]> sourceware.org Git - annobin.git/log
annobin.git
2 years ago10.47: gcc-plugin: Default to link-order only for gcc-12+.
Nick Clifton [Thu, 13 Jan 2022 16:49:36 +0000 (16:49 +0000)]
10.47: gcc-plugin: Default to link-order only for gcc-12+.
10.47: annocheck: Better detection of kernel modules.

2 years ago10.46: Annocheck: Fail property note test if CET protection is being checked but...
Nick Clifton [Wed, 12 Jan 2022 12:10:04 +0000 (12:10 +0000)]
10.46: Annocheck: Fail property note test if CET protection is being checked but it is not enabled in the note

2 years ago10.45: gcc-plugin: Add support for building with GCC-12.
Nick Clifton [Tue, 11 Jan 2022 09:59:09 +0000 (09:59 +0000)]
10.45: gcc-plugin: Add support for building with GCC-12.
10.46: Annocheck: Add option to disable instrumentation test.

2 years agoAdd more glibc exceptions
Nick Clifton [Fri, 7 Jan 2022 16:08:27 +0000 (16:08 +0000)]
Add more glibc exceptions

2 years ago10.43: Annocheck: ARM: Expect notes to be missing.
Nick Clifton [Fri, 7 Jan 2022 14:02:54 +0000 (14:02 +0000)]
10.43: Annocheck: ARM: Expect notes to be missing.

2 years ago10.42: Annocheck: Extend list of known glibc functions.
Nick Clifton [Wed, 5 Jan 2022 15:24:07 +0000 (15:24 +0000)]
10.42: Annocheck: Extend list of known glibc functions.

2 years ago10.41: Annocheck: Ignore gaps around _start() (for AArch64). Improvee glibs special...
Nick Clifton [Wed, 5 Jan 2022 13:06:22 +0000 (13:06 +0000)]
10.41: Annocheck: Ignore gaps around _start() (for AArch64).  Improvee glibs special binary matching.

2 years ago10.40: Annocheck: Do not complain about missing stack clash notes when in LTO mode
Nick Clifton [Tue, 4 Jan 2022 11:38:03 +0000 (11:38 +0000)]
10.40: Annocheck: Do not complain about missing stack clash notes when in LTO mode

2 years ago10.39: Annocheck: Also treat /usr/lib/ld-linux-aarch64.so.1 as a glibc binary.
Nick Clifton [Fri, 17 Dec 2021 10:34:28 +0000 (10:34 +0000)]
10.39: Annocheck: Also treat /usr/lib/ld-linux-aarch64.so.1 as a glibc binary.
10.39: Doc: Note that ENDBR insns are only needed as landing pads for indirect branches/calls.

2 years ago10.38: Annocheck: Add special case for gaps on RHEL-7
Nick Clifton [Tue, 14 Dec 2021 17:39:59 +0000 (17:39 +0000)]
10.38: Annocheck: Add special case for gaps on RHEL-7

2 years agoAnnocheck: Tweak AArch64 branch protection test
Nick Clifton [Tue, 14 Dec 2021 16:24:27 +0000 (16:24 +0000)]
Annocheck: Tweak AArch64 branch protection test

2 years ago10.37: Annocheck: Do not fail if -mstackrealign note is missing (in LTO mode)
Nick Clifton [Mon, 13 Dec 2021 18:06:11 +0000 (18:06 +0000)]
10.37: Annocheck: Do not fail if -mstackrealign note is missing (in LTO mode)

2 years ago10.36: GCC Plugin: Do not record missing -mstackrealign when in LTO mode
Nick Clifton [Mon, 13 Dec 2021 18:00:55 +0000 (18:00 +0000)]
10.36: GCC Plugin: Do not record missing -mstackrealign when in LTO mode

2 years ago10.35: Tests: Fix tests that use %build_cflags
Nick Clifton [Mon, 13 Dec 2021 12:44:53 +0000 (12:44 +0000)]
10.35: Tests: Fix tests that use %build_cflags

2 years agoAdd documentation for libannocheck
Nick Clifton [Wed, 8 Dec 2021 12:58:41 +0000 (12:58 +0000)]
Add documentation for libannocheck

