Issue #396: Update annocheck to 11.14 (lto check fails on F39 i686 builds) - general

fedora-ci / general

#396 Update annocheck to 11.14 (lto check fails on F39 i686 builds)

Closed Mar 22, 2023 by msrb. Opened Mar 14, 2023 by ppisar.

Current fedora-ci.koji-build.rpminspect.static-analysis executes annocheck 11.11 which wrongly reports a failure for LTO hardening on i686 builds, example https://artifacts.dev.testing-farm.io/4c295b8d-8ad0-46b3-a283-7e1b967af14d/:100:

annocheck: Version 11.11.
Hardened: using profile: rawhide.
[...]
Hardened: /usr/sbin/oidentd: FAIL: lto test because compiled with -fno-lto (function: __stack_chk_fail_local)

Latest annocheck 11.14 deals with the LTO check properly:

annocheck: Version 11.14.
[...]
Hardened: ./usr/sbin/oidentd: skip: lto test because function __stack_chk_fail_local is part of the C library which is deliberately built without LTO

$ rpm -q --changelog annobin-annocheck | head
* Mon Mar 13 2023 Nick Clifton  <nickc@redhat.com> - 11.14-1
- Annocheck: Update message for LTO tests.  (#2177140)
* Wed Mar 08 2023 Nick Clifton  <nickc@redhat.com> - 11.13-1
- Annocheck: Add even more code to handle another glibc function built without LTO.
* Fri Mar 03 2023 Nick Clifton  <nickc@redhat.com> - 11.12-1
- Annocheck: Add code to handle another glibc function built without LTO.