Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-53215

binutils-2.41-47.el10 fails rpminspect's annocheck "hardened" test

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Minor Minor
    • rhel-10.0.beta
    • rhel-10.0.beta
    • binutils
    • None
    • binutils-2.41-48.el10
    • No
    • None
    • 1
    • sst_pt_gcc
    • ssg_platform_tools
    • 26
    • 26
    • 5
    • False
    • Hide

      None

      Show
      None
    • No
    • GCC Sprint 9
    • Unspecified Release Note Type - Unknown
    • None

      What were you trying to do that didn't work?

      rminspect test fails: https://artifacts.osci.redhat.com/testing-farm/3e90bb42-3a20-4510-924c-05091a0aa5d0/work-rpminspectcjdt75ig/rpminspect/execute/data/guest/default-0/rpminspect-1/data/viewer.html

      annocheck 'hardened' test fails for /usr/bin/ld.gold on aarch64
      Anyone
      Suggested remedy:
      Ensure all object files are compiled with '-O2 -D_FORTIFY_SOURCE=2', and that all appropriate headers are included (no implicit function declarations). Symbols may also appear as unfortified if the compiler is unable to determine the size of a buffer, which is not necessarily an error.
      
      Command: annocheck --ignore-unknown --verbose --profile=el10 --debug-dir=/usr/lib/debug/ /usr/bin/ld.gold
      Exit Code: 1
      
      annocheck: Version 12.59.
      Hardened: /usr/bin/ld.gold: PASS: pie test because the ELF file header has the correct type 
      Hardened: /usr/bin/ld.gold: info: written in C++ (source: DW_AT_language string).
      Hardened: /usr/bin/ld.gold: PASS: pic test because option found in DW_AT_producer string 
      Hardened: /usr/bin/ld.gold: PASS: stack-prot test because option found in DW_AT_producer string 
      Hardened: /usr/bin/ld.gold: PASS: optimization test because option found in DW_AT_producer string 
      Hardened: /usr/bin/ld.gold: PASS: branch-protection test because correct option found in DW_AT_producer string 
      Hardened: /usr/bin/ld.gold: info: ALSO written in C (source: DW_AT_language string).
      Hardened: /usr/bin/ld.gold: PASS: writable-got test 
      Hardened: /usr/bin/ld.gold: PASS: dynamic-segment test 
      Hardened: /usr/bin/ld.gold: PASS: bind-now test 
      Hardened: /usr/bin/ld.gold: PASS: dynamic-tags test because the BTI_PLT flag is present in the dynamic tags 
      Hardened: /usr/bin/ld.gold: PASS: gnu-stack test because stack segment exists with the correct permissions 
      Hardened: /usr/bin/ld.gold: PASS: gnu-relro test 
      Hardened: /usr/bin/ld.gold: PASS: notes test because annobin notes found in the .annobin.notes section 
      Hardened: /usr/bin/ld.gold: skip: fast test because function abi-note.c is part of the C library's static code and does use math functions 
      Hardened: /usr/bin/ld.gold: skip: lto test because function abi-note.c is part of the C library which is deliberately built without LTO 
      Hardened: /usr/bin/ld.gold: PASS: implicit-values test because -Wimplicit-int and -Wimplicit-function-decalration enabled 
      Hardened: /usr/bin/ld.gold: PASS: stack-clash test because compiled with -fstack-clash-protection 
      Hardened: /usr/bin/ld.gold: skip: fortify test because function abi-note.c is part of the C library, and as such it does not need fortification 
      Hardened: /usr/bin/ld.gold: PASS: glibcxx-assertions test 
      Hardened: /usr/bin/ld.gold: PASS: warnings test 
      Hardened: /usr/bin/ld.gold: MAYB: test: lto, reason: a region of code compiled without LTO was detected (../../gold/main.cc)
      Hardened: /usr/bin/ld.gold: info: For more information visit: https://sourceware.org/annobin/annobin.html/Test-lto.html
      Hardened: /usr/bin/ld.gold: info: It is possible that the address range covers special case code for which the test should be skipped.
      Hardened: /usr/bin/ld.gold: info: But this can only be checked if an address can be connected to a symbol.
      Hardened: /usr/bin/ld.gold: info: Although the file does contain some symbol information, it does not appear to be enough.
      Hardened: /usr/bin/ld.gold: PASS: fortify test because fortify note found 
      Hardened: /usr/bin/ld.gold: skip: gaps test because string notes imply full coverage 
      Hardened: /usr/bin/ld.gold: skip: cf-protection test because not an x86_64 binary 
      Hardened: /usr/bin/ld.gold: PASS: entry test 
      Hardened: /usr/bin/ld.gold: skip: fips test because not a GO binary 
      Hardened: /usr/bin/ld.gold: skip: go-revision test because no GO compiled code found 
      Hardened: /usr/bin/ld.gold: PASS: instrumentation test 
      Hardened: /usr/bin/ld.gold: PASS: openssl-engine test 
      Hardened: /usr/bin/ld.gold: PASS: production test 
      Hardened: /usr/bin/ld.gold: PASS: property-note test because properly formatted .note.gnu.property section found 
      Hardened: /usr/bin/ld.gold: PASS: run-path test 
      Hardened: /usr/bin/ld.gold: PASS: rwx-seg test 
      Hardened: /usr/bin/ld.gold: PASS: short-enums test 
      Hardened: /usr/bin/ld.gold: skip: stack-realign test because not an i686 executable 
      Hardened: /usr/bin/ld.gold: PASS: textrel test 
      Hardened: /usr/bin/ld.gold: PASS: threads test 
      Hardened: /usr/bin/ld.gold: PASS: unicode test 
      Hardened: /usr/bin/ld.gold: Overall: FAIL (due to MAYB results).
      

      It passed with the previously tested build, binutils-2.41-45.el10: https://artifacts.osci.redhat.com/testing-farm/2b941d6d-7cd6-4771-8cb0-437ce9b99a0a/work-rpminspecte629u0jg/rpminspect/execute/data/guest/default-0/rpminspect-1/data/viewer.html#

      Please provide the package NVR for which bug is seen:

      binutils-2.41-47.el10

            mprchlik@redhat.com Milos Prchlik
            mprchlik@redhat.com Milos Prchlik
            Nick Clifton Nick Clifton
            Milos Prchlik Milos Prchlik
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

              Created:
              Updated: