Blame annobin.spec

d1be1bd
03aecab
Name:    annobin
5d051cb
Summary: Annotate and examine compiled binary files
ee93527
Version: 10.05
6d69597
Release: 1%{?dist}
03aecab
License: GPLv3+
03aecab
# Maintainer: nickc@redhat.com
394bd00
# Web Page: https://sourceware.org/annobin/
394bd00
# Watermark Protocol: https://fedoraproject.org/wiki/Toolchain/Watermark
03aecab
f7f58a9
#---------------------------------------------------------------------------------
267ee07
459acd6
# Use "--without tests" to disable the testsuite.
e7ed178
%bcond_without tests
e7ed178
4656334
# Use "--without annocheck" to disable the installation of the annocheck program.
4656334
%bcond_without annocheck
4656334
4c77fc3
# Use "--with debuginfod" to force support for debuginfod to be compiled into
4c77fc3
# the annocheck program.  By default the configure script will check for
4c77fc3
# availablilty at build time, but this might not match the run time situation.
f7f58a9
# FIXME: Add a --without debuginfod option to forcefully disable the configure
f7f58a9
# time check for debuginfod support.
3317ae1
%bcond_with debuginfod
3317ae1
ad2a3b8
# Use "--without clangplugin" to disable the building of the annobin plugin for Clang.
ad2a3b8
%bcond_without clangplugin
f7f58a9
c0eabbb
# Use "--without gccplugin" to disable the building of the annobin plugin for GCC.
c0eabbb
%bcond_without gccplugin
c0eabbb
ad2a3b8
# Use "--without llvmplugin" to disable the building of the annobin plugin for LLVM.
ad2a3b8
%bcond_without llvmplugin
9f46ccb
38bf73b
# Set this to zero to disable the requirement for a specific version of gcc.
38bf73b
# This should only be needed if there is some kind of problem with the version
03aecab
# checking logic or when building on RHEL-7 or earlier.
44aadc5
%global with_hard_gcc_version_requirement 1
38bf73b
c910f22
%bcond_with plugin_rebuild
d94f0f8
# Allow the building of annobin without using annobin itself.
d94f0f8
# This is because if we are bootstrapping a new build environment we can have
d94f0f8
# a new version of gcc installed, but without a new of annobin installed.
d94f0f8
# (i.e. we are building the new version of annobin to go with the new version
d94f0f8
# of gcc).  If the *old* annobin plugin is used whilst building this new
d94f0f8
# version, the old plugin will complain that version of gcc for which it
d94f0f8
# was built is different from the version of gcc that is now being used, and
d94f0f8
# then it will abort.
f7f58a9
#
a99d618
# The default is to use plugin during rebuilds (cf BZ 1630550) but this can
a99d618
# be changed because of the need to be able to rebuild annobin when a change
a99d618
# to gcc breaks the version installed into the buildroot.  Mote however that
a99d618
# uncommenting the lines below will result in annocheck not passing the rpminspect
a99d618
# tests....
a99d618
# %%if %%{without plugin_rebuild}
a99d618
# %%undefine _annotated_build
a99d618
# %%endif
23baf8b
38bf73b
#---------------------------------------------------------------------------------
f7f58a9
29d70de
%global annobin_sources annobin-%{version}.tar.xz
29d70de
Source: https://nickc.fedorapeople.org/%{annobin_sources}
38bf73b
# For the latest sources use:  git clone git://sourceware.org/git/annobin.git
38bf73b
29d70de
# This is where a copy of the sources will be installed.
29d70de
%global annobin_source_dir %{_usrsrc}/annobin
29d70de
46640ca
# Insert patches here, if needed.  Eg:
46640ca
# Patch01: annobin-foo.patch
9d8fe91
848d99e
#---------------------------------------------------------------------------------
9d8fe91
45b479d
# Make sure that the necessary sub-packages are built.
a8a0b58
92c8279
%if %{with gccplugin}
45b479d
Requires: %{name}-plugin-gcc
92c8279
%endif
92c8279
92c8279
%if %{with llvmplugin}
45b479d
Requires: %{name}-plugin-llvm
92c8279
%endif
92c8279
92c8279
%if %{with clangplugin}
45b479d
Requires: %{name}-plugin-clang
92c8279
%endif
92c8279
45b479d
#---------------------------------------------------------------------------------
38bf73b
38bf73b
%description
45b479d
This package contains the tools needed to annotate binary files created by
45b479d
compilers, and also the tools needed to examine those annotations.
45b479d
45b479d
%if %{with gccplugin}
45b479d
One of the tools is a plugin for GCC that records information about the
45b479d
security options that were in effect when the binary was compiled.
38bf73b
eef6b3c
Note - the plugin is automatically enabled in gcc builds via flags
eef6b3c
provided by the redhat-rpm-macros package.
45b479d
%endif
38bf73b
f7f58a9
%if %{with clangplugin}
45b479d
One of the tools is a plugin for Clang that records information about the
45b479d
security options that were in effect when the binary was compiled.
9f46ccb
%endif
9f46ccb
9f46ccb
%if %{with llvmplugin}
45b479d
One of the tools is a plugin for LLVM that records information about the
45b479d
security options that were in effect when the binary was compiled.
45b479d
%endif
45b479d
45b479d
%if %{with annocheck}
45b479d
One of the tools is a security checker which analyses the notes present in
45b479d
annotated files and reports on any missing security options.
f7f58a9
%endif
f7f58a9
296c2a7
#---------------------------------------------------------------------------
296c2a7
296c2a7
# Now that we have sub-packages for all of the plugins and for annocheck,
296c2a7
# there are no executables left to go into the "annobin" rpm.  But top-level
296c2a7
# packages cannot have "BuildArch: noarch" if sub-packages do have
296c2a7
# architecture requirements, and rpmlint generates an error if an
296c2a7
# architecture specific rpm does not contain any binaries.  So instead all of
296c2a7
# the documentation has been moved into an architecture neutral sub-package,
296c2a7
# and there no longer is a top level annobin rpm at all.
296c2a7
296c2a7
%package docs
296c2a7
Summary: Documentation and shell scripts for use with annobin
296c2a7
BuildArch: noarch
62f4ded
# annobin renamed to annobin-doc in 9.66-1
993873a
Provides:  %{name} = %{version}-%{release}
993873a
Obsoletes: %{name} < %{version}-%{release}
45b479d
# The documentation uses pod2man...
45b479d
BuildRequires: perl-interpreter perl-podlators gawk make
296c2a7
296c2a7
%description docs
296c2a7
Provides the documentation files and example shell scripts for use with annobin.
296c2a7
296c2a7
#----------------------------------------------------------------------------
38bf73b
%if %{with tests}
38bf73b
38bf73b
%package tests
38bf73b
Summary: Test scripts and binaries for checking the behaviour and output of the annobin plugin
62f4ded
Requires: %{name}-docs = %{version}-%{release}
38bf73b
38bf73b
%description tests
38bf73b
Provides a means to test the generation of annotated binaries and the parsing
38bf73b
of the resulting files.
38bf73b
45b479d
BuildRequires: make
45b479d
689a7f6
%if %{with debuginfod}
689a7f6
BuildRequires: elfutils-debuginfod-client-devel
689a7f6
%endif
689a7f6
38bf73b
%endif
4656334
296c2a7
#----------------------------------------------------------------------------
4656334
%if %{with annocheck}
4656334
4656334
%package annocheck
4656334
Summary: A tool for checking the security hardening status of binaries
4656334
45b479d
BuildRequires: gcc elfutils elfutils-devel elfutils-libelf-devel rpm-devel binutils-devel make
45b479d
3317ae1
%if %{with debuginfod}
45b479d
BuildRequires: elfutils-debuginfod-client-devel
3317ae1
%endif
689a7f6
62f4ded
Requires: %{name}-docs = %{version}-%{release}
4656334
4656334
%description annocheck
4656334
Installs the annocheck program which uses the notes generated by annobin to
4656334
check that the specified files were compiled with the correct security
4656334
hardening options.
4656334
4656334
%endif
4656334
296c2a7
#----------------------------------------------------------------------------
92c8279
%if %{with gccplugin}
38bf73b
92c8279
%package plugin-gcc
92c8279
Summary: annobin gcc plugin
92c8279
62f4ded
Requires: %{name}-docs = %{version}-%{release}
45b479d
Conflicts: %{name} <= 9.60-1
45b479d
BuildRequires: gcc-c++ gcc-plugin-devel
45b479d
45b479d
# [Stolen from gcc-python-plugin]
45b479d
# GCC will only load plugins that were built against exactly that build of GCC
45b479d
# We thus need to embed the exact GCC version as a requirement within the
45b479d
# metadata.
45b479d
#
45b479d
# Define "gcc_vr", a variable to hold the VERSION-RELEASE string for the gcc
45b479d
# we are being built against.
45b479d
#
45b479d
# Unfortunately, we can't simply run:
45b479d
#   rpm -q --qf="%%{version}-%%{release}"
45b479d
# to determine this, as there's no guarantee of a sane rpm database within
45b479d
# the chroots created by our build system
45b479d
#
45b479d
# So we instead query the version from gcc's output.
45b479d
#
45b479d
# gcc.spec has:
45b479d
#   Version: %%{gcc_version}
45b479d
#   Release: %%{gcc_release}%%{?dist}
45b479d
#   ...snip...
45b479d
#   echo 'Red Hat %%{version}-%%{gcc_release}' > gcc/DEV-PHASE
45b479d
#
45b479d
# So, given this output:
45b479d
#
45b479d
#   $ gcc --version
45b479d
#   gcc (GCC) 4.6.1 20110908 (Red Hat 4.6.1-9)
45b479d
#   Copyright (C) 2011 Free Software Foundation, Inc.
45b479d
#   This is free software; see the source for copying conditions.  There is NO
45b479d
#   warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
45b479d
#
45b479d
# we can scrape out the "4.6.1" from the version line.
45b479d
#
45b479d
# The following implements the above:
45b479d
45b479d
%global gcc_vr %(gcc --version | head -n 1 | sed -e 's|.*(Red\ Hat\ ||g' -e 's|)$||g')
45b479d
45b479d
# We need the major version of gcc.
45b479d
%global gcc_major %(echo "%{gcc_vr}" | cut -f1 -d".")
45b479d
%global gcc_next  %(v="%{gcc_major}"; echo $((++v)))
45b479d
45b479d
# Needed when building the srpm.
45b479d
%if 0%{?gcc_major} == 0
45b479d
%global gcc_major 0
45b479d
%endif
45b479d
45b479d
# For a gcc plugin gcc is required.
45b479d
%if %{with_hard_gcc_version_requirement}
45b479d
# BZ 1607430 - There is an exact requirement on the major version of gcc.
45b479d
Requires: (gcc >= %{gcc_major} with gcc < %{gcc_next})
45b479d
%else
45b479d
Requires: gcc
45b479d
%endif
92c8279
1d5918a
# The next line has been stolen from redhat-rpm-config.spec.
1d5918a
# We install a version info file into this directory, rather than gcc's plugin
1d5918a
# directory, because there is no reliable way for redhat-rpm-config to
1d5918a
# determine the name of gcc's plugin directory.
1d5918a
%global rrcdir /usr/lib/rpm/redhat
1d5918a
1d5918a
# Information about the gcc plugin is recorded in this file.
1d5918a
%global aver %{rrcdir}/annobin-plugin-version-info
1d5918a
92c8279
%description plugin-gcc
92c8279
Installs an annobin plugin that can be used by gcc.
38bf73b
f7f58a9
%endif
f7f58a9
967f47d
#---------------------------------------------------------------------------------
92c8279
%if %{with llvmplugin}
92c8279
92c8279
%package plugin-llvm
92c8279
Summary: annobin llvm plugin
92c8279
62f4ded
Requires: %{name}-docs = %{version}-%{release}
45b479d
Conflicts: %{name} <= 9.60-1
45b479d
BuildRequires: clang clang-devel llvm llvm-devel compiler-rt
92c8279
92c8279
%description plugin-llvm
45b479d
Installs an annobin plugin that can be used by LLVM tools.
92c8279
92c8279
%endif
92c8279
92c8279
#---------------------------------------------------------------------------------
92c8279
%if %{with clangplugin}
92c8279
92c8279
%package plugin-clang
92c8279
Summary: annobin clang plugin
92c8279
62f4ded
Requires: %{name}-docs = %{version}-%{release}
45b479d
Conflicts: %{name} <= 9.60-1
45b479d
BuildRequires: clang clang-devel llvm llvm-devel compiler-rt
92c8279
92c8279
%description plugin-clang
45b479d
Installs an annobin plugin that can be used by Clang.
92c8279
92c8279
%endif
45b479d
92c8279
#---------------------------------------------------------------------------------
92c8279
45b479d
# Decide where the plugins will live.  Change if necessary.
45b479d
92c8279
%global ANNOBIN_GCC_PLUGIN_DIR %(gcc --print-file-name=plugin)
92c8279
524ebda
%{!?llvm_version:%global llvm_version 12.0.1}
45b479d
%{!?llvm_plugin_dir:%global llvm_plugin_dir %{_libdir}/llvm/%{llvm_version}}
45b479d
%{!?clang_plugin_dir:%global clang_plugin_dir %{_libdir}/clang/%{llvm_version}}
45b479d
92c8279
#---------------------------------------------------------------------------------
967f47d
35fd563
%prep
1d5918a
1a9432d
if [ -z "%{gcc_vr}" ]; then
1a9432d
    echo "*** Missing gcc_vr spec file macro, cannot continue." >&2
1a9432d
    exit 1
1a9432d
fi
1a9432d
dcdc0af
echo "Requires: (gcc >= %{gcc_major} and gcc < %{gcc_next})"
5524770
35fd563
%autosetup -p1
35fd563
26ba227
# The plugin has to be configured with the same arcane configure
26ba227
# scripts used by gcc.  Hence we must not allow the Fedora build
26ba227
# system to regenerate any of the configure files.
fd8169a
touch aclocal.m4 gcc-plugin/config.h.in
c393d68
touch configure */configure Makefile.in */Makefile.in
6b89f32
# Similarly we do not want to rebuild the documentation.
6b89f32
touch doc/annobin.info
c393d68
967f47d
#---------------------------------------------------------------------------------
967f47d
35fd563
%build
3317ae1
45b479d
CONFIG_ARGS="--quiet"
9f46ccb
3317ae1
%if %{with debuginfod}
9f46ccb
CONFIG_ARGS="$CONFIG_ARGS --with-debuginfod"
3317ae1
%else
689a7f6
# Note - we explicitly disable debuginfod support if it was not configured.
689a7f6
# This is because by default annobin's configue script will assume --with-debuginfod=auto
689a7f6
# and then run a build time test to see if debugingfod is available.  It
689a7f6
# may well be, but the build time environment may not match the run time
689a7f6
# environment, and the rpm will not have a Requirement on the debuginfod
689a7f6
# client.
9f46ccb
CONFIG_ARGS="$CONFIG_ARGS --without-debuginfod"
9f46ccb
%endif
9f46ccb
9f46ccb
%if %{with clangplugin}
9f46ccb
CONFIG_ARGS="$CONFIG_ARGS --with-clang"
9f46ccb
%endif
9f46ccb
c0eabbb
%if %{without gccplugin}
c0eabbb
CONFIG_ARGS="$CONFIG_ARGS --without-gcc-plugin"
45b479d
%else
45b479d
CONFIG_ARGS="$CONFIG_ARGS --with-gcc-plugin-dir=%{ANNOBIN_GCC_PLUGIN_DIR}"
c0eabbb
%endif
c0eabbb
9f46ccb
%if %{with llvmplugin}
9f46ccb
CONFIG_ARGS="$CONFIG_ARGS --with-llvm"
9f46ccb
%endif
9f46ccb
9f46ccb
%if %{without tests}
9f46ccb
CONFIG_ARGS="$CONFIG_ARGS --without-test"
3317ae1
%endif
3317ae1
45b479d
%if %{without annocheck}
45b479d
CONFIG_ARGS="$CONFIG_ARGS --without-annocheck"
5d4d27d
%else
5d4d27d
# Fedora supports AArch64's -mbranch-protection=bti, RHEL does not.
5d4d27d
%if 0%{?fedora} != 0
1d5918a
export CFLAGS="$CFLAGS -DAARCH64_BRANCH_PROTECTION_SUPPORTED=1"
5d4d27d
%endif
45b479d
%endif
45b479d
f1a1007
%set_build_flags
f1a1007
a99d618
export CFLAGS="$CFLAGS $RPM_OPT_FLAGS %build_cflags"
a99d618
export LDFLAGS="$LDFLAGS %build_ldflags"
a99d618
f1a1007
%ifarch %{ix86} x86_64
f1a1007
# FIXME: There should be a better way to do this.
f1a1007
export CLANG_TARGET_OPTIONS="-fcf-protection"
f1a1007
%endif
f1a1007
a99d618
CFLAGS="$CFLAGS" LDFLAGS="$LDFLAGS" CXXFLAGS="$CFLAGS" %configure ${CONFIG_ARGS} || cat config.log
a978ea4
757c3b0
%make_build
9f46ccb
c0eabbb
%if %{with plugin_rebuild}
ad2a3b8
# Rebuild the plugin(s), this time using the plugin itself!  This
f45ff6b
# ensures that the plugin works, and that it contains annotations
d94f0f8
# of its own.
c0eabbb
c0eabbb
%if %{with gccplugin}
fd8169a
cp gcc-plugin/.libs/annobin.so.0.0.0 %{_tmppath}/tmp_annobin.so
fd8169a
make -C gcc-plugin clean
d94f0f8
BUILD_FLAGS="-fplugin=%{_tmppath}/tmp_annobin.so"
d94f0f8
d94f0f8
# Disable the standard annobin plugin so that we do get conflicts.
d94f0f8
# Note: the "-fplugin=annobin" is here, despite the fact that it will also
d94f0f8
# be automatically added to the gcc command line via
d94f0f8
# "-specs=/usr/lib/rpm/redhat/redhat-annobin-cc1" because of a bug in gcc's
d94f0f8
# plugin command line options handling.  GCC will issue an error saying that
d94f0f8
# there is no plugin called "annobin" matching the -fplugin-arg-annobin-disable
d94f0f8
# option, despite the fact that there patently is.
d94f0f8
BUILD_FLAGS="$BUILD_FLAGS -fplugin=annobin -fplugin-arg-annobin-disable"
d94f0f8
45b479d
# If building on systems with an assembler that does not support the
45b479d
# .attach_to_group pseudo op (eg RHEL-7) then enable the next line.
03aecab
# BUILD_FLAGS="$BUILD_FLAGS -fplugin-arg-tmp_annobin-no-attach"
d94f0f8
fd8169a
make -C gcc-plugin CXXFLAGS="%{optflags} $BUILD_FLAGS"
50a4793
rm %{_tmppath}/tmp_annobin.so
c0eabbb
%endif
f45ff6b
afb29d7
%if %{with clangplugin}
ad2a3b8
cp clang-plugin/annobin-for-clang.so %{_tmppath}/tmp_annobin.so
ad2a3b8
make -C clang-plugin all CXXFLAGS="%{optflags} $BUILD_FLAGS"
ad2a3b8
%endif
ad2a3b8
ad2a3b8
%if %{with llvmplugin}
ad2a3b8
cp llvm-plugin/annobin-for-llvm.so %{_tmppath}/tmp_annobin.so
ad2a3b8
make -C llvm-plugin all CXXFLAGS="%{optflags} $BUILD_FLAGS"
afb29d7
%endif
afb29d7
c0eabbb
%endif
c0eabbb
967f47d
#---------------------------------------------------------------------------------
757c3b0
757c3b0
%install
1d5918a
1d5918a
# PLUGIN_INSTALL_DIR is used by the Clang and LLVM makefiles...
92c8279
%make_install PLUGIN_INSTALL_DIR=%{buildroot}/%{llvm_plugin_dir}
92c8279
92c8279
%if %{with clangplugin}
1d5918a
# Move the clang plugin to a seperate directory.
92c8279
mkdir -p %{buildroot}/%{clang_plugin_dir}
92c8279
mv %{buildroot}/%{llvm_plugin_dir}/annobin-for-clang.so %{buildroot}/%{clang_plugin_dir}
92c8279
%endif
1d5918a
1d5918a
%if %{with gccplugin}
1d5918a
# Record the version of gcc that built this plugin.
1d5918a
mkdir -p                      %{buildroot}%{rrcdir}
1d5918a
rm -f                         %{buildroot}%{aver}
1d5918a
# Note - the comparison logic in redhat-rpm-config's %%triggger macros require
1d5918a
# that the plugin builder information appear as the first three numbers in the file.
1d5918a
echo %{gcc_vr}              > %{buildroot}%{aver}
1d5918a
# Provide a more complete version information string on the second line.
1d5918a
echo "%{ANNOBIN_GCC_PLUGIN_DIR}/annobin.so.0.0.0 was built by gcc version %{gcc_vr} from the %{version} sources" >> %{buildroot}%{aver}
29d70de
29d70de
# Also install a copy of the sources into the build tree.
29d70de
mkdir -p                            %{buildroot}%{annobin_source_dir}
29d70de
cp %{_sourcedir}/%{annobin_sources} %{buildroot}%{annobin_source_dir}/latest-annobin.tar.xz
1d5918a
%endif
1d5918a
c4f24c4
rm -f %{buildroot}%{_infodir}/dir
35fd563
967f47d
#---------------------------------------------------------------------------------
967f47d
e7ed178
%if %{with tests}
757c3b0
%check
c240981
# Change the following line to "make check || :" on RHEL7 or if you need to see the
c240981
# test suite logs in order to diagnose a test failure.
9d82370
make check
276edb1
if [ -f tests/test-suite.log ]; then
276edb1
    cat tests/test-suite.log
276edb1
fi
e7ed178
%endif
e7ed178
967f47d
#---------------------------------------------------------------------------------
967f47d
296c2a7
%files docs
35fd563
%license COPYING3 LICENSE
35fd563
%exclude %{_datadir}/doc/annobin-plugin/COPYING3
35fd563
%exclude %{_datadir}/doc/annobin-plugin/LICENSE
35fd563
%doc %{_datadir}/doc/annobin-plugin/annotation.proposal.txt
16c7d0f
%{_infodir}/annobin.info*
16c7d0f
%{_mandir}/man1/annobin.1*
16c7d0f
%{_mandir}/man1/built-by.1*
16c7d0f
%{_mandir}/man1/check-abi.1*
16c7d0f
%{_mandir}/man1/hardened.1*
16c7d0f
%{_mandir}/man1/run-on-binaries-in.1*
5d051cb
92c8279
%if %{with llvmplugin}
92c8279
%files plugin-llvm
92c8279
%{llvm_plugin_dir}/annobin-for-llvm.so
92c8279
%endif
92c8279
92c8279
%if %{with clangplugin}
92c8279
%files plugin-clang
92c8279
%{clang_plugin_dir}/annobin-for-clang.so
f7f58a9
%endif
5b0e474
5b0e474
%if %{with gccplugin}
92c8279
%files plugin-gcc
c0eabbb
%{ANNOBIN_GCC_PLUGIN_DIR}
1d5918a
%{aver}
29d70de
%{annobin_source_dir}/latest-annobin.tar.xz
c0eabbb
%endif
35fd563
4656334
%if %{with annocheck}
fcc5d2b
%files annocheck
4656334
%{_bindir}/annocheck
16c7d0f
%{_mandir}/man1/annocheck.1*
4656334
%endif
4656334
e7ed178
#---------------------------------------------------------------------------------
967f47d
35fd563
%changelog
ee93527
* Wed Sep 15 2021 Nick Clifton  <nickc@redhat.com> - 10.05-1
ee93527
- Annocheck: Do not insist on the DT_AARCH64_PAC_PLT flag being present in AArch64 binaries.
ee93527
0aa5d1c
* Wed Sep 15 2021 Nick Clifton  <nickc@redhat.com> - 10.04-1
0aa5d1c
- Annocheck: With gaps at the start/end of the .text section, check for special symbols before displaying a MAYB result.
0aa5d1c
a99d618
* Wed Sep 15 2021 Nick Clifton  <nickc@redhat.com> - 10.03-1
a99d618
- Annocheck: Do not set CFLAGS/LDFLAGS when building.  Take from environment instead.
a99d618
92cb681
* Fri Sep 10 2021 Nick Clifton  <nickc@redhat.com> - 10.02-1
92cb681
- Annocheck: Fix exit code when tests PASS.
92cb681
fe49628
* Thu Sep 09 2021 Nick Clifton  <nickc@redhat.com> - 10.01-1
fe49628
- Documentation: Add node for each hardening test.
fe49628
- Documentation: Install online.
fe49628
- Annocheck: Annote FAIL and MAYB results with URL to documentation
fe49628
- Annocheck: Add --no-urls and --provide-urls options
fe49628
- Annocheck: Add --help-<tool> option.
fe49628
9d82370
* Fri Sep 03 2021 Nick Clifton  <nickc@redhat.com> - 9.95-1
9d82370
- Annocheck: Fix fuzzing detected failures.
fe49628
- Annocheck: Add --profile option.
fe49628
- Docs: Document --profile option and rpminspect.yaml.
9d82370
ba44d58
* Tue Aug 31 2021 Nick Clifton  <nickc@redhat.com> - 9.94-1
ba44d58
- Annocheck: Skip GO/CET checks.  Fix fuzzing detected failures.
ba44d58
29d70de
* Wed Aug 25 2021 Nick Clifton  <nickc@redhat.com> - 9.93-1
29d70de
- LLVM Plugin: Automatically choose the correct tests to run, based upon the version of Clang installed. (#1997444)
29d70de
- spec file: Add the installation of the annobon sources into /usr/src/annobin.
29d70de
1d5918a
* Tue Aug 24 2021 Nick Clifton  <nickc@redhat.com> - 9.92-1
1d5918a
- Annocheck: Fix memory corruption.  (#1996963)
1d5918a
- spec file: Add the creation of a gcc-plugin version info file in /usr/lib/rpm/redhat.
1d5918a
1d5918a
* Wed Aug 18 2021 Nick Clifton  <nickc@redhat.com> - 9.91-1
1d5918a
- Annocheck: Fix conditionalization of AArch64's PAC+BTI detection.
1d5918a
7a0769e
* Wed Aug 18 2021 Nick Clifton  <nickc@redhat.com> - 9.90-1
7a0769e
- Annocheck: Add linker generated function for ppc64le exceptions.  (#1981410)
7a0769e
- LLVM Plugin: Allow checks to be selected from the command line.
7a0769e
- Annocheck: Examine DW_AT_producer for -flto.    
7a0769e
5d4d27d
* Tue Aug 17 2021 Nick Clifton  <nickc@redhat.com> - 9.89-1
5d4d27d
- Annocheck: Conditionalize detection of AArch64's PAC+BTI protection.
5d4d27d
- Annocheck: Add linker generated function for s390x exceptions.  (#1981410)
5d4d27d
6d69597
* Tue Aug 17 2021 Nick Clifton  <nickc@redhat.com> - 9.88-1
6d69597
- Annocheck: Generate MAYB results for gaps in notes covering the .text section.  (#1991943)
6d69597
- Annocheck: Close DWARF file descriptors once the debug info is no longer needed.  (#1981410)
6d69597
- LLVM Plugin: Update to build with Clang v13.  (Thanks to: Tom Stellard <tstellar@redhat.com>)
6d69597
    
6d69597
* Mon Aug 16 2021 Tom Stellard <tstellar@redhat.com> - 9.87-2
438dd33
- Rebuild for LLVM 13.0.0-rc1
438dd33
c76d866
* Mon Aug 16 2021 Nick Clifton  <nickc@redhat.com> - 9.87-1
c76d866
- Annocheck: Fix memory corruption.  (#1988715)
c76d866
75a23fb
* Wed Aug 11 2021 Nick Clifton  <nickc@redhat.com> - 9.86-1
75a23fb
- Annocheck: Skip certain tests for kernel modules.
75a23fb
71f8485
* Tue Aug 10 2021 Nick Clifton  <nickc@redhat.com> - 9.85-1
71f8485
- Annocheck: Detect a missing CET note.  (#1991931)
71f8485
- Annocheck: Do not report future fails for AArch64 notes.
71f8485
- Annocheck: Warn about multiple --debug-file, --debug-rpm and --debug-dir options.
71f8485
4af05b1
* Mon Aug 09 2021 Nick Clifton  <nickc@redhat.com> - 9.84-1
4af05b1
- Annocheck: Process files in command line order.  (#1988714)
4af05b1
0394c1d
* Fri Jul 23 2021 Nick Clifton  <nickc@redhat.com> - 9.83-1
0394c1d
- Annocheck: Reverse AArch64 PAC+BTI check, ie fail if they are enabled.  (#1984995)
0394c1d
8155573
* Wed Jul 21 2021 Fedora Release Engineering <releng@fedoraproject.org> - 9.82-2
8155573
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
8155573
8adc17e
* Tue Jul 13 2021 Nick Clifton  <nickc@redhat.com> - 9.82-1
8adc17e
- Annocheck: Add another test exceptions.
8adc17e
5bbd4f5
* Tue Jul 13 2021 Nick Clifton  <nickc@redhat.com> - 9.81-1
5bbd4f5
- Annocheck: Add some more test exceptions.
5bbd4f5
a978ea4
* Mon Jul 05 2021 Nick Clifton  <nickc@redhat.com> - 9.80-1
a978ea4
- Tests: Skip glibc-notes test if the assembler does not support --generate-missing-build-notes.  (#1978573)
a978ea4
- Tests: Skip objcopy test if objcopy does not support --merge-notes.
a978ea4
dfddf61
* Tue Jun 29 2021 Nick Clifton  <nickc@redhat.com> - 9.79-1
a978ea4
- Annocheck: Fix spelling mistake in -mstack-realign failure message.  (#1977349)
dfddf61
76947e8
* Mon Jun 21 2021 Nick Clifton  <nickc@redhat.com> - 9.78-1
76947e8
- gcc-plugin: Do not record global versions of stack protection settings in LTO mode, if not set.  (#1958954)
76947e8
14c8067
* Mon Jun 21 2021 Nick Clifton  <nickc@redhat.com> - 9.77-1
dfddf61
- Annocheck: Remove limit on number of input files.
14c8067
f1a1007
* Tue Jun 15 2021 Nick Clifton  <nickc@redhat.com> - 9.76-1
f1a1007
- clang/llvm plugins: Build with correct security options.
f1a1007
96f1a8a
* Tue Jun 15 2021 Nick Clifton  <nickc@redhat.com> - 9.75-1
96f1a8a
- Annocheck: Better detection of GO compiler version.
96f1a8a
55304ea
* Wed Jun 09 2021 Nick Clifton  <nickc@redhat.com> - 9.74-1
55304ea
- Annocheck: Better support for symbolic links.
