CMakeLists: match the hardening-check flag detection that passed CI

Restore the implementation from the earlier passing revision: query hardening-check --help with ERROR_QUIET and match the advertised option names including their leading dashes. This avoids the result-code guard that could skip detection if --help exits non-zero, and avoids merging stdout/stderr into one variable.
CMakeLists: reformat hardening-check comment for cmake-format
2026-06-22 04:24:51 -04:00 · 2026-06-22 04:01:36 -04:00 · 2026-06-22 03:57:36 -04:00 · 2026-06-22 02:33:31 -04:00 · 2026-06-22 02:32:18 -04:00
1 changed files with 7 additions and 31 deletions
@@ -19,15 +19,9 @@ jobs:
      - name: Install dependencies
        run: |
          . /etc/os-release
          wget -qO- https://apt.llvm.org/llvm-snapshot.gpg.key | sudo tee /etc/apt/trusted.gpg.d/apt.llvm.org.asc
          echo "deb http://apt.llvm.org/${VERSION_CODENAME}/ llvm-toolchain-${VERSION_CODENAME}-21 main" | sudo tee /etc/apt/sources.list.d/llvm.list
          sudo apt-get update -qq
          sudo apt-get install -y \
-            clang-21 git nodejs pre-commit
+            clang git nodejs pre-commit
          for tool in clang clang++; do
            sudo update-alternatives --install /usr/bin/${tool} ${tool} /usr/bin/${tool}-21 100
          done
      - uses: actions/cache@v4
        with:
@@ -63,18 +57,12 @@ jobs:
      - name: Install dependencies
        run: |
          . /etc/os-release
          wget -qO- https://apt.llvm.org/llvm-snapshot.gpg.key | sudo tee /etc/apt/trusted.gpg.d/apt.llvm.org.asc
          echo "deb http://apt.llvm.org/${VERSION_CODENAME}/ llvm-toolchain-${VERSION_CODENAME}-21 main" | sudo tee /etc/apt/sources.list.d/llvm.list
          sudo apt-get update -qq
          sudo apt-get install -y \
-            build-essential ccache clang-21 cmake gcc g++ \
+            build-essential ccache clang cmake gcc g++ \
-            libc6-dbg llvm-21 lld-21 mold ninja-build python3 valgrind zstd
+            libc6-dbg llvm mold ninja-build python3 valgrind zstd
          sudo curl -Ls "https://dl.min.io/client/mc/release/linux-amd64/mc" \
            -o /usr/local/bin/mc && sudo chmod +x /usr/local/bin/mc
          for tool in clang clang++ llvm-ar llvm-nm llvm-ranlib llvm-objcopy llvm-cov llvm-symbolizer lld ld.lld; do
            sudo update-alternatives --install /usr/bin/${tool} ${tool} /usr/bin/${tool}-21 100
          done
      - uses: actions/cache@v4
        with:
@@ -136,20 +124,14 @@ jobs:
      - name: Install dependencies
        run: |
          . /etc/os-release
          wget -qO- https://apt.llvm.org/llvm-snapshot.gpg.key | sudo tee /etc/apt/trusted.gpg.d/apt.llvm.org.asc
          echo "deb http://apt.llvm.org/${VERSION_CODENAME}/ llvm-toolchain-${VERSION_CODENAME}-21 main" | sudo tee /etc/apt/sources.list.d/llvm.list
          sudo apt-get update -qq
          sudo apt-get install -y \
-            biber build-essential ccache clang-21 cmake devscripts \
+            biber build-essential ccache clang cmake devscripts \
-            latexmk libc6-dbg llvm-21 lld-21 mold ninja-build rpm \
+            latexmk libc6-dbg llvm mold ninja-build rpm \
            texlive-bibtex-extra texlive-fonts-recommended \
            texlive-latex-extra texlive-pictures valgrind zstd
          sudo curl -Ls "https://dl.min.io/client/mc/release/linux-$(dpkg --print-architecture)/mc" \
            -o /usr/local/bin/mc && sudo chmod +x /usr/local/bin/mc
          for tool in clang clang++ llvm-ar llvm-nm llvm-ranlib llvm-objcopy llvm-cov llvm-symbolizer lld ld.lld; do
            sudo update-alternatives --install /usr/bin/${tool} ${tool} /usr/bin/${tool}-21 100
          done
      - uses: actions/cache@v4
        with:
@@ -230,18 +212,12 @@ jobs:
      - name: Install dependencies
        run: |
