Skip to content

ASAN is flaky on Docker, and our fix is a no-op. #102

@nickpdemarco

Description

@nickpdemarco

To reproduce: In a Devcontainer environment (e.g. GitHub Codespaces), run

cmake --workflow --preset gcc-debug

Notice that the test suite is flaky - it will hang some of the time.

Our current solution is moving in the right direction, but sadly Docker containers silently fail to update this setting (for security reasons). Some sysctl options are available, but the one we need (vm.mmap_rnd_bits) is not. Note that moving the command to postcreate.sh also fails silently.

The correct solution either requires:

  • Docker support for docker run --sysctl vm.mmap_rnd_bits (unlikely to arrive soon)
  • Updating our LLVM version to one which has the fix.

It is unclear if there are ASAN options we can pass to mitigate this issue in the interim.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions