What the developer wrote
Authored by will
ci: port msan-depends
Co-authored-by: Max Edwards <youwontforgetthis@gmail.com>
What changed, and why it matters
This commit only adds a new MemorySanitizer (MSan) CI job to the GitHub Actions workflow file. It does not change any Bitcoin Core source code, runtime behavior, or network protocol. There is no security vulnerability here.
No security action needed. Treat as routine CI maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff adds one matrix entry to .github/workflows/ci.yml to run an existing CI script (00_setup_env_native_msan.sh) and extends an existing ASLR-mitigation condition to also apply to the new MSan container. It is purely CI infrastructure plumbing.
Changed components
.github/workflows/ci.ymlInspect captured patch +7 / −1
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 946fff1a..1bb18164 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -487,6 +487,12 @@ jobs:
timeout-minutes: 120
file-env: './ci/test/00_setup_env_native_tsan.sh'
+ - name: 'MSan, depends'
+ cirrus-runner: 'ghcr.io/cirruslabs/ubuntu-runner-amd64:24.04-lg'
+ fallback-runner: 'ubuntu-24.04'
+ timeout-minutes: 120
+ file-env: './ci/test/00_setup_env_native_msan.sh'
+
steps:
- name: Checkout
uses: actions/checkout@v5
@@ -510,7 +516,7 @@ jobs:
run: sed -i "s|\${INSTALL_BCC_TRACING_TOOLS}|true|g" ./ci/test/00_setup_env_native_asan.sh
- name: Set mmap_rnd_bits
- if: ${{ env.CONTAINER_NAME == 'ci_native_tsan' }}
+ if: ${{ env.CONTAINER_NAME == 'ci_native_tsan' || env.CONTAINER_NAME == 'ci_native_msan' }}
# Prevents crashes due to high ASLR entropy
run: sudo sysctl -w vm.mmap_rnd_bits=28
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.