Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ci: add asan runs under gcc #4402

Merged
merged 12 commits into from
Mar 31, 2024
Merged

ci: add asan runs under gcc #4402

merged 12 commits into from
Mar 31, 2024

Conversation

jmayclin
Copy link
Contributor

@jmayclin jmayclin commented Feb 2, 2024

Description of changes:

Add asan jobs for GCC

This PR also turns on Debug info for the builds, which allows line numbers to be included in the stack traces.

Testing:

I'll manually invoke the CI run so it should still show up as passing on this PR, and the compiler version will be verified in the output because of the new compiler --version command that I added in the buildspec.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@jmayclin jmayclin marked this pull request as ready for review February 2, 2024 20:58
@jmayclin jmayclin requested a review from dougch as a code owner February 2, 2024 20:58
@github-actions github-actions bot added the s2n-core team label Feb 2, 2024
Copy link
Contributor

@dougch dougch left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

My faith in clang-15 is shaken.

cd third-party-src;
ln -s /usr/local $CODEBUILD_SRC_DIR/third-party-src/test-deps;
fi
- /usr/bin/$COMPILER --version
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we expect a certain minimum gcc version to get "enough" asan coverage?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm. I do really like that idea, but I don't want to do it directly in the buildspec. Perhaps it would make sense to add a codebuild script like codebuild/bin/assert_compiler_version_gt $COMPILER "clang-15". I'll do that in a different PR to keep this one straightforward.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Right- I'm not asking for it as part of this PR, (totally agree the buildspec probably isn't the right place) just wondering if it's written down anywhere...

@jmayclin jmayclin requested a review from maddeleine February 24, 2024 01:11
@jmayclin jmayclin enabled auto-merge (squash) March 6, 2024 00:31
@jmayclin
Copy link
Contributor Author

jmayclin commented Mar 27, 2024

I think we might have the override to merge this one. I have manually kicked off all of the codebuild jobs, but the unitNix and ASAN jobs won't report their results ☹️

successful ASAN CI
Successful unit nix CI

Update: reportBuildStatus was set to false for both of those builds. We have never noticed this because the toggle only matter when builds are manually invoked. Updated that, so fingers crossed that we should be able to get this merged with any manual override.

@jmayclin jmayclin merged commit 0381567 into aws:main Mar 31, 2024
32 checks passed
@jmayclin jmayclin deleted the more-asan branch July 1, 2024 07:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants