Blame SPECS/annobin.spec

886ef9
e78f0f
Name:    annobin
1f6024
Summary: Annotate and examine compiled binary files
c082f7
Version: 9.23
1f6024
Release: 1%{?dist}
e78f0f
License: GPLv3+
1f6024
# ProtocolURL: https://fedoraproject.org/wiki/Toolchain/Watermark
e78f0f
# Maintainer: nickc@redhat.com
e78f0f
1f6024
#---------------------------------------------------------------------------------
1f6024
1f6024
# Use "--without tests" to disable the testsuite.
1f6024
%bcond_without tests
1f6024
1f6024
# Use "--without annocheck" to disable the installation of the annocheck program.
1f6024
%bcond_without annocheck
1f6024
1f6024
# Use "--with debuginfod" to force support for debuginfod to be compiled into
1f6024
# the annocheck program.  By default the configure script will check for
1f6024
# availablilty at build time, but this might not match the run time situation.
1f6024
# FIXME: Add a --without debuginfod option to forcefully disable the configure
1f6024
# time check for debuginfod support.
1f6024
%bcond_with debuginfod
1f6024
1f6024
# Use "--with clangplugin" to build the annobin plugin for clang.
1f6024
%bcond_with clangplugin
1f6024
1f6024
# Set this to zero to disable the requirement for a specific version of gcc.
1f6024
# This should only be needed if there is some kind of problem with the version
1f6024
# checking logic or when building on RHEL-7 or earlier.
1f6024
%global with_hard_gcc_version_requirement 1
e78f0f
886ef9
# # Do not build the annobin plugin with annotation enabled.
886ef9
# # This is because if we are bootstrapping a new build environment we can have
886ef9
# # a new version of gcc installed, but without a new of annobin installed.
886ef9
# # (i.e. we are building the new version of annobin to go with the new version
886ef9
# # of gcc).  If the *old* annobin plugin is used whilst building this new
886ef9
# # version, the old plugin will complain that version of gcc for which it
886ef9
# # was built is different from the version of gcc that is now being used, and
886ef9
# # then it will abort.
e78f0f
#
e78f0f
# Suppress this for BZ 1630550.
e78f0f
# The problem should now only arise when rebasing to a new major version
e78f0f
# of gcc, in which case the undefine below can be temporarily reinstated.
e78f0f
#
886ef9
# %%undefine _annotated_build
886ef9
886ef9
#---------------------------------------------------------------------------------
1f6024
e78f0f
# Source:  https://nickc.fedorapeople.org/annobin-%%{version}.tar.xz
e78f0f
Source:  annobin-%{version}.tar.xz
886ef9
# For the latest sources use:  git clone git://sourceware.org/git/annobin.git
886ef9
886ef9
# Insert patches here, if needed.
886ef9
# Patch01: annobin-xxx.patch
886ef9
886ef9
#---------------------------------------------------------------------------------
886ef9
886ef9
# [Stolen from gcc-python-plugin]
886ef9
# GCC will only load plugins that were built against exactly that build of GCC
886ef9
# We thus need to embed the exact GCC version as a requirement within the
886ef9
# metadata.
886ef9
#
886ef9
# Define "gcc_vr", a variable to hold the VERSION-RELEASE string for the gcc
886ef9
# we are being built against.
886ef9
#
886ef9
# Unfortunately, we can't simply run:
886ef9
#   rpm -q --qf="%%{version}-%%{release}"
886ef9
# to determine this, as there's no guarantee of a sane rpm database within
886ef9
# the chroots created by our build system
886ef9
#
886ef9
# So we instead query the version from gcc's output.
886ef9
#
886ef9
# gcc.spec has:
886ef9
#   Version: %%{gcc_version}
886ef9
#   Release: %%{gcc_release}%%{?dist}
886ef9
#   ...snip...
886ef9
#   echo 'Red Hat %%{version}-%%{gcc_release}' > gcc/DEV-PHASE
886ef9
#
886ef9
# So, given this output:
886ef9
#
886ef9
#   $ gcc --version
886ef9
#   gcc (GCC) 4.6.1 20110908 (Red Hat 4.6.1-9)
886ef9
#   Copyright (C) 2011 Free Software Foundation, Inc.
886ef9
#   This is free software; see the source for copying conditions.  There is NO
886ef9
#   warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
886ef9
#
886ef9
# we can scrape out the "4.6.1" from the version line.
886ef9
#
886ef9
# The following implements the above:
886ef9
886ef9
%global gcc_vr %(gcc --version | head -n 1 | sed -e 's|.*(Red\ Hat\ ||g' -e 's|)$||g')
886ef9
886ef9
# We need the major version of gcc.
886ef9
%global gcc_major %(echo "%{gcc_vr}" | cut -f1 -d".")
886ef9
%global gcc_next  %(v="%{gcc_major}"; echo $((++v)))
886ef9
886ef9
# Needed when building the srpm.
886ef9
%if 0%{?gcc_major} == 0
886ef9
%global gcc_major 0
886ef9
%endif
886ef9
886ef9
# This is a gcc plugin, hence gcc is required.
886ef9
%if %{with_hard_gcc_version_requirement}
886ef9
# BZ 1607430 - There is an exact requirement on the major version of gcc.
886ef9
Requires: (gcc >= %{gcc_major} with gcc < %{gcc_next})
886ef9
%else
886ef9
Requires: gcc
886ef9
%endif
886ef9
886ef9
BuildRequires: gcc gcc-plugin-devel gcc-c++
1f6024
%if %{with clangplugin}
1f6024
BuildRequires: clang clang-devel llvm llvm-devel
1f6024
%endif
886ef9
886ef9
%description
886ef9
Provides a plugin for GCC that records extra information in the files
e78f0f
that it compiles.
886ef9
886ef9
Note - the plugin is automatically enabled in gcc builds via flags
886ef9
provided by the redhat-rpm-macros package.
886ef9
1f6024
%if %{with clangplugin}
1f6024
Also provides a plugin for clang which performs a similar function.
1f6024
%endif
1f6024
886ef9
#---------------------------------------------------------------------------------
886ef9
%if %{with tests}
886ef9
886ef9
%package tests
886ef9
Summary: Test scripts and binaries for checking the behaviour and output of the annobin plugin
886ef9
886ef9
%description tests
886ef9
Provides a means to test the generation of annotated binaries and the parsing
886ef9
of the resulting files.
886ef9
886ef9
%endif
886ef9
886ef9
#---------------------------------------------------------------------------------
886ef9
%if %{with annocheck}
886ef9
886ef9
%package annocheck
886ef9
Summary: A tool for checking the security hardening status of binaries
886ef9
886ef9
BuildRequires: gcc elfutils elfutils-devel elfutils-libelf-devel rpm-devel binutils-devel
1f6024
%if %{with debuginfod}
1f6024
BuildRequires: elfutils-debuginfod-client-devel
1f6024
%endif
886ef9
886ef9
%description annocheck
886ef9
Installs the annocheck program which uses the notes generated by annobin to
886ef9
check that the specified files were compiled with the correct security
886ef9
hardening options.
886ef9
886ef9
%endif
886ef9
886ef9
#---------------------------------------------------------------------------------
886ef9
1f6024
%global ANNOBIN_GCC_PLUGIN_DIR %(gcc --print-file-name=plugin)
1f6024
1f6024
%if %{with clangplugin}
1f6024
# FIXME: Clang does not appear to have an official plugin directory.
1f6024
# Instead it just uses dlopen() with no pathname prefix.  So we
1f6024
# construct a (hopefully good) path and rely upon users of annobin
1f6024
# knowing about this location.
1f6024
%global ANNOBIN_CLANG_PLUGIN_DIR /usr/lib64/clang/%(clang --dumpversion)/lib
1f6024
%endif
886ef9
886ef9
#---------------------------------------------------------------------------------
886ef9
886ef9
%prep
886ef9
if [ -z "%{gcc_vr}" ]; then
886ef9
    echo "*** Missing gcc_vr spec file macro, cannot continue." >&2
886ef9
    exit 1
886ef9
fi
886ef9
1f6024
echo "Requires: (gcc >= %{gcc_major} and gcc < %{gcc_next})"
886ef9
886ef9
%autosetup -p1
886ef9
886ef9
# The plugin has to be configured with the same arcane configure
886ef9
# scripts used by gcc.  Hence we must not allow the Fedora build
886ef9
# system to regenerate any of the configure files.
1f6024
touch aclocal.m4 gcc-plugin/config.h.in
886ef9
touch configure */configure Makefile.in */Makefile.in
886ef9
# Similarly we do not want to rebuild the documentation.
886ef9
touch doc/annobin.info
886ef9
886ef9
#---------------------------------------------------------------------------------
886ef9
886ef9
%build
1f6024
1f6024
%if %{with debuginfod}
1f6024
%configure --quiet --with-gcc-plugin-dir=%{ANNOBIN_GCC_PLUGIN_DIR} --with-debuginfod || cat config.log
1f6024
%else
1f6024
%configure --quiet --with-gcc-plugin-dir=%{ANNOBIN_GCC_PLUGIN_DIR} || cat config.log
1f6024
%endif
1f6024
886ef9
%make_build
886ef9
# Rebuild the plugin, this time using the plugin itself!  This
886ef9
# ensures that the plugin works, and that it contains annotations
886ef9
# of its own.  This could mean that we end up with a plugin with
886ef9
# double annotations in it.  (If the build system enables annotations
886ef9
# for plugins by default).  I have not tested this yet, but I think
886ef9
# that it should be OK.
1f6024
cp gcc-plugin/.libs/annobin.so.0.0.0 %{_tmppath}/tmp_annobin.so
1f6024
make -C gcc-plugin clean
886ef9
BUILD_FLAGS="-fplugin=%{_tmppath}/tmp_annobin.so -fplugin-arg-tmp_annobin-rename"
e78f0f
# If building on RHEL7, enable the next option as the .attach_to_group assembler pseudo op is not available in the assembler.
886ef9
# BUILD_FLAGS="$BUILD_FLAGS -fplugin-arg-tmp_annobin-no-attach"
1f6024
make -C gcc-plugin CXXFLAGS="%{optflags} $BUILD_FLAGS"
886ef9
rm %{_tmppath}/tmp_annobin.so
886ef9
1f6024
%if %{with clangplugin}
1f6024
# FIXME: The symbolic link should not be needed.
1f6024
ln -f -s ../annobin-global.h clang-plugin
1f6024
make -C clang-plugin annobin.so 
1f6024
%endif
1f6024
886ef9
#---------------------------------------------------------------------------------
886ef9
886ef9
%install
886ef9
%make_install
886ef9
%{__rm} -f %{buildroot}%{_infodir}/dir
886ef9
1f6024
%if %{with clangplugin}
1f6024
cp clang-plugin/annobin.so %{ANNOBIN_CLANG_PLUGIN_DIR}
1f6024
%endif
1f6024
886ef9
#---------------------------------------------------------------------------------
886ef9
886ef9
%if %{with tests}
886ef9
%check
1f6024
# Change the following line to "make check || :" on RHEL7 or if you need to see the
1f6024
# test suite logs in order to diagnose a test failure.
886ef9
make check
886ef9
if [ -f tests/test-suite.log ]; then
886ef9
    cat tests/test-suite.log
886ef9
fi
1f6024
1f6024
%if %{with clangplugin}
1f6024
# FIXME: Add tests of the clang plugin.
1f6024
%endif
886ef9
%endif
886ef9
886ef9
#---------------------------------------------------------------------------------
886ef9
886ef9
%files
1f6024
%{ANNOBIN_GCC_PLUGIN_DIR}
886ef9
%license COPYING3 LICENSE
886ef9
%exclude %{_datadir}/doc/annobin-plugin/COPYING3
886ef9
%exclude %{_datadir}/doc/annobin-plugin/LICENSE
886ef9
%doc %{_datadir}/doc/annobin-plugin/annotation.proposal.txt
886ef9
%doc %{_infodir}/annobin.info.gz
886ef9
%doc %{_mandir}/man1/annobin.1.gz
886ef9
%doc %{_mandir}/man1/built-by.1.gz
886ef9
%doc %{_mandir}/man1/check-abi.1.gz
886ef9
%doc %{_mandir}/man1/hardened.1.gz
886ef9
%doc %{_mandir}/man1/run-on-binaries-in.1.gz
886ef9
1f6024
%if %{with clangplugin}
1f6024
%{ANNOBIN_CLANG_PLUGIN_DIR}
1f6024
%endif
1f6024
886ef9
%if %{with annocheck}
1f6024
%files annocheck
886ef9
%{_bindir}/annocheck
886ef9
%doc %{_mandir}/man1/annocheck.1.gz
886ef9
%endif
886ef9
886ef9
#---------------------------------------------------------------------------------
886ef9
886ef9
%changelog
c082f7
* Wed Jul 01 2020 Nick Clifton <nickc@redhat.com> - 9.23-1
c082f7
- Annocheck: Do not skip tests of the short-enums notes.  (#1743635)
c082f7
0f0dd9
* Thu Apr 23 2020 Nick Clifton <nickc@redhat.com> - 9.21-1
0f0dd9
- Annobin: Fall back on using the flags if the option cannot be found in cl_options.  (#1817659)
0f0dd9
- Annocheck: Detect Fortran compiled programs.  (#1824393)
0f0dd9
1f6024
* Mon Apr 06 2020 Nick Clifton <nickc@redhat.com> - 9.19-1
1f6024
- Annobin: If option name mismatch occurs, seach for the real option.  (#1817452)
1f6024
- Annocheck: Fix a division by zero error when parsing GO binaries.  (#1818863)
1f6024
- Annobin: Fix access to the -flto and -fsanitize flags.
1f6024
- Annobin: Use offsets stored in gcc's cl_option structure to access the global_options array, thus removing the need to check for changes in the size of this structure.
1f6024
- Rename gcc plugin directory to gcc-plugin.
1f6024
- Stop annocheck from complaining about missing options when the binary has been built in a mixed environment.
1f6024
- Improve builtby tool.
1f6024
- Stop annocheck complaining about missing notes when the binary is not compiled by either gcc or clang.
1f6024
- Skip the check of the ENTRY instruction for binaries not compiled by gcc or clang.  (#1809656)
1f6024
- Fix infinite loop hangup in annocheck.
1f6024
- Disable debuginfod support by default.
1f6024
- Improve parsing of .comment section.
1f6024
- Fix clang plugin to use hidden symbols.
1f6024
- Add ability to build clang plugin (disabled by default).
1f6024
- Annocheck: Fix error printing out the version number.
1f6024
- Annobin: Add checks of the exact location of the examined switches.
c082f7
- Annobin: Note when stack clash notes are generated.  (#1803173, #1828797)
1f6024
- Annocheck: Handle multiple builder IDs in the .comment section.
1f6024
- Add configure option to suppress building annocheck.
1f6024
- Fix debuginfod test.
1f6024
- Correct the build requirement for building with debuginfod support.
1f6024
- Add debuginfod support.
1f6024
- Add clang plugin (experimental).
1f6024
- Have annocheck ignore notes with an end address of 0.
1f6024
- Improve checking of gcc versions.
1f6024
e78f0f
* Fri Nov 15 2019 Nick Clifton <nickc@redhat.com> - 8.90-1
e78f0f
- Do not skip positive results.
e78f0f
e78f0f
* Tue Nov 12 2019 Nick Clifton <nickc@redhat.com> - 8.89-2
e78f0f
- Bump NVR to allow rebuild after tweaking gating tests.
e78f0f
e78f0f
* Tue Nov 12 2019 Nick Clifton <nickc@redhat.com> - 8.89-1
e78f0f
- Update to version 8.89.  (#1766631)
e78f0f
- Generate a WARN result for code compiled with instrumentation enabled.  (#1753918)
e78f0f
- Replace address checks with dladdr1.
e78f0f
- Use libabigail like checking to ensure variable address consistency.
e78f0f
- Skip generation of global notes for hot/cold sections.
e78f0f
- Generate FAIL results if -Wall or -Wformat-security are missing.
e78f0f
- If notes cannot be found in the executable look for them in the debuginfo file, if available.
e78f0f
- Generate a FAIL if notes are missing from the executable/debuginfo file.
e78f0f
- Record and report the setting of the AArcht64 specific -mbranch-protection option.
e78f0f
- Improve detection of GO binaries.
e78f0f
- Add gcc version information to annobin notes.
