P4317: A Profile for Runtime-Checkable Core-Language Undefined Behavior: std::core_ub

.github/workflows/profiles-boost-build.yml

@@ -0,0 +1,115 @@
+name: Profiles Boost Build
+
+# Compiles Boost with the std::init profile enforced, using a clang built by the
+# weekly profiles release, and publishes the raw compiler log for inspection.
+#
+# Normally dispatched by weekly-profiles-release.yml right after the weekly
+# release is cut (passing that run's id in clang_run_id). Can also be run
+# manually: omit clang_run_id to pull the latest published release instead.
+
+on:
+  workflow_dispatch:
+    inputs:
+      clang_run_id:
+        description: "weekly-profiles-release run id to take the clang artifact from (empty = latest release)"
+        required: false
+        default: ""
+      boost_ref:
+        description: "Boost superproject git ref (branch or tag)"
+        required: false
+        default: "master"
+
+permissions:
+  actions: read
+  contents: read
+
+jobs:
+  build-boost:
+    name: Build Boost (std::init enforced)
+    # ubuntu-24.04 for a newer libstdc++ (cleaner c++23); the 22.04-built clang
+    # runs fine here.
+    runs-on: ubuntu-24.04
+    steps:
+      - name: Checkout profiles branch (helpers)
+        uses: actions/checkout@v4
+
+      - name: Install a recent libstdc++
+        run: sudo apt-get update && sudo apt-get install -y g++-14
+
+      - name: Download clang (from weekly run)
+        if: inputs.clang_run_id != ''
+        uses: actions/download-artifact@v4
+        with:
+          name: clang-profiles-linux-x86_64
+          path: clang-dl
+          run-id: ${{ inputs.clang_run_id }}
+          github-token: ${{ github.token }}
+
+      - name: Download clang (latest release)
+        if: inputs.clang_run_id == ''
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          mkdir -p clang-dl
+          gh release download --repo "${{ github.repository }}" \
+            --pattern 'clang-profiles-linux-x86_64.tar.gz' --dir clang-dl
+
+      - name: Unpack clang
+        run: |
+          mkdir -p "$RUNNER_TEMP/clang"
+          tar xzf clang-dl/clang-profiles-linux-x86_64.tar.gz -C "$RUNNER_TEMP/clang"
+          "$RUNNER_TEMP/clang/bin/clang++" --version
+          echo "PROFILES_CLANGXX=$RUNNER_TEMP/clang/bin/clang++" >> "$GITHUB_ENV"
+          echo "PROFILES_PRELUDE=$GITHUB_WORKSPACE/clang/utils/profiles-boost/prelude.hpp" >> "$GITHUB_ENV"
+          mkdir -p "$GITHUB_WORKSPACE/crash"
+          echo "PROFILES_CRASH_DIR=$GITHUB_WORKSPACE/crash" >> "$GITHUB_ENV"
+
+      - name: Clone Boost
+        run: |
+          git clone --depth 1 --recursive --shallow-submodules \
+            --branch "${{ inputs.boost_ref || 'master' }}" \
+            https://github.com/boostorg/boost boost
+
+      - name: Bootstrap Boost.Build
+        working-directory: boost
+        run: |
+          ./bootstrap.sh
+          ./b2 headers
+
+      - name: Build Boost with std::init enforced
+        working-directory: boost
+        run: |
+          set -o pipefail
+          # Violations are hard errors, so b2 is expected to exit non-zero; the
+          # log is the deliverable, so never fail the job on that.
+          ./b2 \
+            --user-config="$GITHUB_WORKSPACE/clang/utils/profiles-boost/user-config.jam" \
+            toolset=clang-profiles \
+            cxxstd=23 \
+            testing.execute=off \
+            -k -j"$(nproc)" \
+            libs/*/test \
+            2>&1 | tee "$GITHUB_WORKSPACE/boost-profiles.log" || true
+
+      - name: Summarize & visualize profile violations
+        if: always()
+        run: |
+          echo "_Boost ref: \`${{ inputs.boost_ref || 'master' }}\`_" >> "$GITHUB_STEP_SUMMARY"
+          python3 clang/utils/profiles-boost/summarize.py \
+            --log "$GITHUB_WORKSPACE/boost-profiles.log" \
+            --boost-root "$GITHUB_WORKSPACE/boost" \
+            --json "$GITHUB_WORKSPACE/summary.json" \
+            --html "$GITHUB_WORKSPACE/report.html" \
+            >> "$GITHUB_STEP_SUMMARY"
+
+      - name: Upload log, report and crash reproducers
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: boost-profiles-log
+          path: |
+            boost-profiles.log
+            summary.json
+            report.html
+            crash/
+          if-no-files-found: warn

