Mock Version: 3.5 Mock Version: 3.5 Mock Version: 3.5 ENTER ['do_with_status'](['bash', '--login', '-c', '/usr/bin/rpmbuild -bs --noclean --target x86_64 --nodeps /builddir/build/SPECS/annobin.spec'], chrootPath='/var/lib/mock/dist-an23-build-253956-63547/root'env={'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'}shell=Falselogger=timeout=86400uid=990gid=135user='mockbuild'nspawn_args=[]unshare_net=TrueprintOutput=False) Executing command: ['bash', '--login', '-c', '/usr/bin/rpmbuild -bs --noclean --target x86_64 --nodeps /builddir/build/SPECS/annobin.spec'] with env {'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'} and shell False Building target platforms: x86_64 Building for target x86_64 setting SOURCE_DATE_EPOCH=1681344000 Wrote: /builddir/build/SRPMS/annobin-12.03-2.an23.src.rpm Child return code was: 0 ENTER ['do_with_status'](['bash', '--login', '-c', '/usr/bin/rpmbuild -bb --noclean --target x86_64 --nodeps /builddir/build/SPECS/annobin.spec'], chrootPath='/var/lib/mock/dist-an23-build-253956-63547/root'env={'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'}shell=Falselogger=timeout=86400uid=990gid=135user='mockbuild'nspawn_args=[]unshare_net=TrueprintOutput=False) Executing command: ['bash', '--login', '-c', '/usr/bin/rpmbuild -bb --noclean --target x86_64 --nodeps /builddir/build/SPECS/annobin.spec'] with env {'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'} and shell False Building target platforms: x86_64 Building for target x86_64 setting SOURCE_DATE_EPOCH=1681344000 Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.N3cKDI + umask 022 Requires: (gcc >= 12 and gcc < 13) + cd /builddir/build/BUILD + '[' -z 12.2.1-1 ']' + echo 'Requires: (gcc >= 12 and gcc < 13)' + cd /builddir/build/BUILD + rm -rf annobin-12.03 + /usr/lib/rpm/rpmuncompress -x /builddir/build/SOURCES/annobin-12.03.tar.xz + STATUS=0 + '[' 0 -ne 0 ']' + cd annobin-12.03 + /usr/bin/chmod -Rf a+rX,u+w,g-w,o-w . + RPM_EC=0 ++ jobs -p + exit 0 Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.iaETaY + umask 022 + cd /builddir/build/BUILD + CFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/anolis/anolis-hardened-cc1 -fstack-protector-strong -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection' + export CFLAGS + CXXFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/anolis/anolis-hardened-cc1 -fstack-protector-strong -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection' + export CXXFLAGS + FFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/anolis/anolis-hardened-cc1 -fstack-protector-strong -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules' + export FFLAGS + FCFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/anolis/anolis-hardened-cc1 -fstack-protector-strong -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules' + export FCFLAGS + LDFLAGS='-Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/anolis/anolis-hardened-ld -Wl,--build-id=sha1 ' + export LDFLAGS + LT_SYS_LIBRARY_PATH=/usr/lib64: + export LT_SYS_LIBRARY_PATH + CC=gcc + export CC + CXX=g++ + export CXX + cd annobin-12.03 + CFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/anolis/anolis-hardened-cc1 -fstack-protector-strong -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection' + export CFLAGS + CXXFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/anolis/anolis-hardened-cc1 -fstack-protector-strong -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection' + export CXXFLAGS + FFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/anolis/anolis-hardened-cc1 -fstack-protector-strong -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules' + export FFLAGS + FCFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/anolis/anolis-hardened-cc1 -fstack-protector-strong -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules' + export FCFLAGS + LDFLAGS='-Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/anolis/anolis-hardened-ld -Wl,--build-id=sha1 ' + export LDFLAGS + LT_SYS_LIBRARY_PATH=/usr/lib64: + export LT_SYS_LIBRARY_PATH + CC=gcc + export CC + CXX=g++ + export CXX + /usr/bin/meson setup --buildtype=plain --prefix=/usr --libdir=/usr/lib64 --libexecdir=/usr/libexec --bindir=/usr/bin --sbindir=/usr/sbin --includedir=/usr/include --datadir=/usr/share --mandir=/usr/share/man --infodir=/usr/share/info --localedir=/usr/share/locale --sysconfdir=/etc --localstatedir=/var --sharedstatedir=/var/lib --wrap-mode=nodownload --auto-features=enabled . anolis-linux-build -Ddebuginfod=disabled -Dclang-plugin=true -Dllvm-plugin=true -Dannocheck=false The Meson build system Version: 1.0.1 Source dir: /builddir/build/BUILD/annobin-12.03 Build dir: /builddir/build/BUILD/annobin-12.03/anolis-linux-build Build type: native build Project name: annobin Project version: 12.03 C compiler for the host machine: gcc (gcc 12.2.1 "gcc (GCC) 12.2.1 20221121 (Anolis OS 12.2.1-1)") C linker for the host machine: gcc ld.bfd 2.39-1 C++ compiler for the host machine: g++ (gcc 12.2.1 "g++ (GCC) 12.2.1 20221121 (Anolis OS 12.2.1-1)") C++ linker for the host machine: g++ ld.bfd 2.39-1 Host machine cpu family: x86_64 Host machine cpu: x86_64 Library debuginfod skipped: feature debuginfod disabled Configuring annobin-global.h using configuration Has header "memory.h" : YES Has header "stdint.h" : YES Has header "stdlib.h" : YES Has header "strings.h" : YES Has header "string.h" : YES Has header "sys/stat.h" : YES Has header "sys/types.h" : YES Has header "sys/wait.h" : YES Has header "unistd.h" : YES Configuring config.h using configuration Program g++ found: YES (/usr/bin/g++) Program clang++ found: YES (/usr/bin/clang++) Program clang++ found: YES (/usr/bin/clang++) Program abi-test found: YES (/builddir/build/BUILD/annobin-12.03/tests/abi-test) Program active-checks-test found: YES (/builddir/build/BUILD/annobin-12.03/tests/active-checks-test) Program compile-test found: YES (/builddir/build/BUILD/annobin-12.03/tests/compile-test) Program function-sections-test found: YES (/builddir/build/BUILD/annobin-12.03/tests/function-sections-test) Program hardening-fail-test found: YES (/builddir/build/BUILD/annobin-12.03/tests/hardening-fail-test) Program hardening-test found: YES (/builddir/build/BUILD/annobin-12.03/tests/hardening-test) Program instrumentation-test found: YES (/builddir/build/BUILD/annobin-12.03/tests/instrumentation-test) Program ldconfig-test found: YES (/builddir/build/BUILD/annobin-12.03/tests/ldconfig-test) Program missing-notes-test found: YES (/builddir/build/BUILD/annobin-12.03/tests/missing-notes-test) Program property-note-test found: YES (/builddir/build/BUILD/annobin-12.03/tests/property-note-test) Program section-size-test found: YES (/builddir/build/BUILD/annobin-12.03/tests/section-size-test) Program llvm-test found: YES (/builddir/build/BUILD/annobin-12.03/tests/llvm-test) Program clang-test found: YES (/builddir/build/BUILD/annobin-12.03/tests/clang-test) Program perl found: YES (/usr/bin/perl) Program pod2man found: YES (/usr/bin/pod2man) Program makeinfo