.gitlab-ci.yml: disable GCC analyzer in sanitizer jobs

It turned out that -fanalyzer combined with -fsanitize=undefined takes
excessive time when compiling certain files, e.g., lib/priority.c.
Removing -fanalyzer should be safe as it is enabled in other
Fedora-based jobs.

Signed-off-by: Daiki Ueno <ueno@gnu.org>

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 17c9785ea976671e96b256d4a2ad27194cb79bee..b4fec5fb9e9b1a21f159f0fac76e7c93512e88aa 100644 (file)
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -208,6 +208,7 @@ UB+ASAN-Werror.Fedora.x86_64.gcc:
     - export CFLAGS="-std=c99 -O1 -g -Wno-cpp -Werror -fno-omit-frame-pointer -fsanitize=undefined,bool,alignment,null,enum,bounds-strict,address,leak,nonnull-attribute -fno-sanitize-recover=all -fsanitize-address-use-after-scope"
     - export CXXFLAGS="$CFLAGS"
     - dash ./configure --cache-file $CCACHE_FILE --disable-doc --with-pkcs12-iter-count=10000
+    - sed -i 's/-fanalyzer//g' lib/Makefile
     - sed -i 's/-Werror/-Wno-parentheses -Werror/g' src/Makefile
     - make -j$BUILDJOBS
     # Use $BUILDJOBS since the fuzzers should use mainly CPU (no blocking I/O)
@@ -220,6 +221,7 @@ UB+ASAN-Werror.Fedora.x86_64.gcc:
     - make -j$CHECKJOBS check -C tests
     - dash ./configure --cache-file $CCACHE_FILE --disable-doc --with-pkcs12-iter-count=10000 --with-default-trust-store-pkcs11="pkcs11:" --with-system-priority-file=/etc/crypto-policies/back-ends/gnutls.config --with-default-priority-string=@SYSTEM
     - make clean
+    - sed -i 's/-fanalyzer//g' lib/Makefile
     - sed -i 's/-Werror/-Wno-parentheses -Werror/g' src/Makefile
     - make -j$BUILDJOBS
     # Use $BUILDJOBS since most of the job is building all tests, then just running 4 tests
@@ -243,6 +245,7 @@ UB+ASAN-Werror-aggressive.Fedora.x86_64.gcc:
     - export CFLAGS="-std=c99 -O1 -g -Wno-cpp -Werror -fno-omit-frame-pointer -fsanitize=undefined,bool,alignment,null,enum,bounds-strict,address,leak,nonnull-attribute -fno-sanitize-recover=all -fsanitize-address-use-after-scope -DAGGRESSIVE_REALLOC"
     - export CXXFLAGS="$CFLAGS"
     - dash ./configure --cache-file $CCACHE_FILE --disable-doc --with-pkcs12-iter-count=10000
+    - sed -i 's/-fanalyzer//g' lib/Makefile
     - sed -i 's/-Werror/-Wno-parentheses -Werror/g' src/Makefile
     - make -j$BUILDJOBS
     # Use $BUILDJOBS since the fuzzers should use mainly CPU (no blocking I/O)
@@ -255,6 +258,7 @@ UB+ASAN-Werror-aggressive.Fedora.x86_64.gcc:
     - make -j$CHECKJOBS check -C tests
     - dash ./configure --cache-file $CCACHE_FILE --disable-doc --with-pkcs12-iter-count=10000 --with-default-trust-store-pkcs11="pkcs11:" --with-system-priority-file=/etc/crypto-policies/back-ends/gnutls.config --with-default-priority-string=@SYSTEM
     - make clean
+    - sed -i 's/-fanalyzer//g' lib/Makefile
     - sed -i 's/-Werror/-Wno-parentheses -Werror/g' src/Makefile
     - make -j$BUILDJOBS
     # Use $BUILDJOBS since most of the job is building all tests, then just running 4 tests
@@ -279,6 +283,7 @@ UB+ASAN-Werror.Fedora.x86_64.gcc-aggressive:
     - export CFLAGS="-std=c99 -O1 -g -Wno-cpp -Werror -fno-omit-frame-pointer -fsanitize=undefined,bool,alignment,null,enum,bounds-strict,address,leak,nonnull-attribute -fno-sanitize-recover=all -fsanitize-address-use-after-scope -DAGGRESSIVE_REALLOC"
     - export CXXFLAGS="$CFLAGS"
     - dash ./configure --cache-file $CCACHE_FILE --disable-doc --disable-hardware-acceleration
+    - sed -i 's/-fanalyzer//g' lib/Makefile
     - sed -i 's/-Werror/-Wno-parentheses -Werror/g' src/Makefile
     - make -j$BUILDJOBS
     # Use $BUILDJOBS since the fuzzers should use mainly CPU (no blocking I/O)
@@ -291,6 +296,7 @@ UB+ASAN-Werror.Fedora.x86_64.gcc-aggressive:
     - make -j$CHECKJOBS check -C tests
     - dash ./configure --cache-file $CCACHE_FILE --disable-doc --disable-hardware-acceleration --with-default-trust-store-pkcs11="pkcs11:" --with-system-priority-file=/etc/crypto-policies/back-ends/gnutls.config --with-default-priority-string=@SYSTEM
     - make clean
+    - sed -i 's/-fanalyzer//g' lib/Makefile
     - sed -i 's/-Werror/-Wno-parentheses -Werror/g' src/Makefile
     - make -j$BUILDJOBS
     # Use $BUILDJOBS since most of the job is building all tests, then just running 4 tests