]> sourceware.org Git - annobin.git/log
annobin.git
2 years ago10.60: Add support for building with meson+ninja
Nick Clifton [Thu, 31 Mar 2022 11:37:33 +0000 (12:37 +0100)]
10.60: Add support for building with meson+ninja

2 years ago10.60: LLVM: Fix plugn to build with KLLVM 14+
Serge Guelton [Thu, 31 Mar 2022 08:44:33 +0000 (09:44 +0100)]
10.60: LLVM: Fix plugn to build with KLLVM 14+

2 years ago10.59: Fix bug in aarch64 property note test
Nick Clifton [Wed, 30 Mar 2022 10:31:03 +0000 (11:31 +0100)]
10.59: Fix bug in aarch64 property note test

2 years ago10.58: gcc-plugin: Do not issue warnings for autoconf generated test files
Nick Clifton [Mon, 14 Mar 2022 11:42:39 +0000 (11:42 +0000)]
10.58: gcc-plugin: Do not issue warnings for autoconf generated test files

2 years ago10.57: Update documentation
Nick Clifton [Mon, 7 Mar 2022 12:18:08 +0000 (12:18 +0000)]
10.57: Update documentation

2 years ago10.56: Annocheck: Add --ignore-links and --follow-links
Nick Clifton [Fri, 4 Mar 2022 17:25:24 +0000 (17:25 +0000)]
10.56: Annocheck: Add --ignore-links and --follow-links
Size: Add --size-total

2 years ago10.55: Annocheck: Always identify Rust binaries
Nick Clifton [Mon, 28 Feb 2022 12:01:22 +0000 (12:01 +0000)]
10.55: Annocheck: Always identify Rust binaries

2 years ago10.54: Annocheck: Skip PIE and PIC tests for GO binaries
Nick Clifton [Fri, 11 Feb 2022 15:08:48 +0000 (15:08 +0000)]
10.54: Annocheck: Skip PIE and PIC tests for GO binaries

2 years ago10.53: gcc-plugin: Use libtool fix from rawhide's gcc package
Nick Clifton [Thu, 27 Jan 2022 16:45:35 +0000 (16:45 +0000)]
10.53: gcc-plugin: Use libtool fix from rawhide's gcc package

2 years agoUse libtool fix from rawhide's gcc package
Nick Clifton [Thu, 27 Jan 2022 16:43:39 +0000 (16:43 +0000)]
Use libtool fix from rawhide's gcc package

2 years ago10.52: gcc-plugin: Improve testsing for pre-processor options
Nick Clifton [Thu, 27 Jan 2022 13:21:41 +0000 (13:21 +0000)]
10.52: gcc-plugin: Improve testsing for pre-processor options

2 years ago10.51: Annocheck: Skip some tests for BPF files
Nick Clifton [Tue, 25 Jan 2022 16:35:46 +0000 (16:35 +0000)]
10.51: Annocheck: Skip some tests for BPF files

2 years ago10.50: Annocheck: Add another special glibc function name.
Nick Clifton [Thu, 20 Jan 2022 16:52:52 +0000 (16:52 +0000)]
10.50: Annocheck: Add another special glibc function name.

2 years ago10.49: Annocheck: Skip property note test for mixed GO binaries
Nick Clifton [Thu, 20 Jan 2022 15:31:41 +0000 (15:31 +0000)]
10.49: Annocheck: Skip property note test for mixed GO binaries

2 years agoAdd note to waiving node
Nick Clifton [Thu, 20 Jan 2022 10:38:55 +0000 (10:38 +0000)]
Add note to waiving node

2 years ago10.48: gcc-plugin: Do not ICE if a section could not be attached to a group.
Nick Clifton [Mon, 17 Jan 2022 15:02:57 +0000 (15:02 +0000)]
10.48: gcc-plugin: Do not ICE if a section could not be attached to a group.
10.48: annocheck:  Add a special case for RHEL-6 glibc gaps.

2 years agoUpdate version numbers
Nick Clifton [Thu, 13 Jan 2022 16:54:24 +0000 (16:54 +0000)]
Update version numbers

2 years ago10.47: gcc-plugin: Default to link-order only for gcc-12+.
Nick Clifton [Thu, 13 Jan 2022 16:49:36 +0000 (16:49 +0000)]
10.47: gcc-plugin: Default to link-order only for gcc-12+.
10.47: annocheck: Better detection of kernel modules.

2 years ago10.46: Annocheck: Fail property note test if CET protection is being checked but...
Nick Clifton [Wed, 12 Jan 2022 12:10:04 +0000 (12:10 +0000)]
10.46: Annocheck: Fail property note test if CET protection is being checked but it is not enabled in the note

2 years ago10.45: gcc-plugin: Add support for building with GCC-12.
Nick Clifton [Tue, 11 Jan 2022 09:59:09 +0000 (09:59 +0000)]
10.45: gcc-plugin: Add support for building with GCC-12.
10.46: Annocheck: Add option to disable instrumentation test.

2 years agoAdd more glibc exceptions
Nick Clifton [Fri, 7 Jan 2022 16:08:27 +0000 (16:08 +0000)]
Add more glibc exceptions

2 years ago10.43: Annocheck: ARM: Expect notes to be missing.
Nick Clifton [Fri, 7 Jan 2022 14:02:54 +0000 (14:02 +0000)]
10.43: Annocheck: ARM: Expect notes to be missing.

2 years ago10.42: Annocheck: Extend list of known glibc functions.
Nick Clifton [Wed, 5 Jan 2022 15:24:07 +0000 (15:24 +0000)]
10.42: Annocheck: Extend list of known glibc functions.

2 years ago10.41: Annocheck: Ignore gaps around _start() (for AArch64). Improvee glibs special...
Nick Clifton [Wed, 5 Jan 2022 13:06:22 +0000 (13:06 +0000)]
10.41: Annocheck: Ignore gaps around _start() (for AArch64).  Improvee glibs special binary matching.

2 years ago10.40: Annocheck: Do not complain about missing stack clash notes when in LTO mode
Nick Clifton [Tue, 4 Jan 2022 11:38:03 +0000 (11:38 +0000)]
10.40: Annocheck: Do not complain about missing stack clash notes when in LTO mode

2 years ago10.39: Annocheck: Also treat /usr/lib/ld-linux-aarch64.so.1 as a glibc binary.
Nick Clifton [Fri, 17 Dec 2021 10:34:28 +0000 (10:34 +0000)]
10.39: Annocheck: Also treat /usr/lib/ld-linux-aarch64.so.1 as a glibc binary.
10.39: Doc: Note that ENDBR insns are only needed as landing pads for indirect branches/calls.

2 years ago10.38: Annocheck: Add special case for gaps on RHEL-7
Nick Clifton [Tue, 14 Dec 2021 17:39:59 +0000 (17:39 +0000)]
10.38: Annocheck: Add special case for gaps on RHEL-7

2 years agoAnnocheck: Tweak AArch64 branch protection test
Nick Clifton [Tue, 14 Dec 2021 16:24:27 +0000 (16:24 +0000)]
Annocheck: Tweak AArch64 branch protection test

2 years ago10.37: Annocheck: Do not fail if -mstackrealign note is missing (in LTO mode)
Nick Clifton [Mon, 13 Dec 2021 18:06:11 +0000 (18:06 +0000)]
10.37: Annocheck: Do not fail if -mstackrealign note is missing (in LTO mode)

2 years ago10.36: GCC Plugin: Do not record missing -mstackrealign when in LTO mode
Nick Clifton [Mon, 13 Dec 2021 18:00:55 +0000 (18:00 +0000)]
10.36: GCC Plugin: Do not record missing -mstackrealign when in LTO mode

2 years ago10.35: Tests: Fix tests that use %build_cflags
Nick Clifton [Mon, 13 Dec 2021 12:44:53 +0000 (12:44 +0000)]
10.35: Tests: Fix tests that use %build_cflags

2 years agoAdd documentation for libannocheck
Nick Clifton [Wed, 8 Dec 2021 12:58:41 +0000 (12:58 +0000)]
Add documentation for libannocheck

2 years ago10.34: Tests: fix stat and gaps test for Fedora builds
Nick Clifton [Mon, 6 Dec 2021 17:51:01 +0000 (17:51 +0000)]
10.34: Tests: fix stat and gaps test for Fedora builds

2 years ago10.33: Tests: Fix gaps and stat tezsts to use prescribed plugin
Nick Clifton [Mon, 6 Dec 2021 14:39:42 +0000 (14:39 +0000)]
10.33: Tests: Fix gaps and stat tezsts to use prescribed plugin

2 years ago10.32: Annocheck: Ignore gaps in binaries that are at least partially built by GO
Nick Clifton [Mon, 6 Dec 2021 11:55:29 +0000 (11:55 +0000)]
10.32: Annocheck: Ignore gaps in binaries that are at least partially built by GO

2 years ago10.31: Annocheck: Allow space in golang symbols
Nick Clifton [Thu, 2 Dec 2021 15:24:16 +0000 (15:24 +0000)]
10.31: Annocheck: Allow space in golang symbols

2 years agotest fixes
Nick Clifton [Wed, 1 Dec 2021 16:02:34 +0000 (16:02 +0000)]
test fixes

2 years agoAdd stat test
Nick Clifton [Wed, 1 Dec 2021 14:31:56 +0000 (14:31 +0000)]
Add stat test

2 years agoremove spurious files
Nick Clifton [Tue, 30 Nov 2021 17:30:00 +0000 (17:30 +0000)]
remove spurious files

2 years agoUpdate libannocheck so that it actually runs the tests
Nick Clifton [Tue, 30 Nov 2021 17:29:02 +0000 (17:29 +0000)]
Update libannocheck so that it actually runs the tests

2 years ago10.30: Initial deployment of libannocheck (not functional - tests not run)
Nick Clifton [Mon, 29 Nov 2021 17:27:34 +0000 (17:27 +0000)]
10.30: Initial deployment of libannocheck (not functional - tests not run)

2 years agoFix covscan issue with LLVM plugin
Nick Clifton [Fri, 26 Nov 2021 14:59:02 +0000 (14:59 +0000)]
Fix covscan issue with LLVM plugin

2 years ago10.29: Annocheck: Change MAYB to SKIP for DT_RPATH
Nick Clifton [Wed, 24 Nov 2021 13:03:05 +0000 (13:03 +0000)]
10.29: Annocheck: Change MAYB to SKIP for DT_RPATH

2 years ago10.28: gcc-plugin: Fix empty attachment
Nick Clifton [Wed, 24 Nov 2021 12:51:02 +0000 (12:51 +0000)]
10.28: gcc-plugin: Fix empty attachment

2 years ago10.27: Annocheck: Skip missing fortify/warning notes for ARM32
Nick Clifton [Fri, 19 Nov 2021 12:36:15 +0000 (12:36 +0000)]
10.27: Annocheck: Skip missing fortify/warning notes for ARM32

2 years agoAnnocheck: Warn if an LLVM bitcode file is detected
Nick Clifton [Thu, 18 Nov 2021 10:21:06 +0000 (10:21 +0000)]
Annocheck: Warn if an LLVM bitcode file is detected

2 years ago10.25: gcc-plugin: revert change to ppc64le section attaching behaviour.
Nick Clifton [Tue, 16 Nov 2021 17:29:18 +0000 (17:29 +0000)]
10.25: gcc-plugin: revert change to ppc64le section attaching behaviour.

2 years ago10.24: Annocheck: Add more glibc exceptions.
Nick Clifton [Tue, 16 Nov 2021 11:24:25 +0000 (11:24 +0000)]
10.24: Annocheck: Add more glibc exceptions.
Plugins: Fix build-id generation by LLD.

2 years agoFix covscan warnings about resource leak in hardened.c
Nick Clifton [Wed, 10 Nov 2021 16:04:03 +0000 (16:04 +0000)]
Fix covscan warnings about resource leak in hardened.c

2 years ago10.23: Annocheck: Add test for unicode characters in identifiers
Nick Clifton [Mon, 8 Nov 2021 13:47:56 +0000 (13:47 +0000)]
10.23: Annocheck: Add test for unicode characters in identifiers

2 years ago10.22: gcc-plugin: default to link-order grouping for PPC64LE.
Nick Clifton [Wed, 27 Oct 2021 10:20:42 +0000 (11:20 +0100)]
10.22: gcc-plugin: default to link-order grouping for PPC64LE.

