captured patch +1 / −0
diff --git a/contrib/guix/manifest.scm b/contrib/guix/manifest.scm
index 760b1a25..f805ba6d 100644
--- a/contrib/guix/manifest.scm
+++ b/contrib/guix/manifest.scm
@@ -440,6 +440,7 @@ inspecting signatures in Mach-O binaries.")
"--enable-cet=yes",
"--disable-gcov",
"--disable-libgomp",
+ "--disable-libquadmath",
"--disable-libsanitizer",
building-on)))
((#:phases phases)
Why this scored 16/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.