55304ea
- Annocheck: In verbose mode, report the reason for skipping specific tests.  (#1969584)
55304ea
524ebda
* Fri Jun 04 2021 Tom Stellard <tstellar@redhat.com> - 9.73-3
524ebda
- Rebuild for LLVM 12.0.1
524ebda
993873a
* Thu Jun 03 2021 Nick Clifton  <nickc@redhat.com> - 9.73-2
993873a
- Obsolete all previous versions of annobin.  (#1967339)
993873a
1c617b1
* Tue May 25 2021 Nick Clifton  <nickc@redhat.com> - 9.73-1
dfddf61
- Annocheck: Improve detection of shared libraries.  (#1958954)
1c617b1
45b479d
* Wed May 19 2021 Nick Clifton  <nickc@redhat.com> - 9.72-2
45b479d
- Tidy up spec file.
45b479d
81adad3
* Thu May 13 2021 Nick Clifton  <nickc@redhat.com> - 9.72-1
dfddf61
- Annocheck: Accept 0 as a valid number for gcc minor versions and release numbers.
81adad3
- gcc-plugin: Add support for ARM and RISCV targets.
81adad3
394bd00
* Tue May 04 2021 Nick Clifton  <nickc@redhat.com> - 9.71-1
394bd00
- timing: do not initialise the clock if the timing tool is disabled.
394bd00
689a7f6
* Fri Apr 30 2021 Nick Clifton  <nickc@redhat.com> - 9.70-1
689a7f6
- gcc-plugin: Replace ICE messsages with verbose messages.
689a7f6
e5cf20e
* Thu Apr 22 2021 Nick Clifton  <nickc@redhat.com> - 9.69-1
e5cf20e
- Fix the testsuite so that it can be run in parallel.
e5cf20e
9e62aa8
* Wed Apr 21 2021 Nick Clifton  <nickc@redhat.com> - 9.68-1
9e62aa8
- Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run.  (#1950657)
9e62aa8
99c1127
* Tue Apr 20 2021 Petr Pisar <ppisar@redhat.com> - 9.67-2
99c1127
- Obsolete annobin < 9.66-1 (bug #1949570)
99c1127
1622358
* Tue Apr 20 2021 Nick Clifton <nickc@redhat.com> - 9.67-1
1622358
- Annocheck: Improve detection of missing GNU-stack support.
1622358
60b4b4f
* Mon Apr 19 2021 Petr Pisar <ppisar@redhat.com> - 9.66-4
60b4b4f
- Bump a release
60b4b4f
62f4ded
* Fri Apr 16 2021 Petr Pisar <ppisar@redhat.com> - 9.66-3
62f4ded
- Correct a package rename (bug #1949570)
62f4ded
- Require docs subpackage by the other ones because of a license
7d1af34
- Build-requiring perl-interpreter is enough
62f4ded
985cb77
* Thu Apr 15 2021 Martin Cermak <mcermak@redhat.com> - 9.66-2
985cb77
- Fix bz1949570
985cb77
296c2a7
* Fri Apr 09 2021 Nick Clifton <nickc@redhat.com> - 9.66-1
296c2a7
- Fix anomolies reported by covscan.
296c2a7
- Move documentation into a sub-package.
296c2a7
c910f22
* Sat Mar 20 2021 Jakub Jelinek <jakub@redhat.com> - 9.65-2
c910f22
- NVR bump to rebuild against GCC 11.0.1
c910f22
4a73116
* Tue Mar 09 2021 Nick Clifton <nickc@redhat.com> - 9.65-1
4a73116
- gcc-plugin: Use a fixed filename when running in LTO mode.
4a73116
60c8169
* Wed Mar 03 2021 Nick Clifton <nickc@redhat.com> - 9.64-1
60c8169
- Annocheck: Fix detection of special function names.  (#1934189)
60c8169
1720e01
* Fri Feb 26 2021 Nick Clifton <nickc@redhat.com> - 9.63-1
1720e01
- Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc.  (#1923439)
1720e01
891fad1
* Thu Feb 25 2021 Nick Clifton <nickc@redhat.com> - 9.62-1
891fad1
- Annocheck: Add colour to some messages.  Skip the deliberate use of -fno-stack-protector.  (#1923439)
891fad1
a35ca90
* Mon Feb 22 2021 Nick Clifton <nickc@redhat.com> - 9.61-1
a35ca90
- Annocheck: Fix some problems with tests for missing notes.
a35ca90
92c8279
* Wed Feb 10 2021 Tom Stellard <tstellar@redhat.com> = 9.60-2
92c8279
- Split plugins into separate sub-packages
92c8279
2cfdfdf
* Fri Feb 05 2021 Nick Clifton <nickc@redhat.com> - 9.60-1
2cfdfdf
- Add some GO tests to annocheck.
2cfdfdf
7c61286
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 9.59-2
7c61286
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
7c61286
3a4181e
* Wed Jan 20 2021 Nick Clifton <nickc@redhat.com> - 9.59-1
3a4181e
- Add a future fail for the presence of RPATH in the dynamic tags.
3a4181e
df15f45
* Mon Jan 18 2021 Nick Clifton <nickc@redhat.com> - 9.58-1
df15f45
- Add the ability to disable the warning message about -D_FORTIFY_SOURCE being missing.
df15f45
1874eab
* Wed Jan 13 2021 Nick Clifton <nickc@redhat.com> - 9.57-1
1874eab
- Workaround for elflint problems with PPC compiled files.  (#1880634)
1874eab
8b18201
* Wed Jan 13 2021 Nick Clifton <nickc@redhat.com> - 9.56-1
8b18201
- Fix bogus AArch64 test failures.
8b18201
d119c7a
* Tue Jan 12 2021 Nick Clifton <nickc@redhat.com> - 9.55-1
d119c7a
- Improved testing by annocheck.  Add fixed format message mode.
d119c7a
d119c7a
* Mon Jan 04 2021 Nick Clifton <nickc@redhat.com> - 9.54-1
d119c7a
- Fix inconsistency reporting -fcf-protection and -fstack-clash-protection results.
d119c7a
d119c7a
* Mon Jan 04 2021 Nick Clifton <nickc@redhat.com> - 9.53-1
3bac683
- Add support for -D_FORTIFY_SOURCE=3.
3bac683
5509907
* Fri Dec 11 2020 Nick Clifton <nickc@redhat.com> - 9.52-2
5509907
- NVR bump in order to allow the new gating tests to be run.
5509907
4a3a6f1
* Fri Dec 11 2020 Nick Clifton <nickc@redhat.com> - 9.52-1
4a3a6f1
- annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer.  (#1906171)
4a3a6f1
409120a
* Thu Dec 10 2020 Nick Clifton <nickc@redhat.com> - 9.51-1
409120a
- annocheck: Improve test for LTO compiled binaries that do not have -Wall annotations.  (#1906171)
409120a
d7a90f1
* Wed Dec 09 2020 Nick Clifton <nickc@redhat.com> - 9.50-1
d7a90f1
- annocheck: Mark a missining -D_FORTIFY_SOURCE as a FAIL.
d7a90f1
46640ca
* Tue Dec 08 2020 Nick Clifton <nickc@redhat.com> - 9.49-1
46640ca
- annocheck: Fix notes analyzer to accept empty PPC64 notes.
46640ca
ec71c31
* Mon Dec 07 2020 Jakub Jelinek <jakub@redhat.com> - 9.48-5
ec71c31
- NVR bump for another ELN sidetag rebuild.
ec71c31
44aadc5
* Sun Dec 06 2020 Jakub Jelinek <jakub@redhat.com> - 9.48-4
44aadc5
- Revert back to previous settings.
44aadc5
a057c0a
* Sun Dec 06 2020 Jakub Jelinek <jakub@redhat.com> - 9.48-3
a057c0a
- Another NVR bump for GCC 11 rebuild.
a057c0a
ebfb417
* Sun Dec 06 2020 Jakub Jelinek <jakub@redhat.com> - 9.48-2
ebfb417
- NVR bump for GCC 11 rebuild.
ebfb417
ebfb417
* Wed Dec 02 2020 Nick Clifton <nickc@redhat.com> - 9.48-1
62931e9
- gcc plugin: Tweak generation of end symbols for PPC64 when LTO is active.  (#1898075)
62931e9
ebfb417
* Tue Dec 01 2020 Nick Clifton <nickc@redhat.com> - 9.47-1
24fe187
- gcc plugin: Add support for GCC 11's cl_vars array.
24fe187
3ed514a
* Fri Nov 27 2020 Jakub Jelinek <jakub@redhat.com> - 9.46-2
3ed514a
- NVR bump for another ELN sidetag rebuild.
3ed514a
ea02daf
* Tue Nov 24 2020 Nick Clifton <nickc@redhat.com> - 9.46-1
ea02daf
- Annocheck: Support enabling/disabling future fails.
ea02daf
ea02daf
* Wed Nov 18 2020 Nick Clifton <nickc@redhat.com> - 9.45-1
b333964
- GCC plugin: Always record global notes for the .text.startup,
b333964
  .text.exit, .text.hot and .text.cold sections.
b333964
62e7074
* Tue Nov 17 2020 Nick Clifton <nickc@redhat.com> - 9.44-1
62e7074
- Clang plugin: Add -lLLVM to the build command line.
62e7074
5b0e474
* Mon Nov 16 2020 Nick Clifton <nickc@redhat.com> - 9.43-1
5b0e474
- Annocheck: Improve reporting of missing -D_FORTIFY_SOURCE option.  (#1898075)
5b0e474
3cff478
* Mon Nov 16 2020 Nick Clifton <nickc@redhat.com> - 9.42-1
3cff478
- Annocheck: Improve reporting of missing LTO option.
3cff478
33cfa7d
* Tue Nov 10 2020 Nick Clifton <nickc@redhat.com> - 9.41-1
33cfa7d
- Add detecting of gimple compiled binaries.
33cfa7d
c0eabbb
* Mon Nov 09 2020 Nick Clifton <nickc@redhat.com> - 9.40-1
c0eabbb
- Add --without-gcc-plugin option.
c0eabbb
e6e8317
* Fri Nov 06 2020 Nick Clifton <nickc@redhat.com> - 9.38-1
e6e8317
- Annocheck: Fix bug parsing DW_AT_producer.
e6e8317
34a622f
* Wed Nov 04 2020 Nick Clifton <nickc@redhat.com> - 9.37-1
34a622f
- Add test of .note.gnu.property section for PowerPC.
34a622f
- Add test of objcopy's ability to merge notes.
