These are the sources for the annobin project:

https://sourceware.org/annobin/

The projects consists of two main parts:

1. A security checker program - annocheck - which examines binaries and reports potential security problems.
2. A set of plugins for GCC and LLVM that records security information for use by annocheck.