2 years ago10.21: Annochec: Do not fail if a --slip-<name> option does not match a known test...
Nick Clifton [Tue, 26 Oct 2021 14:46:30 +0000 (15:46 +0100)]
10.21: Annochec: Do not fail if a --slip-<name> option does not match a known test name.  (But do report it).
ldconfig-test: Skip the LTO check.  ldconfig is known to be compiled without LTO.

2 years ago10.20: Annocheck: Add more glibc function names
Nick Clifton [Tue, 26 Oct 2021 07:27:11 +0000 (08:27 +0100)]
10.20: Annocheck: Add more glibc function names

2 years ago10.19: gcc-plugin: Queue an attachment for the .text section (except for PPC64)
Nick Clifton [Thu, 21 Oct 2021 13:07:30 +0000 (14:07 +0100)]
10.19: gcc-plugin: Queue an attachment for the .text section (except for PPC64)

2 years ago10.18: Annocheck: MAYB result for DT_RPATH for Fedora
Nick Clifton [Wed, 20 Oct 2021 17:00:32 +0000 (18:00 +0100)]
10.18: Annocheck: MAYB result for DT_RPATH for Fedora

2 years agoFix warning building clang plugin
Nick Clifton [Wed, 20 Oct 2021 10:26:47 +0000 (11:26 +0100)]
Fix warning building clang plugin

2 years ago10.17: Annocheck: Better reporting of problems in object files
Nick Clifton [Mon, 18 Oct 2021 15:18:17 +0000 (16:18 +0100)]
10.17: Annocheck: Better reporting of problems in object files

2 years agoFix configuring annocheck without gcc-plugin. Fix debuginfod test
Nick Clifton [Thu, 14 Oct 2021 19:07:34 +0000 (20:07 +0100)]
Fix configuring annocheck without gcc-plugin.  Fix debuginfod test

2 years ago10.15: Testsuite: Add more tests
Nick Clifton [Wed, 13 Oct 2021 11:14:11 +0000 (12:14 +0100)]
10.15: Testsuite: Add more tests

2 years ago10.14: Annocheck: Add seen_tools_for_code range coverage tracker
Nick Clifton [Mon, 11 Oct 2021 11:50:56 +0000 (12:50 +0100)]
10.14: Annocheck: Add seen_tools_for_code range coverage tracker

2 years ago10.13: Annocheck: Fix memory corruption when using the --debug-path option. Fix...
Nick Clifton [Fri, 8 Oct 2021 15:13:46 +0000 (16:13 +0100)]
10.13: Annocheck: Fix memory corruption when using the --debug-path option.  Fix use of uninitialised variable when a gelf_getnote() returns a failure result.

2 years ago10.12: Annocheck: Scan zero-length notes for the tool note. Move some messages from...
Nick Clifton [Fri, 8 Oct 2021 13:02:01 +0000 (14:02 +0100)]
10.12: Annocheck: Scan zero-length notes for the tool note.  Move some messages from VERBOSE to VERBOSE2.

2 years agoannocheck:skip more GO related MAYB failures
Nick Clifton [Thu, 7 Oct 2021 10:32:06 +0000 (11:32 +0100)]
annocheck:skip more GO related MAYB failures

2 years agoplugins: Add more required build options
Nick Clifton [Wed, 6 Oct 2021 10:01:07 +0000 (11:01 +0100)]
plugins: Add more required build options

3 years agoRemove dead code from annocheck
Nick Clifton [Tue, 5 Oct 2021 16:37:46 +0000 (17:37 +0100)]
Remove dead code from annocheck

3 years ago10.10: Annocheck: Fix CF PROT test
Nick Clifton [Tue, 5 Oct 2021 13:03:57 +0000 (14:03 +0100)]
10.10: Annocheck: Fix CF PROT test

3 years agoAdd -g option when building clang and llvm plugins
Nick Clifton [Tue, 5 Oct 2021 12:00:12 +0000 (13:00 +0100)]
Add -g option when building clang and llvm plugins

3 years agoAnnocheck: Generate PASS/FAIL message at end of hardened scan, even in verbose mode.
Nick Clifton [Tue, 5 Oct 2021 10:49:39 +0000 (11:49 +0100)]
Annocheck: Generate PASS/FAIL message at end of hardened scan, even in verbose mode.