34a622f
a87d802
* Fri Oct 30 2020 Jakub Jelinek <jakub@redhat.com> - 9.36-2
a87d802
- NVR bump for another ELN sidetag rebuild.
a87d802
a707c7d
* Wed Oct 21 2020 Nick Clifton <nickc@redhat.com> - 9.36-1
a707c7d
- Record the -flto setting and produce a soft warning if it is absent.
a707c7d
- Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.
a707c7d
d69789a
* Wed Oct 21 2020 Nick Clifton <nickc@redhat.com> - 9.35-3
d69789a
- NVR bump to allow building on ELN sidetag.
d69789a
5515ddd
* Mon Oct 05 2020 Nick Clifton <nickc@redhat.com> - 9.35-2
5515ddd
- Correct the directory chosen for 32-bit LLVM and Clang plugins.  (#1884951)
5515ddd
d94f0f8
* Thu Oct 01 2020 Nick Clifton <nickc@redhat.com> - 9.35-1
d94f0f8
- Allow the use of the SHF_LINK_ORDER section flag to discard unused notes.  (Experimental).
d94f0f8
ad2a3b8
* Mon Sep 28 2020 Nick Clifton <nickc@redhat.com> - 9.34-1
d94f0f8
- Enable the build and installation of the LLVM and Clang plugins.  (Experimental).
ad2a3b8
5a05a4d
* Mon Sep 21 2020 Nick Clifton <nickc@redhat.com> - 9.33-1
5a05a4d
- gcc-plugin: Fix test for empty PowerPC sections.  (#1880634)
5a05a4d
a305baa
* Thu Sep 17 2020 Nick Clifton <nickc@redhat.com> - 9.32-2
a305baa
- NVR bump to allow rebuild against f34-build-side-30319.
a305baa
087486d
* Tue Sep 15 2020 Nick Clifton <nickc@redhat.com> - 9.32-1
087486d
- annocheck: Add tests for the AArch64 BTI and PAC security features.  (#1862478)
087486d
353a681
* Thu Sep 10 2020 Nick Clifton <nickc@redhat.com> - 9.31-1
353a681
- gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.
353a681
397174a
* Thu Sep 10 2020 Nick Clifton <nickc@redhat.com> - 9.30-1
397174a
- gcc plugin: Correct the detection of 32-bit x86 builds.  (#1876197)
397174a
d9c1db4
* Mon Aug 17 2020 Nick Clifton <nickc@redhat.com> - 9.29-1
d9c1db4
- gcc plugin: Detect any attempt to access the global_options array.
d9c1db4
057676c
* Tue Aug 11 2020 Nick Clifton <nickc@redhat.com> - 9.28-1
057676c
- gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
057676c
16d8c4b
* Thu Jul 30 2020 Nick Clifton <nickc@redhat.com> - 9.27-1
16d8c4b
- Use more robust checks for AArch64 options.
16d8c4b
1c15fe5
* Thu Jul 30 2020 Nick Clifton <nickc@redhat.com> - 9.26-1
1c15fe5
- Detect CLANG compiled assembler that is missing IBT support.
1c15fe5
43a0359
* Wed Jul 29 2020 Nick Clifton <nickc@redhat.com> - 9.25-1
43a0359
- Improved target pointer size discovery.
43a0359
6e6cadf
* Mon Jul 27 2020 Fedora Release Engineering <releng@fedoraproject.org> - 9.24-3
6e6cadf
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
6e6cadf
932b17d
* Sun Jul 26 2020 Nick Clifton <nickc@redhat.com> - 9.24-2
932b17d
- Rebuild with plugin enabled to check that suppression works.
932b17d
3ab9323
* Sun Jul 26 2020 Nick Clifton <nickc@redhat.com> - 9.24-1
b034a2c
- Add support for installing clang and llvm plugins.
932b17d
- Temporary suppression of aarch64 pointer size check.  (#1860549)
afb29d7
8840f2f
* Sat Jul 25 2020 Peter Robinson <pbrobinson@fedoraproject.org> - 9.23-2
8840f2f
- Rebuild for gcc 10.2
8840f2f
6fd2366
* Wed Jul 01 2020 Nick Clifton <nickc@redhat.com> - 9.23-1
6fd2366
- Annocheck: Do not skip tests of the short-enums notes.  (#1743635)
6fd2366
9f46ccb
* Mon Jun 15 2020 Nick Clifton <nickc@redhat.com> - 9.22-1
9f46ccb
- Add (optional) llvm plugin.
9f46ccb
225ffdc
* Wed Apr 22 2020 Nick Clifton <nickc@redhat.com> - 9.21-1
225ffdc
- Annobin: Fall back on using the flags if the option cannot be found in cl_options.  (#1817659)
225ffdc
459acd6
* Thu Apr 16 2020 Nick Clifton <nickc@redhat.com> - 9.20-1
459acd6
- Annocheck: Detect Fortran compiled programs.  (#1824393)
459acd6
ec93f17
* Wed Apr 01 2020 Nick Clifton <nickc@redhat.com> - 9.19-1
ec93f17
- Annobin: If option name mismatch occurs, seach for the real option.  (#1817452)
ec93f17
dcdc0af
* Mon Mar 30 2020 Nick Clifton <nickc@redhat.com> - 9.18-1
dcdc0af
- Annocheck: Fix a division by zero error when parsing GO binaries.  (#1818863)
dcdc0af
dcc5136
* Fri Mar 27 2020 Nick Clifton <nickc@redhat.com> - 9.16-1
dcc5136
- Annobin: Fix access to the -flto and -fsanitize flags.
dcc5136
25d4740
* Thu Mar 26 2020 Nick Clifton <nickc@redhat.com> - 9.14-1
dcc5136
- Annobin: Use offsets stored in gcc's cl_option structure to access the global_options array, thus removing the need to check for changes in the size of this structure.
25d4740
b1078c0
* Thu Mar 26 2020 Nick Clifton <nickc@redhat.com> - 9.13-2
b1078c0
- NVR bump to allow rebuilding against new gcc.
b1078c0
fd8169a
* Thu Mar 12 2020 Nick Clifton <nickc@redhat.com> - 9.13-1
fd8169a
- Rename gcc plugin directory to gcc-plugin.
fd8169a
- Stop annocheck from complaining about missing options when the binary has been built in a mixed environment.
fd8169a
46ef9ab
* Thu Mar 12 2020 Nick Clifton <nickc@redhat.com> - 9.12-3
46ef9ab
- And again, this time with annotation enabled.  (#1810941)
46ef9ab
1defc98
* Thu Mar 12 2020 Nick Clifton <nickc@redhat.com> - 9.12-2
1defc98
- NVR bump to enable rebuild against updated gcc.  (#1810941)
1defc98
09d5b50
* Wed Mar 04 2020 Nick Clifton <nickc@redhat.com> - 9.12-1
09d5b50
- Improve builtby tool.
09d5b50
- Stop annocheck complaining about missing notes when the binary is not compiled by either gcc or clang.
5770b9a
- Skip the check of the ENTRY instruction for binaries not compiled by gcc or clang.  (#1809656)
09d5b50
cb98e5f
* Fri Feb 28 2020 Nick Clifton <nickc@redhat.com> - 9.11-1
cb98e5f
- Fix infinite loop hangup in annocheck.
cb98e5f
- Disable debuginfod support by default.
cb98e5f
- Improve parsing of .comment section.
cb98e5f
5d051cb
* Thu Feb 27 2020 Nick Clifton <nickc@redhat.com> - 9.10-1
5d051cb
- Fix clang plugin to use hidden symbols.
5d051cb
f7f58a9
* Tue Feb 25 2020 Nick Clifton <nickc@redhat.com> - 9.09-1
f7f58a9
- Add ability to build clang plugin (disabled by default).
f7f58a9
e8f56c0
* Mon Feb 17 2020 Nick Clifton <nickc@redhat.com> - 9.08-1
e8f56c0
- Annocheck: Fix error printing out the version number.
e8f56c0
1fa49e6
* Fri Feb 14 2020 Nick Clifton <nickc@redhat.com> - 9.07-1
1fa49e6
- Annobin: Add checks of the exact location of the examined switches.
1fa49e6
eb569a6
* Tue Feb 11 2020 Nick Clifton <nickc@redhat.com> - 9.06-1
eb569a6
- Annobin: Note when stack clash notes are generated.
eb569a6
- Annocheck: Handle multiple builder IDs in the .comment section.
eb569a6
2b9645b
* Fri Jan 31 2020 Nick Clifton <nickc@redhat.com> - 9.05-1
2b9645b
- Add configure option to suppress building annocheck.
2b9645b
4c77fc3
* Fri Jan 31 2020 Nick Clifton <nickc@redhat.com> - 9.04-1
4c77fc3
- Fix debuginfod test.
4c77fc3
30290e7
* Thu Jan 30 2020 Nick Clifton <nickc@redhat.com> - 9.03-2
30290e7
- Correct the build requirement for building with debuginfod support.
30290e7
3317ae1
* Thu Jan 30 2020 Nick Clifton <nickc@redhat.com> - 9.03-1
3317ae1
- Add debuginfod support.
3317ae1
b221550
* Tue Jan 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 9.01-3
b221550
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
b221550
3755b69
* Mon Jan 20 2020 Nick Clifton <nickc@redhat.com> - 9.01-2
3755b69
- Rebuild againt latest gcc-10.
3755b69
980573d
* Mon Jan 20 2020 Nick Clifton <nickc@redhat.com> - 9.01-1
980573d
- Add clang plugin (experimental).
476968a
8997d89
* Fri Dec 06 2019 Nick Clifton <nickc@redhat.com> - 8.92-1
8997d89
- Have annocheck ignore notes with an end address of 0.
8997d89
27da4ae
* Mon Nov 18 2019 Nick Clifton <nickc@redhat.com> - 8.91-1
27da4ae
- Improve checking of gcc versions.
27da4ae
9f8f0cd
* Fri Nov 15 2019 Nick Clifton <nickc@redhat.com> - 8.90-1
9f8f0cd
- Do not skip positive results.
9f8f0cd
d97bf86
* Fri Nov 01 2019 Nick Clifton <nickc@redhat.com> - 8.88-1
d97bf86
- Generate a WARN result for code compiled with instrumentation enabled.  (#1753918)
d97bf86
fff201e
* Tue Oct 22 2019 Nick Clifton <nickc@redhat.com> - 8.87-1
fff201e
- Replace address checks with dladdr1.
fff201e
0468836
* Mon Oct 21 2019 Nick Clifton <nickc@redhat.com> - 8.86-1
0468836
- Use libabigail like checking to ensure variable address consistency.
