annobin-annocheck-11.13-1.el8 >
A
0 4 dTU]zU KAb*zJWJaRLΨyoIs@qZ}*xmLk~oVwp^Qe8+4:j6)yJ|x('[AaaY
'ec?@9*kD[~jE찻0Y \<}4̼s)XJ佋8l[Mfխ-?X^yq/TT2F@H8J1k]t9|{I6tŕbSAWvdVXKmb=V&c37>J"[{_f#~E[~C
`EMk.X}LkWCW:aG?˓ݣq83+yhtގ<L-tĢk#;$SiEQ)#r7P/QeE()FY5l:ȃֱR)f2LnY~~Ufit@]5c3e0af4d4468ca4c38e0f320996a4f3bb157f0f 19c93d73f1feb9d823fd6ad27db607cf597f4efd67fecf64a9caa3094266fa5f 0302047c435bb5006730650230283e9b3a0019b64fb542fbf1de0e9c11ddaf23dbead4819d2c2b6dab66c96e6a2b77e1f81f5b684270f9da7f8c8f0b9b02310088b78f9dbccfde993c0316bba515cd0546d051c0b26b807990a2cd784f97b9b748ebafb6a2c3a0f1dbee371f60d6df0e 0302047c435bb5006730650231008dda54aa39ee962c9d3acb37c2ba8b9f405960e70801059d9382316965ddfc4656367424dcbcf6aa54af845e317f6eb302303c66253f69a8b6784a58db4fe6804dfbc66f225a532d9cbd2c38d90b1711ecbd20530ca4fd1bcdcb1f50b7c15ec753e6 0302047c435bb5006830660231008de67a49781250eb6e2b9bf30df310fbf47d90cc9e0012df0e1908f4241ac4fa405c5701eaa9d855e33bc7e372f5eecc023100d75ff21f0163aeeee1cd20f95177c888d14d59dab4275aebbb3d6e381ee7176924e3e214d93738ea4570ba4a8ea296e8 0302047c435bb5006830660231008de67a49781250eb6e2b9bf30df310fbf47d90cc9e0012df0e1908f4241ac4fa405c5701eaa9d855e33bc7e372f5eecc023100d75ff21f0163aeeee1cd20f95177c888d14d59dab4275aebbb3d6e381ee7176924e3e214d93738ea4570ba4a8ea296e8 0302047c435bb5006830660231008de67a49781250eb6e2b9bf30df310fbf47d90cc9e0012df0e1908f4241ac4fa405c5701eaa9d855e33bc7e372f5eecc023100d75ff21f0163aeeee1cd20f95177c888d14d59dab4275aebbb3d6e381ee7176924e3e214d93738ea4570ba4a8ea296e8 0302047c435bb5006830660231008de67a49781250eb6e2b9bf30df310fbf47d90cc9e0012df0e1908f4241ac4fa405c5701eaa9d855e33bc7e372f5eecc023100d75ff21f0163aeeee1cd20f95177c888d14d59dab4275aebbb3d6e381ee7176924e3e214d93738ea4570ba4a8ea296e8 0302047c435bb5006830660231008de67a49781250eb6e2b9bf30df310fbf47d90cc9e0012df0e1908f4241ac4fa405c5701eaa9d855e33bc7e372f5eecc023100d75ff21f0163aeeee1cd20f95177c888d14d59dab4275aebbb3d6e381ee7176924e3e214d93738ea4570ba4a8ea296e8 0302047c435bb500663064023005677ca33272da5cb8927280787570dc744ea58f2440a8137238eacf3891331dc7072960f64ae3187bf6710a6e60a86202303d8769cc8fdf7200b17d2e47ccfe61ff23738fb1b0ca2e0b9267a59b9330ac653372a86f21267f6852165efb3f2db5ff 0302047c435bb5006830660231008de67a49781250eb6e2b9bf30df310fbf47d90cc9e0012df0e1908f4241ac4fa405c5701eaa9d855e33bc7e372f5eecc023100d75ff21f0163aeeee1cd20f95177c888d14d59dab4275aebbb3d6e381ee7176924e3e214d93738ea4570ba4a8ea296e8 0302047c435bb5006830660231008de67a49781250eb6e2b9bf30df310fbf47d90cc9e0012df0e1908f4241ac4fa405c5701eaa9d855e33bc7e372f5eecc023100d75ff21f0163aeeee1cd20f95177c888d14d59dab4275aebbb3d6e381ee7176924e3e214d93738ea4570ba4a8ea296e8 0302047c435bb500673065023100e5cdb62849012a82c07007d3eaf1ef458b7457142ee725ebb5cbebd40b1f24f016ff85513f71811b4aa8183288b0ee6002300db0245f916737c6559326b2c20bb7abf452da01a89ffcfa6826a1d78e54572280ca755ef79f3dbed3c7c745b74069d6 0302047c435bb50067306502302de37ddd836c22dc0cd17feb5ed6544e5b4717d5447966fbf8bb083d70367061bf8de5ae715151b586e327b10d25d3a5023100f9d5c2cf131d74a84efa5f0de8736a0b2138319965dca287d090e975192a6670df7cd925cb59094213945e0ade754625 0302047c435bb500683066023100d908af2bf37c56495868526208e994fc50c7698960150d518a3ee47a323cedae5e35553c62a933a9940e6bbbd7cfc9b9023100de3be23e72ee09bab7da7cccd130affa42e5fce5a3606df85e205e38cccfb1d6843f258798304500c0d119bdc1fb8b2f dTU]VYȑf MG~5o}g@Q6s'
6/p?n@%:2;^gp8uzn#&!,m23('؎}=T7ĵfM#_j|X8KFefs>3tƦ
>Qf56Nr }%l$GWh_*IGaeL >T
)bg?þ\%=8$>CFgPnޔ97(cs"ezsj.[y^X5xRosg#yUC!Nq
z/.}͆V+
bRA>lOMN2"y^ZDZ8C7J##7]u$jo;Ԑѯk=HHZ;ؚ̞*&^
Gj
U5g6L#t)TUjqg0M 魴e:8d3*\ m > P ; ? d ^ ( , 3 : A T ` f p
L
( 8 9 : ( G x
H
I
X Y \ $
] X
^ 6 b d e f l t
u L
v w x
x
y ` d j C annobin-annocheck 11.13 1.el8 A tool for checking the security hardening status of binaries Installs the annocheck program which uses the notes generated by annobin to
check that the specified files were compiled with the correct security
hardening options. d x86-06.stream.rdu2.redhat.com e+CentOS CentOS GPLv3+ builder@centos.org Unspecified linux x86_64 h Y + Yx o큤AAA큤 d d:6d d d d d d d d d d d:68fd960dcd5626821e54a5d695b9e3cbfee8029f8d2396adf1ab8131b200a32f9 0246046ec995e0b66b45f0cd3c403073e1c379c32a8e3cf3ed9a03b9749e069a b76d8ce195a8f52d3554952a3df37de917e6e50ac3eeaa46e2dd321e1e3e6d02 71468e9317a8b9d550a49996896e8fe73a50514437c1562b666b6b04e2752f79 f204072e02a80cbdf608278487e60c8eb857d6cdfa482e8add58ebf0dca20caf 9b7ba96249686ee8db54246ddbf5ae25beb3eae886a2f72b9d76efc21d51489d ../../../../usr/bin/annocheck ../../../../usr/lib64/libannocheck.so.0.0.0 libannocheck.so.0.0.0 libannocheck.so.0.0.0 root root root root root root root root root root root root root root root root root root root root root root root root root root annobin-11.13-1.el8.src.rpm annobin-annocheck annobin-annocheck(x86-64) libannocheck.so.0()(64bit) libtool(/usr/lib64/libannocheck.la) pkgconfig(libannocheck) @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
@ /usr/bin/pkg-config cpio libannocheck.so.0()(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.17)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.3.4)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.8)(64bit) libdw.so.1()(64bit) libdw.so.1(ELFUTILS_0.122)(64bit) libdw.so.1(ELFUTILS_0.126)(64bit) libdw.so.1(ELFUTILS_0.159)(64bit) libelf.so.1()(64bit) libelf.so.1(ELFUTILS_1.0)(64bit) libelf.so.1(ELFUTILS_1.3)(64bit) libelf.so.1(ELFUTILS_1.5)(64bit) libelf.so.1(ELFUTILS_1.6)(64bit) librpm.so.8()(64bit) librpmio.so.8()(64bit) rpm rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) rtld(GNU_HASH) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 d @d@c@b?bVbk@bMb<]@b[@aa@a@a@ay?@awawav@amaaf@ad'@a]a\>@aZaTU@`Z`Q@`?z@_м@_j__"__Z@_Wr@^z^@^]Γ@]ʞ]ʞ]Ik]H@]@]:\]@\g\O\w@\T4\R@\P@@\P@@\N\N\N\I\HW@\E@\E@\@n@\,\\&@[@[@[@[[[0[u[u[u[[;@[[[F[F[R@[@[@[@[[t[#@[#@[[[@[@[:@[[@[@[["@[@[[~[~[}P@[{[z@[v[b@[^[\Z[Xf@[U@[U@[Q[Q[P}@[O+[M@[M@[GB[D[D[CN@[CN@[CN@[?Y[>@[:[:[4[3|@[0@[,[,[,[(@[(@[o[[5@[[@Zz@Z@ZZ@Z@Z@ZlZZ`@ZkZZ@Z}@Zz@Zp^@ZoZk@Zk@Zk@Z]@ZN@Z.s@Z*~ZY{YA@YA@YéYéYYYS@YR@Nick Clifton - 11.13-1 Nick Clifton - 11.12-1 Nick Clifton - 10.94-1 Florian Weimer - 10.67-3 Florian Weimer - 10.67-2 Nick Clifton - 10.67-1 Nick Clifton - 10.64-1 Nick Clifton - 10.58-1 Nick Clifton - 10.29-3 Nick Clifton - 10.29-2 Nick Clifton - 10.28-1 Nick Clifton - 10.27-1 Nick Clifton - 10.23-1 Nick Clifton - 10.21-3 Nick Clifton - 10.21-2 Nick Clifton - 10.21-1 Nick Clifton - 10.20-1 Nick Clifton - 10.15-2 Nick Clifton - 10.15-1 Nick Clifton - 10.13-1 Nick Clifton - 10.11-1 Nick Clifton - 10.10-1 Nick Clifton - 10.09-1 Nick Clifton - 10.06-1 Nick Clifton - 9.72-1 Nick Clifton - 9.65-1 Nick Clifton - 9.64-1 Nick Clifton - 9.50-1 Nick Clifton - 9.49-1 Nick Clifton - 9.46-1 Nick Clifton - 9.35-3 Nick Clifton - 9.35-2 Nick Clifton - 9.32-1 Nick Clifton - 9.29-1 Nick Clifton - 9.23-1 Nick Clifton - 9.21-1 Nick Clifton - 9.19-1 Nick Clifton - 8.90-1 Nick Clifton - 8.89-2 Nick Clifton - 8.89-1 Nick Clifton - 8.78-1 Nick Clifton - 8.77-2 Nick Clifton - 8.77-1 Nick Clifton - 8.76-2 Nick Clifton - 8.76-1 Nick Clifton - 8.73-2 Nick Clifton - 8.73-1 Nick Clifton - 8.71-1 Nick Clifton - 8.70-1 Fedora Release Engineering - 8.69-7 Björn Esser - 8.69-6 Björn Esser - 8.69-5 