ci: get sanitizer results

[Saviq]

No description provided.

[codecov]

Codecov Report

❗ No coverage uploaded for pull request base (ci-enable-asan@3b9fe2d). Click here to learn what that means.
The diff coverage is n/a.

❗ Current head 5d644fc differs from pull request most recent head a4a7f3c. Consider uploading reports for the commit a4a7f3c to get more accurate results

@@                Coverage Diff                @@
##             ci-enable-asan    #2926   +/-   ##
=================================================
  Coverage                  ?   77.70%           
=================================================
  Files                     ?     1056           
  Lines                     ?    73394           
  Branches                  ?        0           
=================================================
  Hits                      ?    57034           
  Misses                    ?    16360           
  Partials                  ?        0           

📣 Codecov offers a browser extension for seamless coverage viewing on GitHub. Try it in Chrome or Firefox today!

[RAOF]

Ok. So, UBSan looks like it should be good to add to the block-CI set; we don't invoke any behaviour it can detect as UB.

We should be able to turn on ASan and disable leak checking, but

• The gcc asan build is baroquen.
• The clang asan build picks up some legitimate bugs - ODR violations, something maybe broken in ShmMapping::CurrentMapping, and maybe a UAF in ObserverMultiplexer - and then something in the UDevWrapperDeathTest, which may well just be a false positive.

So, current status: We should add UBsan to the list off builds required to pass in CI, and fix the bugs that asan detects.

[Saviq]

Parts of this are now in:

1. ci: add ubsan to standard CI #3022
2. ci: run tests in ubsan #3025
3. sanitizers: clean things up for sanitizers, spread: simpler dependency install #3028
4. ci: enable AddressSanitizer #3026