Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-105480

Investigate annocheck warning

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Undefined Undefined
    • None
    • rhel-10.0
    • sqlite
    • No
    • Low
    • 2
    • rhel-databases
    • 1
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • DB-25_0, DB-25_1
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      https://artifacts.osci.redhat.com/testing-farm/5f378350-3f87-442d-a527-1a4d032ffecd/work-rpminspect446axlch/rpminspect/execute/data/guest/default-0/rpminspect-1/data/viewer.html

      Command: annocheck --ignore-unknown --verbose --profile=el10 /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so
      Exit Code: 0
      compared with the output of:
      Command: annocheck --ignore-unknown --verbose --profile=el10 --debug-dir=/usr/lib/debug/ /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so
      Exit Code: 1

      annocheck: Version 12.93.
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: pie test because the ELF file header has the correct type
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: info: written in C (source: DW_AT_language string).
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: info: seen tool Gimple version 14.
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: pic test because option found in DW_AT_producer string
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: optimization test because option found in DW_AT_producer string
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: branch-protection test because correct option found in DW_AT_producer string
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: info: seen tool GCC version 14.
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: lto test because detected in DW_AT_producer string
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: stack-prot test because option found in DW_AT_producer string
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: stack-clash test because option found in DW_AT_producer string
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: writable-got test
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: dynamic-segment test
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: bind-now test because BIND_NOW dynamic tag seen
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: dynamic-tags test because the BTI_PLT flag is present in the dynamic tags
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: info: seen tool Gas version 1.
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: gnu-stack test because stack segment exists with the correct permissions
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: gnu-relro test
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: notes test because annobin notes found in the .annobin.notes section
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: warnings test
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: MAYB: test: lto, reason: a region of code compiled without LTO was detected (/builddir/build/BUILD/tcl8.6.13/generic/tclStubLib.c)
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: info: For more information visit: https://sourceware.org/annobin/annobin.html/Test-lto.html
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: info: It is possible that the address range covers special case code for which the test should be skipped.
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: info: But this can only be checked if an address can be connected to a symbol.
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: info: Although the file does contain some symbol information, it does not appear to be enough.
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: implicit-values test because -Wimplicit-int and -Wimplicit-function-decalration enabled
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: fortify test because fortify note found
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: glibcxx-assertions test
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: skip: gaps test because string notes imply full coverage
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: skip: cf-protection test because not an x86_64 binary
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: entry test because no negative result detected
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: fast test because no negative result detected
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: skip: fips test because not a GO binary
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: skip: go-revision test because no GO compiled code found
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: instrumentation test because no negative result detected
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: load-segments test because no negative result detected
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: openssl-engine test because no negative result detected
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: production test because no negative result detected
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: property-note test because necessary features found in the .note.gnu.property section
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: run-path test because no negative result detected
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: short-enums test because no negative result detected
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: skip: stack-realign test because not an i686 executable
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: textrel test because no negative result detected
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: threads test because no negative result detected
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: PASS: unicode test because no negative result detected
      Hardened: /usr/lib64/tcl8.6/sqlite3/libtclsqlite3.so: Overall: FAIL (due to MAYB results).

              rh-ee-anezbeda Ales Nezbeda
              fjanus@redhat.com Filip Janus
              Ales Nezbeda Ales Nezbeda
              Vaclav Danek Vaclav Danek
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: