node:fs: mark the per-VM Binding box as LSan-ignored (fixes worker-terminate-lifetime.test.ts on main)

src/bun_core/lib.rs

@@ -2813,6 +2813,7 @@ pub mod asan {
         safe fn __asan_describe_address(ptr: *const c_void);
         safe fn __lsan_register_root_region(ptr: *const c_void, size: usize);
         safe fn __lsan_unregister_root_region(ptr: *const c_void, size: usize);
+        safe fn __lsan_ignore_object(ptr: *const c_void);
     }
 
     #[inline]
@@ -2858,6 +2859,18 @@ pub mod asan {
         #[cfg(not(bun_asan))]
         let _ = (ptr, size);
     }
+    /// Tell LSAN this heap allocation is intentionally process-lifetime and
+    /// must not be reported as a leak. Use only for per-VM singletons whose
+    /// sole anchor lives inside the JSC heap (bmalloc/libpas pages are not
+    /// scanned as roots, so LSAN cannot see the pointer). Freeing the object
+    /// later is fine; the ignore is per-allocation, not per-address.
+    #[inline]
+    pub fn ignore_object<T>(ptr: *const T) {
+        #[cfg(bun_asan)]
+        __lsan_ignore_object(ptr.cast());
+        #[cfg(not(bun_asan))]
+        let _ = ptr;
+    }
 }
 
 // ────────────────────────────────────────────────────────────────────────────

src/runtime/node/node_fs_binding.rs

@@ -416,6 +416,11 @@
     // trivially un-aliased (sole owner of the fresh `Box`).
     module.node_fs.with_mut(|nfs| nfs.vm = NonNull::new(vm));
 
+    // Per-VM singleton: freed at `~VM` in workers, process-lifetime on the
+    // main thread. After `to_js_boxed` the only pointer lives in the GC
+    // wrapper's `m_ctx` inside the JSC heap, which LSan does not scan.
+    bun_core::asan::ignore_object(&*module as *const Binding);
+
     // `module` was `Box::new`-allocated; ownership transfers to the GC
     // wrapper, which calls `Binding::finalize` to reclaim it.
     Binding::to_js_boxed(module, global)

test/js/web/workers/worker-terminate-lifetime.test.ts

@@ -121,6 +121,28 @@ test(
   timeout,
 );
 
+// The per-VM node:fs Binding box is anchored only by the GC wrapper's m_ctx
+// inside the JSC heap, which LSan does not scan; without __lsan_ignore_object
+// the main-thread singleton is reported as a leak.
+test.skipIf(!isASAN)(
+  "main-thread node:fs binding is not a false-positive LSan leak",
+  async () => {
+    await using proc = Bun.spawn({
+      cmd: [bunExe(), "-e", `require("node:fs");`],
+      env: {
+        ...bunEnv,
+        ASAN_OPTIONS: [bunEnv.ASAN_OPTIONS, "detect_leaks=1"].filter(Boolean).join(":"),
+        LSAN_OPTIONS: `print_suppressions=0:suppressions=${join(import.meta.dirname, "../../../leaksan.supp")}`,
+      },
+      stdout: "pipe",
+      stderr: "pipe",
+    });
+    const [stdout, stderr, exitCode] = await Promise.all([proc.stdout.text(), proc.stderr.text(), proc.exited]);
+    expect({ stdout, stderr, exitCode }).toEqual({ stdout: "", stderr: "", exitCode: 0 });
+  },
+  timeout,
+);
+
 // Regression: the per-VM c-ares channel was destroyed in deinit_runtime_state
 // (RuntimeState drop) AFTER JSC teardown and RareData.file_polls drop.
 // ares_destroy() synchronously fires EDESTRUCTION query callbacks and socket-