ci: add msan Linux job

MSan is viral, so it is added to Clang only.

Do not add MSan to MacOS job, since it is not supported in that platform.

Author: mizvekov

.github/workflows/ci.yml

@@ -42,7 +42,7 @@ jobs:
           latest-factors: |
             msvc Optimized-Debug
             gcc UBSan Coverage
-            clang UBSan ASan
+            clang UBSan ASan MSan
             apple-clang UBSan ASan
           factors: ''
           runs-on: |
@@ -66,21 +66,28 @@ jobs:
             clang: git build-essential pkg-config python3 curl openjdk-11-jdk pkg-config libncurses-dev libxml2-utils libxml2-dev g++-14=14.2.0-4ubuntu2~24.04
             msvc: ''
           extra-values: |
+            use-libcxx: {{#if (and (ieq compiler 'clang') (or ubsan asan msan)) }}true{{else}}false{{/if}}
+            libcxx-path: /usr/local/libcxx
+            libcxx-runtimes: libcxx;libcxxabi{{#if (ieq compiler 'apple-clang')}};compiler-rt{{/if}}
             llvm-hash: a1b6e7ff393533a5c4f3bdfd4efe5da106e2de2b
             llvm-build-preset-prefix: {{#if optimized-debug}}debwithopt{{else}}{{{lowercase build-type}}}{{/if}}
             llvm-build-preset-os: {{#if (ieq os 'windows') }}win{{else}}unix{{/if}}
-            llvm-sanitizer: {{#if (eq compiler 'gcc')}}{{else if ubsan}}-UBSan{{else if asan}}-ASan{{else if msan}}-MSan{{/if}}
+            llvm-sanitizer: {{#if (eq compiler 'gcc')}}{{else if ubsan}}-UBSan2{{else if asan}}-ASan2{{else if msan}}-MSan{{/if}}
             llvm-build-preset: {{{ llvm-build-preset-prefix }}}-{{{ llvm-build-preset-os }}}
             llvm-compiler-version: {{#if (or (contains version '*') (contains version '^'))}}{{else}}-{{{ version }}}{{/if}}
             llvm-archive-basename: llvm-{{{ lowercase os }}}-{{{ compiler }}}{{{ llvm-compiler-version }}}-{{{ llvm-build-preset-prefix }}}{{{ llvm-sanitizer }}}-{{{ substr llvm-hash 0 7 }}}
             llvm-root: ../third-party/llvm-project/install
             llvm-archive-extension: {{#if (ieq os 'windows') }}7z{{else}}tar.bz2{{/if}}
             llvm-archive-filename: {{{ llvm-archive-basename }}}.{{{ llvm-archive-extension }}}
             llvm-sanitizer-config: {{#if (and (ne compiler 'clang') (ne compiler 'apple-clang'))}}{{else if ubsan}}Undefined{{else if asan}}Address{{else if msan}}MemoryWithOrigins{{/if}}
-            mrdocs-flags: {{#if (and (eq compiler 'gcc') (not asan)) }}-static{{/if}}{{#if (and (eq compiler 'clang') msan) }}-fsanitize-memory-track-origins{{/if}}
-            mrdocs-ccflags: {{{ ccflags }}} {{{ mrdocs-flags }}}
-            mrdocs-cxxflags: {{{ cxxflags }}} {{{ mrdocs-flags }}}
-            mrdocs-linkflags: {{#if asan }}-fsanitize=address{{/if}}
+            llvm-enable-assertions: {{#if (ieq use-libcxx 'true')}}ON{{else}}OFF{{/if}}
+            common-flags: -gz=zstd {{#if msan }}-fsanitize-memory-track-origins {{/if}}
+            common-ccflags: {{{ ccflags }}} {{{ common-flags }}}
+            common-cxxflags: {{{ cxxflags }}} {{#if (ieq use-libcxx 'true') }}-nostdinc++ -isystem{{{ libcxx-path }}}/include/c++/v1{{/if}}
+            common-ldflags: {{{ ldflags }}} {{#if (ieq use-libcxx 'true') }}-nostdlib++ -L{{{ libcxx-path }}}/lib -lc++abi -lc++ -Wl,-rpath,{{{ libcxx-path }}}/lib {{/if}}{{#if ubsan }}-fsanitize=undefined {{/if}}{{#if asan }}-fsanitize=address {{/if}}{{#if msan }}-fsanitize=memory {{/if}}
+            mrdocs-flags: {{#if (and (eq compiler 'gcc') (not asan)) }}-static{{/if}}
+            mrdocs-ccflags: {{{ common-ccflags }}} {{{ mrdocs-flags }}}
+            mrdocs-cxxflags: {{{ common-cxxflags }}} {{{ mrdocs-flags }}}
             mrdocs-package-generators: {{#if (ieq os 'windows') }}7Z ZIP WIX{{else}}TGZ TXZ{{/if}}
             mrdocs-release-package-artifact: release-packages-{{{ lowercase os }}}
           output-file: matrix.json
@@ -198,6 +205,16 @@ jobs:
         with:
           apt-get: ${{ matrix.install }}
 
