Compare commits

..

100 commits

Author SHA1 Message Date
Fedora Release Engineering
d29890bd41 Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild 2026-01-16 03:41:03 +00:00
Nick Clifton
ba3345aaf8 Annocheck: Add .fc44 to list of known rpm file extensions. 2026-01-15 15:29:42 +00:00
Jakub Jelinek
2576bee059 13.04-3 2025-12-20 15:11:11 +01:00
Jakub Jelinek
20e0cb02b6 13.04-2 2025-12-20 13:43:13 +01:00
Nick Clifton
e11676d4ef Annocheck: Fix compile time warnings from GCC-15 re: strchr returning a const char *. 2025-12-18 08:48:36 +00:00
Nick Clifton
a84ff42993 Annocheck: Skip production test for gcc libraries. (RHEL-123175) 2025-11-05 10:32:54 +00:00
Nick Clifton
60e36afe5f Annocheck: Update heuristic to detect gcc libraries. (RHEL-124869) 2025-10-31 14:52:22 +00:00
Nick Clifton
844d102d83 Annocheck: Change FAIL for binaries built by a cross compiler to a MAYBE. (RHEL-123175) 2025-10-23 17:01:42 +01:00
Nick Clifton
8bc321d24a Annocheck: Improve detection of glibc static maths libraries. (RHEL-107470) 2025-08-06 10:36:49 +01:00
Fedora Release Engineering
6869ce708f Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild 2025-07-23 16:59:30 +00:00
Nick Clifton
9c45dd821c Improve configure and meson files for consistent builds. 2025-07-07 10:34:33 +01:00
Nick Clifton
4ed470d1fb 12.97: Annocheck: delete temporary debuginfo directory 2025-06-19 11:06:02 +01:00
Nick Clifton
874f029d05 Annocheck: Fix bugs in debug rpm location code. Add more glibc exceptions. (RHEL-95216) 2025-06-04 17:17:24 +01:00
Nick Clifton
e3fb5aa977 Annocheck: Improve performance with multiple debug info files and multiple files to scan. (#2366180) 2025-05-15 16:31:37 +01:00
Nick Clifton
55b74474e1 Annocheck: Update heuristic for detecting gcc files to cope with gcc 15. (#2365824) 2025-05-13 10:59:11 +01:00
Nicholas Clifton
4b2447ab99 Merge #36 Generate latest-annobin.tar.xz at %prep 2025-03-17 12:22:31 +00:00
Nick Clifton
5d1c0d8e7e 12.93: Fix GO revision test 2025-03-17 11:40:30 +00:00
Tulio Magno Quites Machado Filho
5c3d24ca6f Generate latest-annobin.tar.xz at %prep
Generate a source tarball for annobin during the prep phase, after all
the patches have been applied.  Use this new tarball when installing the
annobin source code for the GCC plugin.

On distros without downstream patches, this change should not produce
any changes.
2025-03-14 10:47:40 -03:00
Nick Clifton
be7ffb96bc Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files. (RHEL-79264) 2025-02-14 10:54:12 +00:00
Nick Clifton
38595c3a34 Annocheck: Fix resource leak. (RHEL-79256) 2025-02-13 14:03:32 +00:00
Nick Clifton
c5469afe65 Annocheck: Fix double free(). Add special handling for COMBOOT modules 2025-02-12 10:18:34 +00:00
Nick Clifton
36aba6172f Annocheck: Improve diagnostics when a separate debug info file cannot be found. 2025-02-11 10:55:02 +00:00
Nick Clifton
274102f8bd Annocheck: Look for -fstack-clash-protection in DW_AT_producer string. (RHEL-77328) 2025-02-03 15:01:29 +00:00
Nick Clifton
5cc01bd7ed NVR bump 2025-01-28 12:06:14 +00:00
Nick Clifton
667f38a457 Annocheck: Fix locating string notes (again). Add exception for glibc benchmark tests. (RHEL-76456) 2025-01-28 12:03:03 +00:00
Nick Clifton
a64f9d3ef1 Annocheck: Add crtoffloadtableS.o to list of known gcc binaries. (RHEL-760404) 2025-01-28 09:39:10 +00:00
Nick Clifton
52003fae98 12.85: Annocheck: Fix the --debug-dir option 2025-01-27 12:38:04 +00:00
Nick Clifton
3ed5a5358c Annocheck: Fix corrupt warning message when unable to locate separate debug info files. 2025-01-23 16:49:52 +00:00
Nick Clifton
63d1c12cd1 12.83: Annocheck: Remove spurious debugging messages 2025-01-22 11:41:30 +00:00
Nick Clifton
2415dea790 Annocheck: Always look for annobin notes in separate debug info files. (RHEL-75778) 2025-01-22 09:49:29 +00:00
Nick Clifton
50892b98b6 Annocheck: Support multiple --debug-rpm options. (RHEL-73349) 2025-01-16 10:57:14 +00:00
Jakub Jelinek
b1ea65635a 12.80-2 2025-01-11 10:48:27 +01:00
Nick Clifton
ad8d2bb481 Annocheck: Add support for sys-root'ed glibc packages.
