Run any Skill in Manus with one click

Get Started

sanitizer-repro

Stars165

Forks47

UpdatedMay 28, 2026 at 21:26

Reproduce and triage ASAN/UBSAN findings against iccDEV tools with authoritative exit-code and stack-frame handling.

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Run Skill in Manus

Source

InternationalColorConsortium

InternationalColorConsortium/iccDEV

View GitHub Repository View Creator Repositories

Download

Run Skill in Manus

Related occupationsSOC

Based on SOC occupation classification

Software Quality Assurance Analysts and TestersComputer and Mathematical Occupations·SOC 15-1253

SKILL.md

readonly

name	sanitizer-repro
description	Reproduce and triage ASAN/UBSAN findings against iccDEV tools with authoritative exit-code and stack-frame handling.
allowed-tools	["bash","read","grep","glob","shell(git:*)"]

Sanitizer Reproduction

Use this skill for security advisories, crash reports, fuzzing artifacts, or manual findings involving iccDEV command-line tools.

Workflow

Build from a clean CMake cache with sanitizer flags.
Verify sanitizer linkage before claiming coverage.
Run the exact reproduction command and capture exit code plus stderr.
Classify exit codes: 0 success, 1-127 graceful failure, 128+ signal.
Attribute root cause from sanitizer stack frames, not PoC filenames.
Inspect tool argument semantics before writing a one-liner. If a tool appends channel numbers, expands prefixes, or parses config files, preserve that behavior in the command instead of copying artifacts to synthetic names.
Minimize reproduction steps while keeping them copy-pasteable. When a maintainer asks for no substitutions, the command must start with the tool binary and use literal arguments only; do not use shell variables, loops, mktemp, or copy helpers.
File or update issues using the canonical security format.

Build

cd Build && rm -rf CMakeCache.txt CMakeFiles/
CC=clang CXX=clang++ cmake Cmake -DCMAKE_BUILD_TYPE=Debug -DENABLE_TOOLS=ON -DENABLE_ASAN=ON -DENABLE_UBSAN=ON -DENABLE_INTEGER_SANITIZER=ON -DENABLE_FLOAT_SANITIZER=ON
make -j"$(nproc)"
nm Tools/IccDumpProfile/iccDumpProfile | grep -c __asan

Use CC=clang, not C=clang; after any failed compiler configure, delete both CMakeCache.txt and CMakeFiles/ before retrying. Do not enable coverage for a sanitizer reproduction because coverage instrumentation can mask findings.

References

../../prompts/reproduce-security-issue.prompt.md
../../prompts/file-security-issue.prompt.md
../../prompts/SECURITY_ISSUE_FORMAT.md
../../../docs/bisect.md
../json-config-regression/SKILL.md

More from this repository

same repository

maintainer-ci-ctest

InternationalColorConsortium/iccDEV

Maintainer workflow for scoping and updating iccDEV CI, CTest, CPack, sanitizer, workflow, and release-gate infrastructure.

2026-07-08165

pre-pr-security-cycle

InternationalColorConsortium/iccDEV

Maintainer workflow for the pre-PR secure loop: code, build/test, SAST/CodeQL, dynamic sanitizer checks, fixes, and concise handoff.

2026-07-08165

maintainer-label-system

InternationalColorConsortium/iccDEV

Maintain iccDEV repository labels, path labeler rules, issue triage labels, PR CI status labels, and label workflow governance.

2026-07-07165

regression-workflow-governance

InternationalColorConsortium/iccDEV

Add or update iccDEV regression gates and tool-test workflow coverage while preserving GitHub Actions governance, sanitizer reporting, and issue traceability.

2026-05-22165

vcpkg-export-consumer-debug

InternationalColorConsortium/iccDEV

Debug iccDEV vcpkg, install/export, uninstall, and packaged consumer failures, especially Windows static CRT and path quoting regressions.

2026-05-12165

docs-maintenance

InternationalColorConsortium/iccDEV

Review and edit iccDEV documentation for signal, accuracy, canonical ownership, and low-noise handoff.

2026-04-28165

name	sanitizer-repro
description	Reproduce and triage ASAN/UBSAN findings against iccDEV tools with authoritative exit-code and stack-frame handling.
allowed-tools	["bash","read","grep","glob","shell(git:*)"]

Sanitizer Reproduction

Use this skill for security advisories, crash reports, fuzzing artifacts, or manual findings involving iccDEV command-line tools.

Workflow

Build from a clean CMake cache with sanitizer flags.
Verify sanitizer linkage before claiming coverage.
Run the exact reproduction command and capture exit code plus stderr.
Classify exit codes: 0 success, 1-127 graceful failure, 128+ signal.
Attribute root cause from sanitizer stack frames, not PoC filenames.
Inspect tool argument semantics before writing a one-liner. If a tool appends channel numbers, expands prefixes, or parses config files, preserve that behavior in the command instead of copying artifacts to synthetic names.
Minimize reproduction steps while keeping them copy-pasteable. When a maintainer asks for no substitutions, the command must start with the tool binary and use literal arguments only; do not use shell variables, loops, mktemp, or copy helpers.
File or update issues using the canonical security format.

Build

cd Build && rm -rf CMakeCache.txt CMakeFiles/
CC=clang CXX=clang++ cmake Cmake -DCMAKE_BUILD_TYPE=Debug -DENABLE_TOOLS=ON -DENABLE_ASAN=ON -DENABLE_UBSAN=ON -DENABLE_INTEGER_SANITIZER=ON -DENABLE_FLOAT_SANITIZER=ON
make -j"$(nproc)"
nm Tools/IccDumpProfile/iccDumpProfile | grep -c __asan

References

../../prompts/reproduce-security-issue.prompt.md
../../prompts/file-security-issue.prompt.md
../../prompts/SECURITY_ISSUE_FORMAT.md
../../../docs/bisect.md
../json-config-regression/SKILL.md