ci: Full ASan #84
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI tests | |
| on: | |
| push: | |
| branches-ignore: | |
| - 'dependabot/**' | |
| pull_request: | |
| workflow_dispatch: | |
| jobs: | |
| linter: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Install clang-tidy | |
| run: | | |
| sudo apt-get install -y clang-tidy-11 | |
| sudo update-alternatives --install /usr/bin/clang-tidy clang-tidy /usr/bin/clang-tidy-11 100 | |
| - name: lint with clang-tidy | |
| run: | | |
| make lint | |
| env: | |
| CC: clang | |
| CXX: clang++ | |
| posix: | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| os: [ubuntu-latest, macos-latest] | |
| shared: [YES, NO] | |
| cc: [clang, gcc] | |
| include: | |
| - sanitizers: '-fsanitize=address,undefined -fno-sanitize-recover=all' | |
| - cc: 'clang' | |
| cxx: 'clang++' | |
| - cc: 'gcc' | |
| cxx: 'g++' | |
| # We have to disable LeakSanitizer in shared library builds | |
| # because we get false positives from Python. | |
| - shared: 'YES' | |
| asan_opts: 'detect_leaks=0' | |
| # gcc defaults to -shared-libsasn | |
| - shared: 'NO' | |
| cc: 'gcc' | |
| asan_cflags: '-static-libasan' | |
| # LD_PRELOAD ASan runtime | |
| - os: 'ubuntu-latest' | |
| shared: 'YES' | |
| cc: 'gcc' | |
| test_env: 'LD_PRELOAD=$(gcc -print-file-name=libasan.so)' | |
| - os: 'ubuntu-latest' | |
| shared: 'YES' | |
| cc: 'clang' | |
| # clang defaults to -static-libsasn | |
| asan_cflags: '-shared-libasan' | |
| test_env: 'LD_PRELOAD=$(clang -print-file-name=libclang_rt.asan-x86_64.so)' | |
| # Shared libasan doesn't work with macOS system Python. | |
| - os: 'macos-latest' | |
| shared: 'YES' | |
| sanitizers: '' | |
| exclude: | |
| # gcc is just an alias for clang on macOS | |
| - os: 'macos-latest' | |
| cc: 'gcc' | |
| runs-on: ${{ matrix.os }} | |
| env: | |
| ASAN_OPTIONS: ${{ matrix.asan_opts }} | |
| CC: ${{ matrix.cc }} | |
| CXX: ${{ matrix.cxx }} | |
| CFLAGS: '${{ matrix.sanitizers }} ${{ matrix.asan_cflags }}' | |
| CXXFLAGS: '${{ matrix.sanitizers }} ${{ matrix.asan_cflags }}' | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Build and test | |
| run: | | |
| cmake \ | |
| -DBUILD_SHARED_LIBS=${{ matrix.shared }} \ | |
| -DCMAKE_BUILD_TYPE=Debug \ | |
| -S . -B build | |
| cmake --build build | |
| # https://github.com/actions/runner-images/issues/9491 | |
| sudo sysctl vm.mmap_rnd_bits=28 || true | |
| ${{ matrix.test_env }} ctest --test-dir build --output-on-failure | |
| windows: | |
| runs-on: windows-latest | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| shared: [YES, NO] | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: ilammy/msvc-dev-cmd@v1 | |
| - name: Build and test | |
| run: | | |
| cmake ^ | |
| -DBUILD_SHARED_LIBS=${{ matrix.shared }} ^ | |
| -DCMAKE_BUILD_TYPE=Debug ^ | |
| -S . -B build | |
| cmake --build build | |
| ctest --test-dir build -C Debug --output-on-failure | |
| shell: cmd |