1 dnl Copyright (c) 2001-2004, Roger Dingledine
2 dnl Copyright (c) 2004-2006, Roger Dingledine, Nick Mathewson
3 dnl Copyright (c) 2007-2019, The Tor Project, Inc.
4 dnl See LICENSE for licensing information
7 AC_INIT([tor],[0.4.3.8])
8 AC_CONFIG_SRCDIR([src/app/main/tor_main.c])
9 AC_CONFIG_MACRO_DIR([m4])
13 # DO NOT EDIT THIS DEFINITION BY HAND UNLESS YOU KNOW WHAT YOU'RE DOING.
15 # The update_versions.py script updates this definition when the
16 # version number changes. Tor uses it to make sure that it
17 # only shuts down for missing "required protocols" when those protocols
18 # are listed as required by a consensus after this date.
19 AC_DEFINE(APPROX_RELEASE_DATE, ["2021-01-28"], # for 0.4.3.8
20 [Approximate date when this software was released. (Updated when the version changes.)])
22 # "foreign" means we don't follow GNU package layout standards
23 # "1.11" means we require automake version 1.11 or newer
24 # "subdir-objects" means put .o files in the same directory as the .c files
25 AM_INIT_AUTOMAKE([foreign 1.11 subdir-objects -Wall -Werror])
27 m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])])
28 AC_CONFIG_HEADERS([orconfig.h])
30 AC_USE_SYSTEM_EXTENSIONS
34 if test "x$PKG_CONFIG" = "x" ; then
35 pkg_config_user_action="install pkg-config, and check the PKG_CONFIG_PATH environment variable"
36 AC_MSG_NOTICE([Some libraries need pkg-config, including systemd, nss, lzma, zstd, and custom mallocs.])
37 AC_MSG_NOTICE([To use those libraries, $pkg_config_user_action.])
39 pkg_config_user_action="check the PKG_CONFIG_PATH environment variable"
42 if test "x$PKG_CONFIG_PATH" = "x" && test "x$prefix" != "xNONE" && test "$host" != "$build"; then
43 export PKG_CONFIG_PATH=$prefix/lib/pkgconfig
44 AC_MSG_NOTICE([set PKG_CONFIG_PATH=$PKG_CONFIG_PATH to support cross-compiling])
47 AC_ARG_ENABLE(openbsd-malloc,
48 AS_HELP_STRING(--enable-openbsd-malloc, [use malloc code from OpenBSD. Linux only. Deprecated: see --with-malloc]))
49 AC_ARG_ENABLE(static-openssl,
50 AS_HELP_STRING(--enable-static-openssl, [link against a static openssl library. Requires --with-openssl-dir]))
51 AC_ARG_ENABLE(static-libevent,
52 AS_HELP_STRING(--enable-static-libevent, [link against a static libevent library. Requires --with-libevent-dir]))
53 AC_ARG_ENABLE(static-zlib,
54 AS_HELP_STRING(--enable-static-zlib, [link against a static zlib library. Requires --with-zlib-dir]))
55 AC_ARG_ENABLE(static-tor,
56 AS_HELP_STRING(--enable-static-tor, [create an entirely static Tor binary. Requires --with-openssl-dir and --with-libevent-dir and --with-zlib-dir]))
57 AC_ARG_ENABLE(unittests,
58 AS_HELP_STRING(--disable-unittests, [don't build unit tests for Tor. Risky!]))
59 AC_ARG_ENABLE(coverage,
60 AS_HELP_STRING(--enable-coverage, [enable coverage support in the unit-test build]))
61 AC_ARG_ENABLE(asserts-in-tests,
62 AS_HELP_STRING(--disable-asserts-in-tests, [disable tor_assert() calls in the unit tests, for branch coverage]))
63 AC_ARG_ENABLE(system-torrc,
64 AS_HELP_STRING(--disable-system-torrc, [don't look for a system-wide torrc file]))
65 AC_ARG_ENABLE(libfuzzer,
66 AS_HELP_STRING(--enable-libfuzzer, [build extra fuzzers based on 'libfuzzer']))
67 AC_ARG_ENABLE(oss-fuzz,
68 AS_HELP_STRING(--enable-oss-fuzz, [build extra fuzzers based on 'oss-fuzz' environment]))
69 AC_ARG_ENABLE(memory-sentinels,
70 AS_HELP_STRING(--disable-memory-sentinels, [disable code that tries to prevent some kinds of memory access bugs. For fuzzing only.]))
72 AS_HELP_STRING(--enable-rust, [enable rust integration]))
73 AC_ARG_ENABLE(cargo-online-mode,
74 AS_HELP_STRING(--enable-cargo-online-mode, [Allow cargo to make network requests to fetch crates. For builds with rust only.]))
75 AC_ARG_ENABLE(restart-debugging,
76 AS_HELP_STRING(--enable-restart-debugging, [Build Tor with support for debugging in-process restart. Developers only.]))
77 AC_ARG_ENABLE(zstd-advanced-apis,
78 AS_HELP_STRING(--disable-zstd-advanced-apis, [Build without support for zstd's "static-only" APIs.]))
80 AS_HELP_STRING(--enable-nss, [Use Mozilla's NSS TLS library. (EXPERIMENTAL)]))
82 AS_HELP_STRING(--enable-pic, [Build Tor's binaries as position-independent code, suitable to link as a library.]))
84 AC_ARG_ENABLE(missing-doc-warnings,
85 AS_HELP_STRING(--enable-missing-doc-warnings, [Tell doxygen to warn about missing documentation. Makes doxygen warnings nonfatal.]))
87 if test "$enable_missing_doc_warnings" = "yes"; then
88 DOXYGEN_FATAL_WARNINGS=NO
89 DOXYGEN_WARN_ON_MISSING=YES
90 elif test "$enable_fatal_warnings" = "yes"; then
91 # Fatal warnings from doxygen are nice, but not if we're warning about
92 # missing documentation.
93 DOXYGEN_FATAL_WARNINGS=YES
94 DOXYGEN_WARN_ON_MISSING=NO
96 DOXYGEN_FATAL_WARNINGS=NO
97 DOXYGEN_WARN_ON_MISSING=NO
99 AC_SUBST(DOXYGEN_FATAL_WARNINGS)
100 AC_SUBST(DOXYGEN_WARN_ON_MISSING)
102 if test "x$enable_coverage" != "xyes" -a "x$enable_asserts_in_tests" = "xno" ; then
103 AC_MSG_ERROR([Can't disable assertions outside of coverage build])
106 AM_CONDITIONAL(UNITTESTS_ENABLED, test "x$enable_unittests" != "xno")
107 AM_CONDITIONAL(COVERAGE_ENABLED, test "x$enable_coverage" = "xyes")
108 AM_CONDITIONAL(DISABLE_ASSERTS_IN_UNIT_TESTS, test "x$enable_asserts_in_tests" = "xno")
109 AM_CONDITIONAL(LIBFUZZER_ENABLED, test "x$enable_libfuzzer" = "xyes")
110 AM_CONDITIONAL(OSS_FUZZ_ENABLED, test "x$enable_oss_fuzz" = "xyes")
111 AM_CONDITIONAL(USE_RUST, test "x$enable_rust" = "xyes")
112 AM_CONDITIONAL(USE_NSS, test "x$enable_nss" = "xyes")
113 AM_CONDITIONAL(USE_OPENSSL, test "x$enable_nss" != "xyes")
115 if test "x$enable_nss" = "xyes"; then
116 AC_DEFINE(ENABLE_NSS, 1,
117 [Defined if we're building with NSS.])
119 AC_DEFINE(ENABLE_OPENSSL, 1,
120 [Defined if we're building with OpenSSL or LibreSSL])
123 if test "$enable_static_tor" = "yes"; then
124 enable_static_libevent="yes";
125 enable_static_openssl="yes";
126 enable_static_zlib="yes";
127 CFLAGS="$CFLAGS -static"
130 if test "$enable_system_torrc" = "no"; then
131 AC_DEFINE(DISABLE_SYSTEM_TORRC, 1,
132 [Defined if we're not going to look for a torrc in SYSCONF])
135 if test "$enable_memory_sentinels" = "no"; then
136 AC_DEFINE(DISABLE_MEMORY_SENTINELS, 1,
137 [Defined if we're turning off memory safety code to look for bugs])
140 AC_ARG_ENABLE(manpage,
141 AS_HELP_STRING(--disable-manpage, [Disable manpage generation.]))
143 AC_ARG_ENABLE(html-manual,
144 AS_HELP_STRING(--disable-html-manual, [Disable HTML documentation.]))
146 AC_ARG_ENABLE(asciidoc,
147 AS_HELP_STRING(--disable-asciidoc, [don't use asciidoc (disables building of manpages)]),
148 [case "${enableval}" in
149 "yes") asciidoc=true ;;
150 "no") asciidoc=false ;;
151 *) AC_MSG_ERROR(bad value for --disable-asciidoc) ;;
152 esac], [asciidoc=true])
154 # systemd notify support
155 AC_ARG_ENABLE(systemd,
156 AS_HELP_STRING(--enable-systemd, [enable systemd notification support]),
157 [case "${enableval}" in
158 "yes") systemd=true ;;
159 "no") systemd=false ;;
160 * ) AC_MSG_ERROR(bad value for --enable-systemd) ;;
161 esac], [systemd=auto])
163 if test "$enable_restart_debugging" = "yes"; then
164 AC_DEFINE(ENABLE_RESTART_DEBUGGING, 1,
165 [Defined if we're building with support for in-process restart debugging.])
168 if test "$enable_zstd_advanced_apis" != "no"; then
169 AC_DEFINE(ENABLE_ZSTD_ADVANCED_APIS, 1,
170 [Defined if we're going to try to use zstd's "static-only" APIs.])
174 if test "x$enable_systemd" = "xno"; then
177 PKG_CHECK_MODULES(SYSTEMD,
181 if test "x$have_systemd" = "xno"; then
182 AC_MSG_NOTICE([Okay, checking for systemd a different way...])
183 PKG_CHECK_MODULES(SYSTEMD,
190 if test "x$have_systemd" = "xyes"; then
191 AC_DEFINE(HAVE_SYSTEMD,1,[Have systemd])
192 TOR_SYSTEMD_CFLAGS="${SYSTEMD_CFLAGS}"
193 TOR_SYSTEMD_LIBS="${SYSTEMD_LIBS}"
194 PKG_CHECK_MODULES(LIBSYSTEMD209, [libsystemd >= 209],
195 [AC_DEFINE(HAVE_SYSTEMD_209,1,[Have systemd v209 or greater])], [])
197 AC_SUBST(TOR_SYSTEMD_CFLAGS)
198 AC_SUBST(TOR_SYSTEMD_LIBS)
200 if test "x$enable_systemd" = "xyes" -a "x$have_systemd" != "xyes" ; then
201 AC_MSG_ERROR([Explicitly requested systemd support, but systemd not found, $pkg_config_user_action, or set SYSTEMD_CFLAGS and SYSTEMD_LIBS.])
206 AC_DEFINE(_REENTRANT, 1, [Define on some platforms to activate x_r() functions in time.h])
210 AC_ARG_ENABLE(gcc-warnings,
211 AS_HELP_STRING(--enable-gcc-warnings, [deprecated alias for enable-fatal-warnings]))
212 AC_ARG_ENABLE(fatal-warnings,
213 AS_HELP_STRING(--enable-fatal-warnings, [tell the compiler to treat all warnings as errors.]))
214 AC_ARG_ENABLE(gcc-warnings-advisory,
215 AS_HELP_STRING(--disable-gcc-warnings-advisory, [disable the regular verbose warnings]))
217 dnl Others suggest '/gs /safeseh /nxcompat /dynamicbase' for non-gcc on Windows
218 AC_ARG_ENABLE(gcc-hardening,
219 AS_HELP_STRING(--disable-gcc-hardening, [disable compiler security checks]))
221 dnl Deprecated --enable-expensive-hardening but keep it for now for backward compat.