+      - name: Install LLVM packages
+        if: matrix.use-libcxx == 'true' && matrix.compiler == 'clang'
+        env:
+          DEBIAN_FRONTEND: 'noninteractive'
+          TZ: 'Etc/UTC'
+        run: |
+          echo "deb http://apt.llvm.org/noble/ llvm-toolchain-noble-21 main" >> /etc/apt/sources.list
+          apt-get update
+          apt-get install -y libclang-21-dev
+
       - name: Resolve LLVM Root
         id: resolve-llvm-root
         run: |
@@ -224,6 +241,42 @@ jobs:
           fi
           echo -E "third-party-dir=$third_party_dir" >> $GITHUB_OUTPUT
 
+      - name: Install libc++
+        id: install_libcxx
+        uses: alandefreitas/cpp-actions/[email protected]
+        if: matrix.use-libcxx == 'true'
+        with:
+          cmake-version: '>=3.26'
+          source-dir: ../third-party/llvm-project/runtimes
+          git-repository: https://github.com/llvm/llvm-project.git
+          git-tag: llvmorg-21.1.0
+          download-dir: ../third-party/llvm-project
+          build-dir: ${sourceDir}/runtimes/build
+          build-type: ${{ matrix.build-type }}
+          extra-args: |
+            -D LLVM_USE_SANITIZER=${{ matrix.llvm-sanitizer-config }}
+            -D LLVM_OPTIMIZED_TABLEGEN=ON
+            -D LLVM_ENABLE_LIBCXX=OFF
+            -D LLVM_ENABLE_PROJECT=""
+            -D LLVM_ENABLE_RUNTIMES="${{ matrix.libcxx-runtimes }}"
+            -D LLVM_ENABLE_PIC=ON
+            -D LIBCXXABI_USE_LLVM_UNWINDER=OFF
+
+          cc: ${{ steps.setup-cpp.outputs.cc }}
+          cxx: ${{ steps.setup-cpp.outputs.cxx }}
+          ccflags: -gz=zstd
+          cxxflags: -gz=zstd
+          generator: Ninja
+          install: true
+          install-prefix: ${{ matrix.libcxx-path }}
+          run-tests: false
+          trace-commands: true
+
+      - name: Remove libcxx build-dir
+        if: steps.install_libcxx.outcome == 'success'
+        run: |
+          rm -r ../third-party/llvm-project/runtimes
+
       - name: Cached LLVM Binaries
         id: llvm-cache
         uses: actions/cache@v4
@@ -277,13 +330,18 @@ jobs:
           build-dir: ${sourceDir}/llvm/build
           preset: ${{ matrix.llvm-build-preset }}
           build-type: ${{ matrix.build-type }}
-          # The LLVM_USE_SANITIZER option doesn't support GCC.
           extra-args: |
-            -DLLVM_USE_SANITIZER=${{ matrix.llvm-sanitizer-config }}
+            -D LLVM_ENABLE_ASSERTIONS=${{ matrix.llvm-enable-assertions }}
+            -D LLVM_USE_SANITIZER="${{ matrix.llvm-sanitizer-config }}"
+            -D LLVM_OPTIMIZED_TABLEGEN=ON
+            -D LLVM_COMPILER_CHECKED=ON
+            _D LLVM_BUILD_TOOLS=OFF
+            -D CMAKE_C_FLAGS="${{ matrix.common-ccflags }}"
+            -D CMAKE_CXX_FLAGS="${{ matrix.common-cxxflags }}"
+            -D CMAKE_SHARED_LINKER_FLAGS="${{ matrix.common-ldflags }}"
+            -D CMAKE_EXE_LINKER_FLAGS="${{ matrix.common-ldflags }}"
           cc: ${{ steps.setup-cpp.outputs.cc }}
           cxx: ${{ steps.setup-cpp.outputs.cxx }}
-          ccflags: -gz=zstd
-          cxxflags: -gz=zstd
           generator: Ninja
           install: true
           install-prefix: ${sourceDir}/../install
@@ -293,7 +351,7 @@ jobs:
       - name: Remove LLVM build-dir
         if: steps.install_llvm.outcome == 'success'
         run: |
-          rm -r ../third-party/llvm-project/llvm/llvm/build
+          rm -r ../third-party/llvm-project/llvm
 
