Bug 2264000

Summary: annobin i686 binaries (annobin.so, annocheck, libannocheck.so) fail in annocheck
Product: [Fedora] Fedora Reporter: Václav Kadlčík <vkadlcik>
Component: annobinAssignee: Nick Clifton <nickc>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: unspecified    
Version: rawhideCC: fweimer, jakub, josmyers, nickc, sipoyare, yahmad
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: annobin-12.40-1.fc40 annobin-12.40-1.fc38 annobin-12.40-1.fc39 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2024-02-29 01:56:49 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Václav Kadlčík 2024-02-13 09:29:39 UTC 
Reported by CI for annobin-12.39-1.fc40 (https://artifacts.dev.testing-farm.io/efe8b85f-983f-42bc-88d0-a0467d795e8e/). That check was run by 12.38 though so
I tried to check the newest build by itself - and I do get FAILs. For example
for libannocheck:

# koji download-build --arch={noarch,x86_64,i686} annobin-12.39-1.fc40
# dnf -y install ./*x86_64* ./*noarch*
# wget https://kojipkgs.fedoraproject.org//packages/annobin/12.39/1.fc40/i686/annobin-libannocheck-debuginfo-12.39-1.fc40.i686.rpm
# annocheck -v --debug-rpm=annobin-libannocheck-debuginfo-12.39-1.fc40.i686.rpm annobin-libannocheck-12.39-1.fc40.i686.rpm

...
Hardened: ./usr/lib/libannocheck.so.0.0.0: MAYB: test: lto, reason: a region of code compiled without LTO was detected (stack_chk_fail_local.c)
...
Hardened: ./usr/lib/libannocheck.so.0.0.0: FAIL: fortify test because -D_FORTIFY_SOURCE=[2|3] was not present on the command line (stack_chk_fail_local.c) 
...


Reproducible: Always
Comment 1 Nick Clifton 2024-02-13 10:36:21 UTC 
*sigh* It looks like another tweak is needed to the heuristics to detect glibc functions.
Comment 2 Nick Clifton 2024-02-13 10:52:13 UTC 
Fixed in annobin-12.40-1.fc40
Comment 3 Fedora Update System 2024-02-13 11:05:54 UTC 
FEDORA-2024-f4c0107c46 (annobin-12.40-1.fc39) has been submitted as an update to Fedora 39.
https://bodhi.fedoraproject.org/updates/FEDORA-2024-f4c0107c46
Comment 4 Fedora Update System 2024-02-13 11:05:55 UTC 
FEDORA-2024-7c0998dafb (annobin-12.40-1.fc38) has been submitted as an update to Fedora 38.
https://bodhi.fedoraproject.org/updates/FEDORA-2024-7c0998dafb
Comment 5 Fedora Update System 2024-02-14 02:11:07 UTC 
FEDORA-2024-f4c0107c46 has been pushed to the Fedora 39 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-f4c0107c46`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-f4c0107c46

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
Comment 6 Fedora Update System 2024-02-14 02:25:17 UTC 
FEDORA-2024-7c0998dafb has been pushed to the Fedora 38 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-7c0998dafb`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-7c0998dafb

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
Comment 7 Fedora Update System 2024-02-29 01:56:49 UTC 
FEDORA-2024-7c0998dafb (annobin-12.40-1.fc38) has been pushed to the Fedora 38 stable repository.
If problem still persists, please make note of it in this bug report.
Comment 8 Fedora Update System 2024-02-29 02:05:57 UTC 
FEDORA-2024-f4c0107c46 (annobin-12.40-1.fc39) has been pushed to the Fedora 39 stable repository.
If problem still persists, please make note of it in this bug report.
Comment 9 Delmer Compton 2024-06-27 02:52:17 UTC Comment hidden (spam)