This package contains the tools needed to annotate binary files created by
compilers, and also the tools needed to examine those annotations.
One of the tools is a plugin for GCC that records information about the
security options that were in effect when the binary was compiled.
Note - the plugin is automatically enabled in gcc builds via flags
provided by the redhat-rpm-macros package.
One of the tools is a plugin for Clang that records information about the
security options that were in effect when the binary was compiled.
One of the tools is a plugin for LLVM that records information about the
security options that were in effect when the binary was compiled.
One of the tools is a security checker which analyses the notes present in
annotated files and reports on any missing security options.
* Wed Mar 15 2023 MSVSphere Packaging Team <packager@msvsphere.ru> - 10.76-2
- Rebuilt for MSVSphere 9.1.
* Thu Feb 02 2023 Nick Clifton <nickc@redhat.com> - 11.08-2
- Re-enable building with LTO. (#2166579)
* Tue Jan 31 2023 Nick Clifton <nickc@redhat.com> - 11.08-1
- Annocheck: Fix atexit test. Fix recording of version numbers. (#2165528)
* Fri Jan 13 2023 Nick Clifton <nickc@redhat.com> - 11.06-1
- Annocheck: Fix handling of file built by multiple versions of gcc. (#2160700)
- Spec file: Enable annotated building.
* Thu Jan 12 2023 Nick Clifton <nickc@redhat.com> - 11.05-1
- Annocheck: Fix handling of empty files. (#2159292)
- Annocheck: Add crti.o and crtn.o to the list of known glibc special files. (#2158740)
- Annocheck: Fix memory leaks.
* Thu Jan 05 2023 Nick Clifton <nickc@redhat.com> - 11.02-1
- Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment. (#2158386)
- Annocheck: Add more special glibc filenames. (#2158100)
* Thu Dec 22 2022 Nick Clifton <nickc@redhat.com> - 10.99-1
- Annocheck: Improve handling of tool versions.
* Mon Dec 19 2022 Nick Clifton <nickc@redhat.com> - 10.98-1
- GCC Plugin: Fix building with gcc-13.
* Fri Dec 16 2022 Nick Clifton <nickc@redhat.com> - 10.97-1
- Annocheck: Add test for binaries built by cross compilers.
- Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
* Mon Dec 12 2022 Nick Clifton <nickc@redhat.com> - 10.95-1
- Annocheck: Use real filename rather than debuginfo filename. (#2152280)