I invoke BinSkim 4.4.9.7 against elf file:
BINSKIM : warning WRN998.UnsupportedPlatform : Rule 'DoNotIncorporateVulnerableDependencies' was disabled as it cannot run on the current platform 'Linux'. It can only run on 'Windows'.
BINSKIM : warning WRN998.UnsupportedPlatform : Rule 'EnableSecureSourceCodeHashing' was disabled as it cannot run on the current platform 'Linux'. It can only run on 'Windows'.
BINSKIM : warning WRN998.UnsupportedPlatform : Rule 'DoNotShipVulnerableBinaries' was disabled as it cannot run on the current platform 'Linux'. It can only run on 'Windows'.
BINSKIM : warning WRN998.UnsupportedPlatform : Rule 'BuildWithSecureTools' was disabled as it cannot run on the current platform 'Linux'. It can only run on 'Windows'.
BINSKIM : warning WRN998.UnsupportedPlatform : Rule 'EnableCriticalCompilerWarnings' was disabled as it cannot run on the current platform 'Linux'. It can only run on 'Windows'.
BINSKIM : warning WRN998.UnsupportedPlatform : Rule 'EnableStackProtection' was disabled as it cannot run on the current platform 'Linux'. It can only run on 'Windows'.
BINSKIM : warning WRN998.UnsupportedPlatform : Rule 'InitializeStackProtection' was disabled as it cannot run on the current platform 'Linux'. It can only run on 'Windows'.
BINSKIM : warning WRN998.UnsupportedPlatform : Rule 'DoNotDisableStackProtectionForFunctions' was disabled as it cannot run on the current platform 'Linux'. It can only run on 'Windows'.
BINSKIM : warning WRN998.UnsupportedPlatform : Rule 'SignSecurely' was disabled as it cannot run on the current platform 'Linux'. It can only run on 'Windows'.
BINSKIM : warning WRN998.UnsupportedPlatform : Rule 'EnableSpectreMitigations' was disabled as it cannot run on the current platform 'Linux'. It can only run on 'Windows'.
BINSKIM : warning WRN998.UnsupportedPlatform : Rule 'EnableShadowStack' was disabled as it cannot run on the current platform 'Linux'. It can only run on 'Windows'.
BINSKIM : warning WRN998.UnsupportedPlatform : Rule 'EnableMicrosoftCompilerSdlSwitch' was disabled as it cannot run on the current platform 'Linux'. It can only run on 'Windows'.
BINSKIM : warning WRN998.UnsupportedPlatform : Rule 'EnableSourceLink' was disabled as it cannot run on the current platform 'Linux'. It can only run on 'Windows'.
BINSKIM : warning WRN998.UnsupportedPlatform : Rule 'ReportPECompilerData' was disabled as it cannot run on the current platform 'Linux'. It can only run on 'Windows'.
BINSKIM : warning WRN998.UnsupportedPlatform : Rule 'DisableIncrementalLinkingInReleaseBuilds' was disabled as it cannot run on the current platform 'Linux'. It can only run on 'Windows'.
BINSKIM : warning WRN998.UnsupportedPlatform : Rule 'EliminateDuplicateStrings' was disabled as it cannot run on the current platform 'Linux'. It can only run on 'Windows'.
BINSKIM : warning WRN998.UnsupportedPlatform : Rule 'EnableComdatFolding' was disabled as it cannot run on the current platform 'Linux'. It can only run on 'Windows'.
BINSKIM : warning WRN998.UnsupportedPlatform : Rule 'EnableOptimizeReferences' was disabled as it cannot run on the current platform 'Linux'. It can only run on 'Windows'.
BINSKIM : warning WRN998.UnsupportedPlatform : Rule 'EnableLinkTimeCodeGeneration' was disabled as it cannot run on the current platform 'Linux'. It can only run on 'Windows'.
Analyzing...
THREADS: 4
/mnt/wd/datadog-agent/datadog-agent/cmd/agent/agent: error BA3003: The stack protector was not found in 'agent'. This may be because '--stack-protector-strong' was not used, or because it was explicitly disabled by '-fno-stack-protectors'.
Modules did not meet the criteria: agent
/mnt/wd/datadog-agent/datadog-agent/cmd/agent/agent: error BA3004: 'agent' is using debugging dwarf version '0'. The dwarf version 5 contains more information and should be used. To enable the debugging version 5 use '-gdwarf-5'.
/mnt/wd/datadog-agent/datadog-agent/cmd/agent/agent: error BA3030: No checked functions are present/used when compiling 'agent', and it was compiled with GCC--and it uses functions that can be checked. The Fortify Source flag replaces some unsafe functions with checked versions when a static length can be determined, and can be enabled by passing '-D_FORTIFY_SOURCE=2' when optimization level 2 ('-O2') is enabled. It is possible that the flag was passed, but that the compiler could not statically determine the length of any buffers/strings.
I'm not getting why it can be useful to see those WRN998 messages.
ok, file is elf, system is linux, those checks are not applied to elf at all.
grass is green, sky is blue, a lot of obvious facts to tell.
but why BinSkim is trying to tell me that "windows" checks are not applied to elf ?
I invoke BinSkim 4.4.9.7 against elf file:
I'm not getting why it can be useful to see those WRN998 messages.
ok, file is elf, system is linux, those checks are not applied to elf at all.
grass is green, sky is blue, a lot of obvious facts to tell.
but why BinSkim is trying to tell me that "windows" checks are not applied to elf ?