Björn Esser - 8.69-4 Björn Esser - 8.69-3 Nick Clifton - 8.69-2 Nick Clifton - 8.69-1 Nick Clifton - 8.68-1 Björn Esser - 8.67-3 Björn Esser - 8.67-2 Nick Clifton - 8.67-1 Nick Clifton - 8.66-1 Nick Clifton - 8.65-1 Nick Clifton - 8.64-1 Nick Clifton - 8.63-1 Nick Clifton - 8.62-1 David Cantrell - 8.61-2 Nick Clifton - 8.61-1 Nick Clifton - 8.60-1 Nick Clifton - 8.59-1 Nick Clifton - 8.58-1 Nick Clifton - 8.57-1 Nick Clifton - 8.56-1 Nick Clifton - 8.55-1 Nick Clifton - 8.53-1 Nick Clifton - 8.52-1 Nick Clifton - 8.51-1 Nick Clifton - 8.50-1 Nick Clifton - 8.49-1 Nick Clifton - 8.48-1 Nick Clifton - 8.47-1 Nick Clifton - 8.46-1 Nick Clifton - 8.45-1 Nick Clifton - 8.44-1 Nick Clifton - 8.43-1 Nick Clifton - 8.42-1 Nick Clifton - 8.41-1 Nick Clifton - 8.40-1 Nick Clifton - 8.39-2 Nick Clifton - 8.39-1 Nick Clifton - 8.38-1 Nick Clifton - 8.37-1 Nick Clifton - 8.36-1 Nick Clifton - 8.35-1 Nick Clifton - 8.34-1 Nick Clifton - 8.33-1 Nick Clifton - 8.32-1 Nick Clifton - 8.31-1 Nick Clifton - 8.30-1 Nick Clifton - 8.29-1 Nick Clifton - 8.28-1 Nick Clifton - 8.27-1 Nick Clifton - 8.26-1 Nick Clifton - 8.25-1 Nick Clifton - 8.24-1 Nick Clifton - 8.20-1 Florian Weimer - 8.19-3 Troy Dawson - 8.19-2 Nick Clifton - 8.19-1 Nick Clifton - 8.18-1 Nick Clifton - 8.17-1 Nick Clifton - 8.16-1 Nick Clifton - 8.15-1 Nick Clifton - 8.14-1 Nick Clifton - 8.13-1 Nick Clifton - 8.12-1 Nick Clifton - 8.11-1 Nick Clifton - 8.10-1 Nick Clifton - 8.9-1 Nick Clifton - 8.8-1 Nick Clifton - 8.7-1 Nick Clifton - 8.6-1 Nick Clifton - 8.5-1 Nick Clifton - 8.4-1 Nick Clifton - 8.3-1 Nick Clifton - 8.2-1 Nick Clifton - 8.1-1 Nick Clifton - 8.0-1 Nick Clifton - 7.1-1 Nick Clifton - 7.0-1 Nick Clifton - 6.6-1 Nick Clifton - 6.5-1 Nick Clifton - 6.4-1 Nick Clifton - 6.3-1 Nick Clifton - 6.2-1 Nick Clifton - 6.1-1 Nick Clifton - 6.0-1 Nick Clifton - 5.11-1 Nick Clifton - 5.10-1 Nick Clifton - 5.9-1 Nick Clifton - 5.8-1 Nick Clifton - 5.7-1 Nick Clifton - 5.6-3 Nick Clifton - 5.6-2 Nick Clifton - 5.6-1 Nick Clifton - 5.3-1 Nick Clifton - 5.2-1 Nick Clifton - 5.1-1 Nick Clifton - 5.0-1 Nick Clifton - 3.6-1 Nick Clifton - 3.5-1 Nick Clifton - 3.4-2 Nick Clifton - 3.4-1 Fedora Release Engineering - 3.3-2 Nick Clifton - 3.3-1 Florian Weimer - 3.2-3 Nick Clifton - 3.2-2 Nick Clifton - 3.2-1 Richard W.M. Jones - 3.1-3 Nick Clifton - 3.1-2 Nick Clifton - 3.1-1 Nick Clifton - 2.5.1-5 Nick Clifton - 2.5.1-4 Florian Weimer - 2.5.1-3 Igor Gnatenko - 2.5.1-2 Nick Clifton - 2.5.1-1 Nick Clifton - 2.5-2 Nick Clifton - 2.4-1 Nick Clifton - 2.3-1 Fedora Release Engineering - 2.0-3 Florian Weimer - 2.0-2 Nick Clifton - 2.0-1 Nick Clifton - 1.0-1 - NVR bump to allow rebuilding. (#2162746) - Rebase to 11.12. Brings in:
- GCC Plugin: Do not run if other plugins are active. (#2162746)
- Annocheck: Add code to handle glibc functions built without LTO.
- Libannocheck: Fix thinko in debugging code.
- Annocheck: Fix LTO test.
- Notes: Display notes held in separate debuginfo files.
- Annocheck: Fix atexit test. Fix recording of version numbers. (#2165528)
- LLVM & Clang Plugins: Build with branch protection on AArch64. (#2164364)
- Libannocheck: Fix bug causing infinite looping when running tests.
- Annocheck: Fix handling of file built by multiple versions of gcc. (#2160700)
- Annocheck: Fix handling of empty files. (#2159292)
- Annocheck: Add crti.o and crtn.o to the list of known glibc special files. (#2158740)
- Annocheck: Fix memory leaks.
- Annocheck: Do not treat object files as if they did not contain any code. (#2158182)
- Annocheck: Add more special glibc filenames.
