Use dlsym(RTLD_DEFAULT) instead of dlsym(dlopen(NULL)) in aesgcmchromium.patch.

net/third_party/nss/ssl/ssl3con.c

 /* -*- Mode: C; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 4 -*- */
 /*
  * SSL3 Protocol
  *
  * This Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 
 /* TODO(ekr): Implement HelloVerifyRequest on server side. OK for now. */
 

[Ryan Sleevi, 2015/02/27 00:36:51]

In NSPR, the idiom is to #define _GNU_SOURCE 1 here, before any includes.

For example - http://mxr.mozilla.org/nss/source/lib/freebl/stubs.c#10

 #include "cert.h"
 #include "ssl.h"
 #include "cryptohi.h"   /* for DSAU_ stuff */
 #include "keyhi.h"
 #include "secder.h"
 #include "secitem.h"
 #include "sechash.h"
 
 #include "sslimpl.h"
 #include "sslproto.h"
@@ skipping 1856 matching lines @@
 static PK11CryptFcn pk11_decrypt = NULL;
 
 static PRCallOnceType resolvePK11CryptOnce;
 
 static PRStatus
 ssl3_ResolvePK11CryptFunctions(void)
 {
 #ifdef LINUX
     /* On Linux we use the system NSS libraries. Look up the PK11_Encrypt and
      * PK11_Decrypt functions at run time. */
-    void *handle = dlopen(NULL, RTLD_LAZY);
-    if (!handle) {
-        PORT_SetError(SEC_ERROR_LIBRARY_FAILURE);
-        return PR_FAILURE;
-    }
-    pk11_encrypt = (PK11CryptFcn)dlsym(handle, "PK11_Encrypt");
-    pk11_decrypt = (PK11CryptFcn)dlsym(handle, "PK11_Decrypt");
-    dlclose(handle);
+    pk11_encrypt = (PK11CryptFcn)dlsym(RTLD_DEFAULT, "PK11_Encrypt");
+    pk11_decrypt = (PK11CryptFcn)dlsym(RTLD_DEFAULT, "PK11_Decrypt");
     return PR_SUCCESS;
 #else
     /* On other platforms we use our own copy of NSS. PK11_Encrypt and
      * PK11_Decrypt are known to be available. */
     pk11_encrypt = PK11_Encrypt;
     pk11_decrypt = PK11_Decrypt;
     return PR_SUCCESS;
 #endif
 }
 
@@ skipping 10946 matching lines @@
             PORT_Free(ss->ssl3.hs.recvdFragments.buf);
         }
     }
 
     ss->ssl3.initialized = PR_FALSE;
 
     SECITEM_FreeItem(&ss->ssl3.nextProto, PR_FALSE);
 }
 
 /* End of ssl3con.c */