222 AC_ARG_ENABLE(expensive-hardening,
223 AS_HELP_STRING(--enable-expensive-hardening, [enable more fragile and expensive compiler hardening; makes Tor slower]))
224 AC_ARG_ENABLE(fragile-hardening,
225 AS_HELP_STRING(--enable-fragile-hardening, [enable more fragile and expensive compiler hardening; makes Tor slower]))
226 if test "x$enable_expensive_hardening" = "xyes" || test "x$enable_fragile_hardening" = "xyes"; then
227 fragile_hardening="yes"
228 AC_DEFINE(DEBUG_SMARTLIST, 1, [Enable smartlist debugging])
231 dnl Linker hardening options
232 dnl Currently these options are ELF specific - you can't use this with MacOSX
233 AC_ARG_ENABLE(linker-hardening,
234 AS_HELP_STRING(--disable-linker-hardening, [disable linker security fixups]))
236 AC_ARG_ENABLE(local-appdata,
237 AS_HELP_STRING(--enable-local-appdata, [default to host local application data paths on Windows]))
238 if test "$enable_local_appdata" = "yes"; then
239 AC_DEFINE(ENABLE_LOCAL_APPDATA, 1,
240 [Defined if we default to host local appdata paths on Windows])
243 AC_ARG_ENABLE(tool-name-check,
244 AS_HELP_STRING(--disable-tool-name-check, [check for sanely named toolchain when cross-compiling]))
246 AC_ARG_ENABLE(seccomp,
247 AS_HELP_STRING(--disable-seccomp, [do not attempt to use libseccomp]))
249 AC_ARG_ENABLE(libscrypt,
250 AS_HELP_STRING(--disable-libscrypt, [do not attempt to use libscrypt]))
252 dnl Enable event tracing which are transformed to debug log statement.
253 AC_ARG_ENABLE(event-tracing-debug,
254 AS_HELP_STRING(--enable-event-tracing-debug, [build with event tracing to debug log]))
255 AM_CONDITIONAL([USE_EVENT_TRACING_DEBUG], [test "x$enable_event_tracing_debug" = "xyes"])
257 if test x$enable_event_tracing_debug = xyes; then
258 AC_DEFINE([USE_EVENT_TRACING_DEBUG], [1], [Tracing framework to log debug])
259 AC_DEFINE([TOR_EVENT_TRACING_ENABLED], [1], [Compile the event tracing instrumentation])
262 dnl Enable Android only features.
263 AC_ARG_ENABLE(android,
264 AS_HELP_STRING(--enable-android, [build with Android features enabled]))
265 AM_CONDITIONAL([USE_ANDROID], [test "x$enable_android" = "xyes"])
267 if test "x$enable_android" = "xyes"; then
268 AC_DEFINE([USE_ANDROID], [1], [Compile with Android specific features enabled])
270 dnl Check if the Android log library is available.
271 AC_CHECK_HEADERS([android/log.h])
272 AC_SEARCH_LIBS(__android_log_write, [log])
277 dnl Tor modules options. These options are namespaced with --disable-module-XXX
281 m4_define(MODULES, relay dirauth dircache)
284 AC_ARG_ENABLE([module-relay],
285 AS_HELP_STRING([--disable-module-relay],
286 [Build tor without the Relay modules: tor can not run as a relay, bridge, or authority. Implies --disable-module-dirauth]))
287 AM_CONDITIONAL(BUILD_MODULE_RELAY, [test "x$enable_module_relay" != "xno"])
288 AM_COND_IF(BUILD_MODULE_RELAY,
289 AC_DEFINE([HAVE_MODULE_RELAY], [1],
290 [Compile with Relay feature support]))
292 dnl Dircache module. (This cannot be enabled or disabled independently of
293 dnl the relay module. It is not listed by --list-modules for this reason.)
294 AM_CONDITIONAL(BUILD_MODULE_DIRCACHE,
295 [test "x$enable_module_relay" != "xno"])
296 AM_COND_IF(BUILD_MODULE_DIRCACHE,
297 AC_DEFINE([HAVE_MODULE_DIRCACHE], [1],
298 [Compile with directory cache support]))
300 dnl Directory Authority module.
301 AC_ARG_ENABLE([module-dirauth],
302 AS_HELP_STRING([--disable-module-dirauth],
303 [Build tor without the Directory Authority module: tor can not run as a directory authority or bridge authority]))
304 AM_CONDITIONAL(BUILD_MODULE_DIRAUTH,[test "x$enable_module_dirauth" != "xno" && test "x$enable_module_relay" != "xno"])
305 AM_COND_IF(BUILD_MODULE_DIRAUTH,
306 AC_DEFINE([HAVE_MODULE_DIRAUTH], [1],
307 [Compile with Directory Authority feature support]))
309 dnl Helper variables.
310 TOR_MODULES_ALL_ENABLED=
311 AC_DEFUN([ADD_MODULE], [
312 MODULE=m4_toupper($1)
313 TOR_MODULES_ALL_ENABLED="${TOR_MODULES_ALL_ENABLED} -DHAVE_MODULE_${MODULE}=1"
315 m4_foreach_w([module], MODULES, [ADD_MODULE([module])])
316 AC_SUBST(TOR_MODULES_ALL_ENABLED)
318 dnl check for the correct "ar" when cross-compiling.
319 dnl (AM_PROG_AR was new in automake 1.11.2, which we do not yet require,
320 dnl so kludge up a replacement for the case where it isn't there yet.)
321 m4_ifdef([AM_PROG_AR],
323 [AN_MAKEVAR([AR], [AC_PROG_AR])
324 AN_PROGRAM([ar], [AC_PROG_AR])
325 AC_DEFUN([AC_PROG_AR], [AC_CHECK_TOOL([AR], [ar], [:])])
328 dnl Check whether the above macro has settled for a simply named tool even
329 dnl though we're cross compiling. We must do this before running AC_PROG_CC,
330 dnl because that will find any cc on the system, not only the cross-compiler,
331 dnl and then verify that a binary built with this compiler runs on the
332 dnl build system. It will then come to the false conclusion that we're not
334 if test "x$enable_tool_name_check" != "xno"; then
335 if test "x$ac_tool_warned" = "xyes"; then
336 AC_MSG_ERROR([We are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
337 elif test "x$ac_ct_AR" != "x" -a "x$cross_compiling" = "xmaybe"; then
338 AC_MSG_ERROR([We think we are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
348 AC_ARG_VAR([PERL], [path to Perl binary])
349 AC_CHECK_PROGS([PERL], [perl])
350 AM_CONDITIONAL(USE_PERL, [test "x$ac_cv_prog_PERL" != "x"])
352 dnl check for asciidoc and a2x
353 AC_PATH_PROG([ASCIIDOC], [asciidoc], none)
354 AC_PATH_PROGS([A2X], [a2x a2x.py], none)
356 AM_CONDITIONAL(USE_ASCIIDOC, test "x$asciidoc" = "xtrue")
357 AM_CONDITIONAL(BUILD_MANPAGE, [test "x$enable_manpage" != "xno"])
358 AM_CONDITIONAL(BUILD_HTML_DOCS, [test "x$enable_html_manual" != "xno"])
363 AC_CACHE_CHECK([for Python 3], [tor_cv_PYTHON],
364 [AC_PATH_PROGS_FEATURE_CHECK([PYTHON], [ \
366 python3.8 python3.7 python3.6 python3.5 python3.4 \
368 [["$ac_path_PYTHON" -c 'import sys; sys.exit(sys.version_info[0]<3)' && tor_cv_PYTHON="$ac_path_PYTHON" ac_path_PYTHON_found=:]] )])
369 AC_SUBST([PYTHON], [$tor_cv_PYTHON])
371 PYTHON="$tor_cv_PYTHON"
373 if test "x$PYTHON" = "x"; then
374 AC_MSG_WARN([Python 3 unavailable; some tests will not be run.])
377 AM_CONDITIONAL(USEPYTHON, [test "x$PYTHON" != "x"])
379 dnl List all external rust crates we depend on here. Include the version
384 AC_SUBST(rust_crates)
386 ifdef([AC_C_FLEXIBLE_ARRAY_MEMBER], [
387 AC_C_FLEXIBLE_ARRAY_MEMBER
389 dnl Maybe we've got an old autoconf...
390 AC_CACHE_CHECK([for flexible array members],
394 struct abc { int a; char b[]; };
396 struct abc *def = malloc(sizeof(struct abc)+sizeof(char));
399 [tor_cv_c_flexarray=yes],
400 [tor_cv_c_flexarray=no])])
401 if test "$tor_cv_flexarray" = "yes"; then
402 AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
404 AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [1], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
408 AC_CACHE_CHECK([for working C99 mid-block declaration syntax],
411 [AC_LANG_PROGRAM([], [int x; x = 3; int y; y = 4 + x;])],
412 [tor_cv_c_c99_decl=yes],
413 [tor_cv_c_c99_decl=no] )])
414 if test "$tor_cv_c_c99_decl" != "yes"; then
415 AC_MSG_ERROR([Your compiler doesn't support c99 mid-block declarations. This is required as of Tor 0.2.6.x])
418 AC_CACHE_CHECK([for working C99 designated initializers],
419 tor_cv_c_c99_designated_init,
421 [AC_LANG_PROGRAM([struct s { int a; int b; };],
422 [[ struct s ss = { .b = 5, .a = 6 }; ]])],
423 [tor_cv_c_c99_designated_init=yes],
424 [tor_cv_c_c99_designated_init=no] )])
426 if test "$tor_cv_c_c99_designated_init" != "yes"; then
427 AC_MSG_ERROR([Your compiler doesn't support c99 designated initializers. This is required as of Tor 0.2.6.x])
430 saved_CFLAGS="$CFLAGS"
431 CFLAGS="$CFLAGS -Werror"
432 AC_CACHE_CHECK([for __attribute__((fallthrough))],
433 tor_cv_c_attr_fallthrough,
435 [AC_LANG_PROGRAM([extern int x; void fn(void) ;],
436 [[ switch (x) { case 1: fn(); __attribute__((fallthrough));
437 case 2: fn(); break; } ]])],
438 [tor_cv_c_attr_fallthrough=yes],
439 [tor_cv_c_attr_fallthrough=no] )])
440 CFLAGS="$saved_CFLAGS"
442 if test "$tor_cv_c_attr_fallthrough" = "yes"; then
443 AC_DEFINE(HAVE_ATTR_FALLTHROUGH, [1], [defined if we have the fallthrough attribute.])
447 AC_ARG_WITH(tor-user,
448 AS_HELP_STRING(--with-tor-user=NAME, [specify username for tor daemon]),
456 AC_ARG_WITH(tor-group,
457 AS_HELP_STRING(--with-tor-group=NAME, [specify group name for tor daemon]),
465 dnl If _WIN32 is defined and non-zero, we are building for win32
466 AC_MSG_CHECKING([for win32])
467 AC_RUN_IFELSE([AC_LANG_SOURCE([
468 int main(int c, char **v) {
479 bwin32=true; AC_MSG_RESULT([yes]),
480 bwin32=false; AC_MSG_RESULT([no]),
481 bwin32=cross; AC_MSG_RESULT([cross])
484 if test "$bwin32" = "cross"; then
485 AC_MSG_CHECKING([for win32 (cross)])
486 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
488 int main(int c, char **v) {return 0;}
491 int main(int c, char **v) {return x(y);}
494 bwin32=true; AC_MSG_RESULT([yes]),
495 bwin32=false; AC_MSG_RESULT([no]))
500 /* Defined to access windows functions and definitions for >=WinXP */
502 # define WINVER 0x0501
505 /* Defined to access _other_ windows functions and definitions for >=WinXP */
506 # ifndef _WIN32_WINNT
507 # define _WIN32_WINNT 0x0501
510 /* Defined to avoid including some windows headers as part of Windows.h */
511 # ifndef WIN32_LEAN_AND_MEAN
512 # define WIN32_LEAN_AND_MEAN 1
517 AM_CONDITIONAL(WIN32, test "x$bwin32" = "xtrue")
518 AM_CONDITIONAL(BUILD_NT_SERVICES, test "x$bwin32" = "xtrue")
519 AM_CONDITIONAL(BUILD_LIBTORRUNNER, test "x$bwin32" != "xtrue")
521 dnl Enable C99 when compiling with MIPSpro
522 AC_MSG_CHECKING([for MIPSpro compiler])
523 AC_COMPILE_IFELSE([AC_LANG_PROGRAM(, [
524 #if (defined(__sgi) && defined(_COMPILER_VERSION))
529 bmipspro=false; AC_MSG_RESULT(no),
530 bmipspro=true; AC_MSG_RESULT(yes))
532 if test "$bmipspro" = "true"; then
533 CFLAGS="$CFLAGS -c99"
538 AC_ARG_VAR([TOR_RUST_TARGET], [Rust target, must be specified when cross-compiling (HOST != BUILD). example: i686-pc-windows-gnu])
540 if test "x$enable_rust" = "xyes"; then
541 AC_ARG_VAR([RUSTC], [path to the rustc binary])
542 AC_CHECK_PROG([RUSTC], [rustc], [rustc],[no])
543 if test "x$RUSTC" = "xno"; then
544 AC_MSG_ERROR([rustc unavailable but rust integration requested.])
547 AC_ARG_VAR([CARGO], [path to the cargo binary])
548 AC_CHECK_PROG([CARGO], [cargo], [cargo],[no])
549 if test "x$CARGO" = "xno"; then
550 AC_MSG_ERROR([cargo unavailable but rust integration requested.])
553 AC_DEFINE([HAVE_RUST], 1, [have Rust])
554 if test "x$enable_fatal_warnings" = "xyes"; then
559 if test "x$enable_cargo_online_mode" = "xyes"; then
563 CARGO_ONLINE=--frozen
566 dnl When we're not allowed to touch the network, we need crate dependencies
567 dnl locally available.