       - name: Install Duktape
         uses: alandefreitas/cpp-actions/[email protected]
@@ -306,8 +364,8 @@ jobs:
           build-dir: ${sourceDir}/build
           cc: ${{ steps.setup-cpp.outputs.cc }}
           cxx: ${{ steps.setup-cpp.outputs.cxx }}
-          ccflags: ${{ matrix.ccflags }}
-          cxxflags: ${{ matrix.cxxflags }}
+          ccflags: ${{ matrix.common-ccflags }}
+          cxxflags: ${{ matrix.common-cxxflags }}
           build-type: ${{ matrix.build-type }}
           shared: false
           install: true
@@ -325,11 +383,12 @@ jobs:
           build-dir: ${sourceDir}/build
           cc: ${{ steps.setup-cpp.outputs.cc }}
           cxx: ${{ steps.setup-cpp.outputs.cxx }}
-          ccflags: ${{ matrix.ccflags }}
-          cxxflags: ${{ matrix.cxxflags }}
+          ccflags: ${{ matrix.common-ccflags }}
+          cxxflags: ${{ matrix.common-cxxflags }}
           build-type: Release
           shared: false
           extra-args: |
+            -D CMAKE_SHARED_LINKER_FLAGS="${{ matrix.common-ldflags }}"
             -D LIBXML2_WITH_PROGRAMS=ON
             -D LIBXML2_WITH_FTP=OFF 
             -D LIBXML2_WITH_HTTP=OFF
@@ -388,11 +447,11 @@ jobs:
           install-prefix: .local
           extra-args: |
             -D MRDOCS_BUILD_DOCS=OFF
-            -D CMAKE_EXE_LINKER_FLAGS=${{ matrix.mrdocs-linkflags }}
-            -D LLVM_ROOT=${{ steps.resolve-third-party-dir.outputs.third-party-dir }}/llvm-project/install
-            -D Clang_ROOT=${{ steps.resolve-third-party-dir.outputs.third-party-dir }}/llvm-project/install
-            -D duktape_ROOT=${{ steps.resolve-third-party-dir.outputs.third-party-dir }}/duktape/install
-            -D Duktape_ROOT=${{ steps.resolve-third-party-dir.outputs.third-party-dir }}/duktape/install
+            -D CMAKE_EXE_LINKER_FLAGS="${{ matrix.common-ldflags }}"
+            -D LLVM_ROOT="${{ steps.resolve-third-party-dir.outputs.third-party-dir }}/llvm-project/install"
+            -D Clang_ROOT="${{ steps.resolve-third-party-dir.outputs.third-party-dir }}/llvm-project/install"
+            -D duktape_ROOT="${{ steps.resolve-third-party-dir.outputs.third-party-dir }}/duktape/install"
+            -D Duktape_ROOT="${{ steps.resolve-third-party-dir.outputs.third-party-dir }}/duktape/install"
             ${{ runner.os == 'Windows' && '-D libxml2_ROOT=../third-party/libxml2/install' || '' }}
             ${{ runner.os == 'Windows' && '-D LibXml2_ROOT=../third-party/libxml2/install' || '' }}
           export-compile-commands: true