2 years ago10.34: Tests: fix stat and gaps test for Fedora builds
Nick Clifton [Mon, 6 Dec 2021 17:51:01 +0000 (17:51 +0000)]
10.34: Tests: fix stat and gaps test for Fedora builds

2 years ago10.33: Tests: Fix gaps and stat tezsts to use prescribed plugin
Nick Clifton [Mon, 6 Dec 2021 14:39:42 +0000 (14:39 +0000)]
10.33: Tests: Fix gaps and stat tezsts to use prescribed plugin

2 years ago10.32: Annocheck: Ignore gaps in binaries that are at least partially built by GO
Nick Clifton [Mon, 6 Dec 2021 11:55:29 +0000 (11:55 +0000)]
10.32: Annocheck: Ignore gaps in binaries that are at least partially built by GO

2 years ago10.31: Annocheck: Allow space in golang symbols
Nick Clifton [Thu, 2 Dec 2021 15:24:16 +0000 (15:24 +0000)]
10.31: Annocheck: Allow space in golang symbols

2 years agotest fixes
Nick Clifton [Wed, 1 Dec 2021 16:02:34 +0000 (16:02 +0000)]
test fixes

2 years agoAdd stat test
Nick Clifton [Wed, 1 Dec 2021 14:31:56 +0000 (14:31 +0000)]
Add stat test

2 years agoremove spurious files
Nick Clifton [Tue, 30 Nov 2021 17:30:00 +0000 (17:30 +0000)]
remove spurious files

2 years agoUpdate libannocheck so that it actually runs the tests
Nick Clifton [Tue, 30 Nov 2021 17:29:02 +0000 (17:29 +0000)]
Update libannocheck so that it actually runs the tests

2 years ago10.30: Initial deployment of libannocheck (not functional - tests not run)
Nick Clifton [Mon, 29 Nov 2021 17:27:34 +0000 (17:27 +0000)]
10.30: Initial deployment of libannocheck (not functional - tests not run)

2 years agoFix covscan issue with LLVM plugin
Nick Clifton [Fri, 26 Nov 2021 14:59:02 +0000 (14:59 +0000)]
Fix covscan issue with LLVM plugin

2 years ago10.29: Annocheck: Change MAYB to SKIP for DT_RPATH
Nick Clifton [Wed, 24 Nov 2021 13:03:05 +0000 (13:03 +0000)]
10.29: Annocheck: Change MAYB to SKIP for DT_RPATH

2 years ago10.28: gcc-plugin: Fix empty attachment
Nick Clifton [Wed, 24 Nov 2021 12:51:02 +0000 (12:51 +0000)]
10.28: gcc-plugin: Fix empty attachment

2 years ago10.27: Annocheck: Skip missing fortify/warning notes for ARM32
Nick Clifton [Fri, 19 Nov 2021 12:36:15 +0000 (12:36 +0000)]
10.27: Annocheck: Skip missing fortify/warning notes for ARM32

2 years agoAnnocheck: Warn if an LLVM bitcode file is detected
Nick Clifton [Thu, 18 Nov 2021 10:21:06 +0000 (10:21 +0000)]
Annocheck: Warn if an LLVM bitcode file is detected

2 years ago10.25: gcc-plugin: revert change to ppc64le section attaching behaviour.
Nick Clifton [Tue, 16 Nov 2021 17:29:18 +0000 (17:29 +0000)]
10.25: gcc-plugin: revert change to ppc64le section attaching behaviour.

2 years ago10.24: Annocheck: Add more glibc exceptions.
Nick Clifton [Tue, 16 Nov 2021 11:24:25 +0000 (11:24 +0000)]
10.24: Annocheck: Add more glibc exceptions.
Plugins: Fix build-id generation by LLD.

2 years agoFix covscan warnings about resource leak in hardened.c
Nick Clifton [Wed, 10 Nov 2021 16:04:03 +0000 (16:04 +0000)]
Fix covscan warnings about resource leak in hardened.c

2 years ago10.23: Annocheck: Add test for unicode characters in identifiers
Nick Clifton [Mon, 8 Nov 2021 13:47:56 +0000 (13:47 +0000)]
10.23: Annocheck: Add test for unicode characters in identifiers

2 years ago10.22: gcc-plugin: default to link-order grouping for PPC64LE.
Nick Clifton [Wed, 27 Oct 2021 10:20:42 +0000 (11:20 +0100)]
10.22: gcc-plugin: default to link-order grouping for PPC64LE.

2 years ago10.21: Annochec: Do not fail if a --slip-<name> option does not match a known test...
Nick Clifton [Tue, 26 Oct 2021 14:46:30 +0000 (15:46 +0100)]
10.21: Annochec: Do not fail if a --slip-<name> option does not match a known test name.  (But do report it).
ldconfig-test: Skip the LTO check.  ldconfig is known to be compiled without LTO.

2 years ago10.20: Annocheck: Add more glibc function names
Nick Clifton [Tue, 26 Oct 2021 07:27:11 +0000 (08:27 +0100)]
10.20: Annocheck: Add more glibc function names

2 years ago10.19: gcc-plugin: Queue an attachment for the .text section (except for PPC64)
Nick Clifton [Thu, 21 Oct 2021 13:07:30 +0000 (14:07 +0100)]
10.19: gcc-plugin: Queue an attachment for the .text section (except for PPC64)

2 years ago10.18: Annocheck: MAYB result for DT_RPATH for Fedora
Nick Clifton [Wed, 20 Oct 2021 17:00:32 +0000 (18:00 +0100)]
10.18: Annocheck: MAYB result for DT_RPATH for Fedora

2 years agoFix warning building clang plugin
Nick Clifton [Wed, 20 Oct 2021 10:26:47 +0000 (11:26 +0100)]
Fix warning building clang plugin

2 years ago10.17: Annocheck: Better reporting of problems in object files
Nick Clifton [Mon, 18 Oct 2021 15:18:17 +0000 (16:18 +0100)]
10.17: Annocheck: Better reporting of problems in object files

2 years agoFix configuring annocheck without gcc-plugin. Fix debuginfod test
Nick Clifton [Thu, 14 Oct 2021 19:07:34 +0000 (20:07 +0100)]
Fix configuring annocheck without gcc-plugin.  Fix debuginfod test

2 years ago10.15: Testsuite: Add more tests
Nick Clifton [Wed, 13 Oct 2021 11:14:11 +0000 (12:14 +0100)]
10.15: Testsuite: Add more tests

2 years ago10.14: Annocheck: Add seen_tools_for_code range coverage tracker
Nick Clifton [Mon, 11 Oct 2021 11:50:56 +0000 (12:50 +0100)]
10.14: Annocheck: Add seen_tools_for_code range coverage tracker

2 years ago10.13: Annocheck: Fix memory corruption when using the --debug-path option. Fix...
Nick Clifton [Fri, 8 Oct 2021 15:13:46 +0000 (16:13 +0100)]
10.13: Annocheck: Fix memory corruption when using the --debug-path option.  Fix use of uninitialised variable when a gelf_getnote() returns a failure result.

2 years ago10.12: Annocheck: Scan zero-length notes for the tool note. Move some messages from...
Nick Clifton [Fri, 8 Oct 2021 13:02:01 +0000 (14:02 +0100)]
10.12: Annocheck: Scan zero-length notes for the tool note.  Move some messages from VERBOSE to VERBOSE2.

2 years agoannocheck:skip more GO related MAYB failures
Nick Clifton [Thu, 7 Oct 2021 10:32:06 +0000 (11:32 +0100)]
annocheck:skip more GO related MAYB failures

2 years agoplugins: Add more required build options
Nick Clifton [Wed, 6 Oct 2021 10:01:07 +0000 (11:01 +0100)]
plugins: Add more required build options

2 years agoRemove dead code from annocheck
Nick Clifton [Tue, 5 Oct 2021 16:37:46 +0000 (17:37 +0100)]
Remove dead code from annocheck

2 years ago10.10: Annocheck: Fix CF PROT test
Nick Clifton [Tue, 5 Oct 2021 13:03:57 +0000 (14:03 +0100)]
10.10: Annocheck: Fix CF PROT test

2 years agoAdd -g option when building clang and llvm plugins
Nick Clifton [Tue, 5 Oct 2021 12:00:12 +0000 (13:00 +0100)]
Add -g option when building clang and llvm plugins

2 years agoAnnocheck: Generate PASS/FAIL message at end of hardened scan, even in verbose mode.
Nick Clifton [Tue, 5 Oct 2021 10:49:39 +0000 (11:49 +0100)]
Annocheck: Generate PASS/FAIL message at end of hardened scan, even in verbose mode.

2 years agoAnnocheck:Do not select empty names to match address ranges
Nick Clifton [Mon, 4 Oct 2021 14:10:20 +0000 (15:10 +0100)]
Annocheck:Do not select empty names to match address ranges

2 years ago10.09: Annocheck: Add more special cases for ignoring stack-prot test
Nick Clifton [Mon, 4 Oct 2021 13:14:02 +0000 (14:14 +0100)]
10.09: Annocheck: Add more special cases for ignoring stack-prot test

2 years ago10.08: Annocheck: Fix covscan detected problems
Nick Clifton [Fri, 1 Oct 2021 11:43:02 +0000 (12:43 +0100)]
10.08: Annocheck: Fix covscan detected problems

2 years agoFix glibc-note test to ignore LTO
Nick Clifton [Thu, 30 Sep 2021 11:47:18 +0000 (12:47 +0100)]
Fix glibc-note test to ignore LTO

2 years agoannocheck: Add el8 profile
Nick Clifton [Thu, 30 Sep 2021 11:45:47 +0000 (12:45 +0100)]
annocheck: Add el8 profile

2 years agoConditionalize branch protection note generation code in AArch64 form of gcc-plugin
Nick Clifton [Thu, 30 Sep 2021 11:45:25 +0000 (12:45 +0100)]
Conditionalize branch protection note generation code in AArch64 form of gcc-plugin

2 years ago10.07: annocheck: scan gaps for NOPS.
Nick Clifton [Wed, 29 Sep 2021 12:01:26 +0000 (13:01 +0100)]
10.07: annocheck: scan gaps for NOPS.

2 years agoReorganize hardened documentation
Nick Clifton [Mon, 27 Sep 2021 09:53:19 +0000 (10:53 +0100)]
Reorganize hardened documentation

2 years agoAdd reference to Fedora's Security Features page in annocheck's documentation
Nick Clifton [Thu, 23 Sep 2021 11:29:19 +0000 (12:29 +0100)]
Add reference to Fedora's Security Features page in annocheck's documentation

2 years agoAdd build tool name containing the name of the plugin
Nick Clifton [Fri, 17 Sep 2021 11:54:37 +0000 (12:54 +0100)]
Add build tool name containing the name of the plugin

2 years ago10.06: GCC Plugin: Fix detection of running inside the LTO compiler. (#2004917)
Nick Clifton [Thu, 16 Sep 2021 15:22:55 +0000 (16:22 +0100)]
10.06: GCC Plugin: Fix detection of running inside the LTO compiler.  (#2004917)

2 years ago10.04: Annocheck: With gaps at the start/end of the .text section, check for special...
Nick Clifton [Wed, 15 Sep 2021 11:31:22 +0000 (12:31 +0100)]
10.04: Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result.

2 years ago10.03:Annocheck: Do not set CFLAGS/LDFLAGS when building. Take from environment...
Nick Clifton [Wed, 15 Sep 2021 09:58:40 +0000 (10:58 +0100)]
10.03:Annocheck: Do not set CFLAGS/LDFLAGS when building.  Take from environment instead.

