ci: drop -lstdc++ usage in msan fuzz job
What changed, and why it matters
This commit removes an extra linker flag (-lstdc++) from a Bitcoin Core continuous integration (CI) script used only for a memory-sanitizer fuzz-testing build. It is a build-configuration cleanup, not a code change affecting the Bitcoin software users run. There is no security-relevant change to the project's runtime behavior or to shipped binaries.
No security action required. Treat as a normal CI maintenance change.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff modifies ci/test/00_setup_env_native_fuzz_with_msan.sh, dropping -lstdc++ from LIBCXX_FLAGS for the MSan fuzz CI job. The comment explaining the flag was also removed. This affects only the CI environment that builds libc++ from source for memory-sanitizer fuzz testing; it does not alter consensus, P2P, wallet, RPC, or any production code path.
Changed components
ci/test/00_setup_env_native_fuzz_with_msan.shInspect captured patch +1 / −2
diff --git a/ci/test/00_setup_env_native_fuzz_with_msan.sh b/ci/test/00_setup_env_native_fuzz_with_msan.sh
index c6923896..82d9044a 100755
--- a/ci/test/00_setup_env_native_fuzz_with_msan.sh
+++ b/ci/test/00_setup_env_native_fuzz_with_msan.sh
@@ -10,8 +10,7 @@ export CI_IMAGE_NAME_TAG="mirror.gcr.io/ubuntu:24.04"
export APT_LLVM_V="22"
LIBCXX_DIR="/cxx_build/"
export MSAN_FLAGS="-fsanitize=memory -fsanitize-memory-track-origins=2 -fno-omit-frame-pointer -g -O1 -fno-optimize-sibling-calls"
-# -lstdc++ to resolve link issues due to upstream packaging
-LIBCXX_FLAGS="-nostdinc++ -nostdlib++ -isystem ${LIBCXX_DIR}include/c++/v1 -L${LIBCXX_DIR}lib -Wl,-rpath,${LIBCXX_DIR}lib -lc++ -lc++abi -lpthread -Wno-unused-command-line-argument -lstdc++"
+LIBCXX_FLAGS="-nostdinc++ -nostdlib++ -isystem ${LIBCXX_DIR}include/c++/v1 -L${LIBCXX_DIR}lib -Wl,-rpath,${LIBCXX_DIR}lib -lc++ -lc++abi -lpthread -Wno-unused-command-line-argument"
export MSAN_AND_LIBCXX_FLAGS="${MSAN_FLAGS} ${LIBCXX_FLAGS}"
export CONTAINER_NAME="ci_native_fuzz_msan"
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.