Bug 1703500
| Summary: | annobin: Missing _FORTIFY_SOURCE macro results in MAYBE | |||
|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | Florian Weimer <fweimer> | |
| Component: | annobin | Assignee: | Nick Clifton <nickc> | |
| Status: | CLOSED ERRATA | QA Contact: | Martin Cermak <mcermak> | |
| Severity: | unspecified | Docs Contact: | ||
| Priority: | unspecified | |||
| Version: | 8.1 | CC: | fweimer, law, mcermak, nickc | |
| Target Milestone: | rc | Flags: | pm-rhel:
mirror+
|
|
| Target Release: | 8.1 | |||
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | ||||
| Fixed In Version: | annobin-8.77-1.el8 | Doc Type: | No Doc Update | |
| Doc Text: | Story Points: | --- | ||
| Clone Of: | 1703499 | |||
| : | 1904479 (view as bug list) | Environment: | ||
| Last Closed: | 2019-11-05 20:54:32 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | 1703499 | |||
| Bug Blocks: | ||||
|
Description
Florian Weimer
2019-04-26 15:18:16 UTC
A fix is available (and applied in rawhide: annobin-8.76-1.fc31). Waiting for the necessary ACKs in order to apply it here. Fixed in annobin-8.76-1.el8 Nick, I'm not sure if this is really fixed. Here is what I see:
=======
scr0 8.1 Server x86_64 # rpm -q annobin redhat-rpm-config
annobin-8.76-2.el8.x86_64
redhat-rpm-config-119-1.el8.noarch
scr0 8.1 Server x86_64 # echo 'int main(void) {}' > u.c
scr0 8.1 Server x86_64 # gcc `rpm --eval "%build_cflags %build_ldflags" | sed s/-Wp,-D_FORTIFY_SOURCE=2//` u.c
scr0 8.1 Server x86_64 # annocheck -v a.out
annocheck: Version 8.76.
Hardened: a.out: binary producer gcc version 8.
Hardened: a.out: MAYB: (component: main): -D_FORTIFY_SOURCE setting not recorded.
Hardened: a.out: MAYB: (component: main): -D_FORTIFY_SOURCE setting not recorded.
Hardened: a.out: PASS: No gaps found.
Hardened: a.out: PASS: Linked with -Wl,-z,now.
Hardened: a.out: PASS: Compiled with -fcf-protection.
Hardened: a.out: PASS: One dynamic section/segment found.
Hardened: a.out: PASS: Entry point instruction is ENDBR.
Hardened: a.out: MAYB: Some parts of the binary do not record if -D_FORTIFY_SOURCE=2 was used.
Hardened: a.out: PASS: Compiled with -D_GLIBCXX_ASSERTIONS.
Hardened: a.out: PASS: Linked with -Wl,-z,relro.
Hardened: a.out: PASS: Stack not executable.
Hardened: a.out: PASS: Compiled with sufficient optimization.
Hardened: a.out: PASS: Compiled with PIC/PIE.
Hardened: a.out: PASS: Compiled as a position independent binary.
Hardened: a.out: PASS: Good GNU Property note.
Hardened: a.out: PASS: DT_RPATH/DT_RUNPATH absent or rooted at /usr.
Hardened: a.out: PASS: No RWX segments found.
Hardened: a.out: PASS: Consistent use of the -fshort-enum option.
Hardened: a.out: PASS: Compiled with -fstack-clash-protection.
Hardened: a.out: PASS: Compiled with sufficient stack protection.
Hardened: a.out: skip: Test for stack realignment support. (Only needed on i686 binaries).
Hardened: a.out: PASS: No text relocations found.
Hardened: a.out: PASS: No thread cancellation problems.
Hardened: a.out: PASS: GOT/PLT relocations are read only.
(1) scr0 8.1 Server x86_64 #
=======
What upstream commit fixes this issue, please?
(In reply to Martin Cermak from comment #4) > Nick, I'm not sure if this is really fixed. Agreed :-( I fixes the wrong problem. Moving back to ASSIGNED. Trying again... :-) Fixerd in annobin-8.77-1.el8 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:3356 |