Test analyzer with asan and ubsan in the CI

Closes #13

.github/workflows/ci.yml

@@ -40,8 +40,8 @@ jobs:
       with:
         submodules: "true"
 
-    - Generate a timestamp
-      run: echo "TIMESTAMP=$(date +"%Y%m%d%H%M%S")" >>$GITHUB_ENV
+    - name: Generate a timestamp
+      run: echo "TIMESTAMP=$(date +%Y%m%d%H%M%S)" >>"$GITHUB_ENV"
 
     - uses: actions/cache@v4
       with:
@@ -67,11 +67,12 @@ jobs:
       run: PATH=/usr/lib/ccache:$PATH ./ci
                --skip-repair
                -DVALGRIND_CONFIGURE_FLAGS=--disable-dependency-tracking
+               --sanitize
 
     - name: Smoke test
       run: python3 -m pip install --user dist/wheelhouse/*.whl &&
-           memtrace record true &&
-           memtrace report >/dev/null
+           ./python3-asan "$(command -v memtrace)" record true &&
+           ./python3-asan "$(command -v memtrace)" report | tail
 
     - name: Show and reset ccache stats
       run: ccache --show-stats --verbose --zero-stats
@@ -94,8 +95,8 @@ jobs:
       with:
         submodules: "true"
 
-    - Generate a timestamp
-      run: echo "TIMESTAMP=$(date +"%Y%m%d%H%M%S")" >>$GITHUB_ENV
+    - name: Generate a timestamp
+      run: echo "TIMESTAMP=$(date +%Y%m%d%H%M%S)" >>"$GITHUB_ENV"
 
     - uses: actions/cache@v4
       with:

.github/workflows/ci.yml.j2

@@ -12,8 +12,8 @@ name: Continuous integration
       with:
         submodules: "true"
 
-    - Generate a timestamp
-      run: echo "TIMESTAMP=$(date +"%Y%m%d%H%M%S")" >>$GITHUB_ENV
+    - name: Generate a timestamp
+      run: echo "TIMESTAMP=$(date +%Y%m%d%H%M%S)" >>"$GITHUB_ENV"
 
     - uses: actions/cache@v4
       with:
@@ -77,11 +77,12 @@ jobs:
       run: PATH=/usr/lib/ccache:$PATH ./ci
                --skip-repair
                -DVALGRIND_CONFIGURE_FLAGS=--disable-dependency-tracking
+               --sanitize
 
     - name: Smoke test
       run: python3 -m pip install --user dist/wheelhouse/*.whl &&
-           memtrace record true &&
-           memtrace report >/dev/null
+           ./python3-asan "$(command -v memtrace)" record true &&
+           ./python3-asan "$(command -v memtrace)" report | tail
 
     - name: Show and reset ccache stats
       run: ccache --show-stats --verbose --zero-stats

CMakeLists.txt

@@ -21,6 +21,7 @@ target_compile_options(
             -Wconversion
             -Wdate-time
             -Wformat-security
+            -Wno-maybe-uninitialized
             -pedantic
             -Werror
             -fstack-protector-strong

ci

@@ -142,6 +142,7 @@ def main():
         "--wheel-dir",
         default=os.path.join(basedir, "dist", "wheelhouse"),
     )
+    parser.add_argument("--sanitize", action="store_true")
     args, build_args = parser.parse_known_args()
     if args.host != platform.machine():
         build_args.extend(
@@ -150,6 +151,8 @@ def main():
                 f"-DCMAKE_SYSTEM_PROCESSOR={args.host}",
             )
         )
+    if args.sanitize:
+        build_args.append("-DCMAKE_CXX_FLAGS=-fsanitize=address,undefined")
     build = os.path.join(basedir, "build", f"{platform.system()}-{args.host}")
     build_prefix = "" if args.host_python is None else "build-"
     cross_prefix = "" if args.host_python is None else "cross-"
@@ -166,7 +169,15 @@ def main():
                 *build_args,
             ],
         )
-        run_in_venv(venv, ["python", "-m", "unittest", "discover"])
+        run_in_venv(
+            venv,
+            [
+                "./python3-asan" if args.sanitize else "python3",
+                "-m",
+                "unittest",
+                "discover",
+            ],
+        )
     build_wheel(
         venv,
         args.build_type,

python3-asan

@@ -0,0 +1,52 @@
+#!/usr/bin/env python3
+from argparse import ArgumentParser
+import os
+import subprocess
+
+
+def main():
+    parser = ArgumentParser()
+    parser.add_argument("-m")
+    args, rest = parser.parse_known_args()
+
+    script = """\
+from os import environ
+del environ["LD_PRELOAD"]
+"""
+    if args.m:
+        script += f"""\
+import {args.m}.__main__
+"""
+    else:
+        script += """\
+import sys
+assert sys.argv[0] == "-c"
+del sys.argv[0]
+with open(sys.argv[0]) as fp:
+    exec(compile(fp.read(), sys.argv[0], "exec"))
+"""
+
+    cc = os.environ.get("CC", "cc")
+    # https://github.com/google/sanitizers/issues/934
+    libstdcxx = (
+        subprocess.check_output([cc, "-print-file-name=libstdc++.so"]).strip().decode()
+    )
+    libasan = (
+        subprocess.check_output([cc, "-print-file-name=libasan.so"]).strip().decode()
+    )
+
+    # https://stackoverflow.com/questions/77894856
+    argv = ["setarch", "--addr-no-randomize", "python3", "-c", script, *rest]
+    os.execvpe(
+        argv[0],
+        argv,
+        {
+            **os.environ,
+            "ASAN_OPTIONS": "detect_leaks=0",
+            "LD_PRELOAD": os.pathsep.join((libasan, libstdcxx)),
+        },
+    )
+
+
+if __name__ == "__main__":
+    main()