.github/workflows/schedule-profiles-release.yml

@@ -0,0 +1,17 @@
+name: Schedule Profiles Build
+
+on:
+  schedule:
+    - cron: '0 12 * * 5'
+
+permissions:
+  actions: write
+
+jobs:
+  dispatch:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Trigger build on profiles-framework
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: gh workflow run weekly-profiles-release.yml --repo ${{ github.repository }} --ref profiles-framework

.github/workflows/weekly-profiles-release.yml

@@ -0,0 +1,133 @@
+name: Weekly Profiles Release
+
+on:
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  build-linux:
+    name: Build Linux x86_64
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install dependencies
+        run: sudo apt-get install -y ninja-build ccache
+
+      - name: Restore ccache
+        uses: actions/cache@v4
+        with:
+          path: ~/.ccache
+          key: ccache-linux-${{ github.sha }}
+          restore-keys: ccache-linux-
+
+      - name: Configure
+        run: |
+          cmake -G Ninja -S llvm -B build \
+            -DCMAKE_BUILD_TYPE=Release \
+            -DLLVM_ENABLE_ASSERTIONS=ON \
+            -DCMAKE_C_COMPILER=gcc \
+            -DCMAKE_CXX_COMPILER=g++ \
+            -DCMAKE_C_COMPILER_LAUNCHER=ccache \
+            -DCMAKE_CXX_COMPILER_LAUNCHER=ccache \
+            -DLLVM_ENABLE_PROJECTS=clang \
+            -DLLVM_TARGETS_TO_BUILD="X86;AArch64" \
+            -DLLVM_INSTALL_TOOLCHAIN_ONLY=ON \
+            -DCMAKE_INSTALL_PREFIX=build/install
+
+      - name: Build and install
+        run: ninja -C build install-clang install-clang-resource-headers
+
+      - name: Package
+        run: tar czf clang-profiles-linux-x86_64.tar.gz -C build/install .
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: clang-profiles-linux-x86_64
+          path: clang-profiles-linux-x86_64.tar.gz
+
+  build-windows:
+    name: Build Windows x86_64
+    runs-on: windows-2022
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: ilammy/msvc-dev-cmd@v1
+
+      - name: Configure
+        run: >
+          cmake -G Ninja -S llvm -B build
+          -DCMAKE_BUILD_TYPE=Release
+          -DCMAKE_C_COMPILER=cl
+          -DCMAKE_CXX_COMPILER=cl
+          -DLLVM_ENABLE_PROJECTS=clang
+          -DLLVM_TARGETS_TO_BUILD="X86;AArch64"
+          -DLLVM_INSTALL_TOOLCHAIN_ONLY=ON
+          -DCMAKE_INSTALL_PREFIX=build/install
+
+      - name: Build and install
+        run: ninja -C build install-clang install-clang-resource-headers
+
+      - name: Package
+        run: Compress-Archive -Path build\install\* -DestinationPath clang-profiles-windows-x86_64.zip
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: clang-profiles-windows-x86_64
+          path: clang-profiles-windows-x86_64.zip
+
+  create-release:
+    name: Create GitHub Release
+    needs: [build-linux, build-windows]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: clang-profiles-linux-x86_64
+          path: artifacts
+
+      - uses: actions/download-artifact@v4
+        with:
+          name: clang-profiles-windows-x86_64
+          path: artifacts
+
+      - name: Compute tag
+        id: tag
+        run: |
+          date_tag="profiles-$(date -u +%Y-%m-%d)"
+          echo "tag=${date_tag}-${{ github.run_number }}" >> "$GITHUB_OUTPUT"
+          echo "name=Profiles Build $(date -u +%Y-%m-%d) #${{ github.run_number }}" >> "$GITHUB_OUTPUT"
+
+      - uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ steps.tag.outputs.tag }}
+          name: ${{ steps.tag.outputs.name }}
+          target_commitish: ${{ github.sha }}
+          files: artifacts/*
+          body: |
+            Automated weekly build of Clang with safety profiles support.
+
+            **Branch:** `${{ github.ref_name }}`
+            **Commit:** `${{ github.sha }}`
+
+            ### Artifacts
+            - `clang-profiles-linux-x86_64.tar.gz` — Linux x86_64 (Ubuntu 22.04, gcc)
+            - `clang-profiles-windows-x86_64.zip` — Windows x86_64 (MSVC 2022)
+
+  trigger-boost:
+    name: Trigger Boost profiles build
+    needs: [create-release]
+    runs-on: ubuntu-latest
+    permissions:
+      actions: write
+    steps:
+      - name: Dispatch Boost build against this run's clang
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: >
+          gh workflow run profiles-boost-build.yml
+          --repo ${{ github.repository }}
+          --ref ${{ github.ref_name }}
+          -f clang_run_id=${{ github.run_id }}