Annocheck: Remove some false positives for Rust binaries.

Resolves: RHEL-37267
This commit is contained in:
Nick Clifton 2024-05-20 15:33:33 +01:00
parent 5ad311c88a
commit 11568e3b1c
2 changed files with 11 additions and 6 deletions

View File

@ -1,7 +1,7 @@
Name: annobin Name: annobin
Summary: Annotate and examine compiled binary files Summary: Annotate and examine compiled binary files
Version: 12.53 Version: 12.54
Release: 1%{?dist} Release: 1%{?dist}
License: GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later License: GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later
URL: https://sourceware.org/annobin/ URL: https://sourceware.org/annobin/
@ -371,8 +371,7 @@ export CFLAGS="$CFLAGS -DAARCH64_BRANCH_PROTECTION_SUPPORTED=1"
export CFLAGS="$CFLAGS $RPM_OPT_FLAGS %build_cflags" export CFLAGS="$CFLAGS $RPM_OPT_FLAGS %build_cflags"
export LDFLAGS="$LDFLAGS %build_ldflags" export LDFLAGS="$LDFLAGS %build_ldflags"
# Set target-specific security options to be used when building the # Set target-specific options to be used when building the Clang and LLVM plugins.
# Clang and LLVM plugins.
# FIXME: There should be a better way to do this. # FIXME: There should be a better way to do this.
%ifarch %{ix86} x86_64 %ifarch %{ix86} x86_64
export CLANG_TARGET_OPTIONS="-fcf-protection" export CLANG_TARGET_OPTIONS="-fcf-protection"
@ -380,7 +379,7 @@ export CLANG_TARGET_OPTIONS="-fcf-protection"
%ifarch aarch64 %ifarch aarch64
export CLANG_TARGET_OPTIONS="-mbranch-protection=standard" export CLANG_TARGET_OPTIONS="-mbranch-protection=standard"
%endif %endif
%ifnarch risv64 %ifnarch riscv64
export CLANG_TARGET_OPTIONS="$CLANG_TARGET_OPTIONS -flto" export CLANG_TARGET_OPTIONS="$CLANG_TARGET_OPTIONS -flto"
%endif %endif
@ -485,6 +484,7 @@ make check
%files docs %files docs
%license COPYING3 LICENSE %license COPYING3 LICENSE
%dir %{_datadir}/doc/annobin-plugin
%exclude %{_datadir}/doc/annobin-plugin/COPYING3 %exclude %{_datadir}/doc/annobin-plugin/COPYING3
%exclude %{_datadir}/doc/annobin-plugin/LICENSE %exclude %{_datadir}/doc/annobin-plugin/LICENSE
%doc %{_datadir}/doc/annobin-plugin/annotation.proposal.txt %doc %{_datadir}/doc/annobin-plugin/annotation.proposal.txt
@ -514,6 +514,7 @@ make check
%{ANNOBIN_GCC_PLUGIN_DIR}/annobin.so.0 %{ANNOBIN_GCC_PLUGIN_DIR}/annobin.so.0
%{ANNOBIN_GCC_PLUGIN_DIR}/annobin.so.0.0.0 %{ANNOBIN_GCC_PLUGIN_DIR}/annobin.so.0.0.0
%{ANNOBIN_GCC_PLUGIN_DIR}/%{aver} %{ANNOBIN_GCC_PLUGIN_DIR}/%{aver}
%dir %{annobin_source_dir}
%{annobin_source_dir}/latest-annobin.tar.xz %{annobin_source_dir}/latest-annobin.tar.xz
%endif %endif
@ -531,6 +532,10 @@ make check
#--------------------------------------------------------------------------------- #---------------------------------------------------------------------------------
%changelog %changelog
* Mon May 20 2024 Nick Clifton <nickc@redhat.com> - 12.54-1
- Spec File: Add annobin plugin document directory to the files section. (#2279779)
- Annocheck: Remove some false positives for Rust binaries. (#2280239) (RHEL-37267)
* Thu May 09 2024 Nick Clifton <nickc@redhat.com> - 12.53-1 * Thu May 09 2024 Nick Clifton <nickc@redhat.com> - 12.53-1
- Annocheck: Defer passing the branch protection test until all notes have been checked. - Annocheck: Defer passing the branch protection test until all notes have been checked.
- GCC Plugin: Add extra code for detecting the branch protection setting. (RHEL-35958) - GCC Plugin: Add extra code for detecting the branch protection setting. (RHEL-35958)

View File

@ -1 +1 @@
SHA512 (annobin-12.53.tar.xz) = c8db1e76f13e2384c28682682aaeebf652c7077024b0b7a3db73a28da4cdc28bf78c2991cb7bd0ee4c72d270712e74243df12f832ea50b46c02228240f84aa63 SHA512 (annobin-12.54.tar.xz) = 1f7073bce6274a898bb540101db7e27c498ec59a74a2001826a46e356c885f575dc952cda425155bfe26c90049c23b154b2cf5d36b73e5d62df5c7cd82c38977