[ol8_appstream] annobin-annocheck-9.50-1.el8.x86_64

Installs the annocheck program which uses the notes generated by annobin to
check that the specified files were compiled with the correct security
hardening options.

Changelog (Show File list) (Show related packages)

• Wed Dec 09 2020 Nick Clifton <nickc@redhat.com> - 9.50-1

  - annocheck: Mark a missining -D_FORTIFY_SOURCE as a FAIL.

• Tue Dec 08 2020 Nick Clifton <nickc@redhat.com> - 9.49-1

  - annocheck: Fix notes analyzer to accept empty PPC64 notes.
  - gcc plugin: Tweak generation of end symbols for PPC64 when LTO is active.  (#1898075)(#1904479)
  - gcc plugin: Add support for GCC 11's cl_vars array.

• Mon Nov 30 2020 Nick Clifton <nickc@redhat.com> - 9.46-1

  - Annocheck: Support enabling/disabling future fails.
  - GCC plugin: Always record global notes for the .text.startup,
    .text.exit, .text.hot and .text.cold sections.
  - Clang plugin: Add -lLLVM to the build command line.
  - Annocheck: Improve reporting of missing -D_FORTIFY_SOURCE option.  (#1898075)
  - Annocheck: Improve reporting of missing LTO option.
  - Add detecting of gimple compiled binaries.
  - Add --without-gcc-plugin option.
  - Annocheck: Fix bug parsing DW_AT_producer.
  - Add test of .note.gnu.property section for PowerPC.
  - Add test of objcopy's ability to merge notes.
  - Record the -flto setting and produce a soft warning if it is absent.
  - Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.

• Wed Oct 21 2020 Nick Clifton <nickc@redhat.com> - 9.35-3

  - NVR bump to allow building on ELN sidetag.

• Tue Oct 13 2020 Nick Clifton <nickc@redhat.com> - 9.35-2

  - Correct the directory chosen for 32-bit LLVM and Clang plugins.  (#1884951)
  - Allow the use of the SHF_LINK_ORDER section flag to discard unused notes.  (Experimental).
  - gcc-plugin: Fix test for empty PowerPC sections.  (#1880634)

• Thu Sep 10 2020 Nick Clifton <nickc@redhat.com> - 9.32-1

  - annocheck: Add tests for the AArch64 BTI and PAC security features.  (#1862478)
  - gcc plugin: Use a 4 byte offset for PowerPC start symbols, so that they do not break disassemblies.
  - gcc plugin: Correct the detection of 32-bit x86 builds.  (#1876197)

• Tue Sep 08 2020 Nick Clifton <nickc@redhat.com> - 9.29-1

  - gcc plugin: Detect any attempt to access the global_options array.
  - gcc plugin: Do not complain about missing pre-processor options when examining a preprocessed input file.  (#1862718)
  - Use more robust checks for AArch64 options.
  - Detect CLANG compiled assembler that is missing IBT support.
  - Improved target pointer size discovery.
  - Add support for installing clang and llvm plugins.
  - Temporary suppression of aarch64 pointer size check.  (#1860549)

• Wed Jul 01 2020 Nick Clifton <nickc@redhat.com> - 9.23-1

  - Annocheck: Do not skip tests of the short-enums notes.  (#1743635)

• Thu Apr 23 2020 Nick Clifton <nickc@redhat.com> - 9.21-1

  - Annobin: Fall back on using the flags if the option cannot be found in cl_options.  (#1817659)
  - Annocheck: Detect Fortran compiled programs.  (#1824393)

• Mon Apr 06 2020 Nick Clifton <nickc@redhat.com> - 9.19-1

  - Annobin: If option name mismatch occurs, seach for the real option.  (#1817452)
  - Annocheck: Fix a division by zero error when parsing GO binaries.  (#1818863)
  - Annobin: Fix access to the -flto and -fsanitize flags.
  - Annobin: Use offsets stored in gcc's cl_option structure to access the global_options array, thus removing the need to check for changes in the size of this structure.
  - Rename gcc plugin directory to gcc-plugin.
  - Stop annocheck from complaining about missing options when the binary has been built in a mixed environment.
  - Improve builtby tool.
  - Stop annocheck complaining about missing notes when the binary is not compiled by either gcc or clang.
  - Skip the check of the ENTRY instruction for binaries not compiled by gcc or clang.  (#1809656)
  - Fix infinite loop hangup in annocheck.
  - Disable debuginfod support by default.
  - Improve parsing of .comment section.
  - Fix clang plugin to use hidden symbols.
  - Add ability to build clang plugin (disabled by default).
  - Annocheck: Fix error printing out the version number.
  - Annobin: Add checks of the exact location of the examined switches.
  - Annobin: Note when stack clash notes are generated.  (#1803173, #1828797)
  - Annocheck: Handle multiple builder IDs in the .comment section.
  - Add configure option to suppress building annocheck.
  - Fix debuginfod test.
  - Correct the build requirement for building with debuginfod support.
  - Add debuginfod support.
  - Add clang plugin (experimental).
  - Have annocheck ignore notes with an end address of 0.
  - Improve checking of gcc versions.