Support SANITIZE_ADDRESS on macOS aarch64

[xal-0]

Handy for local development on mac. Apple's addrsan changes the version check symbol that our LLVM looks for, so we disable this check (it seems fine).

[Keno]

Could you explain the issue in a little more detail? Is this because we're linking system provided asan runtime?

[xal-0]

Yes. On my machine it links /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/lib/clang/17/lib/darwin/libclang_rt.asan_osx_dynamic.dylib, which has the symbol ___asan_version_mismatch_check_apple_clang_1700. AddressSanitizerPass with InsertVersionCheck=true adds a function that wants ___asan_version_mismatch_check_v8 from our version of LLVM.

[Keno]

It doesn't seem wise to randomly mix and match sanitizer runtime versions. I think we need to standardize on a sanitizer version and force those to be linked. This may mean that in sanitize mode, we need to build with our own clang. The other interaction we need to think about is that we do have sanitizer tags for jlls. We don't currently use them much, but in principle this needs to be coordinated with yggdrasil.