568 AC_MSG_CHECKING([rust crate dependencies])
569 AC_ARG_VAR([TOR_RUST_DEPENDENCIES], [path to directory with local crate mirror])
570 if test "x$TOR_RUST_DEPENDENCIES" = "x"; then
571 TOR_RUST_DEPENDENCIES="${srcdir}/src/ext/rust/crates"
573 dnl Check whether the path exists before we try to cd into it.
574 if test ! -d "$TOR_RUST_DEPENDENCIES"; then
575 AC_MSG_ERROR([Rust dependency directory $TOR_RUST_DEPENDENCIES does not exist. Specify a dependency directory using the TOR_RUST_DEPENDENCIES variable or allow cargo to fetch crates using --enable-cargo-online-mode.])
578 dnl Make the path absolute, since we'll be using it from within a
580 TOR_RUST_DEPENDENCIES=$(cd "$TOR_RUST_DEPENDENCIES" ; pwd)
582 for dep in $rust_crates; do
583 if test ! -d "$TOR_RUST_DEPENDENCIES"/"$dep"; then
584 AC_MSG_ERROR([Failure to find rust dependency $TOR_RUST_DEPENDENCIES/$dep. Specify a dependency directory using the TOR_RUST_DEPENDENCIES variable or allow cargo to fetch crates using --enable-cargo-online-mode.])
588 if test "x$ERRORED" = "x"; then
593 dnl For now both MSVC and MinGW rust libraries will output static libs with
594 dnl the MSVC naming convention.
595 if test "$bwin32" = "true"; then
596 tor_rust_static_name=tor_rust.lib
598 tor_rust_static_name=libtor_rust.a
603 if test -n "$TOR_RUST_TARGET"; then
604 if test "$host" = "$build"; then
605 AC_MSG_ERROR([HOST = BUILD is invalid if TOR_RUST_TARGET is specified, see configure --help for more information.])
607 RUST_TARGET_PROP="target = '$TOR_RUST_TARGET'"
608 TOR_RUST_LIB_PATH="src/rust/target/$TOR_RUST_TARGET/release/$tor_rust_static_name"
610 if test "$host" != "$build"; then
611 AC_MSG_ERROR([TOR_RUST_TARGET must be specified when cross-compiling with Rust enabled.])
614 TOR_RUST_LIB_PATH="src/rust/target/release/$tor_rust_static_name"
617 AC_SUBST(RUST_TARGET_PROP)
618 AC_SUBST(TOR_RUST_LIB_PATH)
619 AC_SUBST(CARGO_ONLINE)
623 dnl Let's check the rustc version, too
624 AC_MSG_CHECKING([rust version])
625 RUSTC_VERSION=`$RUSTC --version`
626 RUSTC_VERSION_MAJOR=`$RUSTC --version | cut -d ' ' -f 2 | cut -d '.' -f 1`
627 RUSTC_VERSION_MINOR=`$RUSTC --version | cut -d ' ' -f 2 | cut -d '.' -f 2`
628 if test "x$RUSTC_VERSION_MAJOR" = "x" -o "x$RUSTC_VERSION_MINOR" = "x"; then
629 AC_MSG_ERROR([rustc version couldn't be identified])
631 if test "$RUSTC_VERSION_MAJOR" -lt 2 -a "$RUSTC_VERSION_MINOR" -lt 31; then
632 AC_MSG_ERROR([rustc must be at least version 1.31.0])
634 AC_MSG_RESULT([$RUSTC_VERSION])
637 AC_SEARCH_LIBS(socket, [socket network])
638 AC_SEARCH_LIBS(gethostbyname, [nsl])
639 AC_SEARCH_LIBS(dlopen, [dl])
640 AC_SEARCH_LIBS(inet_aton, [resolv])
641 AC_SEARCH_LIBS(backtrace, [execinfo])
643 AC_SEARCH_LIBS([clock_gettime], [rt])
644 if test "$LIBS" != "$saved_LIBS"; then
645 # Looks like we need -lrt for clock_gettime().
649 if test "$bwin32" = "false"; then
650 AC_SEARCH_LIBS(pthread_create, [pthread])
651 AC_SEARCH_LIBS(pthread_detach, [pthread])
654 AM_CONDITIONAL(THREADS_WIN32, test "$bwin32" = "true")
655 AM_CONDITIONAL(THREADS_PTHREADS, test "$bwin32" = "false")
659 RtlSecureZeroMemory \
663 backtrace_symbols_fd \
670 get_current_dir_name \
679 gnu_get_libc_version \
717 # Apple messed up when they added some functions: they
718 # forgot to decorate them with appropriate AVAILABLE_MAC_OS_VERSION
721 # We should only probe for these functions if we are sure that we
722 # are not targeting OS X 10.9 or earlier.
723 AC_MSG_CHECKING([for a pre-Yosemite OS X build target])
724 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
726 # include <AvailabilityMacros.h>
727 # ifndef MAC_OS_X_VERSION_10_10
728 # define MAC_OS_X_VERSION_10_10 101000
730 # if defined(MAC_OS_X_VERSION_MIN_REQUIRED)
731 # if MAC_OS_X_VERSION_MIN_REQUIRED < MAC_OS_X_VERSION_10_10
732 # error "Running on Mac OS X 10.9 or earlier"
737 [on_macos_pre_10_10=no ; AC_MSG_RESULT([no])],
738 [on_macos_pre_10_10=yes; AC_MSG_RESULT([yes])])
740 if test "$on_macos_pre_10_10" = "no"; then
742 mach_approximate_time \
746 # We should only probe for these functions if we are sure that we
747 # are not targeting OSX 10.11 or earlier.
748 AC_MSG_CHECKING([for a pre-Sierra OSX build target])
749 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
751 # include <AvailabilityMacros.h>
752 # ifndef MAC_OS_X_VERSION_10_12
753 # define MAC_OS_X_VERSION_10_12 101200
755 # if defined(MAC_OS_X_VERSION_MIN_REQUIRED)
756 # if MAC_OS_X_VERSION_MIN_REQUIRED < MAC_OS_X_VERSION_10_12
757 # error "Running on Mac OSX 10.11 or earlier"
762 [on_macos_pre_10_12=no ; AC_MSG_RESULT([no])],
763 [on_macos_pre_10_12=yes; AC_MSG_RESULT([yes])])
765 if test "$on_macos_pre_10_12" = "no"; then
772 if test "$bwin32" != "true"; then
773 AC_CHECK_HEADERS(pthread.h)
774 AC_CHECK_FUNCS(pthread_create)
775 AC_CHECK_FUNCS(pthread_condattr_setclock)
778 if test "$bwin32" = "true"; then
779 AC_CHECK_DECLS([SecureZeroMemory, _getwch], , , [
786 AM_CONDITIONAL(BUILD_READPASSPHRASE_C,
787 test "x$ac_cv_func_readpassphrase" = "xno" && test "$bwin32" = "false")
789 AC_MSG_CHECKING([whether free(NULL) works])
790 AC_RUN_IFELSE([AC_LANG_PROGRAM([
796 [free_null_ok=true; AC_MSG_RESULT(yes)],
797 [free_null_ok=false; AC_MSG_RESULT(no)],
798 [free_null_ok=cross; AC_MSG_RESULT(cross)])
800 if test "$free_null_ok" = "false"; then
801 AC_MSG_ERROR([Your libc implementation doesn't allow free(NULL), as required by C99.])
804 dnl ------------------------------------------------------
805 dnl Where do you live, libevent? And how do we call you?
807 if test "$bwin32" = "true"; then
808 TOR_LIB_WS32=-lws2_32
809 TOR_LIB_IPHLPAPI=-liphlpapi
810 # Some of the cargo-cults recommend -lwsock32 as well, but I don't
811 # think it's actually necessary.
813 TOR_LIB_USERENV=-luserenv
819 AC_SUBST(TOR_LIB_WS32)
820 AC_SUBST(TOR_LIB_GDI)
821 AC_SUBST(TOR_LIB_IPHLPAPI)
822 AC_SUBST(TOR_LIB_USERENV)
824 tor_libevent_pkg_redhat="libevent"
825 tor_libevent_pkg_debian="libevent-dev"
826 tor_libevent_devpkg_redhat="libevent-devel"
827 tor_libevent_devpkg_debian="libevent-dev"
829 dnl On Gnu/Linux or any place we require it, we'll add librt to the Libevent
830 dnl linking for static builds.
831 STATIC_LIBEVENT_FLAGS=""
832 if test "$enable_static_libevent" = "yes"; then
833 if test "$have_rt" = "yes"; then
834 STATIC_LIBEVENT_FLAGS=" -lrt "
838 TOR_SEARCH_LIBRARY(libevent, $trylibeventdir, [-levent $STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32], [
840 #include <winsock2.h>
842 #include <sys/time.h>
843 #include <sys/types.h>
844 #include <event2/event.h>], [
846 #include <winsock2.h>
849 struct event_base *event_base_new(void);
850 void event_base_free(struct event_base *);],
853 {WSADATA d; WSAStartup(0x101,&d); }
855 event_base_free(event_base_new());
856 ], [--with-libevent-dir], [/opt/libevent])
858 dnl Determine the incantation needed to link libevent.
860 save_LDFLAGS="$LDFLAGS"
861 save_CPPFLAGS="$CPPFLAGS"
863 LIBS="$STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32 $save_LIBS"
864 LDFLAGS="$TOR_LDFLAGS_libevent $LDFLAGS"
865 CPPFLAGS="$TOR_CPPFLAGS_libevent $CPPFLAGS"
867 AC_CHECK_HEADERS(event2/event.h event2/dns.h event2/bufferevent_ssl.h)
869 if test "$enable_static_libevent" = "yes"; then
870 if test "$tor_cv_library_libevent_dir" = "(system)"; then
871 AC_MSG_ERROR("You must specify an explicit --with-libevent-dir=x option when using --enable-static-libevent")
873 TOR_LIBEVENT_LIBS="$TOR_LIBDIR_libevent/libevent.a $STATIC_LIBEVENT_FLAGS"
876 if test "x$ac_cv_header_event2_event_h" = "xyes"; then
877 AC_SEARCH_LIBS(event_new, [event event_core], , AC_MSG_ERROR("libevent2 is installed but linking it failed while searching for event_new"))
878 AC_SEARCH_LIBS(evdns_base_new, [event event_extra], , AC_MSG_ERROR("libevent2 is installed but linking it failed while searching for evdns_base_new"))
880 if test "$ac_cv_search_event_new" != "none required"; then
881 TOR_LIBEVENT_LIBS="$ac_cv_search_event_new"
883 if test "$ac_cv_search_evdns_base_new" != "none required"; then
884 TOR_LIBEVENT_LIBS="$ac_cv_search_evdns_base_new $TOR_LIBEVENT_LIBS"
887 AC_MSG_ERROR("libevent2 is required but the headers could not be found")
891 dnl Now check for particular libevent functions.
892 AC_CHECK_FUNCS([evutil_secure_rng_set_urandom_device_file \
893 evutil_secure_rng_add_bytes \
894 evdns_base_get_nameserver_addr \
899 LDFLAGS="$save_LDFLAGS"
900 CPPFLAGS="$save_CPPFLAGS"
902 dnl Check that libevent is at least at version 2.0.10, the first stable
903 dnl release of its series
904 CPPFLAGS="$CPPFLAGS $TOR_CPPFLAGS_libevent"
905 AC_MSG_CHECKING([whether Libevent is new enough])
906 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
907 #include <event2/event.h>
908 #if !defined(LIBEVENT_VERSION_NUMBER) || LIBEVENT_VERSION_NUMBER < 0x02000a00
914 ])], [ AC_MSG_RESULT([yes]) ],
915 [ AC_MSG_RESULT([no])
916 AC_MSG_ERROR([Libevent is not new enough. We require 2.0.10-stable or later]) ] )
919 LDFLAGS="$save_LDFLAGS"
920 CPPFLAGS="$save_CPPFLAGS"
922 AC_SUBST(TOR_LIBEVENT_LIBS)
924 dnl ------------------------------------------------------
925 dnl Where do you live, libm?
927 dnl On some platforms (Haiku/BeOS) the math library is
928 dnl part of libroot. In which case don't link against lm
931 AC_SEARCH_LIBS(pow, [m], , AC_MSG_ERROR([Could not find pow in libm or libc.]))
932 if test "$ac_cv_search_pow" != "none required"; then
933 TOR_LIB_MATH="$ac_cv_search_pow"
936 AC_SUBST(TOR_LIB_MATH)
938 dnl ------------------------------------------------------
939 dnl Hello, NSS. You're new around here.
940 if test "x$enable_nss" = "xyes"; then
941 PKG_CHECK_MODULES(NSS,
944 [have_nss=no; AC_MSG_ERROR([You asked for NSS but I can't find it, $pkg_config_user_action, or set NSS_CFLAGS and NSS_LIBS.])])
949 dnl ------------------------------------------------------
950 dnl Where do you live, openssl? And how do we call you?
952 if test "x$enable_nss" != "xyes"; then
954 tor_openssl_pkg_redhat="openssl"
955 tor_openssl_pkg_debian="libssl-dev"
956 tor_openssl_devpkg_redhat="openssl-devel"
957 tor_openssl_devpkg_debian="libssl-dev"
959 ALT_openssl_WITHVAL=""
961 AS_HELP_STRING(--with-ssl-dir=PATH, [obsolete alias for --with-openssl-dir]),
963 if test "x$withval" != "xno" && test "x$withval" != "x"; then
964 ALT_openssl_WITHVAL="$withval"
968 AC_MSG_NOTICE([Now, we'll look for OpenSSL >= 1.0.1])
969 TOR_SEARCH_LIBRARY(openssl, $tryssldir, [-lssl -lcrypto $TOR_LIB_GDI $TOR_LIB_WS32],
970 [#include <openssl/ssl.h>
971 char *getenv(const char *);],
972 [struct ssl_cipher_st;
973 unsigned SSL_CIPHER_get_id(const struct ssl_cipher_st *);
974 char *getenv(const char *);],
975 dnl This funny-looking test program calls getenv, so that the compiler
976 dnl will neither make code that call SSL_CIPHER_get_id(NULL) [producing
977 dnl a crash], nor optimize out the call to SSL_CIPHER_get_id().
978 dnl We look for SSL_cipher_get_id() because it is present in
979 dnl OpenSSL >=1.0.1, because it is not deprecated, and because Tor
981 [if (getenv("THIS_SHOULDNT_BE_SET_X201803")) SSL_CIPHER_get_id((void *)0);], [],
982 [/usr/local/opt/openssl /usr/local/openssl /usr/lib/openssl /usr/local/ssl /usr/lib/ssl /usr/local /opt/openssl])
984 dnl XXXX check for OPENSSL_VERSION_NUMBER == SSLeay()
986 if test "$enable_static_openssl" = "yes"; then
987 if test "$tor_cv_library_openssl_dir" = "(system)"; then
988 AC_MSG_ERROR("You must specify an explicit --with-openssl-dir=x option when using --enable-static-openssl")
990 TOR_OPENSSL_LIBS="$TOR_LIBDIR_openssl/libssl.a $TOR_LIBDIR_openssl/libcrypto.a"
993 TOR_OPENSSL_LIBS="-lssl -lcrypto"
995 AC_SUBST(TOR_OPENSSL_LIBS)
997 dnl Now check for particular openssl functions.
999 save_LDFLAGS="$LDFLAGS"
1000 save_CPPFLAGS="$CPPFLAGS"
1001 LIBS="$TOR_OPENSSL_LIBS $LIBS"
1002 LDFLAGS="$TOR_LDFLAGS_openssl $LDFLAGS"
1003 CPPFLAGS="$TOR_CPPFLAGS_openssl $CPPFLAGS"
1005 dnl Tor currently uses a number of APIs that are deprecated in OpenSSL 3.0.0
1006 dnl and later. We want to migrate away from them, but that will be a lot of
1007 dnl work. (See ticket tor#40166.) For now, we disable the deprecation
1010 AC_MSG_CHECKING([for OpenSSL >= 3.0.0])
1011 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1012 #include <openssl/opensslv.h>
1013 #if !defined(LIBRESSL_VERSION_NUMBER) && OPENSSL_VERSION_NUMBER <= 0x30000000L
1014 #error "you_have_version_3"
1017 [ AC_MSG_RESULT([no]) ],
1018 [ AC_MSG_RESULT([yes]);
1019 AC_DEFINE(OPENSSL_SUPPRESS_DEPRECATED, 1, [disable openssl deprecated-function warnings]) ])
1021 AC_MSG_CHECKING([for OpenSSL < 1.0.1])
1022 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1023 #include <openssl/opensslv.h>
1024 #if !defined(LIBRESSL_VERSION_NUMBER) && OPENSSL_VERSION_NUMBER < 0x1000100fL
1028 [ AC_MSG_RESULT([no]) ],
1029 [ AC_MSG_ERROR([OpenSSL is too old. We require 1.0.1 or later. You can specify a path to a newer one with --with-openssl-dir.]) ])
1031 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1032 #include <openssl/opensslv.h>
1033 #include <openssl/evp.h>
1034 #if defined(OPENSSL_NO_EC) || defined(OPENSSL_NO_ECDH) || defined(OPENSSL_NO_ECDSA)
1037 #if !defined(NID_X9_62_prime256v1) || !defined(NID_secp224r1)
1038 #error "curves unavailable"
1042 [ AC_MSG_ERROR([OpenSSL is built without full ECC support, including curves P256 and P224. You can specify a path to one with ECC support with --with-openssl-dir.]) ])
1044 AC_CHECK_MEMBERS([struct ssl_method_st.get_cipher_by_char], , ,
1045 [#include <openssl/ssl.h>
1048 dnl OpenSSL functions which we might not have. In theory, we could just
1049 dnl check the openssl version number, but in practice that gets pretty
1050 dnl confusing with LibreSSL, OpenSSL, and various distributions' patches
1053 ERR_load_KDF_strings \
1057 SSL_CTX_set1_groups_list \
1058 SSL_CTX_set_security_level \
1059 SSL_SESSION_get_master_key \
1060 SSL_get_client_ciphers \
1061 SSL_get_client_random \
1062 SSL_get_server_random \
1066 dnl Check if OpenSSL structures are opaque
1067 AC_CHECK_MEMBERS([SSL.state], , ,
1068 [#include <openssl/ssl.h>
1071 AC_CHECK_SIZEOF(SHA_CTX, , [AC_INCLUDES_DEFAULT()
1072 #include <openssl/sha.h>
1077 dnl We will someday make KECCAK_TINY optional, but for now we still need
1078 dnl it for SHAKE, since OpenSSL's SHAKE can't be squeezed more than
1079 dnl once. See comment in the definition of crypto_xof_t.
1081 dnl AM_CONDITIONAL(BUILD_KECCAK_TINY,
1082 dnl test "x$ac_cv_func_EVP_sha3_256" != "xyes")
1084 AM_CONDITIONAL(BUILD_KECCAK_TINY, true)
1086 dnl ======================================================================
1087 dnl Can we use KIST?
1089 dnl Define the set of checks for KIST scheduler support.
1090 AC_DEFUN([CHECK_KIST_SUPPORT],[
1091 dnl KIST needs struct tcp_info and for certain members to exist.
1093 [struct tcp_info.tcpi_unacked, struct tcp_info.tcpi_snd_mss],
1094 , ,[[#include <netinet/tcp.h>]])
1095 dnl KIST needs SIOCOUTQNSD to exist for an ioctl call.
1096 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
1097 #include <linux/sockios.h>
1101 ])], have_siocoutqnsd=yes, have_siocoutqnsd=no)
1102 if test "x$have_siocoutqnsd" = "xyes"; then
1103 if test "x$ac_cv_member_struct_tcp_info_tcpi_unacked" = "xyes"; then
1104 if test "x$ac_cv_member_struct_tcp_info_tcpi_snd_mss" = "xyes"; then
1105 have_kist_support=yes
1110 dnl Now, trigger the check.
1112 AS_IF([test "x$have_kist_support" = "xyes"],
1113 [AC_DEFINE(HAVE_KIST_SUPPORT, 1, [Defined if KIST scheduler is supported
1115 [AC_MSG_NOTICE([KIST scheduler can't be used. Missing support.])])
1118 LDFLAGS="$save_LDFLAGS"
1119 CPPFLAGS="$save_CPPFLAGS"
1121 dnl ------------------------------------------------------
1122 dnl Where do you live, zlib? And how do we call you?
1124 tor_zlib_pkg_redhat="zlib"
1125 tor_zlib_pkg_debian="zlib1g"
1126 tor_zlib_devpkg_redhat="zlib-devel"
1127 tor_zlib_devpkg_debian="zlib1g-dev"
1129 TOR_SEARCH_LIBRARY(zlib, $tryzlibdir, [-lz],
1130 [#include <zlib.h>],
1131 [const char * zlibVersion(void);],
1132 [zlibVersion();], [--with-zlib-dir],
1135 if test "$enable_static_zlib" = "yes"; then
1136 if test "$tor_cv_library_zlib_dir" = "(system)"; then
1137 AC_MSG_ERROR("You must specify an explicit --with-zlib-dir=x option when
1138 using --enable-static-zlib")
1140 TOR_ZLIB_LIBS="$TOR_LIBDIR_zlib/libz.a"
1145 AC_SUBST(TOR_ZLIB_LIBS)
1147 dnl ------------------------------------------------------
1148 dnl Where we do we find lzma?
1151 AS_HELP_STRING(--enable-lzma, [enable support for the LZMA compression scheme.]),
1152 [case "${enableval}" in
1155 * ) AC_MSG_ERROR(bad value for --enable-lzma) ;;
1156 esac], [enable_lzma=auto])
1158 if test "x$enable_lzma" = "xno"; then
1161 PKG_CHECK_MODULES([LZMA],
1166 if test "x$have_lzma" = "xno" ; then
1167 AC_MSG_WARN([Unable to find liblzma, $pkg_config_user_action, or set LZMA_CFLAGS and LZMA_LIBS.])
1171 if test "x$have_lzma" = "xyes"; then
1172 AC_DEFINE(HAVE_LZMA,1,[Have LZMA])
1173 TOR_LZMA_CFLAGS="${LZMA_CFLAGS}"
1174 TOR_LZMA_LIBS="${LZMA_LIBS}"
1176 AC_SUBST(TOR_LZMA_CFLAGS)
1177 AC_SUBST(TOR_LZMA_LIBS)
1179 dnl ------------------------------------------------------
1180 dnl Where we do we find zstd?
1183 AS_HELP_STRING(--enable-zstd, [enable support for the Zstandard compression scheme.]),
1184 [case "${enableval}" in
1187 * ) AC_MSG_ERROR(bad value for --enable-zstd) ;;
1188 esac], [enable_zstd=auto])
1190 if test "x$enable_zstd" = "xno"; then
1193 PKG_CHECK_MODULES([ZSTD],
1198 if test "x$have_zstd" = "xno" ; then
1199 AC_MSG_WARN([Unable to find libzstd, $pkg_config_user_action, or set ZSTD_CFLAGS and ZSTD_LIBS.])
1203 if test "x$have_zstd" = "xyes"; then
1204 AC_DEFINE(HAVE_ZSTD,1,[Have Zstd])
1205 TOR_ZSTD_CFLAGS="${ZSTD_CFLAGS}"
1206 TOR_ZSTD_LIBS="${ZSTD_LIBS}"
1208 dnl now check for zstd functions
1210 save_CFLAGS="$CFLAGS"
1211 LIBS="$LIBS $ZSTD_LIBS"
1212 CFLAGS="$CFLAGS $ZSTD_CFLAGS"
1213 AC_CHECK_FUNCS(ZSTD_estimateCStreamSize \
1214 ZSTD_estimateDCtxSize)
1216 CFLAGS="$save_CFLAGS"
1218 AC_SUBST(TOR_ZSTD_CFLAGS)
1219 AC_SUBST(TOR_ZSTD_LIBS)
1221 dnl ----------------------------------------------------------------------
1222 dnl Check if libcap is available for capabilities.
1224 tor_cap_pkg_debian="libcap2"
1225 tor_cap_pkg_redhat="libcap"
1226 tor_cap_devpkg_debian="libcap-dev"
1227 tor_cap_devpkg_redhat="libcap-devel"
1229 AC_CHECK_LIB([cap], [cap_init], [],
1230 AC_MSG_NOTICE([Libcap was not found. Capabilities will not be usable.])
1232 AC_CHECK_FUNCS(cap_set_proc)
1234 dnl ---------------------------------------------------------------------
1235 dnl Now that we know about our major libraries, we can check for compiler
1236 dnl and linker hardening options. We need to do this with the libraries known,
1237 dnl since sometimes the linker will like an option but not be willing to
1238 dnl use it with a build of a library.
1240 all_ldflags_for_check="$TOR_LDFLAGS_zlib $TOR_LDFLAGS_openssl $TOR_LDFLAGS_libevent"
1241 all_libs_for_check="$TOR_ZLIB_LIBS $TOR_LIB_MATH $TOR_LIBEVENT_LIBS $TOR_OPENSSL_LIBS $TOR_SYSTEMD_LIBS $TOR_LIB_WS32 $TOR_LIB_GDI $TOR_LIB_USERENV $TOR_CAP_LIBS"
1249 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
1250 #if !defined(__clang__)
1252 #endif])], have_clang=yes, have_clang=no)
1254 if test "x$enable_pic" = "xyes"; then
1255 TOR_CHECK_CFLAGS(-fPIC)
1258 if test "x$enable_gcc_hardening" != "xno"; then
1259 CFLAGS="$CFLAGS -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2"
1260 if test "x$have_clang" = "xyes"; then
1261 TOR_CHECK_CFLAGS(-Qunused-arguments)
1263 TOR_CHECK_CFLAGS(-fstack-protector-all, also_link)
1264 AS_VAR_PUSHDEF([can_compile], [tor_cv_cflags_-fstack-protector-all])
1265 AS_VAR_PUSHDEF([can_link], [tor_can_link_-fstack-protector-all])
1266 m4_ifdef([AS_VAR_IF],[
1267 AS_VAR_IF(can_compile, [yes],
1268 AS_VAR_IF(can_link, [yes],
1270 AC_MSG_ERROR([We tried to build with stack protection; it looks like your compiler supports it but your libc does not provide it. Are you missing libssp? (You can --disable-gcc-hardening to ignore this error.)]))
1272 AS_VAR_POPDEF([can_link])
1273 AS_VAR_POPDEF([can_compile])
1274 TOR_CHECK_CFLAGS(-Wstack-protector)
1275 TOR_CHECK_CFLAGS(--param ssp-buffer-size=1)
1276 if test "$bwin32" = "false" && test "$enable_libfuzzer" != "yes" && test "$enable_oss_fuzz" != "yes"; then
1277 if test "$enable_pic" != "yes"; then
1278 # If we have already enabled -fPIC, then we don't also need to
1279 # compile with -fPIE...
1280 TOR_CHECK_CFLAGS(-fPIE)
1282 # ... but we want to link our executables with -pie in any case, since
1283 # they're executables, not a library.
1284 TOR_CHECK_LDFLAGS(-pie, "$all_ldflags_for_check", "$all_libs_for_check")
1286 TOR_TRY_COMPILE_WITH_CFLAGS(-fwrapv, also_link, CFLAGS_FWRAPV="-fwrapv", true)
1288 AC_MSG_CHECKING([whether we can run hardened binaries])
1289 AC_RUN_IFELSE([AC_LANG_PROGRAM([], [return 0;])],
1290 [AC_MSG_RESULT([yes])],
1291 [AC_MSG_RESULT([no])
1293 We can link with compiler hardening options, but we can't run with them.
1294 That's a bad sign! If you must, you can pass --disable-gcc-hardening to
1295 configure, but it would be better to figure out what the underlying problem
1297 [AC_MSG_RESULT([cross])])
1300 if test "$fragile_hardening" = "yes"; then
1301 TOR_TRY_COMPILE_WITH_CFLAGS(-ftrapv, also_link, CFLAGS_FTRAPV="-ftrapv", true)
1302 if test "$tor_cv_cflags__ftrapv" = "yes" && test "$tor_can_link__ftrapv" != "yes"; then
1303 AC_MSG_WARN([The compiler supports -ftrapv, but for some reason I was not able to link with -ftrapv. Are you missing run-time support? Run-time hardening will not work as well as it should.])
1306 if test "$tor_cv_cflags__ftrapv" != "yes"; then
1307 AC_MSG_ERROR([You requested fragile hardening, but the compiler does not seem to support -ftrapv.])
1310 TOR_TRY_COMPILE_WITH_CFLAGS([-fsanitize=address], also_link, CFLAGS_ASAN="-fsanitize=address", true)
1311 if test "$tor_cv_cflags__fsanitize_address" = "yes" && test "$tor_can_link__fsanitize_address" != "yes"; then
1312 AC_MSG_ERROR([The compiler supports -fsanitize=address, but for some reason I was not able to link when using it. Are you missing run-time support? With GCC you need libubsan.*, and with Clang you need libclang_rt.ubsan*])
1315 TOR_TRY_COMPILE_WITH_CFLAGS([-fsanitize=undefined], also_link, CFLAGS_UBSAN="-fsanitize=undefined", true)
1316 if test "$tor_cv_cflags__fsanitize_address" = "yes" && test "$tor_can_link__fsanitize_address" != "yes"; then
1317 AC_MSG_ERROR([The compiler supports -fsanitize=undefined, but for some reason I was not able to link when using it. Are you missing run-time support? With GCC you need libasan.*, and with Clang you need libclang_rt.ubsan*])
1320 TOR_TRY_COMPILE_WITH_CFLAGS([-fno-sanitize=float-divide-by-zero], also_link, CFLAGS_UBSAN="-fno-sanitize=float-divide-by-zero", true)
1321 if test "$tor_cv_cflags__fno_sanitize_float_divide_by_zero" = "yes" && test "$tor_can_link__fno_sanitize_float_divide_by_zero" != "yes"; then
1322 AC_MSG_ERROR([The compiler supports -fno-sanitize=float-divide-by-zero, but for some reason I was not able to link when using it. Are you missing run-time support? With GCC you need libasan.*, and with Clang you need libclang_rt.ubsan*])
1325 TOR_CHECK_CFLAGS([-fno-omit-frame-pointer])
1328 dnl Find the correct libraries to add in order to use the sanitizers.
1330 dnl When building Rust, Cargo will run the linker with the -nodefaultlibs
1331 dnl option, which will prevent the compiler from linking the sanitizer
1332 dnl libraries it needs. We need to specify them manually.
1334 dnl What's more, we need to specify them in a linker script rather than
1335 dnl from build.rs: these options aren't allowed in the cargo:rustc-flags
1337 RUST_LINKER_OPTIONS=""
1338 if test "x$have_clang" = "xyes"; then
1339 if test "x$CFLAGS_ASAN" != "x"; then
1340 RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -Clink-arg=$CFLAGS_ASAN -Cdefault-linker-libraries"
1342 if test "x$CFLAGS_UBSAN" != "x"; then
1343 RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -Clink-arg=$CFLAGS_UBSAN -Cdefault-linker-libraries"
1346 if test "x$CFLAGS_ASAN" != "x"; then
1347 RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -Clink-arg=-fsanitize=address -Cdefault-linker-libraries"
1349 if test "x$CFLAGS_UBSAN" != "x"; then
1350 RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -Clink-arg=-fsanitize=undefined -Cdefault-linker-libraries"
1353 AC_SUBST(RUST_LINKER_OPTIONS)
1355 CFLAGS_BUGTRAP="$CFLAGS_FTRAPV $CFLAGS_ASAN $CFLAGS_UBSAN"
1356 CFLAGS_CONSTTIME="$CFLAGS_FWRAPV"
1358 mulodi_fixes_ftrapv=no
1359 if test "$have_clang" = "yes"; then
1360 saved_CFLAGS="$CFLAGS"
1361 CFLAGS="$CFLAGS $CFLAGS_FTRAPV"
1362 AC_MSG_CHECKING([whether clang -ftrapv can link a 64-bit int multiply])
1367 int main(int argc, char **argv)
1369 int64_t x = ((int64_t)atoi(argv[1])) * (int64_t)atoi(argv[2])
1370 * (int64_t)atoi(argv[3]);
1373 [ftrapv_can_link=yes; AC_MSG_RESULT([yes])],
1374 [ftrapv_can_link=no; AC_MSG_RESULT([no])])
1375 if test "$ftrapv_can_link" = "no"; then
1376 AC_MSG_CHECKING([whether defining __mulodi4 fixes that])
1381 int64_t __mulodi4(int64_t a, int64_t b, int *overflow) {
1385 int main(int argc, char **argv)
1387 int64_t x = ((int64_t)atoi(argv[1])) * (int64_t)atoi(argv[2])
1388 * (int64_t)atoi(argv[3]);
1391 [mulodi_fixes_ftrapv=yes; AC_MSG_RESULT([yes])],
1392 [mulodi_fixes_ftrapv=no; AC_MSG_RESULT([no])])
1394 CFLAGS="$saved_CFLAGS"
1397 AM_CONDITIONAL(ADD_MULODI4, test "$mulodi_fixes_ftrapv" = "yes")
1399 dnl These cflags add bunches of branches, and we haven't been able to
1400 dnl persuade ourselves that they're suitable for code that needs to be
1402 AC_SUBST(CFLAGS_BUGTRAP)
1403 dnl These cflags are variant ones sutable for code that needs to be
1405 AC_SUBST(CFLAGS_CONSTTIME)
1407 if test "x$enable_linker_hardening" != "xno"; then
1408 TOR_CHECK_LDFLAGS(-z relro -z now, "$all_ldflags_for_check", "$all_libs_for_check")
1411 # For backtrace support
1412 TOR_CHECK_LDFLAGS(-rdynamic)
1414 dnl ------------------------------------------------------
1415 dnl Now see if we have a -fomit-frame-pointer compiler option.
