ci: build the release clang build with _FORTIFY_SOURCE=3

Since this combination is known to cause interesting issues in our
allocation machinery.

diff --git a/.github/workflows/unit-tests.sh b/.github/workflows/unit-tests.sh
index b2f21b5825bba07f889f9ea0c257f556e849223f..885dad1c1ad3233cd6772d1e83aa544a68f7849f 100755 (executable)
--- a/.github/workflows/unit-tests.sh
+++ b/.github/workflows/unit-tests.sh
@@ -108,6 +108,8 @@ for phase in "${PHASES[@]}"; do
                     MESON_ARGS+=(-Dman=enabled)
                 else
                     MESON_ARGS+=(-Dmode=release --optimization=2)
+                    CFLAGS+=" -D_FORTIFY_SOURCE=3"
+                    CXXFLAGS+=" -D_FORTIFY_SOURCE=3"
                 fi
 
                 # Some variation: remove machine-id, like on Debian builders to ensure unit tests still work.