|
|
|
@ -315,6 +315,93 @@ jobs:
|
|
|
|
|
- run: tar xf prep/suricata-verify.tar.gz
|
|
|
|
|
- run: python3 ./suricata-verify/run.py -q
|
|
|
|
|
|
|
|
|
|
fedora-35:
|
|
|
|
|
name: Fedora 35 (debug, clang, asan, wshadow, rust-strict)
|
|
|
|
|
runs-on: ubuntu-latest
|
|
|
|
|
container: fedora:35
|
|
|
|
|
needs: [prepare-deps, prepare-cbindgen]
|
|
|
|
|
steps:
|
|
|
|
|
|
|
|
|
|
# Cache Rust stuff.
|
|
|
|
|
- name: Cache cargo registry
|
|
|
|
|
uses: actions/cache@v1
|
|
|
|
|
with:
|
|
|
|
|
path: ~/.cargo/registry
|
|
|
|
|
key: cargo-registry
|
|
|
|
|
|
|
|
|
|
- run: |
|
|
|
|
|
dnf -y install \
|
|
|
|
|
autoconf \
|
|
|
|
|
automake \
|
|
|
|
|
cargo \
|
|
|
|
|
ccache \
|
|
|
|
|
clang \
|
|
|
|
|
diffutils \
|
|
|
|
|
file-devel \
|
|
|
|
|
gcc \
|
|
|
|
|
gcc-c++ \
|
|
|
|
|
git \
|
|
|
|
|
hiredis-devel \
|
|
|
|
|
jansson-devel \
|
|
|
|
|
jq \
|
|
|
|
|
lua-devel \
|
|
|
|
|
libasan \
|
|
|
|
|
libtool \
|
|
|
|
|
libyaml-devel \
|
|
|
|
|
libnfnetlink-devel \
|
|
|
|
|
libnetfilter_queue-devel \
|
|
|
|
|
libnet-devel \
|
|
|
|
|
libcap-ng-devel \
|
|
|
|
|
libevent-devel \
|
|
|
|
|
libmaxminddb-devel \
|
|
|
|
|
libpcap-devel \
|
|
|
|
|
libtool \
|
|
|
|
|
lz4-devel \
|
|
|
|
|
make \
|
|
|
|
|
nss-softokn-devel \
|
|
|
|
|
pcre2-devel \
|
|
|
|
|
pkgconfig \
|
|
|
|
|
python3-yaml \
|
|
|
|
|
sudo \
|
|
|
|
|
which \
|
|
|
|
|
zlib-devel
|
|
|
|
|
- uses: actions/checkout@v2
|
|
|
|
|
- uses: actions/download-artifact@v2
|
|
|
|
|
with:
|
|
|
|
|
name: prep
|
|
|
|
|
path: prep
|
|
|
|
|
- run: tar xf prep/libhtp.tar.gz
|
|
|
|
|
- name: Setup cbindgen
|
|
|
|
|
run: |
|
|
|
|
|
mkdir -p $HOME/.cargo/bin
|
|
|
|
|
cp prep/cbindgen $HOME/.cargo/bin
|
|
|
|
|
chmod 755 $HOME/.cargo/bin/cbindgen
|
|
|
|
|
echo "$HOME/.cargo/bin" >> $GITHUB_PATH
|
|
|
|
|
- run: ./autogen.sh
|
|
|
|
|
- run: CC="clang" CFLAGS="$DEFAULT_CFLAGS -Wshadow -fsanitize=address -fno-omit-frame-pointer" ./configure --enable-debug --enable-unittests --disable-shared --enable-rust-strict --enable-hiredis
|
|
|
|
|
env:
|
|
|
|
|
LDFLAGS: "-fsanitize=address"
|
|
|
|
|
ac_cv_func_realloc_0_nonnull: "yes"
|
|
|
|
|
ac_cv_func_malloc_0_nonnull: "yes"
|
|
|
|
|
- run: make -j2
|
|
|
|
|
- run: ASAN_OPTIONS="detect_leaks=0" ./src/suricata -u -l .
|
|
|
|
|
- name: Extracting suricata-verify
|
|
|
|
|
run: tar xf prep/suricata-verify.tar.gz
|
|
|
|
|
- name: Running suricata-verify
|
|
|
|
|
run: python3 ./suricata-verify/run.py -q
|
|
|
|
|
# Now install and make sure headers and libraries aren't install
|
|
|
|
|
# until requested.
|
|
|
|
|
- run: make install
|
|
|
|
|
- run: test ! -e /usr/local/lib/libsuricata_c.a
|
|
|
|
|
- run: test ! -e /usr/local/include/suricata
|
|
|
|
|
- run: make install-headers
|
|
|
|
|
- run: test -e /usr/local/include/suricata/suricata.h
|
|
|
|
|
- run: make install-library
|
|
|
|
|
- run: test -e /usr/local/lib/libsuricata_c.a
|
|
|
|
|
- run: test -e /usr/local/lib/libsuricata_rust.a
|
|
|
|
|
- run: test -e /usr/local/bin/libsuricata-config
|
|
|
|
|
- run: test ! -e /usr/local/lib/libsuricata.so
|
|
|
|
|
|
|
|
|
|
fedora-34:
|
|
|
|
|
name: Fedora 34 (debug, clang, asan, wshadow, rust-strict)
|
|
|
|
|
runs-on: ubuntu-latest
|
|
|
|
|