diff --git a/.github/workflows/builds.yml b/.github/workflows/builds.yml index c0b987900b..07c7ef12e5 100644 --- a/.github/workflows/builds.yml +++ b/.github/workflows/builds.yml @@ -315,6 +315,93 @@ jobs: - run: tar xf prep/suricata-verify.tar.gz - run: python3 ./suricata-verify/run.py -q + fedora-35: + name: Fedora 35 (debug, clang, asan, wshadow, rust-strict) + runs-on: ubuntu-latest + container: fedora:35 + needs: [prepare-deps, prepare-cbindgen] + steps: + + # Cache Rust stuff. + - name: Cache cargo registry + uses: actions/cache@v1 + with: + path: ~/.cargo/registry + key: cargo-registry + + - run: | + dnf -y install \ + autoconf \ + automake \ + cargo \ + ccache \ + clang \ + diffutils \ + file-devel \ + gcc \ + gcc-c++ \ + git \ + hiredis-devel \ + jansson-devel \ + jq \ + lua-devel \ + libasan \ + libtool \ + libyaml-devel \ + libnfnetlink-devel \ + libnetfilter_queue-devel \ + libnet-devel \ + libcap-ng-devel \ + libevent-devel \ + libmaxminddb-devel \ + libpcap-devel \ + libtool \ + lz4-devel \ + make \ + nss-softokn-devel \ + pcre2-devel \ + pkgconfig \ + python3-yaml \ + sudo \ + which \ + zlib-devel + - uses: actions/checkout@v2 + - uses: actions/download-artifact@v2 + with: + name: prep + path: prep + - run: tar xf prep/libhtp.tar.gz + - name: Setup cbindgen + run: | + mkdir -p $HOME/.cargo/bin + cp prep/cbindgen $HOME/.cargo/bin + chmod 755 $HOME/.cargo/bin/cbindgen + echo "$HOME/.cargo/bin" >> $GITHUB_PATH + - run: ./autogen.sh + - run: CC="clang" CFLAGS="$DEFAULT_CFLAGS -Wshadow -fsanitize=address -fno-omit-frame-pointer" ./configure --enable-debug --enable-unittests --disable-shared --enable-rust-strict --enable-hiredis + env: + LDFLAGS: "-fsanitize=address" + ac_cv_func_realloc_0_nonnull: "yes" + ac_cv_func_malloc_0_nonnull: "yes" + - run: make -j2 + - run: ASAN_OPTIONS="detect_leaks=0" ./src/suricata -u -l . + - name: Extracting suricata-verify + run: tar xf prep/suricata-verify.tar.gz + - name: Running suricata-verify + run: python3 ./suricata-verify/run.py -q + # Now install and make sure headers and libraries aren't install + # until requested. + - run: make install + - run: test ! -e /usr/local/lib/libsuricata_c.a + - run: test ! -e /usr/local/include/suricata + - run: make install-headers + - run: test -e /usr/local/include/suricata/suricata.h + - run: make install-library + - run: test -e /usr/local/lib/libsuricata_c.a + - run: test -e /usr/local/lib/libsuricata_rust.a + - run: test -e /usr/local/bin/libsuricata-config + - run: test ! -e /usr/local/lib/libsuricata.so + fedora-34: name: Fedora 34 (debug, clang, asan, wshadow, rust-strict) runs-on: ubuntu-latest