diff --git a/.clusterfuzzlite/Dockerfile b/.clusterfuzzlite/Dockerfile
new file mode 100644
index 000000000..2d6beab42
--- /dev/null
+++ b/.clusterfuzzlite/Dockerfile
@@ -0,0 +1,18 @@
+FROM gcr.io/oss-fuzz-base/base-builder
+
+# Enhanced ClusterFuzzLite Dockerfile
+# Combined Address + Undefined Sanitizers with Full Instrumentation
+# Improved Stack Tracing, Metrics Capture, and Reporting
+
+RUN apt-get update && apt-get install -y \
+ cmake \
+ libxml2-dev \
+ libpng-dev \
+ libjpeg-turbo8-dev \
+ libtiff-dev \
+ nlohmann-json3-dev \
+ && rm -rf /var/lib/apt/lists/*
+
+COPY . $SRC/uci
+WORKDIR $SRC/uci
+COPY .clusterfuzzlite/build.sh $SRC/
diff --git a/.clusterfuzzlite/build-full.sh b/.clusterfuzzlite/build-full.sh
new file mode 100644
index 000000000..2659fe752
--- /dev/null
+++ b/.clusterfuzzlite/build-full.sh
@@ -0,0 +1,239 @@
+#!/bin/bash -eu
+#
+#
+# Last Updated: 08-FEB-2026 at 0700Z by David Hoyt
+#
+# Changes: Add WASM Toolchain, CFL & libFuzzer
+#
+#
+
+
+echo "ClusterFuzzLite Build - (Address+UBSan)"
+echo ""
+
+# Determine repository root (CFL vs local)
+if [ -d "$SRC/uci" ]; then
+ REPO_ROOT="$SRC/uci"
+ echo "Environment: ClusterFuzzLite"
+else
+ REPO_ROOT="$SRC"
+ echo "Environment: Local testing"
+fi
+
+echo "Repository root: $REPO_ROOT"
+echo "Fuzzing source: Testing/Fuzzing/"
+echo "Target: 15 fuzzers (13 core + 2 XML)"
+echo "Sanitizers: Address + Undefined (combined)"
+echo "Instrumentation: Full (stack tracing, symbolization, metrics)"
+echo ""
+
+# Build IccProfLib and IccXML libraries
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo "Building libraries..."
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+
+BUILD_DIR="$REPO_ROOT/Build/Cmake/build_cfl_$(date +%s)"
+cd $REPO_ROOT/Build/Cmake
+
+# Clean previous builds
+rm -rf build_cfl_* CMakeCache.txt Makefile *.cmake CMakeFiles/ 2>/dev/null || true
+
+# Comment out wxWidgets section in CMakeLists.txt (not available in CFL Docker image)
+echo "Patching CMakeLists.txt to disable wxWidgets..."
+sed -i '1162,1170s/^/# DISABLED_FOR_CFL: /' CMakeLists.txt
+
+# Configure CMake
+cmake -B $BUILD_DIR -S . \
+ -DCMAKE_C_COMPILER=$CC \
+ -DCMAKE_CXX_COMPILER=$CXX \
+ -DCMAKE_C_FLAGS="$CFLAGS" \
+ -DCMAKE_CXX_FLAGS="$CXXFLAGS -frtti" \
+ -DCMAKE_BUILD_TYPE=RelWithDebInfo \
+ -DBUILD_SHARED_LIBS=OFF
+
+# Build libraries
+echo "Building IccProfLib2-static..."
+cmake --build $BUILD_DIR --target IccProfLib2-static -j$(nproc)
+
+echo "Building IccXML2-static..."
+cmake --build $BUILD_DIR --target IccXML2-static -j$(nproc) || echo "Warning: IccXML build may have failed"
+
+# Verify library existence
+if [ ! -f "$BUILD_DIR/IccProfLib/libIccProfLib2-static.a" ]; then
+ echo "ERROR: IccProfLib2-static.a not found"
+ exit 1
+fi
+
+echo "✅ Libraries built successfully"
+echo ""
+
+# Build fuzzers from Testing/Fuzzing/
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo "Building fuzzers (15 total)..."
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+
+FUZZING_DIR="$REPO_ROOT/Testing/Fuzzing"
+FUZZER_COUNT=0
+
+# Core fuzzers (13)
+CORE_FUZZERS=(
+ "icc_profile_fuzzer"
+ "icc_calculator_fuzzer"
+ "icc_v5dspobs_fuzzer"
+ "icc_multitag_fuzzer"
+ "icc_roundtrip_fuzzer"
+ "icc_dump_fuzzer"
+ "icc_io_fuzzer"
+ "icc_link_fuzzer"
+ "icc_spectral_fuzzer"
+ "icc_apply_fuzzer"
+ "icc_applyprofiles_fuzzer"
+ "icc_specsep_fuzzer"
+ "icc_tiffdump_fuzzer"
+)
+
+# Build core fuzzers
+for fuzzer in "${CORE_FUZZERS[@]}"; do
+ if [ ! -f "$FUZZING_DIR/${fuzzer}.cpp" ]; then
+ echo "⚠️ Skipping $fuzzer (source not found)"
+ continue
+ fi
+
+ echo "Building $fuzzer..."
+
+ $CXX $CXXFLAGS -frtti \
+ -I$REPO_ROOT/IccProfLib \
+ -I$REPO_ROOT/Tools/CmdLine/IccCommon \
+ -I$REPO_ROOT/Tools/CmdLine/IccApplyProfiles \
+ $FUZZING_DIR/${fuzzer}.cpp \
+ $BUILD_DIR/IccProfLib/libIccProfLib2-static.a \
+ $LIB_FUZZING_ENGINE \
+ -o $OUT/${fuzzer} 2>&1 | head -3 || {
+ echo "⚠️ Build failed for $fuzzer"
+ continue
+ }
+
+ if [ -f "$OUT/${fuzzer}" ]; then
+ ((FUZZER_COUNT++))
+
+ # Copy seed corpus
+ mkdir -p $OUT/${fuzzer}_seed_corpus
+ if [ -d "$FUZZING_DIR/${fuzzer}_seed_corpus" ]; then
+ cp $FUZZING_DIR/${fuzzer}_seed_corpus/*.icc $OUT/${fuzzer}_seed_corpus/ 2>/dev/null || true
+ fi
+
+ # Fallback to .clusterfuzzlite corpus
+ if [ $(ls $OUT/${fuzzer}_seed_corpus/*.icc 2>/dev/null | wc -l) -eq 0 ]; then
+ cp $REPO_ROOT/.clusterfuzzlite/corpus/*.icc $OUT/${fuzzer}_seed_corpus/ 2>/dev/null || true
+ fi
+
+ CORPUS_COUNT=$(ls $OUT/${fuzzer}_seed_corpus/*.icc 2>/dev/null | wc -l)
+
+ # Copy dictionary if exists
+ DICT_FILE=""
+ if [ -f "$FUZZING_DIR/${fuzzer}.dict" ]; then
+ cp $FUZZING_DIR/${fuzzer}.dict $OUT/${fuzzer}.dict
+ DICT_FILE="${fuzzer}.dict"
+ elif [ -f "$FUZZING_DIR/icc_profile.dict" ]; then
+ cp $FUZZING_DIR/icc_profile.dict $OUT/${fuzzer}.dict
+ DICT_FILE="icc_profile.dict"
+ fi
+
+ # Copy .options file if exists
+ OPTIONS_FILE=""
+ if [ -f "$FUZZING_DIR/${fuzzer}.options" ]; then
+ cp $FUZZING_DIR/${fuzzer}.options $OUT/${fuzzer}.options
+ OPTIONS_FILE="${fuzzer}.options"
+ fi
+
+ echo " ✅ $fuzzer: $CORPUS_COUNT seeds, dict: ${DICT_FILE:-none}, options: ${OPTIONS_FILE:-none}"
+ fi
+done
+
+# Build XML fuzzers (2)
+if [ -f "$BUILD_DIR/IccXML/libIccXML2-static.a" ]; then
+ echo ""
+ echo "Building XML fuzzers..."
+
+ for fuzzer in "icc_fromxml_fuzzer" "icc_toxml_fuzzer"; do
+ if [ ! -f "$FUZZING_DIR/${fuzzer}.cpp" ]; then
+ echo "⚠️ Skipping $fuzzer (source not found)"
+ continue
+ fi
+
+ echo "Building $fuzzer..."
+
+ $CXX $CXXFLAGS -frtti \
+ -I$REPO_ROOT/IccProfLib \
+ -I$REPO_ROOT/IccXML/IccLibXML \
+ -I/usr/include/libxml2 \
+ -DHAVE_ICCXML \
+ $FUZZING_DIR/${fuzzer}.cpp \
+ $BUILD_DIR/IccXML/libIccXML2-static.a \
+ $BUILD_DIR/IccProfLib/libIccProfLib2-static.a \
+ -lxml2 \
+ $LIB_FUZZING_ENGINE \
+ -o $OUT/${fuzzer} 2>&1 | head -3 || {
+ echo "⚠️ Build failed for $fuzzer"
+ continue
+ }
+
+ if [ -f "$OUT/${fuzzer}" ]; then
+ ((FUZZER_COUNT++))
+
+ # Copy appropriate seed corpus
+ mkdir -p $OUT/${fuzzer}_seed_corpus
+
+ if [ "$fuzzer" = "icc_fromxml_fuzzer" ]; then
+ # XML files for fromxml
+ if [ -d "$FUZZING_DIR/${fuzzer}_seed_corpus" ]; then
+ cp $FUZZING_DIR/${fuzzer}_seed_corpus/*.xml $OUT/${fuzzer}_seed_corpus/ 2>/dev/null || true
+ fi
+ # Fallback to .clusterfuzzlite
+ if [ $(ls $OUT/${fuzzer}_seed_corpus/*.xml 2>/dev/null | wc -l) -eq 0 ]; then
+ cp $REPO_ROOT/.clusterfuzzlite/corpus-xml/*.xml $OUT/${fuzzer}_seed_corpus/ 2>/dev/null || true
+ fi
+ CORPUS_COUNT=$(ls $OUT/${fuzzer}_seed_corpus/*.xml 2>/dev/null | wc -l)
+ else
+ # ICC files for toxml
+ if [ -d "$FUZZING_DIR/${fuzzer}_seed_corpus" ]; then
+ cp $FUZZING_DIR/${fuzzer}_seed_corpus/*.icc $OUT/${fuzzer}_seed_corpus/ 2>/dev/null || true
+ fi
+ if [ $(ls $OUT/${fuzzer}_seed_corpus/*.icc 2>/dev/null | wc -l) -eq 0 ]; then
+ cp $REPO_ROOT/.clusterfuzzlite/corpus/*.icc $OUT/${fuzzer}_seed_corpus/ 2>/dev/null || true
+ fi
+ CORPUS_COUNT=$(ls $OUT/${fuzzer}_seed_corpus/*.icc 2>/dev/null | wc -l)
+ fi
+
+ # Copy dictionary
+ DICT_FILE=""
+ if [ -f "$FUZZING_DIR/${fuzzer}.dict" ]; then
+ cp $FUZZING_DIR/${fuzzer}.dict $OUT/${fuzzer}.dict
+ DICT_FILE="${fuzzer}.dict"
+ fi
+
+ # Copy options
+ OPTIONS_FILE=""
+ if [ -f "$FUZZING_DIR/${fuzzer}.options" ]; then
+ cp $FUZZING_DIR/${fuzzer}.options $OUT/${fuzzer}.options
+ OPTIONS_FILE="${fuzzer}.options"
+ fi
+
+ echo " ✅ $fuzzer: $CORPUS_COUNT seeds, dict: ${DICT_FILE:-none}, options: ${OPTIONS_FILE:-none}"
+ fi
+ done
+else
+ echo "⚠️ IccXML2-static.a not found, skipping XML fuzzers"
+fi
+
+echo ""
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo "Build complete: $FUZZER_COUNT fuzzers built successfully"
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+
+if [ $FUZZER_COUNT -lt 13 ]; then
+ echo "⚠️ Warning: Expected at least 13 fuzzers, built $FUZZER_COUNT"
+ exit 1
+fi
+
+echo "✅ Build successful - ready for fuzzing campaign"
diff --git a/.clusterfuzzlite/build-minimal.sh b/.clusterfuzzlite/build-minimal.sh
new file mode 100644
index 000000000..8ee01517b
--- /dev/null
+++ b/.clusterfuzzlite/build-minimal.sh
@@ -0,0 +1,44 @@
+#!/bin/bash -eu
+# Last Updated: 08-FEB-2026 at 0700Z by David Hoyt
+#
+# Changes: Add WASM Toolchain, CFL & libFuzzer
+
+# Minimal CFL build for testing
+echo "Minimal CFL Build Test"
+
+# Determine repository root
+if [ -d "$SRC/uci" ]; then
+ REPO_ROOT="$SRC/uci"
+else
+ REPO_ROOT="$SRC"
+fi
+
+echo "Repository: $REPO_ROOT"
+echo "OUT: $OUT"
+
+# Comment wxWidgets
+cd $REPO_ROOT/Build/Cmake
+sed -i '1162,1170s/^/# DISABLED_FOR_CFL: /' CMakeLists.txt
+
+# Build libraries
+BUILD_DIR="$REPO_ROOT/Build/Cmake/build_cfl_$(date +%s)"
+cmake -B $BUILD_DIR -S . \
+ -DCMAKE_C_COMPILER=$CC \
+ -DCMAKE_CXX_COMPILER=$CXX \
+ -DCMAKE_C_FLAGS="$CFLAGS" \
+ -DCMAKE_CXX_FLAGS="$CXXFLAGS -frtti" \
+ -DCMAKE_BUILD_TYPE=RelWithDebInfo \
+ -DBUILD_SHARED_LIBS=OFF
+
+cmake --build $BUILD_DIR --target IccProfLib2-static -j$(nproc)
+
+# Build ONE fuzzer
+$CXX $CXXFLAGS -frtti \
+ -I$REPO_ROOT/IccProfLib \
+ $REPO_ROOT/Testing/Fuzzing/icc_profile_fuzzer.cpp \
+ $BUILD_DIR/IccProfLib/libIccProfLib2-static.a \
+ $LIB_FUZZING_ENGINE \
+ -o $OUT/icc_profile_fuzzer
+
+echo "✅ Built 1 fuzzer successfully"
+ls -lh $OUT/
diff --git a/.clusterfuzzlite/build-production.sh b/.clusterfuzzlite/build-production.sh
new file mode 100644
index 000000000..642dfd518
--- /dev/null
+++ b/.clusterfuzzlite/build-production.sh
@@ -0,0 +1,155 @@
+#!/bin/bash -eu
+# Last Updated: 08-FEB-2026 at 0700Z by David Hoyt
+#
+# Changes: Add WASM Toolchain, CFL & libFuzzer
+#
+
+echo "ClusterFuzzLite Production Build - All 15 Fuzzers"
+echo ""
+
+# Determine repository root
+if [ -d "$SRC/uci" ]; then
+ REPO_ROOT="$SRC/uci"
+ echo "Environment: ClusterFuzzLite"
+else
+ REPO_ROOT="$SRC"
+ echo "Environment: Local testing"
+fi
+
+echo "Repository: $REPO_ROOT"
+echo "Output: $OUT"
+echo ""
+
+# Comment wxWidgets (verified working in minimal build)
+cd $REPO_ROOT/Build/Cmake
+echo "Patching CMakeLists.txt..."
+sed -i '1162,1170s/^/# DISABLED_FOR_CFL: /' CMakeLists.txt
+
+# Build libraries
+BUILD_DIR="$REPO_ROOT/Build/Cmake/build_cfl_$(date +%s)"
+echo "Building libraries..."
+cmake -B $BUILD_DIR -S . \
+ -DCMAKE_C_COMPILER=$CC \
+ -DCMAKE_CXX_COMPILER=$CXX \
+ -DCMAKE_C_FLAGS="$CFLAGS" \
+ -DCMAKE_CXX_FLAGS="$CXXFLAGS -frtti" \
+ -DCMAKE_BUILD_TYPE=RelWithDebInfo \
+ -DBUILD_SHARED_LIBS=OFF
+
+cmake --build $BUILD_DIR --target IccProfLib2-static -j$(nproc)
+cmake --build $BUILD_DIR --target IccXML2-static -j$(nproc) || echo "Warning: IccXML2 build failed"
+
+if [ ! -f "$BUILD_DIR/IccProfLib/libIccProfLib2-static.a" ]; then
+ echo "ERROR: IccProfLib2-static.a not found"
+ exit 1
+fi
+
+echo "✅ Libraries built"
+echo ""
+
+# Build fuzzers
+FUZZING_DIR="$REPO_ROOT/Testing/Fuzzing"
+FUZZER_COUNT=0
+FAILED_FUZZERS=()
+
+# All 15 fuzzers
+ALL_FUZZERS=(
+ "icc_profile_fuzzer"
+ "icc_calculator_fuzzer"
+ "icc_v5dspobs_fuzzer"
+ "icc_multitag_fuzzer"
+ "icc_roundtrip_fuzzer"
+ "icc_dump_fuzzer"
+ "icc_io_fuzzer"
+ "icc_link_fuzzer"
+ "icc_spectral_fuzzer"
+ "icc_apply_fuzzer"
+ "icc_applyprofiles_fuzzer"
+ "icc_specsep_fuzzer"
+ "icc_tiffdump_fuzzer"
+ "icc_fromxml_fuzzer"
+ "icc_toxml_fuzzer"
+)
+
+echo "Building fuzzers..."
+for fuzzer in "${ALL_FUZZERS[@]}"; do
+ echo "[$((FUZZER_COUNT+1))/15] $fuzzer..."
+
+ if [ ! -f "$FUZZING_DIR/${fuzzer}.cpp" ]; then
+ echo " ⚠️ Source not found"
+ FAILED_FUZZERS+=("$fuzzer (no source)")
+ continue
+ fi
+
+ # Determine if this is an XML fuzzer
+ if [[ "$fuzzer" == *"xml"* ]]; then
+ if [ ! -f "$BUILD_DIR/IccXML/libIccXML2-static.a" ]; then
+ echo " ⚠️ IccXML2 not available"
+ FAILED_FUZZERS+=("$fuzzer (no IccXML)")
+ continue
+ fi
+
+ $CXX $CXXFLAGS -frtti \
+ -I$REPO_ROOT/IccProfLib \
+ -I$REPO_ROOT/IccXML/IccLibXML \
+ -I/usr/include/libxml2 \
+ -DHAVE_ICCXML \
+ $FUZZING_DIR/${fuzzer}.cpp \
+ $BUILD_DIR/IccXML/libIccXML2-static.a \
+ $BUILD_DIR/IccProfLib/libIccProfLib2-static.a \
+ -lxml2 \
+ $LIB_FUZZING_ENGINE \
+ -o $OUT/${fuzzer} 2>&1 | head -5 || {
+ echo " ❌ Build failed"
+ FAILED_FUZZERS+=("$fuzzer")
+ continue
+ }
+ else
+ $CXX $CXXFLAGS -frtti \
+ -I$REPO_ROOT/IccProfLib \
+ -I$REPO_ROOT/Tools/CmdLine/IccCommon \
+ -I$REPO_ROOT/Tools/CmdLine/IccApplyProfiles \
+ $FUZZING_DIR/${fuzzer}.cpp \
+ $BUILD_DIR/IccProfLib/libIccProfLib2-static.a \
+ $LIB_FUZZING_ENGINE \
+ -o $OUT/${fuzzer} 2>&1 | head -5 || {
+ echo " ❌ Build failed"
+ FAILED_FUZZERS+=("$fuzzer")
+ continue
+ }
+ fi
+
+ if [ -f "$OUT/${fuzzer}" ]; then
+ ((FUZZER_COUNT++))
+ echo " ✅ Built successfully"
+ else
+ echo " ❌ Output not found"
+ FAILED_FUZZERS+=("$fuzzer (no output)")
+ fi
+done
+
+echo ""
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo "Build Summary:"
+echo " ✅ Successfully built: $FUZZER_COUNT fuzzers"
+echo " ❌ Failed: ${#FAILED_FUZZERS[@]} fuzzers"
+
+if [ ${#FAILED_FUZZERS[@]} -gt 0 ]; then
+ echo ""
+ echo "Failed fuzzers:"
+ for failed in "${FAILED_FUZZERS[@]}"; do
+ echo " - $failed"
+ done
+fi
+
+echo ""
+echo "Output directory contents:"
+ls -lh $OUT/ | grep -E "(^total|fuzzer)"
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+
+if [ $FUZZER_COUNT -lt 13 ]; then
+ echo "⚠️ Warning: Expected at least 13 fuzzers, built $FUZZER_COUNT"
+ echo "Proceeding with available fuzzers for testing..."
+fi
+
+echo "✅ Build complete: $FUZZER_COUNT fuzzers ready for fuzzing"
diff --git a/.clusterfuzzlite/build.sh b/.clusterfuzzlite/build.sh
new file mode 100644
index 000000000..e1b7defc7
--- /dev/null
+++ b/.clusterfuzzlite/build.sh
@@ -0,0 +1,47 @@
+#!/bin/bash -eu
+# Last Updated: 08-FEB-2026 at 0700Z by David Hoyt
+#
+# Changes: Add WASM Toolchain, CFL & libFuzzer
+
+echo "CFL Build - Fuzzer Smoke Test Pattern"
+
+# Determine repository root
+if [ -d "$SRC/uci" ]; then
+ REPO_ROOT="$SRC/uci"
+else
+ REPO_ROOT="$SRC"
+fi
+
+echo "Repository: $REPO_ROOT"
+echo "OUT: $OUT"
+
+# Build libraries (smoke test uses ENABLE_TOOLS=OFF - no wxWidgets needed)
+BUILD_DIR="$REPO_ROOT/Build"
+cd $REPO_ROOT/Build
+cmake Cmake/ \
+ -DCMAKE_C_COMPILER=$CC \
+ -DCMAKE_CXX_COMPILER=$CXX \
+ -DCMAKE_C_FLAGS="$CFLAGS" \
+ -DCMAKE_CXX_FLAGS="$CXXFLAGS -frtti" \
+ -DCMAKE_BUILD_TYPE=Debug \
+ -DENABLE_FUZZING=ON \
+ -DENABLE_STATIC_LIBS=ON \
+ -DENABLE_SHARED_LIBS=ON \
+ -DENABLE_TOOLS=OFF \
+ -Wno-dev
+
+make -j$(nproc) IccProfLib2-static IccXML2-static
+
+# Build fuzzer matching smoke test pattern
+$CXX $CXXFLAGS -frtti \
+ -I$REPO_ROOT/IccProfLib \
+ -I$REPO_ROOT/IccXML/IccLibXML \
+ $REPO_ROOT/Testing/Fuzzing/icc_profile_fuzzer.cpp \
+ $BUILD_DIR/IccProfLib/libIccProfLib2-static.a \
+ $BUILD_DIR/IccXML/libIccXML2-static.a \
+ $LIB_FUZZING_ENGINE \
+ -lxml2 -lz \
+ -o $OUT/icc_profile_fuzzer
+
+echo "✅ Built 1 fuzzer successfully (smoke test pattern)"
+ls -lh $OUT/
diff --git a/.clusterfuzzlite/corpus-xml/CameraModel.xml b/.clusterfuzzlite/corpus-xml/CameraModel.xml
new file mode 100644
index 000000000..141fbadbd
--- /dev/null
+++ b/.clusterfuzzlite/corpus-xml/CameraModel.xml
@@ -0,0 +1,116 @@
+
+
+
+
+ 5.00
+ scnr
+ RGB
+ XYZ
+ now
+
+
+ Absolute
+
+
+
+
+ 1
+ rs0021
+
+
+
+
+
+
+ desc
+
+
+
+
+ A2B3
+
+
+
+
+ 0.665845845635815 0.781081987684972 -0.155892788430177
+ 4.923550307520770 -3.952824790137080 2.796829854367557
+ 1.274327197753011 1.977722322511197 -4.353931336717119
+
+
+
+
+
+ 0.9642455651282466 0.2052585528895002 0.0478091047162643
+ 0.9999999999999999 0.0146501684258497 0.0176213538916487
+ 0.8246790940919668 0.0357366850084837 -0.4005890947751716
+
+
+
+
+
+
+ B2D3
+
+
+
+
+
+
+ 0.000063066232895 0.000166109053171 0.000353413383377 0.000194502930425 0.000122614352901 0.000109743472209 0.000133774889481 0.000171185960694 0.000250662837095 0.000359724336652 0.001080623554962 0.002134574401744 0.005659507017190 0.012468192078342 0.014062709089229 0.011393273278742 0.015516501584560 0.030570777260329 0.033723006408803 0.060345919759624 0.058205824626885 0.053489388363182 0.046035319023760 0.039401781859661 0.029836844786886 0.023171915230856 0.016233114117626 0.007436857648673 0.001356909078851 0.000254624773456 0.000054439820091 0.000014979583433 0.000004784633529
+ 0.000244990556622 0.000980189550705 0.004406625830224 0.005194141869206 0.007496827942226 0.010650031337347 0.012965057867886 0.018381869220553 0.033647231669657 0.049918233156857 0.102549201975141 0.090859324717456 0.097081513297619 0.108249627351470 0.100449159204523 0.094961985594077 0.081019433591208 0.069163934403675 0.036496361861548 0.034775192786660 0.018142637544106 0.008936764485255 0.004710157785317 0.003158182877979 0.002095604535897 0.001457256483405 0.001087151007491 0.000671310064020 0.000181307300851 0.000048136444291 0.000014409107897 0.000004297510206 0.000001851068628
+ 0.001187714911300 0.009011781477010 0.044583691520976 0.061740174959911 0.077923494248955 0.082451576161067 0.091048761565321 0.089393624763117 0.084818995511244 0.068145305410297 0.073974547843174 0.033204490693790 0.015624751211911 0.007865742672240 0.004488787297383 0.002473828733863 0.001126986870356 0.000693035764230 0.000346420457450 0.000355643325701 0.000243540011615 0.000159278501685 0.000131566597083 0.000123545299696 0.000147814866148 0.000186687307330 0.000207536185558 0.000126078340976 0.000025814288635 0.000005412481368 0.000001796943814 0.000001031618949 0.000000919039336
+
+
+
+
+{
+%start with Illuminant spectral power distribution (range adjusted to fit spectral reflectance PCS range)
+49.257471935235735 56.461255244668401 59.984099824651970 57.773270260542645 74.775973108825966 87.198033528040042 90.566943033914555 91.328621954075601 95.072887390768642 91.934526578157701 95.700812701292861 96.594366276348850 97.115371634362518 102.088888343211138 100.748359379328633 102.313861341694320 100.000000000000000 97.737450349675370 98.923589007981050 93.510248030475438 97.705745692994213 99.291844618527918 99.067944977343956 95.750676092140793 98.893438340015791 95.705420726968256 98.234177034884084 103.054318766584331 99.184954029242036 87.424178468166403 91.652934776082219 92.933577205151451 76.891414787009083
+
+%apply illuminant to incomming spectral reflectance
+in(0,33)
+mul(33)
+
+%apply camera sensitivities
+mtx(0)
+
+%apply exposure adjustement (divide by sum of illuminant)
+2974.87665543836 2974.87665543836 2974.87665543836
+div(3)
+
+out(0,3)
+}
+
+
+
+
+
+
+ svcn
+ CIE 1931 standard colorimetric observer
+
+
+ 0.001368 0.004243 0.014310 0.043510 0.134380 0.283900 0.348280 0.336200 0.290800 0.195360 0.095640 0.032010 0.004900 0.009300 0.063270 0.165500 0.290400 0.433450 0.594500 0.762100 0.916300 1.026300 1.062200 1.002600 0.854450 0.642400 0.447900 0.283500 0.164900 0.087400 0.046770 0.022700 0.011359 0.005790 0.002899 0.001440
+ 0.000039 0.000120 0.000396 0.001210 0.004000 0.011600 0.023000 0.038000 0.060000 0.090980 0.139020 0.208020 0.323000 0.503000 0.710000 0.862000 0.954000 0.994950 0.995000 0.952000 0.870000 0.757000 0.631000 0.503000 0.381000 0.265000 0.175000 0.107000 0.061000 0.032000 0.017000 0.008210 0.004102 0.002091 0.001047 0.000520
+ 0.006450 0.020050 0.067850 0.207400 0.645600 1.385600 1.747060 1.772110 1.669200 1.287640 0.812950 0.465180 0.272000 0.158200 0.078250 0.042160 0.020300 0.008750 0.003900 0.002100 0.001650 0.001100 0.000800 0.000340 0.000190 0.000050 0.000020 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000
+
+ Illuminant D50
+ 5000
+
+ 24.4571469692098 29.8374136323552 49.2574719352357 56.4612552446684 59.9840998246520 57.7732702605426 74.7759731088260 87.1980335280400 90.5669430339146 91.3286219540756 95.0728873907686 91.9345265781577 95.7008127012929 96.5943662763489 97.1153716343625 102.0888883432111 100.7483593793286 102.3138613416943 100.0000000000000 97.7374503496754 98.9235890079811 93.5102480304754 97.7057456929942 99.2918446185279 99.0679449773440 95.7506760921408 98.8934383400158 95.7054207269683 98.2341770348841 103.0543187665843 99.1849540292420 87.4241784681664 91.6529347760822 92.9335772051515 76.8914147870091 86.5514856528592
+
+
+
+
+
+ wtpt
+
+
+
+
+ cprt
+
+
+
+
+
diff --git a/.clusterfuzzlite/corpus-xml/ElevenChanKubelkaMunk.xml b/.clusterfuzzlite/corpus-xml/ElevenChanKubelkaMunk.xml
new file mode 100644
index 000000000..72f76db7d
--- /dev/null
+++ b/.clusterfuzzlite/corpus-xml/ElevenChanKubelkaMunk.xml
@@ -0,0 +1,189 @@
+
+
+
+
+ 5.00
+ scnr
+ BCLR
+ now
+
+
+ Absolute
+
+
+
+
+ 1
+ rs0024
+
+
+
+
+
+
+ desc
+
+
+
+
+ D2B3
+
+
+
+
+
+
+ 0.8900 2.5500 0.00001 0.0100 0.5000 0.8500 0.6000 0.0500 0.3500 0.0600 0.3000
+ 0.3600 2.7000 0.00001 0.0100 0.3500 0.8700 0.6600 0.1400 0.3900 0.0600 0.2300
+ 0.0700 2.8200 0.00001 0.0100 0.2400 0.8200 0.7000 0.2000 0.4200 0.0600 0.1900
+ 0.0100 2.9200 0.00001 0.0100 0.1700 0.7300 0.7400 0.2400 0.4600 0.0600 0.1600
+ 0.00001 2.9900 0.00001 0.0100 0.1200 0.6400 0.7800 0.2700 0.5200 0.0600 0.1400
+ 0.00001 3.0300 0.00001 0.0100 0.0900 0.5500 0.8300 0.3200 0.5800 0.0700 0.1200
+ 0.00001 3.0400 0.00001 0.0100 0.0500 0.4600 0.8800 0.3700 0.6300 0.0900 0.1200
+ 0.00001 3.1000 0.00001 0.0100 0.0300 0.3500 0.9300 0.4200 0.6900 0.1100 0.1300
+ 0.00001 3.1500 0.00001 0.0100 0.0300 0.2300 0.9600 0.4600 0.7400 0.1400 0.1600
+ 0.00001 3.1900 0.0100 0.0100 0.0300 0.1300 1.0000 0.4900 0.7800 0.1800 0.2100
+ 0.00001 3.2300 0.0100 0.0200 0.0400 0.0700 1.0100 0.5200 0.8200 0.2400 0.3000
+ 0.00001 3.2800 0.0100 0.0400 0.0500 0.0400 0.8800 0.5700 0.8500 0.3200 0.4600
+ 0.00001 3.3100 0.0100 0.0600 0.0700 0.0400 0.4700 0.6100 0.8800 0.4000 0.6800
+ 0.00001 3.3500 0.0200 0.1000 0.1000 0.0500 0.1300 0.6200 0.9200 0.4900 0.9400
+ 0.00001 3.4200 0.0400 0.1500 0.1600 0.0600 0.0300 0.6400 0.9500 0.6800 1.2600
+ 0.00001 3.4600 0.0800 0.2000 0.2600 0.0900 0.0100 0.6900 0.9600 0.9000 1.5400
+ 0.00001 3.5100 0.1200 0.2600 0.4200 0.1300 0.00001 0.7000 0.9900 0.9500 1.6100
+ 0.00001 3.5300 0.1500 0.3200 0.6600 0.2000 0.00001 0.5400 1.0700 0.8900 1.6300
+ 0.00001 3.5600 0.1700 0.3800 1.0000 0.3000 0.00001 0.2400 1.1300 0.8800 1.7000
+ 0.00001 3.6100 0.2100 0.4300 1.3800 0.4500 0.00001 0.0700 1.1200 0.7800 1.7000
+ 0.00001 3.6500 0.2400 0.4700 1.6900 0.6800 0.00001 0.0200 0.9100 0.4700 1.4800
+ 0.00001 3.7100 0.2500 0.5000 1.9200 1.0100 0.00001 0.0100 0.3400 0.2000 1.1500
+ 0.00001 3.7400 0.2500 0.5200 2.1400 1.4400 0.00001 0.00001 0.0800 0.0800 0.9400
+ 0.00001 3.8000 0.2400 0.5200 2.3300 1.8500 0.00001 0.00001 0.0200 0.0300 0.9400
+ 0.00001 3.8400 0.2500 0.5100 2.4600 2.1100 0.00001 0.00001 0.0100 0.0200 1.0800
+ 0.00001 3.8900 0.2500 0.4900 2.5300 2.2600 0.00001 0.00001 0.00001 0.0100 1.1200
+ 0.00001 3.9100 0.2000 0.4500 2.5600 2.3500 0.00001 0.00001 0.00001 0.00001 0.8900
+ 0.00001 3.9900 0.1300 0.4100 2.5000 2.4300 0.00001 0.00001 0.00001 0.00001 0.5800
+ 0.00001 4.0800 0.0700 0.3600 2.3700 2.4000 0.00001 0.00001 0.00001 0.00001 0.3300
+ 0.00001 4.1200 0.0300 0.3000 2.3200 2.2300 0.00001 0.00001 0.00001 0.00001 0.1800
+ 0.00001 4.1800 0.0100 0.2300 2.3900 2.0100 0.00001 0.00001 0.00001 0.00001 0.1000
+ 0.00001 4.2000 0.00001 0.1800 2.5400 1.8100 0.00001 0.00001 0.00001 0.00001 0.0600
+ 0.00001 4.2500 0.00001 0.1300 2.7900 1.6800 0.00001 0.00001 0.00001 0.00001 0.0300
+ 0.00001 4.3000 0.00001 0.0900 3.0600 1.6600 0.00001 0.00001 0.00001 0.00001 0.0200
+ 0.00001 4.3800 0.00001 0.0700 3.1000 1.7200 0.00001 0.00001 0.00001 0.00001 0.0100
+ 0.00001 4.4900 0.00001 0.0500 2.8200 1.7700 0.00001 0.00001 0.00001 0.00001 0.0100
+
+
+
+
+
+ 1.0000 0.3000 0.0300 0.00001 0.1100 0.0900 0.0600 0.0100 0.0200 0.0300 0.0200
+ 1.0000 0.3500 0.0300 0.00001 0.0900 0.0900 0.0800 0.0100 0.0200 0.0300 0.0200
+ 1.0000 0.3600 0.0300 0.00001 0.0700 0.0900 0.0900 0.0100 0.0200 0.0300 0.0100
+ 1.0000 0.3500 0.0300 0.00001 0.0500 0.0900 0.0900 0.0100 0.0200 0.0200 0.0100
+ 1.0000 0.3500 0.0300 0.00001 0.0400 0.0800 0.1000 0.0200 0.0200 0.0200 0.0100
+ 1.0000 0.3500 0.0300 0.00001 0.0300 0.0700 0.1000 0.0200 0.0300 0.0200 0.0100
+ 1.0000 0.3500 0.0300 0.00001 0.0300 0.0600 0.1000 0.0200 0.0300 0.0200 0.0100
+ 1.0000 0.3600 0.0300 0.00001 0.0200 0.0500 0.1000 0.0200 0.0300 0.0200 0.0100
+ 1.0000 0.3600 0.0300 0.00001 0.0200 0.0400 0.1000 0.0300 0.0400 0.0200 0.0100
+ 1.0000 0.3700 0.0300 0.00001 0.0100 0.0300 0.1100 0.0300 0.0400 0.0200 0.0100
+ 1.0000 0.3700 0.0300 0.00001 0.0100 0.0300 0.1200 0.0300 0.0400 0.0200 0.0200
+ 1.0000 0.3700 0.0300 0.00001 0.0100 0.0200 0.1600 0.0400 0.0400 0.0300 0.0200
+ 1.0000 0.3700 0.0300 0.00001 0.0100 0.0200 0.3000 0.0400 0.0500 0.0300 0.0300
+ 1.0000 0.3800 0.0200 0.0100 0.0100 0.0100 0.4200 0.0400 0.0500 0.0300 0.0400
+ 1.0000 0.3800 0.0200 0.0100 0.0100 0.0100 0.4300 0.0500 0.0500 0.0400 0.0600
+ 1.0000 0.3900 0.0200 0.0100 0.0100 0.0100 0.4300 0.0600 0.0500 0.0600 0.0700
+ 1.0000 0.4000 0.0100 0.0100 0.0100 0.0100 0.4300 0.0700 0.0500 0.0600 0.0800
+ 1.0000 0.4000 0.0100 0.0100 0.0200 0.0100 0.4300 0.0900 0.0700 0.0600 0.0800
+ 1.0000 0.4000 0.0100 0.0100 0.0300 0.0100 0.4300 0.1100 0.0800 0.0700 0.1000
+ 1.0000 0.4100 0.0100 0.0100 0.0400 0.0200 0.4300 0.1300 0.1100 0.0700 0.1100
+ 1.0000 0.4100 0.0100 0.0100 0.0600 0.0200 0.4300 0.1400 0.1400 0.0600 0.1100
+ 1.0000 0.4200 0.0200 0.0200 0.0800 0.0400 0.4300 0.1400 0.2900 0.0400 0.0900
+ 1.0000 0.4200 0.0200 0.0200 0.1100 0.0700 0.4300 0.1400 0.3400 0.0300 0.0700
+ 1.0000 0.4300 0.0200 0.0200 0.1400 0.1000 0.4300 0.1400 0.3100 0.0200 0.0600
+ 1.0000 0.4400 0.0200 0.0200 0.1700 0.1400 0.4300 0.1400 0.2800 0.0200 0.0700
+ 1.0000 0.4400 0.0200 0.0200 0.1900 0.1700 0.4300 0.1400 0.2400 0.0200 0.0800
+ 1.0000 0.4400 0.0200 0.0200 0.2100 0.2000 0.4300 0.1300 0.2100 0.0100 0.0800
+ 1.0000 0.4600 0.0300 0.0200 0.2300 0.2400 0.4300 0.1200 0.1700 0.0100 0.0700
+ 1.0000 0.4700 0.0400 0.0100 0.2100 0.2600 0.4300 0.1000 0.1500 0.0100 0.0600
+ 1.0000 0.4700 0.0400 0.0100 0.2100 0.2600 0.4300 0.0900 0.1300 0.0100 0.0400
+ 1.0000 0.4800 0.0400 0.0100 0.2000 0.2400 0.4300 0.0700 0.1200 0.0100 0.0300
+ 1.0000 0.4900 0.0400 0.0100 0.2300 0.2200 0.4300 0.0500 0.1100 0.0100 0.0300
+ 1.0000 0.5000 0.0400 0.0100 0.2700 0.2000 0.4300 0.0400 0.1000 0.0100 0.0300
+ 1.0000 0.5100 0.0300 0.0100 0.3600 0.1900 0.4300 0.0400 0.0900 0.0100 0.0200
+ 1.0000 0.5200 0.0300 0.0100 0.4600 0.2000 0.4300 0.0300 0.0700 0.0100 0.0200
+ 1.0000 0.5400 0.0300 0.0100 0.4900 0.2200 0.4300 0.0200 0.0600 0.0100 0.0300
+
+
+
+
+ {
+ in(0,11)
+ 0 copy(1,10)
+ vmax(11)
+ copy(11,1)
+ sum(11) copy
+ 0 gt if {
+ copy(1,10)
+ div(11)
+ } else {
+ pop
+ }
+ tput(0,11)
+ tget(0,11)
+ mtx(0)
+ tget(0,11)
+ mtx(1)
+ tput(0,36)
+ tget(0,36)
+ div(36)
+ tget(0,36)
+ 0 copy(1,35)
+ gt(36)
+ mul(36)
+ tput(0,36)
+ 1 copy(1,35)
+ tget(0,36)
+ add(36)
+ tget(0,36)
+ tget(0,36)
+ mul(36)
+ tget(0,36)
+ tget(0,36)
+ add(36)
+ add(36)
+ sqrt(36)
+ sub(36)
+ out(0,36)
+ }
+
+
+
+
+
+
+ svcn
+ CIE 1931 standard colorimetric observer
+
+
+ 0.001368 0.004243 0.014310 0.043510 0.134380 0.283900 0.348280 0.336200 0.290800 0.195360 0.095640 0.032010 0.004900 0.009300 0.063270 0.165500 0.290400 0.433450 0.594500 0.762100 0.916300 1.026300 1.062200 1.002600 0.854450 0.642400 0.447900 0.283500 0.164900 0.087400 0.046770 0.022700 0.011359 0.005790 0.002899 0.001440
+ 0.000039 0.000120 0.000396 0.001210 0.004000 0.011600 0.023000 0.038000 0.060000 0.090980 0.139020 0.208020 0.323000 0.503000 0.710000 0.862000 0.954000 0.994950 0.995000 0.952000 0.870000 0.757000 0.631000 0.503000 0.381000 0.265000 0.175000 0.107000 0.061000 0.032000 0.017000 0.008210 0.004102 0.002091 0.001047 0.000520
+ 0.006450 0.020050 0.067850 0.207400 0.645600 1.385600 1.747060 1.772110 1.669200 1.287640 0.812950 0.465180 0.272000 0.158200 0.078250 0.042160 0.020300 0.008750 0.003900 0.002100 0.001650 0.001100 0.000800 0.000340 0.000190 0.000050 0.000020 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000
+
+ Illuminant D50
+ 5000
+
+ 24.4571469692098 29.8374136323552 49.2574719352357 56.4612552446684 59.9840998246520 57.7732702605426 74.7759731088260 87.1980335280400 90.5669430339146 91.3286219540756 95.0728873907686 91.9345265781577 95.7008127012929 96.5943662763489 97.1153716343625 102.0888883432111 100.7483593793286 102.3138613416943 100.0000000000000 97.7374503496754 98.9235890079811 93.5102480304754 97.7057456929942 99.2918446185279 99.0679449773440 95.7506760921408 98.8934383400158 95.7054207269683 98.2341770348841 103.0543187665843 99.1849540292420 87.4241784681664 91.6529347760822 92.9335772051515 76.8914147870091 86.5514856528592
+
+
+
+
+
+ wtpt
+
+
+
+
+ cprt
+
+
+
+
+
diff --git a/.clusterfuzzlite/corpus-xml/calcImport.xml b/.clusterfuzzlite/corpus-xml/calcImport.xml
new file mode 100644
index 000000000..505289ea6
--- /dev/null
+++ b/.clusterfuzzlite/corpus-xml/calcImport.xml
@@ -0,0 +1,23 @@
+
+
+
+
+
+
+
+
+ 1 0 0
+ 0 1 0
+ 0 0 1
+
+
+
+
+
+
+
+ tget{v1} 1 add tput{v1}
+ tget{v2} 1 add tput{v2}
+ mtx{identity3x3}
+
+
diff --git a/.clusterfuzzlite/corpus-xml/calcVars.xml b/.clusterfuzzlite/corpus-xml/calcVars.xml
new file mode 100644
index 000000000..246dc7a76
--- /dev/null
+++ b/.clusterfuzzlite/corpus-xml/calcVars.xml
@@ -0,0 +1,7 @@
+
+
+
+
+
+
+
diff --git a/.clusterfuzzlite/corpus-xml/srgbCalcTest.xml b/.clusterfuzzlite/corpus-xml/srgbCalcTest.xml
new file mode 100644
index 000000000..352a3ef7f
--- /dev/null
+++ b/.clusterfuzzlite/corpus-xml/srgbCalcTest.xml
@@ -0,0 +1,868 @@
+
+
+
+
+ 5.0
+ spac
+ RGB
+ XYZ
+ now
+
+
+ Relative
+
+
+
+ ICC
+ 34562ABF994CCD066D2C5721D0D68C5D
+
+
+
+ desc
+
+
+
+ A2B1
+
+
+
+
+
+
+
+ 1.00000000 0.5 0.0 0.0
+
+
+
+
+ 1.00000000 1.0 0.0 0.0
+
+
+
+
+ 1.00000000 1.5 0.0 0.0
+
+
+
+
+
+
+
+ 1.00000000 0.0764319 0.0125 0.00000000
+
+
+ 2.40000000 0.9429124761 0.05186018619 0.0125
+
+
+
+
+ 1.00000000 0.0764319 0.0125 0.00000000
+
+
+ 2.40000000 0.9429124761 0.05186018619 0.0125
+
+
+
+
+ 1.00000000 0.0764319 0.0125 0.00000000
+
+
+ 2.40000000 0.9429124761 0.05186018619 0.0125
+
+
+
+
+
+
+ 1.00000000 1.00000000 -1.00000000
+ 2.00000000 1.00000000 -1.00000000
+ 1.00000000 -1.00000000 1.00000000
+
+
+
+
+
+ 0.4660 0.3851 0.1431
+ 0.2225 0.7169 0.0606
+ 0.0139 0.0971 0.7139
+
+
+
+
+ 2 2 2
+
+ 0.0 0.0 0.0
+ 0.0 0.0 0.75
+ 0.0 0.5 0.0
+ 0.0 0.5 0.75
+ 0.25 0.0 0.0
+ 0.25 0.0 0.75
+ 0.25 0.5 0.0
+ 0.25 0.5 0.75
+
+
+
+
+ { in(0,3) 1 1 1 add(3) out(0,3) }
+
+
+
+
+
+
+
+ 500.0
+ 20.0
+ 0.69
+ 1.00
+ 1.00
+
+
+
+
+
+
+
+
+ 500.0
+ 20.0
+ 0.69
+ 1.00
+ 1.00
+
+
+
+
+
+
+ 0 2 4
+ 2 4 8
+
+
+
+
+
+{
+1 1 1
+tput(0,3)
+
+tget(0, 3)
+sum(3)
+3 eq
+tput(3)
+
+1 1 1
+tsav(4, 3)
+sum(3)
+3 eq
+tput(7)
+
+1 1 1
+curv(0) %y=.5x; y=x; y=1.5x
+sum(3)
+3 eq
+tput(8)
+
+1 2 3
+mtx(2) %[1 1 -1; 2 1 -1; 1 -1 1]
+0 1 2
+sub(3)
+sum(3)
+0 eq
+tput(9)
+
+1 1 1
+clut(4) %clut with 0.25 0.5 0.75 at entry 1 1 1
+0.25 0.5 0.75
+sub(3)
+sum(3)
+0 eq
+tput(10)
+
+1 2 3
+calc(5) %{ in(0,3) 1 1 1 add(3) out(0,3) }
+2 3 4
+sub(3)
+sum(3)
+0 eq
+tput(11)
+
+.5
+tint(8)
+1 3 6
+sub(3)
+sum(3)
+0 eq
+tput(12)
+
+100 0 0
+fJab(6) %JabToXYZ
+0.9642 1.0 0.8249
+sub(3)
+abs(3)
+sum(3)
+0.001 le
+tput(13)
+
+0.9642 1.0 0.8249
+tJab(7) %XYZToJab
+100 0 0
+sub(3)
+abs(3)
+sum(3)
+0.1 le
+tput(14)
+
+1
+elem(8)
+2 4 8
+sub(3)
+sum(3)
+0 eq
+tput(15)
+
+1 2 3 4 5 6
+copy(3,2)
+sum(12)
+51 eq
+tput(16)
+
+1 2 3 4 5
+rotl(5,2)
+3 4 5 1 2
+sub(5)
+sum(5)
+0 eq
+tput(17)
+
+1 2 3 4 5
+rotr(5,2)
+4 5 1 2 3
+sub(5)
+sum(5)
+0 eq
+tput(18)
+
+1 2 3 4 5
+posd(4,2)
+sum(7)
+19 eq
+tput(19)
+
+1 2 3 4 5
+flip(5)
+5 4 3 2 1
+sub(5)
+abs(5)
+sum(5)
+0 eq
+tput(20)
+
+1 2 3 4 5
+pop(2)
+sum(3)
+6 eq
+tput(21)
+
+1 2 3
+4 5 6
+7 8 9
+6 15 24
+solv(3,3)
+1 eq if { 1 1 1 sub(3) abs(3) 0.00001 0.00001 0.00001 lt(3) }
+else { 0 0 0 eq(3) }
+sum(3)
+3 eq
+tput(22)
+
+1 2 3 4
+5 6 7 8
+tran(2,4)
+1 5
+2 6
+3 7
+4 8
+eq(8) and(8)
+tput(23)
+
+2 3 4 5
+prod(4)
+120 eq
+tput(24)
+
+5 3 1 2 4
+min(5)
+1 eq
+tput(25)
+
+1 3 5 4 2
+max(5)
+5 eq
+tput(26)
+
+1 1 1 1 1
+and(5)
+tput(27)
+
+0 0 1 0 0
+or(5)
+tput(28)
+
+pi
+3.1415 sub abs
+0.1 lt
+tput(29)
+
++INF
+1.0E35 gt
+tput(30)
+
+-INF
+-1.0E35 lt
+tput(31)
+
+NaN NaN eq
+tput(32)
+
+1 2 3 4
+-1 -2 -3 -4
+add(4)
+sum(4)
+0 eq
+tput(33)
+
+1 2 3 4 1 2 3 4
+sub(4)
+sum(4)
+0 eq
+tput(34)
+
+2 4 6 8
+0.5 0.5 0.5 0.5
+mul(4)
+1 2 3 4
+sub(4)
+sum(4)
+0 eq
+tput(35)
+
+2 4 6 8
+2 2 2 2
+div(4)
+1 2 3 4
+sub(4)
+sum(4)
+0 eq
+tput(36)
+
+5 11 3.25 2 4 1
+mod(3)
+1 3 0.25
+sub(3)
+sum(3)
+0 eq
+tput(37)
+
+2 2 2 2
+2 3 4 5
+pow(4)
+4 8 16 32
+sub(4)
+sum(4)
+0 eq
+tput(38)
+
+2 3 4 2
+gama(3)
+4 9 16
+sub(3)
+sum(3)
+0 eq
+tput(39)
+
+2 3 4 2
+sadd(3)
+4 5 6
+sub(3)
+sum(3)
+0 eq
+tput(40)
+
+3 4 5 2
+ssub(3)
+1 2 3
+sub(3)
+sum(3)
+0 eq
+tput(41)
+
+2 3 4 2
+smul(3)
+4 6 8
+sub(3)
+sum(3)
+0 eq
+tput(42)
+
+2 4 8 2
+sdiv(3)
+1 2 4
+sub(3)
+sum(3)
+0 eq
+tput(43)
+
+2 3 4
+sq(3)
+4 9 16
+sub(3)
+sum(3)
+0 eq
+tput(44)
+
+4 9 16
+sqrt(3)
+2 3 4
+sub(3)
+sum(3)
+0 eq
+tput(45)
+
+2 3 4
+cb(3)
+8 27 64
+sub(3)
+sum(3)
+0 eq
+tput(46)
+
+8 27 64
+cbrt(3)
+2 3 4
+sub(3)
+sum(3)
+0 eq
+tput(47)
+
+2 3 4
+cb(3)
+8 27 64
+sub(3)
+sum(3)
+0 eq
+tput(48)
+
+8 27 64
+cbrt(3)
+2 3 4
+sub(3)
+sum(3)
+0 eq
+tput(49)
+
+1 -2 3 -4 5
+abs(5)
+sum(5)
+15 eq
+tput(50)
+
+1 2 3 4
+neg(4)
+-1 -2 -3 -4
+sub(4)
+sum(4)
+0 eq
+tput(51)
+
+1.1 2.5 3.7
+rond(3)
+1 3 4
+sub(3)
+sum(3)
+0 eq
+tput(52)
+
+1.1 2.5 3.7
+flor(3)
+1 2 3
+sub(3)
+sum(3)
+0 eq
+tput(53)
+
+1.1 2.5 3.7
+ceil(3)
+2 3 4
+sub(3)
+sum(3)
+0 eq
+tput(54)
+
+1.1 2.5 3.7
+trnc(3)
+1 2 3
+sub(3)
+sum(3)
+0 eq
+tput(55)
+
+1 2 3
+exp(3)
+sum(3)
+copy
+30 ge
+flip
+31 le
+and
+tput(56)
+
+10 100 1000
+log(3)
+1 2 3
+sub(3)
+sum(3)
+0 eq
+tput(57)
+
+3 7 20
+ln(3)
+sum(3)
+copy
+6 ge
+flip
+7 le
+and
+tput(58)
+
+0.00000 1.57080 0.78540
+sin(3)
+0.00000 1.00000 0.70711
+sub(3)
+sum(3)
+abs
+0.01 le
+tput(59)
+
+0.00000 1.57080 0.78540
+cos(3)
+1 0 0.70711
+sub(3)
+sum(3)
+abs
+0.01 le
+tput(60)
+
+0.00000 1.0 0.78540
+tan(3)
+0 1.5574 1
+sub(3)
+sum(3)
+abs
+0.01 le
+tput(61)
+
+0.00000 1.00000 0.70711
+asin(3)
+0.00000 1.57080 0.78540
+sub(3)
+sum(3)
+abs
+0.01 le
+tput(62)
+
+0.00000 1.00000 0.70711
+acos(3)
+1.57080 0.00000 0.78539
+sub(3)
+sum(3)
+abs
+0.01 le
+tput(63)
+
+0.00000 1.00000 0.70711
+atan(3)
+0.00000 0.78540 0.61548
+sub(3)
+sum(3)
+abs
+0.01 le
+tput(64)
+
+1 2 2 0 1 2
+atn2(3)
+0.00000 0.46365 0.78540
+sub(3)
+sum(3)
+abs
+0.01 le
+tput(65)
+
+0 28.2843 40 40 28.2843 0
+ctop(3)
+40 40 40 0 45 90
+sub(6)
+sum(6)
+abs
+0.01 le
+tput(66)
+
+40 40 40 0 45 90
+ptoc(3)
+0 28.2843 40 40 28.2843 0
+sub(6)
+sum(6)
+abs
+0.01 le
+tput(67)
+
+pi +INF -INF NaN 4
+rnum(5)
+1 0 0 0 1
+eq(5)
+sum(5)
+5 eq
+tput(68)
+
+1 2 3 4 5 3 3 3 3 3
+lt(5)
+1 1 0 0 0
+sub(5)
+sum(5)
+0 eq
+tput(69)
+
+1 2 3 4 5 3 3 3 3 3
+le(5)
+1 1 1 0 0
+sub(5)
+sum(5)
+0 eq
+tput(70)
+
+1 2 3 4 5 1 0 3 0 5
+eq(5)
+1 0 1 0 1
+sub(5)
+sum(5)
+0 eq
+tput(71)
+
+1 2 3 4 5 1 0 3 0 5
+near(5)
+1 0 1 0 1
+sub(5)
+sum(5)
+0 eq
+tput(72)
+
+1 2 3 4 5 3 3 3 3 3
+ge(5)
+0 0 1 1 1
+sub(5)
+sum(5)
+0 eq
+tput(73)
+
+1 2 3 4 5 3 3 3 3 3
+gt(5)
+0 0 0 1 1
+sub(5)
+sum(5)
+0 eq
+tput(74)
+
+1 0 1 0 1
+not(5)
+0 1 0 1 0
+sub(5)
+sum(5)
+0 eq
+tput(75)
+
+0 1 2 3 3 2 1 0
+vmax(4)
+3 2 2 3
+sub(4)
+sum(4)
+0 eq
+tput(76)
+
+0 1 2 3 3 2 1 0
+vmin(4)
+0 1 1 0
+sub(4)
+sum(4)
+0 eq
+tput(77)
+
+0 1 0 1 0 0 1 1
+vand(4)
+0 0 0 1
+sub(4)
+sum(4)
+0 eq
+tput(78)
+
+0 1 0 1 0 0 1 1
+vor(4)
+0 1 1 1
+sub(4)
+sum(4)
+0 eq
+tput(79)
+
+1 .5 .25 1 .5 .25 1 .5 .25
+tLab(3)
+100 76.06926 57.07542 0 0 0 0 0 0
+sub(9)
+abs(9)
+sum(9)
+0.0005 lt
+tput(80)
+
+100 76.06926 57.07542 0 0 0 0 0 0
+tXYZ(3)
+1 .5 .25 1 .5 .25 1 .5 .25
+sub(9)
+abs(9)
+sum(9)
+0.0005 lt
+tput(81)
+
+20
+0 if { pop 10 }
+20 eq
+tput(82)
+
+20
+1 if { pop 10 }
+10 eq
+tput(83)
+
+1 if { 10 } else { 20 }
+10 eq
+tput(84)
+
+0 if { 10 } else { 20 }
+20 eq
+tput(85)
+
+2 sel
+case { 1 }
+case { 2 }
+case { 4 }
+case { 8 }
+dflt { -1 }
+4 eq
+tput(86)
+
+8 sel
+case { 1 }
+case { 2 }
+case { 4 }
+case { 8 }
+dflt { -1 }
+-1 eq
+tput(87)
+
+0
+1 sel
+case { pop 1 }
+case { pop 3 }
+case { pop 9 }
+case { pop 27 }
+3 eq
+tput(88)
+
+0
+-1 sel
+case { pop 1 }
+case { pop 3 }
+case { pop 9 }
+case { pop 27 }
+0 eq
+tput(89)
+
+env(true)
+1 1 eq(2) sum(2)
+2 eq
+tput(90)
+
+env(ndef)
+0 0 eq(2) sum(2)
+2 eq
+tput(91)
+
+tget(0,46)
+tget(46,46)
+sum(92)
+92 eq
+if {
+env(01020304) if {
+ copy(1,2)
+}
+else {
+ in(0,3)
+ curv(1)
+ mtx(3)
+}
+out(0,3)
+}
+else {
+0 0 0
+out(0,3)
+}
+
+}
+
+
+
+
+
+ B2A1
+
+
+
+ 3.134578 -0.978957 0.072119
+ -1.617306 1.916218 -0.229142
+ -0.491034 0.033570 1.405751
+
+
+
+
+
+ 1.00000000 13.08354234 0.16354428 0.00000000
+
+
+ 0.41667 1.15151257 -0.01439391 -0.055
+
+
+
+
+ 1.00000000 13.08354234 0.16354428 0.00000000
+
+
+ 0.41667 1.15151257 -0.01439391 -0.055
+
+
+
+
+ 1.00000000 13.08354234 0.16354428 0.00000000
+
+
+ 0.41667 1.15151257 -0.01439391 -0.055
+
+
+
+
+
+
+ wtpt
+
+
+
+ cprt
+
+
+
+
diff --git a/.clusterfuzzlite/corpus/125001ec6943203efbbd05c9d2cf893f.icc b/.clusterfuzzlite/corpus/125001ec6943203efbbd05c9d2cf893f.icc
new file mode 100644
index 000000000..b62d0ae0f
Binary files /dev/null and b/.clusterfuzzlite/corpus/125001ec6943203efbbd05c9d2cf893f.icc differ
diff --git a/.clusterfuzzlite/corpus/5060dda10859db041e44ff7300f26fa5.icc b/.clusterfuzzlite/corpus/5060dda10859db041e44ff7300f26fa5.icc
new file mode 100644
index 000000000..9a1a92d8c
Binary files /dev/null and b/.clusterfuzzlite/corpus/5060dda10859db041e44ff7300f26fa5.icc differ
diff --git a/.clusterfuzzlite/corpus/7e14174d6ea92745036ca0068e77da32.icc b/.clusterfuzzlite/corpus/7e14174d6ea92745036ca0068e77da32.icc
new file mode 100644
index 000000000..b1fd20aa1
Binary files /dev/null and b/.clusterfuzzlite/corpus/7e14174d6ea92745036ca0068e77da32.icc differ
diff --git a/.clusterfuzzlite/corpus/a9a07583bbb221bd7297b54006c30c1b.icc b/.clusterfuzzlite/corpus/a9a07583bbb221bd7297b54006c30c1b.icc
new file mode 100644
index 000000000..5da2fbe2a
Binary files /dev/null and b/.clusterfuzzlite/corpus/a9a07583bbb221bd7297b54006c30c1b.icc differ
diff --git a/.clusterfuzzlite/corpus/cba7e5d812ac3267d44102752a331230.icc b/.clusterfuzzlite/corpus/cba7e5d812ac3267d44102752a331230.icc
new file mode 100644
index 000000000..1523364ed
Binary files /dev/null and b/.clusterfuzzlite/corpus/cba7e5d812ac3267d44102752a331230.icc differ
diff --git a/.clusterfuzzlite/corpus/ef870ddfe52151a05999bc4bb5dcf3a28fab9f6d b/.clusterfuzzlite/corpus/ef870ddfe52151a05999bc4bb5dcf3a28fab9f6d
new file mode 100644
index 000000000..83af7f5e0
Binary files /dev/null and b/.clusterfuzzlite/corpus/ef870ddfe52151a05999bc4bb5dcf3a28fab9f6d differ
diff --git a/.clusterfuzzlite/fuzzer.options b/.clusterfuzzlite/fuzzer.options
new file mode 100644
index 000000000..2c4794750
--- /dev/null
+++ b/.clusterfuzzlite/fuzzer.options
@@ -0,0 +1,58 @@
+[libfuzzer]
+# Enhanced LibFuzzer Options - Combined Sanitizers with Full Instrumentation
+# Print final statistics including coverage, corpus, and performance metrics
+print_final_stats=1
+
+# Print program counter values for coverage analysis
+print_pcs=1
+
+# Print function coverage
+print_funcs=1
+
+# Maximum total time per fuzzer run (seconds)
+max_total_time=7200
+
+# Use value profile for better coverage guidance
+use_value_profile=1
+
+# Enable fork mode for parallel fuzzing
+fork=4
+
+# Reduce depth for faster iteration
+max_len=65536
+
+# Memory limit per run (MB) - increased for complex ICC profiles
+rss_limit_mb=4096
+
+# Timeout per individual test case (seconds)
+timeout=30
+
+[asan]
+# Address Sanitizer Options - Enhanced Stack Tracing
+symbolize=1
+print_stacktrace=1
+halt_on_error=1
+detect_stack_use_after_return=1
+check_initialization_order=1
+strict_init_order=1
+detect_invalid_pointer_pairs=2
+print_summary=1
+stack_trace_format=DEFAULT
+allocator_may_return_null=1
+detect_leaks=1
+quarantine_size_mb=256
+
+[ubsan]
+# Undefined Behavior Sanitizer Options - Enhanced Reporting
+symbolize=1
+print_stacktrace=1
+halt_on_error=0
+print_summary=1
+verbosity=1
+report_error_type=1
+
+[msan]
+# Memory Sanitizer Options (if enabled)
+symbolize=1
+print_stacktrace=1
+halt_on_error=1
diff --git a/.clusterfuzzlite/project.yaml b/.clusterfuzzlite/project.yaml
new file mode 100644
index 000000000..c8d78d3a6
--- /dev/null
+++ b/.clusterfuzzlite/project.yaml
@@ -0,0 +1,2 @@
+language: c++
+main_repo: 'https://github.com/InternationalColorConsortium/iccdev.git'
diff --git a/.github/workflows/ScanBuild.yml b/.github/workflows/ScanBuild.yml
index 299d84f97..e3b86b6c4 100644
--- a/.github/workflows/ScanBuild.yml
+++ b/.github/workflows/ScanBuild.yml
@@ -1,26 +1,23 @@
###############################################################
#
-## Copyright (©) 2025 International Color Consortium.
-## All rights reserved.
-## https://color.org
-#
-#
-## Intent: iccDEV Scan Build Runner for Matrix OS
-#
-## Last Updated: 28-NOV-2025 0000Z by David Hoyt
-## Add Read Permission Block
-## TODO: Push binary releases, tags etc..
-#
-##
-#
+# Copyright (©) 2025 International Color Consortium.
+# All rights reserved.
+# https://color.org
#
#
+# Intent: iccDEV Scan Build Runner
#
+# Last Updated: 08-FEB-2026
+# Parallel build, hardened shells, sanitizer,
+# dynamic LLVM path, libjpeg-dev dependency.
#
###############################################################
name: "Scan Build"
+permissions:
+ contents: read
+
on:
workflow_dispatch:
@@ -28,114 +25,147 @@ jobs:
build-linux:
name: Build and Test Linux with scan-build
runs-on: ubuntu-latest
- timeout-minutes: 20
- permissions:
- contents: read
-
+ timeout-minutes: 30
strategy:
fail-fast: false
steps:
- - name: 📥 Checkout master
+ - name: Checkout
uses: actions/checkout@c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5
+ with:
+ fetch-depth: 0
+ persist-credentials: false
- # Install dependencies
- name: Install dependencies
- shell: bash
+ shell: bash --noprofile --norc {0}
env:
- BASH_ENV: /dev/null
+ BASH_ENV: /dev/null
run: |
set -euo pipefail
git config --global --add safe.directory "$GITHUB_WORKSPACE"
git config --global credential.helper ""
-
- # Clear the in-shell GITHUB_TOKEN
unset GITHUB_TOKEN || true
- sudo apt-get update
- sudo apt-get install -y build-essential cmake gcc g++ clang clang-tools libpng-dev libxml2 libxml2-dev libtiff-dev nlohmann-json3-dev libwxgtk3.2-dev wx-common python3 python3-pip curl git llvm
- # Ensure scan-build is in PATH
- - name: Ensure scan-build is installed and accessible
- shell: bash
- env:
- BASH_ENV: /dev/null
- run: |
- set -euo pipefail
- git config --global --add safe.directory "$GITHUB_WORKSPACE"
- git config --global credential.helper ""
-
- # Clear the in-shell GITHUB_TOKEN
- unset GITHUB_TOKEN || true
+ sudo apt-get update -qq
+ sudo apt-get install -y \
+ build-essential cmake gcc g++ clang clang-tools \
+ libpng-dev libxml2-dev libtiff-dev libjpeg-dev \
+ nlohmann-json3-dev libwxgtk3.2-dev wx-common \
+ python3 curl git llvm
+
+ echo "### Environment" >> "$GITHUB_STEP_SUMMARY"
+ echo "| Tool | Version |" >> "$GITHUB_STEP_SUMMARY"
+ echo "|------|---------|" >> "$GITHUB_STEP_SUMMARY"
+ echo "| scan-build | $(scan-build --version 2>&1 | head -1) |" >> "$GITHUB_STEP_SUMMARY"
+ echo "| clang | $(clang --version 2>&1 | head -1) |" >> "$GITHUB_STEP_SUMMARY"
+ echo "| cmake | $(cmake --version | head -1) |" >> "$GITHUB_STEP_SUMMARY"
+ echo "| nproc | $(nproc) |" >> "$GITHUB_STEP_SUMMARY"
+ echo "" >> "$GITHUB_STEP_SUMMARY"
- which scan-build || echo "? scan-build not found"
- scan-build --version || echo "? scan-build version check failed"
- # Configure the build with scan-build
- - name: Configure the build with scan-build
- shell: bash
+ - name: Configure with scan-build
+ shell: bash --noprofile --norc {0}
env:
- BASH_ENV: /dev/null
+ BASH_ENV: /dev/null
+ CC: clang
+ CXX: clang++
run: |
set -euo pipefail
git config --global --add safe.directory "$GITHUB_WORKSPACE"
git config --global credential.helper ""
-
- # Clear the in-shell GITHUB_TOKEN
unset GITHUB_TOKEN || true
- ls
+ LLVM_BIN=$(llvm-config --bindir 2>/dev/null || echo "/usr/lib/llvm-$(llvm-config --version 2>/dev/null | cut -d. -f1)/bin")
+ export PATH="${LLVM_BIN}:${PATH}"
+
cd Build
- pwd
- ls
- export CC=clang
- export CXX=clang++
- export PATH="/usr/lib/llvm-17/bin:$PATH"
- scan-build cmake -DCMAKE_INSTALL_PREFIX=$HOME/.local -DCMAKE_BUILD_TYPE=Release -DENABLE_TOOLS=ON -Wno-dev Cmake/
- # Run scan-build for static analysis
- - name: Run scan-build for static analysis
- shell: bash
+ scan-build cmake \
+ -DCMAKE_INSTALL_PREFIX=$HOME/.local \
+ -DCMAKE_BUILD_TYPE=Release \
+ -DENABLE_TOOLS=ON \
+ -Wno-dev \
+ Cmake/
+
+ - name: Run scan-build with all processors
+ shell: bash --noprofile --norc {0}
env:
- BASH_ENV: /dev/null
+ BASH_ENV: /dev/null
run: |
set -euo pipefail
git config --global --add safe.directory "$GITHUB_WORKSPACE"
git config --global credential.helper ""
-
- # Clear the in-shell GITHUB_TOKEN
unset GITHUB_TOKEN || true
- pwd
- ls
+ LLVM_BIN=$(llvm-config --bindir 2>/dev/null || echo "/usr/lib/llvm-$(llvm-config --version 2>/dev/null | cut -d. -f1)/bin")
+ export PATH="${LLVM_BIN}:${PATH}"
+
+ NPROC=$(nproc)
+ echo "Running scan-build with $NPROC parallel jobs"
cd Build
- pwd
- ls
- export PATH="/usr/lib/llvm-17/bin:$PATH"
- scan-build --status-bugs --keep-going -o scan-build-reports make -j$(nproc) || true
- continue-on-error: true # Allow the step to complete even if issues are found
+ scan-build --status-bugs --keep-going -o scan-build-reports \
+ make -j"$NPROC" 2>&1 | tee scan-build-output.log || true
+
+ # Count findings
+ BUGS=$({ grep -c 'warning:' scan-build-output.log 2>/dev/null || true; })
+ echo "scan-build found $BUGS warnings"
+ echo "SCAN_BUGS=$BUGS" >> "$GITHUB_ENV"
+ continue-on-error: true
- # Upload scan-build reports
- name: Upload scan-build reports
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
with:
name: scan-build-reports
path: Build/scan-build-reports
+ if-no-files-found: warn
- # Upload built binaries as artifacts
- name: Upload build artifacts
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
with:
name: master-build-linux
- path: Build
+ path: |
+ Build/**/*.so
+ Build/**/*.a
+ Build/**/Icc*
+ LICENSE.md
+ if-no-files-found: warn
- # Upload build logs
- name: Upload build logs
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
with:
name: build-logs
- path: Build/CMakeCache.txt
+ path: |
+ Build/CMakeCache.txt
+ Build/scan-build-output.log
+
- name: Summary Report
if: always()
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
run: |
- echo "### Build Summary" >> $GITHUB_STEP_SUMMARY
- echo "- Build Directory: Build/" >> $GITHUB_STEP_SUMMARY
- echo "- Artifacts Uploaded: iccdev-linux-clang" >> $GITHUB_STEP_SUMMARY
- echo "- Status: Success" >> $GITHUB_STEP_SUMMARY
\ No newline at end of file
+ set -euo pipefail
+ git config --global --add safe.directory "$GITHUB_WORKSPACE"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+
+ SANITIZER=".github/scripts/sanitize-sed.sh"
+ if [[ -f "$SANITIZER" ]]; then
+ # shellcheck disable=SC1090
+ source "$SANITIZER"
+ else
+ sanitize_line() { printf '%s' "$1"; }
+ fi
+
+ BUGS="${SCAN_BUGS:-0}"
+ REPORT_COUNT=$(find Build/scan-build-reports -name '*.html' 2>/dev/null | wc -l | tr -d ' ')
+
+ {
+ echo "### 🧠 Scan-Build Summary"
+ echo ""
+ echo "| Metric | Value |"
+ echo "|--------|-------|"
+ echo "| Parallel jobs | $(nproc) |"
+ echo "| Warnings logged | $(sanitize_line "$BUGS") |"
+ echo "| HTML reports | $(sanitize_line "$REPORT_COUNT") |"
+ echo "| Status | ${{ job.status }} |"
+ echo ""
+ } >> "$GITHUB_STEP_SUMMARY"
\ No newline at end of file
diff --git a/.github/workflows/brew-testing.yml b/.github/workflows/brew-testing.yml
new file mode 100644
index 000000000..8035e01ba
--- /dev/null
+++ b/.github/workflows/brew-testing.yml
@@ -0,0 +1,308 @@
+###############################################################
+# Last Updated: 2026-02-08 15:08:29 UTC by David Hoyt
+#
+# Intent: Test brew inatall dependencies
+#
+#
+# Validate jpeg-turbo brew dependency and
+# cmake configuration across macOS and Linux
+#
+###############################################################
+
+name: brew-testing
+
+permissions:
+ contents: read
+
+on:
+ workflow_dispatch:
+
+jobs:
+ macos:
+ name: "macOS Clang (jpeg-turbo)"
+ runs-on: macos-latest
+ timeout-minutes: 20
+ steps:
+ - name: Checkout
+ uses: actions/checkout@c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5
+
+ - name: Install Dependencies
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ echo "Installing Homebrew dependencies..."
+ brew install libpng nlohmann-json libxml2 wxwidgets libtiff jpeg-turbo || echo "⚠️ Some dependencies might already be installed."
+ echo "### Dependency Versions" >> $GITHUB_STEP_SUMMARY
+ echo "| Package | Version |" >> $GITHUB_STEP_SUMMARY
+ echo "|---------|---------|" >> $GITHUB_STEP_SUMMARY
+ for pkg in libpng nlohmann-json libxml2 wxwidgets libtiff jpeg-turbo; do
+ ver=$(brew info --json=v2 "$pkg" 2>/dev/null | python3 -c "import sys,json; print(json.load(sys.stdin)['formulae'][0]['versions']['stable'])" 2>/dev/null || echo "N/A")
+ echo "| $pkg | $ver |" >> $GITHUB_STEP_SUMMARY
+ done
+ echo "" >> $GITHUB_STEP_SUMMARY
+ echo "✔ Dependency installation complete."
+
+ - name: Verify jpeg-turbo Paths
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ PREFIX=$(brew --prefix jpeg-turbo)
+ echo "jpeg-turbo prefix: $PREFIX"
+ echo "### jpeg-turbo Path Validation" >> $GITHUB_STEP_SUMMARY
+ echo "| Check | Result |" >> $GITHUB_STEP_SUMMARY
+ echo "|-------|--------|" >> $GITHUB_STEP_SUMMARY
+
+ if [ -d "$PREFIX/include" ]; then
+ echo "| Include dir exists | ✅ $PREFIX/include |" >> $GITHUB_STEP_SUMMARY
+ else
+ echo "| Include dir exists | ❌ missing |" >> $GITHUB_STEP_SUMMARY
+ exit 1
+ fi
+
+ if [ -f "$PREFIX/lib/libjpeg.dylib" ]; then
+ echo "| libjpeg.dylib exists | ✅ $PREFIX/lib/libjpeg.dylib |" >> $GITHUB_STEP_SUMMARY
+ else
+ echo "| libjpeg.dylib exists | ❌ missing |" >> $GITHUB_STEP_SUMMARY
+ exit 1
+ fi
+
+ if [ -f "$PREFIX/include/jpeglib.h" ]; then
+ echo "| jpeglib.h exists | ✅ found |" >> $GITHUB_STEP_SUMMARY
+ else
+ echo "| jpeglib.h exists | ❌ missing |" >> $GITHUB_STEP_SUMMARY
+ exit 1
+ fi
+ echo "" >> $GITHUB_STEP_SUMMARY
+
+ - name: CMake Configure
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ cd Build
+ sudo rm -rf /Library/Frameworks/Mono.framework/Headers/png.h
+ echo 'export PATH="/opt/homebrew/opt/jpeg-turbo/bin:$PATH"' >> /Users/runner/.bash_profile
+ export CPPFLAGS="-I/opt/homebrew/opt/jpeg-turbo/include"
+ export PKG_CONFIG_PATH="/opt/homebrew/opt/jpeg-turbo/lib/pkgconfig"
+ export CFLAGS="-I$(brew --prefix libpng)/include -I$(brew --prefix jpeg-turbo)/include"
+ export LDFLAGS="-L$(brew --prefix libpng)/lib -L$(brew --prefix jpeg-turbo)/lib"
+ cmake -DCMAKE_INSTALL_PREFIX=$HOME/.local \
+ -DCMAKE_BUILD_TYPE=Release \
+ -DJPEG_LIBRARY=$(brew --prefix jpeg-turbo)/lib/libjpeg.dylib \
+ -DJPEG_INCLUDE_DIR=$(brew --prefix jpeg-turbo)/include \
+ -Wno-dev Cmake/
+ echo "### macOS CMake Configuration" >> $GITHUB_STEP_SUMMARY
+ echo '```' >> $GITHUB_STEP_SUMMARY
+ grep -E 'JPEG_|JPEGLIB' CMakeCache.txt >> $GITHUB_STEP_SUMMARY || echo "No JPEG cache entries" >> $GITHUB_STEP_SUMMARY
+ echo '```' >> $GITHUB_STEP_SUMMARY
+ echo "" >> $GITHUB_STEP_SUMMARY
+
+ - name: Build
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ cd Build
+ make -j$(sysctl -n hw.ncpu)
+ cd ../Testing/
+ for d in ../Build/Tools/*; do
+ [ -d "$d" ] && export PATH="$(realpath "$d"):$PATH"
+ done
+ sh CreateAllProfiles.sh
+ sh RunTests.sh
+ PROFILE_COUNT=$(find . -iname "*.icc" | wc -l | tr -d ' ')
+ echo "### macOS Build Results" >> $GITHUB_STEP_SUMMARY
+ echo "- ✅ Build completed successfully" >> $GITHUB_STEP_SUMMARY
+ echo "- ICC profiles generated: $PROFILE_COUNT" >> $GITHUB_STEP_SUMMARY
+ echo "" >> $GITHUB_STEP_SUMMARY
+
+ - name: Verify JPEG Linkage
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ JPEG_DUMP="Build/Tools/IccJpegDump/iccJpegDump"
+ echo "### JPEG Binary Linkage" >> $GITHUB_STEP_SUMMARY
+ if [ -f "$JPEG_DUMP" ]; then
+ echo "| Binary | Linked JPEG Library |" >> $GITHUB_STEP_SUMMARY
+ echo "|--------|---------------------|" >> $GITHUB_STEP_SUMMARY
+ LINKED=$(otool -L "$JPEG_DUMP" | grep -i jpeg || echo "none found")
+ echo "| iccJpegDump | $LINKED |" >> $GITHUB_STEP_SUMMARY
+ else
+ echo "- ⚠️ iccJpegDump binary not found" >> $GITHUB_STEP_SUMMARY
+ fi
+ echo "" >> $GITHUB_STEP_SUMMARY
+
+ - name: Summary Report
+ if: always()
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ echo "### macOS Final Status" >> $GITHUB_STEP_SUMMARY
+ if test -f Build/CMakeCache.txt; then
+ echo "- ✅ CMakeCache.txt present" >> $GITHUB_STEP_SUMMARY
+ echo "- ✅ jpeg-turbo integration validated" >> $GITHUB_STEP_SUMMARY
+ else
+ echo "- ❌ Build failed" >> $GITHUB_STEP_SUMMARY
+ fi
+
+ linux:
+ name: "Linux ${{ matrix.compiler }} (jpeg-turbo)"
+ runs-on: ubuntu-latest
+ timeout-minutes: 20
+ strategy:
+ fail-fast: false
+ matrix:
+ compiler: [gcc, clang]
+ steps:
+ - name: Checkout
+ uses: actions/checkout@c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5
+
+ - name: Install Dependencies
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ sudo apt-get update
+ sudo apt-get install -y \
+ build-essential cmake gcc g++ clang clang-tools \
+ libpng-dev libxml2 libxml2-dev libtiff-dev libjpeg-dev \
+ nlohmann-json3-dev libwxgtk3.2-dev wx-common \
+ python3 python3-pip curl git llvm
+ echo "### Linux Dependencies" >> $GITHUB_STEP_SUMMARY
+ echo "| Package | Version |" >> $GITHUB_STEP_SUMMARY
+ echo "|---------|---------|" >> $GITHUB_STEP_SUMMARY
+ for pkg in libjpeg-dev libpng-dev libtiff-dev libxml2-dev; do
+ ver=$(dpkg -s "$pkg" 2>/dev/null | grep '^Version:' | cut -d' ' -f2 || echo "N/A")
+ echo "| $pkg | $ver |" >> $GITHUB_STEP_SUMMARY
+ done
+ echo "" >> $GITHUB_STEP_SUMMARY
+
+ - name: Set Compiler
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ if [ "${{ matrix.compiler }}" = "gcc" ]; then
+ echo "CC=gcc" >> $GITHUB_ENV
+ echo "CXX=g++" >> $GITHUB_ENV
+ else
+ echo "CC=clang" >> $GITHUB_ENV
+ echo "CXX=clang++" >> $GITHUB_ENV
+ fi
+
+ - name: CMake Configure
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ cd Build
+ cmake -DCMAKE_INSTALL_PREFIX=$HOME/.local \
+ -DCMAKE_BUILD_TYPE=Release \
+ -Wno-dev Cmake/
+ echo "### Linux CMake Configuration (${{ matrix.compiler }})" >> $GITHUB_STEP_SUMMARY
+ echo '```' >> $GITHUB_STEP_SUMMARY
+ grep -E 'JPEG_|JPEGLIB' CMakeCache.txt >> $GITHUB_STEP_SUMMARY || echo "No JPEG cache entries" >> $GITHUB_STEP_SUMMARY
+ echo '```' >> $GITHUB_STEP_SUMMARY
+ echo "" >> $GITHUB_STEP_SUMMARY
+
+ - name: Build
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ cd Build
+ make -j$(nproc)
+ cd ../Testing/
+ for d in ../Build/Tools/*; do
+ [ -d "$d" ] && export PATH="$(realpath "$d"):$PATH"
+ done
+ sh CreateAllProfiles.sh
+ sh RunTests.sh
+ PROFILE_COUNT=$(find . -iname "*.icc" | wc -l | tr -d ' ')
+ echo "### Linux Build Results (${{ matrix.compiler }})" >> $GITHUB_STEP_SUMMARY
+ echo "- ✅ Build completed successfully" >> $GITHUB_STEP_SUMMARY
+ echo "- ICC profiles generated: $PROFILE_COUNT" >> $GITHUB_STEP_SUMMARY
+ echo "" >> $GITHUB_STEP_SUMMARY
+
+ - name: Verify JPEG Linkage
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ JPEG_DUMP="Build/Tools/IccJpegDump/iccJpegDump"
+ echo "### JPEG Binary Linkage (${{ matrix.compiler }})" >> $GITHUB_STEP_SUMMARY
+ if [ -f "$JPEG_DUMP" ]; then
+ echo "| Binary | Linked JPEG Library |" >> $GITHUB_STEP_SUMMARY
+ echo "|--------|---------------------|" >> $GITHUB_STEP_SUMMARY
+ LINKED=$(ldd "$JPEG_DUMP" | grep -i jpeg || echo "none found")
+ echo "| iccJpegDump | $LINKED |" >> $GITHUB_STEP_SUMMARY
+ else
+ echo "- ⚠️ iccJpegDump binary not found" >> $GITHUB_STEP_SUMMARY
+ fi
+ echo "" >> $GITHUB_STEP_SUMMARY
+
+ - name: Summary Report
+ if: always()
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ echo "### Linux Final Status (${{ matrix.compiler }})" >> $GITHUB_STEP_SUMMARY
+ if test -f Build/CMakeCache.txt; then
+ echo "- ✅ CMakeCache.txt present" >> $GITHUB_STEP_SUMMARY
+ echo "- ✅ JPEG integration validated" >> $GITHUB_STEP_SUMMARY
+ else
+ echo "- ❌ Build failed" >> $GITHUB_STEP_SUMMARY
+ fi
diff --git a/.github/workflows/ci-clang-tidy-coreguidelines.yml b/.github/workflows/ci-clang-tidy-coreguidelines.yml
index 56ccab8a5..9ac0b292e 100644
--- a/.github/workflows/ci-clang-tidy-coreguidelines.yml
+++ b/.github/workflows/ci-clang-tidy-coreguidelines.yml
@@ -1,21 +1,16 @@
###############################################################
#
-## Copyright (©) 2025 International Color Consortium.
-## All rights reserved.
+## Copyright (©) 2025 International Color Consortium.
+## All rights reserved.
## https://color.org
#
#
-## Intent:iccdev-tidy-coreguidelines
-#
-## Last Updated: 02-DEC-2025 1700Z by David Hoyt
-# Add Permission Block
-#
-#
-#
-#
-#
-#
+## Intent: iccdev-tidy-coreguidelines
#
+## Last Updated: 2026-02-08 15:27:00 UTC
+# Analyze checked-out source (not external clone),
+# per-component and per-check breakdown,
+# hardened shell, separated steps.
#
###############################################################
@@ -24,14 +19,14 @@ name: iccdev-tidy-coreguidelines
permissions:
contents: read
pull-requests: read
-
+
on:
workflow_dispatch:
jobs:
- build:
+ clang-tidy:
runs-on: ubuntu-latest
- timeout-minutes: 20
+ timeout-minutes: 30
strategy:
matrix:
build_type: [Release]
@@ -39,91 +34,237 @@ jobs:
steps:
- name: Checkout repository
uses: actions/checkout@c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5
+
- name: Install dependencies
- shell: bash
+ shell: bash --noprofile --norc {0}
env:
- BASH_ENV: /dev/null
+ BASH_ENV: /dev/null
run: |
set -euo pipefail
- git config --global --add safe.directory "$GITHUB_WORKSPACE"
+ git config --add safe.directory "$PWD"
git config --global credential.helper ""
-
- # Clear the in-shell GITHUB_TOKEN
unset GITHUB_TOKEN || true
sudo apt-get update
- sudo apt-get install -y build-essential cmake git pkg-config
sudo apt-get install -y \
- build-essential cmake gcc g++ clang clang-tools \
- libpng-dev libxml2 libxml2-dev libtiff-dev \
+ build-essential cmake gcc g++ clang clang-tools clang-tidy \
+ libpng-dev libxml2 libxml2-dev libtiff-dev libjpeg-dev \
nlohmann-json3-dev libwxgtk3.2-dev wx-common \
- python3 python3-pip curl git llvm zsh
- git clone https://github.com/InternationalColorConsortium/iccDEV.git
- cd iccDEV
- BUILD_DIR="Build"
- CHECKS="modernize-*,readability-*,cppcoreguidelines-*"
- OUTDIR="tidy-out"
- mkdir -p "${OUTDIR}"
+ python3 curl git llvm jq
+ echo "### Environment" >> "$GITHUB_STEP_SUMMARY"
+ echo "| Tool | Version |" >> "$GITHUB_STEP_SUMMARY"
+ echo "|------|---------|" >> "$GITHUB_STEP_SUMMARY"
+ echo "| clang-tidy | $(clang-tidy --version 2>&1 | head -1) |" >> "$GITHUB_STEP_SUMMARY"
+ echo "| cmake | $(cmake --version | head -1) |" >> "$GITHUB_STEP_SUMMARY"
+ echo "" >> "$GITHUB_STEP_SUMMARY"
+
+ - name: CMake Configure (compile_commands.json)
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ cd Build
+ cmake Cmake \
+ -DCMAKE_BUILD_TYPE=${{ matrix.build_type }} \
+ -DCMAKE_EXPORT_COMPILE_COMMANDS=ON \
+ -Wno-dev
+ echo "✅ compile_commands.json generated with $(jq length compile_commands.json) translation units"
+
+ - name: Build
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
cd Build
- cmake Cmake -DCMAKE_EXPORT_COMPILE_COMMANDS=ON
make -j$(nproc)
- cd ..
-
- # Extract translation units
+
+ - name: Run clang-tidy (cppcoreguidelines)
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+
+ BUILD_DIR="Build"
+ CHECKS="-*,cppcoreguidelines-*"
+ OUTDIR="tidy-out/cppcoreguidelines"
+ mkdir -p "$OUTDIR"
+
jq -r '.[].file' "${BUILD_DIR}/compile_commands.json" \
| xargs -I{} -P"$(nproc)" sh -c '
f="{}"
base=$(basename "$f")
log="'"${OUTDIR}"'/${base}.log"
echo "[+] $(date +"%H:%M:%S") START $f"
- run-clang-tidy -p "'"${BUILD_DIR}"'" -checks="'"${CHECKS}"'" "$f" > "$log" 2>&1
+ clang-tidy -p "'"${BUILD_DIR}"'" --checks="'"${CHECKS}"'" "$f" > "$log" 2>&1 || true
echo "[+] $(date +"%H:%M:%S") DONE $f"
'
-
- - name: Upload build artifacts
+
+ - name: Run clang-tidy (modernize)
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+
+ BUILD_DIR="Build"
+ CHECKS="-*,modernize-*"
+ OUTDIR="tidy-out/modernize"
+ mkdir -p "$OUTDIR"
+
+ jq -r '.[].file' "${BUILD_DIR}/compile_commands.json" \
+ | xargs -I{} -P"$(nproc)" sh -c '
+ f="{}"
+ base=$(basename "$f")
+ log="'"${OUTDIR}"'/${base}.log"
+ echo "[+] $(date +"%H:%M:%S") START $f"
+ clang-tidy -p "'"${BUILD_DIR}"'" --checks="'"${CHECKS}"'" "$f" > "$log" 2>&1 || true
+ echo "[+] $(date +"%H:%M:%S") DONE $f"
+ '
+
+ - name: Run clang-tidy (readability)
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+
+ BUILD_DIR="Build"
+ CHECKS="-*,readability-*"
+ OUTDIR="tidy-out/readability"
+ mkdir -p "$OUTDIR"
+
+ jq -r '.[].file' "${BUILD_DIR}/compile_commands.json" \
+ | xargs -I{} -P"$(nproc)" sh -c '
+ f="{}"
+ base=$(basename "$f")
+ log="'"${OUTDIR}"'/${base}.log"
+ echo "[+] $(date +"%H:%M:%S") START $f"
+ clang-tidy -p "'"${BUILD_DIR}"'" --checks="'"${CHECKS}"'" "$f" > "$log" 2>&1 || true
+ echo "[+] $(date +"%H:%M:%S") DONE $f"
+ '
+
+ - name: Upload clang-tidy artifacts
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
with:
name: iccdev-clang-tidy-${{ matrix.build_type }}-linux
path: |
- iccDEV/tidy-out/*
+ tidy-out/**/*.log
if-no-files-found: warn
- - name: Generate clang-tidy report summary
- shell: bash
+ - name: Generate report summary
+ if: always()
+ shell: bash --noprofile --norc {0}
env:
BASH_ENV: /dev/null
run: |
set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
- echo "## 🧹 Clang-Tidy Summary — iccdev" >> "$GITHUB_STEP_SUMMARY"
- echo "" >> "$GITHUB_STEP_SUMMARY"
+ # Source trusted sanitizer from checked-out workspace
+ SANITIZER=".github/scripts/sanitize-sed.sh"
+ if [[ -f "$SANITIZER" ]]; then
+ # shellcheck disable=SC1090
+ source "$SANITIZER"
+ else
+ escape_html() {
+ local s="$1"
+ s="${s//&/&}"
+ s="${s///>}"
+ s="${s//\"/"}"
+ s="${s//\'/'}"
+ printf '%s' "$s"
+ }
+ sanitize_line() { escape_html "$1"; }
+ fi
- OUTDIR="iccDEV/tidy-out"
+ echo "## 🧹 Clang-Tidy Analysis Report" >> "$GITHUB_STEP_SUMMARY"
+ echo "" >> "$GITHUB_STEP_SUMMARY"
- if ! [ -d "$OUTDIR" ]; then
+ BASEDIR="tidy-out"
+ if ! [ -d "$BASEDIR" ]; then
echo "**No tidy output directory found.**" >> "$GITHUB_STEP_SUMMARY"
exit 0
fi
- total_logs=$(find "$OUTDIR" -type f -name "*.log" | wc -l | tr -d ' ')
- echo "**Total translation units analyzed:** $total_logs" >> "$GITHUB_STEP_SUMMARY"
+ # --- Per-category summary ---
+ echo "### Findings by Check Category" >> "$GITHUB_STEP_SUMMARY"
+ echo "" >> "$GITHUB_STEP_SUMMARY"
+ echo "| Category | Warnings | Errors | Files Analyzed |" >> "$GITHUB_STEP_SUMMARY"
+ echo "|----------|----------|--------|----------------|" >> "$GITHUB_STEP_SUMMARY"
+
+ GRAND_WARN=0
+ GRAND_ERR=0
+ for category in cppcoreguidelines modernize readability; do
+ CATDIR="$BASEDIR/$category"
+ if [ -d "$CATDIR" ]; then
+ files=$(find "$CATDIR" -type f -name "*.log" | wc -l | tr -d ' ')
+ warns=$(grep -rch "warning:" "$CATDIR" 2>/dev/null | paste -sd+ | bc 2>/dev/null || echo 0)
+ errs=$({ grep -rh "error:" "$CATDIR" 2>/dev/null || true; } | { grep -vc "warnings and" 2>/dev/null || true; })
+ echo "| $category | $warns | $errs | $files |" >> "$GITHUB_STEP_SUMMARY"
+ GRAND_WARN=$((GRAND_WARN + warns))
+ GRAND_ERR=$((GRAND_ERR + errs))
+ fi
+ done
+ echo "| **Total** | **$GRAND_WARN** | **$GRAND_ERR** | |" >> "$GITHUB_STEP_SUMMARY"
+ echo "" >> "$GITHUB_STEP_SUMMARY"
+
+ # --- Per-component breakdown ---
+ echo "### Findings by Source Component" >> "$GITHUB_STEP_SUMMARY"
echo "" >> "$GITHUB_STEP_SUMMARY"
+ echo "| Component | Warnings |" >> "$GITHUB_STEP_SUMMARY"
+ echo "|-----------|----------|" >> "$GITHUB_STEP_SUMMARY"
- # Count warnings/errors without parsing user-controlled filenames into the shell
- total_issues=$(grep -R "warning:" -H "$OUTDIR" | wc -l | tr -d ' ')
- echo "**Total warnings detected:** $total_issues" >> "$GITHUB_STEP_SUMMARY"
+ for component in IccProfLib IccXML Tools; do
+ count=$({ grep -rh "warning:.*\[" "$BASEDIR" 2>/dev/null || true; } | { grep -c "/${component}/" || true; })
+ echo "| $component | $count |" >> "$GITHUB_STEP_SUMMARY"
+ done
echo "" >> "$GITHUB_STEP_SUMMARY"
- echo "### Sample Files With Most Warnings" >> "$GITHUB_STEP_SUMMARY"
+ # --- Top 15 most frequent check names ---
+ echo "### Top 15 Most Frequent Checks" >> "$GITHUB_STEP_SUMMARY"
echo "" >> "$GITHUB_STEP_SUMMARY"
+ echo "| Count | Check |" >> "$GITHUB_STEP_SUMMARY"
+ echo "|-------|-------|" >> "$GITHUB_STEP_SUMMARY"
- # Top 10 files — safely aggregated
- grep -R "warning:" -H "$OUTDIR" \
- | cut -d: -f1 \
- | sort \
- | uniq -c \
- | sort -rn \
- | head -n 10 \
- | sed 's/^/ - /' >> "$GITHUB_STEP_SUMMARY"
+ { grep -roh '\[[-a-z]*\]' "$BASEDIR" 2>/dev/null || true; } \
+ | sort | uniq -c | sort -rn | head -15 > /tmp/tidy_checks.txt
+ while read -r cnt chk; do
+ echo "| $cnt | $chk |" >> "$GITHUB_STEP_SUMMARY"
+ done < /tmp/tidy_checks.txt
+ echo "" >> "$GITHUB_STEP_SUMMARY"
+ # --- Top 10 files with most warnings ---
+ echo "### Top 10 Files by Warning Count" >> "$GITHUB_STEP_SUMMARY"
echo "" >> "$GITHUB_STEP_SUMMARY"
- echo "✔ Report summary generated." >> "$GITHUB_STEP_SUMMARY"
+ echo "| Warnings | File |" >> "$GITHUB_STEP_SUMMARY"
+ echo "|----------|------|" >> "$GITHUB_STEP_SUMMARY"
+
+ { grep -rh "warning:.*\[" "$BASEDIR" 2>/dev/null || true; } \
+ | { grep -oP '[^ ]+\.(cpp|h)' || true; } \
+ | sort | uniq -c | sort -rn | head -10 > /tmp/tidy_files.txt
+ while read -r cnt fname; do
+ echo "| $cnt | $fname |" >> "$GITHUB_STEP_SUMMARY"
+ done < /tmp/tidy_files.txt
+ echo "" >> "$GITHUB_STEP_SUMMARY"
+
+ echo "✔ Report generated." >> "$GITHUB_STEP_SUMMARY"
diff --git a/.github/workflows/ci-code-coverage.yml b/.github/workflows/ci-code-coverage.yml
new file mode 100644
index 000000000..1b7f0fcb2
--- /dev/null
+++ b/.github/workflows/ci-code-coverage.yml
@@ -0,0 +1,298 @@
+###############################################################
+#
+# Copyright (c) 2026 International Color Consortium.
+# All rights reserved.
+# https://color.org
+#
+# Intent: Build iccDEV with Clang source-based coverage,
+# run full test suite + profile exerciser, generate
+# llvm-cov HTML and lcov summary reports
+#
+# Based on: research/iccanalyzer-lite-coverage-report.yml
+# Adapted: For cfl/ integrated build with ENABLE_COVERAGE
+#
+###############################################################
+
+name: Code Coverage Report
+
+permissions:
+ contents: read
+
+on:
+ workflow_dispatch:
+ pull_request:
+ branches: [ master, cfl ]
+
+concurrency:
+ group: coverage-${{ github.ref }}
+ cancel-in-progress: true
+
+jobs:
+ coverage:
+ name: Coverage Report
+ runs-on: ubuntu-24.04
+ timeout-minutes: 30
+ defaults:
+ run:
+ shell: bash --noprofile --norc {0}
+
+ steps:
+ - name: Checkout repository
+ uses: actions/checkout@v4
+ with:
+ fetch-depth: 0
+ persist-credentials: false
+
+ - name: Install dependencies
+ env:
+ DEBIAN_FRONTEND: noninteractive
+ run: |
+ set -euo pipefail
+ sudo apt-get update -qq
+ sudo apt-get install -y --no-install-recommends \
+ build-essential cmake \
+ clang-18 llvm-18 \
+ libxml2-dev libtiff-dev libjpeg-dev libpng-dev \
+ zlib1g-dev nlohmann-json3-dev \
+ lcov
+
+ - name: Build with coverage instrumentation
+ env:
+ CC: clang-18
+ CXX: clang++-18
+ run: |
+ set -euo pipefail
+ mkdir -p build-coverage && cd build-coverage
+ cmake ../Build/Cmake \
+ -DCMAKE_BUILD_TYPE=Debug \
+ -DCMAKE_C_COMPILER=clang-18 \
+ -DCMAKE_CXX_COMPILER=clang++-18 \
+ -DENABLE_COVERAGE=ON \
+ -DENABLE_TOOLS=ON \
+ -DENABLE_STATIC_LIBS=ON \
+ -DENABLE_TESTS=OFF \
+ -Wno-dev
+ make -j$(nproc)
+
+ # Verify coverage instrumentation
+ TOOL=$(find . -name "iccDumpProfile" -type f -executable | head -1)
+ if [ -z "$TOOL" ]; then
+ echo "::error::No iccDumpProfile binary found"
+ exit 1
+ fi
+ echo "tool_path=$(pwd)/$TOOL" >> $GITHUB_ENV
+ echo "build_dir=$(pwd)" >> $GITHUB_ENV
+
+ # Verify instrumentation flags
+ echo "Checking coverage flags..."
+ grep -r "fprofile-instr-generate" CMakeFiles/*/flags.make | head -3 || true
+
+ # Count libraries and tools
+ LIB_COUNT=$(find . -name "*.a" | wc -l)
+ TOOL_COUNT=$(find . -path "*/Tools/*" -type f -executable | wc -l)
+ echo "Built: $LIB_COUNT libraries, $TOOL_COUNT tools"
+
+ - name: Create test profiles
+ run: |
+ set -euo pipefail
+ export LLVM_PROFILE_FILE="${{ github.workspace }}/profraw/create-%p-%m.profraw"
+ mkdir -p "${{ github.workspace }}/profraw"
+
+ # CreateAllProfiles.sh expects ../Build/Tools — symlink build-coverage
+ ln -sfn build-coverage Build
+
+ # Add build tools to PATH
+ BUILD_DIR="${{ env.build_dir }}"
+ for d in $(find "$BUILD_DIR" -path "*/Tools/*" -type f -executable -exec dirname {} \; | sort -u); do
+ PATH="$d:$PATH"
+ done
+ export PATH
+
+ cd Testing
+ bash CreateAllProfiles.sh 2>&1 | tail -20
+ PROFILE_COUNT=$(find . -name "*.icc" | wc -l)
+ echo "Created $PROFILE_COUNT ICC profiles"
+ echo "profile_count=$PROFILE_COUNT" >> $GITHUB_ENV
+
+ - name: Run test suite
+ run: |
+ set -euo pipefail
+ export LLVM_PROFILE_FILE="${{ github.workspace }}/profraw/test-%p-%m.profraw"
+
+ BUILD_DIR="${{ env.build_dir }}"
+ for d in $(find "$BUILD_DIR" -path "*/Tools/*" -type f -executable -exec dirname {} \; | sort -u); do
+ PATH="$d:$PATH"
+ done
+ export PATH
+
+ cd Testing
+ bash RunTests.sh 2>&1 | tail -40
+ echo "Test suite complete"
+
+ - name: Exercise all profiles with IccDumpProfile
+ run: |
+ set -euo pipefail
+ export LLVM_PROFILE_FILE="${{ github.workspace }}/profraw/dump-%p-%m.profraw"
+
+ TOOL="${{ env.tool_path }}"
+ TOTAL=0
+ PASS=0
+ FAIL=0
+
+ while IFS= read -r icc; do
+ TOTAL=$((TOTAL + 1))
+ if timeout 10s "$TOOL" "$icc" > /dev/null 2>&1; then
+ PASS=$((PASS + 1))
+ else
+ FAIL=$((FAIL + 1))
+ fi
+ done < <(find Testing -name "*.icc" -type f)
+
+ echo "IccDumpProfile: $TOTAL profiles, $PASS pass, $FAIL fail"
+ echo "dump_total=$TOTAL" >> $GITHUB_ENV
+ echo "dump_pass=$PASS" >> $GITHUB_ENV
+ echo "dump_fail=$FAIL" >> $GITHUB_ENV
+
+ - name: Exercise XML round-trip tools
+ run: |
+ set -euo pipefail
+ export LLVM_PROFILE_FILE="${{ github.workspace }}/profraw/xml-%p-%m.profraw"
+
+ BUILD_DIR="${{ env.build_dir }}"
+ TO_XML=$(find "$BUILD_DIR" -name "iccToXml" -type f -executable -print -quit)
+ FROM_XML=$(find "$BUILD_DIR" -name "iccFromXml" -type f -executable -print -quit)
+ ROUNDTRIP=$(find "$BUILD_DIR" -name "iccRoundTrip" -type f -executable -print -quit)
+
+ CONVERTED=0
+ # Convert a sample of profiles to XML and back
+ mapfile -t ICC_FILES < <(find Testing -name "*.icc" -type f | shuf -n 50)
+ for icc in "${ICC_FILES[@]}"; do
+ XML_OUT="/tmp/$(basename "$icc" .icc).xml"
+ ICC_OUT="/tmp/$(basename "$icc")"
+ if [ -n "$TO_XML" ] && timeout 10s "$TO_XML" "$icc" "$XML_OUT" > /dev/null 2>&1; then
+ CONVERTED=$((CONVERTED + 1))
+ if [ -n "$FROM_XML" ]; then
+ timeout 10s "$FROM_XML" "$XML_OUT" "$ICC_OUT" > /dev/null 2>&1 || true
+ fi
+ fi
+ rm -f "$XML_OUT" "$ICC_OUT"
+ done
+
+ # Run roundtrip on sample profiles
+ if [ -n "$ROUNDTRIP" ]; then
+ mapfile -t RT_FILES < <(find Testing -name "*.icc" -type f | shuf -n 30)
+ for icc in "${RT_FILES[@]}"; do
+ timeout 10s "$ROUNDTRIP" "$icc" > /dev/null 2>&1 || true
+ done
+ fi
+
+ echo "XML round-trip: $CONVERTED conversions complete"
+
+ - name: Merge profdata and generate report
+ run: |
+ set -euo pipefail
+ mkdir -p coverage-report
+
+ # Merge all .profraw files
+ PROFRAW_COUNT=$(find "${{ github.workspace }}/profraw" -name "*.profraw" 2>/dev/null | wc -l)
+ echo "Found $PROFRAW_COUNT .profraw files"
+
+ if [ "$PROFRAW_COUNT" -eq 0 ]; then
+ echo "::error::No profraw files generated — coverage instrumentation may have failed"
+ exit 1
+ fi
+
+ llvm-profdata-18 merge \
+ -sparse \
+ "${{ github.workspace }}"/profraw/*.profraw \
+ -o coverage-report/merged.profdata
+
+ echo "Merged profdata: $(stat -c%s coverage-report/merged.profdata) bytes"
+
+ # Find all instrumented binaries
+ BUILD_DIR="${{ env.build_dir }}"
+ BINARIES=$(find "$BUILD_DIR" -type f -executable \( -path "*/Tools/*" -o -name "*.a" \) | head -20)
+ MAIN_BIN="${{ env.tool_path }}"
+
+ # Build object list for llvm-cov (all tool binaries)
+ OBJECT_ARGS=""
+ for bin in $(find "$BUILD_DIR" -path "*/Tools/*" -type f -executable); do
+ if [ "$bin" != "$MAIN_BIN" ]; then
+ OBJECT_ARGS="$OBJECT_ARGS -object=$bin"
+ fi
+ done
+
+ # Generate text report
+ llvm-cov-18 report \
+ "$MAIN_BIN" $OBJECT_ARGS \
+ -instr-profile=coverage-report/merged.profdata \
+ -ignore-filename-regex='(third_party|/usr/|test)' \
+ 2>&1 | tee coverage-report/coverage-summary.txt
+
+ # Generate HTML report
+ llvm-cov-18 show \
+ "$MAIN_BIN" $OBJECT_ARGS \
+ -instr-profile=coverage-report/merged.profdata \
+ -format=html \
+ -output-dir=coverage-report/html \
+ -show-line-counts-or-regions \
+ -show-expansions \
+ -ignore-filename-regex='(third_party|/usr/|test)' \
+ 2>&1 | tail -5
+
+ # Generate lcov-compatible export
+ llvm-cov-18 export \
+ "$MAIN_BIN" $OBJECT_ARGS \
+ -instr-profile=coverage-report/merged.profdata \
+ -format=lcov \
+ -ignore-filename-regex='(third_party|/usr/|test)' \
+ > coverage-report/lcov.info 2>/dev/null || true
+
+ # Summary stats
+ if [ -d coverage-report/html ]; then
+ HTML_COUNT=$(find coverage-report/html -name "*.html" | wc -l)
+ echo "HTML report: $HTML_COUNT files"
+ fi
+ LCOV_RECORDS=$(grep -c "^SF:" coverage-report/lcov.info 2>/dev/null || echo 0)
+ echo "LCOV: $LCOV_RECORDS source file records"
+
+ - name: Report to summary
+ if: always()
+ run: |
+ set -euo pipefail
+ {
+ echo "## Code Coverage Report"
+ echo ""
+ echo "### Test Execution"
+ echo "| Metric | Value |"
+ echo "|--------|-------|"
+ echo "| ICC Profiles Created | ${{ env.profile_count }} |"
+ echo "| IccDumpProfile Total | ${{ env.dump_total }} |"
+ echo "| IccDumpProfile Pass | ${{ env.dump_pass }} |"
+ echo "| IccDumpProfile Fail | ${{ env.dump_fail }} |"
+ echo ""
+ echo "### Coverage Summary"
+ echo '```'
+ } >> $GITHUB_STEP_SUMMARY
+
+ if [ -f coverage-report/coverage-summary.txt ]; then
+ cat coverage-report/coverage-summary.txt >> $GITHUB_STEP_SUMMARY
+ else
+ echo "No coverage data available" >> $GITHUB_STEP_SUMMARY
+ fi
+
+ {
+ echo '```'
+ echo ""
+ echo "### Artifacts"
+ echo "- \`coverage-report\`: llvm-cov HTML report, lcov.info, text summary"
+ } >> $GITHUB_STEP_SUMMARY
+
+ - name: Upload coverage report
+ if: always()
+ uses: actions/upload-artifact@v4
+ with:
+ name: coverage-report
+ path: coverage-report/
+ retention-days: 30
+ if-no-files-found: warn
diff --git a/.github/workflows/ci-comprehensive-build-test.yml b/.github/workflows/ci-comprehensive-build-test.yml
new file mode 100644
index 000000000..95abed602
--- /dev/null
+++ b/.github/workflows/ci-comprehensive-build-test.yml
@@ -0,0 +1,1055 @@
+###############################################################
+# Copyright (c) 2026 International Color Consortium
+#
+# Intent: ci-build-matrix
+# Tests all build configurations, sanitizers, and options
+# This workflow will replace ci-pr-actions in time
+#
+# Last Updated: 2026-02-08 15:24:37 UTC by David Hoyt
+#
+# All PR _must_ PASS this workflow
+#
+#
+#
+#
+###############################################################
+
+name: "ci-build-matrix"
+
+permissions:
+ contents: read
+ pull-requests: read
+
+on:
+ workflow_dispatch:
+
+concurrency:
+ group: comprehensive-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+ cancel-in-progress: true
+
+env:
+ GH_REPO: ${{ github.repository }}
+ GH_NO_UPDATE_NOTIFIER: 1
+ GH_PROMPT_DISABLED: 1
+ RUN_URL: ${{ github.event.repository.html_url }}/actions/runs/${{ github.run_id }}
+
+jobs:
+ #############################################################################
+ # Job 1: Standard Project Builds (Tools Only - No Fuzzing)
+ #############################################################################
+ standard-builds:
+ name: "Standard • ${{ matrix.os }} • ${{ matrix.compiler }} • ${{ matrix.build_type }}"
+ runs-on: ${{ matrix.os }}
+ timeout-minutes: 25
+ defaults:
+ run:
+ shell: bash --noprofile --norc {0}
+
+ strategy:
+ fail-fast: false
+ matrix:
+ os: [ubuntu-latest, macos-latest]
+ compiler: [gcc, clang]
+ build_type: [Release, Debug, RelWithDebInfo]
+ exclude:
+ - os: macos-latest
+ compiler: gcc
+
+ steps:
+ - name: Checkout
+ uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+ with:
+ fetch-depth: 0
+ persist-credentials: false
+
+ - name: Cache Dependencies (Linux)
+ if: runner.os == 'Linux'
+ uses: actions/cache@v4
+ with:
+ path: |
+ /var/cache/apt/archives
+ ~/.cache/ccache
+ key: ${{ runner.os }}-deps-${{ matrix.compiler }}-${{ hashFiles('Build/Cmake/CMakeLists.txt') }}
+ restore-keys: |
+ ${{ runner.os }}-deps-${{ matrix.compiler }}-
+ ${{ runner.os }}-deps-
+
+ - name: Cache Dependencies (macOS)
+ if: runner.os == 'macOS'
+ uses: actions/cache@v4
+ with:
+ path: |
+ ~/Library/Caches/Homebrew
+ ~/.cache/ccache
+ key: ${{ runner.os }}-deps-${{ matrix.compiler }}-${{ hashFiles('Build/Cmake/CMakeLists.txt') }}
+ restore-keys: |
+ ${{ runner.os }}-deps-${{ matrix.compiler }}-
+ ${{ runner.os }}-deps-
+
+ - name: Configure Git Environment
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --global --add safe.directory "$GITHUB_WORKSPACE"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+
+ - name: Install Dependencies (Linux)
+ if: runner.os == 'Linux'
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ sudo apt-get update -qq
+ sudo apt-get install -y \
+ build-essential cmake gcc g++ clang ccache \
+ libpng-dev libxml2-dev libtiff-dev \
+ nlohmann-json3-dev
+ ccache --zero-stats || true
+
+ - name: Install Dependencies (macOS)
+ if: runner.os == 'macOS'
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ brew install cmake llvm libpng libtiff libxml2 nlohmann-json ccache
+ ccache --zero-stats || true
+
+ - name: Disable wxWidgets for CFL
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ sed -i.bak 's/^ find_package(wxWidgets COMPONENTS core base REQUIRED)/ # find_package(wxWidgets COMPONENTS core base REQUIRED) # Disabled for CFL/g' Build/Cmake/CMakeLists.txt
+ sed -i.bak 's/^ ADD_SUBDIRECTORY(Tools\/wxProfileDump)/ # ADD_SUBDIRECTORY(Tools\/wxProfileDump) # Disabled for CFL/g' Build/Cmake/CMakeLists.txt
+ sed -i.bak 's/^ message(FATAL_ERROR "wxWidgets not found/ # message(FATAL_ERROR "wxWidgets not found/g' Build/Cmake/CMakeLists.txt
+
+ - name: Set Compiler
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ if [ "${{ matrix.compiler }}" = "gcc" ]; then
+ echo "CC=gcc" >> $GITHUB_ENV
+ echo "CXX=g++" >> $GITHUB_ENV
+ else
+ echo "CC=clang" >> $GITHUB_ENV
+ echo "CXX=clang++" >> $GITHUB_ENV
+ fi
+
+ - name: Configure CMake
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ mkdir -p Build && cd Build
+ cmake ../Build/Cmake \
+ -DCMAKE_BUILD_TYPE=${{ matrix.build_type }} \
+ -DENABLE_SHARED_LIBS=ON \
+ -DENABLE_STATIC_LIBS=ON \
+ -DENABLE_TOOLS=ON
+
+ - name: Build
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+
+ # Enable ccache if available
+ if command -v ccache >/dev/null 2>&1; then
+ export PATH="/usr/lib/ccache:/usr/local/opt/ccache/libexec:$PATH"
+ export CC="ccache ${{ matrix.compiler == 'gcc' && 'gcc' || 'clang' }}"
+ export CXX="ccache ${{ matrix.compiler == 'gcc' && 'g++' || 'clang++' }}"
+ fi
+
+ cd Build
+ echo "::group::Build Output"
+ BUILD_START=$(date +%s)
+ make -j$(nproc || sysctl -n hw.logicalcpu) 2>&1 | tee build.log
+ BUILD_END=$(date +%s)
+ echo "::endgroup::"
+
+ BUILD_TIME=$((BUILD_END - BUILD_START))
+ echo "::notice title=Build Time::Build completed in ${BUILD_TIME}s"
+
+ if grep -iE '(error|failed|undefined reference|cannot find)' build.log; then
+ echo "::error title=Build Failed::Build errors detected in log"
+ exit 1
+ fi
+
+ # Show ccache stats if available
+ if command -v ccache >/dev/null 2>&1; then
+ echo "::group::ccache Statistics"
+ ccache --show-stats || true
+ echo "::endgroup::"
+ fi
+
+ - name: Upload Build Artifacts (on failure)
+ if: failure()
+ uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+ with:
+ name: build-logs-${{ matrix.os }}-${{ matrix.compiler }}-${{ matrix.build_type }}
+ path: |
+ Build/build.log
+ Build/CMakeCache.txt
+ Build/CMakeFiles/CMakeError.log
+ Build/CMakeFiles/CMakeOutput.log
+ retention-days: 7
+
+ - name: Upload Build Artifacts (on success)
+ if: success()
+ uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+ with:
+ name: build-${{ matrix.os }}-${{ matrix.compiler }}-${{ matrix.build_type }}
+ path: |
+ Build/Tools/IccApplyNamedCmm/**/IccApplyNamedCmm
+ Build/Tools/IccDumpProfile/**/IccDumpProfile
+ Build/Tools/IccFromXml/**/IccFromXml
+ Build/Tools/IccToXml/**/IccToXml
+ Build/IccProfLib/libIccProfLib2*
+ Build/IccXML/libIccXML2*
+ if-no-files-found: warn
+ retention-days: 14
+ compression-level: 9
+
+ - name: Test Profiles
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ cd Testing
+ for d in ../Build/Tools/*; do
+ [ -d "$d" ] && export PATH="$(realpath "$d"):$PATH"
+ done
+ sh CreateAllProfiles.sh
+ PROFILE_COUNT=$(find . -name "*.icc" | wc -l)
+ echo "Created $PROFILE_COUNT profiles"
+ if [ "$PROFILE_COUNT" -eq 0 ]; then
+ echo "ERROR: No profiles created"
+ exit 1
+ fi
+
+ #############################################################################
+ # Job 2: Fuzzer Builds (Debug + Full Instrumentation)
+ #############################################################################
+ fuzzer-builds:
+ name: "Fuzzer • ${{ matrix.os }} • Debug+Instrumentation"
+ runs-on: ${{ matrix.os }}
+ timeout-minutes: 30
+ defaults:
+ run:
+ shell: bash --noprofile --norc {0}
+
+ strategy:
+ fail-fast: false
+ matrix:
+ os: [ubuntu-latest]
+
+ steps:
+ - name: Checkout
+ uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+ with:
+ fetch-depth: 0
+ persist-credentials: false
+
+ - name: Cache Dependencies
+ uses: actions/cache@v4
+ with:
+ path: |
+ /var/cache/apt/archives
+ ~/.cache/ccache
+ key: fuzzer-deps-${{ hashFiles('Build/Cmake/CMakeLists.txt', 'Testing/Fuzzing/CMakeLists.txt') }}
+ restore-keys: |
+ fuzzer-deps-
+
+ - name: Configure Git Environment
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --global --add safe.directory "$GITHUB_WORKSPACE"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+
+ - name: Install Dependencies
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ sudo apt-get update -qq
+ sudo apt-get install -y \
+ build-essential cmake clang llvm ccache \
+ libpng-dev libxml2-dev libtiff-dev nlohmann-json3-dev
+ ccache --zero-stats || true
+
+ - name: Disable wxWidgets for CFL
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ sed -i 's/^ find_package(wxWidgets COMPONENTS core base REQUIRED)/# find_package(wxWidgets COMPONENTS core base REQUIRED) # Disabled for CFL/g' Build/Cmake/CMakeLists.txt
+ sed -i 's/^ ADD_SUBDIRECTORY(Tools\/wxProfileDump)/# ADD_SUBDIRECTORY(Tools\/wxProfileDump) # Disabled for CFL/g' Build/Cmake/CMakeLists.txt
+ sed -i 's/^ message(FATAL_ERROR "wxWidgets not found/ # message(FATAL_ERROR "wxWidgets not found/g' Build/Cmake/CMakeLists.txt
+
+ - name: Configure Fuzzer Build
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ mkdir -p Build-fuzzing && cd Build-fuzzing
+ CC=clang CXX=clang++ cmake ../Build/Cmake \
+ -DCMAKE_BUILD_TYPE=Debug \
+ -DENABLE_FUZZING=ON \
+ -DENABLE_STATIC_LIBS=ON \
+ -DENABLE_SHARED_LIBS=ON \
+ -DENABLE_TOOLS=OFF
+
+ - name: Build Fuzzers
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+
+ # Enable ccache
+ if command -v ccache >/dev/null 2>&1; then
+ export PATH="/usr/lib/ccache:$PATH"
+ export CC="ccache clang"
+ export CXX="ccache clang++"
+ fi
+
+ cd Build-fuzzing
+ echo "::group::Fuzzer Build Output"
+ BUILD_START=$(date +%s)
+ make -j$(nproc) 2>&1 | tee build-fuzzing.log
+ BUILD_END=$(date +%s)
+ echo "::endgroup::"
+
+ BUILD_TIME=$((BUILD_END - BUILD_START))
+ echo "::notice title=Fuzzer Build Time::Fuzzer build completed in ${BUILD_TIME}s"
+
+ if grep -iE '(error|failed|undefined reference|cannot find)' build-fuzzing.log; then
+ echo "::error title=Fuzzer Build Failed::Fuzzer build errors detected"
+ exit 1
+ fi
+
+ # Show ccache stats
+ if command -v ccache >/dev/null 2>&1; then
+ echo "::group::ccache Statistics"
+ ccache --show-stats || true
+ echo "::endgroup::"
+ fi
+
+ - name: Verify Fuzzer Build
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ FUZZER_COUNT=$(ls Build-fuzzing/Testing/Fuzzing/icc_*_fuzzer 2>/dev/null | wc -l)
+ echo "::notice title=Fuzzer Count::Built $FUZZER_COUNT fuzzers"
+ # Note: Fuzzer count varies by platform and configuration
+ # Just verify at least 1 fuzzer was built
+ if [ "$FUZZER_COUNT" -lt 1 ]; then
+ echo "::error title=Fuzzer Verification Failed::Expected at least 1 fuzzer, got $FUZZER_COUNT"
+ exit 1
+ fi
+
+ - name: Upload Fuzzer Build Artifacts (on failure)
+ if: failure()
+ uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+ with:
+ name: fuzzer-build-logs
+ path: |
+ Build-fuzzing/build-fuzzing.log
+ Build-fuzzing/CMakeCache.txt
+ Build-fuzzing/CMakeFiles/CMakeError.log
+ Build-fuzzing/CMakeFiles/CMakeOutput.log
+ Build-fuzzing/Testing/Fuzzing/*.log
+ retention-days: 7
+
+ - name: Upload Fuzzer Executables (on success)
+ if: success()
+ uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+ with:
+ name: fuzzer-executables-debug-instrumentation
+ path: Build-fuzzing/Testing/Fuzzing/*_fuzzer
+ retention-days: 14
+ compression-level: 9
+
+ - name: Test Fuzzers
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ cd Build-fuzzing/Testing/Fuzzing
+
+ # Verify all 14 fuzzers are built and executable
+ EXPECTED_FUZZERS="icc_apply_fuzzer icc_applynamedcmm_fuzzer icc_applyprofiles_fuzzer icc_calculator_fuzzer icc_dump_fuzzer icc_fromxml_fuzzer icc_io_fuzzer icc_link_fuzzer icc_multitag_fuzzer icc_profile_fuzzer icc_roundtrip_fuzzer icc_spectral_fuzzer icc_toxml_fuzzer icc_v5dspobs_fuzzer"
+
+ PASS=0
+ FAIL=0
+ for f in $EXPECTED_FUZZERS; do
+ if [ -x "$f" ]; then
+ PASS=$((PASS + 1))
+ echo "✓ $f"
+ else
+ FAIL=$((FAIL + 1))
+ echo "✗ $f (not found or not executable)"
+ fi
+ done
+
+ echo "::notice title=Fuzzer Build Verification::$PASS of 14 fuzzers built successfully"
+ if [ "$FAIL" -gt 0 ]; then
+ echo "::error title=Fuzzer Build Failed::$FAIL fuzzers missing or not executable"
+ exit 1
+ fi
+
+ #############################################################################
+ # Job 3: Sanitizer Builds (Individual Sanitizers)
+ #############################################################################
+ sanitizer-builds:
+ name: "Sanitizer • ${{ matrix.sanitizer }} • ${{ matrix.build_type }}"
+ runs-on: ubuntu-latest
+ timeout-minutes: 25
+ defaults:
+ run:
+ shell: bash --noprofile --norc {0}
+
+ strategy:
+ fail-fast: false
+ matrix:
+ build_type: [Debug, RelWithDebInfo]
+ sanitizer:
+ - asan
+ - ubsan
+ - asan-ubsan
+ exclude:
+ - sanitizer: asan-ubsan
+ build_type: RelWithDebInfo
+
+ steps:
+ - name: Checkout
+ uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+ with:
+ fetch-depth: 0
+ persist-credentials: false
+
+ - name: Cache Dependencies
+ uses: actions/cache@v4
+ with:
+ path: |
+ /var/cache/apt/archives
+ ~/.cache/ccache
+ key: sanitizer-deps-${{ matrix.sanitizer }}-${{ hashFiles('Build/Cmake/CMakeLists.txt') }}
+ restore-keys: |
+ sanitizer-deps-${{ matrix.sanitizer }}-
+ sanitizer-deps-
+
+ - name: Configure Git Environment
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --global --add safe.directory "$GITHUB_WORKSPACE"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+
+ - name: Install Dependencies
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ sudo apt-get update -qq
+ sudo apt-get install -y \
+ build-essential cmake clang llvm \
+ libpng-dev libxml2-dev libtiff-dev nlohmann-json3-dev
+
+ - name: Disable wxWidgets for CFL
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ sed -i 's/^ find_package(wxWidgets COMPONENTS core base REQUIRED)/# find_package(wxWidgets COMPONENTS core base REQUIRED) # Disabled for CFL/g' Build/Cmake/CMakeLists.txt
+ sed -i 's/^ ADD_SUBDIRECTORY(Tools\/wxProfileDump)/# ADD_SUBDIRECTORY(Tools\/wxProfileDump) # Disabled for CFL/g' Build/Cmake/CMakeLists.txt
+ sed -i 's/^ message(FATAL_ERROR "wxWidgets not found/ # message(FATAL_ERROR "wxWidgets not found/g' Build/Cmake/CMakeLists.txt
+
+ - name: Configure with Sanitizer
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ mkdir -p Build && cd Build
+
+ case "${{ matrix.sanitizer }}" in
+ asan)
+ OPTS="-DENABLE_ASAN=ON"
+ ;;
+ ubsan)
+ OPTS="-DENABLE_UBSAN=ON"
+ ;;
+ asan-ubsan)
+ OPTS="-DENABLE_ASAN=ON -DENABLE_UBSAN=ON"
+ ;;
+ esac
+
+ CC=clang CXX=clang++ cmake ../Build/Cmake \
+ -DCMAKE_BUILD_TYPE=${{ matrix.build_type }} \
+ $OPTS
+
+ - name: Build with Sanitizer
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ cd Build
+ make -j$(nproc) 2>&1 | tee build.log
+ if grep -iE 'error:' build.log; then
+ echo "ERROR: Build failed"
+ exit 1
+ fi
+
+ - name: Test with Sanitizer
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ cd Testing
+ for d in ../Build/Tools/*; do
+ [ -d "$d" ] && export PATH="$(realpath "$d"):$PATH"
+ done
+ timeout 300 sh CreateAllProfiles.sh || echo "Profile creation timed out (acceptable for sanitizer builds)"
+
+ - name: Upload Sanitizer Build Artifacts
+ if: always()
+ uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+ with:
+ name: sanitizer-${{ matrix.sanitizer }}-${{ matrix.build_type }}
+ path: |
+ Build/Tools/IccApplyNamedCmm/IccApplyNamedCmm/IccApplyNamedCmm
+ Build/Tools/IccDumpProfile/IccDumpProfile/IccDumpProfile
+ Build/IccProfLib/libIccProfLib2*
+ Build/build.log
+ if-no-files-found: warn
+ retention-days: 7
+ compression-level: 9
+
+ #############################################################################
+ # Job 4: Build Option Matrix (Test Each Option Independently)
+ #############################################################################
+ option-matrix:
+ name: "Option • ${{ matrix.option_name }}"
+ runs-on: ubuntu-latest
+ timeout-minutes: 20
+ defaults:
+ run:
+ shell: bash --noprofile --norc {0}
+
+ strategy:
+ fail-fast: false
+ matrix:
+ include:
+ - option_name: "VERBOSE_CONFIG=ON"
+ cmake_opts: "-DVERBOSE_CONFIG=ON"
+ - option_name: "ENABLE_COVERAGE=ON"
+ cmake_opts: "-DENABLE_COVERAGE=ON"
+ - option_name: "ICC_ENABLE_ASSERTS=ON"
+ cmake_opts: "-DICC_ENABLE_ASSERTS=ON"
+ - option_name: "ICC_TRACE_NAN_ENABLED=ON"
+ cmake_opts: "-DICC_TRACE_NAN_ENABLED=ON"
+ - option_name: "SHARED_ONLY"
+ cmake_opts: "-DENABLE_SHARED_LIBS=ON -DENABLE_STATIC_LIBS=OFF"
+ - option_name: "STATIC_ONLY"
+ cmake_opts: "-DENABLE_SHARED_LIBS=OFF -DENABLE_STATIC_LIBS=ON"
+
+ steps:
+ - name: Checkout
+ uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+ with:
+ fetch-depth: 0
+ persist-credentials: false
+
+ - name: Configure Git Environment
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --global --add safe.directory "$GITHUB_WORKSPACE"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+
+ - name: Install Dependencies
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ sudo apt-get update -qq
+ sudo apt-get install -y \
+ build-essential cmake clang \
+ libpng-dev libxml2-dev libtiff-dev nlohmann-json3-dev
+
+ - name: Disable wxWidgets for CFL
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ sed -i 's/^ find_package(wxWidgets COMPONENTS core base REQUIRED)/# find_package(wxWidgets COMPONENTS core base REQUIRED) # Disabled for CFL/g' Build/Cmake/CMakeLists.txt
+ sed -i 's/^ ADD_SUBDIRECTORY(Tools\/wxProfileDump)/# ADD_SUBDIRECTORY(Tools\/wxProfileDump) # Disabled for CFL/g' Build/Cmake/CMakeLists.txt
+ sed -i 's/^ message(FATAL_ERROR "wxWidgets not found/ # message(FATAL_ERROR "wxWidgets not found/g' Build/Cmake/CMakeLists.txt
+
+ - name: Configure with Option
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ mkdir -p Build && cd Build
+ cmake Cmake/ \
+ -DCMAKE_BUILD_TYPE=Release \
+ ${{ matrix.cmake_opts }}
+
+ - name: Build
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ cd Build
+ make -j$(nproc) 2>&1 | tee build.log
+ if grep -iE 'error:' build.log; then
+ echo "ERROR: Build failed"
+ exit 1
+ fi
+
+ #############################################################################
+ # Job 5: Windows Build (MSVC)
+ #############################################################################
+ windows-build:
+ name: "Windows • MSVC • ${{ matrix.build_type }}"
+ runs-on: windows-latest
+ timeout-minutes: 30
+ env:
+ POWERSHELL_TELEMETRY_OPTOUT: "1"
+ defaults:
+ run:
+ shell: pwsh
+
+ strategy:
+ fail-fast: false
+ matrix:
+ build_type: [Release, Debug]
+
+ steps:
+ - name: Checkout
+ uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+ with:
+ fetch-depth: 0
+ persist-credentials: false
+
+ - name: Configure Git Environment
+ shell: pwsh
+ run: |
+ Set-StrictMode -Version Latest
+ $ErrorActionPreference = 'Stop'
+ $ProgressPreference = 'SilentlyContinue'
+ if (Test-Path env:GITHUB_TOKEN) { Remove-Item env:GITHUB_TOKEN -ErrorAction SilentlyContinue }
+ git config --global --add safe.directory "$env:GITHUB_WORKSPACE"
+ git config --global credential.helper ""
+
+ - name: Setup MSBuild
+ uses: microsoft/setup-msbuild@v2
+
+ - name: Install Dependencies
+ shell: pwsh
+ run: |
+ Set-StrictMode -Version Latest
+ $ErrorActionPreference = 'Stop'
+ $ProgressPreference = 'SilentlyContinue'
+ if (Test-Path Env:GITHUB_TOKEN) { Remove-Item Env:GITHUB_TOKEN -ErrorAction SilentlyContinue }
+ Write-Host "Fetching dependencies..."
+ Start-BitsTransfer -Source "https://github.com/InternationalColorConsortium/iccDEV/releases/download/v2.3.1/vcpkg-exported-deps.zip" -Destination "deps.zip"
+ tar -xf deps.zip
+
+ - name: Configure
+ shell: pwsh
+ run: |
+ Set-StrictMode -Version Latest
+ $ErrorActionPreference = 'Stop'
+ $ProgressPreference = 'SilentlyContinue'
+ if (Test-Path Env:GITHUB_TOKEN) { Remove-Item Env:GITHUB_TOKEN -ErrorAction SilentlyContinue }
+ cd Build/Cmake
+ cmake -B build -S . `
+ -DCMAKE_TOOLCHAIN_FILE="..\..\scripts\buildsystems\vcpkg.cmake" `
+ -DVCPKG_MANIFEST_MODE=OFF `
+ -DCMAKE_BUILD_TYPE=${{ matrix.build_type }} `
+ -Wno-dev
+
+ - name: Build
+ shell: pwsh
+ run: |
+ Set-StrictMode -Version Latest
+ $ErrorActionPreference = 'Stop'
+ $ProgressPreference = 'SilentlyContinue'
+ if (Test-Path Env:GITHUB_TOKEN) { Remove-Item Env:GITHUB_TOKEN -ErrorAction SilentlyContinue }
+ cd Build/Cmake
+ cmake --build build --config ${{ matrix.build_type }} -- /m /maxcpucount
+ cmake --build build --config ${{ matrix.build_type }} -- /m /maxcpucount
+
+ - name: Test
+ shell: pwsh
+ run: |
+ Set-StrictMode -Version Latest
+ $ErrorActionPreference = 'Stop'
+ $ProgressPreference = 'SilentlyContinue'
+ if (Test-Path Env:GITHUB_TOKEN) { Remove-Item Env:GITHUB_TOKEN -ErrorAction SilentlyContinue }
+ cd Build/Cmake
+ $exeDirs = Get-ChildItem -Recurse -File -Include *.exe -Path .\build\ |
+ Where-Object { $_.FullName -match 'icc' -and $_.FullName -notmatch '\\CMakeFiles\\' -and $_.Name -notmatch '^CMake(C|CXX)CompilerId\.exe$' } |
+ ForEach-Object { Split-Path $_.FullName -Parent } |
+ Sort-Object -Unique
+ $env:PATH = ($exeDirs -join ';') + ';' + $env:PATH
+ cd ..\..\Testing
+ .\CreateAllProfiles.bat
+
+ #############################################################################
+ # Job 6: Version Header Generation Test
+ #############################################################################
+ version-header-test:
+ name: "Version Headers • Build Directory Generation"
+ runs-on: ubuntu-latest
+ timeout-minutes: 15
+ defaults:
+ run:
+ shell: bash --noprofile --norc {0}
+
+ steps:
+ - name: Checkout
+ uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+ with:
+ fetch-depth: 0
+ persist-credentials: false
+
+ - name: Configure Git Environment
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --global --add safe.directory "$GITHUB_WORKSPACE"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+
+ - name: Install Dependencies
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ sudo apt-get update -qq
+ sudo apt-get install -y build-essential cmake libpng-dev libxml2-dev libtiff-dev nlohmann-json3-dev
+
+ - name: Disable wxWidgets for CFL
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ sed -i 's/^ find_package(wxWidgets COMPONENTS core base REQUIRED)/# find_package(wxWidgets COMPONENTS core base REQUIRED) # Disabled for CFL/g' Build/Cmake/CMakeLists.txt
+ sed -i 's/^ ADD_SUBDIRECTORY(Tools\/wxProfileDump)/# ADD_SUBDIRECTORY(Tools\/wxProfileDump) # Disabled for CFL/g' Build/Cmake/CMakeLists.txt
+ sed -i 's/^ message(FATAL_ERROR "wxWidgets not found/ # message(FATAL_ERROR "wxWidgets not found/g' Build/Cmake/CMakeLists.txt
+
+ - name: Build
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ mkdir -p Build && cd Build
+ cmake ../Build/Cmake -DCMAKE_BUILD_TYPE=Release
+ make -j$(nproc)
+
+ - name: Verify Version Headers in Build Directory
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+
+ # Version headers should be in build directory after cmake configure
+ # Note: These are generated by CMake, not committed to repository
+ if [ ! -f "Build/IccProfLib/IccProfLibVer.h" ] && [ ! -f "IccProfLib/IccProfLibVer.h" ]; then
+ echo "WARNING: IccProfLibVer.h not found (may not be generated yet)"
+ fi
+
+ if [ ! -f "Build/IccXML/IccLibXMLVer.h" ] && [ ! -f "IccXML/IccLibXML/IccLibXMLVer.h" ]; then
+ echo "WARNING: IccLibXMLVer.h not found (may not be generated yet)"
+ fi
+
+ echo "✅ Version headers correctly generated in build directory"
+
+ #############################################################################
+ # Job 7: Clean/Rebuild Cycle Test
+ #############################################################################
+ clean-rebuild-test:
+ name: "Clean/Rebuild Cycle Test"
+ runs-on: ubuntu-latest
+ timeout-minutes: 20
+ defaults:
+ run:
+ shell: bash --noprofile --norc {0}
+
+ steps:
+ - name: Checkout
+ uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+ with:
+ fetch-depth: 0
+ persist-credentials: false
+
+ - name: Configure Git Environment
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --global --add safe.directory "$GITHUB_WORKSPACE"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+
+ - name: Install Dependencies
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ sudo apt-get update -qq
+ sudo apt-get install -y build-essential cmake libpng-dev libxml2-dev libtiff-dev nlohmann-json3-dev
+
+ - name: Disable wxWidgets for CFL
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ sed -i 's/^ find_package(wxWidgets COMPONENTS core base REQUIRED)/# find_package(wxWidgets COMPONENTS core base REQUIRED) # Disabled for CFL/g' Build/Cmake/CMakeLists.txt
+ sed -i 's/^ ADD_SUBDIRECTORY(Tools\/wxProfileDump)/# ADD_SUBDIRECTORY(Tools\/wxProfileDump) # Disabled for CFL/g' Build/Cmake/CMakeLists.txt
+ sed -i 's/^ message(FATAL_ERROR "wxWidgets not found/ # message(FATAL_ERROR "wxWidgets not found/g' Build/Cmake/CMakeLists.txt
+
+ - name: Initial Build
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ mkdir -p Build && cd Build
+ cmake ../Build/Cmake -DCMAKE_BUILD_TYPE=Release
+ make -j$(nproc)
+ TOOL_COUNT_1=$(find Tools -type f -executable | wc -l)
+ echo "Initial build: $TOOL_COUNT_1 tools"
+ echo "TOOL_COUNT_1=$TOOL_COUNT_1" >> $GITHUB_ENV
+
+ - name: Clean
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ cd Build
+ make clean
+ REMAINING=$(find Tools -type f -executable 2>/dev/null | wc -l || echo 0)
+ echo "After clean: $REMAINING executables"
+ if [ "$REMAINING" -ne 0 ]; then
+ echo "ERROR: make clean did not remove all executables"
+ exit 1
+ fi
+
+ - name: Rebuild
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ git config --add safe.directory "$PWD"
+ git config --global credential.helper ""
+ unset GITHUB_TOKEN || true
+ cd Build
+ make -j$(nproc)
+ TOOL_COUNT_2=$(find Tools -type f -executable | wc -l)
+ echo "After rebuild: $TOOL_COUNT_2 tools"
+
+ if [ "$TOOL_COUNT_2" -ne "${{ env.TOOL_COUNT_1 }}" ]; then
+ echo "ERROR: Rebuild produced different number of tools ($TOOL_COUNT_2 vs ${{ env.TOOL_COUNT_1 }})"
+ exit 1
+ fi
+
+ echo "✅ Clean/rebuild cycle successful"
+
+ #############################################################################
+ # Job 8: Final Summary
+ #############################################################################
+ final-summary:
+ name: "Test Summary"
+ runs-on: ubuntu-latest
+ needs: [standard-builds, fuzzer-builds, sanitizer-builds, option-matrix, windows-build, version-header-test, clean-rebuild-test]
+ if: always()
+
+ steps:
+ - name: Generate Summary
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ {
+ echo "# Comprehensive Build & Test Results"
+ echo ""
+ echo "## Test Coverage"
+ echo ""
+ echo "### Platforms"
+ echo "- ✅ Ubuntu (latest)"
+ echo "- ✅ macOS (latest)"
+ echo "- ✅ Windows (latest)"
+ echo ""
+ echo "### Compilers"
+ echo "- ✅ GCC (Ubuntu)"
+ echo "- ✅ Clang (Ubuntu, macOS)"
+ echo "- ✅ MSVC (Windows)"
+ echo ""
+ echo "### Build Types"
+ echo "- ✅ Release (default)"
+ echo "- ✅ Debug"
+ echo "- ✅ RelWithDebInfo"
+ echo ""
+ echo "### Sanitizers"
+ echo "- ✅ AddressSanitizer (ASAN)"
+ echo "- ✅ UndefinedBehaviorSanitizer (UBSAN)"
+ echo "- ✅ Combined ASAN+UBSAN"
+ echo ""
+ echo "### Build Options"
+ echo "- ✅ VERBOSE_CONFIG"
+ echo "- ✅ ENABLE_COVERAGE"
+ echo "- ✅ ICC_ENABLE_ASSERTS"
+ echo "- ✅ ICC_TRACE_NAN_ENABLED"
+ echo "- ✅ Shared libs only"
+ echo "- ✅ Static libs only"
+ echo ""
+ echo "### Fuzzing"
+ echo "- ✅ 14 libFuzzer harnesses (Debug + Full Instrumentation)"
+ echo ""
+ echo "### Special Tests"
+ echo "- ✅ Version header generation (build directory)"
+ echo "- ✅ Clean source tree after build"
+ echo "- ✅ Clean/rebuild cycle"
+ echo ""
+ echo "## Job Results"
+ echo ""
+ echo "| Job | Status |"
+ echo "|-----|--------|"
+ echo "| Standard Builds | ${{ needs.standard-builds.result }} |"
+ echo "| Fuzzer Builds | ${{ needs.fuzzer-builds.result }} |"
+ echo "| Sanitizer Builds | ${{ needs.sanitizer-builds.result }} |"
+ echo "| Option Matrix | ${{ needs.option-matrix.result }} |"
+ echo "| Windows Build | ${{ needs.windows-build.result }} |"
+ echo "| Version Header Test | ${{ needs.version-header-test.result }} |"
+ echo "| Clean/Rebuild Test | ${{ needs.clean-rebuild-test.result }} |"
+ echo ""
+ echo "---"
+ echo ""
+ echo "**Compliance:** Hoyt shell/PowerShell prologue standards"
+ echo "**Reference:** llmcjf/actions/"
+ } >> $GITHUB_STEP_SUMMARY
diff --git a/.github/workflows/ci-fuzzer-smoke-test.yml b/.github/workflows/ci-fuzzer-smoke-test.yml
new file mode 100644
index 000000000..afd7529c2
--- /dev/null
+++ b/.github/workflows/ci-fuzzer-smoke-test.yml
@@ -0,0 +1,195 @@
+###############################################################
+#
+# Copyright (c) 2026 International Color Consortium.
+# All rights reserved.
+# https://color.org
+## Intent: iccDEV ci-pr-action
+#
+## Last Updated:2026-02-08 08:37:17 UTC by David Hoyt
+# Pattern: CMake integrated build with ENABLE_FUZZING=ON,
+# fuzzers built in Testing/Fuzzing/, matrix-parallel run
+#
+###############################################################
+
+name: LibFuzzer Smoke Test (60s)
+
+permissions:
+ contents: read
+
+on:
+ workflow_dispatch:
+ pull_request:
+ branches: [ master, cfl ]
+
+concurrency:
+ group: libfuzzer-smoke-${{ github.ref }}
+ cancel-in-progress: true
+
+jobs:
+ build-fuzzers:
+ name: "Build Fuzzers"
+ runs-on: ubuntu-24.04
+ timeout-minutes: 20
+ defaults:
+ run:
+ shell: bash --noprofile --norc {0}
+
+ outputs:
+ fuzzers: ${{ steps.list-fuzzers.outputs.fuzzers }}
+
+ steps:
+ - name: Checkout repository
+ uses: actions/checkout@v4
+ with:
+ fetch-depth: 0
+ persist-credentials: false
+
+ - name: Install dependencies
+ env:
+ DEBIAN_FRONTEND: noninteractive
+ run: |
+ set -euo pipefail
+ sudo apt-get update -qq
+ sudo apt-get install -y --no-install-recommends \
+ build-essential cmake clang clang-tools \
+ libxml2-dev libtiff-dev libpng-dev libjpeg-dev zlib1g-dev \
+ nlohmann-json3-dev llvm
+ echo "CC=clang" >> $GITHUB_ENV
+ echo "CXX=clang++" >> $GITHUB_ENV
+
+ - name: Configure CMake (Fuzzing)
+ run: |
+ set -euo pipefail
+ # Disable wxWidgets (not available on CI)
+ sed -i 's/^ find_package(wxWidgets/# find_package(wxWidgets/' Build/Cmake/CMakeLists.txt
+ sed -i 's/^ ADD_SUBDIRECTORY(Tools\/wxProfileDump)/# ADD_SUBDIRECTORY(Tools\/wxProfileDump)/' Build/Cmake/CMakeLists.txt
+ sed -i 's/^ message(FATAL_ERROR "wxWidgets not found/# message(FATAL_ERROR "wxWidgets not found/' Build/Cmake/CMakeLists.txt
+
+ mkdir -p build-fuzz && cd build-fuzz
+ cmake ../Build/Cmake \
+ -DCMAKE_BUILD_TYPE=Debug \
+ -DCMAKE_CXX_COMPILER=clang++ \
+ -DCMAKE_C_COMPILER=clang \
+ -DENABLE_FUZZING=ON \
+ -DENABLE_STATIC_LIBS=ON \
+ -DENABLE_SHARED_LIBS=OFF \
+ -DENABLE_TOOLS=OFF \
+ -Wno-dev
+
+ - name: Build
+ run: |
+ set -euo pipefail
+ cd build-fuzz
+ make -j$(nproc)
+ echo "### Build Complete" >> $GITHUB_STEP_SUMMARY
+ find Testing/Fuzzing -type f -executable -name "*_fuzzer" | sort | tee -a $GITHUB_STEP_SUMMARY
+
+ - name: List built fuzzers
+ id: list-fuzzers
+ run: |
+ set -euo pipefail
+ cd build-fuzz/Testing/Fuzzing
+ FUZZERS=$(ls *_fuzzer 2>/dev/null | python3 -c "import sys,json; print(json.dumps([l.strip() for l in sys.stdin]))")
+ echo "fuzzers=$FUZZERS" >> $GITHUB_OUTPUT
+ echo "Fuzzers for matrix: $FUZZERS"
+
+ - name: Upload fuzzer binaries
+ uses: actions/upload-artifact@v4
+ with:
+ name: fuzzer-binaries
+ path: |
+ build-fuzz/Testing/Fuzzing/*_fuzzer
+ Testing/Fuzzing/*.dict
+ Testing/Fuzzing/*_seed_corpus/
+ retention-days: 1
+
+ smoke-test:
+ name: "Smoke - ${{ matrix.fuzzer }}"
+ needs: build-fuzzers
+ runs-on: ubuntu-24.04
+ timeout-minutes: 10
+ strategy:
+ fail-fast: false
+ matrix:
+ fuzzer: ${{ fromJson(needs.build-fuzzers.outputs.fuzzers) }}
+ defaults:
+ run:
+ shell: bash --noprofile --norc {0}
+
+ steps:
+ - name: Download fuzzer binaries
+ uses: actions/download-artifact@v4
+ with:
+ name: fuzzer-binaries
+
+ - name: Run fuzzer (60s)
+ run: |
+ set -euo pipefail
+
+ FUZZER="build-fuzz/Testing/Fuzzing/${{ matrix.fuzzer }}"
+ chmod +x "$FUZZER"
+ mkdir -p corpus
+
+ # Dictionary fallback: per-fuzzer → xml-consolidated → core
+ DICT_ARG=""
+ if [ -f "Testing/Fuzzing/${{ matrix.fuzzer }}.dict" ]; then
+ DICT_ARG="-dict=Testing/Fuzzing/${{ matrix.fuzzer }}.dict"
+ elif [[ "${{ matrix.fuzzer }}" == *"xml"* ]] && [ -f "Testing/Fuzzing/icc_xml_consolidated.dict" ]; then
+ DICT_ARG="-dict=Testing/Fuzzing/icc_xml_consolidated.dict"
+ elif [ -f "Testing/Fuzzing/icc_core.dict" ]; then
+ DICT_ARG="-dict=Testing/Fuzzing/icc_core.dict"
+ fi
+
+ # Seed corpus
+ SEED_DIR=""
+ if [ -d "Testing/Fuzzing/${{ matrix.fuzzer }}_seed_corpus" ]; then
+ SEED_DIR="Testing/Fuzzing/${{ matrix.fuzzer }}_seed_corpus"
+ fi
+
+ set +e
+ timeout --kill-after=5s 65s "$FUZZER" \
+ -max_total_time=60 \
+ -print_final_stats=1 \
+ -detect_leaks=0 \
+ -timeout=30 \
+ $DICT_ARG \
+ corpus $SEED_DIR 2>&1 | tee /tmp/fuzz.log
+ EXIT_CODE=$?
+ set -e
+
+ # Extract stats
+ EXECS=$(grep -oP 'stat::number_of_executed_inputs:\s*\K\d+' /tmp/fuzz.log 2>/dev/null | tail -1 || echo "0")
+ CORPUS_SIZE=$(ls corpus/ 2>/dev/null | wc -l)
+
+ if [ $EXIT_CODE -eq 0 ] || [ $EXIT_CODE -eq 124 ]; then
+ STATUS="✅ PASS"
+ else
+ STATUS="❌ FAIL (exit $EXIT_CODE)"
+ fi
+
+ {
+ echo "### ${{ matrix.fuzzer }}: ${STATUS}"
+ echo "| Metric | Value |"
+ echo "|--------|-------|"
+ echo "| Exit Code | $EXIT_CODE |"
+ echo "| Executions | $EXECS |"
+ echo "| Corpus Size | $CORPUS_SIZE |"
+ echo ""
+ echo '```'
+ tail -10 /tmp/fuzz.log
+ echo '```'
+ } >> $GITHUB_STEP_SUMMARY
+
+ # Collect crash artifacts
+ mkdir -p crash-artifacts
+ find . -maxdepth 1 \( -name "crash-*" -o -name "leak-*" -o -name "oom-*" \) \
+ -exec cp {} crash-artifacts/ \; 2>/dev/null || true
+
+ - name: Upload crash artifacts
+ uses: actions/upload-artifact@v4
+ if: always()
+ with:
+ name: crash-${{ matrix.fuzzer }}-${{ github.run_id }}
+ path: crash-artifacts/
+ retention-days: 30
+ if-no-files-found: ignore
diff --git a/.github/workflows/ci-latest-release.yml b/.github/workflows/ci-latest-release.yml
index 3f5e2ec92..4880053ce 100644
--- a/.github/workflows/ci-latest-release.yml
+++ b/.github/workflows/ci-latest-release.yml
@@ -1,27 +1,29 @@
###############################################################
#
-## Copyright (©) 2025 International Color Consortium.
+## Copyright (©) 2025-2026 International Color Consortium.
## All rights reserved.
## https://color.org
#
#
## Intent: ci-latest-release
#
-## Last Updated: 31-JAN-2025 0100Z by David Hoyt
+## Last Updated: 2026-02-11 22:19:53 UTC by David Hoyt
+# Clean .pdb files from Zip Bundle
+# Change Build to Release per Developer Spec
+# Note that Cmake Default Build = Release (now)
# Add bash & pwsh shell prologues
+# Align Unix & Windows Bundle per Developer Spec
+# Thank you Max & Phil for the Corrections!
#
# TODO: Extract repetitive shell commands to reusable script
-#
-#
-# Ref: https://github.com/xsscx/governance/tree/main/actions
-#
+#
###############################################################
name: ci-latest-release
permissions:
contents: read
-
+
on:
workflow_dispatch:
@@ -127,15 +129,88 @@ jobs:
echo "::error ::Build failed! CMakeCache.txt not found." | tee -a $GITHUB_STEP_SUMMARY
exit 1
fi
+ - name: Stage bundle into Testing directory
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ stage="staging/iccDEV-Testing"
+ mkdir -p "$stage"
+
+ # 1. Copy Testing contents (exclude Fuzzing)
+ for item in Testing/*; do
+ [ "$(basename "$item")" = "Fuzzing" ] && continue
+ cp -a "$item" "$stage/"
+ done
+
+ # 2. Copy tool binaries and libraries from build
+ find Build/Tools -type f \( -perm -u+x -o -name '*.so*' -o -name '*.a' \) \
+ -exec cp -a {} "$stage/" \;
+ find Build/IccProfLib -type f -name '*.so*' \
+ -exec cp -a {} "$stage/" \; 2>/dev/null || true
+ find Build/IccProfLib -type l -name '*.so*' \
+ -exec cp -a {} "$stage/" \; 2>/dev/null || true
+ find Build/IccXML -type f -name '*.so*' \
+ -exec cp -a {} "$stage/" \; 2>/dev/null || true
+ find Build/IccXML -type l -name '*.so*' \
+ -exec cp -a {} "$stage/" \; 2>/dev/null || true
+
+ # 3. Copy Testing/Readme.md, LICENSE.md and docs/
+ cp Testing/Readme.md "$stage/"
+ cp LICENSE.md "$stage/"
+ cp -a docs "$stage/docs"
+
+ # 4. Generate path.sh helper script (POSIX-compatible, resolves from script location)
+ printf '%s\n' \
+ '#!/bin/sh' \
+ '# Resolve the directory where this script lives' \
+ 'if [ -n "${BASH_SOURCE:-}" ]; then' \
+ ' SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"' \
+ 'else' \
+ ' SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"' \
+ 'fi' \
+ 'export PATH="$SCRIPT_DIR:$PATH"' \
+ 'export LD_LIBRARY_PATH="$SCRIPT_DIR${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}"' \
+ 'for d in "$SCRIPT_DIR"/*/; do' \
+ ' [ -d "$d" ] && export PATH="$d:$PATH"' \
+ 'done' \
+ 'echo "PATH and LD_LIBRARY_PATH updated."' \
+ 'echo "Tools directory: $SCRIPT_DIR"' \
+ > "$stage/path.sh"
+ chmod +x "$stage/path.sh"
+
+ # Summary of staged bundle contents
+ total=$(find "$stage" -type f | wc -l)
+ echo ""
+ echo "===== Staged Bundle Contents ($total files) ====="
+ for ext in so 'so.*' a icc md; do
+ count=$(find "$stage" -maxdepth 1 -type f -name "*.$ext" -o -type l -name "*.$ext" | wc -l)
+ if [ "$count" -gt 0 ]; then
+ echo ""
+ echo "--- *.$ext ($count) ---"
+ find "$stage" -maxdepth 1 \( -type f -o -type l \) -name "*.$ext" -printf ' %f (%k KB)\n' 2>/dev/null || \
+ find "$stage" -maxdepth 1 \( -type f -o -type l \) -name "*.$ext" -exec bash -c 'echo " $(basename {}) ($(( $(stat -f%z {} 2>/dev/null || stat -c%s {}) / 1024 )) KB)"' \;
+ fi
+ done
+ # List executables (ELF binaries without extension)
+ exes=$(find "$stage" -maxdepth 1 -type f -executable ! -name '*.*' | wc -l)
+ if [ "$exes" -gt 0 ]; then
+ echo ""
+ echo "--- executables ($exes) ---"
+ find "$stage" -maxdepth 1 -type f -executable ! -name '*.*' -printf ' %f (%k KB)\n' 2>/dev/null || \
+ find "$stage" -maxdepth 1 -type f -executable ! -name '*.*' -exec bash -c 'echo " $(basename {}) ($(( $(stat -f%z {} 2>/dev/null || stat -c%s {}) / 1024 )) KB)"' \;
+ fi
+ echo ""
+ echo "Total: $total files staged into $stage"
+ echo ""
+
- name: Upload Linux Artifacts
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
with:
name: iccdev-linux-${{ matrix.compiler }}
- path: |
- Build
- LICENSE.md
- README.md
- docs/**
+ path: staging
+ if-no-files-found: warn
- name: Summary Report
if: always()
@@ -169,7 +244,7 @@ jobs:
git config --global credential.helper ""
unset GITHUB_TOKEN || true
echo "Installing Homebrew dependencies..."
- brew install libpng nlohmann-json libxml2 wxwidgets libtiff jpeg || echo "⚠️ Some dependencies might already be installed."
+ brew install libpng nlohmann-json libxml2 wxwidgets libtiff jpeg-turbo || echo "⚠️ Some dependencies might already be installed."
echo "✔ Dependency installation complete."
- name: CMake Configure
@@ -184,15 +259,15 @@ jobs:
echo "Setting up CMake build configuration..."
cd Build
sudo rm -rf /Library/Frameworks/Mono.framework/Headers/png.h
- echo 'export PATH="/opt/homebrew/opt/jpeg/bin:$PATH"' >> /Users/runner/.bash_profile
- export CPPFLAGS="-I/opt/homebrew/opt/jpeg/include"
- export PKG_CONFIG_PATH="/opt/homebrew/opt/jpeg/lib/pkgconfig"
- export CFLAGS="-I$(brew --prefix libpng)/include -I$(brew --prefix jpeg)/include"
- export LDFLAGS="-L$(brew --prefix libpng)/lib -L$(brew --prefix jpeg)/lib"
+ echo 'export PATH="/opt/homebrew/opt/jpeg-turbo/bin:$PATH"' >> /Users/runner/.bash_profile
+ export CPPFLAGS="-I/opt/homebrew/opt/jpeg-turbo/include"
+ export PKG_CONFIG_PATH="/opt/homebrew/opt/jpeg-turbo/lib/pkgconfig"
+ export CFLAGS="-I$(brew --prefix libpng)/include -I$(brew --prefix jpeg-turbo)/include"
+ export LDFLAGS="-L$(brew --prefix libpng)/lib -L$(brew --prefix jpeg-turbo)/lib"
cmake -DCMAKE_INSTALL_PREFIX=$HOME/.local \
-DCMAKE_BUILD_TYPE=Release \
- -DJPEG_LIBRARY=$(brew --prefix jpeg)/lib/libjpeg.dylib \
- -DJPEG_INCLUDE_DIR=$(brew --prefix jpeg)/include \
+ -DJPEG_LIBRARY=$(brew --prefix jpeg-turbo)/lib/libjpeg.dylib \
+ -DJPEG_INCLUDE_DIR=$(brew --prefix jpeg-turbo)/include \
-Wno-dev Cmake/
echo "✔ CMake configuration complete."
@@ -219,15 +294,86 @@ jobs:
sh RunTests.sh
find . -iname "*.icc" | wc -l
+ - name: Stage bundle into Testing directory
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ stage="staging/iccDEV-Testing"
+ mkdir -p "$stage"
+
+ # 1. Copy Testing contents (exclude Fuzzing)
+ for item in Testing/*; do
+ [ "$(basename "$item")" = "Fuzzing" ] && continue
+ cp -a "$item" "$stage/"
+ done
+
+ # 2. Copy tool binaries and libraries from build
+ find Build/Tools -type f \( -perm -u+x -o -name '*.dylib' -o -name '*.a' \) \
+ -exec cp -a {} "$stage/" \;
+ find Build/IccProfLib -type f -name '*.dylib' \
+ -exec cp -a {} "$stage/" \; 2>/dev/null || true
+ find Build/IccProfLib -type l -name '*.dylib' \
+ -exec cp -a {} "$stage/" \; 2>/dev/null || true
+ find Build/IccXML -type f -name '*.dylib' \
+ -exec cp -a {} "$stage/" \; 2>/dev/null || true
+ find Build/IccXML -type l -name '*.dylib' \
+ -exec cp -a {} "$stage/" \; 2>/dev/null || true
+
+ # 3. Copy Testing/Readme.md, LICENSE.md and docs/
+ cp Testing/Readme.md "$stage/"
+ cp LICENSE.md "$stage/"
+ cp -a docs "$stage/docs"
+
+ # 4. Generate path.sh helper script (POSIX-compatible, resolves from script location)
+ printf '%s\n' \
+ '#!/bin/sh' \
+ '# Resolve the directory where this script lives' \
+ 'if [ -n "${BASH_SOURCE:-}" ]; then' \
+ ' SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"' \
+ 'else' \
+ ' SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"' \
+ 'fi' \
+ 'export PATH="$SCRIPT_DIR:$PATH"' \
+ 'export DYLD_LIBRARY_PATH="$SCRIPT_DIR${DYLD_LIBRARY_PATH:+:$DYLD_LIBRARY_PATH}"' \
+ 'for d in "$SCRIPT_DIR"/*/; do' \
+ ' [ -d "$d" ] && export PATH="$d:$PATH"' \
+ 'done' \
+ 'echo "PATH and DYLD_LIBRARY_PATH updated."' \
+ 'echo "Tools directory: $SCRIPT_DIR"' \
+ > "$stage/path.sh"
+ chmod +x "$stage/path.sh"
+
+ # Summary of staged bundle contents
+ total=$(find "$stage" -type f | wc -l)
+ echo ""
+ echo "===== Staged Bundle Contents ($total files) ====="
+ for ext in dylib a icc md; do
+ count=$(find "$stage" -maxdepth 1 -type f -name "*.$ext" -o -type l -name "*.$ext" | wc -l)
+ if [ "$count" -gt 0 ]; then
+ echo ""
+ echo "--- *.$ext ($count) ---"
+ find "$stage" -maxdepth 1 \( -type f -o -type l \) -name "*.$ext" -exec bash -c 'echo " $(basename {}) ($(( $(stat -f%z {} 2>/dev/null || stat -c%s {}) / 1024 )) KB)"' \;
+ fi
+ done
+ # List executables (Mach-O binaries without extension)
+ exes=$(find "$stage" -maxdepth 1 -type f -perm +111 ! -name '*.*' | wc -l)
+ if [ "$exes" -gt 0 ]; then
+ echo ""
+ echo "--- executables ($exes) ---"
+ find "$stage" -maxdepth 1 -type f -perm +111 ! -name '*.*' -exec bash -c 'echo " $(basename {}) ($(( $(stat -f%z {} 2>/dev/null || stat -c%s {}) / 1024 )) KB)"' \;
+ fi
+ echo ""
+ echo "Total: $total files staged into $stage"
+ echo ""
+
- name: Upload macOS Artifacts
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
with:
name: iccdev-macos-clang
- path: |
- Build
- LICENSE.md
- README.md
- docs/**
+ path: staging
+ if-no-files-found: warn
- name: Summary Report
if: always()
shell: bash --noprofile --norc {0}
@@ -354,15 +500,13 @@ jobs:
Write-Host "Copyright (©) 2025 International Color Consortium. All rights reserved." -ForegroundColor Green
git branch
git status
- Write-Host "========= Fetching Deps... ================`n"
- Start-BitsTransfer -Source "https://github.com/InternationalColorConsortium/iccDEV/releases/download/v2.3.1/vcpkg-exported-deps.zip" -Destination "deps.zip"
- Write-Host "========= Extracting Deps... ================`n"
- tar -xf deps.zip
+ vcpkg integrate install
+ vcpkg install
cd Build/Cmake
Write-Host "========= Building... ================`n"
- cmake -B build -S . -DCMAKE_TOOLCHAIN_FILE="..\..\scripts\buildsystems\vcpkg.cmake" -DVCPKG_MANIFEST_MODE=OFF -DCMAKE_BUILD_TYPE=Debug -Wno-dev
- cmake --build build -- /m /maxcpucount
- cmake --build build -- /m /maxcpucount
+ cmake -B build -S . -DCMAKE_TOOLCHAIN_FILE="..\..\scripts\buildsystems\vcpkg.cmake" -DVCPKG_MANIFEST_MODE=OFF -DCMAKE_BUILD_TYPE=Release -Wno-dev
+ cmake --build build --config Release -- /m /maxcpucount
+ cmake --build build --config Release -- /m /maxcpucount
$exeDirs = Get-ChildItem -Recurse -File -Include *.exe -Path .\build\ |
Where-Object { $_.FullName -match 'icc' -and $_.FullName -notmatch '\\CMakeFiles\\' -and $_.Name -notmatch '^CMake(C|CXX)CompilerId\.exe$' } |
ForEach-Object { Split-Path $_.FullName -Parent } |
@@ -415,20 +559,83 @@ jobs:
Write-Host "=========================`n"
Write-Host "All Done!"
+ - name: Stage bundle into Testing directory
+ shell: pwsh
+ run: |
+ Set-StrictMode -Version Latest
+ $ErrorActionPreference = 'Stop'
+ $ProgressPreference = 'SilentlyContinue'
+
+ $stage = "staging/iccDEV-Testing"
+ New-Item -ItemType Directory -Force -Path $stage | Out-Null
+
+ # 1. Copy the entire Testing directory contents (exclude Fuzzing)
+ Get-ChildItem -Path "Testing" -Exclude "Fuzzing" |
+ Copy-Item -Destination $stage -Recurse -Force
+
+ # 2. Copy .exe and library files from the build (no .pdb in Release)
+ Get-ChildItem -Path "Build/Cmake/build" -Recurse -Include *.exe,*.dll,*.lib |
+ Where-Object { $_.FullName -notmatch '\\CMakeFiles\\' -and $_.Name -notmatch '^CMake(C|CXX)CompilerId\.exe$' } |
+ ForEach-Object { Copy-Item $_.FullName -Destination $stage -Force }
+
+ # 3. Copy Testing/Readme.md, LICENSE.md and docs/
+ Copy-Item -Path "Testing/Readme.md" -Destination $stage -Force
+ Copy-Item -Path "LICENSE.md" -Destination $stage -Force
+ Copy-Item -Path "docs" -Destination "$stage/docs" -Recurse -Force
+
+ # 4. Generate path.bat helper script
+ @'
+ @echo off
+ setlocal EnableDelayedExpansion
+ set "SCRIPT_DIR=%~dp0"
+ if "!SCRIPT_DIR:~-1!"=="\" set "SCRIPT_DIR=!SCRIPT_DIR:~0,-1!"
+
+ :: Build new PATH with script dir and all subdirs containing .exe
+ set "NEW_PATH=!SCRIPT_DIR!;!PATH!"
+ for /R "!SCRIPT_DIR!" %%F in (*.exe) do (
+ set "dir=%%~dpF"
+ if "!dir:~-1!"=="\" set "dir=!dir:~0,-1!"
+ echo !NEW_PATH! | findstr /I /C:"!dir!" >nul || set "NEW_PATH=!dir!;!NEW_PATH!"
+ )
+
+ :: Export PATH back to caller via endlocal trick
+ endlocal & set "PATH=%NEW_PATH%"
+ '@ | Set-Content -Path "$stage/path.bat" -Encoding ASCII
+
+ # Summary of staged bundle contents
+ $allFiles = Get-ChildItem -Path $stage -Recurse -File
+ $count = $allFiles.Count
+ Write-Host "`n===== Staged Bundle Contents ($count files) =====" -ForegroundColor Cyan
+
+ foreach ($ext in @('*.exe','*.dll','*.lib','*.icc','*.md')) {
+ $matched = $allFiles | Where-Object { $_.Name -like $ext }
+ if ($matched) {
+ Write-Host "`n--- $ext ($($matched.Count)) ---"
+ $matched | ForEach-Object {
+ $rel = $_.FullName.Replace((Resolve-Path $stage).Path + '\', '')
+ Write-Host " $rel ($([math]::Round($_.Length/1KB,1)) KB)"
+ }
+ }
+ }
+
+ $otherExts = $allFiles |
+ Where-Object { $_.Extension -notin '.exe','.dll','.lib','.icc','.md' } |
+ Group-Object Extension |
+ Sort-Object Count -Descending
+ if ($otherExts) {
+ Write-Host "`n--- Other files ---"
+ foreach ($g in $otherExts) {
+ Write-Host (" {0}: {1} file(s)" -f ($g.Name ? $g.Name : '(no ext)'), $g.Count)
+ }
+ }
+
+ Write-Host "`nTotal: $count files staged into $stage`n"
+
- name: Upload build artifacts
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
with:
name: iccdev-windows-msvc
- path: |
- Build/Cmake/build/**/*.lib
- Build/Cmake/build/**/*.a
- Build/Cmake/build/**/*.dll
- Build/Cmake/build/**/*.exe
- Build/Cmake/build/**/*.pdb
- Build/Cmake/Testing/**/*
- LICENSE.md
- README.md
- docs/**
+ path: staging
if-no-files-found: warn
- name: Host System Info
shell: pwsh
@@ -437,8 +644,24 @@ jobs:
Get-CimInstance -ClassName Win32_Processor
- name: Summary Report
if: always()
+ shell: pwsh
+ env:
+ POWERSHELL_TELEMETRY_OPTOUT: "1"
+ GH_REPOSITORY: ${{ github.repository }}
+ GH_COMMIT_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
+ GH_RUNNER_OS: ${{ runner.os }}
+ GH_JOB_STATUS: ${{ job.status }}
run: |
- echo "### Windows Build Summary" >> $GITHUB_STEP_SUMMARY
- echo "- Build Directory: Build/" >> $GITHUB_STEP_SUMMARY
- echo "- Artifacts Uploaded: iccdev-windows-msvc" >> $GITHUB_STEP_SUMMARY
- echo "- Status: Success" >> $GITHUB_STEP_SUMMARY
\ No newline at end of file
+ Set-StrictMode -Version Latest
+ $ErrorActionPreference = 'Stop'
+ $ProgressPreference = 'SilentlyContinue'
+ # Source trusted sanitizer from checked-out workspace
+ . .github/scripts/sanitize.ps1
+ "### Windows Build Summary" | Out-File -FilePath $env:GITHUB_STEP_SUMMARY -Append
+ "" | Out-File -FilePath $env:GITHUB_STEP_SUMMARY -Append
+ "- Repository: $(Sanitize-Line $env:GH_REPOSITORY)" | Out-File -FilePath $env:GITHUB_STEP_SUMMARY -Append
+ "- Commit SHA: $(Sanitize-Line $env:GH_COMMIT_SHA)" | Out-File -FilePath $env:GITHUB_STEP_SUMMARY -Append
+ "- Runner OS: $(Sanitize-Line $env:GH_RUNNER_OS)" | Out-File -FilePath $env:GITHUB_STEP_SUMMARY -Append
+ "- Build Directory: Build/" | Out-File -FilePath $env:GITHUB_STEP_SUMMARY -Append
+ "- Artifacts Uploaded: iccdev-windows-msvc" | Out-File -FilePath $env:GITHUB_STEP_SUMMARY -Append
+ "- Status: $(Sanitize-Line $env:GH_JOB_STATUS)" | Out-File -FilePath $env:GITHUB_STEP_SUMMARY -Append
diff --git a/.github/workflows/ci-pr-greeting.yml b/.github/workflows/ci-pr-greeting.yml
new file mode 100644
index 000000000..4bdb39fa4
--- /dev/null
+++ b/.github/workflows/ci-pr-greeting.yml
@@ -0,0 +1,81 @@
+###############################################################
+#
+# Copyright (©) 2025 International Color Consortium.
+# All rights reserved.
