CVE-2015-5370: s4:librpc/rpc: avoid using hs->p->conn->security_state.auth_info in...
[Samba.git] / wscript
blob9431e11e836208510162f3acd0ed520402efcd41
1 #!/usr/bin/env python
3 srcdir = '.'
4 blddir = 'bin'
6 APPNAME='samba'
7 VERSION=None
9 import sys, os, tempfile
10 sys.path.insert(0, srcdir+"/buildtools/wafsamba")
11 import wafsamba, Options, samba_dist, samba_git, Scripting, Utils, samba_version
14 samba_dist.DIST_DIRS('.')
15 samba_dist.DIST_BLACKLIST('.gitignore .bzrignore source4/selftest/provisions')
17 # install in /usr/local/samba by default
18 Options.default_prefix = '/usr/local/samba'
20 # This callback optionally takes a list of paths as arguments:
21 # --with-system_mitkrb5 /path/to/krb5 /another/path
22 def system_mitkrb5_callback(option, opt, value, parser):
23 setattr(parser.values, option.dest, True)
24 value = []
25 for arg in parser.rargs:
26 # stop on --foo like options
27 if arg[:2] == "--" and len(arg) > 2:
28 break
29 value.append(arg)
30 if len(value)>0:
31 del parser.rargs[:len(value)]
32 setattr(parser.values, option.dest, value)
34 def set_options(opt):
35 opt.BUILTIN_DEFAULT('NONE')
36 opt.PRIVATE_EXTENSION_DEFAULT('samba4')
37 opt.RECURSE('lib/replace')
38 opt.RECURSE('dynconfig')
39 opt.RECURSE('lib/ldb')
40 opt.RECURSE('selftest')
41 opt.RECURSE('source4/lib/tls')
42 opt.RECURSE('pidl')
43 opt.RECURSE('source3')
44 opt.RECURSE('lib/util')
45 opt.RECURSE('ctdb')
47 opt.add_option('--with-system-mitkrb5',
48 help='enable system MIT krb5 build (includes Samba 4 client and Samba 3 code base).'+
49 'You may specify list of paths where Kerberos is installed (e.g. /usr/local /usr/kerberos) to search krb5-config',
50 action='callback', callback=system_mitkrb5_callback, dest='with_system_mitkrb5', default=False)
52 opt.add_option('--without-ad-dc',
53 help='disable AD DC functionality (enables Samba 4 client and Samba 3 code base).',
54 action='store_true', dest='without_ad_dc', default=False)
56 opt.add_option('--with-pie',
57 help=("Build Position Independent Executables " +
58 "(default if supported by compiler)"),
59 action="store_true", dest='enable_pie')
60 opt.add_option('--without-pie',
61 help=("Disable Position Independent Executable builds"),
62 action="store_false", dest='enable_pie')
64 opt.add_option('--with-relro',
65 help=("Build with full RELocation Read-Only (RELRO)" +
66 "(default if supported by compiler)"),
67 action="store_true", dest='enable_relro')
68 opt.add_option('--without-relro',
69 help=("Disable RELRO builds"),
70 action="store_false", dest='enable_relro')
72 gr = opt.option_group('developer options')
74 opt.tool_options('python') # options for disabling pyc or pyo compilation
75 # enable options related to building python extensions
78 def configure(conf):
79 version = samba_version.load_version(env=conf.env)
81 conf.DEFINE('CONFIG_H_IS_FROM_SAMBA', 1)
82 conf.DEFINE('_SAMBA_BUILD_', version.MAJOR, add_to_cflags=True)
83 conf.DEFINE('HAVE_CONFIG_H', 1, add_to_cflags=True)
85 if Options.options.developer:
86 conf.ADD_CFLAGS('-DDEVELOPER -DDEBUG_PASSWORD')
87 conf.env.DEVELOPER = True
89 conf.ADD_EXTRA_INCLUDES('#include/public #source4 #lib #source4/lib #source4/include #include #lib/replace')
91 conf.env.replace_add_global_pthread = True
92 conf.RECURSE('lib/replace')
94 conf.SAMBA_CHECK_PERL(mandatory=True)
95 conf.find_program('xsltproc', var='XSLTPROC')
97 conf.SAMBA_CHECK_PYTHON(mandatory=True, version=(2, 6, 0))
98 conf.SAMBA_CHECK_PYTHON_HEADERS(mandatory=True)
100 if sys.platform == 'darwin' and not conf.env['HAVE_ENVIRON_DECL']:
101 # Mac OSX needs to have this and it's also needed that the python is compiled with this
102 # otherwise you face errors about common symbols
103 if not conf.CHECK_SHLIB_W_PYTHON("Checking if -fno-common is needed"):
104 conf.ADD_CFLAGS('-fno-common')
105 if not conf.CHECK_SHLIB_W_PYTHON("Checking if -undefined dynamic_lookup is not need"):
106 conf.env.append_value('shlib_LINKFLAGS', ['-undefined', 'dynamic_lookup'])
108 if sys.platform == 'darwin':
109 conf.ADD_LDFLAGS('-framework CoreFoundation')
111 if int(conf.env['PYTHON_VERSION'][0]) >= 3:
112 raise Utils.WafError('Python version 3.x is not supported by Samba yet')
114 conf.RECURSE('dynconfig')
116 if conf.CHECK_FOR_THIRD_PARTY():
117 conf.RECURSE('third_party')
118 else:
119 if not conf.CHECK_ZLIB():
120 raise Utils.WafError('zlib development packages have not been found.\nIf third_party is installed, check that it is in the proper place.')
