Commit Graph

  • a14426ce95 Annocheck: Add even more glibc function names. (#2037333) Nick Clifton 2022-01-07 15:09:37 +0000
  • ee78766bff Annocheck: ARM: Do not fail tests that rely upon annobin notes. Nick Clifton 2022-01-07 14:10:23 +0000
  • 0000a56eab Annocheck: Extend list of known glibc functions. (#2037333) Nick Clifton 2022-01-05 15:38:48 +0000
  • 1e262d15b3 - Annocheck: Ignore gaps that contain the _start symbol (for AArch64). (#1995224) - Annocheck: Ignore more glibc special binaries. (#2037220) Nick Clifton 2022-01-05 12:06:02 +0000
  • b4ba4e0d3c Annocheck: Do not complaining about missing stack clash notes if the compilation used LTO. (#2034946) Nick Clifton 2022-01-04 11:42:27 +0000
  • ec8f2b145d - Annocheck: Add /usr/lib/ld-linux-aarch64.so.1 to the list of known glibc binaries. (#2033255) - Doc: Note that ENDBR is only needed as the landing pad for indirect branches/calls. (#28705) - Spec File: Store full gcc version release string in plugin info file. (#2030671) Nick Clifton 2021-12-17 15:46:16 +0000
  • 15b34fde9c Fix for RHEL-7 Nick Clifton 2021-12-14 17:55:37 +0000
  • 7c94cb66cc Annocheck: Do not complaining about missing -mstackrealign notes in LTO mode. (#2030298) Nick Clifton 2021-12-14 10:04:35 +0000
  • 0c278a5d73 GCC Plugin: Do not record missing -mstackrealign in LTO mode. (#2030298) Nick Clifton 2021-12-13 17:54:33 +0000
  • 0e6be40a3c Tests: Fix fortify and debuginfod tests to use newly built annobin plugin. Nick Clifton 2021-12-13 13:41:04 +0000
  • 77a92a7119 Tests: Fix fortify and debuginfod tests to use newly built annobin plugin. Nick Clifton 2021-12-13 12:55:43 +0000
  • d83b796c87 Tests: Fix gaps and stat tests to use newly built annobin plugin. (#2028063) Nick Clifton 2021-12-06 17:49:41 +0000
  • ce231f4bd9 Tests: Fix gaps and stat tests to use newly built annobin plugin. (#2028063) Nick Clifton 2021-12-06 14:43:50 +0000
  • c7d76e06c2 Annocheck: Ignore gaps in binaries at least partial built by golang. Resolves: #2028583 Nick Clifton 2021-12-06 12:19:06 +0000
  • 0fb007a262 Annocheck: Allow spaces in golang symbols Nick Clifton 2021-12-02 15:40:52 +0000
  • c99cca3ac4 Annocheck: Allow spaces in golang symbols. Nick Clifton 2021-12-02 15:38:52 +0000
  • 3bf68f34bb Initial checkin of libannocheck Nick Clifton 2021-12-01 15:53:49 +0000
  • 14b9ff320e gcc-plugin: Fix bug creating empty attachments. Annocheck: Change MAYB result to SKIP for DT_RPATH. (#2026300) Nick Clifton 2021-11-24 14:03:50 +0000
  • 9fd7a9a7dc Annocheck: Skip missing fortify/warning notes for ARM32. Nick Clifton 2021-11-19 12:25:11 +0000
  • ddf58cca97 gcc-plugin: Try another fix for ppc64le section grouping. (#2023437) Nick Clifton 2021-11-18 13:29:22 +0000
  • cfbdb08f28 gcc-plugin: Revert 10.22 change. (#2023437) Nick Clifton 2021-11-16 17:01:20 +0000
  • 5faade2ad7 Add support for more special glibc functions. Fix building LLVM and Clang plugins for the ARM architecture. Nick Clifton 2021-11-16 11:14:14 +0000
  • bec0fb1f02 Annocheck: Add test for the presence of unicode characters in identifiers. Resolves: #2018850 Nick Clifton 2021-11-10 15:09:26 +0000
  • 8b558039b8 Rebuild for llvm-13.0.0 Tom Stellard 2021-11-09 17:42:53 +0000
  • 92c34892f6 Annocheck: Add a test for unicode characters in identifiers. Nick Clifton 2021-11-08 13:47:26 +0000
  • 18219884f1 gcc-plugin: Default to link-order grouping for PPC64LE. (#2016458) Nick Clifton 2021-10-27 11:10:47 +0100
  • ee53f9336e Annocheck: Do not fail if a --skip-<name> option does not match a known test. ldconfig-test: Skip the LTO check. Nick Clifton 2021-10-26 15:58:02 +0100