found: YES (/usr/bin/makeinfo) Program texi2dvi found: YES (/usr/bin/texi2dvi) Build targets in project: 18 annobin 12.03 Toolchain C++ Compiler : gcc C++ Linker : ld.bfd Build LLVM plugin : True Build Clang plugin : True Build annocheck : False Build documentation: True debuginfod support : False User defined options auto_features : enabled bindir : /usr/bin buildtype : plain datadir : /usr/share includedir : /usr/include infodir : /usr/share/info libdir : /usr/lib64 libexecdir : /usr/libexec localedir : /usr/share/locale localstatedir : /var mandir : /usr/share/man prefix : /usr sbindir : /usr/sbin sharedstatedir : /var/lib sysconfdir : /etc wrap_mode : nodownload annocheck : false clang-plugin : true debuginfod : disabled llvm-plugin : true Found ninja-1.11.1 at /usr/bin/ninja + /usr/bin/meson compile -C anolis-linux-build -j 80 --verbose ninja: Entering directory `/builddir/build/BUILD/annobin-12.03/anolis-linux-build' [1/17] /usr/bin/meson --internal exe --capture doc/run-on-binaries.pod -- /usr/bin/perl /builddir/build/BUILD/annobin-12.03/doc/texi2pod.pl -Dman -Drun-on-binaries ../doc/annobin.texi [2/17] /usr/bin/meson --internal exe --capture doc/built-by.pod -- /usr/bin/perl /builddir/build/BUILD/annobin-12.03/doc/texi2pod.pl -Dman -Dbuilt-by ../doc/annobin.texi [3/17] /usr/bin/meson --internal exe --capture doc/check-abi.pod -- /usr/bin/perl /builddir/build/BUILD/annobin-12.03/doc/texi2pod.pl -Dman -Dcheck-abi ../doc/annobin.texi [4/17] /usr/bin/meson --internal exe --capture doc/hardened.pod -- /usr/bin/perl /builddir/build/BUILD/annobin-12.03/doc/texi2pod.pl -Dman -Dhardened ../doc/annobin.texi [5/17] /usr/bin/meson --internal exe --capture doc/annobin.pod -- /usr/bin/perl /builddir/build/BUILD/annobin-12.03/doc/texi2pod.pl -Dman -Dannobin ../doc/annobin.texi [6/17] /usr/bin/meson --internal exe --capture doc/annocheck.pod -- /usr/bin/perl /builddir/build/BUILD/annobin-12.03/doc/texi2pod.pl -Dman -Dannocheck ../doc/annobin.texi [7/17] /usr/bin/meson --internal exe --capture doc/run-on-binaries.1 -- /usr/bin/pod2man '--center=RPM Development Tools' --release=annobin-1 --section=1 doc/run-on-binaries.pod [8/17] /usr/bin/meson --internal exe --capture doc/check-abi.1 -- /usr/bin/pod2man '--center=RPM Development Tools' --release=annobin-1 --section=1 doc/check-abi.pod [9/17] /usr/bin/meson --internal exe --capture doc/built-by.1 -- /usr/bin/pod2man '--center=RPM Development Tools' --release=annobin-1 --section=1 doc/built-by.pod [10/17] /usr/bin/meson --internal exe --capture doc/hardened.1 -- /usr/bin/pod2man '--center=RPM Development Tools' --release=annobin-1 --section=1 doc/hardened.pod [11/17] /usr/bin/meson --internal exe --capture doc/annocheck.1 -- /usr/bin/pod2man '--center=RPM Development Tools' --release=annobin-1 --section=1 doc/annocheck.pod [12/17] /usr/bin/meson --internal exe --capture doc/annobin.1 -- /usr/bin/pod2man '--center=RPM Development Tools' --release=annobin-1 --section=1 doc/annobin.pod [13/17] /usr/bin/makeinfo --html -I /builddir/build/BUILD/annobin-12.03/doc -o doc/annobin.htp ../doc/annobin.texi [14/17] /usr/bin/texi2dvi --pdf --batch --build-dir=. -o doc/annobin.pdf ../doc/annobin.texi This is pdfTeX, Version 3.141592653-2.6-1.40.24 (TeX Live 2022) (preloaded format=pdfetex) restricted \write18 enabled. entering extended mode (../../.././../doc/annobin.texi (/usr/share/texlive/texmf-dist/tex/texinfo/texinfo.tex Loading texinfo [version 2022-11-07.17]: pdf, fonts, glyphs, page headings, tables, conditionals, indexing, sectioning, toc, environments, defuns, macros, cross references, insertions, (/usr/share/texlive/texmf-dist/tex/generic/epsf/epsf.tex This is `epsf.tex' v2.7.4 <14 February 2011> ) localization, formatting, microtype, and turning on texinfo input format.) [1{/usr/share/texlive/texmf-var/fonts/map/pdftex/updmap/pdftex.map}] [2] [-1] [-2] Chapter 1 Chapter 2 [1] [2] [3] [4] [5] [6] Chapter 3 [7] [8] Overfull \hbox (123.37584pt too wide) in paragraph at lines 433--433 [] @smalltt GA$3p3 0x00000010 OPEN Ap-plies to re-g ion from 0x8a0 to 0x8c6 (hello.c)[] Overfull \hbox (76.12639pt too wide) in paragraph at lines 434--434 [] @smalltt GA$gcc 7.2.1 20170915 0x00000000 OPEN Ap-plies to re-g ion from 0x8a0 to 0x8c6[] Overfull \hbox (76.12639pt too wide) in paragraph at lines 435--435 [] @smalltt GA*GOW:0x452b 0x00000000 OPEN Ap-plies to re-g ion from 0x8a0 to 0x8c6[] Overfull \hbox (76.12639pt too wide) in paragraph at lines 436--436 [] @smalltt GA*strong 0x00000000 OPEN Ap-plies to re-g ion from 0x8a0 to 0x8c6[] Overfull \hbox (104.47606pt too wide) in paragraph at lines 437--437 [] @smalltt GA*GOW:0x412b 0x00000010 func Ap-plies to re-g ion from 0x8c0 to 0x8c6 (baz)[] [9] [10] [11] [12] [13] Chapter 4 [14] [15] [16] [17] Overfull \hbox (147.00056pt too wide) in paragraph at lines 1151--1151 [] @smalltt Ex-am-ple: FAIL: auto-var-init test be-cause -ftrivial-auto-var- init not used or set to 'uninitialized'[] [18] Overfull \hbox (38.32683pt too wide) in paragraph at lines 1216--1216 [] @smalltt Prob-lem: Un-pro-tected AArch64 bi-na-ries are vul-ner-a-ble to ROP/JOP style attacks[] [19] Overfull \hbox (19.42705pt too wide) in paragraph at lines 1225--1225 [] @smalltt Ex-am-ple: FAIL: branch pro-tec-tion test be-cause the -mbranch- protection op- Cross reference values unknown; you must run TeX again. Overfull \hbox (19.42705pt too wide) in paragraph at lines 1268--1268 [] @smalltt Waive If: The ap-pli-ca-tion is built by a com-piler that does no t sup-port CET[] Overfull \hbox (14.7021pt too wide) in paragraph at lines 1270--1270 [] @smalltt Ex-am-ple: FAIL: cf-protection test be-cause only branch pro-tec -tion enabled[] Overfull \hbox (14.7021pt too wide) in paragraph at lines 1271--1271 [] @smalltt Ex-am-ple: FAIL: cf-protection test be-cause only re-turn pro-te c-tion enabled[] Overfull \hbox (52.50166pt too wide) in paragraph at lines 1273--1273 [] @smalltt Ex-am-ple: FAIL: cf-protection test be-cause in-suf-fi-cient Con -trol Flow sanitization[] Overfull \hbox (57.22661pt too wide) in paragraph at lines 1274--1274 [] @smalltt Ex-am-ple: FAIL: cf-protection test be-cause no .note.gnu.proper ty sec-tion = no con- Overfull \hbox (52.50166pt too wide) in paragraph at lines 1276--1276 [] @smalltt Ex-am-ple: FAIL: cf-protection test be-cause con-trol flow pro-t ec-tion is not enabled[] Underfull \hbox (badness 10000) in paragraph at lines 1282--1283 [][][]@texttt https:// newsroom. intel. com/ editorials/ Underfull \hbox (badness 10000) in paragraph at lines 1282--1283 @texttt intel-cet-answers-call-protect-common-malware-threats/ # gs. [20] [21] Underfull \hbox (badness 10000) in paragraph at lines 1352--1354 []@textrm (+20) For more in-for-ma-tion on CET see: [][]@texttt https:// www. intel. Underfull \hbox (badness 10000) in paragraph at lines 1352--1354 @texttt com/ content/ dam/ develop/ external/ us/ en/ documents/ Overfull \hbox (52.50166pt too wide) in paragraph at lines 1360--1360 [] @smalltt Prob-lem: Pro-grams with more than one