Bug 2439677

Building zpaqfranz-64.5-1 on Fedora 44 <https://bodhi.fedoraproject.org/updates/FEDORA-2026-a32d4615b5> and on Fedora 45 <https://bodhi.fedoraproject.org/updates/FEDORA-2026-caf0f1ac36> manifests a regression in annocheck sanity test <https://artifacts.dev.testing-farm.io/2c8d7832-97dd-4cd8-83bd-4380916344a7/>, causing a Fedora CI failure with this output:

Command: annocheck --no-use-debuginfod --ignore-unknown --verbose --profile=fedora --debug-dir=/usr/lib/debug/ ./usr/bin/zpaqfranz
Exit Code: 1

annocheck: Version 12.99.
Hardened: ./usr/bin/zpaqfranz: PASS: pie test because the ELF file header has the correct type 
Hardened: ./usr/bin/zpaqfranz: info: written in C++ (source: DW_AT_language string).
Hardened: ./usr/bin/zpaqfranz: info: seen tool Gimple version 16.
Hardened: ./usr/bin/zpaqfranz: PASS: pic test because option found in DW_AT_producer string 
Hardened: ./usr/bin/zpaqfranz: PASS: stack-prot test because option found in DW_AT_producer string 
Hardened: ./usr/bin/zpaqfranz: PASS: stack-clash test because option found in DW_AT_producer string 
Hardened: ./usr/bin/zpaqfranz: PASS: optimization test because option found in DW_AT_producer string 
Hardened: ./usr/bin/zpaqfranz: PASS: branch-protection test because correct option found in DW_AT_producer string 
Hardened: ./usr/bin/zpaqfranz: info: seen tool GCC version 16.
Hardened: ./usr/bin/zpaqfranz: PASS: lto test because detected in DW_AT_producer string 
Hardened: ./usr/bin/zpaqfranz: PASS: fortify test because found in DW_AT_producer string 
Hardened: ./usr/bin/zpaqfranz: PASS: writable-got test 
Hardened: ./usr/bin/zpaqfranz: PASS: dynamic-segment test 
Hardened: ./usr/bin/zpaqfranz: PASS: bind-now test because BIND_NOW dynamic flag seen 
Hardened: ./usr/bin/zpaqfranz: FAIL: dynamic-tags test because the BTI_PLT flag is missing from the dynamic tags 
Hardened: ./usr/bin/zpaqfranz: info: For more information visit: https://sourceware.org/annobin/annobin.html/Test-dynamic-tags.html
Hardened: ./usr/bin/zpaqfranz: PASS: gnu-stack test because stack segment exists with the correct permissions 
Hardened: ./usr/bin/zpaqfranz: PASS: gnu-relro test 
Hardened: ./usr/bin/zpaqfranz: PASS: notes test because annobin notes found in the .annobin.notes section 
Hardened: ./usr/bin/zpaqfranz: skip: fast test because function abi-note.c is part of the C library's static code and does use math functions 
Hardened: ./usr/bin/zpaqfranz: skip: lto test because function abi-note.c is part of the C library which is deliberately built without LTO 
Hardened: ./usr/bin/zpaqfranz: PASS: implicit-values test because -Wimplicit-int and -Wimplicit-function-decalration enabled 
Hardened: ./usr/bin/zpaqfranz: skip: fortify test because function abi-note.c is part of the C library, and as such it does not need fortification 
Hardened: ./usr/bin/zpaqfranz: PASS: glibcxx-assertions test 
Hardened: ./usr/bin/zpaqfranz: skip: warnings test because LTO compilation discards preprocessor options 
Hardened: ./usr/bin/zpaqfranz: skip: implicit-values test because -Wimplicit-int setting is hidden by LTO 
Hardened: ./usr/bin/zpaqfranz: info: seen tool Gas version 1.
Hardened: ./usr/bin/zpaqfranz: skip: gaps test because string notes imply full coverage 
Hardened: ./usr/bin/zpaqfranz: skip: cf-protection test because not an x86_64 binary 
Hardened: ./usr/bin/zpaqfranz: PASS: entry test because no negative result detected 
Hardened: ./usr/bin/zpaqfranz: skip: go-revision test because no GO compiled code found 
Hardened: ./usr/bin/zpaqfranz: PASS: instrumentation test because no negative result detected 
Hardened: ./usr/bin/zpaqfranz: PASS: load-segments test because no negative result detected 
Hardened: ./usr/bin/zpaqfranz: PASS: production test because no negative result detected 
Hardened: ./usr/bin/zpaqfranz: FAIL: property-note test because no .note.gnu.property section found 
Hardened: ./usr/bin/zpaqfranz: info: For more information visit: https://sourceware.org/annobin/annobin.html/Test-property-note.html
Hardened: ./usr/bin/zpaqfranz: PASS: run-path test because no negative result detected 
Hardened: ./usr/bin/zpaqfranz: PASS: short-enums test because no negative result detected 
Hardened: ./usr/bin/zpaqfranz: skip: stack-realign test because not an i686 executable 
Hardened: ./usr/bin/zpaqfranz: PASS: textrel test because no negative result detected 
Hardened: ./usr/bin/zpaqfranz: PASS: threads test because no negative result detected 
Hardened: ./usr/bin/zpaqfranz: PASS: unicode test because no negative result detected 
Hardened: ./usr/bin/zpaqfranz: Overall: FAIL.

I only observed this failure in AArch64 in Fedora 45.

I minimized the reproducer to:

# cat test.c 
int main(void) {
        return 0;
}

Compiling with "-flto=auto -g -mbranch-protection=standard" works with gcc-16.0.1-0.5.fc44.aarch64 and the .note.gnu.property is present:

# gcc -flto=auto -g -mbranch-protection=standard test.c -o a.out && readelf -j .note.gnu.property ./a.out

Displaying notes found in: .note.gnu.property
  Owner                Data size        Description
  GNU                  0x00000010       NT_GNU_PROPERTY_TYPE_0
      Properties: AArch64 feature: BTI, PAC, GCS

Upgrading gcc to gcc-16.0.1-0.7.fc45.aarch64 triggers the regression, the .note.gnu.property disappears:

# gcc -flto=auto -g -mbranch-protection=standard test.c -o a.out && readelf -j .note.gnu.property ./a.out
readelf: Warning: Section '.note.gnu.property' was not dumped because it does not exist

Removing "-flto=auto" or "-g" options returns the .note.gnu.property.

Comparing disassembled code (compiled with -O0) reveals that functions in .plt section are missing BTI instructions.