From 3c87d77a9f5a17f1725817b277049d04ebe453e7 Mon Sep 17 00:00:00 2001
From: David Li <li.davidm96@gmail.com>
Date: Fri, 15 Mar 2024 13:35:50 -0400
Subject: [PATCH] ci: work around ASAN issue (#1618)

Fixes #1617.
---
 .github/workflows/integration.yml    | 16 ++++++++++++++
 .github/workflows/native-unix.yml    | 32 ++++++++++++++++++++++++++++
 .github/workflows/nightly-verify.yml |  6 ++++++
 .github/workflows/verify.yml         |  5 +++++
 4 files changed, 59 insertions(+)

diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
index ba7d7cb0c7..d34f721070 100644
--- a/.github/workflows/integration.yml
+++ b/.github/workflows/integration.yml
@@ -78,6 +78,10 @@ jobs:
         run: |
           mamba install -c conda-forge \
             --file ci/conda_env_cpp.txt
+      - name: Work around ASAN issue (GH-1617)
+        shell: bash -l {0}
+        run: |
+          sudo sysctl vm.mmap_rnd_bits=28
       - name: Build DuckDB Integration Tests
         shell: bash -l {0}
         env:
@@ -135,6 +139,10 @@ jobs:
           check-latest: true
           cache: true
           cache-dependency-path: go/adbc/go.sum
+      - name: Work around ASAN issue (GH-1617)
+        shell: bash -l {0}
+        run: |
+          sudo sysctl vm.mmap_rnd_bits=28
       - name: Start SQLite server and Dremio
         shell: bash -l {0}
         run: |
@@ -202,6 +210,10 @@ jobs:
             --file ci/conda_env_cpp.txt \
             --file ci/conda_env_python.txt
           pip install pytest-error-for-skips
+      - name: Work around ASAN issue (GH-1617)
+        shell: bash -l {0}
+        run: |
+          sudo sysctl vm.mmap_rnd_bits=28
       - name: Build PostgreSQL Driver
         shell: bash -l {0}
         env:
@@ -315,6 +327,10 @@ jobs:
           mamba install -c conda-forge \
             --file ci/conda_env_cpp.txt \
             --file ci/conda_env_python.txt
+      - name: Work around ASAN issue (GH-1617)
+        shell: bash -l {0}
+        run: |
+          sudo sysctl vm.mmap_rnd_bits=28
       - uses: actions/setup-go@v5
         with:
           go-version: 1.19.13
diff --git a/.github/workflows/native-unix.yml b/.github/workflows/native-unix.yml
index 22ac5c4a91..052fcce8a2 100644
--- a/.github/workflows/native-unix.yml
+++ b/.github/workflows/native-unix.yml
@@ -167,6 +167,11 @@ jobs:
         run: |
           mamba install -c conda-forge \
             --file ci/conda_env_cpp.txt
+      - name: Work around ASAN issue (GH-1617)
+        shell: bash -l {0}
+        if: matrix.os == 'ubuntu-latest'
+        run: |
+          sudo sysctl vm.mmap_rnd_bits=28
 
       - name: Build
         shell: bash -l {0}
@@ -269,6 +274,11 @@ jobs:
             'arrow-c-glib>=10.0.1' \
             --file ci/conda_env_cpp.txt \
             --file ci/conda_env_glib.txt
+      - name: Work around ASAN issue (GH-1617)
+        shell: bash -l {0}
+        if: matrix.os == 'ubuntu-latest'
+        run: |
+          sudo sysctl vm.mmap_rnd_bits=28
 
       - uses: actions/download-artifact@v3
         with:
@@ -306,6 +316,12 @@ jobs:
           check-latest: true
           cache: true
           cache-dependency-path: go/adbc/go.sum
+      - name: Work around ASAN issue (GH-1617)
+        shell: bash -l {0}
+        if: matrix.os == 'ubuntu-latest'
+        run: |
+          sudo sysctl vm.mmap_rnd_bits=28
+
       - name: Install staticcheck
         run: go install honnef.co/go/tools/cmd/staticcheck@v0.3.3
       - name: Go Build
@@ -354,6 +370,12 @@ jobs:
           miniforge-version: latest
           use-only-tar-bz2: false
           use-mamba: true
+      - name: Work around ASAN issue (GH-1617)
+        shell: bash -l {0}
+        if: matrix.os == 'ubuntu-latest'
+        run: |
+          sudo sysctl vm.mmap_rnd_bits=28
+
       - name: Install Dependencies
         shell: bash -l {0}
         run: |
@@ -439,6 +461,11 @@ jobs:
             python=${{ matrix.python }} \
             --file ci/conda_env_cpp.txt \
             --file ci/conda_env_python.txt
+      - name: Work around ASAN issue (GH-1617)
+        shell: bash -l {0}
+        if: matrix.os == 'ubuntu-latest'
+        run: |
+          sudo sysctl vm.mmap_rnd_bits=28
       - uses: actions/setup-go@v5
         with:
           go-version: 1.19.13
@@ -547,6 +574,11 @@ jobs:
             python=${{ matrix.python }} \
             --file ci/conda_env_docs.txt \
             --file ci/conda_env_python.txt
+      - name: Work around ASAN issue (GH-1617)
+        shell: bash -l {0}
+        if: matrix.os == 'ubuntu-latest'
+        run: |
+          sudo sysctl vm.mmap_rnd_bits=28
       - uses: actions/download-artifact@v3
         with:
           name: driver-manager-${{ matrix.os }}
diff --git a/.github/workflows/nightly-verify.yml b/.github/workflows/nightly-verify.yml
index 812a028b26..fb0cf30a60 100644
--- a/.github/workflows/nightly-verify.yml
+++ b/.github/workflows/nightly-verify.yml
@@ -135,6 +135,12 @@ jobs:
           miniforge-version: latest
           use-mamba: true
 
+      - name: Work around ASAN issue (GH-1617)
+        shell: bash -l {0}
+        if: matrix.os == 'ubuntu-latest'
+        run: |
+          sudo sysctl vm.mmap_rnd_bits=28
+
       - name: Verify
         if: matrix.os != 'windows-latest'
         env:
diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
index eef1ab155b..7ca61e4dd7 100644
--- a/.github/workflows/verify.yml
+++ b/.github/workflows/verify.yml
@@ -85,6 +85,11 @@ jobs:
           miniforge-variant: Mambaforge
           miniforge-version: latest
           use-mamba: true
+      - name: Work around ASAN issue (GH-1617)
+        shell: bash -l {0}
+        if: matrix.os == 'ubuntu-latest'
+        run: |
+          sudo sysctl vm.mmap_rnd_bits=28
       - name: Verify
         if: matrix.os != 'windows-latest'
         env: