8b1a765248
Rebuilt against new LLVM release, with patch.
2022-03-30 21:33:03 +02:00
8ee18a899b
Fix bug in annocheck's AArch64 property note test.
2022-03-30 11:49:43 +01:00
14685185f1
gcc-plugin: Do not issue warning messages for autoconf generated source files. ( #2009958 )
2022-03-14 11:53:08 +00:00
d5f69acf32
10.57-3
2022-03-09 19:31:39 +01:00
6cdacc7a72
10.57-2
2022-03-09 15:28:56 +01:00
c712a9f799
Annocheck: Update documentation and fix typo in annocheck. ( #2061291 )
2022-03-07 12:30:17 +00:00
c9b3e0dcfe
Annocheck: Add option to enable/disable following symbolic links.
2022-03-04 17:29:15 +00:00
d6d59a73a8
Always identify Rust binaries, even if built on a host that does not know about Rust.
...
Resolves : #2057737
2022-02-28 11:53:01 +00:00
43a0cd19e4
10.54-4
2022-02-24 14:53:49 +01:00
1b6c8e58c5
Spec File: Use a different method to disable the annobin plugin ( #2054571 )
2022-02-16 12:49:47 +00:00
4f1eb1f73a
10.54-2
2022-02-14 10:10:40 +01:00
41efc42594
annocheck: skip PIE and PIC tests for GO binaries
2022-02-11 15:26:15 +00:00
5b4731b0ac
10.53-2
2022-02-06 17:45:26 +01:00
21338bea37
Borrow a patch from the GCC package to stop libtool from inserting needless runpaths into binaries. ( #2030667 )
2022-01-27 16:56:19 +00:00
9cdecda9e3
gcc-plugin: Use canonical_option field of save_decoded_options array. ( #2047148 )
2022-01-27 13:09:45 +00:00
8c2f473929
Rebuild for new gcc version
2022-01-27 10:29:49 +01:00
8e76478b1d
Annocheck: Add an option to disable the use of debuginfod (if available).
...
Annocheck: Add more glibc special file names.
Annocheck: Skip some tests for BPF binaries.
2022-01-25 15:42:19 +00:00
a6710fda16
Annocheck: Add another glibc static library symbol. ( #2043047 )
2022-01-20 16:20:57 +00:00
4852d3d782
Annocheck: Skip property note test for GO binaries. ( #204300 )
2022-01-20 15:18:08 +00:00
86fbdc98e6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-01-19 21:16:45 +00:00
dfa29772c3
Another NVR bump
2022-01-19 19:31:54 +00:00
7cf2a96973
10.48-4
2022-01-19 18:35:04 +01:00
f7e1805543
Another NVR bump
2022-01-19 14:25:39 +00:00
449fc20654
NVR bump
2022-01-19 13:56:59 +00:00
557b866dd0
GCC Plugin: Do not fail if a section cannot be attached to a group.
2022-01-17 14:38:17 +00:00
9816f99346
NVR bump to allow rebuild in a side tag.
2022-01-14 10:45:48 +00:00
a6ef977e8b
GCC Plugin: Only default to link-once when using gcc-12 or later. ( #2039297 )
2022-01-14 09:48:30 +00:00
efff188861
Add fix for fortify test
2022-01-10 12:02:15 +00:00
244433eec3
GCC Plugin: Replace CLVC_BOOLEAN with CLVC_BIT_SET/CLVC_BIT_CLEAR.
2022-01-10 09:33:18 +00:00
c53c5783da
NVR bump and disable annobin during build
2022-01-10 09:16:01 +00:00
b097ccc79b
10.44-4
2022-01-10 01:01:41 +01:00
a40c58d2d4
10.44-4
2022-01-10 01:00:55 +01:00
ffabcb06f2
10.44-3
2022-01-10 00:49:59 +01:00
550ef1b763
10.44-2
2022-01-10 00:25:58 +01:00
c34a9f5bc5
10.44-2
2022-01-09 20:08:02 +01:00
a14426ce95
Annocheck: Add even more glibc function names. ( #2037333 )
2022-01-07 15:09:37 +00:00
ee78766bff
Annocheck: ARM: Do not fail tests that rely upon annobin notes.
2022-01-07 14:10:23 +00:00
0000a56eab
Annocheck: Extend list of known glibc functions. ( #2037333 )
2022-01-05 15:38:48 +00:00
1e262d15b3
- Annocheck: Ignore gaps that contain the _start symbol (for AArch64). ( #1995224 )
...
- Annocheck: Ignore more glibc special binaries. (#2037220 )
2022-01-05 12:06:02 +00:00
b4ba4e0d3c
Annocheck: Do not complaining about missing stack clash notes if the compilation used LTO. ( #2034946 )
2022-01-04 11:42:27 +00:00
ec8f2b145d
- Annocheck: Add /usr/lib/ld-linux-aarch64.so.1 to the list of known glibc binaries. ( #2033255 )
...
