Adam Langley
d72e47fddb
This change adds a FIPS integrity check using shared libraries. Unlike with the static case, a shared build can take advantage of the linker resolving relocations and thus doesn't need delocation. It does mean that both .text and .rodata sections need to be handled, however, so the hashing format is slightly different. inject-hash.go is updated to be able to rewrite shared libraries to inject the correct hash value. Change-Id: I9a71910cd6df3a85e4efac896b0913e65b5f875b Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/36024 Commit-Queue: Adam Langley <agl@google.com> Reviewed-by: David Benjamin <davidben@google.com>
20 lines
277 B
Plaintext
20 lines
277 B
Plaintext
SECTIONS
|
|
{
|
|
.text : {
|
|
BORINGSSL_bcm_text_start = .;
|
|
*(.text)
|
|
BORINGSSL_bcm_text_end = .;
|
|
}
|
|
.rodata : {
|
|
BORINGSSL_bcm_rodata_start = .;
|
|
*(.rodata)
|
|
BORINGSSL_bcm_rodata_end = .;
|
|
}
|
|
|
|
/DISCARD/ : {
|
|
*(.rela.dyn)
|
|
*(.data)
|
|
*(.rel.ro)
|
|
}
|
|
}
|