1417 saved_CFLAGS="$CFLAGS"
1418 TOR_CHECK_CFLAGS(-fomit-frame-pointer)
1419 F_OMIT_FRAME_POINTER=''
1420 if test "$saved_CFLAGS" != "$CFLAGS"; then
1421 if test "$fragile_hardening" = "yes"; then
1422 F_OMIT_FRAME_POINTER='-fomit-frame-pointer'
1425 CFLAGS="$saved_CFLAGS"
1426 AC_SUBST(F_OMIT_FRAME_POINTER)
1428 dnl ------------------------------------------------------
1429 dnl If we are adding -fomit-frame-pointer (or if the compiler's doing it
1430 dnl for us, as GCC 4.6 and later do at many optimization levels), then
1431 dnl we should try to add -fasynchronous-unwind-tables so that our backtrace
1433 TOR_CHECK_CFLAGS(-fasynchronous-unwind-tables)
1435 dnl ============================================================
1436 dnl Check for libseccomp
1438 if test "x$enable_seccomp" != "xno"; then
1439 AC_CHECK_HEADERS([seccomp.h])
1440 AC_SEARCH_LIBS(seccomp_init, [seccomp])
1443 dnl ============================================================
1444 dnl Check for libscrypt
1446 if test "x$enable_libscrypt" != "xno"; then
1447 AC_CHECK_HEADERS([libscrypt.h])
1448 AC_SEARCH_LIBS(libscrypt_scrypt, [scrypt])
1449 AC_CHECK_FUNCS([libscrypt_scrypt])
1452 dnl ============================================================
1453 dnl We need an implementation of curve25519.
1455 dnl set these defaults.
1456 build_curve25519_donna=no
1457 build_curve25519_donna_c64=no
1458 use_curve25519_donna=no
1459 use_curve25519_nacl=no
1462 dnl The best choice is using curve25519-donna-c64, but that requires
1464 AC_CACHE_CHECK([whether we can use curve25519-donna-c64],
1465 tor_cv_can_use_curve25519_donna_c64,
1467 [AC_LANG_PROGRAM([dnl
1469 typedef unsigned uint128_t __attribute__((mode(TI)));
1470 int func(uint64_t a, uint64_t b) {
1471 uint128_t c = ((uint128_t)a) * b;
1472 int ok = ((uint64_t)(c>>96)) == 522859 &&
1473 (((uint64_t)(c>>64))&0xffffffffL) == 3604448702L &&
1474 (((uint64_t)(c>>32))&0xffffffffL) == 2351960064L &&
1475 (((uint64_t)(c))&0xffffffffL) == 0;
1479 int ok = func( ((uint64_t)2000000000) * 1000000000,
1480 ((uint64_t)1234567890) << 24);
1483 [tor_cv_can_use_curve25519_donna_c64=yes],
1484 [tor_cv_can_use_curve25519_donna_c64=no],
1486 [AC_LANG_PROGRAM([dnl
1488 typedef unsigned uint128_t __attribute__((mode(TI)));
1489 int func(uint64_t a, uint64_t b) {
1490 uint128_t c = ((uint128_t)a) * b;
1491 int ok = ((uint64_t)(c>>96)) == 522859 &&
1492 (((uint64_t)(c>>64))&0xffffffffL) == 3604448702L &&
1493 (((uint64_t)(c>>32))&0xffffffffL) == 2351960064L &&
1494 (((uint64_t)(c))&0xffffffffL) == 0;
1498 int ok = func( ((uint64_t)2000000000) * 1000000000,
1499 ((uint64_t)1234567890) << 24);
1502 [tor_cv_can_use_curve25519_donna_c64=cross],
1503 [tor_cv_can_use_curve25519_donna_c64=no])])])
1505 AC_CHECK_HEADERS([crypto_scalarmult_curve25519.h \
1506 nacl/crypto_scalarmult_curve25519.h])
1508 AC_CACHE_CHECK([for nacl compiled with a fast curve25519 implementation],
1509 tor_cv_can_use_curve25519_nacl,
1510 [tor_saved_LIBS="$LIBS"
1513 [AC_LANG_PROGRAM([dnl
1514 #ifdef HAVE_CRYPTO_SCALARMULT_CURVE25519_H
1515 #include <crypto_scalarmult_curve25519.h>
1516 #elif defined(HAVE_NACL_CRYPTO_SCALARMULT_CURVE25519_H)
1517 #include <nacl/crypto_scalarmult_curve25519.h>
1519 #ifdef crypto_scalarmult_curve25519_ref_BYTES
1520 #error Hey, this is the reference implementation! That's not fast.
1523 unsigned char *a, *b, *c; crypto_scalarmult_curve25519(a,b,c);
1524 ])], [tor_cv_can_use_curve25519_nacl=yes],
1525 [tor_cv_can_use_curve25519_nacl=no])
1526 LIBS="$tor_saved_LIBS" ])
1528 dnl Okay, now we need to figure out which one to actually use. Fall back
1529 dnl to curve25519-donna.c
1531 if test "x$tor_cv_can_use_curve25519_donna_c64" != "xno"; then
1532 build_curve25519_donna_c64=yes
1533 use_curve25519_donna=yes
1534 elif test "x$tor_cv_can_use_curve25519_nacl" = "xyes"; then
1535 use_curve25519_nacl=yes
1536 CURVE25519_LIBS=-lnacl
1538 build_curve25519_donna=yes
1539 use_curve25519_donna=yes
1542 if test "x$use_curve25519_donna" = "xyes"; then
1543 AC_DEFINE(USE_CURVE25519_DONNA, 1,
1544 [Defined if we should use an internal curve25519_donna{,_c64} implementation])
1546 if test "x$use_curve25519_nacl" = "xyes"; then
1547 AC_DEFINE(USE_CURVE25519_NACL, 1,
1548 [Defined if we should use a curve25519 from nacl])
1550 AM_CONDITIONAL(BUILD_CURVE25519_DONNA,
1551 test "x$build_curve25519_donna" = "xyes")
1552 AM_CONDITIONAL(BUILD_CURVE25519_DONNA_C64,
1553 test "x$build_curve25519_donna_c64" = "xyes")
1554 AC_SUBST(CURVE25519_LIBS)
1556 dnl Make sure to enable support for large off_t if available.
1559 AC_CHECK_HEADERS([errno.h \
1573 gnu/libc-version.h \
1613 AC_CHECK_HEADERS(sys/param.h)
1615 AC_CHECK_HEADERS(net/if.h, net_if_found=1, net_if_found=0,
1616 [#ifdef HAVE_SYS_TYPES_H
1617 #include <sys/types.h>
1619 #ifdef HAVE_SYS_SOCKET_H
1620 #include <sys/socket.h>
1622 AC_CHECK_HEADERS(net/pfvar.h, net_pfvar_found=1, net_pfvar_found=0,
1623 [#ifdef HAVE_SYS_TYPES_H
1624 #include <sys/types.h>
1626 #ifdef HAVE_SYS_SOCKET_H
1627 #include <sys/socket.h>
1629 #ifdef HAVE_NET_IF_H
1632 #ifdef HAVE_NETINET_IN_H
1633 #include <netinet/in.h>
1636 AC_CHECK_HEADERS(linux/if.h,[],[],
1638 #ifdef HAVE_SYS_SOCKET_H
1639 #include <sys/socket.h>
1643 AC_CHECK_HEADERS(linux/netfilter_ipv4.h,
1644 linux_netfilter_ipv4=1, linux_netfilter_ipv4=0,
1645 [#ifdef HAVE_SYS_TYPES_H
1646 #include <sys/types.h>
1648 #ifdef HAVE_SYS_SOCKET_H
1649 #include <sys/socket.h>
1651 #ifdef HAVE_LIMITS_H
1654 #ifdef HAVE_LINUX_TYPES_H
1655 #include <linux/types.h>
1657 #ifdef HAVE_NETINET_IN6_H
1658 #include <netinet/in6.h>
1660 #ifdef HAVE_NETINET_IN_H
1661 #include <netinet/in.h>
1664 AC_CHECK_HEADERS(linux/netfilter_ipv6/ip6_tables.h,
1665 linux_netfilter_ipv6_ip6_tables=1, linux_netfilter_ipv6_ip6_tables=0,
1666 [#ifdef HAVE_SYS_TYPES_H
1667 #include <sys/types.h>
1669 #ifdef HAVE_SYS_SOCKET_H
1670 #include <sys/socket.h>
1672 #ifdef HAVE_LIMITS_H
1675 #ifdef HAVE_LINUX_TYPES_H
1676 #include <linux/types.h>
1678 #ifdef HAVE_NETINET_IN6_H
1679 #include <netinet/in6.h>
1681 #ifdef HAVE_NETINET_IN_H
1682 #include <netinet/in.h>
1684 #ifdef HAVE_LINUX_IF_H
1685 #include <linux/if.h>
1689 if test "x$net_if_found" = "x1" && test "x$net_pfvar_found" = "x1"; then
1692 if test "x$linux_netfilter_ipv4" = "x1"; then
1695 if test "x$linux_netfilter_ipv6_ip6_tables" = "x1"; then
1698 if test "x$transparent_ok" = "x1"; then
1699 AC_DEFINE(USE_TRANSPARENT, 1, "Define to enable transparent proxy support")
1701 AC_MSG_NOTICE([Transparent proxy support enabled, but missing headers.])
1704 AC_CHECK_MEMBERS([struct timeval.tv_sec], , ,
1705 [#ifdef HAVE_SYS_TYPES_H
1706 #include <sys/types.h>
1708 #ifdef HAVE_SYS_TIME_H
1709 #include <sys/time.h>
1712 AC_CHECK_SIZEOF(char)
1713 AC_CHECK_SIZEOF(short)
1714 AC_CHECK_SIZEOF(int)
1715 AC_CHECK_SIZEOF(unsigned int)
1716 AC_CHECK_SIZEOF(long)
1717 AC_CHECK_SIZEOF(long long)
1718 AC_CHECK_SIZEOF(__int64)
1719 AC_CHECK_SIZEOF(void *)
1720 AC_CHECK_SIZEOF(time_t)
1721 AC_CHECK_SIZEOF(size_t)
1722 AC_CHECK_SIZEOF(pid_t)
1724 AC_CHECK_TYPES([uint, u_char, ssize_t])
1726 AC_PC_FROM_UCONTEXT([:])
1728 dnl used to include sockaddr_storage, but everybody has that.
1729 AC_CHECK_TYPES([struct in6_addr, struct sockaddr_in6, sa_family_t], , ,
1730 [#ifdef HAVE_SYS_TYPES_H
1731 #include <sys/types.h>
1733 #ifdef HAVE_NETINET_IN_H
1734 #include <netinet/in.h>
1736 #ifdef HAVE_NETINET_IN6_H
1737 #include <netinet/in6.h>
1739 #ifdef HAVE_SYS_SOCKET_H
1740 #include <sys/socket.h>
1743 #define _WIN32_WINNT 0x0501
1744 #define WIN32_LEAN_AND_MEAN
1745 #include <winsock2.h>
1746 #include <ws2tcpip.h>
1749 AC_CHECK_MEMBERS([struct in6_addr.s6_addr32, struct in6_addr.s6_addr16, struct sockaddr_in.sin_len, struct sockaddr_in6.sin6_len], , ,
1750 [#ifdef HAVE_SYS_TYPES_H
1751 #include <sys/types.h>
1753 #ifdef HAVE_NETINET_IN_H
1754 #include <netinet/in.h>
1756 #ifdef HAVE_NETINET_IN6_H
1757 #include <netinet/in6.h>
1759 #ifdef HAVE_SYS_SOCKET_H
1760 #include <sys/socket.h>
1763 #define _WIN32_WINNT 0x0501
1764 #define WIN32_LEAN_AND_MEAN
1765 #include <winsock2.h>
1766 #include <ws2tcpip.h>
1770 AC_CHECK_TYPES([rlim_t], , ,
1771 [#ifdef HAVE_SYS_TYPES_H
1772 #include <sys/types.h>
1774 #ifdef HAVE_SYS_TIME_H
1775 #include <sys/time.h>
1777 #ifdef HAVE_SYS_RESOURCE_H
1778 #include <sys/resource.h>
1782 AX_CHECK_SIGN([time_t],
1785 #ifdef HAVE_SYS_TYPES_H
1786 #include <sys/types.h>
1788 #ifdef HAVE_SYS_TIME_H
1789 #include <sys/time.h>
1796 if test "$ax_cv_decl_time_t_signed" = "no"; then
1797 AC_MSG_ERROR([You have an unsigned time_t; Tor does not support that. Please tell the Tor developers about your interesting platform.])
