From: Jason Ish <jason.ish@oisf.net>
Date: Tue, 22 Jul 2025 14:29:08 +0000 (-0600)
Subject: github-ci: add flto build
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=bb846de074a8fc6d64abc648ce7c73abf2b52531;p=thirdparty%2Fsuricata.git

github-ci: add flto build

Ubuntu and Fedora packing system build with -flto=auto by default, so
update one test to use -flto=auto. Also build with -O2 as that
combination can cause issues such as
https://redmine.openinfosecfoundation.org/issues/7824.

Also adds vectorscan to the build.
---

diff --git a/.github/workflows/builds.yml b/.github/workflows/builds.yml
index 3b99e33d5e..9f66c814c8 100644
--- a/.github/workflows/builds.yml
+++ b/.github/workflows/builds.yml
@@ -789,7 +789,7 @@ jobs:
 
   # Fedora build using GCC.
   fedora-42-gcc:
-    name: Fedora 42 (gcc, debug, asan, wshadow, rust-strict)
+    name: Fedora 42 (gcc, debug, flto, asan, wshadow, rust-strict)
     runs-on: ubuntu-latest
     container: fedora:42
     needs: [prepare-deps, prepare-cbindgen]
@@ -840,6 +840,7 @@ jobs:
                 pkgconfig \
                 python3-yaml \
                 sudo \
+                vectorscan-devel \
                 which \
                 zlib-devel
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
@@ -853,7 +854,7 @@ jobs:
       - run: ./autogen.sh
       - run: ./configure --enable-warnings --enable-debug --enable-unittests --disable-shared --enable-rust-strict --enable-hiredis --enable-nfqueue
         env:
-          CFLAGS: "${{ env.DEFAULT_CFLAGS }} -Wshadow -fsanitize=address -fno-omit-frame-pointer"
+          CFLAGS: "${{ env.DEFAULT_CFLAGS }} -Wshadow -fsanitize=address -fno-omit-frame-pointer -flto=auto -O2"
           LDFLAGS: "-fsanitize=address"
           ac_cv_func_realloc_0_nonnull: "yes"
           ac_cv_func_malloc_0_nonnull: "yes"