internationalcolorconsortium/iccdev/valgrind-analysis

Valgrind Analysis

Use this skill for uninitialized-memory, invalid-access, leak, synchronization, heap-growth, or call-profile investigations against iccDEV tools.

Workflow

1. Read ../../../docs/valgrind-analysis.md.
2. Select the smallest registered target that reaches the affected path.
3. Run .github/ci/valgrind/build.sh --target TARGET to produce a separate

non-sanitized Debug build.

1. Confirm the build rejects cached sanitizer flags and sanitizer-instrumented

binaries, including statically linked runtimes.

1. For runner or image QA, run .github/ci/valgrind/self-test.sh after building

the dump target.

1. Run .github/ci/valgrind/run.sh --tool TOOL TARGET with a bounded timeout.
2. Preserve the generated summary.tsv, analyzer log, stdout, stderr, and

generated work files.

1. For concurrency, compare Helgrind and DRD rather than treating either as a

substitute for TSan. Confirm that the selected input reaches the worker threshold before claiming that a requested thread count exercised concurrent workers.

1. For issue #2592 or m_jobReady notification changes, run

.github/ci/valgrind/issue-2592-regression.sh; require both analyzers to be clean and their generated TIFFs to match.

1. Attribute findings to stack frames and observed synchronization behavior,

not input filenames.

1. For .icc corpus sweeps, build pawg or dump and use corpus.sh; do not

use word-splitting command substitution around find.

1. Report the exact source revision, command, exit code, error count, and

evidence directory.

Use --allow-findings only when collecting a known or deliberately compared finding. Never use it to turn an unexplained result into a clean gate.

Container path

The unified image exposes iccdev-valgrind-build, iccdev-valgrind-run, iccdev-valgrind-status, iccdev-valgrind-validate, and iccdev-valgrind-self-test. These commands write to /workspace/valgrind by default and must not wrap /workspace/build.

The repository's .github/ci/valgrind/corpus.sh supports mounted corpus paths inside the unified image. Preserve per-profile evidence outside the container; prefer tar streaming when a writable bind mount has a different owner.

References

• ../../../docs/valgrind-analysis.md
• ../../prompts/valgrind-analysis.prompt.md
• ../sanitizer-repro/SKILL.md
• ../regression-container-maintainer/SKILL.md