1800 AX_CHECK_SIGN([size_t],
1801 [ tor_cv_size_t_signed=yes ],
1802 [ tor_cv_size_t_signed=no ], [
1803 #ifdef HAVE_SYS_TYPES_H
1804 #include <sys/types.h>
1808 if test "$ax_cv_decl_size_t_signed" = "yes"; then
1809 AC_MSG_ERROR([You have a signed size_t; that's grossly nonconformant.])
1812 AX_CHECK_SIGN([enum always],
1813 [ AC_DEFINE(ENUM_VALS_ARE_SIGNED, 1, [Define if enum is always signed]) ],
1815 enum always { AAA, BBB, CCC };
1818 AC_CHECK_SIZEOF(socklen_t, , [AC_INCLUDES_DEFAULT()
1819 #ifdef HAVE_SYS_SOCKET_H
1820 #include <sys/socket.h>
1824 # We want to make sure that we _don't_ have a cell_t defined, like IRIX does.
1826 AC_CHECK_SIZEOF(cell_t)
1828 # Let's see if stdatomic works. (There are some debian clangs that screw it
1829 # up; see Tor bug #26779 and debian bug 903709.)
1830 AC_CACHE_CHECK([whether C11 stdatomic.h actually works],
1831 tor_cv_stdatomic_works,
1832 [AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
1833 #include <stdatomic.h>
1834 struct x { atomic_size_t y; };
1835 void try_atomic_init(struct x *xx)
1837 atomic_init(&xx->y, 99);
1838 atomic_fetch_add(&xx->y, 1);
1840 ]])], [tor_cv_stdatomic_works=yes], [tor_cv_stdatomic_works=no])])
1842 if test "$tor_cv_stdatomic_works" = "yes"; then
1843 AC_DEFINE(STDATOMIC_WORKS, 1, [Set to 1 if we can compile a simple stdatomic example.])
1844 elif test "$ac_cv_header_stdatomic_h" = "yes"; then
1845 AC_MSG_WARN([Your compiler provides the stdatomic.h header, but it doesn't seem to work. I'll pretend it isn't there. If you are using Clang on Debian, maybe this is because of https://bugs.debian.org/903709 ])
1848 # Now make sure that NULL can be represented as zero bytes.
1849 AC_CACHE_CHECK([whether memset(0) sets pointers to NULL], tor_cv_null_is_zero,
1850 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1851 [[#include <stdlib.h>
1854 #ifdef HAVE_STDDEF_H
1857 int main () { char *p1,*p2; p1=NULL; memset(&p2,0,sizeof(p2));
1858 return memcmp(&p1,&p2,sizeof(char*))?1:0; }]])],
1859 [tor_cv_null_is_zero=yes],
1860 [tor_cv_null_is_zero=no],
1861 [tor_cv_null_is_zero=cross])])
1863 if test "$tor_cv_null_is_zero" = "cross"; then
1864 # Cross-compiling; let's hope that the target isn't raving mad.
1865 AC_MSG_NOTICE([Cross-compiling: we'll assume that NULL is represented as a sequence of 0-valued bytes.])
1868 if test "$tor_cv_null_is_zero" != "no"; then
1869 AC_DEFINE([NULL_REP_IS_ZERO_BYTES], 1,
1870 [Define to 1 iff memset(0) sets pointers to NULL])
1873 AC_CACHE_CHECK([whether memset(0) sets doubles to 0.0], tor_cv_dbl0_is_zero,
1874 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1875 [[#include <stdlib.h>
1878 #ifdef HAVE_STDDEF_H
1881 int main () { double d1,d2; d1=0; memset(&d2,0,sizeof(d2));
1882 return memcmp(&d1,&d2,sizeof(d1))?1:0; }]])],
1883 [tor_cv_dbl0_is_zero=yes],
1884 [tor_cv_dbl0_is_zero=no],
1885 [tor_cv_dbl0_is_zero=cross])])
1887 if test "$tor_cv_dbl0_is_zero" = "cross"; then
1888 # Cross-compiling; let's hope that the target isn't raving mad.
1889 AC_MSG_NOTICE([Cross-compiling: we'll assume that 0.0 can be represented as a sequence of 0-valued bytes.])
1892 if test "$tor_cv_dbl0_is_zero" != "no"; then
1893 AC_DEFINE([DOUBLE_0_REP_IS_ZERO_BYTES], 1,
1894 [Define to 1 iff memset(0) sets doubles to 0.0])
1897 # And what happens when we malloc zero?
1898 AC_CACHE_CHECK([whether we can malloc(0) safely.], tor_cv_malloc_zero_works,
1899 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1900 [[#include <stdlib.h>
1903 #ifdef HAVE_STDDEF_H
1906 int main () { return malloc(0)?0:1; }]])],
1907 [tor_cv_malloc_zero_works=yes],
1908 [tor_cv_malloc_zero_works=no],
1909 [tor_cv_malloc_zero_works=cross])])
1911 if test "$tor_cv_malloc_zero_works" = "cross"; then
1912 # Cross-compiling; let's hope that the target isn't raving mad.
1913 AC_MSG_NOTICE([Cross-compiling: we'll assume that we need to check malloc() arguments for 0.])
1916 if test "$tor_cv_malloc_zero_works" = "yes"; then
1917 AC_DEFINE([MALLOC_ZERO_WORKS], 1,
1918 [Define to 1 iff malloc(0) returns a pointer])
1921 # whether we seem to be in a 2s-complement world.
1922 AC_CACHE_CHECK([whether we are using 2s-complement arithmetic], tor_cv_twos_complement,
1923 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1924 [[int main () { int problem = ((-99) != (~99)+1);
1925 return problem ? 1 : 0; }]])],
1926 [tor_cv_twos_complement=yes],
1927 [tor_cv_twos_complement=no],
1928 [tor_cv_twos_complement=cross])])
1930 if test "$tor_cv_twos_complement" = "cross"; then
1931 # Cross-compiling; let's hope that the target isn't raving mad.
1932 AC_MSG_NOTICE([Cross-compiling: we'll assume that negative integers are represented with two's complement.])
1935 if test "$tor_cv_twos_complement" != "no"; then
1936 AC_DEFINE([USING_TWOS_COMPLEMENT], 1,
1937 [Define to 1 iff we represent negative integers with
1941 # What does shifting a negative value do?
1942 AC_CACHE_CHECK([whether right-shift on negative values does sign-extension], tor_cv_sign_extend,
1943 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1944 [[int main () { int okay = (-60 >> 8) == -1; return okay ? 0 : 1; }]])],
1945 [tor_cv_sign_extend=yes],
1946 [tor_cv_sign_extend=no],
1947 [tor_cv_sign_extend=cross])])
1949 if test "$tor_cv_sign_extend" = "cross"; then
1950 # Cross-compiling; let's hope that the target isn't raving mad.
1951 AC_MSG_NOTICE([Cross-compiling: we'll assume that right-shifting negative integers causes sign-extension])
1954 if test "$tor_cv_sign_extend" != "no"; then
1955 AC_DEFINE([RSHIFT_DOES_SIGN_EXTEND], 1,
1956 [Define to 1 iff right-shifting a negative value performs sign-extension])
1959 # Is uint8_t the same type as unsigned char?
1960 AC_CACHE_CHECK([whether uint8_t is the same type as unsigned char], tor_cv_uint8_uchar,
1961 [AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
1964 unsigned char c;]])],
1965 [tor_cv_uint8_uchar=yes],
1966 [tor_cv_uint8_uchar=no],
1967 [tor_cv_uint8_uchar=cross])])
1969 if test "$tor_cv_uint8_uchar" = "cross"; then
1970 AC_MSG_NOTICE([Cross-compiling: we'll assume that uint8_t is the same type as unsigned char])
1973 if test "$tor_cv_uint8_uchar" = "no"; then
1974 AC_MSG_ERROR([We assume that uint8_t is the same type as unsigned char, but your compiler disagrees.])
1977 AC_ARG_WITH(tcmalloc,
1978 AS_HELP_STRING(--with-tcmalloc, [use tcmalloc memory allocation library. Deprecated; see --with-malloc]))
1980 default_malloc=system
1982 if test "x$enable_openbsd_malloc" = "xyes" ; then
1983 AC_MSG_NOTICE([The --enable-openbsd-malloc argument is deprecated; use --with-malloc=openbsd instead.])
1984 default_malloc=openbsd
1987 if test "x$with_tcmalloc" = "xyes"; then
1988 AC_MSG_NOTICE([The --with-tcmalloc argument is deprecated; use --with-malloc=tcmalloc instead.])
1989 default_malloc=tcmalloc
1993 AS_HELP_STRING([--with-malloc=[system,jemalloc,tcmalloc,openbsd]],
1994 [select special malloc implementation [system]]),
1995 [ malloc="$with_malloc" ], [ malloc="$default_malloc" ])
1999 PKG_CHECK_MODULES([TCMALLOC],
2004 if test "x$have_tcmalloc" = "xno" ; then
2005 AC_MSG_ERROR([Unable to find tcmalloc requested by --with-malloc, $pkg_config_user_action, or set TCMALLOC_CFLAGS and TCMALLOC_LIBS.])
2008 CFLAGS="$CFLAGS $TCMALLOC_CFLAGS"
2009 LIBS="$TCMALLOC_LIBS $LIBS"
2013 PKG_CHECK_MODULES([JEMALLOC],
2018 if test "x$have_jemalloc" = "xno" ; then
2019 AC_MSG_ERROR([Unable to find jemalloc requested by --with-malloc, $pkg_config_user_action, or set JEMALLOC_CFLAGS and JEMALLOC_LIBS.])
2022 CFLAGS="$CFLAGS $JEMALLOC_CFLAGS"
2023 LIBS="$JEMALLOC_LIBS $LIBS"
2024 using_custom_malloc=yes
2028 AC_MSG_WARN([The openbsd malloc port is deprecated in Tor 0.3.5 and will be removed in a future version.])
2029 enable_openbsd_malloc=yes
2033 # handle this later, including the jemalloc fallback
2034 AC_CHECK_FUNCS(mallinfo)
2037 [AC_MSG_ERROR([--with-malloc=`$with_malloc' not supported, see --help])
2040 AM_CONDITIONAL(USE_OPENBSD_MALLOC, test "x$enable_openbsd_malloc" = "xyes")
2042 if test "$malloc" != "system"; then
2043 # Tell the C compiler not to use the system allocator functions.
2044 TOR_CHECK_CFLAGS([-fno-builtin-malloc -fno-builtin-realloc -fno-builtin-calloc -fno-builtin-free])
2046 if test "$using_custom_malloc" = "yes"; then
2047 # Tell the C compiler not to use the system allocator functions.
2048 TOR_CHECK_CFLAGS([-fno-builtin-malloc -fno-builtin-realloc -fno-builtin-calloc -fno-builtin-free])
2051 # By default, we're going to assume we don't have mlockall()
2052 # bionic and other platforms have various broken mlockall subsystems.
2053 # Some systems don't have a working mlockall, some aren't linkable,
2054 # and some have it but don't declare it.
2055 AC_CHECK_FUNCS(mlockall)
2056 AC_CHECK_DECLS([mlockall], , , [
2057 #ifdef HAVE_SYS_MMAN_H
2058 #include <sys/mman.h>
2061 # Allow user to specify an alternate syslog facility
2062 AC_ARG_WITH(syslog-facility,
2063 AS_HELP_STRING(--with-syslog-facility=LOG, [syslog facility to use (default=LOG_DAEMON)]),
2064 syslog_facility="$withval", syslog_facility="LOG_DAEMON")
2065 AC_DEFINE_UNQUOTED(LOGFACILITY,$syslog_facility,[name of the syslog facility])
2066 AC_SUBST(LOGFACILITY)
2068 # Check if we have getresuid and getresgid
2069 AC_CHECK_FUNCS(getresuid getresgid)
2071 # Check for gethostbyname_r in all its glorious incompatible versions.