- Annocheck: Improve handling of tool versions.
- GCC plugin: Fix building with gcc-13.
- Annocheck: Add test for binaries built by cross compilers.
- Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
- Annocheck: Avoid using debug filename when parsing notes in a debuginfo file. (#2152280) - Rebase to 10.94. (#2151312)
- Annocheck: Better detection of binaries which do not contain code. (#2144533)
- Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
- Annocheck: Try harder not to run mutually exclusive tests.
- Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
- Libannocheck: Actually set result fields after tests are run.
- Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
- Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
- Libannocheck: Move into separate sub-package.
- Libannocheck: Add libannocheck.pc pkgconfig file.
- Libannocheck: Add libannocheck_reinit().
- GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
- Annocheck: Add future tests for -ftrivial-auto-var-init and -fzero-call-used-regs.
- Clang Plugin: Fix for building with Clang-15. (#2125875)
- Annocheck: Add a test for the inconsistent use of -Ofast. (#1248744)
- Plugin: Fix top level configuration support for RiscV.
- Annocheck: Improvements to the size tool.
- Annocheck: Fixes for libannocheck.h.
- Annocheck: Add automatic profile selection.
- Annocheck: Improve gap detection and reporting.
- Annocheck: Check build-id of separate debuginfo files.
- Annocheck: Add GAPS test replacing --ignore-gaps.
- Annocheck: Fix covscan detected race condition between stat() and open().
- Annocheck: Handle binaries created by Rust 1.18. (#2094420)
- Annocheck: Add optional function name to --skip arguments. (PR 29229)
- Annocheck: Fix handling of command line options that take arguments. (#2086850)
- Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries. (#2078909)
- gcc-plugin: Fix typo in configure.ac.
- Add support for RISC-V.
- Annocheck: Add another special case for glibc rpms. (#2083070)
- Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO. (#2082146)
- Annocheck: Add more glibc exceptions + check PT_TLS segments. (#2081131) - Rebuild to switch back to system annobin (#2108721) - Rebuild to switch back to system annobin (#2001788) - Rebuild against LLVM 14. (#2064521)
- Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled by golang.
- Annocheck: Do not complain about missing -mbranch-protection option in AArch64 binaries if compiled in LTO mode.
- gcc-plugin: Add support for CLVC_INTEGER options. - Annocheck: Add more special cases for AArch64 glibc on RHEL-8. (#2072082)
- llvm-plugin: Fix a thinko in the sources.
- gcc-plugin: Add remap of OPT_Wall.
- configure: Fix typo in top level configure.ac.
- Add support for building using meson+ninja.
- Annocheck: Fix test for AArch64 property notes. (#2068657)
- gcc-plugin: Do not issue warning messages for autoconf generated source files. (#2009958) - Rebase to 10.58. (#2067148)
- gcc-plugin: Do not issue warning messages for autoconf generated source files. (#2009958)
- Annocheck: Update documentation and fix typo in annocheck. (#2061291)
- Annocheck: Add option to enable/disable following symbolic links.
- Annocheck: Always identify Rust binaries, even if built on a host that does not know about Rust. (#2057737)
- Spec File: Use a different method to disable the annobin plugin (#2054571)
- Annocheck: Accept static GO binaries. (#2053606)
- gcc-plugin: Fix libtool so that extraneous runpaths are not added to the plugin. (#2047356)
- gcc-plugin: Use canonical_option field of save_decoded_options array. (#2047148)
- Annocheck: Add an option to disable the use of debuginfod (if available).
- Annocheck: Add more glibc special file names.
- Annocheck: Skip some tests for BPF binaries. (#2044897)
- Annocheck: Skip property note test for GO binaries. (#204300)
- Annocheck: Add another glibc static library symbol. (#2043047)
- Spec File: Use gcc --print-file-name=rpmver for the gcc version info.
- GCC Plugin: Do not fail if a section cannot be attached to a group.
- Annocheck: Improve detection of kernel modules.
- GCC Plugin: Only default to link-once when using gcc-12 or later. (#2039297)
- Annocheck: Add option to disable instrumentation test.
- GCC Plugin: Fix building with gcc-12.
- Spec file: Add requirement on cpio for annocheck. (#2039747)
- Annocheck: Add even more glibc function names. (#2037333)
- Annocheck: ARM: Do not fail tests that rely upon annobin notes.
- Annocheck: Extend list of known glibc functions. (#2037333)
- Annocheck: Ignore gaps that contain the _start symbol (for AArch64). (#1995224)
- Annocheck: Ignore more glibc special binaries. (#2037220)
- Annocheck: Do not complaining about missing stack clash notes if the compilation used LTO. (#2034946)
- Annocheck: Add /usr/lib/ld-linux-aarch64.so.1 to the list of known glibc binaries. (#2033255)
- Docs: Note that ENDBR is only needed as the landing pad for indirect branches/calls. (#28705)
- Spec File: Store full gcc version release string in plugin info file. (#2030671)
- Annocheck: Add special case for x86_64 RHEL-7 gaps. (#2031133)
- Annocheck: Do not complaining about missing -mstackrealign notes in LTO mode. (#2030298)
- GCC Plugin: Do not record missing -mstackrealign in LTO mode.
- Tests: Fix gaps and stat tests to use newly built annobin plugin. (#2028063)
- Annocheck: Ignore gaps in binaries at least partial built by golang. (#2028583)
- Annocheck: Allow spaces in gloang symbols. (#2028583)
- Annocheck: Initial deployment of libannocheck. (#2028063)
- gcc-plugin: Fix bug creating empty attachments.
- Annocheck: Change MAYB result to SKIP for DT_RPATH. (#2026300)
- Annocheck: Skip missing fortify/warning notes for ARM32. - NVR bump in order to allow rebuilding against latest gcc. (#2052060) - Spec File: Add "Requires: rpm cpio" to annocheck sub-package. (#2043474) - gcc-plugin: Fix bug creating empty attachments. (#2026944)
- Annocheck: Change MAYB result to SKIP for DT_RPATH. (#2026300) - Annocheck: Skip missing fortify/warning notes for ARM32.
- gcc-plugin: Try another fix for ppc64le section grouping. (#2023437)
- gcc-plugin: Revert 10.22 change. (#2023437)
- Annocheck: Add exception for /usr/sbin/ldconfig. (#2022973) - Annocheck: Add a test for unicode characters in identifiers. (#2017363)
- gcc-plugin: Default to link-order grouping for PPC64LE. (#2016458) - annocheck: Disable LTO test when checking ldconfig (attempt 3). (#2017039) - annocheck: Disable LTO test when checking ldconfig (attempt 2). (#2017039) - annocheck: Disable LTO test when checking ldconfig. (#2017039) - annocheck: Add more glibc function names. (#2017039)
- gcc-plugin: Fix attaching the .text section to the .text.group section.
- Complain about DT_RPATH for Fedora binaries.
- Better reporting of problems in object files. (#2013708)
- Add a requirement on llvm-libs for clang and llvm plugins. (#2014573)
- Fix configuring annocheck without gcc-plugin.
- Annocheck: Better reporting of debuginfod problems.
- Tests: Fix bugs in debuginfod test. - Exclude man pages for uninstalled scripts. (#2013565) - Annocheck: Add tests based upon recent bug fixes.
- Annocheck: Another tweak to glibc detection code. - Annocheck: Fix memory corruptions when using --debug-path and when a corrupt note is found. (#20011438)
- Annocheck: Fix MAYB results for mixed GO/C files.
- Annocheck: Move some messages from VERBOSE to VERBOSE2.
- Annocheck: Scan zero-length tool notes. (#2011818) - Annocheck: Fix covscan detected flaws. (#201129)
- plugins: Add more required build options. (#2011163) - Annocheck: Fix cf-prot test to fail if the CET notes are missing. (#2010671)
- Annocheck: Skip gaps in the .plt section. (#2010675)
- Plugins: Add -g option when building LLVM and Clang. (#2010675) - Annocheck: Add more cases of glibc startup functions. (#1981410)
- Annocheck: Fix covscan detected problems.
- Annocheck: Add --profile=el8.
- gcc-plugin: Conditionalize generation of branch protection note.
- Annocheck: Ignore gaps containing NOP instructions. - Rebase to 10.06. (#2002351)
- GCC Plugin: Fix detection of running inside the LTO compiler. (#2004917)
- Annocheck: Do not insist on the DT_AARCH64_PAC_PLT flag being present in AArch64 binaries.
- Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result.
- Annocheck: Do not set CFLAGS/LDFLAGS when building. Take from environment instead.
- Annocheck: Fix exit code when tests PASS.
- Documentation: Add node for each hardening test.
- Documentation: Install online.
- Annocheck: Annote FAIL and MAYB results with URL to documentation
- Annocheck: Add --no-urls and --provide-urls options
- Annocheck: Add --help- option.
- Annocheck: Fix fuzzing detected failures.
- Annocheck: Add --profile option.
- Docs: Document --profile option and rpminspect.yaml.
- Annocheck: Skip GO/CET checks. Fix fuzzing detected failures.
- LLVM Plugin: Automatically choose the correct tests to run, based upon the version of Clang installed. (#1997444)
- Annocheck: Fix memory corruption. (#1996963)
- Annocheck: Fix conditionalization of AArch64's PAC+BTI detection.
- Annocheck: Add linker generated function for ppc64le exceptions. (#1981410)
- LLVM Plugin: Allow checks to be selected from the command line.
- Annocheck: Examine DW_AT_producer for -flto.
- Annocheck: Conditionalize detection of AArch64's PAC+BTI protection.
- Annocheck: Add linker generated function for s390x exceptions. (#1981410)
- Annocheck: Generate MAYB results for gaps in notes covering the .text section. (#1991943)
- Annocheck: Close DWARF file descriptors once the debug info is no longer needed. (#1981410)
- LLVM Plugin: Update to build with Clang v13. (Thanks to: Tom Stellard )
- Annocheck: Fix memory corruption. (#1988715)
- Annocheck: Skip certain tests for kernel modules.
- Annocheck: Detect a missing CET note. (#1991931)
- Annocheck: Do not report future fails for AArch64 notes.
- Annocheck: Warn about multiple --debug-file, --debug-rpm and --debug-dir options.
- Annocheck: Process files in command line order. (#1988714)
- Annocheck: Reverse AArch64 PAC+BTI check, ie fail if they are enabled. (#1984995)
- Annocheck: Add another test exceptions.
- Annocheck: Add some more test exceptions.
- Tests: Skip glibc-notes test if the assembler does not support --generate-missing-build-notes. (#1978573)
- Tests: Skip objcopy test if objcopy does not support --merge-notes.
- Annocheck: Fix spelling mistake in -mstack-realign failure message. (#1977349)
- gcc-plugin: Do not record global versions of stack protection settings in LTO mode, if not set. (#1958954)
- Annocheck: Remove limit on number of input files.
- clang/llvm plugins: Build with correct security options.
- Annocheck: Better detection of GO compiler version.
- Annocheck: Better support for symbolic links.
- Annocheck: In verbose mode, report the reason for skipping specific tests. (#1969584)
- Annocheck: Improve detection of shared libraries. (#1958954) - Rebase to 9.72. (#1960299)
- annocheck: Accept 0 as a valid number for gcc minor versions and release numbers.
