github: Also run UBSan with CIFuzz
This commit is contained in:
@@ -16,6 +16,10 @@ jobs:
|
|||||||
needs: pre-check
|
needs: pre-check
|
||||||
if: ${{ needs.pre-check.outputs.should_skip != 'true' }}
|
if: ${{ needs.pre-check.outputs.should_skip != 'true' }}
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
|
strategy:
|
||||||
|
fail-fast: false
|
||||||
|
matrix:
|
||||||
|
sanitizer: [address, undefined]
|
||||||
permissions:
|
permissions:
|
||||||
security-events: write
|
security-events: write
|
||||||
steps:
|
steps:
|
||||||
@@ -25,6 +29,7 @@ jobs:
|
|||||||
with:
|
with:
|
||||||
oss-fuzz-project-name: 'strongswan'
|
oss-fuzz-project-name: 'strongswan'
|
||||||
language: c
|
language: c
|
||||||
|
sanitizer: ${{ matrix.sanitizer }}
|
||||||
|
|
||||||
- name: Run Fuzzers
|
- name: Run Fuzzers
|
||||||
uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@master
|
uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@master
|
||||||
@@ -32,12 +37,13 @@ jobs:
|
|||||||
oss-fuzz-project-name: 'strongswan'
|
oss-fuzz-project-name: 'strongswan'
|
||||||
output-sarif: true
|
output-sarif: true
|
||||||
language: c
|
language: c
|
||||||
|
sanitizer: ${{ matrix.sanitizer }}
|
||||||
|
|
||||||
- name: Upload Crash
|
- name: Upload Crash
|
||||||
uses: actions/upload-artifact@v4
|
uses: actions/upload-artifact@v4
|
||||||
if: failure() && steps.build.outcome == 'success'
|
if: failure() && steps.build.outcome == 'success'
|
||||||
with:
|
with:
|
||||||
name: artifacts
|
name: ${{ matrix.sanitizer }}-artifacts
|
||||||
path: ./out/artifacts
|
path: ./out/artifacts
|
||||||
|
|
||||||
- name: Upload Sarif
|
- name: Upload Sarif
|
||||||
|
|||||||
Reference in New Issue
Block a user