Uh oh!
There was an error while loading. Please reload this page.
ci: add Alpine+JDK21/25 test variants with ZGC for APPSEC-62784 - #201
Conversation
codecov-commenter
commented
May 25, 2026
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@## master #201 +/- ##
============================================
- Coverage 58.55% 57.55% -1.01% - Complexity 134 175 +41
============================================
Files 34 34 Lines 3458 3645 +187 Branches 780 819 +39 ============================================
+ Hits 2025 2098 +73 - Misses 900 973 +73 - Partials 533 574 +41
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
🎯 Code Coverage (details) 🔗 Commit SHA: 8cb55af | Docs | Datadog PR Page | Give us feedback! |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit:25d50ea4fc
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
Uh oh!
There was an error while loading. Please reload this page.
Adds the CI infrastructure needed to reproduce and verify the SIGSEGV reported in APPSEC-62784. The crash occurs on Alpine (musl libc) with ZGC Generational on JDK 21+ — not on Ubuntu/glibc. - Add ci/alpine-temurin21 and ci/alpine-temurin25 Docker images - Add corresponding x86_64 matrix entries in actions.yml - Enable ZGC flags for JDK 21+ HotSpot test runs in build.gradle so that ReachabilityFenceTest exercises the concurrent-GC window where the stale-pointer crash occurs (stop-the-world GC never exposes it) - Skip ZGC flags for IBM OpenJ9/Semeru (no HotSpot ZGC) - JDK 23+ uses -XX:+UseZGC only; -XX:+ZGenerational was removed by JEP 474 (Generational ZGC became the only mode)
25d50ea to
8712890Comparesmola
commented
Jun 2, 2026
@codex review |
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit:2867e87373
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
Uh oh!
There was an error while loading. Please reload this page.
Add use_zgc: true to Alpine+JDK21/25 matrix entries and pass -PuseZGC to Gradle only for those variants. This lets ubuntu2204-temurin21 run with the default GC while alpine-temurin21/25 run with ZGC, giving coverage of both configurations. Addresses review feedback on PR #201.
Summary
-XX:+UseZGC -XX:+ZGenerational) for JDK 21+ test runs on HotSpot-XX:+ZGenerationalflag for JDK 23+ (JEP 474 made Generational ZGC the only mode; the flag was removed)These variants are the reproduction environment for the SIGSEGV reported in APPSEC-62784: the crash occurs exclusively on Alpine (musl libc) with ZGC Generational. Ubuntu/glibc does not reproduce it.
Test plan
alpine-temurin21andalpine-temurin25CI jobs appear and pass (or fail with the crash before the fix lands)