- Doc: Note that ENDBR is only needed as the landing pad for indirect branches/calls. (#28705 )
- Spec File: Store full gcc version release string in plugin info file. (#2030671 )
2021-12-17 15:46:16 +00:00
15b34fde9c
Fix for RHEL-7
2021-12-14 17:55:37 +00:00
7c94cb66cc
Annocheck: Do not complaining about missing -mstackrealign notes in LTO mode. ( #2030298 )
2021-12-14 10:04:35 +00:00
0c278a5d73
GCC Plugin: Do not record missing -mstackrealign in LTO mode. ( #2030298 )
2021-12-13 17:54:33 +00:00
0e6be40a3c
Tests: Fix fortify and debuginfod tests to use newly built annobin plugin.
2021-12-13 13:41:04 +00:00
77a92a7119
Tests: Fix fortify and debuginfod tests to use newly built annobin plugin.
2021-12-13 12:55:43 +00:00
d83b796c87
Tests: Fix gaps and stat tests to use newly built annobin plugin. ( #2028063 )
2021-12-06 17:49:41 +00:00
ce231f4bd9
Tests: Fix gaps and stat tests to use newly built annobin plugin. ( #2028063 )
2021-12-06 14:43:50 +00:00
c7d76e06c2
Annocheck: Ignore gaps in binaries at least partial built by golang.
...
Resolves : #2028583
2021-12-06 12:19:06 +00:00
c99cca3ac4
Annocheck: Allow spaces in golang symbols.
2021-12-02 15:38:52 +00:00
3bf68f34bb
Initial checkin of libannocheck
2021-12-01 15:53:49 +00:00
14b9ff320e
gcc-plugin: Fix bug creating empty attachments.
...
Annocheck: Change MAYB result to SKIP for DT_RPATH. (#2026300 )
2021-11-24 14:03:50 +00:00
9fd7a9a7dc
Annocheck: Skip missing fortify/warning notes for ARM32.
2021-11-19 12:25:11 +00:00
ddf58cca97
gcc-plugin: Try another fix for ppc64le section grouping. ( #2023437 )
2021-11-18 13:29:22 +00:00
cfbdb08f28
gcc-plugin: Revert 10.22 change. ( #2023437 )
2021-11-16 17:01:20 +00:00
5faade2ad7
Add support for more special glibc functions.
...
Fix building LLVM and Clang plugins for the ARM architecture.
2021-11-16 11:14:14 +00:00
92c34892f6
Annocheck: Add a test for unicode characters in identifiers.
2021-11-08 13:47:26 +00:00
18219884f1
gcc-plugin: Default to link-order grouping for PPC64LE. ( #2016458 )
2021-10-27 11:10:47 +01:00
ee53f9336e
Annocheck: Do not fail if a --skip-<name> option does not match a known test.
...
ldconfig-test: Skip the LTO check.
2021-10-26 15:58:02 +01:00
7add09b73e
Annocheck: Add more glibc function names.
2021-10-26 08:28:59 +01:00
7f58204567
gcc-plugin: Fix attaching the .text section to the .text.group section.
2021-10-21 13:48:54 +01:00
0bd26e8615
Complain about DT_RPATH for Fedora binaries.
2021-10-20 17:49:04 +01:00
3f7c00bf57
Better reporting of problems in object files.
...
Resolves : #2013708
2021-10-18 16:17:25 +01:00
7bc94a3f7c
Add a requirement on llvm-libs for clang and llvm plugins.
...
Resolves : #2014573
2021-10-18 14:24:09 +01:00
0c5b1fec47
Fix configuring annocheck without gcc-plugin.
...
- Annocheck: Better reporting of debuginfod problems.
- Tests: Fix bugs in debuginfod test.
2021-10-14 20:04:48 +01:00
ab631794b6
Fix merge issues.
2021-10-13 11:56:58 +01:00
8477e1751d
Annocheck: Add tests based upon recent bug fixes.
2021-10-13 11:55:02 +01:00
825be9a6a2
Rebuild for llvm-13.0.0
2021-10-12 16:29:18 +00:00
f1b2a85f11
Annocheck: Fix memory corruptions when using --debug-path and when a corrupt note is found.
...
Resolves : #2011438
2021-10-08 16:25:13 +01:00
f25c7c2336
Annocheck: Fix MAYB results for mixed GO/C files.
...
Annocheck: Move some messages from VERBOSE to VERBOSE2.
Annocheck: Scan zero-length tool notes.
2021-10-08 14:15:39 +01:00
efe8b5622b
Annocheck: Fix covscan detected flaws.
...
plugins: Add more required build options.
2021-10-06 10:59:43 +01:00
c27947f871
Annocheck: Fix cf-prot test to fail if the CET notes are missing.
...
Annocheck: Skip gaps in the .plt section.
Plugins: Add -g option when building LLVM and Clang.
2021-10-05 14:28:09 +01:00
37b5de8c9b
Annocheck: Add more cases of glibc startup functions.