Resolves: RHEL-71296
2024-12-13 16:04:32 +00:00
Nick Clifton
8174c433db GCC Plugin: Tidy up use of gcc's diagnoatic headers. Testsuite: Use configured compiler when running tests.
Resolves: PR 32429
2024-12-10 11:03:32 +00:00
Nick Clifton
3366463083 GCC Plugin: Fix building with gcc 15. 2024-12-09 17:03:30 +00:00
Nick Clifton
66d77f6d27 Annocheck: Fix overly long debug messages. 2024-11-15 11:02:49 +00:00
Nick Clifton
bfeba1a32c Annocheck: Rename rwx-seg test to load-segments. Add more checks. Add check for gaps as a future fail.
Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
Annocheck: Add --enable-future to enable future fail components in normal tests.
Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
2024-11-15 10:15:41 +00:00
Nick Clifton
20e56a3c65 Annocheck: Add more exceptions for gcc binaries. (RHEL-33365)
Annocheck: Add --skip-passes option.
2024-11-12 08:51:17 +00:00
Nick Clifton
a136ae0fec Annocheck: Add exceptions for gcc binaries. (RHEL-33365) 2024-11-06 09:00:24 +00:00
Nick Clifton
58d868552b Annocheck: Skip property note test for i386 binaries created by LLVM. (#2323797) 2024-11-05 14:18:23 +00:00
Nick Clifton
c59a7e6fcd Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info. (RHEL-65411) 2024-11-01 17:07:52 +00:00
Nick Clifton
d1cb3897cd GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS. 2024-10-14 11:46:45 +01:00
Nick Clifton
f14a6141ce Clang & LLVM Plugins: Include install directory in binary. (RHEL-54069) 2024-08-14 08:31:05 +01:00
Nick Clifton
7583405a16 BuiltBy: Fix seg-fault when comparing language version strings. (RHEL-53497) 2024-08-12 14:27:20 +01:00
Nick Clifton
1af9abd0da Annocheck: Stop spurious assembler warnings. (RHEL-53213) - Annocheck: Stop warnings about known gaps. (RHEL-53218) 2024-08-07 16:11:25 +01:00
Nick Clifton
723cebcb85 Annocheck: Fix stack realign test. (#2302427) 2024-08-02 12:21:43 +01:00
Nick Clifton
971ba2a8a8 Annocheck: Fix recording arguments for later re-use. 2024-07-29 14:26:39 +01:00
Nick Clifton
0e3736f8d5 GCC Plugin: Fix building AArch64 component with GCC < 11.5 2024-07-26 11:36:40 +01:00
Nick Clifton
45d3b32bb5 Annocheck: Add improvements to the builtby utility. 2024-07-22 16:41:34 +01:00
Fedora Release Engineering
8b14651d73 Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild 2024-07-17 17:00:25 +00:00
Nick Clifton
66acf79a65 Annocheck: Add support for ADA binaries.
Annocheck: Add support for binaries built from more than two high level source languages.
Annocheck: Add support for object files containing no executable code.
Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
2024-07-08 16:18:17 +01:00
Nick Clifton
ef0b5b688f Annocheck: Add support for Fortran binaries. 2024-06-26 13:14:34 +01:00
Nick Clifton
e3ef33dbab Annocheck: Add heuristic for detecting parts of the CGO runtime library. 2024-06-11 11:09:31 +01:00
Nick Clifton
259c41299f Annocheck: Add improvements for handling Clang runtime binaries. 2024-06-10 20:21:55 +01:00
Nick Clifton
d6a496d36f Annocheck: Add tweaks for mixed Rust/C binaries. Annocheck: Add more glibc source file names.
Resolves: #2284605
2024-06-04 12:59:30 +01:00
Nick Clifton
ae512e7472 Annocheck: Skip GAPS test for GO binaries. (RHEL-36308) 2024-05-20 17:02:37 +01:00
Nick Clifton
bdb24185ac Spec File: Add annobin plugin document directory to the files section. (#2279779) 2024-05-20 11:01:20 +01:00
Nick Clifton
9258b8e345 Remove spurious tabs in spec file 2024-05-15 09:40:39 +01:00
Nick Clifton
2f7d934a1b Annocheck: Remove some false positives for Rust binaries. (#2280239) 2024-05-14 13:12:09 +01:00
Nick Clifton
ccc51555db Spec File: Add the annobin source directory to the files section. (#2279779) 2024-05-09 14:57:48 +01:00
Nick Clifton
c1911b4522 Annocheck: Defer passing the branch protection test until all notes have been checked.
GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)
2024-05-09 13:32:34 +01:00
Nick Clifton
36d58767e8 Annocheck: Add OpenSSL Engine test. (PTG-319) 2024-04-25 15:37:11 +01:00
Nick Clifton
347ab12f1b Fix typo in RiscV-64 test 2024-04-23 17:06:11 +01:00
Nick Clifton
bfcebe5b7a Annocheck: Test for gaps even when only one note is present. 2024-04-23 14:01:09 +01:00
Nick Clifton
3c6b5392cb Annocheck: Skip AArch64 branch protection test for GO binaries. 2024-04-22 10:10:53 +01:00
Nick Clifton
ea27843b39 GCC Plugin: Disable active check for -Wimplicit-int for non-C sources. (#2275884) 2024-04-18 14:57:25 +01:00
Nick Clifton
f781e05bf2 Annocheck: Update heuristics for detecting glibc code in executables. 2024-04-02 12:24:49 +01:00
Nick Clifton
896c08393d Clang & LLVM Plugins: Allow environment to override fortification level. (RHEL-30579) - Spec File: Override fortification level and set it to 3. 2024-03-27 15:34:11 +00:00
Nick Clifton
303819a5ab Improve AArch64 branch protection (again) 2024-03-25 17:14:25 +00:00
Nick Clifton
47385af4e7 GCC Plugin: Fix bug extracing the value of target specific command line options. 2024-03-21 13:55:31 +00:00
Nick Clifton
5f0f6e2130 Configure: Remove check for FrontendPluginRegistry.h header as it is stored in a non-standard location on Debian systems.
Debuginfod test: Allow for the libdwfl library silently contacting the debuginfod server.
2024-03-06 11:09:08 +00:00
Nick Clifton
69b1a48d80 LLVM Plugin: Use llvm-config to get the correct paths and options for building executables.
Clang Plugin: Likewise.
Enable silent rules for most building.
Annocheck: Correctly extract DWARF attributes from DT_REL files.
2024-03-05 19:15:50 +00:00
Nick Clifton
25eb793fc6 Annocheck: Improve heuristics for locating debug info files.
Resolves: #2267097
2024-03-01 13:23:24 +00:00
Nick Clifton
0effccb8be Clang Plugin: Fix building with Clang 18. GCC Plugin: Add support for MIPS specific target functions; use .dc.a for address expressions in 64-bit ELF format notes.
Resolves PR #31414
2024-02-27 14:12:46 +00:00
Nick Clifton
73b8007cea Spec File: Remove a workaround for ppc64le. 2024-02-21 10:40:46 +00:00
Nick Clifton
f8fff3b527 fix version number in changelog entry 2024-02-20 10:42:34 +00:00
Nick Clifton
53b741aee7 Annocheck: Improve heuristic for skipping LTO and FORTIFY tests. (#2264000) 2024-02-13 10:41:58 +00:00
Nick Clifton
b33d6eb99f Annocheck: Also skip property note test for i686 binaries. (#2258571) 2024-02-09 19:44:11 +00:00
Nick Clifton
060caaa613 Annocheck: Also skip the entry point test for i686 binaries.
Resolves: #2258571
2024-01-23 11:21:43 +00:00
Fedora Release Engineering
a27178473c Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-22 23:03:39 +00:00
Fedora Release Engineering
fd3c6e395f Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-19 12:57:19 +00:00
Nick Clifton
d284a8fcc1 GCC Plugin: Do not use section groups with string notes. 2024-01-17 14:24:49 +00:00
Nick Clifton
14a9d08e3b Spec File: NVR bump in order to allow building in side tag. 2024-01-16 12:09:50 +00:00
Nick Clifton
9285dfc44f Annocheck: Disable cf-protection test for i686 architecture.
Resolves: #2258571
2024-01-16 11:32:07 +00:00
Nick Clifton
bcf9899fd2 Spec File: NVR bump in order to allow building in side tag. 2024-01-15 10:53:17 +00:00
Nick Clifton
7e0b254b14 temporarily disable hard gcc version check 2024-01-15 10:05:28 +00:00
Nick Clifton
7c96faca28 NVR bump to allow rebuild in side tag 2024-01-15 09:21:52 +00:00
Nick Clifton
8f0126e8de Spec File: Do not install annocheck.1.gz when annocheck is disabled 2024-01-11 15:27:40 +00:00
Nick Clifton
74b0aa2a4f Annocheck: Improve detection of FIPS compliant GO binaries. 2024-01-04 15:00:28 +00:00
Nick Clifton
0fb7998b16 GCC Plugin: Fix recording of the -Wimplicit-int and -Wimplicit-function-declaration warnings. Add active checks for when they are deliberately disabled. 2023-12-15 13:31:47 +00:00
Nick Clifton
01a58912b3 Tests: Fix implicit-values test so that it will compile with gcc 14+. 2023-12-11 13:01:20 +00:00
Nick Clifton
5e535c171f GCC Plugin: Add support for -fhardended. 2023-11-24 11:10:53 +00:00
Nick Clifton
0a315f7267 Update glibc detection heuristics for PPC64. (RHEL-16453) 2023-11-15 15:56:06 +00:00
Nick Clifton
7bfea6e7ea Fix another atexit test failure. (#2247481) 2023-11-01 16:23:37 +00:00
Nick Clifton
e6c17188a8 Fix atexit test failure. Notes: Add support for string format notes. 2023-10-30 10:12:51 +00:00
Nick Clifton
518e422ce8 GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
Annobin: Add future test of these options.
2023-10-06 13:30:21 +01:00
Nick Clifton
820e8490c1 12.27: Add detection and reporting of the absence of -Wimplicit-int and -Wimplicit-function-declaration 2023-09-26 14:59:48 +01:00
Nick Clifton
290b9207f3 Remove redundant patch 2023-09-26 11:18:36 +01:00
Nick Clifton
9aa8c4025e LLVM Plugin: Fix building with LLVM version 17. 2023-09-06 08:26:36 +01:00
Nick Clifton
d4a01699fc GCC Plugin: Enable string note format by default. 2023-08-30 08:32:43 +01:00
3 changed files with 240 additions and 39 deletions

View file

@ -1,11 +0,0 @@
--- annobin.orig/gcc-plugin/annobin.cc 2023-05-05 11:03:18.395959180 +0100
+++ annobin-12.10/gcc-plugin/annobin.cc 2023-05-05 11:04:03.241964885 +0100
@@ -80,7 +80,7 @@ unsigned long annobin_max_stack_size =
bool annobin_is_64bit = false;
/* Where to put notes. */
-note_type annobin_note_format = note;
+note_type annobin_note_format = string;
/* Default to using section groups as the link-order
method needs a linker from binutils 2.36 or later. */

View file

@ -1,8 +1,8 @@
Name: annobin
Summary: Annotate and examine compiled binary files
Version: 12.60
Release: 1%{?dist}
Version: 13.05
Release: 2%{?dist}
License: GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later
URL: https://sourceware.org/annobin/
# Maintainer: nickc@redhat.com
@ -36,7 +36,12 @@ URL: https://sourceware.org/annobin/
# Set this to zero to disable the requirement for a specific version of gcc.
# This should only be needed if there is some kind of problem with the version
# checking logic or when building on RHEL-7 or earlier.
%global with_hard_gcc_version_requirement 1
#
# Update: now that we have gcc version checking support in redhat-rpm-config
# there is no longer a great need for a hard gcc version check here. Not
# enabling this check greatly simplifies the process of installing a new major
# version of gcc into the buildroot.
%global with_hard_gcc_version_requirement 0
%bcond_without plugin_rebuild
# Allow the building of annobin without using annobin itself.
@ -54,7 +59,7 @@ URL: https://sourceware.org/annobin/
# uncommenting the lines below will result in annocheck not passing the rpminspect
# tests....
# %%if %%{without plugin_rebuild}
%undefine _annotated_build
# %%undefine _annotated_build
# %%endif
#---------------------------------------------------------------------------------
@ -319,6 +324,10 @@ touch configure */configure Makefile.in */Makefile.in
# Similarly we do not want to rebuild the documentation.
touch doc/annobin.info
# Generate a source tarball for installation later with all the patches
# applied. This must be the last step in the prep section.
tar -C ../ -cJf ../latest-annobin.tar.xz %{name}-%{version}
#---------------------------------------------------------------------------------
%build
@ -358,11 +367,8 @@ CONFIG_ARGS="$CONFIG_ARGS --without-tests"
%if %{without annocheck}
CONFIG_ARGS="$CONFIG_ARGS --without-annocheck"
%else
# Fedora supports AArch64's -mbranch-protection=bti, RHEL does not.
%if 0%{?fedora} != 0
export CFLAGS="$CFLAGS -DAARCH64_BRANCH_PROTECTION_SUPPORTED=1"
%endif
%endif
%set_build_flags
@ -375,17 +381,14 @@ export LDFLAGS="$LDFLAGS %build_ldflags"
export CLANG_TARGET_OPTIONS="-fcf-protection"
%endif
%ifarch aarch64
%if 0%{?fedora} != 0
export CLANG_TARGET_OPTIONS="-mbranch-protection=standard"
%endif
%endif
%ifnarch riscv64
export CLANG_TARGET_OPTIONS="$CLANG_TARGET_OPTIONS -flto"
%endif
%ifarch ppc ppc64 ppc64le
# FIXME: This is a workaround for a problem with the Clang C++ headers. It should not be needed.
export CLANG_TARGET_OPTIONS="-mabi=ibmlongdouble"
