add clang-sanitizers for crypto 3

NilFoundation · Sep 17, 2024 · 865de58 · 865de58
1 parent 10aa6a9
commit 865de58
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 0 deletions.
diff --git a/crypto3/CMakeLists.txt b/crypto3/CMakeLists.txt
@@ -21,11 +21,17 @@ option(Boost_USE_STATIC_LIBS "Use static libraries for Boost" OFF)
 option(CMAKE_ENABLE_TESTS "Enable tests" FALSE) # used by CMTest module
 option(BUILD_BENCH_TESTS "Build performance benchmark tests" FALSE)
 option(BUILD_DOCS "Build with configuring Doxygen documentation compiler" FALSE)
+option(SANITIZE "Build sanitizers" FALSE)
 
 if(${CMAKE_BUILD_TYPE} STREQUAL "Debug")
     set(CMAKE_CXX_FLAGS "-ggdb -O0")
 endif()
 
+if(${SANITIZE})
+  add_compile_options(-fsanitize=undefined,address,leak)
+  add_link_options(-fsanitize=undefined,address,leak)
+endif()
+
 # This is useful due to some build systems (Ninja in particular) are piping
 # compiler output and compiler switches it's output to plain text
 option (FORCE_COLORED_OUTPUT "Always produce ANSI-colored output (GNU/Clang only)." FALSE)

diff --git a/crypto3/crypto3.nix b/crypto3/crypto3.nix
@@ -9,6 +9,7 @@
   enableDebugging,
   enableDebug ? false,
   runTests ? false,
+  sanitize ? false,
   }:
 let
   inherit (lib) optional;
@@ -28,6 +29,7 @@ in stdenv.mkDerivation {
     [
       (if runTests then "-DBUILD_TESTS=TRUE" else "-DBUILD_TESTS=False")
       (if enableDebug then "-DCMAKE_BUILD_TYPE=Debug" else "-DCMAKE_BUILD_TYPE=Release")
+      (if sanitize then "-DSANITIZE=ON" else "-DSANITIZE=OFF")
       "-G Ninja"
     ];
 

diff --git a/flake.nix b/flake.nix
@@ -33,6 +33,7 @@
           crypto3-debug-tests = (pkgs.callPackage ./crypto3/crypto3.nix {
             enableDebug = true;
             runTests = true;
+            sanitize = true;
           });
 
           parallel-crypto3 = (pkgs.callPackage ./parallel-crypto3/parallel-crypto3.nix {
@@ -145,6 +146,12 @@
             runTests = true;
             enableDebug = false;
           });
+          crypto3-clang-sanitize = (pkgs.callPackage ./crypto3/crypto3.nix {
+            stdenv = pkgs.llvmPackages_18.stdenv;
+            runTests = true;
+            enableDebug = false;
+            sanitize = true;
+          });
 
           parallel-crypto3-gcc = (pkgs.callPackage ./parallel-crypto3/parallel-crypto3.nix {
             runTests = true;