121 else:
122 conf.define('USING_SYSTEM_ZLIB',1)
124 if not conf.CHECK_POPT():
125 raise Utils.WafError('popt development packages have not been found.\nIf third_party is installed, check that it is in the proper place.')
126 else:
127 conf.define('USING_SYSTEM_POPT', 1)
129 conf.RECURSE('lib/ldb')
131 if Options.options.with_system_mitkrb5:
132 conf.PROCESS_SEPARATE_RULE('system_mitkrb5')
133 if not (Options.options.without_ad_dc or Options.options.with_system_mitkrb5):
134 conf.DEFINE('AD_DC_BUILD_IS_ENABLED', 1)
135 # Only process heimdal_build for non-MIT KRB5 builds
136 # When MIT KRB5 checks are done as above, conf.env.KRB5_VENDOR will be set
137 # to the lowcased output of 'krb5-config --vendor'.
138 # If it is not set or the output is 'heimdal', we are dealing with
139 # system-provided or embedded Heimdal build
140 if conf.CONFIG_GET('KRB5_VENDOR') in (None, 'heimdal'):
141 conf.RECURSE('source4/heimdal_build')
142 conf.RECURSE('source4/lib/tls')
143 conf.RECURSE('source4/ntvfs/sysdep')
144 conf.RECURSE('lib/util')
145 conf.RECURSE('lib/util/charset')
146 conf.RECURSE('source4/auth')
147 conf.RECURSE('nsswitch')
148 conf.RECURSE('libcli/smbreadline')
149 conf.RECURSE('lib/crypto')
150 conf.RECURSE('pidl')
151 conf.RECURSE('selftest')
152 if conf.CONFIG_GET('ENABLE_SELFTEST'):
153 conf.RECURSE('lib/nss_wrapper')
154 conf.RECURSE('lib/resolv_wrapper')
155 conf.RECURSE('lib/socket_wrapper')
156 conf.RECURSE('lib/uid_wrapper')
157 conf.RECURSE('source3')
158 conf.RECURSE('lib/texpect')
159 if conf.env.with_ctdb:
160 conf.RECURSE('ctdb')
162 conf.SAMBA_CHECK_UNDEFINED_SYMBOL_FLAGS()
164 # gentoo always adds this. We want our normal build to be as
165 # strict as the strictest OS we support, so adding this here
166 # allows us to find problems on our development hosts faster.
167 # It also results in faster load time.
169 conf.env.asneeded_ldflags = conf.ADD_LDFLAGS('-Wl,--as-needed', testflags=True)
171 if not conf.CHECK_NEED_LC("-lc not needed"):
172 conf.ADD_LDFLAGS('-lc', testflags=False)
174 if not conf.CHECK_CODE('#include "tests/summary.c"',
175 define='SUMMARY_PASSES',
176 addmain=False,
177 msg='Checking configure summary'):
178 raise Utils.WafError('configure summary failed')
180 if Options.options.enable_pie != False:
181 if Options.options.enable_pie == True:
182 need_pie = True
183 else:
184 # not specified, only build PIEs if supported by compiler
185 need_pie = False
186 if conf.check_cc(cflags='-fPIE', ldflags='-pie', mandatory=need_pie,
187 msg="Checking compiler for PIE support"):
188 conf.env['ENABLE_PIE'] = True
190 if Options.options.enable_relro != False:
191 if Options.options.enable_relro == True:
192 need_relro = True
193 else:
194 # not specified, only build RELROs if supported by compiler
195 need_relro = False
196 if conf.check_cc(cflags='', ldflags='-Wl,-z,relro,-z,now', mandatory=need_relro,
197 msg="Checking compiler for full RELRO support"):
198 conf.env['ENABLE_RELRO'] = True
200 conf.SAMBA_CONFIG_H('include/config.h')
202 def etags(ctx):
203 '''build TAGS file using etags'''
204 import Utils
205 source_root = os.path.dirname(Utils.g_module.root_path)
206 cmd = 'rm -f %s/TAGS && (find %s -name "*.[ch]" | egrep -v \.inst\. | xargs -n 100 etags -a)' % (source_root, source_root)
207 print("Running: %s" % cmd)
208 status = os.system(cmd)
209 if os.WEXITSTATUS(status):
210 raise Utils.WafError('etags failed')
212 def ctags(ctx):
213 "build 'tags' file using ctags"
214 import Utils
215 source_root = os.path.dirname(Utils.g_module.root_path)
216 cmd = 'ctags --python-kinds=-i $(find %s -name "*.[ch]" | grep -v "*_proto\.h" | egrep -v \.inst\.) $(find %s -name "*.py")' % (source_root, source_root)
217 print("Running: %s" % cmd)
218 status = os.system(cmd)
219 if os.WEXITSTATUS(status):
220 raise Utils.WafError('ctags failed')
223 # putting this here enabled build in the list
224 # of commands in --help
225 def build(bld):
226 '''build all targets'''
227 samba_version.load_version(env=bld.env, is_install=bld.is_install)
230 def pydoctor(ctx):
231 '''build python apidocs'''
232 bp = os.path.abspath('bin/python')
233 mpaths = {}
234 modules = ['talloc', 'tdb', 'ldb']
235 for m in modules:
236 f = os.popen("PYTHONPATH=%s python -c 'import %s; print %s.__file__'" % (bp, m, m), 'r')
237 try:
238 mpaths[m] = f.read().strip()
239 finally:
240 f.close()
241 mpaths['main'] = bp
242 cmd = ('PYTHONPATH=%(main)s pydoctor --introspect-c-modules --project-name=Samba '
243 '--project-url=http://www.samba.org --make-html --docformat=restructuredtext '
244 '--add-package bin/python/samba ' + ''.join('--add-module %s ' % n for n in modules))
245 cmd = cmd % mpaths
246 print("Running: %s" % cmd)
247 status = os.system(cmd)
248 if os.WEXITSTATUS(status):
249 raise Utils.WafError('pydoctor failed')
252 def pep8(ctx):
253 '''run pep8 validator'''
254 cmd='PYTHONPATH=bin/python pep8 -r bin/python/samba'
255 print("Running: %s" % cmd)
256 status = os.system(cmd)
257 if os.WEXITSTATUS(status):
258 raise Utils.WafError('pep8 failed')
261 def wafdocs(ctx):
262 '''build wafsamba apidocs'''
263 from samba_utils import recursive_dirlist
264 os.system('pwd')
265 list = recursive_dirlist('../buildtools/wafsamba', '.', pattern='*.py')
267 cmd='PYTHONPATH=bin/python pydoctor --project-name=wafsamba --project-url=http://www.samba.org --make-html --docformat=restructuredtext'
268 print(list)
269 for f in list:
270 cmd += ' --add-module %s' % f
271 print("Running: %s" % cmd)
272 status = os.system(cmd)
273 if os.WEXITSTATUS(status):
274 raise Utils.WafError('wafdocs failed')
277 def dist():
278 '''makes a tarball for distribution'''
279 sambaversion = samba_version.load_version(env=None)
281 os.system("make -C ctdb/doc")
282 samba_dist.DIST_FILES('ctdb/doc:ctdb/doc', extend=True)
284 os.system(srcdir + "/release-scripts/build-manpages-nogit")
285 samba_dist.DIST_FILES('bin/docs:docs', extend=True)
287 if sambaversion.IS_SNAPSHOT:
288 # write .distversion file and add to tar
289 if not os.path.isdir(blddir):
290 os.makedirs(blddir)
291 distversionf = tempfile.NamedTemporaryFile(mode='w', prefix='.distversion',dir=blddir)
292 for field in sambaversion.vcs_fields:
293 distveroption = field + '=' + str(sambaversion.vcs_fields[field])
294 distversionf.write(distveroption + '\n')
295 distversionf.flush()
296 samba_dist.DIST_FILES('%s:.distversion' % distversionf.name, extend=True)
298 samba_dist.dist()
299 distversionf.close()
300 else:
301 samba_dist.dist()
304 def distcheck():
305 '''test that distribution tarball builds and installs'''
306 samba_version.load_version(env=None)
307 import Scripting
308 d = Scripting.distcheck
311 def wildcard_cmd(cmd):
312 '''called on a unknown command'''
313 from samba_wildcard import run_named_build_task
314 run_named_build_task(cmd)
316 def main():
317 from samba_wildcard import wildcard_main
319 wildcard_main(wildcard_cmd)
320 Scripting.main = main
322 def reconfigure(ctx):
323 '''reconfigure if config scripts have changed'''
324 import samba_utils
325 samba_utils.reconfigure(ctx)
328 if os.path.isdir(os.path.join(srcdir, ".git")):
329 # Check if there are submodules that are checked out but out of date.
330 for submodule, status in samba_git.read_submodule_status(srcdir):
331 if status == "out-of-date":
332 raise Utils.WafError("some submodules are out of date. Please run 'git submodule update'")