[gnutls-devel] GnuTLS | UBSAN: Fail tests if UB detected (!1136)

[Development of GNU's TLS library]

Nikos Mavrogiannopoulos started a new discussion on .gitlab-ci.yml: https://gitlab.com/gnutls/gnutls/merge_requests/1136#note_262692558

>    stage: stage1-testing
>    image: $CI_REGISTRY/$BUILD_IMAGES_PROJECT:$FEDORA_BUILD
>    script:
> +  - dnf install -y llvm
>    - ./bootstrap
> -  - CFLAGS="-std=c99 -fsanitize=undefined -fsanitize=bool -fsanitize=alignment -fsanitize=null -fsanitize=bounds-strict -fsanitize=enum -fno-sanitize-recover -g -O2" CXXFLAGS=$CFLAGS LDFLAGS="-static-libubsan" dash ./configure

That kind of changes completely the goal of this runner. This checks for C99 compliance and presence of no warnings (Werror) in addition to undefined sanitizer. If the problem was that we didn't run `make check` on fuzz directory, I think let's fix this issue, and we can have separate runners with clang if we believe it is beneficial to do so.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/1136#note_262692558
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20191218/85200682/attachment-0001.html>