Bug 1630426 - [java-1.8.0-openjdk] Some libraries compiled without sufficient optimization
Summary: [java-1.8.0-openjdk] Some libraries compiled without sufficient optimization
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: java-1.8.0-openjdk
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Severin Gehwolf
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2018-09-18 15:24 UTC by Severin Gehwolf
Modified: 2018-11-13 19:01 UTC (History)
7 users (show)

Fixed In Version: java-1.8.0-openjdk-1.8.0.181.b15-6.fc30
Clone Of:
Environment:
Last Closed: 2018-11-13 19:01:13 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)

Description Severin Gehwolf 2018-09-18 15:24:49 UTC 
In Fedora rawhide a new tool, annocheck, can be used to verify whether libraries are compiled with appropriate hardening flags as specified by the redhat-rpm-config package. One distro wide flag is to compile libraries with -O2. It turns out, some JDK libs get compiled without sufficient optimization:

1. fdlibm, is being compiled with no optimization.
2. libjsig, libsaproc are being compiled without being optimized.
3. sharedRuntimeTrans.cpp and sharedRuntimeTrig.cpp (part of libjvm.so)
   are not being optimized.

Version-Release number of selected component (if applicable):
java-1.8.0-openjdk-1.8.0.181.b15-1.fc30

How reproducible:
100%

Steps to Reproduce:
1)
fdlibm issue:
$ annocheck -v --skip-cf-protection --skip-glibcxx-assertions --skip-glibcxx-assertions --skip-stack-realign --section-size=.gnu.build.attributes /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-1.fc30.x86_64/jre/lib/amd64/libjava.so

2)
libjsig, libsaproc issue:
$ annocheck -v --skip-cf-protection --skip-glibcxx-assertions --skip-glibcxx-assertions --skip-stack-realign --section-size=.gnu.build.attributes /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjsig.so /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-1.fc30.x86_64/jre/lib/amd64/libsaproc.so

3)
sharedRuntimeTrans/sharedRuntimeTrig issue:
$ annocheck -v --skip-cf-protection --skip-property-note --skip-glibcxx-assertions --skip-glibcxx-assertions --skip-stack-realign --section-size=.gnu.build.attributes /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/server/libjvm.so

Actual results:
1)
annocheck: Version 8.36.
Section_Size: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: .gnu.build.attributes: 0x89a0
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jatan): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jcbrt): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jcos): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jexpm1): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jfabs): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jlog1p): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jsin): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jtan): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jtanh): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jacos): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jasin): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jatan2): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jcosh): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jexp): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jhypot): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jlog): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jlog10): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jpow): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jremainder): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jsinh): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jsqrt): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: __j__ieee754_acos): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: __j__ieee754_asin): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: __j__ieee754_atan2): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: __j__ieee754_cosh): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: __j__ieee754_exp): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: __j__ieee754_hypot): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: __j__ieee754_log): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: __j__ieee754_log10): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: __j__ieee754_pow): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: __j__ieee754_rem_pio2): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: __j__ieee754_remainder): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: __j__ieee754_sinh): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: __j__ieee754_sqrt): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: __j__kernel_cos): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: __j__kernel_rem_pio2): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: __j__kernel_sin): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: __j__kernel_tan): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: jfloor): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: scalbn): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: __j__ieee754_fmod): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: fail: (component: copysign): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: pass: No gaps found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Linked with -Wl,-z,now.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Dynamic segment is present.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Compiled with -D_FORTIFY_SOURCE=2.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Linked with -Wl,-z,relro.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Stack not executable.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: FAIL: Parts of the binary were compiled without sufficient optimization.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Compiled with PIC/PIE.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Compiled as a position independent binary.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Good GNU Property note.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: pass: DT_RPATH/DT_RUNPATH absent or rooted at /usr.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: pass: No RWX segments found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Consistent use of the -fshort-enum option.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Compiled with -fstack-clash-protection.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Compiled with sufficient stack protection.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: pass: No text relocations found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: pass: No thread cancellation problems.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjava.so: pass: GOT/PLT relocations are read only.
Section_Size: Section '.gnu.build.attributes' found in 1 files, total size: 0x89a0

2)
annocheck: Version 8.36.
Section_Size: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: .gnu.build.attributes: 0xa50
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: fail: (component: read_elf_header): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: fail: (component: gnu_debuglink_crc32): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: fail: (component: init_alt_root): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: fail: (component: align): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: fail: (component: close_files): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: fail: (component: throw_new_debugger_exception): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: fail: (component: Java_sun_jvm_hotspot_asm_Disassembler_load_1library): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: No gaps found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Linked with -Wl,-z,now.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Dynamic segment is present.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Compiled with -D_FORTIFY_SOURCE=2.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Linked with -Wl,-z,relro.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Stack not executable.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: FAIL: The binary was compiled without sufficient optimization.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Compiled with PIC/PIE.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Compiled as a position independent binary.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Good GNU Property note.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: DT_RPATH/DT_RUNPATH absent or rooted at /usr.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: No RWX segments found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Consistent use of the -fshort-enum option.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Compiled with -fstack-clash-protection.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Compiled with sufficient stack protection.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: No text relocations found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: No thread cancellation problems.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: GOT/PLT relocations are read only.
Section_Size: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjsig.so: .gnu.build.attributes: 0x270
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjsig.so: fail: (component: signal_lock): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: No gaps found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Linked with -Wl,-z,now.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Dynamic segment is present.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Compiled with -D_FORTIFY_SOURCE=2.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Linked with -Wl,-z,relro.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Stack not executable.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjsig.so: FAIL: The binary was compiled without sufficient optimization.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Compiled with PIC/PIE.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Compiled as a position independent binary.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Good GNU Property note.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: DT_RPATH/DT_RUNPATH absent or rooted at /usr.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: No RWX segments found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Consistent use of the -fshort-enum option.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Compiled with -fstack-clash-protection.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Compiled with sufficient stack protection.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: No text relocations found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: No thread cancellation problems.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: GOT/PLT relocations are read only.
Section_Size: Section '.gnu.build.attributes' found in 2 files, total size: 0xcc0


3)
annocheck: Version 8.36.
Section_Size: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/server/libjvm.so: .gnu.build.attributes: 0x40c1b4
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/server/libjvm.so: fail: (component: _ZL4highd): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/server/libjvm.so: fail: (component: _ZL4highd): Insufficient optimization level: -O0.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: No gaps found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Linked with -Wl,-z,now.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Dynamic segment is present.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Compiled with -D_FORTIFY_SOURCE=2.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Linked with -Wl,-z,relro.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Stack not executable.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/server/libjvm.so: FAIL: Parts of the binary were compiled without sufficient optimization.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Compiled with PIC/PIE.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Compiled as a position independent binary.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: DT_RPATH/DT_RUNPATH absent or rooted at /usr.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: No RWX segments found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Consistent use of the -fshort-enum option.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Compiled with -fstack-clash-protection.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Compiled with sufficient stack protection.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: No text relocations found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: No thread cancellation problems.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-2.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: GOT/PLT relocations are read only.
Section_Size: Section '.gnu.build.attributes' found in 1 files, total size: 0x40c1b4

Expected results:
1)
PASS

2)
PASS

3)
PASS

Additional info:

Relevant upstream bugs which fix those issues are:
1) https://bugs.openjdk.java.net/browse/JDK-8210416
2) https://bugs.openjdk.java.net/browse/JDK-8210647 and
   https://bugs.openjdk.java.net/browse/JDK-8210761
3) https://bugs.openjdk.java.net/browse/JDK-8210425
Comment 1 Severin Gehwolf 2018-09-20 16:45:38 UTC 
Proposed fix:
https://src.fedoraproject.org/rpms/java-1.8.0-openjdk/pull-request/18
Comment 2 Severin Gehwolf 2018-09-20 16:46:23 UTC 
(In reply to Severin Gehwolf from comment #1)
> Proposed fix:
> https://src.fedoraproject.org/rpms/java-1.8.0-openjdk/pull-request/18

More specifically this:
https://src.fedoraproject.org/fork/jerboaa/rpms/java-1.8.0-openjdk/c/6eb08aa024f2bfa1ae9c8197d18fe77e748a7552
Comment 3 Severin Gehwolf 2018-09-20 16:47:22 UTC 
With the fixes in comment 2 I'm seeing the following for reproducers:

<mock-chroot> sh-4.4# annocheck -v --skip-cf-protection --skip-glibcxx-assertions --skip-glibcxx-assertions --skip-stack-realign --section-size=.gnu.build.attributes /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so
annocheck: Version 8.36.
Section_Size: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: .gnu.build.attributes: 0x8850
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: No gaps found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Linked with -Wl,-z,now.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Dynamic segment is present.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Compiled with -D_FORTIFY_SOURCE=2.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Linked with -Wl,-z,relro.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Stack not executable.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Compiled with sufficient optimization.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Compiled with PIC/PIE.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Compiled as a position independent binary.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Good GNU Property note.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: DT_RPATH/DT_RUNPATH absent or rooted at /usr.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: No RWX segments found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Consistent use of the -fshort-enum option.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Compiled with -fstack-clash-protection.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: Compiled with sufficient stack protection.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: No text relocations found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: No thread cancellation problems.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: pass: GOT/PLT relocations are read only.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjava.so: PASS.
Section_Size: Section '.gnu.build.attributes' found in 1 files, total size: 0x8850
<mock-chroot> sh-4.4# annocheck -v --skip-cf-protection --skip-glibcxx-assertions --skip-glibcxx-assertions --skip-stack-realign --section-size=.gnu.build.attributes /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so
annocheck: Version 8.36.
Section_Size: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: .gnu.build.attributes: 0xa50
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: No gaps found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Linked with -Wl,-z,now.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Dynamic segment is present.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Compiled with -D_FORTIFY_SOURCE=2.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Linked with -Wl,-z,relro.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Stack not executable.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Compiled with sufficient optimization.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Compiled with PIC/PIE.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Compiled as a position independent binary.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Good GNU Property note.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: DT_RPATH/DT_RUNPATH absent or rooted at /usr.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: No RWX segments found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Consistent use of the -fshort-enum option.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Compiled with -fstack-clash-protection.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: Compiled with sufficient stack protection.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: No text relocations found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: No thread cancellation problems.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: pass: GOT/PLT relocations are read only.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libsaproc.so: PASS.
Section_Size: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: .gnu.build.attributes: 0x270
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: No gaps found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Linked with -Wl,-z,now.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Dynamic segment is present.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Compiled with -D_FORTIFY_SOURCE=2.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Linked with -Wl,-z,relro.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Stack not executable.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Compiled with sufficient optimization.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Compiled with PIC/PIE.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Compiled as a position independent binary.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Good GNU Property note.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: DT_RPATH/DT_RUNPATH absent or rooted at /usr.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: No RWX segments found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Consistent use of the -fshort-enum option.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Compiled with -fstack-clash-protection.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: Compiled with sufficient stack protection.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: No text relocations found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: No thread cancellation problems.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: pass: GOT/PLT relocations are read only.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/libjsig.so: PASS.
Section_Size: Section '.gnu.build.attributes' found in 2 files, total size: 0xcc0
<mock-chroot> sh-4.4# annocheck -v --skip-cf-protection --skip-property-note --skip-glibcxx-assertions --skip-glibcxx-assertions --skip-stack-realign --section-size=.gnu.build.attributes /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so
annocheck: Version 8.36.
Section_Size: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: .gnu.build.attributes: 0x40c1b4
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: No gaps found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Linked with -Wl,-z,now.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Dynamic segment is present.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Compiled with -D_FORTIFY_SOURCE=2.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Linked with -Wl,-z,relro.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Stack not executable.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Compiled with sufficient optimization.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Compiled with PIC/PIE.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Compiled as a position independent binary.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: DT_RPATH/DT_RUNPATH absent or rooted at /usr.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: No RWX segments found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Consistent use of the -fshort-enum option.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Compiled with -fstack-clash-protection.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: Compiled with sufficient stack protection.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: No text relocations found.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: No thread cancellation problems.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: pass: GOT/PLT relocations are read only.
Hardened: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-3.fc30.x86_64/jre/lib/amd64/server/libjvm.so: PASS.
Section_Size: Section '.gnu.build.attributes' found in 1 files, total size: 0x40c1b4
Comment 4 Severin Gehwolf 2018-09-21 09:09:08 UTC 
Test build: https://koji.fedoraproject.org/koji/taskinfo?taskID=29780951
Comment 6 Fedora Update System 2018-10-05 09:19:42 UTC 
java-1.8.0-openjdk-1.8.0.181.b15-5.fc29 has been submitted as an update to Fedora 29. https://bodhi.fedoraproject.org/updates/FEDORA-2018-84996c0300
Comment 7 Fedora Update System 2018-10-05 09:19:50 UTC 
java-1.8.0-openjdk-1.8.0.181.b15-5.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-e72cd4f847
Comment 8 Fedora Update System 2018-10-05 18:24:09 UTC 
java-1.8.0-openjdk-1.8.0.181.b15-5.fc29 has been pushed to the Fedora 29 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-84996c0300
Comment 9 Fedora Update System 2018-10-05 19:32:47 UTC 
java-1.8.0-openjdk-1.8.0.181.b15-5.fc28 has been pushed to the Fedora 28 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-e72cd4f847
Comment 10 Fedora Update System 2018-10-08 15:39:52 UTC 
java-1.8.0-openjdk-1.8.0.181.b15-5.fc29 has been pushed to the Fedora 29 stable repository. If problems still persist, please make note of it in this bug report.
Comment 11 Fedora Update System 2018-10-09 03:10:00 UTC 
java-1.8.0-openjdk-1.8.0.181.b15-5.fc28 has been pushed to the Fedora 28 stable repository. If problems still persist, please make note of it in this bug report.
Comment 12 Severin Gehwolf 2018-10-12 13:55:35 UTC 
Re-opening as there is one more issue:

$ annocheck /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.181.b15-5.fc29.arm/jre/lib/arm/server/libjvm.so
Hardened: libjvm.so: fail: (component: _ZL4highd): Insufficient optimization level: -O0.
Hardened: libjvm.so: fail: (component: _ZL4highd): Insufficient optimization level: -O0.
Hardened: libjvm.so: MAYB: Gaps were detected in the annobin coverage.  Run with -v to list.
Hardened: libjvm.so: FAIL: Parts of the binary were compiled without sufficient optimization.

Note that JDK 8 on arm 32 bit is Zero.
Comment 13 Severin Gehwolf 2018-10-12 13:57:49 UTC 
# java -version
openjdk version "1.8.0_181"
OpenJDK Runtime Environment (build 1.8.0_181-b15)
OpenJDK Zero VM (build 25.181-b15, interpreted mode)
Comment 14 Severin Gehwolf 2018-10-16 11:01:21 UTC 
Proposed fix:
https://src.fedoraproject.org/rpms/java-1.8.0-openjdk/pull-request/31
Comment 15 jiri vanek 2018-11-13 18:34:24 UTC 
see also https://bugzilla.redhat.com/show_bug.cgi?id=1632174
Comment 16 Severin Gehwolf 2018-11-13 19:01:13 UTC 
This has been fixed for Zero now too.
Note You need to log in before you can comment on or make changes to this bug.