0468836
07e0a5a
* Wed Oct 16 2019 Nick Clifton <nickc@redhat.com> - 8.85-1
07e0a5a
- Skip generation of global notes for hot/cold sections.
07e0a5a
59663eb
* Thu Oct 10 2019 Nick Clifton <nickc@redhat.com> - 8.84-1
59663eb
- Generate FAIL results if -Wall or -Wformat-security are missing.
59663eb
c240981
* Thu Oct 03 2019 Nick Clifton <nickc@redhat.com> - 8.83-1
c240981
- If notes cannot be found in the executable look for them in the debuginfo file, if available.
c240981
- Generate a FAIL if notes are missing from the executable/debuginfo file.
c240981
- Record and report the setting of the AArcht64 specific -mbranch-protection option.
c240981
af41c06
* Mon Sep 23 2019 Nick Clifton <nickc@redhat.com> - 8.81-1
af41c06
- Improve detection of GO binaries.
af41c06
- Add gcc version information to annobin notes.
af41c06
- Do not complain about missing FORTIFY_SOURCE and GLIBCXX_ASSERTIONS in LTO compilations.
af41c06
1650386
* Wed Sep 04 2019 Nick Clifton <nickc@redhat.com> - 8.79-2
1650386
- NVR bump to allow rebuild against latest gcc.  (#1748529)
1650386
b6d4688
* Tue Aug 06 2019 Nick Clifton <nickc@redhat.com> - 8.79-1
b6d4688
- Allow compiler used to run tests to be specified on the command line.  (#1723401)
b6d4688
4a6b895
* Tue Aug 06 2019 Nick Clifton <nickc@redhat.com> - 8.78-1
4a6b895
- Fix a memory allocation error in the annobin plugin.  (#1737306)
4a6b895
978810c
* Wed Jul 24 2019 Fedora Release Engineering <releng@fedoraproject.org> - 8.77-2
978810c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
978810c
03aecab
* Mon Jun 24 2019 Nick Clifton <nickc@redhat.com> - 8.77-1
03aecab
- Another attempt at fixing the detection and reporting of missing -D_FORTIFY_SOURCE options.  (#1703500)
03aecab
b20fc42
* Mon Jun 10 22:13:17 CET 2019 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 8.76-4
b20fc42
- Rebuild for RPM 4.15
b20fc42
2fca1e2
* Mon Jun 10 15:42:00 CET 2019 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 8.76-3
2fca1e2
- Rebuild for RPM 4.15
2fca1e2
fcc5d2b
* Thu Jun 06 2019 Panu Matilainen <pmatilai@redhat.com> - 8.76-2
fcc5d2b
- Really enable annocheck sub-package
fcc5d2b
94317b5
* Tue Apr 30 2019 Nick Clifton <nickc@redhat.com> - 8.76-1
94317b5
- Report a missing -D_FORTIFY_SOUCRE option if -D_GLIBCXX_ASSERTIONS was detected.  (#1703499)
94317b5
- Do not report problems with -fstack-protection if the binary was not built by gcc or clang.  (#1703788)    
94317b5
64b0875
* Fri Apr 26 2019 Nick Clifton <nickc@redhat.com> - 8.74-1
64b0875
- Add tests of clang command line options recorded in the DW_AT_producer attribute.
64b0875
eeb41d9
* Wed Apr 24 2019 Nick Clifton <nickc@redhat.com> - 8.73-1
eeb41d9
- Fix test for an executable stack segment.  (#1700924)
eeb41d9
276edb1
* Thu Apr 18 2019 Nick Clifton <nickc@redhat.com> - 8.72-1
276edb1
- Rebuild annobin with the latest rawhide gcc sources.  (#1700923)
276edb1
6e6ab3b
* Thu Feb 28 2019 Nick Clifton <nickc@redhat.com> - 8.71-1
6e6ab3b
- Annobin: Suppress more calls to free() which are triggering memory checker errors.  (#1684148)
6e6ab3b
e7dabf6
* Fri Feb 01 2019 Nick Clifton <nickc@redhat.com> - 8.70-1
e7dabf6
- Add section flag matching ability to section size tool.
e7dabf6
cbc3459
* Thu Jan 31 2019 Fedora Release Engineering <releng@fedoraproject.org> - 8.69-7
cbc3459
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
cbc3459
a406d38
* Tue Jan 29 2019 Björn Esser <besser82@fedoraproject.org> - 8.69-6
a406d38
- Use 'with' for rich dependency on gcc
a406d38
5524770
* Tue Jan 29 2019 Björn Esser <besser82@fedoraproject.org> - 8.69-5
5524770
- Really fix rhbz#1607430.
5524770
9265fb5
* Mon Jan 28 2019 Björn Esser <besser82@fedoraproject.org> - 8.69-4
9265fb5
- Rebuilt with annotations enabled
9265fb5
fbf6e93
* Mon Jan 28 2019 Björn Esser <besser82@fedoraproject.org> - 8.69-3
fbf6e93
- Fix rpm query for gcc version.
fbf6e93
a8a0b58
* Mon Jan 28 2019 Nick Clifton <nickc@redhat.com> - 8.69-2
dc77d4f
- Add an exact requirement on the major version of gcc. (#1607430)
a8a0b58
443440a
* Thu Jan 24 2019 Nick Clifton <nickc@redhat.com> - 8.69-1
443440a
- Annobin: Add support for .text.startup and .text.exit sections generated by gcc 9.
443440a
- Annocheck: Add a note displaying tool.
443440a
16e73c5
* Wed Jan 23 2019 Nick Clifton <nickc@redhat.com> - 8.68-1
16e73c5
- Annocheck: Skip checks for -D_FORTIFY_SOURCE and -D_GLIBCXX_ASSERTIONS if there is no compiler generated code in the binary.
16e73c5
e1bf6de
* Mon Jan 21 2019 Björn Esser <besser82@fedoraproject.org> - 8.67-3
e1bf6de
- Rebuilt with annotations enabled
e1bf6de
1e95c47
* Mon Jan 21 2019 Björn Esser <besser82@fedoraproject.org> - 8.67-2
1e95c47
- Rebuilt for GCC 9
1e95c47
c418230
* Thu Jan 17 2019 Nick Clifton <nickc@redhat.com> - 8.67-1
c418230
- Annocheck: Only skip specific checks for specific symbols.  (#1666823)
c418230
- Annobin: Record the setting of the -fomit-frame-pointer option.
c418230
61981be
* Wed Jan 02 2019 Nick Clifton <nickc@redhat.com> - 8.66-1
61981be
- Annocheck: Do not ignore -Og when checking to see if an optimization level has been set.  (#1624162)
61981be
a4538d8
* Tue Dec 11 2018 Nick Clifton <nickc@redhat.com> - 8.65-1
a4538d8
- Annobin: Fix handling of multiple .text.unlikely sections.
a4538d8
60a01e9
* Fri Nov 30 2018 Nick Clifton <nickc@redhat.com> - 8.64-1
60a01e9
- Annocheck: Skip gaps in PPC64 executables covered by start_bcax_ symbols.  (#1630564)
60a01e9
dbdec1a
* Mon Nov 26 2018 Nick Clifton <nickc@redhat.com> - 8.63-1
dbdec1a
- Annocheck: Disable ENDBR test for shared libraries.  (#1652925)
dbdec1a
1a9432d
* Mon Nov 26 2018 Nick Clifton <nickc@redhat.com> - 8.62-1
1a9432d
- Annocheck: Add test for ENDBR instruction at entry address of x86/x86_64 executables.  (#1652925)
1a9432d
1a9432d
* Tue Nov 20 2018 David Cantrell <dcantrell@redhat.com> - 8.61-2
1a9432d
- Adjust how the gcc_vr macro is set.
1a9432d
d3a48b4
* Mon Nov 19 2018 Nick Clifton <nickc@redhat.com> - 8.61-1
d3a48b4
- Fix building with gcc version 4.
d3a48b4
eef6b3c
* Tue Nov 13 2018 Nick Clifton <nickc@redhat.com> - 8.60-1
eef6b3c
- Skip -Wl,-z,now and -Wl,-z,relro checks for non-gcc produced binaries.  (#1624421)
eef6b3c
819496e
* Mon Nov 05 2018 Nick Clifton <nickc@redhat.com> - 8.59-1
819496e
- Ensure GNU Property notes are 8-byte aligned in x86_64 binaries.  (#1645817)
819496e
9eeba25
* Thu Oct 18 2018 Nick Clifton <nickc@redhat.com> - 8.58-1
9eeba25
- Skip PPC64 linker stubs created in the middle of text sections (again). (#1630640)
9eeba25
b6fefda
* Thu Oct 18 2018 Nick Clifton <nickc@redhat.com> - 8.57-1
b6fefda
- Suppress free of invalid pointer. (#1638371)
b6fefda
a7bd5f0
* Thu Oct 18 2018 Nick Clifton <nickc@redhat.com> - 8.56-1
a7bd5f0
- Skip PPC64 linker stubs created in the middle of text sections. (#1630640)
a7bd5f0
107f5dd
* Tue Oct 16 2018 Nick Clifton <nickc@redhat.com> - 8.55-1
107f5dd
- Reset the (PPC64) section start symbol to 0 if its section is empty.  (#1638251)
107f5dd
31fd1df
* Thu Oct 11 2018 Nick Clifton <nickc@redhat.com> - 8.53-1
31fd1df
- Also skip virtual thinks created by G++.  (#1630619)
31fd1df
a4ffb9c
* Wed Oct 10 2018 Nick Clifton <nickc@redhat.com> - 8.52-1
a4ffb9c
- Use uppercase for all fail/mayb/pass results.  (#1637706)
a4ffb9c
28d895f
* Wed Oct 10 2018 Nick Clifton <nickc@redhat.com> - 8.51-1
28d895f
- Generate notes for unlikely sections.  (#1630620)
28d895f
863cedb
* Mon Oct 08 2018 Nick Clifton <nickc@redhat.com> - 8.50-1
863cedb
- Fix edge case computing section names for end symbols.  (#1637039)
863cedb
66bc630
* Mon Oct 08 2018 Nick Clifton <nickc@redhat.com> - 8.49-1
66bc630
- Skip dynamic checks for binaries without a dynamic segment.  (#1636606)
66bc630
1750e06
* Fri Oct 05 2018 Nick Clifton <nickc@redhat.com> - 8.48-1
1750e06
- Delay generating attach_to_group directives until the end of the compilation.  (#1636265)
1750e06
1750e06
* Mon Oct 01 2018 Nick Clifton <nickc@redhat.com> - 8.47-1
1750e06
- Fix bug introduced in previous delta which would trigger a seg-fault when scanning for gaps.
1750e06
1750e06
* Mon Oct 01 2018 Nick Clifton <nickc@redhat.com> - 8.46-1
1750e06
- Annobin:   Fix section name selection for startup sections.
1750e06
- Annocheck: Improve gap skipping heuristics.   (#1630574)
1750e06
5b660fd
* Mon Oct 01 2018 Nick Clifton <nickc@redhat.com> - 8.45-1
5b660fd
- Fix function section support (again).   (#1630574)
5b660fd
fa19a50
* Fri Sep 28 2018 Nick Clifton <nickc@redhat.com> - 8.44-1
fa19a50
- Skip compiler option checks for non-GNU producers.  (#1633749)
fa19a50
fa19a50
* Wed Sep 26 2018 Nick Clifton <nickc@redhat.com> - 8.43-1
fa19a50
- Fix function section support (again).   (#1630574)
fa19a50
fa19a50
* Tue Sep 25 2018 Nick Clifton <nickc@redhat.com> - 8.42-1
fa19a50
- Ignore ppc64le notes where start = end + 2.  (#1632259)
fa19a50
50a4793
* Tue Sep 25 2018 Nick Clifton <nickc@redhat.com> - 8.41-1
50a4793
- Make annocheck ignore symbols suffixed with ".end".  (#1639618)
50a4793
50a4793
* Mon Sep 24 2018 Nick Clifton <nickc@redhat.com> - 8.40-1
50a4793
- Reinstate building annobin with annobin enabled.  (#1630550)
50a4793
740bbaa
* Fri Sep 21 2018 Nick Clifton <nickc@redhat.com> - 8.39-1
740bbaa
- Tweak tests.
740bbaa
2cdf84f
* Fri Sep 21 2018 Nick Clifton <nickc@redhat.com> - 8.38-1
2cdf84f
- Generate notes and groups for .text.hot and .text.unlikely sections.
2cdf84f
- When -ffunction-sections is active, put notes for startup sections into .text.startup.foo rather than .text.foo.
2cdf84f
- Similarly put exit section notes into .text.exit.foo.  (#1630574)
2cdf84f
- Change annocheck's maybe result for GNU Property note being missing into a PASS if it is not needed and a FAIL if it is needed.
2cdf84f
97b046a
* Wed Sep 19 2018 Nick Clifton <nickc@redhat.com> - 8.37-1
97b046a
- Make the --skip-* options skip all messages about the specified test.
97b046a
98aa3b8
* Tue Sep 18 2018 Nick Clifton <nickc@redhat.com> - 8.36-1
98aa3b8
- Improve error message when an ET_EXEC binary is detected.
98aa3b8
0064532
* Mon Sep 17 2018 Nick Clifton <nickc@redhat.com> - 8.35-1
0064532
- Skip failures for PIC vs PIE.  (#1629698)
0064532
62a035e
* Mon Sep 17 2018 Nick Clifton <nickc@redhat.com> - 8.34-1
62a035e
- Ensure 4 byte alignment of note sub-sections.  (#1629671)
62a035e
38c6f9e
* Wed Sep 12 2018 Nick Clifton <nickc@redhat.com> - 8.33-1
38c6f9e
- Add timing tool to report on speed of the checks.
38c6f9e
- Add check for conflicting use of the -fshort-enum option.
38c6f9e
- Add check of the GNU Property notes.
38c6f9e
- Skip check for -O2 if compiled with -Og.  (#1624162)
38c6f9e
3218a50
* Mon Sep 03 2018 Nick Clifton <nickc@redhat.com> - 8.32-1
38c6f9e
- Add test for ET_EXEC binaries.  (#1625627)
3218a50
- Document --report-unknown option.
3218a50
a241ed8
* Thu Aug 30 2018 Nick Clifton <nickc@redhat.com> - 8.31-1
a241ed8
- Fix bug in hardened tool which would skip gcc compiled files if the notes were too small.
a241ed8
- Fix bugs in section-size tool.
3218a50
- Fix bug in built-by tool.
a241ed8
ccb481d
* Wed Aug 29 2018 Nick Clifton <nickc@redhat.com> - 8.30-1
ccb481d
- Generate notes for comdat sections. (#1619267)
ccb481d
59960d3
* Thu Aug 23 2018 Nick Clifton <nickc@redhat.com> - 8.29-1
59960d3
- Add more names to the gap skip list. (#1619267)
59960d3
f8f44e9
* Thu Aug 23 2018 Nick Clifton <nickc@redhat.com> - 8.28-1
f8f44e9
- Skip gaps covered by _x86.get_pc_thunk and _savegpr symbols. (#1619267)
f8f44e9
- Merge ranges where one is wholly covered by another.
f8f44e9
665e3d6
* Wed Aug 22 2018 Nick Clifton <nickc@redhat.com> - 8.27-1
665e3d6
- Skip gaps at the end of functions. (#1619267)
665e3d6
1fa3a94
* Tue Aug 21 2018 Nick Clifton <nickc@redhat.com> - 8.26-1
1fa3a94
- Fix thinko in ppc64 gap detection code. (#1619267)
1fa3a94
4482b57
* Mon Aug 20 2018 Nick Clifton <nickc@redhat.com> - 8.25-1
1fa3a94
- Skip gaps at the end of the .text section in ppc64 binaries. (#1619267)
4482b57
c396cc5
* Wed Aug 15 2018 Nick Clifton <nickc@redhat.com> - 8.24-1
c396cc5
- Skip checks in stack_chk_local_fail.c
c396cc5
- Treat gaps as FAIL results rather than MAYBE.
c396cc5
34de7bc
* Wed Aug 08 2018 Nick Clifton <nickc@redhat.com> - 8.23-1
34de7bc
- Skip checks in __stack_chk_local_fail.
34de7bc
57a69d6
* Wed Aug 08 2018 Nick Clifton <nickc@redhat.com> - 8.22-1
57a69d6
- Reduce version check to gcc major version number only.  Skip compiler option checks if binary not built with gcc.  (#1603089)
57a69d6
a8c8418
* Tue Aug 07 2018 Nick Clifton <nickc@redhat.com> - 8.21-1
a8c8418
- Fix bug in annobin plugin.  Add --section-size=NAME option to annocheck.
a8c8418
2f44ce6
* Thu Aug  2 2018 Peter Robinson <pbrobinson@fedoraproject.org> 8.20-2
2f44ce6
- rebuild for new gcc
2f44ce6
504e1b0
* Thu Aug 02 2018 Nick Clifton <nickc@redhat.com> - 8.20-1
504e1b0
- Correct name of man page for run-on-binaries-in script.  (#1611155)
504e1b0
f7e6bb6
* Wed Jul 25 2018 Nick Clifton <nickc@redhat.com> - 8.19-1
eef6b3c
- Allow $ORIGIN to be at the start of entries in DT_RPATH and DT_RUNPATH.
f7e6bb6
f7e6bb6
* Mon Jul 23 2018 Nick Clifton <nickc@redhat.com> - 8.18-1
f7e6bb6
- Add support for big endian targets.
f7e6bb6
38eb35a
* Mon Jul 23 2018 Nick Clifton <nickc@redhat.com> - 8.17-1
38eb35a
- Count passes and failures on a per-component basis and report gaps.
38eb35a
9dbf46e
* Fri Jul 20 2018 Nick Clifton <nickc@redhat.com> - 8.16-1
9dbf46e
- Use our own copy of the targetm.asm_out.function_section() function.  (#159861 comment#17)
9dbf46e
9dbf46e
* Fri Jul 20 2018 Nick Clifton <nickc@redhat.com> - 8.15-1
baf40aa
- Generate grouped note section name all the time.  (#159861 comment#16)
baf40aa
d3e4501
* Thu Jul 19 2018 Nick Clifton <nickc@redhat.com> - 8.14-1
d3e4501
- Fix section conflict problem.  (#1603071)
d3e4501
c4f43f0
* Wed Jul 18 2018 Nick Clifton <nickc@redhat.com> - 8.13-1
c4f43f0
- Fix for building with gcc version 4.
c4f43f0
- Fix symbol placement in functions with local assembler.
c4f43f0
cc6b631
* Tue Jul 17 2018 Nick Clifton <nickc@redhat.com> - 8.12-1
eef6b3c
- Fix assertions in range checking code.  Add detection of -U options.
cc6b631
c760726
* Tue Jul 17 2018 Nick Clifton <nickc@redhat.com> - 8.11-1
c760726
- Handle function sections properly.  Handle .text.startup and .text.unlikely sections.  Improve gap detection and reporting.  (#1601055)
c760726
accc579
* Thu Jul 12 2018 Fedora Release Engineering <releng@fedoraproject.org> - 8.10-2
accc579
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
accc579
5a7b2e9
* Thu Jul 12 2018 Nick Clifton <nickc@redhat.com> - 8.10-1
5a7b2e9
- Fix construction of absolute versions of --dwarf-dir and --debug-rpm options.
5a7b2e9
4efcfc9
* Tue Jul 10 2018 Nick Clifton <nickc@redhat.com> - 8.9-1
4efcfc9
- Fix buffer overrun when very long symbol names are encountered.
4efcfc9
be50c56
* Tue Jul 10 2018 Nick Clifton <nickc@redhat.com> - 8.8-1
be50c56
- Do not force the generation of function notes when -ffunction-sections is active.  (#1598961)
be50c56
a231425
* Mon Jul 09 2018 Nick Clifton <nickc@redhat.com> - 8.7-1
a231425
- Skip the .annobin_ prfix when reporting symbols.  (#1599315)
a231425
0342042
* Mon Jul 09 2018 Nick Clifton <nickc@redhat.com> - 8.6-1
0342042
- Use the assembler (c++ mangled) version of function names when switching sections.  (#1598579)
0342042
efaf793
* Mon Jul 09 2018 Nick Clifton <nickc@redhat.com> - 8.5-1
efaf793
- Do not call function_section.  (#1598961)
efaf793
326c603
* Fri Jul 06 2018 Nick Clifton <nickc@redhat.com> - 8.4-1
326c603
- Ignore cross-section gaps.  (#1598551)
326c603
ce5f9d5
* Thu Jul 05 2018 Nick Clifton <nickc@redhat.com> - 8.3-1
5a7b2e9
- Do not skip empty range notes in object files.  (#1598361)
ce5f9d5
a1b8a53
* Mon Jul 02 2018 Nick Clifton <nickc@redhat.com> - 8.2-1
a1b8a53
- Create the start symbol at the start of the function and the end symbol at the end.  (#1596823)
a1b8a53
7fa87a2
* Mon Jul 02 2018 Nick Clifton <nickc@redhat.com> - 8.1-1
7fa87a2
- Fix --debug-rpm when used inside a directory.
