From 36295347bc7aaac162503f459d1c631fe8644e33 Mon Sep 17 00:00:00 2001 From: Viktor Szakats Date: Mon, 2 Mar 2026 01:46:13 +0100 Subject: [PATCH] GHA/linux: tidy up and extend address-sanitizer job options Also tried `integer` which has hits, but too slow to be practical to run on every commit. Closes #20785 --- .github/workflows/linux.yml | 22 ++++++++++++++++++---- 1 file changed, 18 insertions(+), 4 deletions(-) diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml index 44a52dca6a..ea03578a94 100644 --- a/.github/workflows/linux.yml +++ b/.github/workflows/linux.yml @@ -345,8 +345,15 @@ jobs: install_packages: clang-20 libssl-dev libssh-dev libidn2-dev libnghttp2-dev libubsan1 libasan8 libtsan2 install_steps: pytest randcurl CC: clang-20 - CFLAGS: -fsanitize=address,undefined,signed-integer-overflow -fno-sanitize-recover=undefined,integer -Wformat -Werror=format-security -Werror=array-bounds -g - LDFLAGS: -fsanitize=address,undefined -fno-sanitize-recover=undefined,integer -ldl -lubsan + CFLAGS: >- + -fsanitize=address,bounds,leak,signed-integer-overflow,undefined + -fno-sanitize-recover=address,bounds,leak,signed-integer-overflow,undefined + -fPIC + + LDFLAGS: >- + -fsanitize=address,bounds,leak,signed-integer-overflow,undefined + -fno-sanitize-recover=address,bounds,leak,signed-integer-overflow,undefined -ldl -lubsan + generate: -DENABLE_DEBUG=ON -DCURL_USE_LIBSSH=ON - name: 'address-sanitizer H3 c-ares' @@ -354,8 +361,15 @@ jobs: install_steps: pytest install_steps_brew: openssl libssh2 libngtcp2 libnghttp3 c-ares CC: clang-20 - CFLAGS: -fsanitize=address,undefined,signed-integer-overflow -fno-sanitize-recover=undefined,integer -Wformat -Werror=format-security -Werror=array-bounds -g - LDFLAGS: -fsanitize=address,undefined -fno-sanitize-recover=undefined,integer -ldl -lubsan -Wl,-rpath,/home/linuxbrew/.linuxbrew/opt/c-ares/lib + CFLAGS: >- + -fsanitize=address,bounds,leak,signed-integer-overflow,undefined + -fno-sanitize-recover=address,bounds,leak,signed-integer-overflow,undefined + + LDFLAGS: >- + -fsanitize=address,bounds,leak,signed-integer-overflow,undefined + -fno-sanitize-recover=address,bounds,leak,signed-integer-overflow,undefined -ldl -lubsan + -Wl,-rpath,/home/linuxbrew/.linuxbrew/opt/c-ares/lib + PKG_CONFIG_PATH: "\ /home/linuxbrew/.linuxbrew/opt/libssh2/lib/pkgconfig:\ /home/linuxbrew/.linuxbrew/opt/libngtcp2/lib/pkgconfig:\