Check unresolved symbols when compiled with OQS_DLOPEN_OPENSSL

As a follow-up of commit 64bceb3, this checks that the library artifacts don't contain any unresolved symbols from libcrypto.so when it is dynamically loaded. Signed-off-by: Daiki Ueno <[email protected]>
open-quantum-safe · Jan 29, 2025 · 3f00768 · 3f00768
1 parent 6a16ac6
commit 3f00768
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml
@@ -123,6 +123,12 @@ jobs:
       - name: Build
         run: ninja
         working-directory: build
+      - name: Check the library artifacts
+        if: matrix.name == 'jammy-std-openssl3-dlopen'
+        run: |
+          nm -gu lib/liboqs.so | sed -n 's/^[[:space:]]*[Uw] \([^_].*\)/\1/p' > undefined-syms.txt &&
+          ! (grep '^\(CRYPTO\|ERR\|EVP\|OPENSSL\|RAND\)_' undefined-syms.txt)
+        working-directory: build
       - name: Run tests
         timeout-minutes: 60
         run: mkdir -p tmp && python3 -m pytest --verbose --ignore=tests/test_code_conventions.py --numprocesses=auto ${{ matrix.PYTEST_ARGS }}