tree ca3b7794c2b202dded142234ffb7608b146fbb85
parent 9b896cf148e692fca46d7f34d0e45d1c58764db3
author Adam Langley <alangley@gmail.com> 1557445189 -0700
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1559242996 +0000

Add FIPS shared mode.

This change adds a FIPS integrity check using shared libraries. Unlike
with the static case, a shared build can take advantage of the linker
resolving relocations and thus doesn't need delocation. It does mean
that both .text and .rodata sections need to be handled, however, so the
hashing format is slightly different. inject-hash.go is updated to be
able to rewrite shared libraries to inject the correct hash value.

Change-Id: I9a71910cd6df3a85e4efac896b0913e65b5f875b
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/36024
Commit-Queue: Adam Langley <agl@google.com>
Reviewed-by: David Benjamin <davidben@google.com>