GHA-linux: add a sanitizer builda

curl · Mar 21, 2023 · 188694d · 188694d
1 parent b16d1fa
commit 188694d
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml
@@ -104,6 +104,16 @@ jobs:
           install_steps: openssl3
           configure: CC=clang LDFLAGS="-Wl,-rpath,$HOME/openssl3/lib64" --with-openssl=$HOME/openssl3 --enable-debug --enable-websockets
 
+        - name: openssl-sanitizer
+          install_packages: zlib1g-dev libssh2-dev
+          install_steps: gcc-11 openssl3 pytest
+          configure: |
+            CC=clang
+            CFLAGS="-fsanitize=address,undefined,signed-integer-overflow -fno-sanitize-recover=undefined,integer -Wformat -Werror=format-security -Werror=array-bounds -g"
+            LDFLAGS="-Wl,-rpath,$HOME/openssl3/lib64 -fsanitize=memory,undefined -fno-sanitize-recover=undefined,integer"
+            LIBS="-lubsan"
+            --with-openssl=$HOME/openssl3 --enable-debug --enable-websockets
+
         - name: event-based
           install_packages: libssh-dev
           configure: --enable-debug --disable-shared --disable-threaded-resolver --with-libssh --with-openssl