  • 7add09b73e Annocheck: Add more glibc function names. Nick Clifton 2021-10-26 08:28:59 +0100
  • 7f58204567 gcc-plugin: Fix attaching the .text section to the .text.group section. Nick Clifton 2021-10-21 13:48:54 +0100
  • 0bd26e8615 Complain about DT_RPATH for Fedora binaries. Nick Clifton 2021-10-20 17:49:04 +0100
  • 3f7c00bf57 Better reporting of problems in object files. Resolves: #2013708 Nick Clifton 2021-10-18 16:17:25 +0100
  • 7bc94a3f7c Add a requirement on llvm-libs for clang and llvm plugins. Resolves: #2014573 Nick Clifton 2021-10-18 14:24:09 +0100
  • 0c5b1fec47 Fix configuring annocheck without gcc-plugin. - Annocheck: Better reporting of debuginfod problems. - Tests: Fix bugs in debuginfod test. Nick Clifton 2021-10-14 20:04:48 +0100
  • ab631794b6 Fix merge issues. Nick Clifton 2021-10-13 11:56:58 +0100
  • 8477e1751d Annocheck: Add tests based upon recent bug fixes. Nick Clifton 2021-10-13 11:55:02 +0100
  • 825be9a6a2 Rebuild for llvm-13.0.0 Tom Stellard 2021-10-07 23:27:54 +0000
  • f1b2a85f11 Annocheck: Fix memory corruptions when using --debug-path and when a corrupt note is found. Resolves: #2011438 Nick Clifton 2021-10-08 16:25:13 +0100
  • f25c7c2336 Annocheck: Fix MAYB results for mixed GO/C files. Annocheck: Move some messages from VERBOSE to VERBOSE2. Annocheck: Scan zero-length tool notes. Nick Clifton 2021-10-08 14:15:39 +0100
  • efe8b5622b Annocheck: Fix covscan detected flaws. plugins: Add more required build options. Nick Clifton 2021-10-06 10:59:43 +0100
  • c27947f871 Annocheck: Fix cf-prot test to fail if the CET notes are missing. Annocheck: Skip gaps in the .plt section. Plugins: Add -g option when building LLVM and Clang. Nick Clifton 2021-10-05 14:28:09 +0100
  • 37b5de8c9b Annocheck: Add more cases of glibc startup functions. Nick Clifton 2021-10-04 15:26:35 +0100
  • 5f79645f58 - Annocheck: Fix covscan detected problems. - Annocheck: Add --profile=el8. - gcc-plugin: Conditionalize generation of branch protection note. Nick Clifton 2021-10-01 13:11:12 +0100
  • da3ba09492 Annocheck: Ignore gaps containing NOP instructions. Nick Clifton 2021-09-29 13:12:12 +0100
  • c62bd663ec GCC Plugin: Fix detection of running inside the LTO compiler. (#2004917) Nick Clifton 2021-09-16 15:06:57 +0100
  • ee93527317 Annocheck: Do not insist on the DT_AARCH64_PAC_PLT flag being present in AArch64 binaries. Nick Clifton 2021-09-15 15:00:18 +0100
  • 0aa5d1ce55 Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result. Nick Clifton 2021-09-15 12:09:38 +0100
  • a99d618d38 Annocheck: Do not set CFLAGS/LDFLAGS when building. Take from environment instead. Nick Clifton 2021-09-15 10:43:42 +0100
  • 92cb681581 Annocheck: Fix exit code when tests PASS. Nick Clifton 2021-09-10 11:08:17 +0100
  • fe496281b3 - Documentation: Add node for each hardening test. - Documentation: Install online. - Annocheck: Annote FAIL and MAYB results with URL to documentation - Annocheck: Add --no-urls and --provide-urls options - Annocheck: Add --help-<tool> option. Nick Clifton 2021-09-09 14:18:24 +0100
  • 9d82370d42 - Annocheck: Fix fuzzing detected failures. - Annocheck: Added --profile option. - Docs: Documented --profile option and rpminspect.yaml. Nick Clifton 2021-09-03 17:55:06 +0100
  • ba44d58e22 Annocheck: Skip GO/CET checks. Fix fuzzing detected failures. Nick Clifton 2021-08-31 15:18:09 +0100
  • 29d70de971 LLVM Plugin: Automatically choose the correct tests to run, based upon the version of Clang installed. (#1997444) spec file: Add the installation of the annobon sources into /usr/src/annobin. Nick Clifton 2021-08-25 13:38:58 +0100