0f0dd9
- Do not complain about missing FORTIFY_SOURCE and GLIBCXX_ASSERTIONS in LTO compilations.  (#1743635)
e78f0f
e78f0f
* Tue Aug 06 2019 Nick Clifton <nickc@redhat.com> - 8.78-1
e78f0f
- Fix a memory allocation error in the annobin plugin.  (#1737306)
e78f0f
e78f0f
* Mon Aug 05 2019 Nick Clifton <nickc@redhat.com> - 8.77-2
e78f0f
- NVR bump to allow rebuilding against latest gcc.
e78f0f
e78f0f
* Mon Jun 24 2019 Nick Clifton <nickc@redhat.com> - 8.77-1
e78f0f
- Another attempt at fixing the detection and reporting of missing -D_FORTIFY_SOURCE options.  (#1703500)
e78f0f
e78f0f
* Thu Jun 13 2019 Nick Clifton <nickc@redhat.com> - 8.76-2
e78f0f
- Release bump in order to allow rebuild against latest version of gcc in RHEL-8 buildroot.  (#1720179)
e78f0f
886ef9
* Tue Jun 04 2019 Nick Clifton <nickc@redhat.com> - 8.76-1
886ef9
- Report a missing -D_FORTIFY_SOUCRE option if -D_GLIBCXX_ASSERTIONS was detected.  (#1703500)
886ef9
- Do not report problems with -fstack-protection if the binary was not built by gcc or clang.  (#1703788)    
886ef9
- Add tests of clang command line options recorded in the DW_AT_producer attribute.
886ef9
886ef9
* Fri May 10 2019 Nick Clifton <nickc@redhat.com> - 8.73-2
886ef9
- Release bump in order to allow rebuild against latest version of gcc in RHEL-8 buildroot.  (#1657912)
886ef9
886ef9
* Wed Apr 24 2019 Nick Clifton <nickc@redhat.com> - 8.73-1
886ef9
- Fix test for an executable stack segment.  (#1700924)
886ef9
886ef9
* Thu Feb 28 2019 Nick Clifton <nickc@redhat.com> - 8.71-1
886ef9
- Annobin: Suppress more calls to free() which are triggering memory checker errors.  (#1684148)
886ef9
886ef9
* Fri Feb 01 2019 Nick Clifton <nickc@redhat.com> - 8.70-1
886ef9
- Add section flag matching ability to section size tool.
886ef9
886ef9
* Thu Jan 31 2019 Fedora Release Engineering <releng@fedoraproject.org> - 8.69-7
886ef9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
886ef9
886ef9
* Tue Jan 29 2019 Björn Esser <besser82@fedoraproject.org> - 8.69-6
886ef9
- Use 'with' for rich dependency on gcc
886ef9
886ef9
* Tue Jan 29 2019 Björn Esser <besser82@fedoraproject.org> - 8.69-5
886ef9
- Really fix rhbz#1607430.
886ef9
886ef9
* Mon Jan 28 2019 Björn Esser <besser82@fedoraproject.org> - 8.69-4
886ef9
- Rebuilt with annotations enabled
886ef9
886ef9
* Mon Jan 28 2019 Björn Esser <besser82@fedoraproject.org> - 8.69-3
886ef9
- Fix rpm query for gcc version.
886ef9
886ef9
* Mon Jan 28 2019 Nick Clifton <nickc@redhat.com> - 8.69-2
886ef9
- Add an exact requirement on the major version of gcc. (#1607430)
886ef9
886ef9
* Thu Jan 24 2019 Nick Clifton <nickc@redhat.com> - 8.69-1
886ef9
- Annobin: Add support for .text.startup and .text.exit sections generated by gcc 9.
886ef9
- Annocheck: Add a note displaying tool.
886ef9
886ef9
* Wed Jan 23 2019 Nick Clifton <nickc@redhat.com> - 8.68-1
886ef9
- Annocheck: Skip checks for -D_FORTIFY_SOURCE and -D_GLIBCXX_ASSERTIONS if there is no compiler generated code in the binary.
886ef9
886ef9
* Mon Jan 21 2019 Björn Esser <besser82@fedoraproject.org> - 8.67-3
886ef9
- Rebuilt with annotations enabled
886ef9
886ef9
* Mon Jan 21 2019 Björn Esser <besser82@fedoraproject.org> - 8.67-2
886ef9
- Rebuilt for GCC 9
886ef9
886ef9
* Thu Jan 17 2019 Nick Clifton <nickc@redhat.com> - 8.67-1
886ef9
- Annocheck: Only skip specific checks for specific symbols.  (#1666823)
886ef9
- Annobin: Record the setting of the -fomit-frame-pointer option.  (#1657912)
886ef9
886ef9
* Wed Jan 02 2019 Nick Clifton <nickc@redhat.com> - 8.66-1
886ef9
- Annocheck: Do not ignore -Og when checking to see if an optimization level has been set.  (#1624162)
886ef9
886ef9
* Tue Dec 11 2018 Nick Clifton <nickc@redhat.com> - 8.65-1
886ef9
- Annobin: Fix handling of multiple .text.unlikely sections.
886ef9
886ef9
* Fri Nov 30 2018 Nick Clifton <nickc@redhat.com> - 8.64-1
886ef9
- Annocheck: Skip gaps in PPC64 executables covered by start_bcax_ symbols.  (#1630564)
886ef9
886ef9
* Mon Nov 26 2018 Nick Clifton <nickc@redhat.com> - 8.63-1
886ef9
- Annocheck: Disable ENDBR test for shared libraries.  (#1652925)
886ef9
886ef9
* Mon Nov 26 2018 Nick Clifton <nickc@redhat.com> - 8.62-1
886ef9
- Annocheck: Add test for ENDBR instruction at entry address of x86/x86_64 executables.  (#1652925)
886ef9
886ef9
* Tue Nov 20 2018 David Cantrell <dcantrell@redhat.com> - 8.61-2
886ef9
- Adjust how the gcc_vr macro is set.
886ef9
886ef9
* Mon Nov 19 2018 Nick Clifton <nickc@redhat.com> - 8.61-1
886ef9
- Fix building with gcc version 4.
886ef9
886ef9
* Tue Nov 13 2018 Nick Clifton <nickc@redhat.com> - 8.60-1
886ef9
- Skip -Wl,-z,now and -Wl,-z,relro checks for non-gcc produced binaries.  (#1624421)
886ef9
886ef9
* Mon Nov 05 2018 Nick Clifton <nickc@redhat.com> - 8.59-1
886ef9
- Ensure GNU Property notes are 8-byte aligned in x86_64 binaries.  (#1645817)
886ef9
886ef9
* Thu Oct 18 2018 Nick Clifton <nickc@redhat.com> - 8.58-1
886ef9
- Skip PPC64 linker stubs created in the middle of text sections (again). (#1630640)
886ef9
886ef9
* Thu Oct 18 2018 Nick Clifton <nickc@redhat.com> - 8.57-1
886ef9
- Suppress free of invalid pointer. (#1638371)
886ef9
886ef9
* Thu Oct 18 2018 Nick Clifton <nickc@redhat.com> - 8.56-1
886ef9
- Skip PPC64 linker stubs created in the middle of text sections. (#1630640)
886ef9
886ef9
* Tue Oct 16 2018 Nick Clifton <nickc@redhat.com> - 8.55-1
886ef9
- Reset the (PPC64) section start symbol to 0 if its section is empty.  (#1638251)
886ef9
886ef9
* Thu Oct 11 2018 Nick Clifton <nickc@redhat.com> - 8.53-1
886ef9
- Also skip virtual thinks created by G++.  (#1630619)
886ef9
886ef9
* Wed Oct 10 2018 Nick Clifton <nickc@redhat.com> - 8.52-1
886ef9
- Use uppercase for all fail/mayb/pass results.  (#1637706)
886ef9
886ef9
* Wed Oct 10 2018 Nick Clifton <nickc@redhat.com> - 8.51-1
886ef9
- Generate notes for unlikely sections.  (#1630620)
886ef9
886ef9
* Mon Oct 08 2018 Nick Clifton <nickc@redhat.com> - 8.50-1
886ef9
- Fix edge case computing section names for end symbols.  (#1637039)
886ef9
886ef9
* Mon Oct 08 2018 Nick Clifton <nickc@redhat.com> - 8.49-1
886ef9
- Skip dynamic checks for binaries without a dynamic segment.  (#1636606)
886ef9
886ef9
* Fri Oct 05 2018 Nick Clifton <nickc@redhat.com> - 8.48-1
886ef9
- Delay generating attach_to_group directives until the end of the compilation.  (#1636265)
886ef9
886ef9
* Mon Oct 01 2018 Nick Clifton <nickc@redhat.com> - 8.47-1
886ef9
- Fix bug introduced in previous delta which would trigger a seg-fault when scanning for gaps.
886ef9
886ef9
* Mon Oct 01 2018 Nick Clifton <nickc@redhat.com> - 8.46-1
886ef9
- Annobin:   Fix section name selection for startup sections.
886ef9
- Annocheck: Improve gap skipping heuristics.   (#1630574)
886ef9
886ef9
* Mon Oct 01 2018 Nick Clifton <nickc@redhat.com> - 8.45-1
886ef9
- Fix function section support (again).   (#1630574)
886ef9
886ef9
* Fri Sep 28 2018 Nick Clifton <nickc@redhat.com> - 8.44-1
886ef9
- Skip compiler option checks for non-GNU producers.  (#1633749)
886ef9
886ef9
* Wed Sep 26 2018 Nick Clifton <nickc@redhat.com> - 8.43-1
886ef9
- Fix function section support (again).   (#1630574)
886ef9
886ef9
* Tue Sep 25 2018 Nick Clifton <nickc@redhat.com> - 8.42-1
886ef9
- Ignore ppc64le notes where start = end + 2.  (#1632259)
886ef9
886ef9
* Tue Sep 25 2018 Nick Clifton <nickc@redhat.com> - 8.41-1
886ef9
- Make annocheck ignore symbols suffixed with ".end".  (#1639618)
886ef9
886ef9
* Mon Sep 24 2018 Nick Clifton <nickc@redhat.com> - 8.40-1
886ef9
- Reinstate building annobin with annobin enabled.  (#1630550)
886ef9
886ef9
* Mon Sep 24 2018 Nick Clifton <nickc@redhat.com> - 8.39-2
886ef9
- Fix gating test.  (#1625683)
886ef9
886ef9
* Fri Sep 21 2018 Nick Clifton <nickc@redhat.com> - 8.39-1
886ef9
- Tweak tests.
886ef9
886ef9
* Fri Sep 21 2018 Nick Clifton <nickc@redhat.com> - 8.38-1
886ef9
- Generate notes and groups for .text.hot and .text.unlikely sections.
886ef9
- When -ffunction-sections is active, put notes for startup sections into .text.startup.foo rather than .text.foo.
886ef9
- Similarly put exit section notes into .text.exit.foo.  (#1630574)
886ef9
- Change annocheck's maybe result for GNU Property note being missing into a PASS if it is not needed and a FAIL if it is needed.
886ef9
886ef9
* Wed Sep 19 2018 Nick Clifton <nickc@redhat.com> - 8.37-1
886ef9
- Make the --skip-* options skip all messages about the specified test.
886ef9
- Add gating tests.   (#1625683)
886ef9
886ef9
* Tue Sep 18 2018 Nick Clifton <nickc@redhat.com> - 8.36-1
886ef9
- Improve error message when an ET_EXEC binary is detected.