%endif
# Override the default fortification level used by the Clang and LLVM plugins.
export PLUGIN_FORTIFY_OPTION="-D_FORTIFY_SOURCE=3"
CFLAGS="$CFLAGS" LDFLAGS="$LDFLAGS" CXXFLAGS="$CFLAGS" %configure ${CONFIG_ARGS} || cat config.log
@ -420,13 +423,13 @@ rm %{_tmppath}/tmp_annobin.so
%if %{with clangplugin}
cp clang-plugin/annobin-for-clang.so %{_tmppath}/tmp_annobin.so
# To enable verbose more in the plugin append the following: ANNOBIN="verbose"
make -C clang-plugin clean all CLANG_TARGET_OPTIONS="$CLANG_TARGET_OPTIONS $BUILD_FLAGS"
make -C clang-plugin clean all CLANG_TARGET_OPTIONS="$CLANG_TARGET_OPTIONS $BUILD_FLAGS" PLUGIN_INSTALL_DIR=%{clang_plugin_dir}
%endif
%if %{with llvmplugin}
cp llvm-plugin/annobin-for-llvm.so %{_tmppath}/tmp_annobin.so
# To enable verbose more in the plugin append the following: ANNOBIN_VERBOSE="true"
make -C llvm-plugin clean all CLANG_TARGET_OPTIONS="$CLANG_TARGET_OPTIONS $BUILD_FLAGS"
make -C llvm-plugin clean all CLANG_TARGET_OPTIONS="$CLANG_TARGET_OPTIONS $BUILD_FLAGS" PLUGIN_INSTALL_DIR=%{llvm_plugin_dir}
%endif
# endif for %%if {with_plugin_rebuild}
@ -454,7 +457,7 @@ cat `gcc --print-file-name=rpmver` > %{buildroot}/%{ANNOBIN_GCC_PLUGIN_DIR}/%{av
# Also install a copy of the sources into the build tree.
mkdir -p %{buildroot}%{annobin_source_dir}
cp %{_sourcedir}/%{annobin_sources} %{buildroot}%{annobin_source_dir}/latest-annobin.tar.xz
cp ../latest-annobin.tar.xz %{buildroot}%{annobin_source_dir}/latest-annobin.tar.xz
%endif
rm -f %{buildroot}%{_infodir}/dir
@ -533,9 +536,166 @@ make check
#---------------------------------------------------------------------------------
%changelog
* Fri Jan 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 13.05-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Thu Jan 15 2026 Nick Clifton <nickc@redhat.com> - 13.05-1
- Annocheck: Add .fc44 to list of known rpm file extensions.
* Sat Dec 20 2025 Jakub Jelinek <jakub@redhat.com> - 13.04-3
- NVR bump to allow rebuild for new GCC in a side-tag.
* Sat Dec 20 2025 Jakub Jelinek <jakub@redhat.com> - 13.04-2
- NVR bump to allow rebuild for new GCC in a side-tag.
* Thu Dec 18 2025 Nick Clifton <nickc@redhat.com> - 13.04-1
- Annocheck: Fix compile time warnings from GCC-15 re: strchr returning a const char *.
* Wed Nov 05 2025 Nick Clifton <nickc@redhat.com> - 13.03-1
- Annocheck: Skip production test for gcc libraries. (RHEL-123175)
* Fri Oct 31 2025 Nick Clifton <nickc@redhat.com> - 13.02-1
- Annocheck: Update heuristic to detect gcc libraries. (RHEL-124869)
* Thu Oct 23 2025 Nick Clifton <nickc@redhat.com> - 13.01-1
- Annocheck: Change FAIL for binaries built by a cross compiler to a MAYBE. (RHEL-123175)
* Wed Aug 06 2025 Nick Clifton <nickc@redhat.com> - 12.99-1
- Annocheck: Improve detection of glibc static maths libraries. (RHEL-107470)
* Wed Jul 23 2025 Fedora Release Engineering <releng@fedoraproject.org> - 12.98-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Fri Jul 04 2025 Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 12.98-1
- Improve configure and meson files for consistent builds.
* Thu Jun 19 2025 Nick Clifton <nickc@redhat.com> - 12.97-1
- Annocheck: Delete the temporary debug info directory after the tests have finished.
* Wed Jun 04 2025 Nick Clifton <nickc@redhat.com> - 12.96-1
- Annocheck: Fix bugs in debug rpm location code. Add more glibc exceptions. (RHEL-95216)
* Thu May 15 2025 Nick Clifton <nickc@redhat.com> - 12.95-1
- Annocheck: Improve performance with multiple debug info files and multiple files to scan. (#2366180)
* Tue May 13 2025 Nick Clifton <nickc@redhat.com> - 12.94-1
- Annocheck: Update heuristic for detecting gcc files to cope with gcc 15. (#2365824)
* Mon Mar 17 2025 Nick Clifton <nickc@redhat.com> - 12.93-1
- Annocheck: Fix test for GO revision. (RHEL-56031)
* Fri Feb 14 2025 Nick Clifton <nickc@redhat.com> - 12.92-1
- Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files. (RHEL-79264)
* Thu Feb 13 2025 Nick Clifton <nickc@redhat.com> - 12.91-1
- Annocheck: Fix resource leak. (RHEL-79253)
* Wed Feb 12 2025 Nick Clifton <nickc@redhat.com> - 12.90-1
- Annocheck: Fix double free. Add special handling for COMBOOT modules.
* Tue Feb 11 2025 Nick Clifton <nickc@redhat.com> - 12.89-1
- Annocheck: Improve diagnostics when a separate debug info file cannot be found.
* Mon Feb 03 2025 Nick Clifton <nickc@redhat.com> - 12.88-1
- Annocheck: Look for -fstack-clash-protection in DW_AT_producer string. (RHEL-77328)
* Tue Jan 28 2025 Nick Clifton <nickc@redhat.com> - 12.87-1
- Annocheck: Fix locating string notes (again). Add exception for glibc benchmark tests. (RHEL-76456)
* Mon Jan 27 2025 Nick Clifton <nickc@redhat.com> - 12.86-1
- Annocheck: Add crtoffloadtableS.o to list of known gcc binaries. (RHEL-760404)
* Mon Jan 27 2025 Nick Clifton <nickc@redhat.com> - 12.85-1
- Annocheck: Fix the --debug-dir option.
* Thu Jan 23 2025 Nick Clifton <nickc@redhat.com> - 12.84-1
- Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
* Wed Jan 22 2025 Nick Clifton <nickc@redhat.com> - 12.83-1
- Annocheck: Remove spurious debugging messages.
* Wed Jan 22 2025 Nick Clifton <nickc@redhat.com> - 12.82-1
- Annocheck: Always look for annobin notes in separate debug info files. (RHEL-75778)
* Thu Jan 16 2025 Nick Clifton <nickc@redhat.com> - 12.81-1
- Annocheck: Support multiple --debug-rpm and --debug-file options. (RHEL-73349)
* Sat Jan 11 2025 Jakub Jelinek <jakub@redhat.com> - 12.80-2
- NVR bump to allow rebuild for new GCC in a side-tag.
* Fri Dec 13 2024 Nick Clifton <nickc@redhat.com> - 12.80-1
- Annocheck: Add support for sys-root'ed glibc packages. (RHEL-71296)
* Tue Dec 10 2024 Nick Clifton <nickc@redhat.com> - 12.79-1
- GCC Plugin: Tidy up use of gcc's diagnoatic headers. (#32429)
- Testsuite: Use configured compiler when running tests.
* Mon Dec 09 2024 Nick Clifton <nickc@redhat.com> - 12.78-1
- GCC Plugin: Fix building with gcc 15. (#32429)
* Fri Nov 15 2024 Nick Clifton <nickc@redhat.com> - 12.77-1
- Annocheck: Fix overly long debug messages.
* Fri Nov 15 2024 Nick Clifton <nickc@redhat.com> - 12.76-1
- Annocheck: Rename rwx-seg test to load-segments. Add more checks. Add check for gaps as a future fail.
- Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
- Annocheck: Add --enable-future to enable future fail components in normal tests.
- Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
* Tue Nov 12 2024 Nick Clifton <nickc@redhat.com> - 12.75-1
- Annocheck: Add more exceptions for gcc binaries. (RHEL-33365)
- Annocheck: Add --skip-passes option.
* Wed Nov 06 2024 Nick Clifton <nickc@redhat.com> - 12.74-1
- Annocheck: Add exceptions for gcc binaries. (RHEL-33365)
* Tue Nov 05 2024 Nick Clifton <nickc@redhat.com> - 12.73-1
- Annocheck: Skip property note test for i386 binaries created by LLVM. (#2323797)
* Fri Nov 01 2024 Nick Clifton <nickc@redhat.com> - 12.72-1
- Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info. (RHEL-65411)
* Mon Oct 14 2024 Nick Clifton <nickc@redhat.com> - 12.71-1
- GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.
* Tue Aug 13 2024 Nick Clifton <nickc@redhat.com> - 12.70-1
- Clang & LLVM Plugins: Include install directory in binary. (RHEL-54069)
* Mon Aug 12 2024 Nick Clifton <nickc@redhat.com> - 12.69-1
- BuiltBy: Fix seg-fault when comparing language version strings. (RHEL-53497)
* Wed Aug 07 2024 Nick Clifton <nickc@redhat.com> - 12.67-1
- Annocheck: Stop spurious assembler warnings. (RHEL-53213)
- Annocheck: Stop warnings about known gaps. (RHEL-53218)
* Fri Aug 02 2024 Nick Clifton <nickc@redhat.com> - 12.66-1
- Annocheck: Fix stack realign test. (#2302427)
* Mon Jul 29 2024 Nick Clifton <nickc@redhat.com> - 12.65-1
- Annocheck: Fix recording arguments for later re-use. (RHEL-50802)
* Fri Jul 26 2024 Nick Clifton <nickc@redhat.com> - 12.64-1
- GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
* Mon Jul 22 2024 Nick Clifton <nickc@redhat.com> - 12.63-1
- Annocheck: Add improvements to the builtby utility.
