Create a rudimentary symbol scanning script
authorNeil Horman <nhorman@openssl.org>
Mon, 23 Oct 2023 16:47:13 +0000 (12:47 -0400)
committerTomas Mraz <tomas@openssl.org>
Wed, 1 Nov 2023 15:32:26 +0000 (16:32 +0100)
commit796e5f96488643755a18570a4907da78ee46131a
tree4d5abf7335a727b9165e6baebbd5cfeeb2f93f14
parentbdcaa80fd596ae1aae18d93c7784cc7ed8fa504a
Create a rudimentary symbol scanning script

We would like to be able to log and audit the symbols we use in openssl
so that we might catch when a new platform symbols is referecned

Add such a script (just on unix platforms for now) that gathers the used
symbols not belonging to libcrypto or libssl, and compare it to a prior
known set of used symbols.  Error out if a new symbol is found

Add this script to the ci workflow in CI to capture newly
introduced platform symbols

Fixes #22330

Reviewed-by: Hugo Landau <hlandau@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22478)
.github/workflows/run-checker-ci.yml
.github/workflows/windows.yml
.github/workflows/windows_comp.yml
util/checkplatformsyms.pl [new file with mode: 0755]
util/platform_symbols/unix-symbols.txt [new file with mode: 0644]
util/platform_symbols/windows-symbols.txt [new file with mode: 0644]