1 dnl Copyright (c) 2001-2004, Roger Dingledine
2 dnl Copyright (c) 2004-2006, Roger Dingledine, Nick Mathewson
3 dnl Copyright (c) 2007-2015, The Tor Project, Inc.
4 dnl See LICENSE for licensing information
7 AC_INIT([tor],[0.2.9.2-alpha-dev])
8 AC_CONFIG_SRCDIR([src/or/main.c])
9 AC_CONFIG_MACRO_DIR([m4])
11 # "foreign" means we don't follow GNU package layout standards
12 # "1.11" means we require automake version 1.11 or newer
13 # "subdir-objects" means put .o files in the same directory as the .c files
14 AM_INIT_AUTOMAKE([foreign 1.11 subdir-objects])
16 m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])])
17 AC_CONFIG_HEADERS([orconfig.h])
19 AC_USE_SYSTEM_EXTENSIONS
24 if test -f "/etc/redhat-release"; then
25 if test -f "/usr/kerberos/include"; then
26 CPPFLAGS="$CPPFLAGS -I/usr/kerberos/include"
30 # Not a no-op; we want to make sure that CPPFLAGS is set before we use
31 # the += operator on it in src/or/Makefile.am
32 CPPFLAGS="$CPPFLAGS -I\${top_srcdir}/src/common"
34 AC_ARG_ENABLE(openbsd-malloc,
35 AS_HELP_STRING(--enable-openbsd-malloc, [use malloc code from OpenBSD. Linux only]))
36 AC_ARG_ENABLE(static-openssl,
37 AS_HELP_STRING(--enable-static-openssl, [link against a static openssl library. Requires --with-openssl-dir]))
38 AC_ARG_ENABLE(static-libevent,
39 AS_HELP_STRING(--enable-static-libevent, [link against a static libevent library. Requires --with-libevent-dir]))
40 AC_ARG_ENABLE(static-zlib,
41 AS_HELP_STRING(--enable-static-zlib, [link against a static zlib library. Requires --with-zlib-dir]))
42 AC_ARG_ENABLE(static-tor,
43 AS_HELP_STRING(--enable-static-tor, [create an entirely static Tor binary. Requires --with-openssl-dir and --with-libevent-dir and --with-zlib-dir]))
44 AC_ARG_ENABLE(unittests,
45 AS_HELP_STRING(--disable-unittests, [don't build unit tests for Tor. Risky!]))
46 AC_ARG_ENABLE(coverage,
47 AS_HELP_STRING(--enable-coverage, [enable coverage support in the unit-test build]))
48 AC_ARG_ENABLE(asserts-in-tests,
49 AS_HELP_STRING(--disable-asserts-in-tests, [disable tor_assert() calls in the unit tests, for branch coverage]))
50 AC_ARG_ENABLE(system-torrc,
51 AS_HELP_STRING(--disable-system-torrc, [don't look for a system-wide torrc file]))
53 if test "x$enable_coverage" != "xyes" -a "x$enable_asserts_in_tests" = "xno" ; then
54 AC_MSG_ERROR([Can't disable assertions outside of coverage build])
57 AM_CONDITIONAL(UNITTESTS_ENABLED, test "x$enable_unittests" != "xno")
58 AM_CONDITIONAL(COVERAGE_ENABLED, test "x$enable_coverage" = "xyes")
59 AM_CONDITIONAL(DISABLE_ASSERTS_IN_UNIT_TESTS, test "x$enable_asserts_in_tests" = "xno")
61 if test "$enable_static_tor" = "yes"; then
62 enable_static_libevent="yes";
63 enable_static_openssl="yes";
64 enable_static_zlib="yes";
65 CFLAGS="$CFLAGS -static"
68 if test "$enable_system_torrc" = "no"; then
69 AC_DEFINE(DISABLE_SYSTEM_TORRC, 1,
70 [Defined if we're not going to look for a torrc in SYSCONF])
73 AM_CONDITIONAL(USE_OPENBSD_MALLOC, test "x$enable_openbsd_malloc" = "xyes")
75 AC_ARG_ENABLE(asciidoc,
76 AS_HELP_STRING(--disable-asciidoc, [don't use asciidoc (disables building of manpages)]),
77 [case "${enableval}" in
78 "yes") asciidoc=true ;;
79 "no") asciidoc=false ;;
80 *) AC_MSG_ERROR(bad value for --disable-asciidoc) ;;
81 esac], [asciidoc=true])
83 # systemd notify support
84 AC_ARG_ENABLE(systemd,
85 AS_HELP_STRING(--enable-systemd, [enable systemd notification support]),
86 [case "${enableval}" in
87 "yes") systemd=true ;;
88 "no") systemd=false ;;
89 * ) AC_MSG_ERROR(bad value for --enable-systemd) ;;
90 esac], [systemd=auto])
95 if test "x$enable_systemd" = "xno"; then
98 PKG_CHECK_MODULES(SYSTEMD,
102 if test "x$have_systemd" = "xno"; then
103 AC_MSG_NOTICE([Okay, checking for systemd a different way...])
104 PKG_CHECK_MODULES(SYSTEMD,
111 if test "x$have_systemd" = "xyes"; then
112 AC_DEFINE(HAVE_SYSTEMD,1,[Have systemd])
113 TOR_SYSTEMD_CFLAGS="${SYSTEMD_CFLAGS}"
114 TOR_SYSTEMD_LIBS="${SYSTEMD_LIBS}"
115 PKG_CHECK_MODULES(LIBSYSTEMD209, [libsystemd >= 209],
116 [AC_DEFINE(HAVE_SYSTEMD_209,1,[Have systemd v209 or more])], [])
118 AC_SUBST(TOR_SYSTEMD_CFLAGS)
119 AC_SUBST(TOR_SYSTEMD_LIBS)
121 if test "x$enable_systemd" = "xyes" -a "x$have_systemd" != "xyes" ; then
122 AC_MSG_ERROR([Explicitly requested systemd support, but systemd not found])
127 AC_DEFINE(_REENTRANT, 1, [Define on some platforms to activate x_r() functions in time.h])
131 AC_ARG_ENABLE(gcc-warnings,
132 AS_HELP_STRING(--enable-gcc-warnings, [deprecated alias for enable-fatal-warnings]))
133 AC_ARG_ENABLE(fatal-warnings,
134 AS_HELP_STRING(--enable-fatal-warnings, [tell the compiler to treat all warnings as errors.]))
135 AC_ARG_ENABLE(gcc-warnings-advisory,
136 AS_HELP_STRING(--disable-gcc-warnings-advisory, [disable the regular verbose warnings]))
138 dnl Others suggest '/gs /safeseh /nxcompat /dynamicbase' for non-gcc on Windows
139 AC_ARG_ENABLE(gcc-hardening,
140 AS_HELP_STRING(--disable-gcc-hardening, [disable compiler security checks]))
142 AC_ARG_ENABLE(expensive-hardening,
143 AS_HELP_STRING(--enable-expensive-hardening, [enable more expensive compiler hardening; makes Tor slower]))
145 dnl Linker hardening options
146 dnl Currently these options are ELF specific - you can't use this with MacOSX
147 AC_ARG_ENABLE(linker-hardening,
148 AS_HELP_STRING(--disable-linker-hardening, [disable linker security fixups]))
150 AC_ARG_ENABLE(local-appdata,
151 AS_HELP_STRING(--enable-local-appdata, [default to host local application data paths on Windows]))
152 if test "$enable_local_appdata" = "yes"; then
153 AC_DEFINE(ENABLE_LOCAL_APPDATA, 1,
154 [Defined if we default to host local appdata paths on Windows])
158 AC_ARG_ENABLE(tor2web-mode,
159 AS_HELP_STRING(--enable-tor2web-mode, [support tor2web non-anonymous mode]),
160 [if test "x$enableval" = "xyes"; then
161 CFLAGS="$CFLAGS -D ENABLE_TOR2WEB_MODE=1"
164 AC_ARG_ENABLE(tool-name-check,
165 AS_HELP_STRING(--disable-tool-name-check, [check for sanely named toolchain when cross-compiling]))
167 AC_ARG_ENABLE(seccomp,
168 AS_HELP_STRING(--disable-seccomp, [do not attempt to use libseccomp]))
170 AC_ARG_ENABLE(libscrypt,
171 AS_HELP_STRING(--disable-libscrypt, [do not attempt to use libscrypt]))
173 dnl check for the correct "ar" when cross-compiling
174 AN_MAKEVAR([AR], [AC_PROG_AR])
175 AN_PROGRAM([ar], [AC_PROG_AR])
176 AC_DEFUN([AC_PROG_AR], [AC_CHECK_TOOL([AR], [ar], [ar])])
179 dnl Check whether the above macro has settled for a simply named tool even
180 dnl though we're cross compiling. We must do this before running AC_PROG_CC,
181 dnl because that will find any cc on the system, not only the cross-compiler,
