enable ASAN/UBSAN in pandas CI

.github/actions/build_pandas/action.yml

@@ -4,6 +4,9 @@ inputs:
   editable:
     description: Whether to build pandas in editable mode (default true)
     default: true
+  sanitize:
+    description: Whether sanitizers should be used or not
+    default: false
 runs:
   using: composite
   steps:
@@ -25,8 +28,16 @@ runs:
     - name: Build Pandas
       run: |
         if [[ ${{ inputs.editable }} == "true" ]]; then
-          pip install -e . --no-build-isolation -v
+          if [[ ${{ inputs.sanitize }} == "true" ]]; then
+            pip install -e . --no-build-isolation -v  --config-settings=setup-args="-Db_sanitize=address,undefined"
+          else
+            pip install -e . --no-build-isolation -v
+          fi
         else
-          pip install . --no-build-isolation -v
+          if [[ ${{ inputs.sanitize }} == "true" ]]; then
+            pip install . --no-build-isolation -v --config-settings=setup-args="-Db_sanitize=address,undefined"
+          else
+            pip install . --no-build-isolation -v
+          fi
         fi
       shell: bash -el {0}

.github/workflows/unit-tests.yml

@@ -154,22 +154,36 @@ jobs:
       with:
         environment-file: ci/deps/${{ matrix.env_file }}
 
+    - name: Set sanitizer flags
+      run: |
+        echo "CFLAGS=$CFLAGS -fno-sanitize-recover=all" >> "$GITHUB_ENV"
+    - name: echo flags
+      run: |
+        printf '%s\n' "CFLAGS"
     - name: Build Pandas
       id: build
       uses: ./.github/actions/build_pandas
+      env:
+        CFLAGS: "$CFLAGS"
+      with:
+        sanitize: true
 
     - name: Test (not single_cpu)
       uses: ./.github/actions/run-tests
       if: ${{ matrix.name != 'Pypy' }}
       env:
         # Set pattern to not single_cpu if not already set
         PATTERN: ${{ env.PATTERN == '' && 'not single_cpu' || matrix.pattern }}
+        ASAN_OPTIONS: detect_leaks=0
+        LD_PRELOAD: $(gcc -print-file-name=libasan.so)
 
     - name: Test (single_cpu)
       uses: ./.github/actions/run-tests
       env:
         PATTERN: 'single_cpu'
         PYTEST_WORKERS: 0
+        ASAN_OPTIONS: detect_leaks=0
+        LD_PRELOAD: $(gcc -print-file-name=libasan.so)
       if: ${{ matrix.pattern == '' && (always() && steps.build.outcome == 'success')}}
 
   macos-windows: