Re: Issues with cgo and stack protection

2024-06-16 Thread Carlos Rodriguez-Fernandez
Another change I found is in annocheck between Fedora 40 and 41. It goes from version 12.51 to 12.59. A diff upstream shows several changes related with Go. I'm also unable to reproduce it locally. I build it for rawhide, and run the annocheck from rawhide on captree and I still get PASS. Fo

Re: Issues with cgo and stack protection

2024-06-14 Thread Carlos Rodriguez-Fernandez
So, I found out the stack-prot test was passing before simply because the static analysis was skipping it: ``` Hardened: /usr/sbin/captree: skip: stack-prot test because GO is stack safe ``` However, it appears the new changes attempting to bring hardening to go builds has made the static anal

Issues with cgo and stack protection

2024-06-13 Thread Carlos Rodriguez-Fernandez
Hi All, The build of libcap in Rawhide is failing the static analysis because of the stack protection not enabled [1]. ``` Hardened: /usr/sbin/captree: FAIL: stack-prot test because stack protection not enabled (lto:threadentry) Hardened: /usr/sbin/captree: FAIL: stack-prot test because stack