2 years ago10.02: annocheck: Fix success exit code
Nick Clifton [Fri, 10 Sep 2021 09:56:08 +0000 (10:56 +0100)]
10.02: annocheck: Fix success exit code

2 years agoUpdate make-release script
Nick Clifton [Thu, 9 Sep 2021 13:49:53 +0000 (14:49 +0100)]
Update make-release script

2 years ago10.01: Linking online documentation with annocheck results
Nick Clifton [Thu, 9 Sep 2021 12:52:42 +0000 (13:52 +0100)]
10.01: Linking online documentation with annocheck results

2 years agoAnnocheck documentation extension
Nick Clifton [Tue, 7 Sep 2021 16:57:54 +0000 (17:57 +0100)]
Annocheck documentation extension

2 years agoAdd profiles
Nick Clifton [Fri, 3 Sep 2021 16:56:08 +0000 (17:56 +0100)]
Add profiles

2 years agoAdd entry in documentation about how to skip annocheck tests when run by rpminspect
Nick Clifton [Fri, 3 Sep 2021 14:09:21 +0000 (15:09 +0100)]
Add entry in documentation about how to skip annocheck tests when run by rpminspect

2 years ago9.95:Annocheck: More fuzzing fixes
Nick Clifton [Wed, 1 Sep 2021 09:00:37 +0000 (10:00 +0100)]
9.95:Annocheck: More fuzzing fixes

2 years ago9.94: Annocheck: skip GO CET checks
Nick Clifton [Tue, 31 Aug 2021 13:59:53 +0000 (14:59 +0100)]
9.94: Annocheck: skip GO CET checks
Annocheck: Fixes for errors detecting by fuzzing.

3 years ago9.93: LLVM Plugin: Autodetermine type of checks to run
Nick Clifton [Wed, 25 Aug 2021 12:53:43 +0000 (13:53 +0100)]
9.93: LLVM Plugin: Autodetermine type of checks to run

3 years ago9.92:Annocheck:Fix memory corruption walking DWARF info
Nick Clifton [Tue, 24 Aug 2021 15:58:57 +0000 (16:58 +0100)]
9.92:Annocheck:Fix memory corruption walking DWARF info

3 years ago9.91: Annocheck: Fix spelling typo in AARCH64 branch checking enablement.
Nick Clifton [Thu, 19 Aug 2021 13:59:22 +0000 (14:59 +0100)]
9.91: Annocheck: Fix spelling typo in AARCH64 branch checking enablement.
Annocheck: Extend DT_RPATH and DT_RUNPATH checks.

3 years ago9.90: LLVM Plugin: Allow conditional selection of tests
Nick Clifton [Wed, 18 Aug 2021 10:37:50 +0000 (11:37 +0100)]
9.90: LLVM Plugin: Allow conditional selection of tests
Annocheck: Scan DW_AT_producer for -flto.
Annocheck: Add __libc_setup_tls to list of exceptional functions.

3 years ago9.88: Annocheck: Recucle file descriptors.
Nick Clifton [Tue, 17 Aug 2021 11:11:49 +0000 (12:11 +0100)]
9.88: Annocheck: Recucle file descriptors.
Annocheck: Generated MAYB results for gaps at the start and/or end of the .text section.
LLVM Plugin: Update for Clang 13.

3 years ago9.88:annocheck: MAYB results for gaps in .text section
Nick Clifton [Mon, 16 Aug 2021 14:26:28 +0000 (15:26 +0100)]
9.88:annocheck: MAYB results for gaps in .text section

3 years ago9.87: Fix memory corruption in annocheck
Nick Clifton [Mon, 16 Aug 2021 11:29:14 +0000 (12:29 +0100)]
9.87: Fix memory corruption in annocheck

3 years ago9.85: annocheck: disable AArch64 future fail; report multiple --debug-<foo> options...
Nick Clifton [Tue, 10 Aug 2021 13:57:19 +0000 (14:57 +0100)]
9.85: annocheck: disable AArch64 future fail; report multiple --debug-<foo> options; detect missing CET enabling note

3 years ago9.84: annocheck: process files in command line order
Nick Clifton [Mon, 9 Aug 2021 10:00:17 +0000 (11:00 +0100)]
9.84: annocheck: process files in command line order

3 years agoUpdate docs
Nick Clifton [Fri, 23 Jul 2021 12:38:54 +0000 (13:38 +0100)]
Update docs