- gcc-plugin: Add support for ARM and RISCV targets.
- timing: do not initialise the clock if the timing tool is disabled.
- gcc-plugin: Replace ICE messsages with verbose messages.
- Fix the testsuite so that it can be run in parallel.
- Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run. (#1950657)
- Annocheck: Improve detection of missing GNU-stack support.
- Correct a package rename (bug #1949570)
- Require docs subpackage by the other ones because of a license
- Build-requiring perl-interpreter is enough
- Fix bz1949570
- Fix anomolies reported by covscan.
- Move documentation into a sub-package. - gcc-plugin: Use a fixed filename when running in LTO mode. - Annocheck: Fix detection of special function names. (#1934189)
- Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc. (#1923439)
- Annocheck: Add colour to some messages. Skip the deliberate use of -fno-stack-protector. (#1923439)
- Annocheck: Fix some problems with tests for missing notes.
- Add some GO tests to annocheck.
- Add a future fail for the presence of RPATH in the dynamic tags.
- Add the ability to disable the warning message about -D_FORTIFY_SOURCE being missing.
- Workaround for elflint problems with PPC compiled files. (#1880634)
- Fix bogus AArch64 test failures.
- Improved testing by annocheck. Add fixed format message mode.
- Fix inconsistency reporting -fcf-protection and -fstack-clash-protection results.
- Add support for -D_FORTIFY_SOURCE=3.
- annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer. (#1906171)
- annocheck: Improve test for LTO compiled binaries that do not have -Wall annotations. (#1906171) - annocheck: Mark a missining -D_FORTIFY_SOURCE as a FAIL. - annocheck: Fix notes analyzer to accept empty PPC64 notes.
- gcc plugin: Tweak generation of end symbols for PPC64 when LTO is active. (#1898075)(#1904479)
- gcc plugin: Add support for GCC 11's cl_vars array. - Annocheck: Support enabling/disabling future fails.
- GCC plugin: Always record global notes for the .text.startup,
.text.exit, .text.hot and .text.cold sections.
- Clang plugin: Add -lLLVM to the build command line.
- Annocheck: Improve reporting of missing -D_FORTIFY_SOURCE option. (#1898075)
- Annocheck: Improve reporting of missing LTO option.
- Add detecting of gimple compiled binaries.
- Add --without-gcc-plugin option.
- Annocheck: Fix bug parsing DW_AT_producer.
- Add test of .note.gnu.property section for PowerPC.
- Add test of objcopy's ability to merge notes.
- Record the -flto setting and produce a soft warning if it is absent.
- Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++. - NVR bump to allow building on ELN sidetag. - Correct the directory chosen for 32-bit LLVM and Clang plugins. (#1884951)
- Allow the use of the SHF_LINK_ORDER section flag to discard unused notes. (Experimental).
- gcc-plugin: Fix test for empty PowerPC sections. (#1880634) - annocheck: Add tests for the AArch64 BTI and PAC security features. (#1862478)
- gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.
- gcc plugin: Correct the detection of 32-bit x86 builds. (#1876197) - gcc plugin: Detect any attempt to access the global_options array.
- gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file. (#1862718)
- Use more robust checks for AArch64 options.
- Detect CLANG compiled assembler that is missing IBT support.
- Improved target pointer size discovery.
- Add support for installing clang and llvm plugins.
- Temporary suppression of aarch64 pointer size check. (#1860549) - Annocheck: Do not skip tests of the short-enums notes. (#1743635) - Annobin: Fall back on using the flags if the option cannot be found in cl_options. (#1817659)
- Annocheck: Detect Fortran compiled programs. (#1824393) - Annobin: If option name mismatch occurs, seach for the real option. (#1817452)
- Annocheck: Fix a division by zero error when parsing GO binaries. (#1818863)
- Annobin: Fix access to the -flto and -fsanitize flags.
- Annobin: Use offsets stored in gcc's cl_option structure to access the global_options array, thus removing the need to check for changes in the size of this structure.
- Rename gcc plugin directory to gcc-plugin.
- Stop annocheck from complaining about missing options when the binary has been built in a mixed environment.
- Improve builtby tool.
- Stop annocheck complaining about missing notes when the binary is not compiled by either gcc or clang.
- Skip the check of the ENTRY instruction for binaries not compiled by gcc or clang. (#1809656)
- Fix infinite loop hangup in annocheck.
- Disable debuginfod support by default.
- Improve parsing of .comment section.
- Fix clang plugin to use hidden symbols.
- Add ability to build clang plugin (disabled by default).
- Annocheck: Fix error printing out the version number.
- Annobin: Add checks of the exact location of the examined switches.
- Annobin: Note when stack clash notes are generated. (#1803173, #1828797)
- Annocheck: Handle multiple builder IDs in the .comment section.
- Add configure option to suppress building annocheck.
- Fix debuginfod test.
- Correct the build requirement for building with debuginfod support.
- Add debuginfod support.
- Add clang plugin (experimental).
- Have annocheck ignore notes with an end address of 0.
- Improve checking of gcc versions. - Do not skip positive results. - Bump NVR to allow rebuild after tweaking gating tests. - Update to version 8.89. (#1766631)
- Generate a WARN result for code compiled with instrumentation enabled. (#1753918)
- Replace address checks with dladdr1.
- Use libabigail like checking to ensure variable address consistency.
- Skip generation of global notes for hot/cold sections.
- Generate FAIL results if -Wall or -Wformat-security are missing.
- If notes cannot be found in the executable look for them in the debuginfo file, if available.
- Generate a FAIL if notes are missing from the executable/debuginfo file.
- Record and report the setting of the AArcht64 specific -mbranch-protection option.