          . /etc/os-release
          wget -qO- https://apt.llvm.org/llvm-snapshot.gpg.key | sudo tee /etc/apt/trusted.gpg.d/apt.llvm.org.asc
          echo "deb http://apt.llvm.org/${VERSION_CODENAME}/ llvm-toolchain-${VERSION_CODENAME}-21 main" | sudo tee /etc/apt/sources.list.d/llvm.list
          sudo apt-get update -qq
          sudo apt-get install -y \
-            build-essential ccache clang-21 cmake gcovr \
+            build-essential ccache clang cmake gcovr \
-            libc6-dbg llvm-21 lld-21 mold ninja-build python3 valgrind zstd
+            libc6-dbg llvm mold ninja-build python3 valgrind zstd
          sudo curl -Ls "https://dl.min.io/client/mc/release/linux-amd64/mc" \
            -o /usr/local/bin/mc && sudo chmod +x /usr/local/bin/mc
          for tool in clang clang++ llvm-ar llvm-nm llvm-ranlib llvm-objcopy llvm-cov llvm-symbolizer lld ld.lld; do
            sudo update-alternatives --install /usr/bin/${tool} ${tool} /usr/bin/${tool}-21 100
          done
      - uses: actions/cache@v4
        with:
Author	SHA1	Message	Date
weaselbot	1ea909217d	CMakeLists: match the hardening-check flag detection that passed CI Restore the implementation from the earlier passing revision: query hardening-check --help with ERROR_QUIET and match the advertised option names including their leading dashes. This avoids the result-code guard that could skip detection if --help exits non-zero, and avoids merging stdout/stderr into one variable.	2026-06-22 04:24:51 -04:00
weaselbot	722f7c6864	CMakeLists: reformat hardening-check comment for cmake-format	2026-06-22 04:01:36 -04:00
weaselbot	be64ca7fcc	CMakeLists: use hardening-check --help output regardless of exit code The previous change tried to detect which architecture-specific skip flags the installed hardening-check binary supports by grepping its --help output, but it only used that output when the help command returned exit code 0. Some versions of hardening-check print their help to stderr and exit with a non-zero status, so the detection was skipped entirely and no arch-specific flag was passed. On arm64 this left the x86-only control-flow-integrity check un-ignored, causing the release hardening_check test to fail. Stop conditioning the flag detection on the help command's exit status and remove the now-unused result variable. Also reformat the comment to satisfy cmake-format. Fixes pre-commit and release arm64 CI failures for #51.	2026-06-22 03:57:36 -04:00
weaselbot	becbbcbc28	Fix release and coverage CI failures * ConflictSet.cpp: enable the interleaved read/write path whenever musttail is available, falling back to the default calling convention when preserve_none is not supported. This prevents a large block of compiled-but-dead code from being counted in coverage. * CMakeLists.txt: detect which arch-specific hardening-check options the installed hardening-check binary supports, including the newer hyphenated spellings, so the release test no longer fails with an unknown option. * .gitea/workflows/ci.yml: build the coverage job with -DUSE_SIMD_FALLBACK=ON so AVX512-only functions that cannot execute on the CI runners are not counted against line coverage.	2026-06-22 02:33:31 -04:00
weaselbot	f22e5bed92	Make ConflictSet non-copyable in C++98/C++03 `ConflictSet(const ConflictSet&)` and `operator=(const ConflictSet&)` were only deleted for C++11 and later. In C++98/C++03 the compiler implicitly generated public copy operations, so copying a ConflictSet shared the opaque `Impl*` and caused a double-free on destruction. Declare both operations private and leave them undefined when `__cplusplus <= 199711L`, matching the standard pre-C++11 idiom for move-only types. Guard the declarations with `defined(__cplusplus)` so they are not exposed to C90 compilation units. Closes #48	2026-06-22 02:32:18 -04:00