182 dnl and then verify that a binary built with this compiler runs on the
183 dnl build system. It will then come to the false conclusion that we're not
185 if test "x$enable_tool_name_check" != "xno"; then
186 if test "x$ac_tool_warned" = "xyes"; then
187 AC_MSG_ERROR([We are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
188 elif test "x$ac_ct_AR" != "x" -a "x$cross_compiling" = "xmaybe"; then
189 AC_MSG_ERROR([We think we are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
198 AC_PATH_PROG([PERL], [perl])
200 dnl autoconf 2.59 appears not to support AC_PROG_SED
201 AC_CHECK_PROG([SED],[sed],[sed],[/bin/false])
203 dnl check for asciidoc and a2x
204 AC_PATH_PROG([ASCIIDOC], [asciidoc], none)
205 AC_PATH_PROGS([A2X], [a2x a2x.py], none)
207 AM_CONDITIONAL(USE_ASCIIDOC, test "x$asciidoc" = "xtrue")
209 AM_CONDITIONAL(USE_FW_HELPER, test "x$natpmp" = "xtrue" || test "x$upnp" = "xtrue")
210 AM_CONDITIONAL(NAT_PMP, test "x$natpmp" = "xtrue")
211 AM_CONDITIONAL(MINIUPNPC, test "x$upnp" = "xtrue")
215 AC_ARG_VAR([PYTHON], [path to Python binary])
216 AC_CHECK_PROGS(PYTHON, [python python2 python2.7 python3 python3.3])
217 if test "x$PYTHON" = "x"; then
218 AC_MSG_WARN([Python unavailable; some tests will not be run.])
220 AM_CONDITIONAL(USEPYTHON, [test "x$PYTHON" != "x"])
222 ifdef([AC_C_FLEXIBLE_ARRAY_MEMBER], [
223 AC_C_FLEXIBLE_ARRAY_MEMBER
225 dnl Maybe we've got an old autoconf...
226 AC_CACHE_CHECK([for flexible array members],
230 struct abc { int a; char b[]; };
232 struct abc *def = malloc(sizeof(struct abc)+sizeof(char));
235 [tor_cv_c_flexarray=yes],
236 [tor_cv_c_flexarray=no])])
237 if test "$tor_cv_flexarray" = "yes"; then
238 AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
240 AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [1], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
244 AC_CACHE_CHECK([for working C99 mid-block declaration syntax],
247 [AC_LANG_PROGRAM([], [int x; x = 3; int y; y = 4 + x;])],
248 [tor_cv_c_c99_decl=yes],
249 [tor_cv_c_c99_decl=no] )])
250 if test "$tor_cv_c_c99_decl" != "yes"; then
251 AC_MSG_ERROR([Your compiler doesn't support c99 mid-block declarations. This is required as of Tor 0.2.6.x])
254 AC_CACHE_CHECK([for working C99 designated initializers],
255 tor_cv_c_c99_designated_init,
257 [AC_LANG_PROGRAM([struct s { int a; int b; };],
258 [[ struct s ss = { .b = 5, .a = 6 }; ]])],
259 [tor_cv_c_c99_designated_init=yes],
260 [tor_cv_c_c99_designated_init=no] )])
262 if test "$tor_cv_c_c99_designated_init" != "yes"; then
263 AC_MSG_ERROR([Your compiler doesn't support c99 designated initializers. This is required as of Tor 0.2.6.x])
267 AC_ARG_WITH(tor-user,
268 AS_HELP_STRING(--with-tor-user=NAME, [specify username for tor daemon]),
276 AC_ARG_WITH(tor-group,
277 AS_HELP_STRING(--with-tor-group=NAME, [specify group name for tor daemon]),
285 dnl If _WIN32 is defined and non-zero, we are building for win32
286 AC_MSG_CHECKING([for win32])
287 AC_RUN_IFELSE([AC_LANG_SOURCE([
288 int main(int c, char **v) {
299 bwin32=true; AC_MSG_RESULT([yes]),
300 bwin32=false; AC_MSG_RESULT([no]),
301 bwin32=cross; AC_MSG_RESULT([cross])
304 if test "$bwin32" = "cross"; then
305 AC_MSG_CHECKING([for win32 (cross)])
306 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
308 int main(int c, char **v) {return 0;}
311 int main(int c, char **v) {return x(y);}
314 bwin32=true; AC_MSG_RESULT([yes]),
315 bwin32=false; AC_MSG_RESULT([no]))
320 /* Defined to access windows functions and definitions for >=WinXP */
322 # define WINVER 0x0501
325 /* Defined to access _other_ windows functions and definitions for >=WinXP */
326 # ifndef _WIN32_WINNT
327 # define _WIN32_WINNT 0x0501
330 /* Defined to avoid including some windows headers as part of Windows.h */
331 # ifndef WIN32_LEAN_AND_MEAN
332 # define WIN32_LEAN_AND_MEAN 1
338 AM_CONDITIONAL(BUILD_NT_SERVICES, test "x$bwin32" = "xtrue")
340 dnl Enable C99 when compiling with MIPSpro
341 AC_MSG_CHECKING([for MIPSpro compiler])
342 AC_COMPILE_IFELSE([AC_LANG_PROGRAM(, [
343 #if (defined(__sgi) && defined(_COMPILER_VERSION))
348 bmipspro=false; AC_MSG_RESULT(no),
349 bmipspro=true; AC_MSG_RESULT(yes))
351 if test "$bmipspro" = "true"; then
352 CFLAGS="$CFLAGS -c99"
357 AC_SEARCH_LIBS(socket, [socket network])
358 AC_SEARCH_LIBS(gethostbyname, [nsl])
359 AC_SEARCH_LIBS(dlopen, [dl])
360 AC_SEARCH_LIBS(inet_aton, [resolv])
361 AC_SEARCH_LIBS(backtrace, [execinfo])
363 AC_SEARCH_LIBS([clock_gettime], [rt])
364 if test "$LIBS" != "$saved_LIBS"; then
365 # Looks like we need -lrt for clock_gettime().
369 AC_SEARCH_LIBS(pthread_create, [pthread])
370 AC_SEARCH_LIBS(pthread_detach, [pthread])
372 AM_CONDITIONAL(THREADS_WIN32, test "$bwin32" = "true")
373 AM_CONDITIONAL(THREADS_PTHREADS, test "$bwin32" = "false")
377 RtlSecureZeroMemory \
381 backtrace_symbols_fd \
427 if test "$bwin32" != "true"; then
428 AC_CHECK_HEADERS(pthread.h)
429 AC_CHECK_FUNCS(pthread_create)
430 AC_CHECK_FUNCS(pthread_condattr_setclock)
433 if test "$bwin32" = "true"; then
434 AC_CHECK_DECLS([SecureZeroMemory, _getwch], , , [
441 AM_CONDITIONAL(BUILD_READPASSPHRASE_C,
442 test "x$ac_cv_func_readpassphrase" = "xno" && test "$bwin32" = "false")
444 dnl ------------------------------------------------------
445 dnl Where do you live, libevent? And how do we call you?
447 if test "$bwin32" = "true"; then
448 TOR_LIB_WS32=-lws2_32
449 TOR_LIB_IPHLPAPI=-liphlpapi
450 # Some of the cargo-cults recommend -lwsock32 as well, but I don't
451 # think it's actually necessary.
457 AC_SUBST(TOR_LIB_WS32)
458 AC_SUBST(TOR_LIB_GDI)
459 AC_SUBST(TOR_LIB_IPHLPAPI)
461 tor_libevent_pkg_redhat="libevent"
462 tor_libevent_pkg_debian="libevent-dev"
463 tor_libevent_devpkg_redhat="libevent-devel"
464 tor_libevent_devpkg_debian="libevent-dev"
466 dnl On Gnu/Linux or any place we require it, we'll add librt to the Libevent
467 dnl linking for static builds.
468 STATIC_LIBEVENT_FLAGS=""
469 if test "$enable_static_libevent" = "yes"; then
470 if test "$have_rt" = "yes"; then
471 STATIC_LIBEVENT_FLAGS=" -lrt "
475 TOR_SEARCH_LIBRARY(libevent, $trylibeventdir, [-levent $STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32], [
477 #include <winsock2.h>
479 #include <sys/time.h>
480 #include <sys/types.h>
481 #include <event2/event.h>], [
483 #include <winsock2.h>
485 void *event_init(void);],
488 {WSADATA d; WSAStartup(0x101,&d); }
491 ], [--with-libevent-dir], [/opt/libevent])
493 dnl Now check for particular libevent functions.