- Improve detection of GO binaries.
- Add gcc version information to annobin notes.
- Do not complain about missing FORTIFY_SOURCE and GLIBCXX_ASSERTIONS in LTO compilations. (#1743635) - Fix a memory allocation error in the annobin plugin. (#1737306) - NVR bump to allow rebuilding against latest gcc. - Another attempt at fixing the detection and reporting of missing -D_FORTIFY_SOURCE options. (#1703500) - Release bump in order to allow rebuild against latest version of gcc in RHEL-8 buildroot. (#1720179) - Report a missing -D_FORTIFY_SOUCRE option if -D_GLIBCXX_ASSERTIONS was detected. (#1703500)
- Do not report problems with -fstack-protection if the binary was not built by gcc or clang. (#1703788)
- Add tests of clang command line options recorded in the DW_AT_producer attribute. - Release bump in order to allow rebuild against latest version of gcc in RHEL-8 buildroot. (#1657912) - Fix test for an executable stack segment. (#1700924) - Annobin: Suppress more calls to free() which are triggering memory checker errors. (#1684148) - Add section flag matching ability to section size tool. - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild - Use 'with' for rich dependency on gcc - Really fix rhbz#1607430. - Rebuilt with annotations enabled - Fix rpm query for gcc version. - Add an exact requirement on the major version of gcc. (#1607430) - Annobin: Add support for .text.startup and .text.exit sections generated by gcc 9.
- Annocheck: Add a note displaying tool. - Annocheck: Skip checks for -D_FORTIFY_SOURCE and -D_GLIBCXX_ASSERTIONS if there is no compiler generated code in the binary. - Rebuilt with annotations enabled - Rebuilt for GCC 9 - Annocheck: Only skip specific checks for specific symbols. (#1666823)
- Annobin: Record the setting of the -fomit-frame-pointer option. (#1657912) - Annocheck: Do not ignore -Og when checking to see if an optimization level has been set. (#1624162) - Annobin: Fix handling of multiple .text.unlikely sections. - Annocheck: Skip gaps in PPC64 executables covered by start_bcax_ symbols. (#1630564) - Annocheck: Disable ENDBR test for shared libraries. (#1652925) - Annocheck: Add test for ENDBR instruction at entry address of x86/x86_64 executables. (#1652925) - Adjust how the gcc_vr macro is set. - Fix building with gcc version 4. - Skip -Wl,-z,now and -Wl,-z,relro checks for non-gcc produced binaries. (#1624421) - Ensure GNU Property notes are 8-byte aligned in x86_64 binaries. (#1645817) - Skip PPC64 linker stubs created in the middle of text sections (again). (#1630640) - Suppress free of invalid pointer. (#1638371) - Skip PPC64 linker stubs created in the middle of text sections. (#1630640) - Reset the (PPC64) section start symbol to 0 if its section is empty. (#1638251) - Also skip virtual thinks created by G++. (#1630619) - Use uppercase for all fail/mayb/pass results. (#1637706) - Generate notes for unlikely sections. (#1630620) - Fix edge case computing section names for end symbols. (#1637039) - Skip dynamic checks for binaries without a dynamic segment. (#1636606) - Delay generating attach_to_group directives until the end of the compilation. (#1636265) - Fix bug introduced in previous delta which would trigger a seg-fault when scanning for gaps. - Annobin: Fix section name selection for startup sections.
- Annocheck: Improve gap skipping heuristics. (#1630574) - Fix function section support (again). (#1630574) - Skip compiler option checks for non-GNU producers. (#1633749) - Fix function section support (again). (#1630574) - Ignore ppc64le notes where start = end + 2. (#1632259) - Make annocheck ignore symbols suffixed with ".end". (#1639618) - Reinstate building annobin with annobin enabled. (#1630550) - Fix gating test. (#1625683) - Tweak tests. - Generate notes and groups for .text.hot and .text.unlikely sections.
- When -ffunction-sections is active, put notes for startup sections into .text.startup.foo rather than .text.foo.
- Similarly put exit section notes into .text.exit.foo. (#1630574)
- Change annocheck's maybe result for GNU Property note being missing into a PASS if it is not needed and a FAIL if it is needed. - Make the --skip-* options skip all messages about the specified test.
- Add gating tests. (#1625683) - Improve error message when an ET_EXEC binary is detected. - Skip failures for PIC vs PIE. (#1629698) - Ensure 4 byte alignment of note sub-sections. (#1629671) - Add timing tool to report on speed of the checks.
- Add check for conflicting use of the -fshort-enum option.
- Add check of the GNU Property notes.
- Skip check for -O2 if compiled with -Og. (#1624162) - Add test for ET_EXEC binaries. (#1625627)
- Document --report-unknown option. - Fix bug in hardened tool which would skip gcc compiled files if the notes were too small.
- Fix bugs in section-size tool.
- Fix bug in built-by tool. - Generate notes for comdat sections. (#1619267) - Add more names to the gap skip list. (#1619267) - Skip gaps covered by _x86.get_pc_thunk and _savegpr symbols. (#1619267)
- Merge ranges where one is wholly covered by another. - Skip gaps at the end of functions. (#1619267) - Fix thinko in ppc64 gap detection code. (#1619267) - Skip gaps at the end of the .text section in ppc64 binaries. (#1619267) - Skip checks in stack_chk_local_fail.c. (#1618660)
- Treat gaps as FAIL results rather than MAYBE.
- Skip checks in __stack_chk_local_fail.
- Reduce version check to gcc major version number only. Skip compiler option checks if binary not built with gcc. (#1603089)
- Fix bug in annobin plugin. Add --section-size=NAME option to annocheck. - Correct name of man page for run-on-binaries-in script. (#1611155) - Rebuild with fixed binutils - Rebuild for gcc 8.2.1 - Allow $ORIGN to be at the start of entries in DT_RPATH and DT_RUNPATH. - Add support for big endian targets. - Count passes and failures on a per-component basis and report gaps. - Use our own copy of the targetm.asm_out.function_section() function. (#159861 comment#17) - Generate grouped note section name all the time. (#159861 comment#16) - Fix section conflict problem. (#1603071) - Fix for building with gcc version 4.
- Fix symbol placement in functions with local assembler. - Fix assertions in rnage checking code. Add detection of -U options. - Handle function sections properly. Handle .text.startup and .text.unlikely sections. Improve gap detection and reporting. (#1601055) - Fix construction of absolute versions of --dwarf-dir and --debug-rpm options. - Fix buffer overrun when very long symbol names are encountered. - Do not force the generation of function notes when -ffunction-sections is active. (#1598961) - Skip the .annobin_ prfix when reporting symbols. (#1599315) - Use the assembler (c++ mangled) version of function names when switching sections. (#1598579) - Do not call function_section. (#1598961) - Ignore cross-section gaps. (#1598551) - Do not skip empty range notes in object files. (#1598361) - Create the start symbol at the start of the function and the end symbol at the end. (#1596823) - Fix --debug-rpm when used inside a directory. - Use a prefix for all annobin generated symbols, and make them hidden.
- Only generate weak symbol definitions for linkonce sections. - Skip some checks for relocatable object files, and dynamic objects.
- Stop bogus complaints about stackrealignment not being enabled. - Add -debug-rpm= option to annocheck.
- Only use a 2 byte offset for the initial symbol on PowerPC. - Use --dwarf-path when looking for build-id based debuginfo files. - Fix premature closing of dwarf handle. - Fix scoping bug computing the name of a separate debuginfo file. - Fix file descriptor leak. - Add command line options to annocheck to disable individual tests. - Remove C99-ism from annocheck sources. - Add the annocheck program. - Do not use the SHF_GNU_BUILD_NOTE section flag. - Remove .sh extension from shell scripts. - Record the setting of the -mstackrealign option for i686 binaries. - Hide the annobin start of file symbol. - Fix script bug in hardended.sh. (Thanks to: Stefan Sørensen ) - Version number bump so that the plugin can be rebuilt with the latest version of GCC. - Rebuild the plugin with the newly created plugin enabled. (#1573082) - Skip the isa_flags check in the ABI test because the crt[in].o files are compiled with different flags from the test files. - Add manual pages for annobin and the scripts. - Do not record a stack protection setting of -1. (#1563141) - Do not complain about a dwarf_version value of -1. (#1557511) - Bias file start symbols by 2 in order to avoid them confused with function symbols. (#1554332)
- Version jump is to sync the version number with the annobin plugins internal version number. - Add --ignore-gaps option to check-abi.sh script.
- Use this option in the abi-test check.
- Tweak hardening test to skip pic and stack protection checks. - Handle functions with specific assembler names. (#1552018) - Add an explicit requirement on the version of gcc used to built the plugin. (#1547260) - Change type and size of symbols to STT_NOTYPE/0 so that they do not confuse GDB. (#1539664)
- Add run-on-binaries-in.sh script to allow the other scripts to be run over a repository. - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild - Rebase on 3.3 release, which adds support for recording -mcet and -fcf-protection. - Rebuild for GCC 8 - Fix the installation of the annobin.info file. - Rebase on 3.2 release, which now contains documentation! - Rebuild against GCC 7.3.1. - Add --with-gcc-plugin-dir option to the configure command line. - Rebase on version 3.1 sources. - Do not generate notes when there is no output file. (#1523875) - Invent an input filename when reading from a pipe. (#1523401) - Use DECL_ASSEMBLER_NAME for symbol references (#1519165) - Cleanups in spec - Touch the auto-generated files in order to stop them from being regenerated. - Stop the plugin complaining about compiler datestamp mismatches. - Tweak tests so that they will run on older machines. - Add annobin-tests subpackage containing some preliminary tests.
- Remove link-time test for unsuported targets. - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuild with binutils fix for ppc64le (#1475636) - Fixes for problems reported by the package submission review:
* Add %license entry to %file section.
* Update License and BuildRequires tags.
* Add Requires tag.
* Remove %clean.
* Add %check.
* Clean up the %changelog.
- Update to use version 2 of the specification and sources. - Initial submission.
11.13-1.el8 11.13-1.el8 11.13 annocheck libannocheck.h .build-id 8f 11386a114bb611c634478ff96b5b3764381f1a e6 9ae67458fde88797878c017437909d61d6f144 libannocheck.la libannocheck.so libannocheck.so.0 libannocheck.so.0.0.0 libannocheck.pc annocheck.1.gz /usr/bin/ /usr/include/ /usr/lib/ /usr/lib/.build-id/ /usr/lib/.build-id/8f/ /usr/lib/.build-id/e6/ /usr/lib64/ /usr/lib64/pkgconfig/ /usr/share/man/man1/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection cpio xz 2 x86_64-redhat-linux-gnu ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=8f11386a114bb611c634478ff96b5b3764381f1a, stripped C source, ASCII text directory libtool library file ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e69ae67458fde88797878c017437909d61d6f144, stripped pkgconfig file troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R
R R R R R R R
R R R R R R R R R R R R P R P R R
R R R R R P R utf-8 886bf89d375dabd868ae325505a12aabe1dfae62363d07264779919ea37abc9c ? P 7zXZ
! #,c]
b2uy-iSqk(媜_%^|hog%jd >)k5jzM) gWmd5I&ӍS+M)Yӻ;XԥRv _ͩBg.Y4h:?T