7fa87a2
f4130c1
* Thu Jun 28 2018 Nick Clifton <nickc@redhat.com> - 8.0-1
f4130c1
- Use a prefix for all annobin generated symbols, and make them hidden.
f4130c1
- Only generate weak symbol definitions for linkonce sections.
f4130c1
ae10117
* Wed Jun 27 2018 Nick Clifton <nickc@redhat.com> - 7.1-1
ae10117
- Skip some checks for relocatable object files, and dynamic objects.
ae10117
- Stop bogus complaints about stackrealignment not being enabled.
ae10117
a55d84f
* Mon Jun 25 2018 Nick Clifton <nickc@redhat.com> - 7.0-1
a55d84f
- Add -debug-rpm= option to annocheck.
a55d84f
- Only use a 2 byte offset for the initial symbol on PowerPC.
a55d84f
ec37d82
* Fri Jun 22 2018 Nick Clifton <nickc@redhat.com> - 6.6-1
ec37d82
- Use --dwarf-path when looking for build-id based debuginfo files.
ec37d82
4a3f774
* Fri Jun 22 2018 Nick Clifton <nickc@redhat.com> - 6.5-1
4a3f774
- Fix premature closing of dwarf handle.
4a3f774
25bca4e
* Fri Jun 22 2018 Nick Clifton <nickc@redhat.com> - 6.4-1
25bca4e
- Fix scoping bug computing the name of a separate debuginfo file.
25bca4e
9a6d845
* Tue Jun 19 2018 Nick Clifton <nickc@redhat.com> - 6.3-1
9a6d845
- Fix file descriptor leak.
9a6d845
b8b6c86
* Tue Jun 19 2018 Nick Clifton <nickc@redhat.com> - 6.2-1
b8b6c86
- Add command line options to annocheck to disable individual tests.
b8b6c86
9657bbe
* Fri Jun 08 2018 Nick Clifton <nickc@redhat.com> - 6.1-1
9657bbe
- Remove C99-ism from annocheck sources.
9657bbe
4656334
* Wed Jun 06 2018 Nick Clifton <nickc@redhat.com> - 6.0-1
4656334
- Add the annocheck program.
4656334
a47a7d3
* Fri Jun 01 2018 Nick Clifton <nickc@redhat.com> - 5.11-1
a47a7d3
- Do not use the SHF_GNU_BUILD_NOTE section flag.
a47a7d3
db2c4ce
* Thu May 31 2018 Nick Clifton <nickc@redhat.com> - 5.10-1
db2c4ce
- Remove .sh extension from shell scripts.
db2c4ce
78f88fb
* Wed May 30 2018 Nick Clifton <nickc@redhat.com> - 5.9-1
78f88fb
- Record the setting of the -mstackrealign option for i686 binaries.
78f88fb
29f42b4
* Mon May 14 2018 Nick Clifton <nickc@redhat.com> - 5.8-1
29f42b4
- Hide the annobin start of file symbol.
29f42b4
7a683bb
* Tue May 08 2018 Nick Clifton <nickc@redhat.com> - 5.7-1
7a683bb
- Fix script bug in hardended.sh.  (Thanks to: Stefan Sørensen <stefan.sorensen@spectralink.com>)
7a683bb
967f47d
* Thu May 03 2018 Nick Clifton <nickc@redhat.com> - 5.6-3
967f47d
- Version number bump so that the plugin can be rebuilt with the latest version of GCC.
967f47d
f45ff6b
* Mon Apr 30 2018 Nick Clifton <nickc@redhat.com> - 5.6-2
f45ff6b
- Rebuild the plugin with the newly created plugin enabled.  (#1573082)
f45ff6b
9d8fe91
* Mon Apr 30 2018 Nick Clifton <nickc@redhat.com> - 5.6-1
9d8fe91
- Skip the isa_flags check in the ABI test because the crt[in].o files are compiled with different flags from the test files.
9d8fe91
4f0a7c2
* Fri Apr 20 2018 Nick Clifton <nickc@redhat.com> - 5.3-1
4f0a7c2
- Add manual pages for annobin and the scripts.
4f0a7c2
f2865c5
* Tue Apr 03 2018 Nick Clifton <nickc@redhat.com> - 5.2-1
f2865c5
- Do not record a stack protection setting of -1.  (#1563141)
f2865c5
3323867
* Tue Mar 20 2018 Nick Clifton <nickc@redhat.com> - 5.1-1
3323867
- Do not complain about a dwarf_version value of -1.  (#1557511)
3323867
0af9bb2
* Thu Mar 15 2018 Nick Clifton <nickc@redhat.com> - 5.0-1
0af9bb2
- Bias file start symbols by 2 in order to avoid them confused with function symbols.  (#1554332)
0af9bb2
- Version jump is to sync the version number with the annobin plugins internal version number.
0af9bb2
c42ae85
* Mon Mar 12 2018 Nick Clifton <nickc@redhat.com> - 3.6-1
c42ae85
- Add --ignore-gaps option to check-abi.sh script.
c42ae85
- Use this option in the abi-test check.
c42ae85
- Tweak hardening test to skip pic and stack protection checks.
c42ae85
a9bdd53
* Tue Mar 06 2018 Nick Clifton <nickc@redhat.com> - 3.5-1
a9bdd53
- Handle functions with specific assembler names.  (#1552018)
a9bdd53
0078c77
* Fri Feb 23 2018 Nick Clifton <nickc@redhat.com> - 3.4-2
0078c77
- Add an explicit requirement on the version of gcc used to built the plugin.  (#1547260)
0078c77
8a3889e
* Fri Feb 09 2018 Nick Clifton <nickc@redhat.com> - 3.4-1
8a3889e
- Change type and size of symbols to STT_NOTYPE/0 so that they do not confuse GDB.  (#1539664)
8a3889e
- Add run-on-binaries-in.sh script to allow the other scripts to be run over a repository.
8a3889e
b42c748
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.3-2
b42c748
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
b42c748
cfbd038
* Tue Jan 30 2018 Nick Clifton <nickc@redhat.com> - 3.3-1
cfbd038
- Rebase on 3.3 release, which adds support for recording -mcet and -fcf-protection.
cfbd038
ccd5e04
* Mon Jan 29 2018 Florian Weimer <fweimer@redhat.com> - 3.2-3
ccd5e04
- Rebuild for GCC 8
ccd5e04
d1be1bd
* Fri Jan 26 2018 Nick Clifton <nickc@redhat.com> - 3.2-2
d1be1bd
- Fix the installation of the annobin.info file.
d1be1bd
6b89f32
* Fri Jan 26 2018 Nick Clifton <nickc@redhat.com> - 3.2-1
6b89f32
- Rebase on 3.2 release, which now contains documentation!
6b89f32
3f1d08f
* Fri Jan 26 2018 Richard W.M. Jones <rjones@redhat.com> - 3.1-3
3f1d08f
- Rebuild against GCC 7.3.1.
3f1d08f
ceb5d85
* Tue Jan 16 2018 Nick Clifton <nickc@redhat.com> - 3.1-2
ceb5d85
- Add --with-gcc-plugin-dir option to the configure command line.
ceb5d85
26ba227
* Thu Jan 04 2018 Nick Clifton <nickc@redhat.com> - 3.1-1
26ba227
- Rebase on version 3.1 sources.
26ba227
ecf7069
* Mon Dec 11 2017 Nick Clifton <nickc@redhat.com> - 2.5.1-5
ecf7069
- Do not generate notes when there is no output file.  (#1523875)
ecf7069
ecf7069
* Fri Dec 08 2017 Nick Clifton <nickc@redhat.com> - 2.5.1-4
3dfaaa0
- Invent an input filename when reading from a pipe.  (#1523401)
3dfaaa0
a11e44b
* Thu Nov 30 2017 Florian Weimer <fweimer@redhat.com> - 2.5.1-3
a11e44b
- Use DECL_ASSEMBLER_NAME for symbol references (#1519165)
a11e44b
6112172
* Tue Oct 03 2017 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 2.5.1-2
6112172
- Cleanups in spec
6112172
ccfd4bf
* Tue Sep 26 2017 Nick Clifton <nickc@redhat.com> - 2.5.1-1
c393d68
- Touch the auto-generated files in order to stop them from being regenerated.
c393d68
ccfd4bf
* Tue Sep 26 2017 Nick Clifton <nickc@redhat.com> - 2.5-2
31b6780
- Stop the plugin complaining about compiler datestamp mismatches.
31b6780
ccfd4bf
* Thu Sep 21 2017 Nick Clifton <nickc@redhat.com> - 2.4-1
4b489fe
- Tweak tests so that they will run on older machines.
4b489fe
ccfd4bf
* Thu Sep 21 2017 Nick Clifton <nickc@redhat.com> - 2.3-1
e7ed178
- Add annobin-tests subpackage containing some preliminary tests.
eef6b3c
- Remove link-time test for unsupported targets.
e7ed178
3b2676b
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.0-3
3b2676b
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
3b2676b
f53ae1f
* Mon Jul 31 2017 Florian Weimer <fweimer@redhat.com> - 2.0-2
f53ae1f
- Rebuild with binutils fix for ppc64le (#1475636)
f53ae1f
ccfd4bf
* Wed Jun 28 2017 Nick Clifton <nickc@redhat.com> - 2.0-1
35fd563
- Fixes for problems reported by the package submission review:
35fd563
   * Add %%license entry to %%file section.
35fd563
   * Update License and BuildRequires tags.
35fd563
   * Add Requires tag.
35fd563
   * Remove %%clean.
35fd563
   * Add %%check.
35fd563
   * Clean up the %%changelog.
35fd563
- Update to use version 2 of the specification and sources.
35fd563
ccfd4bf
* Thu May 11 2017 Nick Clifton <nickc@redhat.com> - 1.0-1
35fd563
- Initial submission.