From: "jaruga (Jun Aruga) via ruby-core" Date: 2024-08-07T16:58:51+00:00 Subject: [ruby-core:118805] [Ruby master Feature#20621] Check libruby.so hardening by annocheck Issue #20621 has been updated by jaruga (Jun Aruga). The libruby.so was added to the annocheck test by the PR . I am not sure if we can close this ticket due to the PR. By the way, if we add other so and *.o files to the test, it's better to fix some failures that are currently skipped by the `--skip-pie --skip-gaps` options below. https://github.com/ruby/ruby/blob/53f3036bf9becda911dba1e9e1823aceb97b3d9a/.github/workflows/annocheck.yml#L57-L60 https://github.com/ruby/ruby/actions/runs/10285685378/job/28464546087?pr=11324#step:10:100 ``` + /usr/bin/docker run --rm -t ruby-fedora-annocheck-copy annocheck --verbose --skip-pie --skip-gaps ruby libruby.so.3.4.0 ``` ---------------------------------------- Feature #20621: Check libruby.so hardening by annocheck https://bugs.ruby-lang.org/issues/20621#change-109363 * Author: vo.x (Vit Ondruch) * Status: Open ---------------------------------------- As part of #18061, there was implemented annocheck test case. However, the test covers just `ruby` (which is just thin shell), while leaves out `libruby.so` (which contains most of the Ruby code). This PR tries to improve that: https://github.com/ruby/ruby/pull/11123 BTW the question is if all *.so files or even all *.o files should be covered. -- https://bugs.ruby-lang.org/ ______________________________________________ ruby-core mailing list -- ruby-core@ml.ruby-lang.org To unsubscribe send an email to ruby-core-leave@ml.ruby-lang.org ruby-core info -- https://ml.ruby-lang.org/mailman3/lists/ruby-core.ml.ruby-lang.org/