dy-namic sec-tion will no t be loaded properly[] Overfull \hbox (43.05177pt too wide) in paragraph at lines 1364--1364 [] @smalltt Ex-am-ple: FAIL: dy-namic seg-ment test be-cause mul-ti-ple dy-n amic sec-tions detected[] Overfull \hbox (38.32683pt too wide) in paragraph at lines 1384--1384 [] @smalltt Prob-lem: Un-pro-tected AArch64 bi-na-ries are vul-ner-a-ble to ROP/JOP style attacks[] Overfull \hbox (14.7021pt too wide) in paragraph at lines 1390--1390 [] @smalltt Ex-am-ple: FAIL: dy-namic tags test be-cause BTI_PLT and PAC_PLT flags miss- Overfull \hbox (38.32683pt too wide) in paragraph at lines 1391--1391 [] @smalltt Ex-am-ple: FAIL: dy-namic tags test be-cause BTI_PLT flag is mis s-ing from the dy- Overfull \hbox (38.32683pt too wide) in paragraph at lines 1392--1392 [] @smalltt Ex-am-ple: FAIL: dy-namic tags test be-cause PAC_PLT flag is mis s-ing from the dy- [22] Overfull \hbox (47.77672pt too wide) in paragraph at lines 1460--1460 [] @smalltt Ex-am-ple: FAIL: fast test be-cause some parts of the pro-gram w ere com-piled with - [23] Overfull \hbox (85.57628pt too wide) in paragraph at lines 1483--1483 [] @smalltt Ex-am-ple: FAIL: for-tify test be-cause -D_FORTIFY_SOURCE=[2|3] was not present on the com- Overfull \hbox (14.7021pt too wide) in paragraph at lines 1485--1485 [] @smalltt Ex-am-ple: FAIL: for-tify test be-cause no in-di-ca-tion that th e nec-es-sary op- Overfull \hbox (80.85133pt too wide) in paragraph at lines 1515--1515 [] @smalltt Prob-lem: With-out com-plete cov-er-age of the com-piled code, o ther tests can miss problems[] [24] Overfull \hbox (76.12639pt too wide) in paragraph at lines 1541--1541 [] @smalltt Ex-am-ple: FAIL: glibcxx-assertions test be-cause com-piled with -out -D_GLIBCXX_ASSERTIONS[] Underfull \hbox (badness 10000) in paragraph at lines 1550--1551 [][][]@texttt https:// gcc. gnu. org/ onlinedocs/ libstdc++/ manual/ Overfull \hbox (71.40144pt too wide) in paragraph at lines 1561--1561 [] @smalltt Prob-lem: An at-tacker could al-ter how an ap-pli-ca-tions in-te r-acts with shared libraries[] [25] Overfull \hbox (61.95155pt too wide) in paragraph at lines 1603--1603 [] @smalltt Ex-am-ple: FAIL: gnu-stack test be-cause the .stack sec-tion has in-cor-rect permissions[] Overfull \hbox (19.42705pt too wide) in paragraph at lines 1604--1604 [] @smalltt Ex-am-ple: FAIL: gnu-stack test be-cause the .note.GNU-stack sec -tion has ex- Overfull \hbox (61.95155pt too wide) in paragraph at lines 1605--1605 [] @smalltt Ex-am-ple: FAIL: gnu-stack test be-cause the GNU stack seg-ment has ex-e-cute permission[] Overfull \hbox (161.1754pt too wide) in paragraph at lines 1606--1606 [] @smalltt Ex-am-ple: FAIL: gnu-stack test be-cause the GNU stack seg-ment does not have both read & write permissions[] Overfull \hbox (57.22661pt too wide) in paragraph at lines 1651--1651 [] @smalltt Prob-lem: Us-ing old ver-sions of the GO com-piler looses out on se-cu-rity enhacements[] Overfull \hbox (71.40144pt too wide) in paragraph at lines 1656--1656 [] @smalltt Ex-am-ple: FAIL: go-revision test be-cause mul-ti-ple, dif-fer-e nt GO ver-sion strings found[] [26] Overfull \hbox (24.152pt too wide) in paragraph at lines 1676--1676 [] @smalltt Prob-lem: In-stru-mented bi-na-ries are big-ger and slower than reg-u-lar binaries[] Overfull \hbox (33.60188pt too wide) in paragraph at lines 1680--1680 [] @smalltt Ex-am-ple: WARN: In-stru-men-ta-tion en-abled - this is prob-a-b ly a mis-take for pro- Overfull \hbox (24.152pt too wide) in paragraph at lines 1726--1726 [] @smalltt Prob-lem: Pro-tect-ing AArch64 bi-na-ries needs newer ver-sions of AArch64 cores[] [27] Overfull \hbox (19.42705pt too wide) in paragraph at lines 1733--1733 [] @smalltt Ex-am-ple: FAIL: not branch pro-tec-tion test be-cause only par- tially disabled[] Overfull \hbox (24.152pt too wide) in paragraph at lines 1762--1762 [] @smalltt Prob-lem: Pro-tect-ing AArch64 bi-na-ries needs newer ver-sions of AArch64 cores[] Overfull \hbox (113.92595pt too wide) in paragraph at lines 1768--1768 [] @smalltt Ex-am-ple: FAIL: not dy-namic tags test be-cause BTI_PLT and PAC _PLT flags are present in the dy- Overfull \hbox (47.77672pt too wide) in paragraph at lines 1769--1769 [] @smalltt Ex-am-ple: FAIL: not dy-namic tags test be-cause BTI_PLT flag is present in the dy- Overfull \hbox (47.77672pt too wide) in paragraph at lines 1770--1770 [] @smalltt Ex-am-ple: FAIL: not dy-namic tags test be-cause PAC_PLT flag is present in the dy- [28] Overfull \hbox (90.30122pt too wide) in paragraph at lines 1798--1798 [] @smalltt Prob-lem: Lack of an-nobin notes in a bi-nary means that other t ests will not work properly[] Overfull \hbox (33.60188pt too wide) in paragraph at lines 1802--1802 [] @smalltt Ex-am-ple: FAIL: notes test be-cause gaps were de-tected in the an-nobin coverage[] Overfull \hbox (24.152pt too wide) in paragraph at lines 1807--1807 [] @smalltt Ex-am-ple: MAYB: stack-clash test be-cause no notes found re-gar d-ing this test[] Overfull \hbox (14.7021pt too wide) in paragraph at lines 1808--1808 [] @smalltt Ex-am-ple: FAIL: for-tify test be-cause no in-di-ca-tion that th e nec-es-sary op- Overfull \hbox (19.42705pt too wide) in paragraph at lines 1809--1809 [] @smalltt Ex-am-ple: FAIL: warn-ings test be-cause no in-di-ca-tion that t he nec-es-sary op- Overfull \hbox (33.60188pt too wide) in paragraph at lines 1810--1810 [] @smalltt Ex-am-ple: FAIL: stack-realign test be-cause stack re-align sup- port is mandatory[] Overfull \hbox (19.42705pt too wide) in paragraph at lines 1811--1811 [] @smalltt Ex-am-ple: FAIL: branch-protection test be-cause the -mbranch-pr otection op- [29] Overfull \hbox (71.40144pt too wide) in paragraph at lines 1853--1853 [] @smalltt Ex-am-ple: FAIL: only-go test be-cause com-bin-ing GO and non-GO ob-ject files on x86 sys- Overfull \hbox (24.152pt too wide) in paragraph at lines 1878--1878 [] @smalltt Prob-lem: In-suf-fi-cient op-ti-miza-tion pre-vents se-cu-rity f ea-tures from working[] [30] Overfull \hbox (28.87694pt too wide) in paragraph at lines 1950--1950 [] @smalltt Ex-am-ple: FAIL: pie test be-cause not built with '-Wl,-pie' (gc c/clang) or '- [31] Overfull \hbox (142.27562pt too wide) in paragraph at lines 1983--1983 [] @smalltt Ex-am-ple: FAIL: pro-duc-tion test be-cause a production-ready c om-piler was not used to build the binary[] Overfull \hbox (19.42705pt too wide) in paragraph at lines 2000--2000 [] @smalltt Prob-lem: Badly formed or miss-ing GNU prop-erty notes can com-p ro-mise an ap- Overfull \hbox (24.152pt too wide) in paragraph at lines 2004--2004 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause there is more than one GNU Prop- Overfull \hbox (38.32683pt too wide) in paragraph at lines 2005--2005 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause the prop-erty note does not have ex- Overfull \hbox (66.6765pt too wide) in paragraph at lines 2006--2006 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause the prop-erty note data has the wrong size[] Overfull \hbox (47.77672pt too wide) in paragraph at lines 2007--2007 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause the note sec-tion i s present but empty[] Overfull \hbox (28.87694pt too wide) in paragraph at lines 2008--2008 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause the prop-erty note data has an in- Overfull \hbox (19.42705pt too wide) in paragraph at lines 2009--2009 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause the IBT prop-erty i s not enabled[] Overfull \hbox (28.87694pt too wide) in paragraph at lines 2010--2010 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause the SHSTK prop-erty is not enabled[] Overfull \hbox (19.42705pt too wide) in paragraph at lines 2012--2012 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause the BTI prop-erty i s not enabled[] Overfull \hbox (99.75111pt too wide) in paragraph at lines 2013--2013 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause the GNU Prop-erty n ote seg-ment not 8 byte aligned[] Overfull \hbox (24.152pt too wide) in paragraph at lines 2014--2014 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause there is more than one GNU Prop- Overfull \hbox (184.80013pt too wide) in paragraph at lines 2015--2015 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause .note.gnu.property sec-tion not found (it is needed for branch pro- Overfull \hbox (57.22661pt too wide) in paragraph at lines 2016--2016 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause no .note.gnu.proper ty sec-tion = no con- Overfull \hbox (52.50166pt too wide) in paragraph at lines 2017--2017 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause con-trol flow pro-t ec-tion is not enabled[] [32] Overfull \hbox (57.22661pt too wide) in paragraph at lines 2041--2041 [] @smalltt Prob-lem: An at-tacker could cause an ap-pli-ca-tion to use a co r-rupted shared library[] Overfull \hbox (38.32683pt too wide) in paragraph at lines 2043--2043 [] @smalltt Waive If: The ap-pli-ca-tion uses shared li-braries held in non-s tandard locations[] Overfull \hbox (66.6765pt too wide) in paragraph at lines 2046--2046 [] @smalltt Ex-am-ple: FAIL: run-path test be-cause the DT_RPATH/DT_RUNPATH dy-namic tag is corrupt[] Overfull \hbox (33.60188pt too wide) in paragraph at lines 2047--2047 [] @smalltt Ex-am-ple: MAYB: run-path test be-cause the DT_RPATH/DT_RUNPATH dy-namic tag ex- Overfull \hbox (38.32683pt too wide) in paragraph at lines 2048--2048 [] @smalltt Ex-am-ple: FAIL: run-path test be-cause the DT_RPATH/DT_RUNPATH dy-namic tag con- Overfull \hbox (113.92595pt too wide) in paragraph at lines 2049--2049 [] @smalltt Ex-am-ple: FAIL: run-path test be-cause the DT_RPATH/DT_RUNPATH dy-namic tag has a path that con- Overfull \hbox (61.95155pt too wide) in paragraph at lines 2050--2050 [] @smalltt Ex-am-ple: FAIL: run-path test be-cause the DT_RPATH/DT_RUNPATH dy-namic tag has $ORI- Overfull \hbox (57.22661pt too wide) in paragraph at lines 2086--2086 [] @smalltt Ex-am-ple: FAIL: rwx-seg test be-cause seg-ment has Read, Write and eX-e-cute flags set[] [33] Overfull \hbox (24.152pt too wide) in paragraph at lines 2125--2125 [] @smalltt Ex-am-ple: FAIL: short-enum test be-cause both short and long en ums supported[] Overfull \hbox (66.6765pt too wide) in paragraph at lines 2147--2147 [] @smalltt Prob-lem: At-tack-ers ex-ploit-ing stack over-run bugs can gain con-trol of an application[] Overfull \hbox (33.60188pt too wide) in paragraph at lines 2151--2151 [] @smalltt Ex-am-ple: FAIL: stack-clash test be-cause -fstack-clash-protect ion not enabled[] Underfull \hbox (badness 10000) in paragraph at lines 2167--2168 [][][]@texttt https:// developers. redhat. com/ blog/ 2017/ 09/ 25/ Overfull \hbox (6.56602pt too wide) in paragraph at lines 2169--2170 @texttt stack-clash-mitigation-in-gcc-why-fstack-check-is-not-the-answer[][][] [34] Underfull \hbox (badness 10000) in paragraph at lines 2171--2172 [][][]@texttt https:// developers. redhat. com/ blog/ 2020/ 05/ 22/ Overfull \hbox (66.6765pt too wide) in paragraph at lines 2184--2184 [] @smalltt Prob-lem: At-tack-ers ex-ploit-ing stack over-run bugs can gain con-trol of an application[] Overfull \hbox (38.32683pt too wide) in paragraph at lines 2189--2189 [] @smalltt Ex-am-ple: FAIL: stack-prot test be-cause stack pro-tec-tion de- lib-er-ately disabled[] Overfull \hbox (28.87694pt too wide) in paragraph at lines 2191--2191 [] @smalltt Ex-am-ple: FAIL: stack-prot test be-cause in-suf-fi-cient Stack Safe sanitization[] Overfull \hbox (33.60188pt too wide) in paragraph at lines 2219--2219 [] @smalltt Ex-am-ple: FAIL: stack-realign test be-cause stack re-align sup- port is mandatory[] [35] Overfull \hbox (47.77672pt too wide) in paragraph at lines 2271--2271 [] @smalltt Prob-lem: Pro-grams that do not sup-port ex-cep-tions are more v ul-ner-a-ble to attacks[] Overfull \hbox (61.95155pt too wide) in paragraph at lines 2293--2293 [] @smalltt Prob-lem: Sym-bols con-tain-ing cer-tain uni-code char-ac-ters c an con-ceal their real name[] Overfull \hbox (38.32683pt too wide) in paragraph at lines 2297--2297 [] @smalltt Ex-am-ple: FAIL: uni-code test be-cause dan-ger-ous char-ac-ters were found in a sym- [36] Overfull \hbox (14.7021pt too wide) in paragraph at lines 2364--2364 [] @smalltt Ex-am-ple: FAIL: writable-got test be-cause the GOT/PLT re-locs are writable[] [37] Overfull \hbox (95.02617pt too wide) in paragraph at lines 2391--2391 [] @smalltt Prob-lem: An at-tacker could ex-tract in-for-ma-tion or use ROP style at-tacks if call used reg- Overfull \hbox (123.37584pt too wide) in paragraph at lines 2395--2395 [] @smalltt Ex-am-ple: FAIL: zero-call-used-regs test be-cause -fzero-call-u sed-regs not used or set to 'skip'[] [38] [39] [40] [41] Underfull \hbox (badness 10000) in paragraph at lines 2641--2642 [][][]@texttt https:// docs. engineering. redhat. com/ display/ HTD/ Underfull \hbox (badness 10000) in paragraph at lines 2645--2646 [][][]@texttt https:// one. redhat. com/ rhel-developer-guide/ # [42] Overfull \hbox (77.24326pt too wide) in paragraph at lines 2729--2729 []@smalltt .dc.l 0x100 # This is an OPEN note which ap-plies to all the code i n the cov- Overfull \hbox (29.9938pt too wide) in paragraph at lines 2734--2734 [] @smalltt .dc.b 0x3 # The value is 3, which in-di-cated -fstack - Overfull \hbox (133.9426pt too wide) in paragraph at lines 2735--2735 [] @smalltt .dc.b 0 # Since this field is nom-i-nally a name, i t ends with a NUL byte.[] [43] Overfull \hbox (15.81897pt too wide) in paragraph at lines 2737--2737 []@smalltt .dc.b 0, 0 # Padding to en-sure note ends on a 4 byte boundary.[] Overfull \hbox (29.9938pt too wide) in paragraph at lines 2754--2754 []@smalltt .dc.l 16 # Size of the de-scrip-tion field (= 2 * sizeof (address)) .[] Overfull \hbox (77.24326pt too wide) in paragraph at lines 2755--2755 []@smalltt .dc.l 0x100 # This is an OPEN note which ap-plies to all the code i n the cov- Overfull \hbox (39.4437pt too wide) in paragraph at lines 2760--2760 [] @smalltt .dc.b '3', # Ver-sion 3 of the Wa-ter-mark Pro-to-col is be- Overfull \hbox (53.61853pt too wide) in paragraph at lines 2761--2761 [] @smalltt .dc.b 'a', # The code has been pro-duced by an 'a'ssem bler.