2021-10-04 15:26:35 +01:00
5f79645f58
- Annocheck: Fix covscan detected problems.
...
- Annocheck: Add --profile=el8.
- gcc-plugin: Conditionalize generation of branch protection note.
2021-10-01 13:11:12 +01:00
da3ba09492
Annocheck: Ignore gaps containing NOP instructions.
2021-09-29 13:12:12 +01:00
c62bd663ec
GCC Plugin: Fix detection of running inside the LTO compiler. ( #2004917 )
2021-09-16 15:06:57 +01:00
ee93527317
Annocheck: Do not insist on the DT_AARCH64_PAC_PLT flag being present in AArch64 binaries.
2021-09-15 15:00:18 +01:00
0aa5d1ce55
Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result.
2021-09-15 12:09:38 +01:00
a99d618d38
Annocheck: Do not set CFLAGS/LDFLAGS when building. Take from environment instead.
2021-09-15 10:43:42 +01:00
92cb681581
Annocheck: Fix exit code when tests PASS.
2021-09-10 11:08:17 +01:00
fe496281b3
- Documentation: Add node for each hardening test.
...
- Documentation: Install online.
- Annocheck: Annote FAIL and MAYB results with URL to documentation
- Annocheck: Add --no-urls and --provide-urls options
- Annocheck: Add --help-<tool> option.
2021-09-09 14:18:24 +01:00
9d82370d42
- Annocheck: Fix fuzzing detected failures.
...
- Annocheck: Added --profile option.
- Docs: Documented --profile option and rpminspect.yaml.
2021-09-03 17:55:06 +01:00
ba44d58e22
Annocheck: Skip GO/CET checks. Fix fuzzing detected failures.
2021-08-31 15:18:09 +01:00
29d70de971
LLVM Plugin: Automatically choose the correct tests to run, based upon the version of Clang installed. ( #1997444 )
...
spec file: Add the installation of the annobon sources into /usr/src/annobin.
2021-08-25 13:38:58 +01:00
1d5918a750
Annocheck: Fix memory corruption. ( #1996963 )
...
spec file: Add the creation of a gcc-plugin version info file in /usr/lib/rpm/redhat.
2021-08-24 17:16:30 +01:00
7a0769e513
Annocheck: Add linker generated function for ppc64le exceptions. ( #1981410 )
...
LLVM Plugin: Allow checks to be selected from the command line.
Annocheck: Examine DW_AT_producer for -flto.
2021-08-18 11:28:24 +01:00
5d4d27dda9
Annocheck: Conditionalize detection of AArch64's PAC+BTI protection.
...
Annocheck: Add linker generated function for s390x exceptions. (#1981410 )
2021-08-17 15:03:42 +01:00
6d69597433
Annocheck: Generate MAYB results for gaps in notes covering the .text section. ( #1991943 )
...
Annocheck: Close DWARF file descriptors once the debug info is no longer needed. (#1981410 )
LLVM Plugin: Update to build with Clang v13. (Thanks to: Tom Stellard <tstellar@redhat.com>)
2021-08-17 12:10:03 +01:00
438dd33afc
Rebuild for LLVM 13.0.0-rc1
2021-08-16 20:04:41 +00:00
c76d8664da
Annocheck: Fix memory corruption. ( #1988715 )
2021-08-16 12:41:17 +01:00
75a23fb883
Annocheck: Skip certain tests for kernel modules.
2021-08-11 17:23:33 +01:00
71f8485e39
Annocheck: Detect a missing CET note. ( #1991931 )
...
Annocheck: Do not report future fails for AArch64 notes.
Annocheck: Warn about multiple --debug-file, --debug-rpm and --debug-dir options.
2021-08-10 15:14:48 +01:00
4af05b1261
Annocheck: Process files in command line order. ( #1988714 )
2021-08-09 11:14:43 +01:00
0394c1d928
Annocheck: Reverse AArch64 PAC+BTI check, ie fail if they are enabled.
...
Resolves : #1984995
2021-07-23 13:36:44 +01:00
8155573258
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-21 17:34:53 +00:00
8adc17e68b
Annocheck: Add another test exceptions.
2021-07-13 17:15:00 +01:00
5bbd4f5f31
Annocheck: Add some more test exceptions.
2021-07-13 15:39:21 +01:00
a978ea49fa
Tests: Skip glibc-notes test if the assembler does not support --generate-missing-build-notes.
...
Resolves : #1978573
2021-07-05 12:49:37 +01:00
dfddf61cdd
Annocheck: Fix spelling mistake in -,stack-realign failure message. ( #1977349 )
2021-06-29 16:06:16 +01:00
76947e83c2
gcc-plugin: Do not record global versions of stack protection settings in LTO mode, if not set. ( #1958954 )
2021-06-22 16:05:21 +01:00
sergesanspaille
Nick Clifton
Jakub Jelinek
Florian Weimer
Fedora Release Engineering
Tom Stellard