  • 1d5918a750 Annocheck: Fix memory corruption. (#1996963) spec file: Add the creation of a gcc-plugin version info file in /usr/lib/rpm/redhat. Nick Clifton 2021-08-24 17:16:30 +0100
  • 5e4c738a8f CI Gating: Test cover bz1991931 Martin Cermak 2021-08-20 15:25:33 +0200
  • be3e1af704 CI Gating: Test cover bz1988715 Martin Cermak 2021-08-20 14:43:36 +0200
  • ced3a24210 CI gating: Test cover bz1988714 Martin Cermak 2021-08-20 14:04:14 +0200
  • 7a0769e513 Annocheck: Add linker generated function for ppc64le exceptions. (#1981410) LLVM Plugin: Allow checks to be selected from the command line. Annocheck: Examine DW_AT_producer for -flto. Nick Clifton 2021-08-18 11:28:24 +0100
  • 5d4d27dda9 Annocheck: Conditionalize detection of AArch64's PAC+BTI protection. Annocheck: Add linker generated function for s390x exceptions. (#1981410) Nick Clifton 2021-08-17 15:03:42 +0100
  • 6d69597433 Annocheck: Generate MAYB results for gaps in notes covering the .text section. (#1991943) Annocheck: Close DWARF file descriptors once the debug info is no longer needed. (#1981410) LLVM Plugin: Update to build with Clang v13. (Thanks to: Tom Stellard <tstellar@redhat.com>) Nick Clifton 2021-08-17 12:06:55 +0100
  • 438dd33afc Rebuild for LLVM 13.0.0-rc1 Tom Stellard 2021-08-16 19:09:10 +0000
  • c76d8664da Annocheck: Fix memory corruption. (#1988715) Nick Clifton 2021-08-16 12:41:17 +0100
  • 75a23fb883 Annocheck: Skip certain tests for kernel modules. Nick Clifton 2021-08-11 17:23:33 +0100
  • 71f8485e39 Annocheck: Detect a missing CET note. (#1991931) Annocheck: Do not report future fails for AArch64 notes. Annocheck: Warn about multiple --debug-file, --debug-rpm and --debug-dir options. Nick Clifton 2021-08-10 15:14:48 +0100
  • 4af05b1261 Annocheck: Process files in command line order. (#1988714) Nick Clifton 2021-08-09 11:14:43 +0100
  • 0394c1d928 Annocheck: Reverse AArch64 PAC+BTI check, ie fail if they are enabled. Resolves: #1984995 Nick Clifton 2021-07-23 13:36:44 +0100
  • 8155573258 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild Fedora Release Engineering 2021-07-21 17:34:53 +0000
  • dd22b2eaf4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild Fedora Release Engineering 2021-07-21 12:39:14 +0000
  • 80ffabd2a3 Test cover bz1973981 Martin Cermak 2021-07-20 11:28:05 +0000
  • 8adc17e68b Annocheck: Add another test exceptions. Nick Clifton 2021-07-13 17:15:00 +0100
  • 5bbd4f5f31 Annocheck: Add some more test exceptions. Nick Clifton 2021-07-13 15:39:21 +0100
  • a978ea49fa Tests: Skip glibc-notes test if the assembler does not support --generate-missing-build-notes. Resolves: #1978573 Nick Clifton 2021-07-05 12:49:37 +0100
  • dfddf61cdd Annocheck: Fix spelling mistake in -,stack-realign failure message. (#1977349) Nick Clifton 2021-06-29 16:06:16 +0100
  • 76947e83c2 gcc-plugin: Do not record global versions of stack protection settings in LTO mode, if not set. (#1958954) Nick Clifton 2021-06-22 16:05:21 +0100
  • 14c8067c11 annocheck: Remove limit on number of input files. Nick Clifton 2021-06-21 16:16:26 +0100
  • a9360e73d9 CI testing: Add test covering rhbz1969584 Martin Cermak 2021-06-18 16:53:30 +0000
  • f1a1007e43 clang/llvm plugins: Build with correct security options. Nick Clifton 2021-06-15 14:48:49 +0100
  • 96f1a8a19f Annocheck: Better detection of GO compiler version. Nick Clifton 2021-06-15 12:10:19 +0100
