These are the sources for the annobin project:

  https://sourceware.org/annobin/

The projects consists of two main parts:

  1. A security checker program - annocheck - which examines binaries
     and reports potential security problems. 
  2. A set of plugins for GCC and LLVM that records security
     information for use by annocheck.