495 save_LDFLAGS="$LDFLAGS"
496 save_CPPFLAGS="$CPPFLAGS"
497 LIBS="-levent $STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32 $LIBS"
498 LDFLAGS="$TOR_LDFLAGS_libevent $LDFLAGS"
499 CPPFLAGS="$TOR_CPPFLAGS_libevent $CPPFLAGS"
500 AC_CHECK_FUNCS([evutil_secure_rng_set_urandom_device_file \
501 evutil_secure_rng_add_bytes \
504 AC_CHECK_HEADERS(event2/event.h event2/dns.h event2/bufferevent_ssl.h)
506 LIBS="$STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32 $save_LIBS"
508 if test "$enable_static_libevent" = "yes"; then
509 if test "$tor_cv_library_libevent_dir" = "(system)"; then
510 AC_MSG_ERROR("You must specify an explicit --with-libevent-dir=x option when using --enable-static-libevent")
512 TOR_LIBEVENT_LIBS="$TOR_LIBDIR_libevent/libevent.a $STATIC_LIBEVENT_FLAGS"
515 if test "x$ac_cv_header_event2_event_h" = "xyes"; then
516 AC_SEARCH_LIBS(event_new, [event event_core], , AC_MSG_ERROR("libevent2 is installed but linking it failed while searching for event_new"))
517 AC_SEARCH_LIBS(evdns_base_new, [event event_extra], , AC_MSG_ERROR("libevent2 is installed but linking it failed while searching for evdns_base_new"))
519 if test "$ac_cv_search_event_new" != "none required"; then
520 TOR_LIBEVENT_LIBS="$ac_cv_search_event_new"
522 if test "$ac_cv_search_evdns_base_new" != "none required"; then
523 TOR_LIBEVENT_LIBS="$ac_cv_search_evdns_base_new $TOR_LIBEVENT_LIBS"
526 AC_MSG_ERROR("libevent2 is required but the headers could not be found")
531 LDFLAGS="$save_LDFLAGS"
532 CPPFLAGS="$save_CPPFLAGS"
534 dnl Check that libevent is at least at version 2.0.10, the first stable
535 dnl release of its series
536 CPPFLAGS="$CPPFLAGS $TOR_CPPFLAGS_libevent"
537 AC_MSG_CHECKING([whether Libevent is new enough])
538 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
539 #include <event2/event.h>
540 #if !defined(LIBEVENT_VERSION_NUMBER) || LIBEVENT_VERSION_NUMBER < 0x02000a00
546 ])], [ AC_MSG_RESULT([yes]) ],
547 [ AC_MSG_RESULT([no])
548 AC_MSG_ERROR([Libevent is not new enough. We require 2.0.10-stable or later]) ] )
551 LDFLAGS="$save_LDFLAGS"
552 CPPFLAGS="$save_CPPFLAGS"
554 AC_SUBST(TOR_LIBEVENT_LIBS)
556 dnl ------------------------------------------------------
557 dnl Where do you live, libm?
559 dnl On some platforms (Haiku/BeOS) the math library is
560 dnl part of libroot. In which case don't link against lm
563 AC_SEARCH_LIBS(pow, [m], , AC_MSG_ERROR([Could not find pow in libm or libc.]))
564 if test "$ac_cv_search_pow" != "none required"; then
565 TOR_LIB_MATH="$ac_cv_search_pow"
568 AC_SUBST(TOR_LIB_MATH)
570 dnl ------------------------------------------------------
571 dnl Where do you live, openssl? And how do we call you?
573 tor_openssl_pkg_redhat="openssl"
574 tor_openssl_pkg_debian="libssl-dev"
575 tor_openssl_devpkg_redhat="openssl-devel"
576 tor_openssl_devpkg_debian="libssl-dev"
578 ALT_openssl_WITHVAL=""
580 AS_HELP_STRING(--with-ssl-dir=PATH, [obsolete alias for --with-openssl-dir]),
582 if test "x$withval" != "xno" && test "x$withval" != "x"; then
583 ALT_openssl_WITHVAL="$withval"
587 TOR_SEARCH_LIBRARY(openssl, $tryssldir, [-lssl -lcrypto $TOR_LIB_GDI],
588 [#include <openssl/rand.h>],
589 [void RAND_add(const void *buf, int num, double entropy);],
590 [RAND_add((void*)0,0,0);], [],
591 [/usr/local/openssl /usr/lib/openssl /usr/local/ssl /usr/lib/ssl /usr/local /usr/athena /opt/openssl])
593 dnl XXXX check for OPENSSL_VERSION_NUMBER == SSLeay()
595 if test "$enable_static_openssl" = "yes"; then
596 if test "$tor_cv_library_openssl_dir" = "(system)"; then
597 AC_MSG_ERROR("You must specify an explicit --with-openssl-dir=x option when using --enable-static-openssl")
599 TOR_OPENSSL_LIBS="$TOR_LIBDIR_openssl/libssl.a $TOR_LIBDIR_openssl/libcrypto.a"
602 TOR_OPENSSL_LIBS="-lssl -lcrypto"
604 AC_SUBST(TOR_OPENSSL_LIBS)
606 dnl Now check for particular openssl functions.
608 save_LDFLAGS="$LDFLAGS"
609 save_CPPFLAGS="$CPPFLAGS"
610 LIBS="$TOR_OPENSSL_LIBS $LIBS"
611 LDFLAGS="$TOR_LDFLAGS_openssl $LDFLAGS"
612 CPPFLAGS="$TOR_CPPFLAGS_openssl $CPPFLAGS"
615 #include <openssl/opensslv.h>
616 #if OPENSSL_VERSION_NUMBER < 0x1000000fL
621 [ AC_ERROR([OpenSSL is too old. We require 1.0.0 or later. You can specify a path to a newer one with --with-openssl-dir.]) ])
624 #include <openssl/opensslv.h>
625 #include <openssl/evp.h>
626 #if defined(OPENSSL_NO_EC) || defined(OPENSSL_NO_ECDH) || defined(OPENSSL_NO_ECDSA)
629 #if !defined(NID_X9_62_prime256v1) || !defined(NID_secp224r1)
630 #error "curves unavailable"
634 [ AC_ERROR([OpenSSL is built without full ECC support, including curves P256 and P224. You can specify a path to one with ECC support with --with-openssl-dir.]) ])
636 AC_CHECK_MEMBERS([struct ssl_method_st.get_cipher_by_char], , ,
637 [#include <openssl/ssl.h>
641 SSL_SESSION_get_master_key \
642 SSL_get_server_random \
643 SSL_get_client_ciphers \
644 SSL_get_client_random \
649 dnl Check if OpenSSL has scrypt implementation.
650 AC_CHECK_FUNCS([ EVP_PBE_scrypt ])
653 LDFLAGS="$save_LDFLAGS"
654 CPPFLAGS="$save_CPPFLAGS"
656 dnl ------------------------------------------------------
657 dnl Where do you live, zlib? And how do we call you?
659 tor_zlib_pkg_redhat="zlib"
660 tor_zlib_pkg_debian="zlib1g"
661 tor_zlib_devpkg_redhat="zlib-devel"
662 tor_zlib_devpkg_debian="zlib1g-dev"
664 TOR_SEARCH_LIBRARY(zlib, $tryzlibdir, [-lz],
666 [const char * zlibVersion(void);],
667 [zlibVersion();], [--with-zlib-dir],
670 if test "$enable_static_zlib" = "yes"; then
671 if test "$tor_cv_library_zlib_dir" = "(system)"; then
672 AC_MSG_ERROR("You must specify an explicit --with-zlib-dir=x option when
673 using --enable-static-zlib")
675 TOR_ZLIB_LIBS="$TOR_LIBDIR_zlib/libz.a"
680 AC_SUBST(TOR_ZLIB_LIBS)
682 dnl ----------------------------------------------------------------------
683 dnl Check if libcap is available for capabilities.
685 tor_cap_pkg_debian="libcap2"
686 tor_cap_pkg_redhat="libcap"
687 tor_cap_devpkg_debian="libcap-dev"
688 tor_cap_devpkg_redhat="libcap-devel"
690 AC_CHECK_LIB([cap], [cap_init], [],
691 AC_MSG_NOTICE([Libcap was not found. Capabilities will not be usable.])
693 AC_CHECK_FUNCS(cap_set_proc)
695 dnl ---------------------------------------------------------------------
696 dnl Now that we know about our major libraries, we can check for compiler
697 dnl and linker hardening options. We need to do this with the libraries known,
698 dnl since sometimes the linker will like an option but not be willing to
699 dnl use it with a build of a library.
