GHA-linux: add an address-sanitizer build

Closes #10810

diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml
index bfef08e999f7bc7c3d4aa477743cbd0803df4a73..cb01086bda6367e85b27650834eb8b49438caa3e 100644 (file)
--- a/.github/workflows/linux.yml
+++ b/.github/workflows/linux.yml
@@ -104,6 +104,16 @@ jobs:
           install_steps: openssl3
           configure: CC=clang LDFLAGS="-Wl,-rpath,$HOME/openssl3/lib64" --with-openssl=$HOME/openssl3 --enable-debug --enable-websockets
 
+        - name: address-sanitizer
+          install_packages: zlib1g-dev libssh2-1-dev clang libssl-dev libubsan1 libasan8 libtsan2
+          install_steps: pytest
+          configure: >
+            CC=clang
+            CFLAGS="-fsanitize=address,undefined,signed-integer-overflow -fno-sanitize-recover=undefined,integer -Wformat -Werror=format-security -Werror=array-bounds -g"
+            LDFLAGS="-fsanitize=address,undefined -fno-sanitize-recover=undefined,integer"
+            LIBS="-ldl -lubsan"
+            --with-openssl --enable-debug --enable-websockets
+
         - name: event-based
           install_packages: libssh-dev
           configure: --enable-debug --disable-shared --disable-threaded-resolver --with-libssh --with-openssl