Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-45712

annocheck reports stack-prot test fails for grub2-ppc64le-modules (on ppc64le)

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • rhel-9.8
    • rhel-9.4
    • grub2
    • None
    • grub2-2.06-116.el9
    • None
    • Low
    • 3
    • rhel-bootloader
    • ssg_display
    • 2
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • Bootloader Sprint 2025.3, Bootloader Sprint 2025.4, Bootloader Sprint 2025.5
    • ppc64le
    • None

      What were you trying to do that didn't work?

      Running annocheck stack-prot test against grub2-ppc64le-modules reports failures for .mod files under /usr/lib/grub/powerpc-ieee1275 and for the /usr/lib/grub/powerpc-ieee1275/core.elf and /usr/lib/grub/powerpc-ieee1275/kernel.img files.

      Please provide the package NVR for which bug is seen:

      grub2-ppc64le-modules-2.06-77.el9.noarch

      How reproducible:

      Deterministic.

      Steps to reproduce

      1. dnf install -y annobin-annocheck
      2. dnf debuginfo-install -y grub2-ppc64le-modules
      3. rpm -ql grub2-ppc64le-modules | xargs annocheck --verbose --ignore-unknown --ignore-links --skip-all --test-stack-prot

      Actual results

      Example of reported failure for /usr/lib/grub/powerpc-ieee1275/btrfs.mod file (note that there are many other files reported but including just one example here as other files fail for the same reason):

      Hardened: /usr/lib/grub/powerpc-ieee1275/btrfs.mod: MAYB: test: stack-prot, reason: could not determine how the code was created
      Hardened: /usr/lib/grub/powerpc-ieee1275/btrfs.mod: info: For more information visit: https://sourceware.org/annobin/annobin.html/Test-stack-prot.html
      Hardened: /usr/lib/grub/powerpc-ieee1275/btrfs.mod: WARN: This can happen if the program is compiled from a language unknown to annocheck
      Hardened: /usr/lib/grub/powerpc-ieee1275/btrfs.mod: WARN:  or because there are no annobin build notes (could they be in a separate file ?)
      Hardened: /usr/lib/grub/powerpc-ieee1275/btrfs.mod: WARN: For more details see https://sourceware.org/annobin/annobin.html/Absence-of-compiled-code.html
      Hardened: /usr/lib/grub/powerpc-ieee1275/btrfs.mod: Overall: FAIL (due to MAYB results).
      

      Expected results

      No failures for the stack-prot test - failures are either fixed or in case the failures are expected they are documented in the rpminspect.yaml file to have the test skipped including a comment explaining why.

              rh-ee-lsandova Leo Sandoval
              mmarhefk@redhat.com Matus Marhefka
              bootloader -eng-team bootloader -eng-team
              Release Test Team Release Test Team
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated: