ci: add Alpine+JDK21/25 test variants with ZGC for APPSEC-62784#201
ci: add Alpine+JDK21/25 test variants with ZGC for APPSEC-62784#201jandro996 wants to merge 2 commits into
Conversation
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #201 +/- ##
============================================
- Coverage 58.55% 57.55% -1.01%
- Complexity 134 175 +41
============================================
Files 34 34
Lines 3458 3645 +187
Branches 780 819 +39
============================================
+ Hits 2025 2098 +73
- Misses 900 973 +73
- Partials 533 574 +41
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
|
🎯 Code Coverage (details) 🔗 Commit SHA: 2867e87 | Docs | Datadog PR Page | Give us feedback! |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 25d50ea4fc
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
Adds the CI infrastructure needed to reproduce and verify the SIGSEGV reported in APPSEC-62784. The crash occurs on Alpine (musl libc) with ZGC Generational on JDK 21+ — not on Ubuntu/glibc. - Add ci/alpine-temurin21 and ci/alpine-temurin25 Docker images - Add corresponding x86_64 matrix entries in actions.yml - Enable ZGC flags for JDK 21+ HotSpot test runs in build.gradle so that ReachabilityFenceTest exercises the concurrent-GC window where the stale-pointer crash occurs (stop-the-world GC never exposes it) - Skip ZGC flags for IBM OpenJ9/Semeru (no HotSpot ZGC) - JDK 23+ uses -XX:+UseZGC only; -XX:+ZGenerational was removed by JEP 474 (Generational ZGC became the only mode)
25d50ea to
8712890
Compare
Summary
-XX:+UseZGC -XX:+ZGenerational) for JDK 21+ test runs on HotSpot-XX:+ZGenerationalflag for JDK 23+ (JEP 474 made Generational ZGC the only mode; the flag was removed)These variants are the reproduction environment for the SIGSEGV reported in APPSEC-62784: the crash occurs exclusively on Alpine (musl libc) with ZGC Generational. Ubuntu/glibc does not reproduce it.
Test plan
alpine-temurin21andalpine-temurin25CI jobs appear and pass (or fail with the crash before the fix lands)