[openssl/openssl] 796e5f: Create a rudimentary symbol scanning script

Neil Horman noreply at github.com
Wed Nov 1 15:35:03 UTC 2023


  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 796e5f96488643755a18570a4907da78ee46131a
      https://github.com/openssl/openssl/commit/796e5f96488643755a18570a4907da78ee46131a
  Author: Neil Horman <nhorman at openssl.org>
  Date:   2023-11-01 (Wed, 01 Nov 2023)

  Changed paths:
    M .github/workflows/run-checker-ci.yml
    M .github/workflows/windows.yml
    M .github/workflows/windows_comp.yml
    A util/checkplatformsyms.pl
    A util/platform_symbols/unix-symbols.txt
    A util/platform_symbols/windows-symbols.txt

  Log Message:
  -----------
  Create a rudimentary symbol scanning script

We would like to be able to log and audit the symbols we use in openssl
so that we might catch when a new platform symbols is referecned

Add such a script (just on unix platforms for now) that gathers the used
symbols not belonging to libcrypto or libssl, and compare it to a prior
known set of used symbols.  Error out if a new symbol is found

Add this script to the ci workflow in CI to capture newly
introduced platform symbols

Fixes #22330

Reviewed-by: Hugo Landau <hlandau at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22478)




More information about the openssl-commits mailing list