3 years ago9.83:annocheck:Reverse AArch64 branch-protection test
Nick Clifton [Fri, 23 Jul 2021 12:38:09 +0000 (13:38 +0100)]
9.83:annocheck:Reverse AArch64 branch-protection test

3 years ago9.81: annocheck: Add some more test exceptions
Nick Clifton [Tue, 13 Jul 2021 15:04:18 +0000 (16:04 +0100)]
9.81: annocheck: Add some more test exceptions

3 years ago9.80: tests: Skip glibc-notes and objcopy tests if the tools do not support the optio...
Nick Clifton [Mon, 5 Jul 2021 12:05:30 +0000 (13:05 +0100)]
9.80: tests: Skip glibc-notes and objcopy tests if the tools do not support the option being tested.

3 years ago9.79: annocheck: Fix typo in FAIL message
Nick Clifton [Tue, 29 Jun 2021 14:46:27 +0000 (15:46 +0100)]
9.79: annocheck: Fix typo in FAIL message

3 years agoRemove non-annocheck scanners
Nick Clifton [Tue, 29 Jun 2021 09:22:28 +0000 (10:22 +0100)]
Remove non-annocheck scanners

3 years ago9.78: gcc-plugin: Do not create notes for global stack protection options if not...
Nick Clifton [Tue, 22 Jun 2021 15:19:56 +0000 (16:19 +0100)]
9.78: gcc-plugin: Do not create notes for global stack protection options if not set and running in lto mode.

3 years agoannocheck: remove limit on number of input files
Nick Clifton [Mon, 21 Jun 2021 15:04:25 +0000 (16:04 +0100)]
annocheck: remove limit on number of input files

3 years agoannocheck: Conditionalize test of DF_PIE_1
Nick Clifton [Mon, 21 Jun 2021 14:35:58 +0000 (15:35 +0100)]
annocheck: Conditionalize test of DF_PIE_1

3 years ago9.76: Add -Wl,-z,now to makefiles for clang/llvm plugins
Nick Clifton [Tue, 15 Jun 2021 14:37:28 +0000 (15:37 +0100)]
9.76: Add -Wl,-z,now to makefiles for clang/llvm plugins

3 years ago9.75: annocheck: better detection of GO compiler version
Nick Clifton [Tue, 15 Jun 2021 11:23:03 +0000 (12:23 +0100)]
9.75: annocheck: better detection of GO compiler version

3 years agomore symbolic link detection improvements
Nick Clifton [Mon, 14 Jun 2021 11:30:19 +0000 (12:30 +0100)]
more symbolic link detection improvements

3 years agofix spelling mistake
Nick Clifton [Wed, 9 Jun 2021 16:47:14 +0000 (17:47 +0100)]
fix spelling mistake

3 years ago9.74: Annocheck: Better handling of symbolic links.
Nick Clifton [Wed, 9 Jun 2021 16:04:24 +0000 (17:04 +0100)]
9.74: Annocheck: Better handling of symbolic links.
Annocheck: Report reasons for skipping specific components.

3 years agogcc-plugin: Add ARM and RISCV support.
Nick Clifton [Tue, 25 May 2021 13:38:15 +0000 (14:38 +0100)]
gcc-plugin: Add ARM and RISCV support.
annocheck: Better heuristic for detecting shared libraries.

3 years agoDo not initialise timing clock if timing is disabled
Nick Clifton [Tue, 4 May 2021 14:04:31 +0000 (15:04 +0100)]
Do not initialise timing clock if timing is disabled

3 years ago9.70:gcc-lugin: Change some ICE messages into verbose
Nick Clifton [Fri, 30 Apr 2021 09:24:26 +0000 (10:24 +0100)]
9.70:gcc-lugin: Change some ICE messages into verbose

3 years agodelete spurious file
Nick Clifton [Fri, 23 Apr 2021 08:44:20 +0000 (09:44 +0100)]
delete spurious file

3 years agoFix copy/paste error in CONTRIBUTING file
Nick Clifton [Fri, 23 Apr 2021 08:43:06 +0000 (09:43 +0100)]
Fix copy/paste error in CONTRIBUTING file

This page took 0.055754 seconds and 5 git commands to generate.