firefox/rpminspect.yaml
Jan Horak 318efa8c2a rpminspect.yaml
Documentation contains example of wrong unicode data to demonstrate vulnerability
2024-12-03 21:45:41 +01:00

24 lines
871 B
YAML

---
inspections:
# this inspection is taking way too long and causing timeouts
abidiff: off
# the badfunc is triggered by inet_addr and inet_ntoa which is in the third party
# libraries bundled to firefox sources.
badfuncs:
ignore:
- /usr/lib*/firefox/libxul.so
- /app/lib*/firefox/libxul.so
# We don't plan to build Firefox with the LTO because it brings more problems
# than benefits to the package.
annocheck:
- hardened: --ignore-unknown --verbose --skip-lto --skip-cf-protection --skip-property-note
runpath:
# rpath to bundled content
allowed_paths:
- /usr/lib64/firefox/bundled/lib64
- /app/lib64/firefox/bundled/lib64
unicode:
ignore:
# documentation contains example of wrong unicode data to demonstrate vulnerability
- wasi-sdk-20/src/llvm-project/clang-tools-extra/docs/clang-tidy/checks/misc/misleading-bidirectional.rst