Update the %files section in annobin.spec so that it admits to using the gcc plugin directory. Remove the bogus Provides: annobin from the annobin-doc sub-package.
Synced with rawhide. Brings in support for annocheck scanning of binaries created by Rust 1.18
Fix a bug in annocheck when parsing command line options that take a parameter.
Add another exception (to annocheck) for glibc libraries
Fixes another problem with a false FAIL result from annocheck about -mbranch-protection for AArch64 binaries built with LTO enabled
Please login to add feedback.
This update has been submitted for testing by nickc.
This update's test gating status has been changed to 'waiting'.
This update has obsoleted annobin-10.76-1.fc35, and has inherited its bugs and notes.
This update's test gating status has been changed to 'passed'.
This update has been pushed to testing.
This update's test gating status has been changed to 'failed'.
This update's test gating status has been changed to 'passed'.
There's a genuine failure in fedora-ci.koji-build.rpminspect.static-analysis, ironically this build doesn't pass the annocheck test even if I run annocheck updated from this build. Only aarch64 is affected. To reproduce, please do:
annocheck --ignore-unknown --verbose --debug-rpm=annobin-plugin-llvm-debuginfo-10.76-3.fc35.aarch64.rpm annobin-plugin-llvm-10.76-3.fc35.aarch64.rpm
The failure is a false positive. The BTI_PLT flag is only set in F36 and Rawhide AArch64 binaries. In F35 binaries it is (deliberately) absent.
I need to add a F35 profile to annocheck - and probably encode a way for it to automatically set the profile based upon the input filename.
This update has been obsoleted by annobin-10.78-1.fc35.