3 years agoAnnocheck:Do not select empty names to match address ranges
Nick Clifton [Mon, 4 Oct 2021 14:10:20 +0000 (15:10 +0100)]
Annocheck:Do not select empty names to match address ranges

3 years ago10.09: Annocheck: Add more special cases for ignoring stack-prot test
Nick Clifton [Mon, 4 Oct 2021 13:14:02 +0000 (14:14 +0100)]
10.09: Annocheck: Add more special cases for ignoring stack-prot test

3 years ago10.08: Annocheck: Fix covscan detected problems
Nick Clifton [Fri, 1 Oct 2021 11:43:02 +0000 (12:43 +0100)]
10.08: Annocheck: Fix covscan detected problems

3 years agoFix glibc-note test to ignore LTO
Nick Clifton [Thu, 30 Sep 2021 11:47:18 +0000 (12:47 +0100)]
Fix glibc-note test to ignore LTO

3 years agoannocheck: Add el8 profile
Nick Clifton [Thu, 30 Sep 2021 11:45:47 +0000 (12:45 +0100)]
annocheck: Add el8 profile

3 years agoConditionalize branch protection note generation code in AArch64 form of gcc-plugin
Nick Clifton [Thu, 30 Sep 2021 11:45:25 +0000 (12:45 +0100)]
Conditionalize branch protection note generation code in AArch64 form of gcc-plugin

3 years ago10.07: annocheck: scan gaps for NOPS.
Nick Clifton [Wed, 29 Sep 2021 12:01:26 +0000 (13:01 +0100)]
10.07: annocheck: scan gaps for NOPS.

3 years agoReorganize hardened documentation
Nick Clifton [Mon, 27 Sep 2021 09:53:19 +0000 (10:53 +0100)]
Reorganize hardened documentation

3 years agoAdd reference to Fedora's Security Features page in annocheck's documentation
Nick Clifton [Thu, 23 Sep 2021 11:29:19 +0000 (12:29 +0100)]
Add reference to Fedora's Security Features page in annocheck's documentation

3 years agoAdd build tool name containing the name of the plugin
Nick Clifton [Fri, 17 Sep 2021 11:54:37 +0000 (12:54 +0100)]
Add build tool name containing the name of the plugin

3 years ago10.06: GCC Plugin: Fix detection of running inside the LTO compiler. (#2004917)
Nick Clifton [Thu, 16 Sep 2021 15:22:55 +0000 (16:22 +0100)]
10.06: GCC Plugin: Fix detection of running inside the LTO compiler.  (#2004917)

3 years ago10.04: Annocheck: With gaps at the start/end of the .text section, check for special...
Nick Clifton [Wed, 15 Sep 2021 11:31:22 +0000 (12:31 +0100)]
10.04: Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result.

3 years ago10.03:Annocheck: Do not set CFLAGS/LDFLAGS when building. Take from environment...
Nick Clifton [Wed, 15 Sep 2021 09:58:40 +0000 (10:58 +0100)]
10.03:Annocheck: Do not set CFLAGS/LDFLAGS when building.  Take from environment instead.

3 years ago10.02: annocheck: Fix success exit code
Nick Clifton [Fri, 10 Sep 2021 09:56:08 +0000 (10:56 +0100)]
10.02: annocheck: Fix success exit code

3 years agoUpdate make-release script
Nick Clifton [Thu, 9 Sep 2021 13:49:53 +0000 (14:49 +0100)]
Update make-release script

3 years ago10.01: Linking online documentation with annocheck results
Nick Clifton [Thu, 9 Sep 2021 12:52:42 +0000 (13:52 +0100)]
10.01: Linking online documentation with annocheck results

3 years agoAnnocheck documentation extension
Nick Clifton [Tue, 7 Sep 2021 16:57:54 +0000 (17:57 +0100)]
Annocheck documentation extension

3 years agoAdd profiles
Nick Clifton [Fri, 3 Sep 2021 16:56:08 +0000 (17:56 +0100)]
Add profiles

3 years agoAdd entry in documentation about how to skip annocheck tests when run by rpminspect
Nick Clifton [Fri, 3 Sep 2021 14:09:21 +0000 (15:09 +0100)]
Add entry in documentation about how to skip annocheck tests when run by rpminspect

3 years ago9.95:Annocheck: More fuzzing fixes
Nick Clifton [Wed, 1 Sep 2021 09:00:37 +0000 (10:00 +0100)]
9.95:Annocheck: More fuzzing fixes

3 years ago9.94: Annocheck: skip GO CET checks
Nick Clifton [Tue, 31 Aug 2021 13:59:53 +0000 (14:59 +0100)]
9.94: Annocheck: skip GO CET checks
Annocheck: Fixes for errors detecting by fuzzing.

3 years ago9.93: LLVM Plugin: Autodetermine type of checks to run
Nick Clifton [Wed, 25 Aug 2021 12:53:43 +0000 (13:53 +0100)]
9.93: LLVM Plugin: Autodetermine type of checks to run

3 years ago9.92:Annocheck:Fix memory corruption walking DWARF info
Nick Clifton [Tue, 24 Aug 2021 15:58:57 +0000 (16:58 +0100)]
9.92:Annocheck:Fix memory corruption walking DWARF info

3 years ago9.91: Annocheck: Fix spelling typo in AARCH64 branch checking enablement.
Nick Clifton [Thu, 19 Aug 2021 13:59:22 +0000 (14:59 +0100)]
9.91: Annocheck: Fix spelling typo in AARCH64 branch checking enablement.
Annocheck: Extend DT_RPATH and DT_RUNPATH checks.

3 years ago9.90: LLVM Plugin: Allow conditional selection of tests
Nick Clifton [Wed, 18 Aug 2021 10:37:50 +0000 (11:37 +0100)]
9.90: LLVM Plugin: Allow conditional selection of tests
Annocheck: Scan DW_AT_producer for -flto.
Annocheck: Add __libc_setup_tls to list of exceptional functions.

3 years ago9.88: Annocheck: Recucle file descriptors.
Nick Clifton [Tue, 17 Aug 2021 11:11:49 +0000 (12:11 +0100)]
9.88: Annocheck: Recucle file descriptors.
Annocheck: Generated MAYB results for gaps at the start and/or end of the .text section.
LLVM Plugin: Update for Clang 13.

3 years ago9.88:annocheck: MAYB results for gaps in .text section
Nick Clifton [Mon, 16 Aug 2021 14:26:28 +0000 (15:26 +0100)]
9.88:annocheck: MAYB results for gaps in .text section

3 years ago9.87: Fix memory corruption in annocheck
Nick Clifton [Mon, 16 Aug 2021 11:29:14 +0000 (12:29 +0100)]
9.87: Fix memory corruption in annocheck

3 years ago9.85: annocheck: disable AArch64 future fail; report multiple --debug-<foo> options...
Nick Clifton [Tue, 10 Aug 2021 13:57:19 +0000 (14:57 +0100)]
9.85: annocheck: disable AArch64 future fail; report multiple --debug-<foo> options; detect missing CET enabling note

3 years ago9.84: annocheck: process files in command line order
Nick Clifton [Mon, 9 Aug 2021 10:00:17 +0000 (11:00 +0100)]
9.84: annocheck: process files in command line order

3 years agoUpdate docs
Nick Clifton [Fri, 23 Jul 2021 12:38:54 +0000 (13:38 +0100)]
Update docs

3 years ago9.83:annocheck:Reverse AArch64 branch-protection test
Nick Clifton [Fri, 23 Jul 2021 12:38:09 +0000 (13:38 +0100)]
9.83:annocheck:Reverse AArch64 branch-protection test

This page took 0.056178 seconds and 5 git commands to generate.