* Wed Jul 17 2024 Fedora Release Engineering <releng@fedoraproject.org> - 12.62-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Mon Jul 08 2024 Nick Clifton <nickc@redhat.com> - 12.62-1
- Annocheck: Add support for ADA binaries.
- Annocheck: Add support for binaries built from more than two high level source languages.
- Annocheck: Add support for object files containing no executable code.
- Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
* Wed Jun 26 2024 Nick Clifton <nickc@redhat.com> - 12.60-1
- Annocheck: Add support for Fortran binaries.
* Tue Jun 11 2024 Nick Clifton <nickc@redhat.com> - 12.59-1
- Annocheck: Add heuristic for detecting parts of the CGO runtime library.
* Mon Jun 10 2024 Nick Clifton <nickc@redhat.com> - 12.58-1
- Annocheck: Add improvements for handling Clang runtime binaries.
* Tue Jun 04 2024 Nick Clifton <nickc@redhat.com> - 12.57-1
@ -558,6 +718,9 @@ make check
- Annocheck: Defer passing the branch protection test until all notes have been checked.
- GCC Plugin: Add extra code for detecting the branch protection setting. (RHEL-35958)
* Thu Apr 25 2024 Nick Clifton <nickc@redhat.com> - 12.52-1
- Annocheck: Add OpenSSL Engine test. (PTG-319)
* Tue Apr 23 2024 Nick Clifton <nickc@redhat.com> - 12.51-1
- Annocheck: Test for gaps even when only one note is present.
@ -569,20 +732,28 @@ make check
- Annocheck: Ignore stack checks for AMD GPU binaries.
- Annocheck: Do not produce FAIL result for i686 binaries in the RHEL-10 profile.
- Annocheck: Test for __stack_chk_guard being writeable.
* Tue Apr 02 2024 Nick Clifton <nickc@redhat.com> - 12.48-1
- Annocheck: Update heuristics for detecting glibc code in executables. (RHEL-30579)
* Wed Mar 27 2024 Nick Clifton <nickc@redhat.com> - 12.47-1
- Clang & LLVM Plugins: Allow environment to override fortification level. (RHEL-30579)
- Spec File: Override fortification level and set it to 3.
* Mon Mar 25 2024 Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 12.46-1
- Annocheck: Improve detection of -mbranch-protection option.
- Clang Plugin: Add global-file-syms option.
- LLVM Plugin: Add global-file-syms option.
- Plugins: Add support for ANNOBIN environment variable.
- Built By: Add more lang types.
* Thu Mar 21 2024 Nick Clifton <nickc@redhat.com> - 12.45-1
- GCC Plugin: Fix bug extracing the value of target specific command line options.
* Wed Mar 06 2024 Nick Clifton <nickc@redhat.com> - 12.44-1
- Configure: Remove check for FrontendPluginRegistry.h header as it is stored in a non-standard location on Debian systems.
- Debuginfod test: Allow for the libdwfl library silently contacting the debuginfod server.
* Tue Mar 05 2024 Nick Clifton <nickc@redhat.com> - 12.43-1
- LLVM Plugin: Use llvm-config to get the correct paths and options for building executables.
- Clang Plugin: Likewise.
- Enable silent rules for most building.
@ -597,44 +768,85 @@ make check
- GCC Plugin: Add support for MIPS specific target functions.
- GCC Plugin: Use .dc.a for address expressions in 64-bit ELF format notes.
* Tue Feb 13 2024 Nick Clifron <nickc@redhat.com> - 12.40-1
* Tue Feb 20 2024 Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 12.40-2
- Spec File: Remove a workaround for ppc64le.
* Tue Feb 13 2024 Nick Clifton <nickc@redhat.com> - 12.40-1
- Annocheck: Improve heuristic for skipping LTO and FORTIFY tests. (#2264000)
* Fri Feb 09 2024 Nick Clifron <nickc@redhat.com> - 12.39-1
* Fri Feb 09 2024 Nick Clifton <nickc@redhat.com> - 12.39-1
- Annocheck: Also skip property note test for i686 binaries. (#2258571)
* Tue Jan 23 2024 Nick Clifron <nickc@redhat.com> - 12.38-1
* Tue Jan 23 2024 Nick Clifton <nickc@redhat.com> - 12.38-1
- Annocheck: Also skip the entry point test for i686 binaries. (#2258571)
* Mon Jan 22 2024 Fedora Release Engineering <releng@fedoraproject.org> - 12.37-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering <releng@fedoraproject.org> - 12.37-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Wed Jan 17 2024 Nick Clifton <nickc@redhat.com> - 12.37-1
- GCC Plugin: Do not use section groups with string format notes.
