From: Daniel Stenberg <daniel@haxx.se>
Date: Tue, 21 Mar 2023 16:32:03 +0000 (+0100)
Subject: GHA-linux: add an address-sanitizer build
X-Git-Tag: curl-8_1_0~321
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=5bfe3dc3b648d1d3e3a117dba81ba786ab30b8c1;p=thirdparty%2Fcurl.git

GHA-linux: add an address-sanitizer build

Closes #10810
---

diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml
index bfef08e999..cb01086bda 100644
--- a/.github/workflows/linux.yml
+++ b/.github/workflows/linux.yml
@@ -104,6 +104,16 @@ jobs:
           install_steps: openssl3
           configure: CC=clang LDFLAGS="-Wl,-rpath,$HOME/openssl3/lib64" --with-openssl=$HOME/openssl3 --enable-debug --enable-websockets
 
+        - name: address-sanitizer
+          install_packages: zlib1g-dev libssh2-1-dev clang libssl-dev libubsan1 libasan8 libtsan2
+          install_steps: pytest
+          configure: >
+            CC=clang
+            CFLAGS="-fsanitize=address,undefined,signed-integer-overflow -fno-sanitize-recover=undefined,integer -Wformat -Werror=format-security -Werror=array-bounds -g"
+            LDFLAGS="-fsanitize=address,undefined -fno-sanitize-recover=undefined,integer"
+            LIBS="-ldl -lubsan"
+            --with-openssl --enable-debug --enable-websockets
+
         - name: event-based
           install_packages: libssh-dev
           configure: --enable-debug --disable-shared --disable-threaded-resolver --with-libssh --with-openssl