[] Overfull \hbox (133.9426pt too wide) in paragraph at lines 2763--2763 [] @smalltt .dc.b 0 # Since this field is nom-i-nally a name, i t ends with a NUL byte.[] Overfull \hbox (39.4437pt too wide) in paragraph at lines 2765--2765 [] @smalltt # Co-in-ci-den-tally, no padding is needed here.[] [44] [45] Chapter 5 [46] Underfull \hbox (badness 7030) in paragraph at lines 2989--2991 []@textrm (+20) Returns an enum liban-nocheck[]error cast to a struct liban- [47] [48] [49] Underfull \hbox (badness 10000) in paragraph at lines 3175--3178 []@textrm (+20) Updates the STATE, TEST[]RESULT[]REASON and Chapter 6 [50] Underfull \hbox (badness 10000) in paragraph at lines 3203--3205 []@textrm (+20) debuginfod is pack-aged with el-fu-tils, start-ing with [51] Chapter 7 [52] [53] [54] [55] Underfull \hbox (badness 10000) in paragraph at lines 3503--3511 @texttt -Wl,-z,now[]@textrm (+20) , @texttt -Wl,-z,relro[]@textrm (+20) , @text tt -fPIE[]@textrm (+20) , @texttt -Wp,-D_GLIBCXX_ASSERTIONS[]@textrm (+20) , [56] [57] [58] Appendix A [59] [60] (/builddir/build/BUILD/annobin-12.03/doc/fdl.texi [61] [62] [63] [64] [65] [66] [67] [68]) [69] ) (see the transcript file for additional information) Output written on annobin.pdf (73 pages, 338750 bytes). Transcript written on annobin.log. This is pdfTeX, Version 3.141592653-2.6-1.40.24 (TeX Live 2022) (preloaded format=pdfetex) restricted \write18 enabled. entering extended mode (../../.././../doc/annobin.texi (/usr/share/texlive/texmf-dist/tex/texinfo/texinfo.tex Loading texinfo [version 2022-11-07.17]: pdf, fonts, glyphs, page headings, tables, conditionals, indexing, sectioning, toc, environments, defuns, macros, cross references, insertions, (/usr/share/texlive/texmf-dist/tex/generic/epsf/epsf.tex This is `epsf.tex' v2.7.4 <14 February 2011> ) localization, formatting, microtype, and turning on texinfo input format.) [1{/usr/share/texlive/texmf-var/fonts/map/pdftex/updmap/pdftex.map}] [2] (./annobin.toc [-1] [-2]) [-3] [-4] (./annobin.toc) (./annobin.toc) Chapter 1 (./annobin.aux) Chapter 2 [1] [2] [3] [4] [5] [6] Chapter 3 [7] [8] Overfull \hbox (123.37584pt too wide) in paragraph at lines 433--433 [] @smalltt GA$3p3 0x00000010 OPEN Ap-plies to re-g ion from 0x8a0 to 0x8c6 (hello.c)[] Overfull \hbox (76.12639pt too wide) in paragraph at lines 434--434 [] @smalltt GA$gcc 7.2.1 20170915 0x00000000 OPEN Ap-plies to re-g ion from 0x8a0 to 0x8c6[] Overfull \hbox (76.12639pt too wide) in paragraph at lines 435--435 [] @smalltt GA*GOW:0x452b 0x00000000 OPEN Ap-plies to re-g ion from 0x8a0 to 0x8c6[] Overfull \hbox (76.12639pt too wide) in paragraph at lines 436--436 [] @smalltt GA*strong 0x00000000 OPEN Ap-plies to re-g ion from 0x8a0 to 0x8c6[] Overfull \hbox (104.47606pt too wide) in paragraph at lines 437--437 [] @smalltt GA*GOW:0x412b 0x00000010 func Ap-plies to re-g ion from 0x8c0 to 0x8c6 (baz)[] [9] [10] [11] [12] [13] Chapter 4 [14] [15] [16] [17] Overfull \hbox (147.00056pt too wide) in paragraph at lines 1151--1151 [] @smalltt Ex-am-ple: FAIL: auto-var-init test be-cause -ftrivial-auto-var- init not used or set to 'uninitialized'[] [18] Overfull \hbox (38.32683pt too wide) in paragraph at lines 1216--1216 [] @smalltt Prob-lem: Un-pro-tected AArch64 bi-na-ries are vul-ner-a-ble to ROP/JOP style attacks[] [19] Overfull \hbox (19.42705pt too wide) in paragraph at lines 1225--1225 [] @smalltt Ex-am-ple: FAIL: branch pro-tec-tion test be-cause the -mbranch- protection op- Overfull \hbox (19.42705pt too wide) in paragraph at lines 1268--1268 [] @smalltt Waive If: The ap-pli-ca-tion is built by a com-piler that does no t sup-port CET[] Overfull \hbox (14.7021pt too wide) in paragraph at lines 1270--1270 [] @smalltt Ex-am-ple: FAIL: cf-protection test be-cause only branch pro-tec -tion enabled[] Overfull \hbox (14.7021pt too wide) in paragraph at lines 1271--1271 [] @smalltt Ex-am-ple: FAIL: cf-protection test be-cause only re-turn pro-te c-tion enabled[] Overfull \hbox (52.50166pt too wide) in paragraph at lines 1273--1273 [] @smalltt Ex-am-ple: FAIL: cf-protection test be-cause in-suf-fi-cient Con -trol Flow sanitization[] Overfull \hbox (57.22661pt too wide) in paragraph at lines 1274--1274 [] @smalltt Ex-am-ple: FAIL: cf-protection test be-cause no .note.gnu.proper ty sec-tion = no con- Overfull \hbox (52.50166pt too wide) in paragraph at lines 1276--1276 [] @smalltt Ex-am-ple: FAIL: cf-protection test be-cause con-trol flow pro-t ec-tion is not enabled[] Underfull \hbox (badness 10000) in paragraph at lines 1282--1283 [][][]@texttt https:// newsroom. intel. com/ editorials/ Underfull \hbox (badness 10000) in paragraph at lines 1282--1283 @texttt intel-cet-answers-call-protect-common-malware-threats/ # gs. [20] [21] Underfull \hbox (badness 10000) in paragraph at lines 1352--1354 []@textrm (+20) For more in-for-ma-tion on CET see: [][]@texttt https:// www. intel. Underfull \hbox (badness 10000) in paragraph at lines 1352--1354 @texttt com/ content/ dam/ develop/ external/ us/ en/ documents/ Overfull \hbox (52.50166pt too wide) in paragraph at lines 1360--1360 [] @smalltt Prob-lem: Pro-grams with more than one dy-namic sec-tion will no t be loaded properly[] Overfull \hbox (43.05177pt too wide) in paragraph at lines 1364--1364 [] @smalltt Ex-am-ple: FAIL: dy-namic seg-ment test be-cause mul-ti-ple dy-n amic sec-tions detected[] Overfull \hbox (38.32683pt too wide) in paragraph at lines 1384--1384 [] @smalltt Prob-lem: Un-pro-tected AArch64 bi-na-ries are vul-ner-a-ble to ROP/JOP style attacks[] Overfull \hbox (14.7021pt too wide) in paragraph at lines 1390--1390 [] @smalltt Ex-am-ple: FAIL: dy-namic tags test be-cause BTI_PLT and PAC_PLT flags miss- Overfull \hbox (38.32683pt too wide) in paragraph at lines 1391--1391 [] @smalltt Ex-am-ple: FAIL: dy-namic tags test be-cause BTI_PLT flag is mis s-ing from the dy- Overfull \hbox (38.32683pt too wide) in paragraph at lines 1392--1392 [] @smalltt Ex-am-ple: FAIL: dy-namic tags test be-cause PAC_PLT flag is mis s-ing from the dy- [22] Overfull \hbox (47.77672pt too wide) in paragraph at lines 1460--1460 [] @smalltt Ex-am-ple: FAIL: fast test be-cause some parts of the pro-gram w ere com-piled with - [23] Overfull \hbox (85.57628pt too wide) in paragraph at lines 1483--1483 [] @smalltt Ex-am-ple: FAIL: for-tify test be-cause -D_FORTIFY_SOURCE=[2|3] was not present on the com- Overfull \hbox (14.7021pt too wide) in paragraph at lines 1485--1485 [] @smalltt Ex-am-ple: FAIL: for-tify test be-cause no in-di-ca-tion that th e nec-es-sary op- Overfull \hbox (80.85133pt too wide) in paragraph at lines 1515--1515 [] @smalltt Prob-lem: With-out com-plete cov-er-age of the com-piled code, o ther tests can miss problems[] [24] Overfull \hbox (76.12639pt too wide) in paragraph at lines 1541--1541 [] @smalltt Ex-am-ple: FAIL: glibcxx-assertions test be-cause com-piled with -out -D_GLIBCXX_ASSERTIONS[] Underfull \hbox (badness 10000) in paragraph at lines 1550--1551 [][][]@texttt https:// gcc. gnu. org/ onlinedocs/ libstdc++/ manual/ Overfull \hbox (71.40144pt too wide) in paragraph at lines 1561--1561 [] @smalltt Prob-lem: An at-tacker could al-ter how an ap-pli-ca-tions in-te r-acts with shared libraries[] [25] Overfull \hbox (61.95155pt too wide) in paragraph at lines 1603--1603 [] @smalltt Ex-am-ple: FAIL: gnu-stack test be-cause the .stack sec-tion has in-cor-rect permissions[] Overfull \hbox (19.42705pt too wide) in paragraph at lines 1604--1604 [] @smalltt Ex-am-ple: FAIL: gnu-stack test be-cause the .note.GNU-stack sec -tion has ex- Overfull \hbox (61.95155pt too wide) in paragraph at lines 1605--1605 [] @smalltt Ex-am-ple: FAIL: gnu-stack test be-cause the GNU stack seg-ment has ex-e-cute permission[] Overfull \hbox (161.1754pt too wide) in paragraph at lines 1606--1606 [] @smalltt Ex-am-ple: FAIL: gnu-stack test be-cause the GNU stack seg-ment does not have both read & write permissions[] Overfull \hbox (57.22661pt too wide) in paragraph at lines 1651--1651 [] @smalltt Prob-lem: Us-ing old ver-sions of the GO com-piler looses out on se-cu-rity enhacements[] Overfull \hbox (71.40144pt too wide) in paragraph at lines 1656--1656 [] @smalltt Ex-am-ple: FAIL: go-revision test be-cause mul-ti-ple, dif-fer-e nt GO ver-sion strings found[] [26] Overfull \hbox (24.152pt too wide) in paragraph at lines 1676--1676 [] @smalltt Prob-lem: In-stru-mented bi-na-ries are big-ger and slower than reg-u-lar binaries[] Overfull \hbox (33.60188pt too wide) in paragraph at lines 1680--1680 [] @smalltt Ex-am-ple: WARN: In-stru-men-ta-tion en-abled - this is prob-a-b ly a mis-take for pro- Overfull \hbox (24.152pt too wide) in paragraph at lines 1726--1726 [] @smalltt Prob-lem: Pro-tect-ing AArch64 bi-na-ries needs newer ver-sions of AArch64 cores[] [27] Overfull \hbox (19.42705pt too wide) in paragraph at lines 1733--1733 [] @smalltt Ex-am-ple: FAIL: not branch pro-tec-tion test be-cause only par- tially disabled[] Overfull \hbox (24.152pt too wide) in paragraph at lines 1762--1762 [] @smalltt Prob-lem: Pro-tect-ing AArch64 bi-na-ries needs newer ver-sions of AArch64 cores[] Overfull \hbox (113.92595pt too wide) in paragraph at lines 1768--1768 [] @smalltt Ex-am-ple: FAIL: not dy-namic tags test be-cause BTI_PLT and PAC _PLT flags are present in the dy- Overfull \hbox (47.77672pt too wide) in paragraph at lines 1769--1769 [] @smalltt Ex-am-ple: FAIL: not dy-namic tags test be-cause BTI_PLT flag is present in the dy- Overfull \hbox (47.77672pt too wide) in paragraph at lines 1770--1770 [] @smalltt Ex-am-ple: FAIL: not dy-namic tags test be-cause PAC_PLT flag is present in the dy- [28] Overfull \hbox (90.30122pt too wide) in paragraph at lines 1798--1798 [] @smalltt Prob-lem: Lack of an-nobin notes in a bi-nary means that other t ests will not work properly[] Overfull \hbox (33.60188pt too wide) in paragraph at lines 1802--1802 [] @smalltt Ex-am-ple: FAIL: notes test be-cause gaps were de-tected in the an-nobin coverage[] Overfull \hbox (24.152pt too wide) in paragraph at lines 1807--1807 [] @smalltt Ex-am-ple: MAYB: stack-clash test be-cause no notes found re-gar d-ing this test[] Overfull \hbox (14.7021pt too wide) in paragraph at lines 1808--1808 [] @smalltt Ex-am-ple: FAIL: for-tify test be-cause no in-di-ca-tion that th e nec-es-sary op- Overfull \hbox (19.42705pt too wide) in paragraph at lines 1809--1809 [] @smalltt Ex-am-ple: FAIL: warn-ings test be-cause no in-di-ca-tion that t he nec-es-sary op- Overfull \hbox (33.60188pt too wide) in paragraph at lines 1810--1810 [] @smalltt Ex-am-ple: FAIL: stack-realign test be-cause stack re-align sup- port is mandatory[] Overfull \hbox (19.42705pt too wide) in paragraph at lines 1811--1811 [] @smalltt Ex-am-ple: FAIL: branch-protection test be-cause the -mbranch-pr otection op- [29] Overfull \hbox (71.40144pt too wide) in paragraph at lines 1853--1853 [] @smalltt Ex-am-ple: FAIL: only-go test be-cause com-bin-ing GO and non-GO ob-ject files on x86 sys- Overfull \hbox (24.152pt too wide) in paragraph at lines 1878--1878 [] @smalltt Prob-lem: In-suf-fi-cient op-ti-miza-tion pre-vents se-cu-rity f ea-tures from working[] [30] Overfull \hbox (28.87694pt too wide) in paragraph at lines 1950--1950 [] @smalltt Ex-am-ple: FAIL: pie test be-cause not built with '-Wl,-pie' (gc c/clang) or '- [31] Overfull \hbox (142.27562pt too wide) in paragraph at lines 1983--1983 [] @smalltt Ex-am-ple: FAIL: pro-duc-tion test be-cause a production-ready c om-piler was not used to build the binary[] Overfull \hbox (19.42705pt too wide) in paragraph at lines 2000--2000 [] @smalltt Prob-lem: Badly formed or miss-ing GNU prop-erty notes can com-p ro-mise an ap- Overfull \hbox (24.152pt too wide) in paragraph at lines 2004--2004 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause there is more than one GNU Prop- Overfull \hbox (38.32683pt too wide) in paragraph at lines 2005--2005 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause the prop-erty note does not have ex- Overfull \hbox (66.6765pt too wide) in paragraph at lines 2006--2006 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause the prop-erty note data has the wrong size[] Overfull \hbox (47.77672pt too wide) in paragraph at lines 2007--2007 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause the note sec-tion i s present but empty[] Overfull \hbox (28.87694pt too wide) in paragraph at lines 2008--2008 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause the prop-erty note data has an in- Overfull \hbox (19.42705pt too wide) in paragraph at lines 2009--2009 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause the IBT prop-erty i s not enabled[] Overfull \hbox (28.87694pt too wide) in paragraph at lines 2010--2010 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause the SHSTK prop-erty is not enabled[] Overfull \hbox (19.42705pt too wide) in paragraph at lines 2012--2012 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause the BTI prop-erty i s not enabled[] Overfull \hbox (99.75111pt too wide) in paragraph at lines 2013--2013 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause the GNU Prop-erty n ote seg-ment not 8 byte aligned[] Overfull \hbox (24.152pt too wide) in paragraph at lines 2014--2014 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause there is more than one GNU Prop- Overfull \hbox (184.80013pt too wide) in paragraph at lines 2015--2015 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause .note.gnu.property sec-tion not found (it is needed for branch pro- Overfull \hbox (57.22661pt too wide) in paragraph at lines 2016--2016 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause no .note.gnu.proper ty sec-tion = no con- Overfull \hbox (52.50166pt too wide) in paragraph at lines 2017--2017 [] @smalltt Ex-am-ple: FAIL: property-note test be-cause con-trol flow pro-t ec-tion is not enabled[] [32] Overfull \hbox (57.22661pt too wide) in paragraph at lines 2041--2041 [] @smalltt Prob-lem: An at-tacker could cause an ap-pli-ca-tion to use a co r-rupted shared library[] Overfull \hbox (38.32683pt too wide) in paragraph at lines 2043--2043 [] @smalltt Waive If: The ap-pli-ca-tion uses shared li-braries held in non-s tandard locations[] Overfull \hbox (66.6765pt too wide) in paragraph at lines 2046--2046 [] @smalltt Ex-am-ple: FAIL: run-path test be-cause the DT_RPATH/DT_RUNPATH dy-namic tag is corrupt[] Overfull \hbox (33.60188pt too wide) in paragraph at lines 2047--2047 [] @smalltt Ex-am-ple: MAYB: run-path test be-cause the DT_RPATH/DT_RUNPATH dy-namic tag ex- Overfull \hbox (38.32683pt too wide) in paragraph at lines 2048--2048 [] @smalltt Ex-am-ple: FAIL: run-path test be-cause the DT_RPATH/DT_RUNPATH dy-namic tag con- Overfull \hbox (113.92595pt too wide) in paragraph at lines 2049--2049 [] @smalltt Ex-am-ple: FAIL: run-path test be-cause the DT_RPATH/DT_RUNPATH dy-namic tag has a path that con- Overfull \hbox (61.95155pt too wide) in paragraph at lines 2050--2050 [] @smalltt Ex-am-ple: FAIL: run-path test be-cause the DT_RPATH/DT_RUNPATH dy-namic tag has $ORI- Overfull \hbox (57.22661pt too wide) in paragraph at lines 2086--2086 [] @smalltt Ex-am-ple: FAIL: rwx-seg test be-cause seg-ment has Read, Write and eX-e-cute flags set[] [33] Overfull \hbox (24.152pt too wide) in paragraph at lines 2125--2125 [] @smalltt Ex-am-ple: FAIL: short-enum test be-cause both short and long en ums supported[] Overfull \hbox (66.6765pt too wide) in paragraph at lines 2147--2147 [] @smalltt Prob-lem: At-tack-ers ex-ploit-ing stack over-run bugs can gain con-trol of an application[] Overfull \hbox (33.60188pt too wide) in paragraph at lines 2151--2151 [] @smalltt Ex-am-ple: FAIL: stack-clash test be-cause -fstack-clash-protect ion not enabled[] Underfull \hbox (badness 10000) in paragraph at lines 2167--2168 [][][]@texttt https:// developers. redhat. com/ blog/ 2017/ 09/ 25/ Overfull \hbox (6.56602pt too wide) in paragraph at lines 2169--2170 @texttt stack-clash-mitigation-in-gcc-why-fstack-check-is-not-the-answer[][][] [34] Underfull \hbox (badness 10000) in paragraph at lines 2171--2172 [][][]@texttt https:// developers. redhat. com/ blog/ 2020/ 05/ 22/ Overfull \hbox (66.6765pt too wide) in paragraph at lines 2184--2184 [] @smalltt Prob-lem: At-tack-ers ex-ploit-ing stack over-run bugs can gain con-trol of an application[] Overfull \hbox (38.32683pt too wide) in paragraph at lines 2189--2189 [] @smalltt Ex-am-ple: FAIL: stack-prot test be-cause stack pro-tec-tion de- lib-er-ately disabled[] Overfull \hbox (28.87694pt too wide) in paragraph at lines 2191--2191 [] @smalltt Ex-am-ple: FAIL: stack-prot test be-cause in-suf-fi-cient Stack Safe sanitization[] Overfull \hbox (33.60188pt too wide) in paragraph at lines 2219--2219 [] @smalltt Ex-am-ple: FAIL: stack-realign test be-cause stack re-align sup- port is mandatory[] [35] Overfull \hbox (47.77672pt too wide) in paragraph at lines 2271--2271 [] @smalltt Prob-lem: Pro-grams that do not sup-port ex-cep-tions are more v ul-ner-a-ble to attacks[] Overfull \hbox (61.95155pt too wide) in paragraph at lines 2293--2293 [] @smalltt Prob-lem: Sym-bols con-tain-ing cer-tain uni-code char-ac-ters c an con-ceal their real name[] Overfull \hbox (38.32683pt too wide) in paragraph at lines 2297--2297 [] @smalltt Ex-am-ple: FAIL: uni-code test be-cause dan-ger-ous char-ac-ters were found in a sym- [36] Overfull \hbox (14.7021pt too wide) in paragraph at lines 2364--2364 [] @smalltt Ex-am-ple: FAIL: writable-got test be-cause the GOT/PLT re-locs are writable[] [37] Overfull \hbox (95.02617pt too wide) in paragraph at lines 2391--2391 [] @smalltt Prob-lem: An at-tacker could ex-tract in-for-ma-tion or use ROP style at-tacks if call used reg- Overfull \hbox (123.37584pt too wide) in paragraph at lines 2395--2395 [] @smalltt Ex-am-ple: FAIL: zero-call-used-regs test be-cause -fzero-call-u sed-regs not used or set to 'skip'[] [38] [39] [40] [41] Underfull \hbox (badness 10000) in paragraph at lines 2641--2642 [][][]@texttt https:// docs. engineering. redhat. com/ display/ HTD/ Underfull \hbox (badness 10000) in paragraph at lines 2645--2646 [][][]@texttt https:// one. redhat. com/ rhel-developer-guide/ # [42] Overfull \hbox (77.24326pt too wide) in paragraph at lines 2729--2729 []@smalltt .dc.l 0x100 # This is an OPEN note which ap-plies to all the code i n the cov- Overfull \hbox (29.9938pt too wide) in paragraph at lines 2734--2734 [] @smalltt .dc.b 0x3 # The value is 3, which in-di-cated -fstack - Overfull \hbox (133.9426pt too wide) in paragraph at lines 2735--2735 [] @smalltt .dc.b 0 # Since this field is nom-i-nally a name, i t ends with a NUL byte.[] Overfull \hbox (15.81897pt too wide) in paragraph at lines 2737--2737 []@smalltt .dc.b 0, 0 # Padding to en-sure note ends on a 4 byte boundary.[] [43] Overfull \hbox (29.9938pt too wide) in paragraph at lines 2754--2754 []@smalltt .dc.l 16 # Size of the de-scrip-tion field (= 2 * sizeof (address)) .[] Overfull \hbox (77.24326pt too wide) in paragraph at lines 2755--2755 []@smalltt .dc.l 0x100 # This is an OPEN note which ap-plies to all the code i n the cov- Overfull \hbox (39.4437pt too wide) in paragraph at lines 2760--2760 [] @smalltt .dc.b '3', # Ver-sion 3 of the Wa-ter-mark Pro-to-col is be- Overfull \hbox (53.61853pt too wide) in paragraph at lines 2761--2761 [] @smalltt .dc.b 'a', # The code has been pro-duced by an 'a'ssem bler.[] Overfull \hbox (133.9426pt too wide) in paragraph at lines 2763--2763 [] @smalltt .dc.b 0 # Since this field is nom-i-nally a name, i t ends with a NUL byte.[] Overfull \hbox (39.4437pt too wide) in paragraph at lines 2765--2765 [] @smalltt # Co-in-ci-den-tally, no padding is needed here.[] [44] [45] Chapter 5 [46] Underfull \hbox (badness 7030) in paragraph at lines 2989--2991 []@textrm (+20) Returns an enum liban-nocheck[]error cast to a struct liban- [47] [48] [49] Underfull \hbox (badness 10000) in paragraph at lines 3175--3178 []@textrm (+20) Updates the STATE, TEST[]RESULT[]REASON and Chapter 6 [50] Underfull \hbox (badness 10000) in paragraph at lines 3203--3205 []@textrm (+20) debuginfod is pack-aged with el-fu-tils, start-ing with [51] Chapter 7 [52] [53] [54] [55] Underfull \hbox (badness 10000) in paragraph at lines 3503--3511 @texttt -Wl,-z,now[]@textrm (+20) , @texttt -Wl,-z,relro[]@textrm (+20) , @text tt -fPIE[]@textrm (+20) , @texttt -Wp,-D_GLIBCXX_ASSERTIONS[]@textrm (+20) , [56] [57] [58] Appendix A [59] [60] (/builddir/build/BUILD/annobin-12.03/doc/fdl.texi [61] [62] [63] [64] [65] [66] [67] [68]) [69] ) (see the transcript file for additional information) Output written on annobin.pdf (75 pages, 363181 bytes). Transcript written on annobin.log. [15/17] /usr/bin/g++ ../gcc-plugin/annobin.cc ../gcc-plugin/x86_64.annobin.cc -g -fPIC -DPIC -shared -nostdlib -DHAVE_CONFIG_H -I/builddir/build/BUILD/annobin-12.03/anolis-linux-build/gcc-plugin/.. -I/usr/lib/gcc/x86_64-anolis-linux/12/plugin/include -o gcc-plugin/annobin.so FAILED: gcc-plugin/annobin.so /usr/bin/g++ ../gcc-plugin/annobin.cc ../gcc-plugin/x86_64.annobin.cc -g -fPIC -DPIC -shared -nostdlib -DHAVE_CONFIG_H -I/builddir/build/BUILD/annobin-12.03/anolis-linux-build/gcc-plugin/.. -I/usr/lib/gcc/x86_64-anolis-linux/12/plugin/include -o gcc-plugin/annobin.so ../gcc-plugin/annobin.cc: In function ‘void annobin_output_string_note(const char*)’: ../gcc-plugin/annobin.cc:350:62: error: ‘ANNOBIN_STRING_SECTION_NAME’ was not declared in this scope 350 | fprintf (asm_out_file, "\t.pushsection %s,\"MS\",%%3,1\n", ANNOBIN_STRING_SECTION_NAME); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~ ../gcc-plugin/annobin.cc: In function ‘void record_short_enum_note(bool, annobin_function_info*)’: ../gcc-plugin/annobin.cc:562:54: error: ‘ANNOBIN_STRING_SHORT_ENUMS’ was not declared in this scope 562 | annobin_gen_string_note (info, false, "%s:%d", ANNOBIN_STRING_SHORT_ENUMS, bool_value); | ^~~~~~~~~~~~~~~~~~~~~~~~~~ ../gcc-plugin/annobin.cc: In function ‘void record_GOW_note(unsigned int, annobin_function_info*)’: ../gcc-plugin/annobin.cc:1106:75: error: ‘ANNOBIN_STRING_OPTIMIZE_LEV’ was not declared in this scope 1106 | annobin_gen_string_note (info, is_problematic_gow (gow), "%s:0x%x", ANNOBIN_STRING_OPTIMIZE_LEV, gow); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~ ../gcc-plugin/annobin.cc: In function ‘void record_stack_protector_note(annobin_function_info*)’: ../gcc-plugin/annobin.cc:1174:59: error: ‘ANNOBIN_STRING_STACK_PROTECTOR’ was not declared in this scope 1174 | annobin_gen_string_note (info, optval < 2, "%s:%d", ANNOBIN_STRING_STACK_PROTECTOR, optval); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ../gcc-plugin/annobin.cc: In function ‘void record_stack_clash_note(annobin_function_info*)’: ../gcc-plugin/annobin.cc:1211:60: error: ‘ANNOBIN_STRING_STACK_CLASH’ was not declared in this scope 1211 | annobin_gen_string_note (info, optval != 1, "%s:%d", ANNOBIN_STRING_STACK_CLASH, optval); | ^~~~~~~~~~~~~~~~~~~~~~~~~~ ../gcc-plugin/annobin.cc: In function ‘void record_cf_protection_note(annobin_function_info*)’: ../gcc-plugin/annobin.cc:1279:77: error: ‘ANNOBIN_STRING_CONTROL_FLOW’ was not declared in this scope 1279 | annobin_gen_string_note (info, (optval != 4 && optval != 8), "%s:%d", ANNOBIN_STRING_CONTROL_FLOW, optval + 1); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~ ../gcc-plugin/annobin.cc: In function ‘void record_pic_note(int, annobin_function_info*)’: ../gcc-plugin/annobin.cc:1338:59: error: ‘ANNOBIN_STRING_PIC_SETTING’ was not declared in this scope 1338 | annobin_gen_string_note (info, value == 0, "%s:%d", ANNOBIN_STRING_PIC_SETTING, value); | ^~~~~~~~~~~~~~~~~~~~~~~~~~ ../gcc-plugin/annobin.cc: In function ‘void record_fortify_level(int, annobin_function_info*)’: ../gcc-plugin/annobin.cc:1389:58: error: ‘ANNOBIN_STRING_FORTIFY_LEVEL’ was not declared in this scope 1389 | annobin_gen_string_note (info, level < 2, "%s:%d", ANNOBIN_STRING_FORTIFY_LEVEL, level); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ ../gcc-plugin/annobin.cc: In function ‘void record_glibcxx_assertions(int, annobin_function_info*)’: ../gcc-plugin/annobin.cc:1416:56: error: ‘ANNOBIN_STRING_GLIBCXX_ASSERT’ was not declared in this scope 1416 | annobin_gen_string_note (info, on == 0, "%s:%d", ANNOBIN_STRING_GLIBCXX_ASSERT, on); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ../gcc-plugin/annobin.cc: In function ‘void record_annobin_version(char, annobin_function_info*)’: ../gcc-plugin/annobin.cc:2028:58: error: ‘ANNOBIN_STRING_ANNOBIN_VERSION’ was not declared in this scope 2028 | annobin_gen_string_note (info, false, "%s:%d%c%d", ANNOBIN_STRING_ANNOBIN_VERSION, SPEC_VERSION, producer_char, annobin_version); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ../gcc-plugin/annobin.cc: In function ‘void record_version_notes(annobin_function_info*)’: ../gcc-plugin/annobin.cc:2162:54: error: ‘ANNOBIN_STRING_RUN_VERSION’ was not declared in this scope 2162 | annobin_gen_string_note (info, false, "%s:%s", ANNOBIN_STRING_RUN_VERSION, run_version); | ^~~~~~~~~~~~~~~~~~~~~~~~~~ ../gcc-plugin/annobin.cc:2163:54: error: ‘ANNOBIN_STRING_BUILD_VERSION’ was not declared in this scope 2163 | annobin_gen_string_note (info, false, "%s:%s", ANNOBIN_STRING_BUILD_VERSION, build_version); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~ ../gcc-plugin/annobin.cc: In function ‘void emit_global_notes(const char*)’: ../gcc-plugin/annobin.cc:2295:62: error: ‘ANNOBIN_STRING_PROFILING’ was not declared in this scope 2295 | annobin_gen_string_note (& info, false, "%s:0x%x", ANNOBIN_STRING_PROFILING, val); | ^~~~~~~~~~~~~~~~~~~~~~~~ ../gcc-plugin/x86_64.annobin.cc: In function ‘void record_stack_realign_note(unsigned int, annobin_function_info*)’: ../gcc-plugin/x86_64.annobin.cc:104:46: error: ‘ANNOBIN_STRING_i686_STACK_REALIGN’ was not declared in this scope 104 | sprintf (annobin_note_buffer, "%s:%d", ANNOBIN_STRING_i686_STACK_REALIGN, val); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ [16/17] /usr/bin/clang++ ../llvm-plugin/annobin.cpp -I/builddir/build/BUILD/annobin-12.03/anolis-linux-build/llvm-plugin/.. -lLLVM -o llvm-plugin/annobin-for-llvm.so -D_FORTIFY_SOURCE=2 -D_GLIBCXX_ASSERTIONS -shared -fPIC -Wall -O2 -flto -g -grecord-gcc-switches -Wl,--build-id=md5 -Wl,-z,now -D_GNU_SOURCE -D__STDC_CONSTANT_MACROS -D__STDC_FORMAT_MACROS -D__STDC_LIMIT_MACROS ../llvm-plugin/annobin.cpp:595:1: warning: unused function 'registerAnnobinModulePassLegacy' [-Wunused-function] registerAnnobinModulePassLegacy (const PassManagerBuilder & PMB, ^ 1 warning generated. [17/17] /usr/bin/clang++ ../clang-plugin/annobin.cpp -I/builddir/build/BUILD/annobin-12.03/anolis-linux-build/clang-plugin/.. -lLLVM -lclang-cpp -o clang-plugin/annobin-for-clang.so -D_FORTIFY_SOURCE=2 -D_GLIBCXX_ASSERTIONS -shared -fPIC -Wall -O2 -flto -g -grecord-gcc-switches -Wl,--build-id=md5 -Wl,-z,now -D_GNU_SOURCE -D__STDC_CONSTANT_MACROS -D__STDC_FORMAT_MACROS -D__STDC_LIMIT_MACROS ninja: build stopped: subcommand failed. INFO: autodetecting backend as ninja INFO: calculating backend command to run: /usr/bin/ninja -C /builddir/build/BUILD/annobin-12.03/anolis-linux-build -j 80 -v error: Bad exit status from /var/tmp/rpm-tmp.iaETaY (%build) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.iaETaY (%build) Child return code was: 1 EXCEPTION: [Error('Command failed: \n # bash --login -c /usr/bin/rpmbuild -bb --noclean --target x86_64 --nodeps /builddir/build/SPECS/annobin.spec\n', 1)] Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/mockbuild/trace_decorator.py", line 93, in trace result = func(*args, **kw) File "/usr/lib/python3.6/site-packages/mockbuild/util.py", line 598, in do_with_status raise exception.Error("Command failed: \n # %s\n%s" % (command, output), child.returncode) mockbuild.exception.Error: Command failed: # bash --login -c /usr/bin/rpmbuild -bb --noclean --target x86_64 --nodeps /builddir/build/SPECS/annobin.spec