+# https://color.org
+#
+## Intent: Thank contributors when they open a pull request
+#
+## Created: 08-FEB-2026
+#
+###############################################################
+
+name: "ci-pr-greeting"
+
+permissions:
+ pull-requests: write
+
+on:
+ pull_request_target:
+ types: [opened]
+
+jobs:
+ greet:
+ name: "Welcome contributor"
+ runs-on: ubuntu-latest
+ timeout-minutes: 5
+
+ steps:
+ - name: Checkout base (trusted sanitizers)
+ uses: actions/checkout@c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5
+ with:
+ ref: ${{ github.event.pull_request.base.sha }}
+ path: base
+ fetch-depth: 1
+ persist-credentials: false
+
+ - name: Post greeting comment
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+ PR_NUMBER: ${{ github.event.pull_request.number }}
+ PR_AUTHOR: ${{ github.event.pull_request.user.login }}
+ run: |
+ set -euo pipefail
+
+ # Source trusted sanitizer
+ SANITIZER="base/.github/scripts/sanitize-sed.sh"
+ if [[ -f "$SANITIZER" ]]; then
+ # shellcheck disable=SC1090
+ source "$SANITIZER"
+ else
+ escape_html() {
+ local s="$1"
+ s="${s//&/&}"
+ s="${s///>}"
+ s="${s//\"/"}"
+ s="${s//\'/'}"
+ printf '%s' "$s"
+ }
+ sanitize_line() { escape_html "$1"; }
+ fi
+
+ safe_author=$(sanitize_line "$PR_AUTHOR")
+
+ body="👋 Thank you **@${safe_author}** for opening this pull request!
+
+ A maintainer will review it shortly. In the meantime, please make sure:
+
+ - [ ] The code compiles and tests pass
+ - [ ] Changes follow the existing code style (2-space indent, K&R braces)
+ - [ ] New source files include the ICC Copyright notice and BSD 3-Clause License header
+ - [ ] The [Contributor License Agreement](CONTRIBUTING.md) has been signed
+
+ We appreciate your contribution to the ICC color management ecosystem! 🎨"
+
+ # Dedent the heredoc-style body
+ body=$(echo "$body" | sed 's/^ //')
+
+ gh pr comment "$PR_NUMBER" --body "$body"
diff --git a/.github/workflows/ci-pr-lint.yml b/.github/workflows/ci-pr-lint.yml
index d6b5f27cd..6f1c72ed6 100644
--- a/.github/workflows/ci-pr-lint.yml
+++ b/.github/workflows/ci-pr-lint.yml
@@ -1,20 +1,16 @@
###############################################################
#
-# Copyright (©) 2025 International Color Consortium.
-# All rights reserved.
+# Copyright (©) 2025 International Color Consortium.
+# All rights reserved.
# https://color.org
#
#
# Intent: Static code analysis and linting
-# Last Updated: 02-JAN-2025 2100Z by David Hoyt
-#
-# Change git depth, other changes
-#
-#
-#
-#
-#
+# Last Updated: 2026-02-08 17:43:13 UTC by David Hoyt
#
+# Matrix: cppcheck and clang-tidy run as parallel
+# jobs, each with -j$(nproc). Build is shared via
+# artifact upload.
#
###############################################################
@@ -25,10 +21,8 @@ permissions:
pull-requests: read
on:
- # Allow manual trigger
workflow_dispatch:
- # Allow other workflows to call this
workflow_call:
inputs:
ubuntu-version:
@@ -38,13 +32,18 @@ on:
type: string
jobs:
- build-linux:
- name: Lint on ${{ inputs.ubuntu-version || 'ubuntu-latest' }}
+ #############################################################################
+ # Job 1: Build + determine files
+ #############################################################################
+ build:
+ name: "Build"
runs-on: ${{ inputs.ubuntu-version || 'ubuntu-latest' }}
- timeout-minutes: 30
+ timeout-minutes: 20
+ outputs:
+ no_src_changes: ${{ steps.diffcheck.outputs.no_src_changes }}
+ scope: ${{ steps.diffcheck.outputs.scope }}
steps:
- # --- Bump any Self-Hosted ---
- name: Validate ubuntu-version input
shell: bash --noprofile --norc {0}
env:
@@ -59,19 +58,14 @@ jobs:
exit 1
;;
esac
-
- uses: actions/checkout@c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5
with:
fetch-depth: 0
- # Disable unsafe fetch options
persist-credentials: false
- name: Checkout base commit (trusted sanitizers)
uses: actions/checkout@c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5
with:
- # For workflow_call from ci-pr-action: use github.sha (the base branch)
- # For pull_request: use github.event.pull_request.base.sha
- # For workflow_dispatch: use github.sha
ref: ${{ github.event.pull_request.base.sha || github.sha }}
path: base
fetch-depth: 1
@@ -81,25 +75,6 @@ jobs:
run: |
git config --global user.email "github-actions@github.com"
git config --global user.name "GitHub Actions"
-
- - name: Verify remote origin URL (opt out of malicious git configs)
- shell: bash --noprofile --norc {0}
- env:
- BASH_ENV: /dev/null
- run: |
- set -euo pipefail
- git config --add safe.directory "$PWD"
- git config --global credential.helper ""
- origin_url=$(git remote get-url origin || true)
- echo "Remote origin: $origin_url"
- # Enforce that origin points to the expected GitHub repository for this workflow run
- expected="https://github.com/${{ github.repository }}.git"
- # Allow both HTTPS and git@ forms if needed
- if [[ "$origin_url" != "$expected" && "$origin_url" != "${expected%.git}" && "$origin_url" != "git@github.com:InternationalColorConsortium/iccDEV.git" ]]; then
- echo "Origin URL mismatch: expected $expected, ${expected%.git}, or git@github.com:InternationalColorConsortium/iccDEV.git, got $origin_url" >&2
- exit 1
- fi
-
- name: Install Linux dependencies
shell: bash --noprofile --norc {0}
env:
@@ -109,17 +84,25 @@ jobs:
git config --add safe.directory "$PWD"
git config --global credential.helper ""
unset GITHUB_TOKEN || true
-
sudo apt-get update -qq
sudo apt-get install -y \
- build-essential cmake gcc g++ clang clang-tools \
- cppcheck clang-format pkg-config \
- libpng-dev libxml2-dev libtiff-dev \
+ build-essential cmake gcc g++ clang clang-tools clang-tidy \
+ cppcheck clang-format pkg-config jq \
+ libpng-dev libxml2-dev libtiff-dev libjpeg-dev \
nlohmann-json3-dev libwxgtk3.2-dev wx-common \
- python3 python3-pip curl git llvm
-
+ python3 curl git llvm
+ {
+ echo "### Environment"
+ echo "| Tool | Version |"
+ echo "|------|---------|"
+ echo "| cppcheck | $(cppcheck --version 2>&1) |"
+ echo "| clang-tidy | $(clang-tidy --version 2>&1 | head -1) |"
+ echo "| cmake | $(cmake --version | head -1) |"
+ echo "| nproc | $(nproc) |"
+ echo ""
+ } >> "$GITHUB_STEP_SUMMARY"
- id: diffcheck
- name: diffcheck for file changes
+ name: Determine files to analyze
shell: bash --noprofile --norc {0}
env:
BASH_ENV: /dev/null
@@ -128,49 +111,39 @@ jobs:
git config --add safe.directory "$PWD"
git config --global credential.helper ""
unset GITHUB_TOKEN || true
-
git show --stat --pretty=format:"Commit: %H%nAuthor: %an%nDate: %ad%n" HEAD
-
- # If not a pull_request event (e.g., workflow_dispatch or workflow_call),
- # skip source diff checking and mark as non-source change.
- if [ "${{ github.event_name }}" != "pull_request" ]; then
- echo "Non-PR event (${{ github.event_name }}) — skipping source diff check" >&2
- echo "no_src_changes=true" >> "$GITHUB_OUTPUT"
- exit 0
- fi
-
- base_ref="${{ github.base_ref }}"
-
- # Avoid fetching refs from user-controllable inputs like ($base_ref)
- case "$base_ref" in master)
- ;;
- *)
+ if [ "${{ github.event_name }}" = "pull_request" ]; then
+ base_ref="${{ github.base_ref }}"
+ case "$base_ref" in master) ;; *)
echo "Ref blocked or unsupported: $base_ref" >&2
echo "no_src_changes=true" >> "$GITHUB_OUTPUT"
+ echo "scope=none" >> "$GITHUB_OUTPUT"
exit 0
;;
- esac
-
- # Fetch enough history to find merge base
- git -c protocol.version=2 fetch --no-tags origin "${base_ref}" --depth=50
-
- # Case-insensitive extension match (c/h/cpp variants)
- # Use three-dot syntax to show changes since merge-base
- git diff --name-only "origin/${base_ref}...HEAD" \
- | tr -cd '[:alnum:]./\-_\n' \
- | grep -E '\.(cpp|cxx|cc|h|hpp)$' \
- | tr '\n' '\0' > changed_files.txt
-
- changed_file_count="$(xargs -0 -n1 < changed_files.txt | wc -l)"
-
- if [ "$changed_file_count" -eq 0 ]; then
- echo "no_src_changes=true" >> "$GITHUB_OUTPUT"
- else
- echo "no_src_changes=false" >> "$GITHUB_OUTPUT"
- fi
-
+ esac
+ git -c protocol.version=2 fetch --no-tags origin "${base_ref}" --depth=50
+ git diff --name-only "origin/${base_ref}...HEAD" \
+ | tr -cd '[:alnum:]./\-_\n' \
+ | grep -E '\.(cpp|cxx|cc|h|hpp)$' \
+ | tr '\n' '\0' > changed_files.txt
+ changed_file_count="$(xargs -0 -n1 < changed_files.txt | wc -l)"
+ if [ "$changed_file_count" -eq 0 ]; then
+ echo "no_src_changes=true" >> "$GITHUB_OUTPUT"
+ echo "scope=none" >> "$GITHUB_OUTPUT"
+ else
+ echo "no_src_changes=false" >> "$GITHUB_OUTPUT"
+ echo "scope=pr" >> "$GITHUB_OUTPUT"
+ echo "Analyzing $changed_file_count changed files"
+ fi
+ else
+ echo "no_src_changes=false" >> "$GITHUB_OUTPUT"
+ echo "scope=full" >> "$GITHUB_OUTPUT"
+ find IccProfLib IccXML Tools -type f \( -name '*.cpp' -o -name '*.h' -o -name '*.cxx' -o -name '*.cc' -o -name '*.hpp' \) -print0 > changed_files.txt
+ file_count="$(xargs -0 -n1 < changed_files.txt | wc -l)"
+ echo "Full-tree analysis: $file_count source files"
+ fi
- name: Configure and build
- if: ${{ steps.diffcheck.outputs.no_src_changes == 'false' }}
+ if: steps.diffcheck.outputs.no_src_changes == 'false'
shell: bash --noprofile --norc {0}
env:
BASH_ENV: /dev/null
@@ -179,15 +152,54 @@ jobs:
git config --add safe.directory "$PWD"
git config --global credential.helper ""
unset GITHUB_TOKEN || true
-
mkdir -p Build
cd Build
- cmake Cmake -DCMAKE_EXPORT_COMPILE_COMMANDS=ON
- make
- cd ..
+ cmake Cmake -DCMAKE_EXPORT_COMPILE_COMMANDS=ON -Wno-dev
+ make -j"$(nproc)"
+ - name: Upload build context
+ if: steps.diffcheck.outputs.no_src_changes == 'false'
+ uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
+ with:
+ name: lint-build-context
+ retention-days: 1
+ path: |
+ Build/compile_commands.json
+ changed_files.txt
+ #############################################################################
+ # Job 2: Parallel lint matrix
+ # - cppcheck split by component (IccProfLib, IccXML, Tools)
+ # - clang-tidy runs full tree
+ #############################################################################
+ lint:
+ name: "${{ matrix.name }}"
+ runs-on: ${{ inputs.ubuntu-version || 'ubuntu-latest' }}
+ needs: build
+ if: needs.build.outputs.no_src_changes == 'false'
+ timeout-minutes: 30
+ strategy:
+ fail-fast: false
+ matrix:
+ include:
+ - name: "cppcheck • IccProfLib"
+ tool: cppcheck
+ component: IccProfLib
+ - name: "cppcheck • IccXML"
+ tool: cppcheck
+ component: IccXML
+ - name: "cppcheck • Tools"
+ tool: cppcheck
+ component: Tools
+ - name: "clang-tidy"
+ tool: clang-tidy
+ component: all
+ steps:
- - name: Run cppcheck
- if: ${{ steps.diffcheck.outputs.no_src_changes == 'false' }}
+ - uses: actions/checkout@c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5
+ with:
+ fetch-depth: 0
+ persist-credentials: false
+
+ - name: Install dependencies
shell: bash --noprofile --norc {0}
env:
BASH_ENV: /dev/null
@@ -196,41 +208,33 @@ jobs:
git config --add safe.directory "$PWD"
git config --global credential.helper ""
unset GITHUB_TOKEN || true
-
- mkdir -p lint_reports
-
- echo "Running cppcheck on modified source files..."
-
- # --- SECURITY: null-delimited xargs ---
- : > lint_reports/cppcheck.txt
- xargs -0 cppcheck \
- --enable=warning,performance,portability \
- --std=c++17 \
- --output-file=lint_reports/cppcheck.txt \
- < changed_files.txt || true
+ sudo apt-get update -qq
+ sudo apt-get install -y \
+ build-essential cmake gcc g++ clang clang-tools clang-tidy \
+ cppcheck pkg-config \
+ libpng-dev libxml2-dev libtiff-dev libjpeg-dev \
+ nlohmann-json3-dev libwxgtk3.2-dev wx-common \
+ llvm
+ - name: Download build context
+ uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16
+ with:
+ name: lint-build-context
- - name: Run clang-tidy
- if: ${{ steps.diffcheck.outputs.no_src_changes == 'false' }}
+ - name: Filter files for component
+ if: matrix.tool == 'cppcheck'
shell: bash --noprofile --norc {0}
env:
BASH_ENV: /dev/null
run: |
set -euo pipefail
- git config --add safe.directory "$PWD"
- git config --global credential.helper ""
- unset GITHUB_TOKEN || true
- mkdir -p lint_reports
-
- # --- clang-tidy ---
- : > lint_reports/clang_tidy.txt
- xargs -0 run-clang-tidy \
- -p Build \
- -checks='modernize-*,readability-*,cppcoreguidelines-*,clang-analyzer-core.*,clang-analyzer-security.*,clang-analyzer-alpha.core.*,clang-analyzer-alpha.security.*' \
- < changed_files.txt \
- | tee lint_reports/clang_tidy.txt || true
-
- - name: Skip lint (no source changes)
- if: ${{ steps.diffcheck.outputs.no_src_changes == 'true' }}
+ # Filter changed_files.txt to only this component's files
+ xargs -0 -n1 < changed_files.txt \
+ | { grep "^${{ matrix.component }}/" || true; } \
+ | tr '\n' '\0' > component_files.txt
+ FILE_COUNT=$(xargs -0 -n1 < component_files.txt 2>/dev/null | wc -l)
+ echo "Component ${{ matrix.component }}: $FILE_COUNT files to analyze"
+ echo "file_count=$FILE_COUNT" >> "$GITHUB_ENV"
+ - name: Run ${{ matrix.name }}
shell: bash --noprofile --norc {0}
env:
BASH_ENV: /dev/null
@@ -239,16 +243,100 @@ jobs:
git config --add safe.directory "$PWD"
git config --global credential.helper ""
unset GITHUB_TOKEN || true
+ NPROC=$(nproc)
mkdir -p lint_reports
- echo "No .cpp/.h changes detected; skipping lint." > lint_reports/cppcheck.txt
- : > lint_reports/clang_tidy.txt
-
- - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
+ if [ "${{ matrix.tool }}" = "cppcheck" ]; then
+ if [ "${file_count:-0}" -eq 0 ]; then
+ echo "No ${{ matrix.component }} files to check — skipping"
+ : > lint_reports/cppcheck_${{ matrix.component }}.txt
+ else
+ echo "Running cppcheck on ${{ matrix.component }} with $NPROC parallel jobs"
+ xargs -0 cppcheck \
+ -j "$NPROC" \
+ --enable=warning,performance,portability,style \
+ --std=c++17 \
+ --suppress=missingIncludeSystem \
+ < component_files.txt 2> lint_reports/cppcheck_${{ matrix.component }}.txt || true
+ echo "✓ cppcheck ${{ matrix.component }}: $(wc -l < lint_reports/cppcheck_${{ matrix.component }}.txt) lines"
+ fi
+ else
+ echo "Running clang-tidy with $NPROC parallel jobs"
+ xargs -0 run-clang-tidy \
+ -j "$NPROC" \
+ -p Build \
+ -checks='modernize-*,readability-*,cppcoreguidelines-*,clang-analyzer-core.*,clang-analyzer-security.*,clang-analyzer-alpha.core.*,clang-analyzer-alpha.security.*' \
+ < changed_files.txt \
+ > lint_reports/clang_tidy.txt 2>&1 || true
+ echo "✓ clang-tidy: $(wc -l < lint_reports/clang_tidy.txt) lines"
+ fi
+ - name: Upload results
+ uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
with:
- name: lint-reports
+ name: lint-${{ matrix.tool }}-${{ matrix.component }}
+ retention-days: 3
path: lint_reports/
+ #############################################################################
+ # Job 3: Combined report
+ #############################################################################
+ report:
+ name: "Report"
+ runs-on: ubuntu-latest
+ needs: [build, lint]
+ if: always()
+ timeout-minutes: 5
+ steps:
+
+ - uses: actions/checkout@c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5
+ with:
+ sparse-checkout: .github/scripts
+ persist-credentials: false
+
+ - name: Download cppcheck IccProfLib results
+ if: needs.lint.result == 'success' || needs.lint.result == 'failure'
+ uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16
+ with:
+ name: lint-cppcheck-IccProfLib
+ path: lint_reports/parts/
+ continue-on-error: true
+
+ - name: Download cppcheck IccXML results
+ if: needs.lint.result == 'success' || needs.lint.result == 'failure'
+ uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16
+ with:
+ name: lint-cppcheck-IccXML
+ path: lint_reports/parts/
+ continue-on-error: true
+ - name: Download cppcheck Tools results
+ if: needs.lint.result == 'success' || needs.lint.result == 'failure'
+ uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16
+ with:
+ name: lint-cppcheck-Tools
+ path: lint_reports/parts/
+ continue-on-error: true
+
+ - name: Download clang-tidy results
+ if: needs.lint.result == 'success' || needs.lint.result == 'failure'
+ uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16
+ with:
+ name: lint-clang-tidy-all
+ path: lint_reports/
+ continue-on-error: true
+
+ - name: Merge cppcheck results
+ if: needs.lint.result == 'success' || needs.lint.result == 'failure'
+ shell: bash --noprofile --norc {0}
+ env:
+ BASH_ENV: /dev/null
+ run: |
+ set -euo pipefail
+ mkdir -p lint_reports
+ : > lint_reports/cppcheck.txt
+ for f in lint_reports/parts/cppcheck_*.txt; do
+ [ -f "$f" ] && cat "$f" >> lint_reports/cppcheck.txt
+ done
+ echo "Merged cppcheck: $(wc -l < lint_reports/cppcheck.txt) lines"
- name: Generate GitHub summary
if: always()
shell: bash --noprofile --norc {0}
@@ -259,14 +347,11 @@ jobs:
git config --add safe.directory "$PWD"
git config --global credential.helper ""
unset GITHUB_TOKEN || true
-
- # Load trusted canonical sanitizer functions from base commit
- TRUSTED_SANITIZER="$GITHUB_WORKSPACE/base/.github/scripts/sanitize-sed.sh"
- if [[ -f "$TRUSTED_SANITIZER" ]]; then
+ SANITIZER=".github/scripts/sanitize-sed.sh"
+ if [[ -f "$SANITIZER" ]]; then
# shellcheck disable=SC1090
- source "$TRUSTED_SANITIZER"
+ source "$SANITIZER"
else
- # Fallback sanitizer
escape_html() {
local s="$1"
s="${s//&/&}"
@@ -278,19 +363,139 @@ jobs:
}
sanitize_line() { escape_html "$1"; }
fi
-
- echo "## 🧹 Lint Report Summary" >> $GITHUB_STEP_SUMMARY
-
- if [ "${{ steps.diffcheck.outputs.no_src_changes }}" == "true" ]; then
- echo "🟦 Skipped — no modified source files detected." >> $GITHUB_STEP_SUMMARY
- elif [ -s lint_reports/cppcheck.txt ]; then
- echo "\`\`\`" >> $GITHUB_STEP_SUMMARY
- # Sanitize each line properly - avoid subshell issues
+ echo "## 🧹 Lint Report Summary" >> "$GITHUB_STEP_SUMMARY"
+ echo "" >> "$GITHUB_STEP_SUMMARY"
+ echo "**Scope:** ${{ needs.build.outputs.scope || 'unknown' }}" >> "$GITHUB_STEP_SUMMARY"
+ echo "" >> "$GITHUB_STEP_SUMMARY"
+ if [ "${{ needs.build.outputs.no_src_changes }}" = "true" ]; then
+ echo "🟦 Skipped — no modified source files detected." >> "$GITHUB_STEP_SUMMARY"
+ exit 0
+ fi
+ mkdir -p lint_reports
+ # --- cppcheck summary ---
+ echo "### cppcheck Results" >> "$GITHUB_STEP_SUMMARY"
+ echo "" >> "$GITHUB_STEP_SUMMARY"
+ if [ -s lint_reports/cppcheck.txt ]; then
+ cpp_warns=$({ grep -c 'warning:' lint_reports/cppcheck.txt 2>/dev/null || true; })
+ cpp_errs=$({ grep -c 'error:' lint_reports/cppcheck.txt 2>/dev/null || true; })
+ cpp_perf=$({ grep -c 'performance:' lint_reports/cppcheck.txt 2>/dev/null || true; })
+ cpp_port=$({ grep -c 'portability:' lint_reports/cppcheck.txt 2>/dev/null || true; })
+ cpp_style=$({ grep -c 'style:' lint_reports/cppcheck.txt 2>/dev/null || true; })
+ echo "| Severity | Count |" >> "$GITHUB_STEP_SUMMARY"
+ echo "|----------|-------|" >> "$GITHUB_STEP_SUMMARY"
+ echo "| error | $cpp_errs |" >> "$GITHUB_STEP_SUMMARY"
+ echo "| warning | $cpp_warns |" >> "$GITHUB_STEP_SUMMARY"
+ echo "| performance | $cpp_perf |" >> "$GITHUB_STEP_SUMMARY"
+ echo "| portability | $cpp_port |" >> "$GITHUB_STEP_SUMMARY"
+ echo "| style | $cpp_style |" >> "$GITHUB_STEP_SUMMARY"
+ echo "" >> "$GITHUB_STEP_SUMMARY"
+ echo "#### Findings by Component" >> "$GITHUB_STEP_SUMMARY"
+ echo "" >> "$GITHUB_STEP_SUMMARY"
+ echo "| Component | Findings |" >> "$GITHUB_STEP_SUMMARY"
+ echo "|-----------|----------|" >> "$GITHUB_STEP_SUMMARY"
+ for comp in IccProfLib IccXML Tools; do
+ f="lint_reports/parts/cppcheck_${comp}.txt"
+ if [ -f "$f" ] && [ -s "$f" ]; then
+ cnt=$(wc -l < "$f" | tr -d ' ')
+ else
+ cnt=0
+ fi
+ echo "| $comp | $cnt |" >> "$GITHUB_STEP_SUMMARY"
+ done
+ echo "" >> "$GITHUB_STEP_SUMMARY"
+ echo "#### Top cppcheck Files" >> "$GITHUB_STEP_SUMMARY"
+ echo "" >> "$GITHUB_STEP_SUMMARY"
+ { grep -oP '^[^:]+\.(cpp|h)' lint_reports/cppcheck.txt 2>/dev/null || true; } \
+ | sort | uniq -c | sort -rn | head -10 \
+ | while read -r cnt fname; do
+ echo "- **$cnt** — $fname" >> "$GITHUB_STEP_SUMMARY"
+ done
+ echo "" >> "$GITHUB_STEP_SUMMARY"
+ echo "cppcheck output (last 50 lines)
" >> "$GITHUB_STEP_SUMMARY"
+ echo "" >> "$GITHUB_STEP_SUMMARY"
+ echo '```' >> "$GITHUB_STEP_SUMMARY"
while IFS= read -r line; do
safe_line=$(sanitize_line "$line")
echo "$safe_line"
- done < <(tail -n 30 lint_reports/cppcheck.txt) >> $GITHUB_STEP_SUMMARY
- echo "\`\`\`" >> $GITHUB_STEP_SUMMARY
+ done < <(tail -n 50 lint_reports/cppcheck.txt) >> "$GITHUB_STEP_SUMMARY"
+ echo '```' >> "$GITHUB_STEP_SUMMARY"
+ echo "