701 all_ldflags_for_check="$TOR_LDFLAGS_zlib $TOR_LDFLAGS_openssl $TOR_LDFLAGS_libevent"
702 all_libs_for_check="$TOR_ZLIB_LIBS $TOR_LIB_MATH $TOR_LIBEVENT_LIBS $TOR_OPENSSL_LIBS $TOR_SYSTEMD_LIBS $TOR_LIB_WS32 $TOR_LIB_GDI $TOR_CAP_LIBS"
709 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
710 #if !defined(__clang__)
712 #endif])], have_clang=yes, have_clang=no)
714 if test "x$enable_gcc_hardening" != "xno"; then
715 CFLAGS="$CFLAGS -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2"
716 if test "x$have_clang" = "xyes"; then
717 TOR_CHECK_CFLAGS(-Qunused-arguments)
719 TOR_CHECK_CFLAGS(-fstack-protector-all, also_link)
720 AS_VAR_PUSHDEF([can_compile], [tor_cv_cflags_-fstack-protector-all])
721 AS_VAR_PUSHDEF([can_link], [tor_can_link_-fstack-protector-all])
722 m4_ifdef([AS_VAR_IF],[
723 AS_VAR_IF(can_compile, [yes],
724 AS_VAR_IF(can_link, [yes],
726 AC_MSG_ERROR([We tried to build with stack protection; it looks like your compiler supports it but your libc does not provide it. Are you missing libssp? (You can --disable-gcc-hardening to ignore this error.)]))
728 AS_VAR_POPDEF([can_link])
729 AS_VAR_POPDEF([can_compile])
730 TOR_CHECK_CFLAGS(-Wstack-protector)
731 TOR_CHECK_CFLAGS(--param ssp-buffer-size=1)
732 if test "$bwin32" = "false"; then
733 TOR_CHECK_CFLAGS(-fPIE)
734 TOR_CHECK_LDFLAGS(-pie, "$all_ldflags_for_check", "$all_libs_for_check")
736 TOR_TRY_COMPILE_WITH_CFLAGS(-ftrapv, also_link, CFLAGS_FTRAPV="-ftrapv", true)
737 TOR_TRY_COMPILE_WITH_CFLAGS(-fwrapv, also_link, CFLAGS_FWRAPV="-fwrapv", true)
738 if test "$tor_cv_cflags__ftrapv" = "yes" && test "$tor_can_link__ftrapv" != "yes"; then
739 AC_MSG_WARN([The compiler supports -ftrapv, but for some reason I was not able to link with -ftrapv. Are you missing run-time support? Run-time hardening will not work as well as it should.])
743 if test "x$enable_expensive_hardening" = "xyes"; then
744 if test "$tor_cv_cflags__ftrapv" != "yes"; then
745 AC_MSG_ERROR([You requested expensive hardening, but the compiler does not seem to support -ftrapv.])
748 TOR_TRY_COMPILE_WITH_CFLAGS([-fsanitize=address], also_link, CFLAGS_ASAN="-fsanitize=address", true)
749 if test "$tor_cv_cflags__fsanitize_address" = "yes" && test "$tor_can_link__fsanitize_address" != "yes"; then
750 AC_MSG_ERROR([The compiler supports -fsanitize=address, but for some reason I was not able to link when using it. Are you missing run-time support? With GCC you need libubsan.so, and with Clang you need libclang_rt.ubsan*])
753 TOR_TRY_COMPILE_WITH_CFLAGS([-fsanitize=undefined], also_link, CFLAGS_UBSAN="-fsanitize=undefined", true)
754 if test "$tor_cv_cflags__fsanitize_address" = "yes" && test "$tor_can_link__fsanitize_address" != "yes"; then
755 AC_MSG_ERROR([The compiler supports -fsanitize=undefined, but for some reason I was not able to link when using it. Are you missing run-time support? With GCC you need libasan.so, and with Clang you need libclang_rt.ubsan*])
758 TOR_CHECK_CFLAGS([-fno-omit-frame-pointer])
761 CFLAGS_BUGTRAP="$CFLAGS_FTRAPV $CFLAGS_ASAN $CFLAGS_UBSAN"
762 CFLAGS_CONSTTIME="$CFLAGS_FWRAPV"
764 mulodi_fixes_ftrapv=no
765 if test "$have_clang" = "yes"; then
766 saved_CFLAGS="$CFLAGS"
767 CFLAGS="$CFLAGS $CFLAGS_FTRAPV"
768 AC_MSG_CHECKING([whether clang -ftrapv can link a 64-bit int multiply])
773 int main(int argc, char **argv)
775 int64_t x = ((int64_t)atoi(argv[1])) * (int64_t)atoi(argv[2])
776 * (int64_t)atoi(argv[3]);
779 [ftrapv_can_link=yes; AC_MSG_RESULT([yes])],
780 [ftrapv_can_link=no; AC_MSG_RESULT([no])])
781 if test "$ftrapv_can_link" = "no"; then
782 AC_MSG_CHECKING([whether defining __mulodi4 fixes that])
787 int64_t __mulodi4(int64_t a, int64_t b, int *overflow) {
791 int main(int argc, char **argv)
793 int64_t x = ((int64_t)atoi(argv[1])) * (int64_t)atoi(argv[2])
794 * (int64_t)atoi(argv[3]);
797 [mulodi_fixes_ftrapv=yes; AC_MSG_RESULT([yes])],
798 [mulodi_fixes_ftrapv=no; AC_MSG_RESULT([no])])
800 CFLAGS="$saved_CFLAGS"
803 AM_CONDITIONAL(ADD_MULODI4, test "$mulodi_fixes_ftrapv" = "yes")
805 dnl These cflags add bunches of branches, and we haven't been able to
806 dnl persuade ourselves that they're suitable for code that needs to be
808 AC_SUBST(CFLAGS_BUGTRAP)
809 dnl These cflags are variant ones sutable for code that needs to be
811 AC_SUBST(CFLAGS_CONSTTIME)
813 if test "x$enable_linker_hardening" != "xno"; then
814 TOR_CHECK_LDFLAGS(-z relro -z now, "$all_ldflags_for_check", "$all_libs_for_check")
817 # For backtrace support
818 TOR_CHECK_LDFLAGS(-rdynamic)
820 dnl ------------------------------------------------------
821 dnl Now see if we have a -fomit-frame-pointer compiler option.
823 saved_CFLAGS="$CFLAGS"
824 TOR_CHECK_CFLAGS(-fomit-frame-pointer)
825 F_OMIT_FRAME_POINTER=''
826 if test "$saved_CFLAGS" != "$CFLAGS"; then
827 if test "x$enable_expensive_hardening" != "xyes"; then
828 F_OMIT_FRAME_POINTER='-fomit-frame-pointer'
831 CFLAGS="$saved_CFLAGS"
832 AC_SUBST(F_OMIT_FRAME_POINTER)
834 dnl ------------------------------------------------------
835 dnl If we are adding -fomit-frame-pointer (or if the compiler's doing it
836 dnl for us, as GCC 4.6 and later do at many optimization levels), then
837 dnl we should try to add -fasynchronous-unwind-tables so that our backtrace
839 TOR_CHECK_CFLAGS(-fasynchronous-unwind-tables)
841 dnl ============================================================
842 dnl Check for libseccomp
844 if test "x$enable_seccomp" != "xno"; then
845 AC_CHECK_HEADERS([seccomp.h])
846 AC_SEARCH_LIBS(seccomp_init, [seccomp])
849 dnl ============================================================
850 dnl Check for libscrypt
852 if test "x$enable_libscrypt" != "xno"; then
853 AC_CHECK_HEADERS([libscrypt.h])
854 AC_SEARCH_LIBS(libscrypt_scrypt, [scrypt])
855 AC_CHECK_FUNCS([libscrypt_scrypt])
858 dnl ============================================================
859 dnl We need an implementation of curve25519.
861 dnl set these defaults.
862 build_curve25519_donna=no
863 build_curve25519_donna_c64=no
864 use_curve25519_donna=no
865 use_curve25519_nacl=no
868 dnl The best choice is using curve25519-donna-c64, but that requires
870 AC_CACHE_CHECK([whether we can use curve25519-donna-c64],
871 tor_cv_can_use_curve25519_donna_c64,
873 [AC_LANG_PROGRAM([dnl
875 typedef unsigned uint128_t __attribute__((mode(TI)));
876 int func(uint64_t a, uint64_t b) {
877 uint128_t c = ((uint128_t)a) * b;
878 int ok = ((uint64_t)(c>>96)) == 522859 &&
879 (((uint64_t)(c>>64))&0xffffffffL) == 3604448702L &&
880 (((uint64_t)(c>>32))&0xffffffffL) == 2351960064L &&
881 (((uint64_t)(c))&0xffffffffL) == 0;
885 int ok = func( ((uint64_t)2000000000) * 1000000000,
886 ((uint64_t)1234567890) << 24);
889 [tor_cv_can_use_curve25519_donna_c64=yes],
890 [tor_cv_can_use_curve25519_donna_c64=no],
892 [AC_LANG_PROGRAM([dnl
894 typedef unsigned uint128_t __attribute__((mode(TI)));
895 int func(uint64_t a, uint64_t b) {
896 uint128_t c = ((uint128_t)a) * b;
897 int ok = ((uint64_t)(c>>96)) == 522859 &&
898 (((uint64_t)(c>>64))&0xffffffffL) == 3604448702L &&
899 (((uint64_t)(c>>32))&0xffffffffL) == 2351960064L &&
900 (((uint64_t)(c))&0xffffffffL) == 0;
904 int ok = func( ((uint64_t)2000000000) * 1000000000,
905 ((uint64_t)1234567890) << 24);
908 [tor_cv_can_use_curve25519_donna_c64=cross],
909 [tor_cv_can_use_curve25519_donna_c64=no])])])
911 AC_CHECK_HEADERS([crypto_scalarmult_curve25519.h \
912 nacl/crypto_scalarmult_curve25519.h])
914 AC_CACHE_CHECK([for nacl compiled with a fast curve25519 implementation],
915 tor_cv_can_use_curve25519_nacl,
916 [tor_saved_LIBS="$LIBS"
919 [AC_LANG_PROGRAM([dnl
920 #ifdef HAVE_CRYPTO_SCALARMULT_CURVE25519_H
921 #include <crypto_scalarmult_curve25519.h>
922 #elif defined(HAVE_NACL_CRYPTO_SCALARMULT_CURVE25519_H)
923 #include <nacl/crypto_scalarmult_curve25519.h>
925 #ifdef crypto_scalarmult_curve25519_ref_BYTES
926 #error Hey, this is the reference implementation! That's not fast.
