[Spice-devel] [cacard 3/5] ci: Add check using AddressSanitizer

Christophe Fergeau cfergeau at redhat.com
Tue Aug 21 15:03:56 UTC 2018


hex_dump in git master currently has a 1 byte buffer overflow which
valgrind is not able to catch, but asan detects it.

Signed-off-by: Christophe Fergeau <cfergeau at redhat.com>
---
 .gitlab-ci.yml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 4174e11..7ae3bf7 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -2,7 +2,7 @@ image: fedora:latest
 
 before_script:
   - dnf update -y
-  - dnf install -y gcc automake libtool make pkgconfig autoconf-archive nss-devel glib2-devel opensc gnutls-utils nss-tools openssl softhsm lcov valgrind
+  - dnf install -y gcc automake libtool make pkgconfig autoconf-archive nss-devel glib2-devel opensc gnutls-utils nss-tools openssl softhsm lcov valgrind libasan
 
 Build:
   stage: build
@@ -30,6 +30,13 @@ Memcheck:
     - make memcheck-local
   allow_failure: true
 
+asan:
+  stage: test
+  script:
+    - ./autogen.sh
+    - make CFLAGS="-fsanitize=address" check
+  allow_failure: true
+
 pages:
   stage: deploy
   dependencies:
-- 
2.17.1



More information about the Spice-devel mailing list