Bug 2264000 - annobin i686 binaries (annobin.so, annocheck, libannocheck.so) fail in annocheck
Summary: annobin i686 binaries (annobin.so, annocheck, libannocheck.so) fail in annocheck
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: annobin
Version: rawhide
Hardware: Unspecified
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Nick Clifton
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-02-13 09:29 UTC by Václav Kadlčík
Modified: 2024-06-28 00:07 UTC (History)
6 users (show)

Fixed In Version: annobin-12.40-1.fc40 annobin-12.40-1.fc38 annobin-12.40-1.fc39
Clone Of:
Environment:
Last Closed: 2024-02-29 01:56:49 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Václav Kadlčík 2024-02-13 09:29:39 UTC
Reported by CI for annobin-12.39-1.fc40 (https://artifacts.dev.testing-farm.io/efe8b85f-983f-42bc-88d0-a0467d795e8e/). That check was run by 12.38 though so
I tried to check the newest build by itself - and I do get FAILs. For example
for libannocheck:

# koji download-build --arch={noarch,x86_64,i686} annobin-12.39-1.fc40
# dnf -y install ./*x86_64* ./*noarch*
# wget https://kojipkgs.fedoraproject.org//packages/annobin/12.39/1.fc40/i686/annobin-libannocheck-debuginfo-12.39-1.fc40.i686.rpm
# annocheck -v --debug-rpm=annobin-libannocheck-debuginfo-12.39-1.fc40.i686.rpm annobin-libannocheck-12.39-1.fc40.i686.rpm

...
Hardened: ./usr/lib/libannocheck.so.0.0.0: MAYB: test: lto, reason: a region of code compiled without LTO was detected (stack_chk_fail_local.c)
...
Hardened: ./usr/lib/libannocheck.so.0.0.0: FAIL: fortify test because -D_FORTIFY_SOURCE=[2|3] was not present on the command line (stack_chk_fail_local.c) 
...


Reproducible: Always

Comment 1 Nick Clifton 2024-02-13 10:36:21 UTC
*sigh* It looks like another tweak is needed to the heuristics to detect glibc functions.

Comment 2 Nick Clifton 2024-02-13 10:52:13 UTC
Fixed in annobin-12.40-1.fc40

Comment 3 Fedora Update System 2024-02-13 11:05:54 UTC
FEDORA-2024-f4c0107c46 (annobin-12.40-1.fc39) has been submitted as an update to Fedora 39.
https://bodhi.fedoraproject.org/updates/FEDORA-2024-f4c0107c46

Comment 4 Fedora Update System 2024-02-13 11:05:55 UTC
FEDORA-2024-7c0998dafb (annobin-12.40-1.fc38) has been submitted as an update to Fedora 38.
https://bodhi.fedoraproject.org/updates/FEDORA-2024-7c0998dafb

Comment 5 Fedora Update System 2024-02-14 02:11:07 UTC
FEDORA-2024-f4c0107c46 has been pushed to the Fedora 39 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-f4c0107c46`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-f4c0107c46

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 6 Fedora Update System 2024-02-14 02:25:17 UTC
FEDORA-2024-7c0998dafb has been pushed to the Fedora 38 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-7c0998dafb`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-7c0998dafb

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 7 Fedora Update System 2024-02-29 01:56:49 UTC
FEDORA-2024-7c0998dafb (annobin-12.40-1.fc38) has been pushed to the Fedora 38 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 8 Fedora Update System 2024-02-29 02:05:57 UTC
FEDORA-2024-f4c0107c46 (annobin-12.40-1.fc39) has been pushed to the Fedora 39 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 9 Delmer Compton 2024-06-27 02:52:17 UTC Comment hidden (spam)

Note You need to log in before you can comment on or make changes to this bug.