[ol8_appstream] annobin-annocheck-9.72-1.el8_5.2.x86_64

Installs the annocheck program which uses the notes generated by annobin to
check that the specified files were compiled with the correct security
hardening options.

Changelog (Show File list) (Show related packages)

• Mon Nov 01 2021 Siddhesh Poyarekar <siddhesh@redhat.com> - 9.72-1.2

  - Bump NVR and rebuild to use the new gcc. (#2017362)

• Wed Oct 27 2021 Nick Clifton <nickc@redhat.com> - 9.72-1.1

  - Annocheck: Add test for multibyte characters in symbol names.  (#2017362)

• Mon May 17 2021 Nick Clifton <nickc@redhat.com> - 9.72-1

  - Rebase to 9.72.  (#1960299)
  - annocheck: Accept 0 as a valid number for gcc minor versions and release numbers.
  - gcc-plugin: Add support for ARM and RISCV targets.
  - timing: do not initialise the clock if the timing tool is disabled.
  - gcc-plugin: Replace ICE messsages with verbose messages.
  - Fix the testsuite so that it can be run in parallel.
  - Annocheck: WARN if the annobin plugin was built for a newer version of the compiler than the one on which it was run.  (#1950657)
  - Annocheck: Improve detection of missing GNU-stack support.
  - Correct a package rename (bug #1949570)
  - Require docs subpackage by the other ones because of a license
  - Build-requiring perl-interpreter is enough
  - Fix bz1949570
  - Fix anomolies reported by covscan.
  - Move documentation into a sub-package.

• Wed Mar 17 2021 Nick Clifton <nickc@redhat.com> - 9.65-1

  - gcc-plugin: Use a fixed filename when running in LTO mode.

• Wed Mar 03 2021 Nick Clifton <nickc@redhat.com> - 9.64-1

  - Annocheck: Fix detection of special function names.  (#1934189)
  - Annocheck: FAIL the deliberate use of -fno-stack-protector, but add some exceptions for glibc.  (#1923439)
  - Annocheck: Add colour to some messages.  Skip the deliberate use of -fno-stack-protector.  (#1923439)
  - Annocheck: Fix some problems with tests for missing notes.
  - Add some GO tests to annocheck.
  - Add a future fail for the presence of RPATH in the dynamic tags.
  - Add the ability to disable the warning message about -D_FORTIFY_SOURCE being missing.
  - Workaround for elflint problems with PPC compiled files.  (#1880634)
  - Fix bogus AArch64 test failures.
  - Improved testing by annocheck.  Add fixed format message mode.
  - Fix inconsistency reporting -fcf-protection and -fstack-clash-protection results.
  - Add support for -D_FORTIFY_SOURCE=3.
  - annocheck: When a binary is produced both by GAS and GCC, select GAS as the real producer.  (#1906171)
  - annocheck: Improve test for LTO compiled binaries that do not have -Wall annotations.  (#1906171)

• Wed Dec 09 2020 Nick Clifton <nickc@redhat.com> - 9.50-1

  - annocheck: Mark a missining -D_FORTIFY_SOURCE as a FAIL.

• Tue Dec 08 2020 Nick Clifton <nickc@redhat.com> - 9.49-1

  - annocheck: Fix notes analyzer to accept empty PPC64 notes.
  - gcc plugin: Tweak generation of end symbols for PPC64 when LTO is active.  (#1898075)(#1904479)
  - gcc plugin: Add support for GCC 11's cl_vars array.

• Mon Nov 30 2020 Nick Clifton <nickc@redhat.com> - 9.46-1

  - Annocheck: Support enabling/disabling future fails.
  - GCC plugin: Always record global notes for the .text.startup,
    .text.exit, .text.hot and .text.cold sections.
  - Clang plugin: Add -lLLVM to the build command line.
  - Annocheck: Improve reporting of missing -D_FORTIFY_SOURCE option.  (#1898075)
  - Annocheck: Improve reporting of missing LTO option.
  - Add detecting of gimple compiled binaries.
  - Add --without-gcc-plugin option.
  - Annocheck: Fix bug parsing DW_AT_producer.
  - Add test of .note.gnu.property section for PowerPC.
  - Add test of objcopy's ability to merge notes.
  - Record the -flto setting and produce a soft warning if it is absent.
  - Suppress warnings about _D_GLIBCXX_ASSERTIONS if the source code is known to be something other than C++.

• Wed Oct 21 2020 Nick Clifton <nickc@redhat.com> - 9.35-3

  - NVR bump to allow building on ELN sidetag.

• Tue Oct 13 2020 Nick Clifton <nickc@redhat.com> - 9.35-2

  - Correct the directory chosen for 32-bit LLVM and Clang plugins.  (#1884951)
  - Allow the use of the SHF_LINK_ORDER section flag to discard unused notes.  (Experimental).
  - gcc-plugin: Fix test for empty PowerPC sections.  (#1880634)