ci/sanitizers: use clang-17 and do not recover (baresip#3054)

* ci/sanitizers: use clang-17 and do not recover

* set CXX compiler

.github/workflows/sanitizers.yml

@@ -10,17 +10,18 @@ on:
 
 jobs:
   sanitizers:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
 
     strategy:
       matrix:
         sanitizer: [thread, address, undefined]
 
     env:
-      CC: clang
+      CC: clang-17
+      CXX: clang++-17
       CMAKE_GENERATOR: Ninja
-      CXXFLAGS: "-fsanitize=${{ matrix.sanitizer }} -fno-sanitize-recover"
-      CFLAGS: "-fsanitize=${{ matrix.sanitizer }} -fno-sanitize-recover"
+      CXXFLAGS: "-fsanitize=${{ matrix.sanitizer }} -fno-sanitize-recover=all -fno-sanitize=function"
+      CFLAGS: "-fsanitize=${{ matrix.sanitizer }} -fno-sanitize-recover=all -fno-sanitize=function"
       ASAN_OPTIONS: fast_unwind_on_malloc=0
 
     steps:
@@ -39,6 +40,12 @@ jobs:
       run: |
         sudo sysctl -w vm.mmap_rnd_bits=28
 
+    - name: Install clang-tools
+      run: |
+        wget -O - https://apt.llvm.org/llvm-snapshot.gpg.key | sudo apt-key add -
+        sudo add-apt-repository "deb http://apt.llvm.org/jammy/ llvm-toolchain-jammy-17 main"
+        sudo apt-get update && sudo apt-get install -y clang-17
+
     - uses: sreimers/pr-dependency-action@v1
       with:
         name: re