CI: Add various sanitizers to debug build + tests

This commit extends the native debug tests in the CI to enable the address and undefined-behaviour sanitizers in GCC. Signed-off-by: Hanno Becker <[email protected]>
pq-code-package · Oct 30, 2024 · 1a31aec · 1a31aec
1 parent d22d7e7
commit 1a31aec
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -86,12 +86,12 @@ jobs:
           func: true
           nistkat: true
           kat: true
-      - name: native tests (+debug)
+      - name: native tests (+debug+memsan+ubsan)
         uses: ./.github/actions/multi-functest
         with:
           gh_token: ${{ secrets.GITHUB_TOKEN }}
           compile_mode: native
-          cflags: "-DMLKEM_DEBUG"
+          cflags: "-DMLKEM_DEBUG -fsanitize=address -fsanitize=undefined -fno-sanitize-recover=all"
       - name: cross tests (opt only)
         uses: ./.github/actions/multi-functest
         if: ${{ matrix.target.runner != 'macos-latest' && (success() || failure()) }}