Reported by CI for annobin-12.39-1.fc40 (https://artifacts.dev.testing-farm.io/efe8b85f-983f-42bc-88d0-a0467d795e8e/). That check was run by 12.38 though so I tried to check the newest build by itself - and I do get FAILs. For example for libannocheck: # koji download-build --arch={noarch,x86_64,i686} annobin-12.39-1.fc40 # dnf -y install ./*x86_64* ./*noarch* # wget https://kojipkgs.fedoraproject.org//packages/annobin/12.39/1.fc40/i686/annobin-libannocheck-debuginfo-12.39-1.fc40.i686.rpm # annocheck -v --debug-rpm=annobin-libannocheck-debuginfo-12.39-1.fc40.i686.rpm annobin-libannocheck-12.39-1.fc40.i686.rpm ... Hardened: ./usr/lib/libannocheck.so.0.0.0: MAYB: test: lto, reason: a region of code compiled without LTO was detected (stack_chk_fail_local.c) ... Hardened: ./usr/lib/libannocheck.so.0.0.0: FAIL: fortify test because -D_FORTIFY_SOURCE=[2|3] was not present on the command line (stack_chk_fail_local.c) ... Reproducible: Always
*sigh* It looks like another tweak is needed to the heuristics to detect glibc functions.
Fixed in annobin-12.40-1.fc40
FEDORA-2024-f4c0107c46 (annobin-12.40-1.fc39) has been submitted as an update to Fedora 39. https://bodhi.fedoraproject.org/updates/FEDORA-2024-f4c0107c46
FEDORA-2024-7c0998dafb (annobin-12.40-1.fc38) has been submitted as an update to Fedora 38. https://bodhi.fedoraproject.org/updates/FEDORA-2024-7c0998dafb
FEDORA-2024-f4c0107c46 has been pushed to the Fedora 39 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-f4c0107c46` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-f4c0107c46 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2024-7c0998dafb has been pushed to the Fedora 38 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-7c0998dafb` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-7c0998dafb See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2024-7c0998dafb (annobin-12.40-1.fc38) has been pushed to the Fedora 38 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2024-f4c0107c46 (annobin-12.40-1.fc39) has been pushed to the Fedora 39 stable repository. If problem still persists, please make note of it in this bug report.
This comment was flagged a spam, view the edit history to see the original text if required.