  • 55304ea386 Annocheck: Better support for symbolic links. In verbose mode, report the reason for skipping specific tests. Resolves: #1969584 Nick Clifton 2021-06-09 16:49:05 +0100
  • 524ebdae25 Rebuild for LLVM 12.0.1 Tom Stellard 2021-06-04 01:39:25 +0000
  • 993873ad36 Obsolete all previous versions of annobin. Resolves: #1967339 Nick Clifton 2021-06-03 11:41:16 +0100
  • 1c617b1ec0 annocheck: Improve detection of shared libraries. Resolves: #1958954 Nick Clifton 2021-05-25 14:54:34 +0100
  • 45b479d2d6 Tidy up spec file Nick Clifton 2021-05-19 12:05:01 +0100
  • 81adad3f31 annocheck: Accept 0 as a valid number for gcc minor versions and release numbers. gcc-plugin: Add support for ARM and RISCV targets. Nick Clifton 2021-05-13 12:40:46 +0100
  • a9f3f30da4 Log package versions in CI tests Martin Cermak 2021-05-13 13:01:56 +0200
  • 394bd0083f timing: do not initialise the clock if the timing tool is disabled. Nick Clifton 2021-05-04 15:15:25 +0100
  • 2962855ec5
    Merge remote-tracking branch 'up/f33' into f33-riscv64 f33-riscv64 David Abdurachmanov 2021-05-01 05:48:09 +0300
  • 689a7f6f54 gcc-plugin: Replace ICE messsages with verbose messages. Nick Clifton 2021-04-30 09:50:06 +0100
  • f6e97a78fc 9.68-2 f33 Jakub Jelinek 2021-04-25 19:09:31 +0200
  • e5cf20e0a3 Fix the testsuite so that it can be run in parallel. Nick Clifton 2021-04-22 14:15:51 +0100
  • 15a0e7f874 - Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run. (#1950657) - Annocheck: Improve detection of missing GNU-stack support. - Fix anomolies reported by covscan. - gcc-plugin: Use a fixed filename when running in LTO mode. - Annocheck: Fix detection of special function names. (#1934189) - Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc. (#1923439) - Annocheck: Add colour to some messages. Skip the deliberate use of -fno-stack-protector. (#1923439) - Annocheck: Fix some problems with tests for missing notes. - Add some GO tests to annocheck. - Add a future fail for the presence of RPATH in the dynamic tags. - Add the ability to disable the warning message about -D_FORTIFY_SOURCE being missing. - Workaround for elflint problems with PPC compiled files. (#1880634) - Fix bogus AArch64 test failures. - Improved testing by annocheck. Add fixed format message mode. - Fix inconsistency reporting -fcf-protection and -fstack-clash-protection results. - Add support for -D_FORTIFY_SOURCE=3. - annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer. (#1906171) - annocheck: Improve test for LTO compiled binaries that do not have -Wall annotations. (#1906171) - annocheck: Mark a missining -D_FORTIFY_SOURCE as a FAIL. Nick Clifton 2021-04-21 13:38:20 +0100
  • 9e62aa8ed8 Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run. Related: #1950657 Nick Clifton 2021-04-21 12:56:16 +0100
  • 99c1127a11 Obsolete annobin < 9.66-1 Petr Písař 2021-04-20 13:20:58 +0200
  • 1622358fc1 Annocheck: Improve detection of missing GNU-stack support. Nick Clifton 2021-04-20 12:35:20 +0100
  • 60b4b4fa76 Bump a release Petr Písař 2021-04-19 09:46:44 +0200
  • 604b1841b5 Avoid mixing STI and FMF tests Martin Cermak 2021-04-16 19:13:27 +0200
  • 7d1af348fb Build-requiring perl-interpreter is enough Petr Písař 2021-04-16 13:26:58 +0200
  • 62f4dedb91 Correct a package rename Petr Písař 2021-04-16 13:05:54 +0200
  • 985cb77f4c Fix bz1949570 - file conflicts after separating docs to a noarch subrpm Martin Cermak 2021-04-16 09:16:09 +0200
  • 9930fc7c9a
    Update RISC-V patch David Abdurachmanov 2021-04-14 17:25:30 +0300
  • 9934737a56
    Add support for RISC-V David Abdurachmanov 2021-04-14 14:34:50 +0300