一键在 Manus 中运行任何 Skill

开始使用

sanitizer-repro

星标165

分支47

更新时间2026年5月28日 21:26

Reproduce and triage ASAN/UBSAN findings against iccDEV tools with authoritative exit-code and stack-frame handling.

安装

用 Codex 或 Claude 帮你安装复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。

在 Manus 中运行

来源

InternationalColorConsortium

InternationalColorConsortium/iccDEV

打开 GitHub 仓库查看创作者相关仓库

下载

在 Manus 中运行

Sanitizer Reproduction

Use this skill for security advisories, crash reports, fuzzing artifacts, or manual findings involving iccDEV command-line tools.

Workflow

Build from a clean CMake cache with sanitizer flags.
Verify sanitizer linkage before claiming coverage.
Run the exact reproduction command and capture exit code plus stderr.
Classify exit codes: 0 success, 1-127 graceful failure, 128+ signal.
Attribute root cause from sanitizer stack frames, not PoC filenames.
Inspect tool argument semantics before writing a one-liner. If a tool appends channel numbers, expands prefixes, or parses config files, preserve that behavior in the command instead of copying artifacts to synthetic names.
Minimize reproduction steps while keeping them copy-pasteable. When a maintainer asks for no substitutions, the command must start with the tool binary and use literal arguments only; do not use shell variables, loops, mktemp, or copy helpers.
File or update issues using the canonical security format.

Build

cd Build && rm -rf CMakeCache.txt CMakeFiles/
CC=clang CXX=clang++ cmake Cmake -DCMAKE_BUILD_TYPE=Debug -DENABLE_TOOLS=ON -DENABLE_ASAN=ON -DENABLE_UBSAN=ON -DENABLE_INTEGER_SANITIZER=ON -DENABLE_FLOAT_SANITIZER=ON
make -j"$(nproc)"
nm Tools/IccDumpProfile/iccDumpProfile | grep -c __asan

Use CC=clang, not C=clang; after any failed compiler configure, delete both CMakeCache.txt and CMakeFiles/ before retrying. Do not enable coverage for a sanitizer reproduction because coverage instrumentation can mask findings.

References

../../prompts/reproduce-security-issue.prompt.md
../../prompts/file-security-issue.prompt.md
../../prompts/SECURITY_ISSUE_FORMAT.md
../../../docs/bisect.md
../json-config-regression/SKILL.md

同仓库更多 Skills

同仓库

maintainer-ci-ctest

InternationalColorConsortium/iccDEV

Maintainer workflow for scoping and updating iccDEV CI, CTest, CPack, sanitizer, workflow, and release-gate infrastructure.

2026-07-08165

pre-pr-security-cycle

InternationalColorConsortium/iccDEV

Maintainer workflow for the pre-PR secure loop: code, build/test, SAST/CodeQL, dynamic sanitizer checks, fixes, and concise handoff.

2026-07-08165

maintainer-label-system

InternationalColorConsortium/iccDEV

Maintain iccDEV repository labels, path labeler rules, issue triage labels, PR CI status labels, and label workflow governance.

2026-07-07165

regression-workflow-governance

InternationalColorConsortium/iccDEV

Add or update iccDEV regression gates and tool-test workflow coverage while preserving GitHub Actions governance, sanitizer reporting, and issue traceability.

2026-05-22165

vcpkg-export-consumer-debug

InternationalColorConsortium/iccDEV

Debug iccDEV vcpkg, install/export, uninstall, and packaged consumer failures, especially Windows static CRT and path quoting regressions.

2026-05-12165

docs-maintenance

InternationalColorConsortium/iccDEV

Review and edit iccDEV documentation for signal, accuracy, canonical ownership, and low-noise handoff.

2026-04-28165

name	sanitizer-repro
description	Reproduce and triage ASAN/UBSAN findings against iccDEV tools with authoritative exit-code and stack-frame handling.
allowed-tools	["bash","read","grep","glob","shell(git:*)"]

Sanitizer Reproduction

Use this skill for security advisories, crash reports, fuzzing artifacts, or manual findings involving iccDEV command-line tools.

Workflow

Build from a clean CMake cache with sanitizer flags.
Verify sanitizer linkage before claiming coverage.
Run the exact reproduction command and capture exit code plus stderr.
Classify exit codes: 0 success, 1-127 graceful failure, 128+ signal.
Attribute root cause from sanitizer stack frames, not PoC filenames.
Inspect tool argument semantics before writing a one-liner. If a tool appends channel numbers, expands prefixes, or parses config files, preserve that behavior in the command instead of copying artifacts to synthetic names.
Minimize reproduction steps while keeping them copy-pasteable. When a maintainer asks for no substitutions, the command must start with the tool binary and use literal arguments only; do not use shell variables, loops, mktemp, or copy helpers.
File or update issues using the canonical security format.

Build

cd Build && rm -rf CMakeCache.txt CMakeFiles/
CC=clang CXX=clang++ cmake Cmake -DCMAKE_BUILD_TYPE=Debug -DENABLE_TOOLS=ON -DENABLE_ASAN=ON -DENABLE_UBSAN=ON -DENABLE_INTEGER_SANITIZER=ON -DENABLE_FLOAT_SANITIZER=ON
make -j"$(nproc)"
nm Tools/IccDumpProfile/iccDumpProfile | grep -c __asan

References

../../prompts/reproduce-security-issue.prompt.md
../../prompts/file-security-issue.prompt.md
../../prompts/SECURITY_ISSUE_FORMAT.md
../../../docs/bisect.md
../json-config-regression/SKILL.md