929 unsigned char *a, *b, *c; crypto_scalarmult_curve25519(a,b,c);
930 ])], [tor_cv_can_use_curve25519_nacl=yes],
931 [tor_cv_can_use_curve25519_nacl=no])
932 LIBS="$tor_saved_LIBS" ])
934 dnl Okay, now we need to figure out which one to actually use. Fall back
935 dnl to curve25519-donna.c
937 if test "x$tor_cv_can_use_curve25519_donna_c64" != "xno"; then
938 build_curve25519_donna_c64=yes
939 use_curve25519_donna=yes
940 elif test "x$tor_cv_can_use_curve25519_nacl" = "xyes"; then
941 use_curve25519_nacl=yes
942 CURVE25519_LIBS=-lnacl
944 build_curve25519_donna=yes
945 use_curve25519_donna=yes
948 if test "x$use_curve25519_donna" = "xyes"; then
949 AC_DEFINE(USE_CURVE25519_DONNA, 1,
950 [Defined if we should use an internal curve25519_donna{,_c64} implementation])
952 if test "x$use_curve25519_nacl" = "xyes"; then
953 AC_DEFINE(USE_CURVE25519_NACL, 1,
954 [Defined if we should use a curve25519 from nacl])
956 AM_CONDITIONAL(BUILD_CURVE25519_DONNA,
957 test "x$build_curve25519_donna" = "xyes")
958 AM_CONDITIONAL(BUILD_CURVE25519_DONNA_C64,
959 test "x$build_curve25519_donna_c64" = "xyes")
960 AC_SUBST(CURVE25519_LIBS)
962 dnl Make sure to enable support for large off_t if available.
965 AC_CHECK_HEADERS([assert.h \
1017 AC_CHECK_HEADERS(sys/param.h)
1019 AC_CHECK_HEADERS(net/if.h, net_if_found=1, net_if_found=0,
1020 [#ifdef HAVE_SYS_TYPES_H
1021 #include <sys/types.h>
1023 #ifdef HAVE_SYS_SOCKET_H
1024 #include <sys/socket.h>
1026 AC_CHECK_HEADERS(net/pfvar.h, net_pfvar_found=1, net_pfvar_found=0,
1027 [#ifdef HAVE_SYS_TYPES_H
1028 #include <sys/types.h>
1030 #ifdef HAVE_SYS_SOCKET_H
1031 #include <sys/socket.h>
1033 #ifdef HAVE_NET_IF_H
1036 #ifdef HAVE_NETINET_IN_H
1037 #include <netinet/in.h>
1040 AC_CHECK_HEADERS(linux/if.h,[],[],
1042 #ifdef HAVE_SYS_SOCKET_H
1043 #include <sys/socket.h>
1047 AC_CHECK_HEADERS(linux/netfilter_ipv4.h,
1048 linux_netfilter_ipv4=1, linux_netfilter_ipv4=0,
1049 [#ifdef HAVE_SYS_TYPES_H
1050 #include <sys/types.h>
1052 #ifdef HAVE_SYS_SOCKET_H
1053 #include <sys/socket.h>
1055 #ifdef HAVE_LIMITS_H
1058 #ifdef HAVE_LINUX_TYPES_H
1059 #include <linux/types.h>
1061 #ifdef HAVE_NETINET_IN6_H
1062 #include <netinet/in6.h>
1064 #ifdef HAVE_NETINET_IN_H
1065 #include <netinet/in.h>
1068 AC_CHECK_HEADERS(linux/netfilter_ipv6/ip6_tables.h,
1069 linux_netfilter_ipv6_ip6_tables=1, linux_netfilter_ipv6_ip6_tables=0,
1070 [#ifdef HAVE_SYS_TYPES_H
1071 #include <sys/types.h>
1073 #ifdef HAVE_SYS_SOCKET_H
1074 #include <sys/socket.h>
1076 #ifdef HAVE_LIMITS_H
1079 #ifdef HAVE_LINUX_TYPES_H
1080 #include <linux/types.h>
1082 #ifdef HAVE_NETINET_IN6_H
1083 #include <netinet/in6.h>
1085 #ifdef HAVE_NETINET_IN_H
1086 #include <netinet/in.h>
1088 #ifdef HAVE_LINUX_IF_H
1089 #include <linux/if.h>
1093 if test "x$net_if_found" = "x1" && test "x$net_pfvar_found" = "x1"; then
1096 if test "x$linux_netfilter_ipv4" = "x1"; then
1099 if test "x$linux_netfilter_ipv6_ip6_tables" = "x1"; then
1102 if test "x$transparent_ok" = "x1"; then
1103 AC_DEFINE(USE_TRANSPARENT, 1, "Define to enable transparent proxy support")
1105 *-*-openbsd* | *-*-bitrig*)
1106 AC_DEFINE(OPENBSD, 1, "Define to handle pf on OpenBSD properly") ;;
1109 AC_MSG_NOTICE([Transparent proxy support enabled, but missing headers.])
1112 AC_CHECK_MEMBERS([struct timeval.tv_sec], , ,
1113 [#ifdef HAVE_SYS_TYPES_H
1114 #include <sys/types.h>
1116 #ifdef HAVE_SYS_TIME_H
1117 #include <sys/time.h>
1120 dnl In case we aren't given a working stdint.h, we'll need to grow our own.
1123 AC_CHECK_SIZEOF(int8_t)
1124 AC_CHECK_SIZEOF(int16_t)
1125 AC_CHECK_SIZEOF(int32_t)
1126 AC_CHECK_SIZEOF(int64_t)
1127 AC_CHECK_SIZEOF(uint8_t)
1128 AC_CHECK_SIZEOF(uint16_t)
1129 AC_CHECK_SIZEOF(uint32_t)
1130 AC_CHECK_SIZEOF(uint64_t)
1131 AC_CHECK_SIZEOF(intptr_t)
1132 AC_CHECK_SIZEOF(uintptr_t)
1134 dnl AC_CHECK_TYPES([int8_t, int16_t, int32_t, int64_t, uint8_t, uint16_t, uint32_t, uint64_t, intptr_t, uintptr_t])
1136 AC_CHECK_SIZEOF(char)
1137 AC_CHECK_SIZEOF(short)
1138 AC_CHECK_SIZEOF(int)
1139 AC_CHECK_SIZEOF(long)
1140 AC_CHECK_SIZEOF(long long)
1141 AC_CHECK_SIZEOF(__int64)
1142 AC_CHECK_SIZEOF(void *)
1143 AC_CHECK_SIZEOF(time_t)
1144 AC_CHECK_SIZEOF(size_t)
1145 AC_CHECK_SIZEOF(pid_t)
1147 AC_CHECK_TYPES([uint, u_char, ssize_t])
1149 AC_PC_FROM_UCONTEXT([:])
1151 dnl used to include sockaddr_storage, but everybody has that.
