Bug 1630426
| Summary: | [java-1.8.0-openjdk] Some libraries compiled without sufficient optimization | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Severin Gehwolf <sgehwolf> |
| Component: | java-1.8.0-openjdk | Assignee: | Severin Gehwolf <sgehwolf> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | rawhide | CC: | ahughes, dbhole, jerboaa, jvanek, msrb, mvala, omajid |
| Target Milestone: | --- | Keywords: | Reopened |
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | java-1.8.0-openjdk-1.8.0.181.b15-6.fc30 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2018-11-13 19:01:13 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Severin Gehwolf
2018-09-18 15:24:49 UTC
(In reply to Severin Gehwolf from comment #1) > Proposed fix: > https://src.fedoraproject.org/rpms/java-1.8.0-openjdk/pull-request/18 More specifically this: https://src.fedoraproject.org/fork/jerboaa/rpms/java-1.8.0-openjdk/c/6eb08aa024f2bfa1ae9c8197d18fe77e748a7552 With the fixes in comment 2 I'm seeing the following for reproducers: <mock-chroot> sh-4.4# annocheck -v --skip-cf-protection --skip-glibcxx-assertions --skip-glibcxx-assertions --skip-stack-realign --section-size=.gnu.build.attributes /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so annocheck: Version 8.36. Section_Size: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: .gnu.build.attributes: 0x8850 Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: No gaps found. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Linked with -Wl,-z,now. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Dynamic segment is present. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Compiled with -D_FORTIFY_SOURCE=2. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Linked with -Wl,-z,relro. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Stack not executable. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Compiled with sufficient optimization. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Compiled with PIC/PIE. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Compiled as a position independent binary. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Good GNU Property note. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: DT_RPATH/DT_RUNPATH absent or rooted at /usr. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: No RWX segments found. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Consistent use of the -fshort-enum option. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Compiled with -fstack-clash-protection. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Compiled with sufficient stack protection. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: No text relocations found. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: No thread cancellation problems. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: GOT/PLT relocations are read only. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: PASS. Section_Size: Section '.gnu.build.attributes' found in 1 files, total size: 0x8850 <mock-chroot> sh-4.4# annocheck -v --skip-cf-protection --skip-glibcxx-assertions --skip-glibcxx-assertions --skip-stack-realign --section-size=.gnu.build.attributes /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so annocheck: Version 8.36. Section_Size: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: .gnu.build.attributes: 0xa50 Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: No gaps found. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Linked with -Wl,-z,now. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Dynamic segment is present. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Compiled with -D_FORTIFY_SOURCE=2. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Linked with -Wl,-z,relro. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Stack not executable. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Compiled with sufficient optimization. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Compiled with PIC/PIE. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Compiled as a position independent binary. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Good GNU Property note. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: DT_RPATH/DT_RUNPATH absent or rooted at /usr. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: No RWX segments found. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Consistent use of the -fshort-enum option. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Compiled with -fstack-clash-protection. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Compiled with sufficient stack protection. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: No text relocations found. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: No thread cancellation problems. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: GOT/PLT relocations are read only. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: PASS. Section_Size: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: .gnu.build.attributes: 0x270 Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: No gaps found. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Linked with -Wl,-z,now. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Dynamic segment is present. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Compiled with -D_FORTIFY_SOURCE=2. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Linked with -Wl,-z,relro. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Stack not executable. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Compiled with sufficient optimization. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Compiled with PIC/PIE. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Compiled as a position independent binary. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Good GNU Property note. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: DT_RPATH/DT_RUNPATH absent or rooted at /usr. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: No RWX segments found. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Consistent use of the -fshort-enum option. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Compiled with -fstack-clash-protection. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Compiled with sufficient stack protection. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: No text relocations found. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: No thread cancellation problems. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: GOT/PLT relocations are read only. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: PASS. Section_Size: Section '.gnu.build.attributes' found in 2 files, total size: 0xcc0 <mock-chroot> sh-4.4# annocheck -v --skip-cf-protection --skip-property-note --skip-glibcxx-assertions --skip-glibcxx-assertions --skip-stack-realign --section-size=.gnu.build.attributes /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so annocheck: Version 8.36. Section_Size: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: .gnu.build.attributes: 0x40c1b4 Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: No gaps found. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Linked with -Wl,-z,now. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Dynamic segment is present. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Compiled with -D_FORTIFY_SOURCE=2. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Linked with -Wl,-z,relro. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Stack not executable. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Compiled with sufficient optimization. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Compiled with PIC/PIE. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Compiled as a position independent binary. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: DT_RPATH/DT_RUNPATH absent or rooted at /usr. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: No RWX segments found. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Consistent use of the -fshort-enum option. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Compiled with -fstack-clash-protection. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Compiled with sufficient stack protection. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: No text relocations found. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: No thread cancellation problems. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: GOT/PLT relocations are read only. Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: PASS. Section_Size: Section '.gnu.build.attributes' found in 1 files, total size: 0x40c1b4 java-1.8.0-openjdk-1.8.0.181.b15-5.fc29 has been submitted as an update to Fedora 29. https://bodhi.fedoraproject.org/updates/FEDORA-2018-84996c0300 java-1.8.0-openjdk-1.8.0.181.b15-5.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-e72cd4f847 java-1.8.0-openjdk-1.8.0.181.b15-5.fc29 has been pushed to the Fedora 29 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-84996c0300 java-1.8.0-openjdk-1.8.0.181.b15-5.fc28 has been pushed to the Fedora 28 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-e72cd4f847 java-1.8.0-openjdk-1.8.0.181.b15-5.fc29 has been pushed to the Fedora 29 stable repository. If problems still persist, please make note of it in this bug report. java-1.8.0-openjdk-1.8.0.181.b15-5.fc28 has been pushed to the Fedora 28 stable repository. If problems still persist, please make note of it in this bug report. Re-opening as there is one more issue: $ annocheck /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-5.fc29.arm/jre/lib/arm/server/libjvm.so Hardened: libjvm.so: fail: (component: _ZL4highd): Insufficient optimization level: -O0. Hardened: libjvm.so: fail: (component: _ZL4highd): Insufficient optimization level: -O0. Hardened: libjvm.so: MAYB: Gaps were detected in the annobin coverage. Run with -v to list. Hardened: libjvm.so: FAIL: Parts of the binary were compiled without sufficient optimization. Note that JDK 8 on arm 32 bit is Zero. # java -version openjdk version "1.8.0_181" OpenJDK Runtime Environment (build 1.8.0_181-b15) OpenJDK Zero VM (build 25.181-b15, interpreted mode) This has been fixed for Zero now too. |