Editing Openai/695a2b27-bfe4-8005-959b-536ec4f485aa (section)

=== 也就是说： ===
* CC=clang_wrapper（只是名字）
* 真正的执行路径由 wrapper 自己在 runfiles 里找

=== <syntaxhighlight>toolchain/ ===
    BUILD
    clang_wrapper.sh
    ignorelist.txt

</syntaxhighlight>

=== <syntaxhighlight lang="bash">#!/bin/bash ===
set -euo pipefail

=== Compute runfiles location ===
=== Bazel guarantees this structure: ===
=== $0.runfiles/<workspace>/toolchain/... ===
SELF="$0"
RUNFILES="${SELF}.runfiles"
WORKSPACE="$(ls "$RUNFILES")"   # usually only one dir

IGNORELIST="${RUNFILES}/${WORKSPACE}/toolchain/ignorelist.txt"
REAL_CLANG="$(which clang++)"

exec "${REAL_CLANG}" \
  -fsanitize-ignorelist="${IGNORELIST}" \
  "$@"

</syntaxhighlight>

<syntaxhighlight>chmod +x toolchain/clang_wrapper.sh

</syntaxhighlight>

=== <syntaxhighlight lang="python">sh_binary( ===
    name = "clang_wrapper",
    srcs = ["clang_wrapper.sh"],
    data = ["ignorelist.txt"],
)

</syntaxhighlight>

注意：名字是 <code>clang_wrapper</code>（没有路径）

Bazel 使用时会在 runfiles 查到它。

=== <syntaxhighlight>build --repo_env=CC=clang_wrapper ===
build --repo_env=CXX=clang_wrapper

</syntaxhighlight>

这里必须是纯可执行名字，不能包含 <code>/</code>。

=== <syntaxhighlight>bazel build --config=asan //... ===

</syntaxhighlight>

所有 C++ 编译都会走 wrapper，并自动加 ignorelist。