1152 AC_CHECK_TYPES([struct in6_addr, struct sockaddr_in6, sa_family_t], , ,
1153 [#ifdef HAVE_SYS_TYPES_H
1154 #include <sys/types.h>
1156 #ifdef HAVE_NETINET_IN_H
1157 #include <netinet/in.h>
1159 #ifdef HAVE_NETINET_IN6_H
1160 #include <netinet/in6.h>
1162 #ifdef HAVE_SYS_SOCKET_H
1163 #include <sys/socket.h>
1166 #define _WIN32_WINNT 0x0501
1167 #define WIN32_LEAN_AND_MEAN
1168 #include <winsock2.h>
1169 #include <ws2tcpip.h>
1172 AC_CHECK_MEMBERS([struct in6_addr.s6_addr32, struct in6_addr.s6_addr16, struct sockaddr_in.sin_len, struct sockaddr_in6.sin6_len], , ,
1173 [#ifdef HAVE_SYS_TYPES_H
1174 #include <sys/types.h>
1176 #ifdef HAVE_NETINET_IN_H
1177 #include <netinet/in.h>
1179 #ifdef HAVE_NETINET_IN6_H
1180 #include <netinet/in6.h>
1182 #ifdef HAVE_SYS_SOCKET_H
1183 #include <sys/socket.h>
1186 #define _WIN32_WINNT 0x0501
1187 #define WIN32_LEAN_AND_MEAN
1188 #include <winsock2.h>
1189 #include <ws2tcpip.h>
1193 AC_CHECK_TYPES([rlim_t], , ,
1194 [#ifdef HAVE_SYS_TYPES_H
1195 #include <sys/types.h>
1197 #ifdef HAVE_SYS_TIME_H
1198 #include <sys/time.h>
1200 #ifdef HAVE_SYS_RESOURCE_H
1201 #include <sys/resource.h>
1205 AX_CHECK_SIGN([time_t],
1208 #ifdef HAVE_SYS_TYPES_H
1209 #include <sys/types.h>
1211 #ifdef HAVE_SYS_TIME_H
1212 #include <sys/time.h>
1219 if test "$ax_cv_decl_time_t_signed" = "no"; then
1220 AC_MSG_ERROR([You have an unsigned time_t; Tor does not support that. Please tell the Tor developers about your interesting platform.])
1223 AX_CHECK_SIGN([size_t],
1224 [ tor_cv_size_t_signed=yes ],
1225 [ tor_cv_size_t_signed=no ], [
1226 #ifdef HAVE_SYS_TYPES_H
1227 #include <sys/types.h>
1231 if test "$ax_cv_decl_size_t_signed" = "yes"; then
1232 AC_MSG_ERROR([You have a signed size_t; that's grossly nonconformant.])
1235 AX_CHECK_SIGN([enum always],
1236 [ AC_DEFINE(ENUM_VALS_ARE_SIGNED, 1, [Define if enum is always signed]) ],
1238 enum always { AAA, BBB, CCC };
1241 AC_CHECK_SIZEOF(socklen_t, , [AC_INCLUDES_DEFAULT()
1242 #ifdef HAVE_SYS_SOCKET_H
1243 #include <sys/socket.h>
1247 # We want to make sure that we _don't_ have a cell_t defined, like IRIX does.
1249 AC_CHECK_SIZEOF(cell_t)
1251 # Now make sure that NULL can be represented as zero bytes.
1252 AC_CACHE_CHECK([whether memset(0) sets pointers to NULL], tor_cv_null_is_zero,
1253 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1254 [[#include <stdlib.h>
1257 #ifdef HAVE_STDDEF_H
1260 int main () { char *p1,*p2; p1=NULL; memset(&p2,0,sizeof(p2));
1261 return memcmp(&p1,&p2,sizeof(char*))?1:0; }]])],
1262 [tor_cv_null_is_zero=yes],
1263 [tor_cv_null_is_zero=no],
1264 [tor_cv_null_is_zero=cross])])
1266 if test "$tor_cv_null_is_zero" = "cross"; then
1267 # Cross-compiling; let's hope that the target isn't raving mad.
1268 AC_MSG_NOTICE([Cross-compiling: we'll assume that NULL is represented as a sequence of 0-valued bytes.])
1271 if test "$tor_cv_null_is_zero" != "no"; then
1272 AC_DEFINE([NULL_REP_IS_ZERO_BYTES], 1,
1273 [Define to 1 iff memset(0) sets pointers to NULL])
1276 AC_CACHE_CHECK([whether memset(0) sets doubles to 0.0], tor_cv_dbl0_is_zero,
1277 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1278 [[#include <stdlib.h>
1281 #ifdef HAVE_STDDEF_H
1284 int main () { double d1,d2; d1=0; memset(&d2,0,sizeof(d2));
1285 return memcmp(&d1,&d2,sizeof(d1))?1:0; }]])],
1286 [tor_cv_dbl0_is_zero=yes],
1287 [tor_cv_dbl0_is_zero=no],
1288 [tor_cv_dbl0_is_zero=cross])])
1290 if test "$tor_cv_dbl0_is_zero" = "cross"; then
1291 # Cross-compiling; let's hope that the target isn't raving mad.
1292 AC_MSG_NOTICE([Cross-compiling: we'll assume that 0.0 can be represented as a sequence of 0-valued bytes.])
1295 if test "$tor_cv_dbl0_is_zero" != "no"; then
1296 AC_DEFINE([DOUBLE_0_REP_IS_ZERO_BYTES], 1,
1297 [Define to 1 iff memset(0) sets doubles to 0.0])
1300 # And what happens when we malloc zero?
1301 AC_CACHE_CHECK([whether we can malloc(0) safely.], tor_cv_malloc_zero_works,
1302 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1303 [[#include <stdlib.h>
1306 #ifdef HAVE_STDDEF_H
1309 int main () { return malloc(0)?0:1; }]])],
1310 [tor_cv_malloc_zero_works=yes],
1311 [tor_cv_malloc_zero_works=no],
1312 [tor_cv_malloc_zero_works=cross])])
1314 if test "$tor_cv_malloc_zero_works" = "cross"; then
1315 # Cross-compiling; let's hope that the target isn't raving mad.
1316 AC_MSG_NOTICE([Cross-compiling: we'll assume that we need to check malloc() arguments for 0.])
1319 if test "$tor_cv_malloc_zero_works" = "yes"; then
1320 AC_DEFINE([MALLOC_ZERO_WORKS], 1,
1321 [Define to 1 iff malloc(0) returns a pointer])
1324 # whether we seem to be in a 2s-complement world.
1325 AC_CACHE_CHECK([whether we are using 2s-complement arithmetic], tor_cv_twos_complement,
1326 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1327 [[int main () { int problem = ((-99) != (~99)+1);
1328 return problem ? 1 : 0; }]])],
1329 [tor_cv_twos_complement=yes],
1330 [tor_cv_twos_complement=no],
1331 [tor_cv_twos_complement=cross])])
1333 if test "$tor_cv_twos_complement" = "cross"; then
1334 # Cross-compiling; let's hope that the target isn't raving mad.
1335 AC_MSG_NOTICE([Cross-compiling: we'll assume that negative integers are represented with two's complement.])
1338 if test "$tor_cv_twos_complement" != "no"; then
1339 AC_DEFINE([USING_TWOS_COMPLEMENT], 1,
1340 [Define to 1 iff we represent negative integers with
1344 # What does shifting a negative value do?
1345 AC_CACHE_CHECK([whether right-shift on negative values does sign-extension], tor_cv_sign_extend,
1346 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1347 [[int main () { int okay = (-60 >> 8) == -1; return okay ? 0 : 1; }]])],
1348 [tor_cv_sign_extend=yes],
1349 [tor_cv_sign_extend=no],
1350 [tor_cv_sign_extend=cross])])
1352 if test "$tor_cv_sign_extend" = "cross"; then
1353 # Cross-compiling; let's hope that the target isn't raving mad.
1354 AC_MSG_NOTICE([Cross-compiling: we'll assume that right-shifting negative integers causes sign-extension])
1357 if test "$tor_cv_sign_extend" != "no"; then
1358 AC_DEFINE([RSHIFT_DOES_SIGN_EXTEND], 1,
1359 [Define to 1 iff right-shifting a negative value performs sign-extension])
1362 # Whether we should use the dmalloc memory allocation debugging library.
1363 AC_MSG_CHECKING(whether to use dmalloc (debug memory allocation library))
1364 AC_ARG_WITH(dmalloc,
1365 AS_HELP_STRING(--with-dmalloc, [use debug memory allocation library]),
1366 [if [[ "$withval" = "yes" ]]; then
1372 fi], [ dmalloc=0; AC_MSG_RESULT(no) ]
1375 if [[ $dmalloc -eq 1 ]]; then
1376 AC_CHECK_HEADERS(dmalloc.h, , AC_MSG_ERROR(dmalloc header file not found. Do you have the development files for dmalloc installed?))
1377 AC_SEARCH_LIBS(dmalloc_malloc, [dmallocth dmalloc], , AC_MSG_ERROR(Libdmalloc library not found. If you enable it you better have it installed.))
1378 AC_DEFINE(USE_DMALLOC, 1, [Debug memory allocation library])
1379 AC_CHECK_FUNCS(dmalloc_strdup dmalloc_strndup)
1382 AC_ARG_WITH(tcmalloc,
1383 AS_HELP_STRING(--with-tcmalloc, [use tcmalloc memory allocation library]),
1384 [ tcmalloc=yes ], [ tcmalloc=no ])
1386 if test "x$tcmalloc" = "xyes"; then
1387 LDFLAGS="-ltcmalloc $LDFLAGS"
1390 using_custom_malloc=no
1391 if test "x$enable_openbsd_malloc" = "xyes"; then
1392 using_custom_malloc=yes
1394 if test "x$tcmalloc" = "xyes"; then
1395 using_custom_malloc=yes
1397 if test "$using_custom_malloc" = "no"; then
1398 AC_CHECK_FUNCS(mallinfo)
1401 # By default, we're going to assume we don't have mlockall()
1402 # bionic and other platforms have various broken mlockall subsystems.
