Repository navigation
Run the test suites under sanitizers and CodeQL #148
Description
Most memory-safety and race fixes so far (int overflows, out-of-bounds reads, GC and thread races) are the kind UBSan, ASan and TSan find on their own. Add CI jobs that build the regression, std and GC stress suites with them, with the GC's conservative stack and heap scanning excluded from ASan, and enable CodeQL for the C++ sources. Fuzz the parsers (cppia loader, UTF-8 and String, Bytes, Serializer) next.
Activity
Add HXCPP_SANITIZE and keep the stack scans sanitizer-clean
Run the regression tests under UBSan and ASan in CI
Give the sanitizer jobs the compile cache
Run the std and GC stress suites under sanitizers, add TSan and CodeQL
dimensionscape commentedon Oct 21, 2026
Done: the regression, std and GC stress suites build and run under UBSan, ASan and TSan in CI (the Check with UBSan, ASan and TSan jobs), with the GC's conservative scanning excluded from ASan, and CodeQL scans the C++ sources (codeql.yml). Fuzzing the parsers, the next step listed here, is now #257.