[From nobody Mon Sep 14 10:37:12 2026
Received: (at submit) by bugs.debian.org; 13 Sep 2026 07:19:03 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-15.9 required=4.0 tests=BAYES_00,
 BODY_INCLUDES_PACKAGE,FORGED_SPF_HELO,FOURLA,FROMDEVELOPER,HAS_PACKAGE,
 KHOP_HELO_FCRDNS,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,SPF_HELO_PASS,
 SPF_SOFTFAIL autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 44; hammy, 150; neutral, 53; spammy,
 0. spammytokens: hammytokens:0.000-+--H*Ad:N*Bug,
 0.000-+--HTo:N*Debian, 0.000-+--H*F:U*doko, 0.000-+--forky,
 0.000-+--HTo:N*System
Return-path: &lt;doko@debian.org&gt;
Received: from einhorn.in-berlin.de ([192.109.42.8]:38323
 helo=einhorn-mail-out.in-berlin.de)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;doko@debian.org&gt;) id 1x5eUR-00Dwkb-21
 for submit@bugs.debian.org; Sun, 13 Sep 2026 07:19:03 +0000
X-Envelope-From: doko@debian.org
X-Envelope-To: &lt;submit@bugs.debian.org&gt;
Received: from authenticated.user (localhost [127.0.0.1]) by
 einhorn.in-berlin.de with ESMTPSA id 68D7J1d8703069
 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT)
 for &lt;submit@bugs.debian.org&gt;; Sun, 13 Sep 2026 09:19:02 +0200
Message-ID: &lt;22d47882-0523-4f5b-a43b-76f2e55a4d7c@debian.org&gt;
Date: Sun, 13 Sep 2026 09:19:01 +0200
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird Beta
Content-Language: en-US
To: Debian Bug Tracking System &lt;submit@bugs.debian.org&gt;
From: Matthias Klose &lt;doko@debian.org&gt;
Subject: packaging of the fuzzer libraries is broken with LLVM 21, 22 and 23
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Delivered-To: submit@bugs.debian.org

Package: src:llvm-toolchain-21
Version: 1:21.1.8-10
Severity: serious
Tags: sid forky

As seen in the vbox-tools upload to migrate from LLVM 19 to 21, the 
fuzzer libraries are not used anymore (or not found) when built with 
LLVM 21. You can reproduce that when building with the unversioned clang:

[...]
     LD            tests/vb2_keyblock_fuzzer
clang -o 
/packages/tmp/vboot-utils-0~R106-15054.B+dfsg/build/tests/vb2_keyblock_fuzzer 
-Wl,-z,relro -Wl,-z,now -Wl,--gc-sections -pie -Xlinker 
--allow-multiple-definition -fsanitize=fuzzer 
/packages/tmp/vboot-utils-0~R106-15054.B+dfsg/build/tests/vb2_keyblock_fuzzer.o 
  /packages/tmp/vboot-utils-0~R106-15054.B+dfsg/build/vboot_fw.a -lrt -luuid
/usr/bin/x86_64-linux-gnu-ld.bfd/usr/bin/x86_64-linux-gnu-ld.bfd: cannot 
find : cannot find 
/usr/lib/llvm-21/lib/clang/21/lib/x86_64-pc-linux-gnu/libclang_rt.fuzzer.a: 
/usr/lib/llvm-21/lib/clang/21/lib/x86_64-pc-linux-gnu/libclang_rt.fuzzer.a: 
No such file or directory
No such file or directory
/usr/bin/x86_64-linux-gnu-ld.bfd: cannot find 
/usr/bin/x86_64-linux-gnu-ld.bfd: cannot find 
/usr/lib/llvm-21/lib/clang/21/lib/x86_64-pc-linux-gnu/libclang_rt.fuzzer_interceptors.a: 
/usr/lib/llvm-21/lib/clang/21/lib/x86_64-pc-linux-gnu/libclang_rt.fuzzer_interceptors.aNo 
such file or directory:
No such file or directory
/usr/bin/x86_64-linux-gnu-ld.bfd/usr/bin/x86_64-linux-gnu-ld.bfd: cannot 
find : cannot find 
/usr/lib/llvm-21/lib/clang/21/lib/x86_64-pc-linux-gnu/libclang_rt.ubsan_standalone.a/usr/lib/llvm-21/lib/clang/21/lib/x86_64-pc-linux-gnu/libclang_rt.ubsan_standalone.a: 
: No such file or directoryNo such file or directory

/usr/bin/x86_64-linux-gnu-ld.bfd: cannot find 
/usr/lib/llvm-21/lib/clang/21/lib/x86_64-pc-linux-gnu/libclang_rt.fuzzer.a: 
No such file or directory
/usr/bin/x86_64-linux-gnu-ld.bfd: cannot find 
/usr/lib/llvm-21/lib/clang/21/lib/x86_64-pc-linux-gnu/libclang_rt.fuzzer_interceptors.a: 
No such file or directory
clang: error: linker command failed with exit code 1 (use -v to see 
invocation)
clang: error: linker command failed with exit code 1 (use -v to see 
invocation)
make[2]: *** [Makefile:1156: 
/packages/tmp/vboot-utils-0~R106-15054.B+dfsg/build/tests/cgpt_fuzzer] 
Error 1
make[2]: *** Waiting for unfinished jobs....

So apparently building and shipping Debian's own libFuzzer.a is not good 
enough anymore.

Two solutions here:

  - stop building the libfuzzer-N-dev package

  - Ship the libclang_rt.fuzzer.a (and maybe other) libraries.

This is seen with LLVM 21, 22 and 23.
]