From 6b5aef761298a5f750b5893c063e8f9e18e5d5c9 Mon Sep 17 00:00:00 2001
From: Colin Walters <walters@verbum.org>
Date: Tue, 2 Feb 2021 21:04:18 +0000
Subject: [PATCH] ci: Add new build-check-sanitized.sh

All C/C++ projects should use the sanitizers (and static analysis)
in their CI.  We had this but lost it in one of our CI shuffles;
let's readd it.
---
 ci/build-check-sanitized.sh | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100755 ci/build-check-sanitized.sh

diff --git a/ci/build-check-sanitized.sh b/ci/build-check-sanitized.sh
new file mode 100755
index 00000000..39c06f43
--- /dev/null
+++ b/ci/build-check-sanitized.sh
@@ -0,0 +1,12 @@
+#!/usr/bin/bash
+# Build with ASAN and UBSAN + unit tests.
+
+set -xeuo pipefail
+
+dn=$(dirname $0)
+. ${dn}/libbuild.sh
+export CFLAGS='-fsanitize=address -fsanitize=undefined -fsanitize-undefined-trap-on-error'
+# We leak global state in a few places, fixing that is hard.
+export ASAN_OPTIONS='detect_leaks=0'
+${dn}/build.sh
+make check