원클릭으로 Manus에서 모든 스킬 실행

시작하기

sanitizer-repro

스타165

포크47

업데이트2026년 5월 28일 21:26

Reproduce and triage ASAN/UBSAN findings against iccDEV tools with authoritative exit-code and stack-frame handling.

설치

Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.

Manus에서 실행

출처

InternationalColorConsortium

InternationalColorConsortium/iccDEV

GitHub 저장소 열기 Creator 저장소 보기

다운로드

Manus에서 실행

Sanitizer Reproduction

Use this skill for security advisories, crash reports, fuzzing artifacts, or manual findings involving iccDEV command-line tools.

Workflow

Build from a clean CMake cache with sanitizer flags.
Verify sanitizer linkage before claiming coverage.
Run the exact reproduction command and capture exit code plus stderr.
Classify exit codes: 0 success, 1-127 graceful failure, 128+ signal.
Attribute root cause from sanitizer stack frames, not PoC filenames.
Inspect tool argument semantics before writing a one-liner. If a tool appends channel numbers, expands prefixes, or parses config files, preserve that behavior in the command instead of copying artifacts to synthetic names.
Minimize reproduction steps while keeping them copy-pasteable. When a maintainer asks for no substitutions, the command must start with the tool binary and use literal arguments only; do not use shell variables, loops, mktemp, or copy helpers.
File or update issues using the canonical security format.

Build

cd Build && rm -rf CMakeCache.txt CMakeFiles/
CC=clang CXX=clang++ cmake Cmake -DCMAKE_BUILD_TYPE=Debug -DENABLE_TOOLS=ON -DENABLE_ASAN=ON -DENABLE_UBSAN=ON -DENABLE_INTEGER_SANITIZER=ON -DENABLE_FLOAT_SANITIZER=ON
make -j"$(nproc)"
nm Tools/IccDumpProfile/iccDumpProfile | grep -c __asan

Use CC=clang, not C=clang; after any failed compiler configure, delete both CMakeCache.txt and CMakeFiles/ before retrying. Do not enable coverage for a sanitizer reproduction because coverage instrumentation can mask findings.

References

../../prompts/reproduce-security-issue.prompt.md
../../prompts/file-security-issue.prompt.md
../../prompts/SECURITY_ISSUE_FORMAT.md
../../../docs/bisect.md
../json-config-regression/SKILL.md

이 저장소의 다른 Skills

같은 저장소

maintainer-ci-ctest

InternationalColorConsortium/iccDEV

Maintainer workflow for scoping and updating iccDEV CI, CTest, CPack, sanitizer, workflow, and release-gate infrastructure.

2026-07-08165

pre-pr-security-cycle

InternationalColorConsortium/iccDEV

Maintainer workflow for the pre-PR secure loop: code, build/test, SAST/CodeQL, dynamic sanitizer checks, fixes, and concise handoff.

2026-07-08165

maintainer-label-system

InternationalColorConsortium/iccDEV

Maintain iccDEV repository labels, path labeler rules, issue triage labels, PR CI status labels, and label workflow governance.

2026-07-07165

regression-workflow-governance

InternationalColorConsortium/iccDEV

Add or update iccDEV regression gates and tool-test workflow coverage while preserving GitHub Actions governance, sanitizer reporting, and issue traceability.

2026-05-22165

vcpkg-export-consumer-debug

InternationalColorConsortium/iccDEV

Debug iccDEV vcpkg, install/export, uninstall, and packaged consumer failures, especially Windows static CRT and path quoting regressions.

2026-05-12165

docs-maintenance

InternationalColorConsortium/iccDEV

Review and edit iccDEV documentation for signal, accuracy, canonical ownership, and low-noise handoff.

2026-04-28165

name	sanitizer-repro
description	Reproduce and triage ASAN/UBSAN findings against iccDEV tools with authoritative exit-code and stack-frame handling.
allowed-tools	["bash","read","grep","glob","shell(git:*)"]

Sanitizer Reproduction

Use this skill for security advisories, crash reports, fuzzing artifacts, or manual findings involving iccDEV command-line tools.

Workflow

Build from a clean CMake cache with sanitizer flags.
Verify sanitizer linkage before claiming coverage.
Run the exact reproduction command and capture exit code plus stderr.
Classify exit codes: 0 success, 1-127 graceful failure, 128+ signal.
Attribute root cause from sanitizer stack frames, not PoC filenames.
Inspect tool argument semantics before writing a one-liner. If a tool appends channel numbers, expands prefixes, or parses config files, preserve that behavior in the command instead of copying artifacts to synthetic names.
Minimize reproduction steps while keeping them copy-pasteable. When a maintainer asks for no substitutions, the command must start with the tool binary and use literal arguments only; do not use shell variables, loops, mktemp, or copy helpers.
File or update issues using the canonical security format.

Build

cd Build && rm -rf CMakeCache.txt CMakeFiles/
CC=clang CXX=clang++ cmake Cmake -DCMAKE_BUILD_TYPE=Debug -DENABLE_TOOLS=ON -DENABLE_ASAN=ON -DENABLE_UBSAN=ON -DENABLE_INTEGER_SANITIZER=ON -DENABLE_FLOAT_SANITIZER=ON
make -j"$(nproc)"
nm Tools/IccDumpProfile/iccDumpProfile | grep -c __asan

References

../../prompts/reproduce-security-issue.prompt.md
../../prompts/file-security-issue.prompt.md
../../prompts/SECURITY_ISSUE_FORMAT.md
../../../docs/bisect.md
../json-config-regression/SKILL.md