1403 # Some systems don't have a working mlockall, some aren't linkable,
1404 # and some have it but don't declare it.
1405 AC_CHECK_FUNCS(mlockall)
1406 AC_CHECK_DECLS([mlockall], , , [
1407 #ifdef HAVE_SYS_MMAN_H
1408 #include <sys/mman.h>
1411 # Allow user to specify an alternate syslog facility
1412 AC_ARG_WITH(syslog-facility,
1413 AS_HELP_STRING(--with-syslog-facility=LOG, [syslog facility to use (default=LOG_DAEMON)]),
1414 syslog_facility="$withval", syslog_facility="LOG_DAEMON")
1415 AC_DEFINE_UNQUOTED(LOGFACILITY,$syslog_facility,[name of the syslog facility])
1416 AC_SUBST(LOGFACILITY)
1418 # Check if we have getresuid and getresgid
1419 AC_CHECK_FUNCS(getresuid getresgid)
1421 # Check for gethostbyname_r in all its glorious incompatible versions.
1422 # (This logic is based on that in Python's configure.in)
1423 AH_TEMPLATE(HAVE_GETHOSTBYNAME_R,
1424 [Define this if you have any gethostbyname_r()])
1426 AC_CHECK_FUNC(gethostbyname_r, [
1427 AC_MSG_CHECKING([how many arguments gethostbyname_r() wants])
1429 CFLAGS="$CFLAGS $MY_CPPFLAGS $MY_THREAD_CPPFLAGS $MY_CFLAGS"
1430 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([
1434 struct hostent *h1, *h2;
1436 (void)gethostbyname_r(cp1,h1,cp2,i1,&h2,&i2);
1438 AC_DEFINE(HAVE_GETHOSTBYNAME_R)
1439 AC_DEFINE(HAVE_GETHOSTBYNAME_R_6_ARG, 1,
1440 [Define this if gethostbyname_r takes 6 arguments])
1449 (void)gethostbyname_r(cp1,h1,cp2,i1,&i2);
1451 AC_DEFINE(HAVE_GETHOSTBYNAME_R)
1452 AC_DEFINE(HAVE_GETHOSTBYNAME_R_5_ARG, 1,
1453 [Define this if gethostbyname_r takes 5 arguments])
1461 struct hostent_data hd;
1462 (void) gethostbyname_r(cp1,h1,&hd);
1464 AC_DEFINE(HAVE_GETHOSTBYNAME_R)
1465 AC_DEFINE(HAVE_GETHOSTBYNAME_R_3_ARG, 1,
1466 [Define this if gethostbyname_r takes 3 arguments])
1476 AC_CACHE_CHECK([whether the C compiler supports __func__],
1477 tor_cv_have_func_macro,
1478 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
1480 int main(int c, char **v) { puts(__func__); }])],
1481 tor_cv_have_func_macro=yes,
1482 tor_cv_have_func_macro=no))
1484 AC_CACHE_CHECK([whether the C compiler supports __FUNC__],
1485 tor_cv_have_FUNC_macro,
1486 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
1488 int main(int c, char **v) { puts(__FUNC__); }])],
1489 tor_cv_have_FUNC_macro=yes,
1490 tor_cv_have_FUNC_macro=no))
1492 AC_CACHE_CHECK([whether the C compiler supports __FUNCTION__],
1493 tor_cv_have_FUNCTION_macro,
1494 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
1496 int main(int c, char **v) { puts(__FUNCTION__); }])],
1497 tor_cv_have_FUNCTION_macro=yes,
1498 tor_cv_have_FUNCTION_macro=no))
1500 AC_CACHE_CHECK([whether we have extern char **environ already declared],
1501 tor_cv_have_environ_declared,
1502 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
1503 #ifdef HAVE_UNISTD_H
1507 int main(int c, char **v) { char **t = environ; }])],
1508 tor_cv_have_environ_declared=yes,
1509 tor_cv_have_environ_declared=no))
1511 if test "$tor_cv_have_func_macro" = "yes"; then
1512 AC_DEFINE(HAVE_MACRO__func__, 1, [Defined if the compiler supports __func__])
1515 if test "$tor_cv_have_FUNC_macro" = "yes"; then
1516 AC_DEFINE(HAVE_MACRO__FUNC__, 1, [Defined if the compiler supports __FUNC__])
1519 if test "$tor_cv_have_FUNCTION_macro" = "yes"; then
1520 AC_DEFINE(HAVE_MACRO__FUNCTION__, 1,
1521 [Defined if the compiler supports __FUNCTION__])
1524 if test "$tor_cv_have_environ_declared" = "yes"; then
1525 AC_DEFINE(HAVE_EXTERN_ENVIRON_DECLARED, 1,
1526 [Defined if we have extern char **environ already declared])
1529 # $prefix stores the value of the --prefix command line option, or
1530 # NONE if the option wasn't set. In the case that it wasn't set, make
1531 # it be the default, so that we can use it to expand directories now.
1532 if test "x$prefix" = "xNONE"; then
1533 prefix=$ac_default_prefix
1536 # and similarly for $exec_prefix
1537 if test "x$exec_prefix" = "xNONE"; then
1541 if test "x$BUILDDIR" = "x"; then
1545 AH_TEMPLATE([BUILDDIR],[tor's build directory])
1546 AC_DEFINE_UNQUOTED(BUILDDIR,"$BUILDDIR")
1548 if test "x$CONFDIR" = "x"; then
1549 CONFDIR=`eval echo $sysconfdir/tor`
1552 AH_TEMPLATE([CONFDIR],[tor's configuration directory])
1553 AC_DEFINE_UNQUOTED(CONFDIR,"$CONFDIR")
1555 BINDIR=`eval echo $bindir`
1557 LOCALSTATEDIR=`eval echo $localstatedir`
1558 AC_SUBST(LOCALSTATEDIR)
1560 if test "$bwin32" = "true"; then
1561 # Test if the linker supports the --nxcompat and --dynamicbase options
1563 save_LDFLAGS="$LDFLAGS"
1564 LDFLAGS="-Wl,--nxcompat -Wl,--dynamicbase"
1565 AC_MSG_CHECKING([whether the linker supports DllCharacteristics])
1566 AC_LINK_IFELSE([AC_LANG_PROGRAM([])],
1567 [AC_MSG_RESULT([yes])]
1568 [save_LDFLAGS="$save_LDFLAGS $LDFLAGS"],
1569 [AC_MSG_RESULT([no])]
1571 LDFLAGS="$save_LDFLAGS"
1574 # Set CFLAGS _after_ all the above checks, since our warnings are stricter
1575 # than autoconf's macros like.
1576 if test "$GCC" = "yes"; then
1577 # Disable GCC's strict aliasing checks. They are an hours-to-debug
1578 # accident waiting to happen.
1579 CFLAGS="$CFLAGS -Wall -fno-strict-aliasing"
1581 # Override optimization level for non-gcc compilers
1583 enable_gcc_warnings=no
1584 enable_gcc_warnings_advisory=no
1587 # Warnings implies advisory-warnings and -Werror.
1588 if test "$enable_gcc_warnings" = "yes"; then
1589 enable_gcc_warnings_advisory=yes
1590 enable_fatal_warnings=yes
1593 # OS X Lion started deprecating the system openssl. Let's just disable
1594 # all deprecation warnings on OS X. Also, to potentially make the binary
1595 # a little smaller, let's enable dead_strip.
1599 CFLAGS="$CFLAGS -Wno-deprecated-declarations"
1600 LDFLAGS="$LDFLAGS -dead_strip" ;;
1603 # Add some more warnings which we use in development but not in the
1604 # released versions. (Some relevant gcc versions can't handle these.)
1606 # Note that we have to do this near the end of the autoconf process, or
1607 # else we may run into problems when these warnings hit on the testing C
1608 # programs that autoconf wants to build.
1609 if test "x$enable_gcc_warnings_advisory" != "xno"; then
1612 *-*-openbsd* | *-*-bitrig*)
1613 # Some OpenBSD versions (like 4.8) have -Wsystem-headers by default.
1614 # That's fine, except that the headers don't pass -Wredundant-decls.
1615 # Therefore, let's disable -Wsystem-headers when we're building
1616 # with maximal warnings on OpenBSD.
1617 CFLAGS="$CFLAGS -Wno-system-headers" ;;
1620 # GCC4.3 users once report trouble with -Wstrict-overflow=5. GCC5 users
1621 # have it work better.