886ef9
886ef9
* Mon Sep 17 2018 Nick Clifton <nickc@redhat.com> - 8.35-1
886ef9
- Skip failures for PIC vs PIE.  (#1629698)
886ef9
886ef9
* Mon Sep 17 2018 Nick Clifton <nickc@redhat.com> - 8.34-1
886ef9
- Ensure 4 byte alignment of note sub-sections.  (#1629671)
886ef9
886ef9
* Wed Sep 12 2018 Nick Clifton <nickc@redhat.com> - 8.33-1
886ef9
- Add timing tool to report on speed of the checks.
886ef9
- Add check for conflicting use of the -fshort-enum option.
886ef9
- Add check of the GNU Property notes.
886ef9
- Skip check for -O2 if compiled with -Og.  (#1624162)
886ef9
886ef9
* Mon Sep 03 2018 Nick Clifton <nickc@redhat.com> - 8.32-1
886ef9
- Add test for ET_EXEC binaries.  (#1625627)
886ef9
- Document --report-unknown option.
886ef9
886ef9
* Thu Aug 30 2018 Nick Clifton <nickc@redhat.com> - 8.31-1
886ef9
- Fix bug in hardened tool which would skip gcc compiled files if the notes were too small.
886ef9
- Fix bugs in section-size tool.
886ef9
- Fix bug in built-by tool.
886ef9
886ef9
* Wed Aug 29 2018 Nick Clifton <nickc@redhat.com> - 8.30-1
886ef9
- Generate notes for comdat sections. (#1619267)
886ef9
886ef9
* Thu Aug 23 2018 Nick Clifton <nickc@redhat.com> - 8.29-1
886ef9
- Add more names to the gap skip list. (#1619267)
886ef9
886ef9
* Thu Aug 23 2018 Nick Clifton <nickc@redhat.com> - 8.28-1
886ef9
- Skip gaps covered by _x86.get_pc_thunk and _savegpr symbols. (#1619267)
886ef9
- Merge ranges where one is wholly covered by another.
886ef9
886ef9
* Wed Aug 22 2018 Nick Clifton <nickc@redhat.com> - 8.27-1
886ef9
- Skip gaps at the end of functions. (#1619267)
886ef9
886ef9
* Tue Aug 21 2018 Nick Clifton <nickc@redhat.com> - 8.26-1
886ef9
- Fix thinko in ppc64 gap detection code. (#1619267)
886ef9
886ef9
* Mon Aug 20 2018 Nick Clifton <nickc@redhat.com> - 8.25-1
886ef9
- Skip gaps at the end of the .text section in ppc64 binaries. (#1619267)
886ef9
886ef9
* Fri Aug 17 2018 Nick Clifton <nickc@redhat.com> - 8.24-1
886ef9
- Skip checks in stack_chk_local_fail.c.  (#1618660)
886ef9
- Treat gaps as FAIL results rather than MAYBE.
886ef9
- Skip checks in __stack_chk_local_fail.
886ef9
- Reduce version check to gcc major version number only.  Skip compiler option checks if binary not built with gcc.  (#1603089)
886ef9
- Fix bug in annobin plugin.  Add --section-size=NAME option to annocheck.
886ef9
886ef9
* Thu Aug 02 2018 Nick Clifton <nickc@redhat.com> - 8.20-1
886ef9
- Correct name of man page for run-on-binaries-in script.  (#1611155)
886ef9
886ef9
* Mon Jul 30 2018 Florian Weimer <fweimer@redhat.com> - 8.19-3
886ef9
- Rebuild with fixed binutils
886ef9
886ef9
* Sat Jul 28 2018 Troy Dawson <tdawson@redhat.com> - 8.19-2
886ef9
- Rebuild for gcc 8.2.1
886ef9
886ef9
* Wed Jul 25 2018 Nick Clifton <nickc@redhat.com> - 8.19-1
886ef9
- Allow $ORIGN to be at the start of entries in DT_RPATH and DT_RUNPATH.
886ef9
886ef9
* Mon Jul 23 2018 Nick Clifton <nickc@redhat.com> - 8.18-1
886ef9
- Add support for big endian targets.
886ef9
886ef9
* Mon Jul 23 2018 Nick Clifton <nickc@redhat.com> - 8.17-1
886ef9
- Count passes and failures on a per-component basis and report gaps.
886ef9
886ef9
* Fri Jul 20 2018 Nick Clifton <nickc@redhat.com> - 8.16-1
886ef9
- Use our own copy of the targetm.asm_out.function_section() function.  (#159861 comment#17)
886ef9
886ef9
* Fri Jul 20 2018 Nick Clifton <nickc@redhat.com> - 8.15-1
886ef9
- Generate grouped note section name all the time.  (#159861 comment#16)
886ef9
886ef9
* Thu Jul 19 2018 Nick Clifton <nickc@redhat.com> - 8.14-1
886ef9
- Fix section conflict problem.  (#1603071)
886ef9
886ef9
* Wed Jul 18 2018 Nick Clifton <nickc@redhat.com> - 8.13-1
886ef9
- Fix for building with gcc version 4.
886ef9
- Fix symbol placement in functions with local assembler.
886ef9
886ef9
* Tue Jul 17 2018 Nick Clifton <nickc@redhat.com> - 8.12-1
886ef9
- Fix assertions in rnage checking code.  Add detection of -U options.
886ef9
886ef9
* Tue Jul 17 2018 Nick Clifton <nickc@redhat.com> - 8.11-1
886ef9
- Handle function sections properly.  Handle .text.startup and .text.unlikely sections.  Improve gap detection and reporting.  (#1601055)
886ef9
886ef9
* Thu Jul 12 2018 Nick Clifton <nickc@redhat.com> - 8.10-1
886ef9
- Fix construction of absolute versions of --dwarf-dir and --debug-rpm options.
886ef9
886ef9
* Tue Jul 10 2018 Nick Clifton <nickc@redhat.com> - 8.9-1
886ef9
- Fix buffer overrun when very long symbol names are encountered.
886ef9
886ef9
* Tue Jul 10 2018 Nick Clifton <nickc@redhat.com> - 8.8-1
886ef9
- Do not force the generation of function notes when -ffunction-sections is active.  (#1598961)
886ef9
886ef9
* Mon Jul 09 2018 Nick Clifton <nickc@redhat.com> - 8.7-1
886ef9
- Skip the .annobin_ prfix when reporting symbols.  (#1599315)
886ef9
886ef9
* Mon Jul 09 2018 Nick Clifton <nickc@redhat.com> - 8.6-1
886ef9
- Use the assembler (c++ mangled) version of function names when switching sections.  (#1598579)
886ef9
886ef9
* Mon Jul 09 2018 Nick Clifton <nickc@redhat.com> - 8.5-1
886ef9
- Do not call function_section.  (#1598961)
886ef9
886ef9
* Fri Jul 06 2018 Nick Clifton <nickc@redhat.com> - 8.4-1
886ef9
- Ignore cross-section gaps.  (#1598551)
886ef9
886ef9
* Thu Jul 05 2018 Nick Clifton <nickc@redhat.com> - 8.3-1
886ef9
- Do not skip empty range notes in object files.  (#1598361)
886ef9
886ef9
* Mon Jul 02 2018 Nick Clifton <nickc@redhat.com> - 8.2-1
886ef9
- Create the start symbol at the start of the function and the end symbol at the end.  (#1596823)
886ef9
886ef9
* Mon Jul 02 2018 Nick Clifton <nickc@redhat.com> - 8.1-1
886ef9
- Fix --debug-rpm when used inside a directory.
886ef9
886ef9
* Thu Jun 28 2018 Nick Clifton <nickc@redhat.com> - 8.0-1
886ef9
- Use a prefix for all annobin generated symbols, and make them hidden.
886ef9
- Only generate weak symbol definitions for linkonce sections.
886ef9
886ef9
* Wed Jun 27 2018 Nick Clifton <nickc@redhat.com> - 7.1-1
886ef9
- Skip some checks for relocatable object files, and dynamic objects.
886ef9
- Stop bogus complaints about stackrealignment not being enabled.
886ef9
886ef9
* Mon Jun 25 2018 Nick Clifton <nickc@redhat.com> - 7.0-1
886ef9
- Add -debug-rpm= option to annocheck.
886ef9
- Only use a 2 byte offset for the initial symbol on PowerPC.
886ef9
886ef9
* Fri Jun 22 2018 Nick Clifton <nickc@redhat.com> - 6.6-1
886ef9
- Use --dwarf-path when looking for build-id based debuginfo files.
886ef9
886ef9
* Fri Jun 22 2018 Nick Clifton <nickc@redhat.com> - 6.5-1
886ef9
- Fix premature closing of dwarf handle.
886ef9
886ef9
* Fri Jun 22 2018 Nick Clifton <nickc@redhat.com> - 6.4-1
886ef9
- Fix scoping bug computing the name of a separate debuginfo file.
886ef9
886ef9
* Tue Jun 19 2018 Nick Clifton <nickc@redhat.com> - 6.3-1
886ef9
- Fix file descriptor leak.
886ef9
886ef9
* Tue Jun 19 2018 Nick Clifton <nickc@redhat.com> - 6.2-1
886ef9
- Add command line options to annocheck to disable individual tests.
886ef9
886ef9
* Fri Jun 08 2018 Nick Clifton <nickc@redhat.com> - 6.1-1
886ef9
- Remove C99-ism from annocheck sources.
886ef9
886ef9
* Wed Jun 06 2018 Nick Clifton <nickc@redhat.com> - 6.0-1
886ef9
- Add the annocheck program.
886ef9
886ef9
* Fri Jun 01 2018 Nick Clifton <nickc@redhat.com> - 5.11-1
886ef9
- Do not use the SHF_GNU_BUILD_NOTE section flag.
886ef9
886ef9
* Thu May 31 2018 Nick Clifton <nickc@redhat.com> - 5.10-1
886ef9
- Remove .sh extension from shell scripts.
886ef9
886ef9
* Wed May 30 2018 Nick Clifton <nickc@redhat.com> - 5.9-1
886ef9
- Record the setting of the -mstackrealign option for i686 binaries.
886ef9
886ef9
* Mon May 14 2018 Nick Clifton <nickc@redhat.com> - 5.8-1
886ef9
- Hide the annobin start of file symbol.
886ef9
886ef9
* Tue May 08 2018 Nick Clifton <nickc@redhat.com> - 5.7-1
886ef9
- Fix script bug in hardended.sh.  (Thanks to: Stefan Sørensen <stefan.sorensen@spectralink.com>)
886ef9
886ef9
* Thu May 03 2018 Nick Clifton <nickc@redhat.com> - 5.6-3
886ef9
- Version number bump so that the plugin can be rebuilt with the latest version of GCC.
886ef9
886ef9
* Mon Apr 30 2018 Nick Clifton <nickc@redhat.com> - 5.6-2
886ef9
- Rebuild the plugin with the newly created plugin enabled.  (#1573082)
886ef9
886ef9
* Mon Apr 30 2018 Nick Clifton <nickc@redhat.com> - 5.6-1
886ef9
- Skip the isa_flags check in the ABI test because the crt[in].o files are compiled with different flags from the test files.
886ef9
886ef9
* Fri Apr 20 2018 Nick Clifton <nickc@redhat.com> - 5.3-1
886ef9
- Add manual pages for annobin and the scripts.
