fix(gc_effects): exempt aHash's random-source init from the indirect-call taint

[steinybot]

Merge in this order:

1. fix(docs): the my-bindings fixture reads buffers inside a no-GC scope #12112
2. fix(ext): ext-crate tests root values through RuntimeHandleScope #12113
3. fix(runtime): audit the new raw stores and classify addresses with addr_class #12114
4. ci: register the dark GC witnesses and isolate the new test counters #12115
5. refactor: split five files back under the 2000-line cap #12116
6. fix(runtime): root raw handles across calls and correct the handle ratchets #12117
7. fix(runtime): instanceof never mints a class object for a builtin id #12118
8. fix(gc_effects): exempt aHash's random-source init from the indirect-call taint #12119 (this PR)
9. docs: regenerate the API reference #12120
10. fix(runtime): clear the gates that #12109 left red #12121
11. fix(runtime): match node on the gap-suite regressions #12149

Problem

CI on main is red again after #12025. Commits since then broke check, warnings, cargo-test, gc-call-effects, self-test-checkers, gap-suite and fourteen lint steps, so no PR can show a green build. Each later failure in a job was hidden behind an earlier one.

Solution

Fix each breakage in its own PR. Each PR targets main and holds every fix above it in the order list, so the last PR is the one that can run fully green. Merge in order: each diff then shrinks to its own fix.

In this PR

Fixes gc-call-effects. Since #11992 a thread-local initializer builds an ahash::RandomState, and every HotKey slow path reaches it. The classifier treated aHash's one indirect call as unknown, so a fresh table moved about 740 macOS symbols to Reenters, js_arena_alloc among them. Codegen would then spill roots around those calls.

Changes

1. Exempt aHash's random-source init (diff). On macOS the call drops a losing DefaultRandomSource, which has no drop glue. On Linux the taint reaches the fixed-seed OnceBox init instead, which only runs the getrandom path; a second rule covers it. A forbid rule on set_random_source keeps both sound. The thread-creation rule also matches Arc's new alloc::rcs::arc path.

   perry/scripts/gc_call_effects/seeds.txt

   Line 140 in bfcfa4a

   indirect regex ^<?std::sys::thread::unix::Thread>::new|^std::thread::spawnhook::|^<std::thread::spawnhook::|^<alloc::(sync|rcs::arc)::Arc<std::thread::|^core::ptr::drop_glue::<alloc::boxed::Box<std::thread::|^std::thread::lifecycle:: -- thread creation: the closure runs on the NEW thread, whose GC heap and stack are its own; spawn hooks are never registered (see the forbid rule below)

2. Regenerate the macOS table (diff). 44 rows change, from runtime code that changed since the last regeneration.

🤖 Generated with Claude Code

https://claude.ai/code/session_01V5MSmMLJm6sMdSS5r64ds7

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}