chromium/src
0
Fork 0
Code Activity

Update Security Sheriff & ASAN docs with references to the get_asan_chrome helper script.

Browse Source 
Change-Id: I0cd82e54a746410d5ef037cbfc9590230ddef25f
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3885400
Commit-Queue: Chris Bookholt <bookholt@chromium.org>
Reviewed-by: Chris Thompson <cthomp@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1044818}
This commit is contained in:
Chris Bookholt
2022-09-08 22:39:31 +00:00
committed by Chromium LUCI CQ
parent 9e372b2997
commit d30029205b
2 changed files with 8 additions and 1 deletions
docs
asan.md
security
sheriff.md

5
docs/asan.md

@ -37,7 +37,10 @@ specific releases by specifying a prefix like
[linux-debug/asan-linux-debug-83](https://commondatastorage.googleapis.com/chromium-browser-asan/index.html?prefix=linux-debug/asan-linux-debug-83).
This is useful for finding a build for a specific revision, since filenames are of
the form `asan-<platform>-<buildtype>-<revision>` (but not every revision has an
archived ASan build).
archived ASan build). The
[get_asan_chrome](https://source.chromium.org/chromium/chromium/src/+/main:tools/get_asan_chrome/get_asan_chrome.py)
helper script is a handy way to download builds; its --help flag provides
usage instructions.
## Build tests with ASan

4
docs/security/sheriff.md

@ -253,6 +253,10 @@ Tips for reproducing bugs:
[ThreadSanitizer](https://www.chromium.org/developers/testing/threadsanitizer-tsan-v2),
and
[UndefinedBehaviorSanitizer](https://www.chromium.org/developers/testing/undefinedbehaviorsanitizer).
* The [get_asan_chrome](https://source.chromium.org/chromium/chromium/src/+/main:tools/get_asan_chrome/get_asan_chrome.py)
helper script is a handy way to download ASAN Chrome. The --help flag
provides usage instructions, e.g. to fetch builds for various versions and
platforms.
* If you run into issues with a reproducible ClusterFuzz test case (like
missing symbols, or if anything else seems off), try uploading the test case
again using a different job type with a more mature tool (e.g. ASan on Linux).