[Git][NTPsec/ntpsec][master] ci: add UBSan job that fails on undefined behavior

[Matt Selsky (@selsky)]

Matt Selsky pushed to branch master at NTPsec / ntpsec


Commits:
1f38cbe7 by Matt Selsky at 2026-10-21T04:54:44+00:00
ci: add UBSan job that fails on undefined behavior

UBSan only prints a report and lets the program exit 0, so a plain
-fsanitize=undefined build never fails. -fno-sanitize-recover=undefined aborts
on the first report, so the unit tests run by waf build fail and the job goes
red.

-fsanitize=undefined includes alignment checks, which catch misaligned accesses
on x86 runners that would only crash on strict-alignment CPUs.

- - - - -


1 changed file:

- .gitlab-ci.yml


Changes:

=====================================
.gitlab-ci.yml
=====================================
@@ -357,6 +357,14 @@ debian-stable-mDNS-refclocks:
   script:
     - python3 ./waf configure --enable-warnings --enable-Werror --disable-doc --disable-manpage --refclock=all build --pyshebang "/usr/bin/env python3"
 
+debian-stable-ubsan:
+  <<: *job_definition
+  image: $IMAGE_REGISTRY/debian-stable
+  variables:
+    UBSAN_OPTIONS: print_stacktrace=1
+  script:
+    - python3 ./waf configure --disable-doc --disable-manpage --cflags=-fsanitize=undefined --cflags=-fno-sanitize-recover=undefined --cflags=-g --ldflags=-fsanitize=undefined build
+
 cross-armhf-build:
   allow_failure: true
   <<: *job_definition



View it on GitLab: https://gitlab.com/NTPsec/ntpsec/-/commit/1f38cbe7fa0af801ad90566189256fde9bd8b881

-- 
View it on GitLab: https://gitlab.com/NTPsec/ntpsec/-/commit/1f38cbe7fa0af801ad90566189256fde9bd8b881
You're receiving this email because of your account on gitlab.com. Manage all notifications: https://gitlab.com/-/profile/notifications | Help: https://gitlab.com/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ntpsec.org/pipermail/vc/attachments/20261021/1b1ea4fa/attachment-0001.htm>