* Tue Jan 16 2024 Nick Clifron <nickc@redhat.com> - 12.36-1
* Tue Jan 16 2024 Nick Clifton <nickc@redhat.com> - 12.36-2
- Spec File: NVR bump in order to allow building in side tag.
* Tue Jan 16 2024 Nick Clifton <nickc@redhat.com> - 12.36-1
- Annocheck: Disable cf-protection test for i686 architecture. (#2258571)
* Thu Jan 04 2024 Nick Clifron <nickc@redhat.com> - 12.35-1
* Mon Jan 15 2024 Nick Clifton <nickc@redhat.com> - 12.35-4
- Spec File: NVR bump in order to allow building in side tag.
* Mon Jan 15 2024 Nick Clifton <nickc@redhat.com> - 12.35-3
- Spec File: Disable hard gcc check in order to allow builds with new version of gcc.
* Thu Jan 11 2024 Songsong Zhang <U2FsdGVkX1@gmail.com> - 12.35-2
- Spec File: Do not install annocheck.1.gz when annocheck is disabled.
* Thu Jan 04 2024 Nick Clifton <nickc@redhat.com> - 12.35-1
- Annocheck: Improve detection of FIPS compliant GO binaries.
* Fri Dec 15 2023 Nick Clifton <nickc@redhat.com> - 12.34-1
- GCC Plugin: Fix recording of the -Wimplicit-int and -Wimplicit-function-declaration warnings. Add active checks for when they are deliberately disabled.
* Mon Dec 11 2023 Nick Clifton <nickc@redhat.com> - 12.33-1
- Tests: Fix implicit-values test so that it will compile with gcc 14+.
* Fri Nov 24 2023 Nick Clifton <nickc@redhat.com> - 12.32-1
- GCC Plugin: Add support for -fhardended.
* Wed Nov 15 2023 Nick Clifton <nickc@redhat.com> - 12.31-1
- Update glibc detection heuristics for PPC64. (RHEL-16453)
* Mon Nov 06 2023 Nick Clifron <nickc@redhat.com> - 12.30-1
* Wed Nov 01 2023 Nick Clifton <nickc@redhat.com> - 12.30-1
- Fix another atexit test failure. (#2247481)
* Mon Oct 30 2023 Nick Clifton <nickc@redhat.com> - 12.29-1
- Fix atexit test failure.
- Notes: Add support for string format notes.
* Fri Oct 06 2023 Nick Clifton <nickc@redhat.com> - 12.28-1
- GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
- Annobin: Add future test of these options.
* Tue Sep 26 2023 Nick Clifton <nickc@redhat.com> - 12.27-1
- GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
- Annobin: Add test for these warnings.
* Wed Sep 06 2023 Nick Clifton <nickc@redhat.com> - 12.26-1
- LLVM Plugin: Fix building with LLVM version 17.
* Wed Aug 30 2023 Nick Clifton <nickc@redhat.com> - 12.25-1
- GCC Plugin: Enable string note format by default.
* Fri Aug 04 2023 Nick Clifron <nickc@redhat.com> - 12.24-1
* Fri Aug 04 2023 Nick Clifton <nickc@redhat.com> - 12.24-1
- Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
* Mon Jul 31 2023 Nick Clifron <nickc@redhat.com> - 12.23-1
* Mon Jul 31 2023 Nick Clifton <nickc@redhat.com> - 12.23-1
- Annocheck: Add test for FIPS compliant GO binaries.
* Wed Jul 26 2023 Nick Clifron <nickc@redhat.com> - 12.22-1
* Wed Jul 26 2023 Nick Clifton <nickc@redhat.com> - 12.22-1
- Annocheck: Fix double free. (#2226749)
* Wed Jul 19 2023 Fedora Release Engineering <releng@fedoraproject.org> - 12.21-2
@ -1036,7 +1248,7 @@ make check
* Fri Dec 17 2021 Nick Clifton <nickc@redhat.com> - 10.39-1
- Annocheck: Add /usr/lib/ld-linux-aarch64.so.1 to the list of known glibc binaries. (#2033255)
- Doc: Note that ENDBR is only needed as the landing pad for indirect branches/calls. (#28705)
- Spec File: Store full gcc version release string in plugin info file. (#2030671)
- Spec File: Store full gcc version release string in plugin info file. (#2030671)
* Tue Dec 14 2021 Nick Clifton <nickc@redhat.com> - 10.38-1
- Annocheck: Add special case for x86_64 RHEL-7 gaps. (#2031133)

View file

@ -1 +1 @@
SHA512 (annobin-12.60.tar.xz) = 811393c5278773ab6bea45271e0495a21c518c591cfa25baf29fc160b3d782d74889276772a6123795bb165d6b5e04764cda939585b243371d07d36b5650c81f
SHA512 (annobin-13.05.tar.xz) = 07bc023018e3f456fae470b271915bde2e1ff367ee8bb58adb74255023ae59e8c45ced8e4bd2130bf8a496966d986bca9866e054019f6ca4660d78c129b6532f