1622 # CFLAGS="$CFLAGS -Wstrict-overflow=1"
1624 # This warning was added in gcc 4.3, but it appears to generate
1625 # spurious warnings in gcc 4.4. I don't know if it works in 4.5.
1626 #CFLAGS="$CFLAGS -Wlogical-op"
1628 m4_foreach_w([warning_flag], [
1630 -Waddress-of-array-temporary
1631 -Waddress-of-temporary
1633 -Wanonymous-pack-parens
1636 -Warc-bridge-casts-disallowed-in-nonarc
1637 -Warc-maybe-repeated-use-of-weak
1638 -Warc-performSelector-leaks
1639 -Warc-repeated-use-of-weak
1641 -Warray-bounds-pointer-arithmetic
1643 -Wasm-operand-widths
1645 -Watomic-property-with-user-defined-accessor
1647 -Wauto-storage-class
1650 -Wbackslash-newline-escape
1651 -Wbad-array-new-length
1652 -Wbind-to-temporary-copy
1653 -Wbitfield-constant-conversion
1656 -Wbuiltin-requires-header
1658 -Wcompare-distinct-pointer-types
1659 -Wcomplex-component-init
1660 -Wconditional-type-mismatch
1662 -Wconstant-conversion
1663 -Wconstant-logical-operand
1664 -Wconstexpr-not-const
1665 -Wcustom-atomic-properties
1667 -Wdangling-initializer-list
1669 -Wdelegating-ctor-cycles
1670 -Wdeprecated-implementations
1671 -Wdeprecated-register
1672 -Wdirect-ivar-access
1674 -Wdistributed-object-modifiers
1676 -Wdollar-in-identifier-extension
1678 -Wduplicate-decl-specifier
1680 -Wduplicate-method-arg
1681 -Wduplicate-method-match
1683 -Wdynamic-class-memaccess
1684 -Wembedded-directive
1685 -Wempty-translation-unit
1687 -Wexit-time-destructors
1688 -Wexplicit-ownership-type
1689 -Wextern-initializer
1693 -Wflexible-array-extensions
1696 -Wfour-char-constants
1698 -Wglobal-constructors
1699 -Wgnu-array-member-paren-init
1701 -Wgnu-static-float-init
1704 -Widiomatic-parentheses
1705 -Wignored-attributes
1706 -Wimplicit-atomic-properties
1707 -Wimplicit-conversion-floating-point-to-bool
1708 -Wimplicit-exception-spec-mismatch
1709 -Wimplicit-fallthrough
1710 -Wimplicit-fallthrough-per-function
1711 -Wimplicit-retain-self
1712 -Wimport-preprocessor-directive-pedantic
1713 -Wincompatible-library-redeclaration
1714 -Wincompatible-pointer-types-discards-qualifiers
1715 -Wincomplete-implementation
1717 -Wincomplete-umbrella
1720 -Wint-to-void-pointer-cast
1726 -Winvalid-source-encoding
1727 -Winvalid-token-paste
1728 -Wknr-promoted-parameter
1729 -Wlanguage-extension-token
1730 -Wlarge-by-value-copy
1731 -Wliteral-conversion
1733 -Wlocal-type-template-args
1737 -Wmalformed-warning-check
1741 -Wmismatched-parameter-types
1742 -Wmismatched-return-types
1743 -Wmissing-field-initializers
1744 -Wmissing-format-attribute
1746 -Wmissing-selector-name
1748 -Wmissing-variable-declarations
1752 -Wnon-literal-null-conversion
1754 -Wnonportable-cfstrings
1760 -Wout-of-line-declaration
1762 -Woverlength-strings
1764 -Woverriding-method-mismatch
1765 -Wpointer-type-mismatch
1766 -Wpredefined-identifier-outside-function
1767 -Wprotocol-property-synthesis-ambiguity
1768 -Wreadonly-iboutlet-property
1769 -Wreadonly-setter-attrs
1771 -Wreceiver-forward-class
1773 -Wreinterpret-base-class
1774 -Wrequires-super-attribute
1775 -Wreserved-user-defined-literal
1776 -Wreturn-stack-address
1778 -Wselector-type-mismatch
1780 -Wserialized-diagnostics
1782 -Wshift-count-negative
1783 -Wshift-count-overflow
1784 -Wshift-negative-value
1786 -Wshift-sign-overflow
1788 -Wsizeof-array-argument
1789 -Wsource-uses-openmp
1792 -Wstatic-local-in-inline
1796 -Wstrlcpy-strlcat-size
1798 -Wsuggest-attribute=format
1799 -Wsuggest-attribute=noreturn
1800 -Wsuper-class-method-mismatch
1803 -Wtautological-constant-out-of-range-compare
1804 -Wtentative-definition-incomplete-type
1807 -Wtypedef-redefinition
1810 -Wundefined-internal
1811 -Wundefined-reinterpret-cast
1813 -Wunicode-whitespace
1814 -Wunknown-warning-option
1815 -Wunnamed-type-template-args
1816 -Wunneeded-member-function
1818 -Wunsupported-visibility
1819 -Wunused-but-set-parameter
1820 -Wunused-but-set-variable
1821 -Wunused-command-line-argument
1822 -Wunused-const-variable=2
1823 -Wunused-exception-parameter
1824 -Wunused-local-typedefs
1825 -Wunused-member-function
1826 -Wunused-sanitize-argument
1827 -Wunused-volatile-lvalue
1828 -Wuser-defined-literals
1831 -Wvector-conversions
1836 ], [ TOR_CHECK_CFLAGS([warning_flag]) ])
1838 dnl These seem to require annotations that we don't currently use,
1839 dnl and they give false positives in our pthreads wrappers. (Clang 4)
1841 dnl -Wthread-safety-analysis
1842 dnl -Wthread-safety-attributes
1843 dnl -Wthread-safety-beta
1844 dnl -Wthread-safety-precise
1846 CFLAGS="$CFLAGS -W -Wfloat-equal -Wundef -Wpointer-arith"
1847 CFLAGS="$CFLAGS -Wstrict-prototypes -Wmissing-prototypes -Wwrite-strings"
1848 CFLAGS="$CFLAGS -Wredundant-decls -Wchar-subscripts -Wcomment -Wformat=2"
1849 CFLAGS="$CFLAGS -Wwrite-strings"
1850 CFLAGS="$CFLAGS -Wnested-externs -Wbad-function-cast -Wswitch-enum"
1851 CFLAGS="$CFLAGS -Waggregate-return -Wpacked -Wunused"
1852 CFLAGS="$CFLAGS -Wunused-parameter "
1853 # These interfere with building main() { return 0; }, which autoconf
1854 # likes to use as its default program.
1855 CFLAGS="$CFLAGS -Wold-style-definition -Wmissing-declarations"
1857 if test "$tor_cv_cflags__Wnull_dereference" = "yes"; then
1858 AC_DEFINE([HAVE_CFLAG_WNULL_DEREFERENCE], 1, [True if we have -Wnull-dereference])
1860 if test "$tor_cv_cflags__Woverlength_strings" = "yes"; then
1861 AC_DEFINE([HAVE_CFLAG_WOVERLENGTH_STRINGS], 1, [True if we have -Woverlength-strings])
1864 if test "x$enable_fatal_warnings" = "xyes"; then
1865 # I'd like to use TOR_CHECK_CFLAGS here, but I can't, since the
1866 # default autoconf programs are full of errors.
1867 CFLAGS="$CFLAGS -Werror"
1872 if test "$enable_coverage" = "yes" && test "$have_clang" = "no"; then
1875 AC_MSG_WARN([Tried to enable coverage on OSX without using the clang compiler. This might not work! If coverage fails, use CC=clang when configuring with --enable-coverage.])
1879 CPPFLAGS="$CPPFLAGS $TOR_CPPFLAGS_libevent $TOR_CPPFLAGS_openssl $TOR_CPPFLAGS_zlib"
1884 contrib/dist/suse/tor.sh
1885 contrib/operator-tools/tor.logrotate
1888 contrib/dist/tor.service
1889 src/config/torrc.sample
1890 src/config/torrc.minimal
1891 scripts/maint/checkOptionDocs.pl
1892 scripts/maint/updateVersions.pl
1895 if test "x$asciidoc" = "xtrue" && test "$ASCIIDOC" = "none"; then
1896 regular_mans="doc/tor doc/tor-gencert doc/tor-resolve doc/torify"
1897 for file in $regular_mans ; do
1898 if ! [[ -f "$srcdir/$file.1.in" ]] || ! [[ -f "$srcdir/$file.html.in" ]] ; then
1899 echo "==================================";
1901 echo "Building Tor has failed since manpages cannot be built.";
1903 echo "You need asciidoc installed to be able to build the manpages.";
1904 echo "To build without manpages, use the --disable-asciidoc argument";
1905 echo "when calling configure.";
1907 echo "==================================";