886ef9
886ef9
* Tue Apr 03 2018 Nick Clifton <nickc@redhat.com> - 5.2-1
886ef9
- Do not record a stack protection setting of -1.  (#1563141)
886ef9
886ef9
* Tue Mar 20 2018 Nick Clifton <nickc@redhat.com> - 5.1-1
886ef9
- Do not complain about a dwarf_version value of -1.  (#1557511)
886ef9
886ef9
* Thu Mar 15 2018 Nick Clifton <nickc@redhat.com> - 5.0-1
886ef9
- Bias file start symbols by 2 in order to avoid them confused with function symbols.  (#1554332)
886ef9
- Version jump is to sync the version number with the annobin plugins internal version number.
886ef9
886ef9
* Mon Mar 12 2018 Nick Clifton <nickc@redhat.com> - 3.6-1
886ef9
- Add --ignore-gaps option to check-abi.sh script.
886ef9
- Use this option in the abi-test check.
886ef9
- Tweak hardening test to skip pic and stack protection checks.
886ef9
886ef9
* Tue Mar 06 2018 Nick Clifton <nickc@redhat.com> - 3.5-1
886ef9
- Handle functions with specific assembler names.  (#1552018)
886ef9
886ef9
* Fri Feb 23 2018 Nick Clifton <nickc@redhat.com> - 3.4-2
886ef9
- Add an explicit requirement on the version of gcc used to built the plugin.  (#1547260)
886ef9
886ef9
* Fri Feb 09 2018 Nick Clifton <nickc@redhat.com> - 3.4-1
886ef9
- Change type and size of symbols to STT_NOTYPE/0 so that they do not confuse GDB.  (#1539664)
886ef9
- Add run-on-binaries-in.sh script to allow the other scripts to be run over a repository.
886ef9
886ef9
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.3-2
886ef9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
886ef9
886ef9
* Tue Jan 30 2018 Nick Clifton <nickc@redhat.com> - 3.3-1
886ef9
- Rebase on 3.3 release, which adds support for recording -mcet and -fcf-protection.
886ef9
886ef9
* Mon Jan 29 2018 Florian Weimer <fweimer@redhat.com> - 3.2-3
886ef9
- Rebuild for GCC 8
886ef9
886ef9
* Fri Jan 26 2018 Nick Clifton <nickc@redhat.com> - 3.2-2
886ef9
- Fix the installation of the annobin.info file.
886ef9
886ef9
* Fri Jan 26 2018 Nick Clifton <nickc@redhat.com> - 3.2-1
886ef9
- Rebase on 3.2 release, which now contains documentation!
886ef9
886ef9
* Fri Jan 26 2018 Richard W.M. Jones <rjones@redhat.com> - 3.1-3
886ef9
- Rebuild against GCC 7.3.1.
886ef9
886ef9
* Tue Jan 16 2018 Nick Clifton <nickc@redhat.com> - 3.1-2
886ef9
- Add --with-gcc-plugin-dir option to the configure command line.
886ef9
886ef9
* Thu Jan 04 2018 Nick Clifton <nickc@redhat.com> - 3.1-1
886ef9
- Rebase on version 3.1 sources.
886ef9
886ef9
* Mon Dec 11 2017 Nick Clifton <nickc@redhat.com> - 2.5.1-5
886ef9
- Do not generate notes when there is no output file.  (#1523875)
886ef9
886ef9
* Fri Dec 08 2017 Nick Clifton <nickc@redhat.com> - 2.5.1-4
886ef9
- Invent an input filename when reading from a pipe.  (#1523401)
886ef9
886ef9
* Thu Nov 30 2017 Florian Weimer <fweimer@redhat.com> - 2.5.1-3
886ef9
- Use DECL_ASSEMBLER_NAME for symbol references (#1519165)
886ef9
886ef9
* Tue Oct 03 2017 Igor Gnatenko <ignatenkobrain@fedoraproject.org> - 2.5.1-2
886ef9
- Cleanups in spec
886ef9
886ef9
* Tue Sep 26 2017 Nick Clifton <nickc@redhat.com> - 2.5.1-1
886ef9
- Touch the auto-generated files in order to stop them from being regenerated.
886ef9
886ef9
* Tue Sep 26 2017 Nick Clifton <nickc@redhat.com> - 2.5-2
886ef9
- Stop the plugin complaining about compiler datestamp mismatches.
886ef9
886ef9
* Thu Sep 21 2017 Nick Clifton <nickc@redhat.com> - 2.4-1
886ef9
- Tweak tests so that they will run on older machines.
886ef9
886ef9
* Thu Sep 21 2017 Nick Clifton <nickc@redhat.com> - 2.3-1
886ef9
- Add annobin-tests subpackage containing some preliminary tests.
886ef9
- Remove link-time test for unsuported targets.
886ef9
886ef9
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.0-3
886ef9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
886ef9
886ef9
* Mon Jul 31 2017 Florian Weimer <fweimer@redhat.com> - 2.0-2
886ef9
- Rebuild with binutils fix for ppc64le (#1475636)
886ef9
886ef9
* Wed Jun 28 2017 Nick Clifton <nickc@redhat.com> - 2.0-1
886ef9
- Fixes for problems reported by the package submission review:
886ef9
   * Add %%license entry to %%file section.
886ef9
   * Update License and BuildRequires tags.
886ef9
   * Add Requires tag.
886ef9
   * Remove %%clean.
886ef9
   * Add %%check.
886ef9
   * Clean up the %%changelog.
886ef9
- Update to use version 2 of the specification and sources.
886ef9
886ef9
* Thu May 11 2017 Nick Clifton <nickc@redhat.com> - 1.0-1
886ef9
- Initial submission.