2072 # (This logic is based on that in Python's configure.in)
2073 AH_TEMPLATE(HAVE_GETHOSTBYNAME_R,
2074 [Define this if you have any gethostbyname_r()])
2076 AC_CHECK_FUNC(gethostbyname_r, [
2077 AC_MSG_CHECKING([how many arguments gethostbyname_r() wants])
2079 CFLAGS="$CFLAGS $MY_CPPFLAGS $MY_THREAD_CPPFLAGS $MY_CFLAGS"
2080 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
2084 struct hostent *h1, *h2;
2086 (void)gethostbyname_r(cp1,h1,cp2,i1,&h2,&i2);
2088 AC_DEFINE(HAVE_GETHOSTBYNAME_R)
2089 AC_DEFINE(HAVE_GETHOSTBYNAME_R_6_ARG, 1,
2090 [Define this if gethostbyname_r takes 6 arguments])
2093 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
2099 (void)gethostbyname_r(cp1,h1,cp2,i1,&i2);
2101 AC_DEFINE(HAVE_GETHOSTBYNAME_R)
2102 AC_DEFINE(HAVE_GETHOSTBYNAME_R_5_ARG, 1,
2103 [Define this if gethostbyname_r takes 5 arguments])
2106 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
2111 struct hostent_data hd;
2112 (void) gethostbyname_r(cp1,h1,&hd);
2114 AC_DEFINE(HAVE_GETHOSTBYNAME_R)
2115 AC_DEFINE(HAVE_GETHOSTBYNAME_R_3_ARG, 1,
2116 [Define this if gethostbyname_r takes 3 arguments])
2126 AC_CACHE_CHECK([whether the C compiler supports __func__],
2127 tor_cv_have_func_macro,
2128 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
2130 int main(int c, char **v) { puts(__func__); }])],
2131 tor_cv_have_func_macro=yes,
2132 tor_cv_have_func_macro=no))
2134 AC_CACHE_CHECK([whether the C compiler supports __FUNC__],
2135 tor_cv_have_FUNC_macro,
2136 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
2138 int main(int c, char **v) { puts(__FUNC__); }])],
2139 tor_cv_have_FUNC_macro=yes,
2140 tor_cv_have_FUNC_macro=no))
2142 AC_CACHE_CHECK([whether the C compiler supports __FUNCTION__],
2143 tor_cv_have_FUNCTION_macro,
2144 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
2146 int main(int c, char **v) { puts(__FUNCTION__); }])],
2147 tor_cv_have_FUNCTION_macro=yes,
2148 tor_cv_have_FUNCTION_macro=no))
2150 AC_CACHE_CHECK([whether we have extern char **environ already declared],
2151 tor_cv_have_environ_declared,
2152 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
2153 #ifdef HAVE_UNISTD_H
2157 int main(int c, char **v) { char **t = environ; }])],
2158 tor_cv_have_environ_declared=yes,
2159 tor_cv_have_environ_declared=no))
2161 if test "$tor_cv_have_func_macro" = "yes"; then
2162 AC_DEFINE(HAVE_MACRO__func__, 1, [Defined if the compiler supports __func__])
2165 if test "$tor_cv_have_FUNC_macro" = "yes"; then
2166 AC_DEFINE(HAVE_MACRO__FUNC__, 1, [Defined if the compiler supports __FUNC__])
2169 if test "$tor_cv_have_FUNCTION_macro" = "yes"; then
2170 AC_DEFINE(HAVE_MACRO__FUNCTION__, 1,
2171 [Defined if the compiler supports __FUNCTION__])
2174 if test "$tor_cv_have_environ_declared" = "yes"; then
2175 AC_DEFINE(HAVE_EXTERN_ENVIRON_DECLARED, 1,
2176 [Defined if we have extern char **environ already declared])
2179 # $prefix stores the value of the --prefix command line option, or
2180 # NONE if the option wasn't set. In the case that it wasn't set, make
2181 # it be the default, so that we can use it to expand directories now.
2182 if test "x$prefix" = "xNONE"; then
2183 prefix=$ac_default_prefix
2186 # and similarly for $exec_prefix
2187 if test "x$exec_prefix" = "xNONE"; then
2191 if test "x$BUILDDIR" = "x"; then
2195 AH_TEMPLATE([BUILDDIR],[tor's build directory])
2196 AC_DEFINE_UNQUOTED(BUILDDIR,"$BUILDDIR")
2198 if test "x$SRCDIR" = "x"; then
2199 SRCDIR=$(cd "$srcdir"; pwd)
2201 AH_TEMPLATE([SRCDIR],[tor's sourcedir directory])
2202 AC_DEFINE_UNQUOTED(SRCDIR,"$SRCDIR")
2204 if test "x$CONFDIR" = "x"; then
2205 CONFDIR=`eval echo $sysconfdir/tor`
2208 AH_TEMPLATE([CONFDIR],[tor's configuration directory])
2209 AC_DEFINE_UNQUOTED(CONFDIR,"$CONFDIR")
2211 BINDIR=`eval echo $bindir`
2213 LOCALSTATEDIR=`eval echo $localstatedir`
2214 AC_SUBST(LOCALSTATEDIR)
2216 if test "$bwin32" = "true"; then
2217 # Test if the linker supports the --nxcompat and --dynamicbase options
2219 save_LDFLAGS="$LDFLAGS"
2220 LDFLAGS="-Wl,--nxcompat -Wl,--dynamicbase"
2221 AC_MSG_CHECKING([whether the linker supports DllCharacteristics])
2222 AC_LINK_IFELSE([AC_LANG_PROGRAM([])],
2223 [AC_MSG_RESULT([yes])]
2224 [save_LDFLAGS="$save_LDFLAGS $LDFLAGS"],
2225 [AC_MSG_RESULT([no])]
2227 LDFLAGS="$save_LDFLAGS"
2230 # Set CFLAGS _after_ all the above checks, since our warnings are stricter
2231 # than autoconf's macros like.
2232 if test "$GCC" = "yes"; then
2233 # Disable GCC's strict aliasing checks. They are an hours-to-debug
2234 # accident waiting to happen.
2235 CFLAGS="$CFLAGS -Wall -fno-strict-aliasing"
2237 # Override optimization level for non-gcc compilers
2239 enable_gcc_warnings=no
2240 enable_gcc_warnings_advisory=no
2243 # Warnings implies advisory-warnings and -Werror.
2244 if test "$enable_gcc_warnings" = "yes"; then
2245 enable_gcc_warnings_advisory=yes
2246 enable_fatal_warnings=yes
2249 # OS X Lion started deprecating the system openssl. Let's just disable
2250 # all deprecation warnings on OS X. Also, to potentially make the binary
2251 # a little smaller, let's enable dead_strip.
2255 CFLAGS="$CFLAGS -Wno-deprecated-declarations"
2256 LDFLAGS="$LDFLAGS -dead_strip" ;;
2259 TOR_WARNING_FLAGS=""
2261 # Add some more warnings which we use in development but not in the
2262 # released versions. (Some relevant gcc versions can't handle these.)
2264 # Note that we have to do this near the end of the autoconf process, or
2265 # else we may run into problems when these warnings hit on the testing C
2266 # programs that autoconf wants to build.
2267 if test "x$enable_gcc_warnings_advisory" != "xno"; then
2270 *-*-openbsd* | *-*-bitrig*)
2271 # Some OpenBSD versions (like 4.8) have -Wsystem-headers by default.
2272 # That's fine, except that the headers don't pass -Wredundant-decls.
2273 # Therefore, let's disable -Wsystem-headers when we're building
2274 # with maximal warnings on OpenBSD.
2275 CFLAGS="$CFLAGS -Wno-system-headers" ;;
2278 CFLAGS_NOWARNINGS="$CFLAGS"
2280 # GCC4.3 users once report trouble with -Wstrict-overflow=5. GCC5 users
2281 # have it work better.
2282 # CFLAGS="$CFLAGS -Wstrict-overflow=1"
2284 # This warning was added in gcc 4.3, but it appears to generate
2285 # spurious warnings in gcc 4.4. I don't know if it works in 4.5.
2286 #CFLAGS="$CFLAGS -Wlogical-op"
2288 m4_foreach_w([warning_flag], [
2290 -Waddress-of-array-temporary
2291 -Waddress-of-temporary
2293 -Wanonymous-pack-parens
2296 -Warc-bridge-casts-disallowed-in-nonarc
2297 -Warc-maybe-repeated-use-of-weak
2298 -Warc-performSelector-leaks
2299 -Warc-repeated-use-of-weak
2301 -Warray-bounds-pointer-arithmetic
2303 -Wasm-operand-widths
2305 -Watomic-property-with-user-defined-accessor
2307 -Wauto-storage-class
2310 -Wbackslash-newline-escape
2311 -Wbad-array-new-length
2312 -Wbind-to-temporary-copy
2313 -Wbitfield-constant-conversion
2316 -Wbuiltin-requires-header
2318 -Wcompare-distinct-pointer-types
2319 -Wcomplex-component-init
2320 -Wconditional-type-mismatch
2322 -Wconstant-conversion
2323 -Wconstant-logical-operand
2324 -Wconstexpr-not-const
2325 -Wcustom-atomic-properties
2327 -Wdangling-initializer-list
2329 -Wdelegating-ctor-cycles
2330 -Wdeprecated-implementations
2331 -Wdeprecated-register
2332 -Wdirect-ivar-access
2334 -Wdistributed-object-modifiers
2336 -Wdollar-in-identifier-extension
2338 -Wduplicate-decl-specifier
2340 -Wduplicate-method-arg
2341 -Wduplicate-method-match
2343 -Wdynamic-class-memaccess
2344 -Wembedded-directive
2345 -Wempty-translation-unit
2347 -Wexit-time-destructors
2348 -Wexplicit-ownership-type
2349 -Wextern-initializer
2353 -Wflexible-array-extensions
2356 -Wfour-char-constants
2358 -Wglobal-constructors
2359 -Wgnu-array-member-paren-init
2361 -Wgnu-static-float-init
2364 -Widiomatic-parentheses
2365 -Wignored-attributes
2366 -Wimplicit-atomic-properties
2367 -Wimplicit-conversion-floating-point-to-bool
2368 -Wimplicit-exception-spec-mismatch
2369 -Wimplicit-fallthrough
2370 -Wimplicit-fallthrough-per-function
2371 -Wimplicit-retain-self
2372 -Wimport-preprocessor-directive-pedantic
2373 -Wincompatible-library-redeclaration
2374 -Wincompatible-pointer-types-discards-qualifiers
2375 -Wincomplete-implementation
2377 -Wincomplete-umbrella
2380 -Wint-to-void-pointer-cast
2386 -Winvalid-source-encoding
2387 -Winvalid-token-paste
2388 -Wknr-promoted-parameter
2389 -Wlarge-by-value-copy
2390 -Wliteral-conversion
2392 -Wlocal-type-template-args
2396 -Wmalformed-warning-check
2400 -Wmismatched-parameter-types
2401 -Wmismatched-return-types
2402 -Wmissing-field-initializers
2403 -Wmissing-format-attribute
2405 -Wmissing-selector-name
2407 -Wmissing-variable-declarations
2411 -Wnon-literal-null-conversion
2413 -Wnonportable-cfstrings
2419 -Wout-of-line-declaration
2421 -Woverlength-strings
2423 -Woverriding-method-mismatch
2424 -Wpointer-type-mismatch
2425 -Wpredefined-identifier-outside-function
2426 -Wprotocol-property-synthesis-ambiguity
2427 -Wreadonly-iboutlet-property
2428 -Wreadonly-setter-attrs
2430 -Wreceiver-forward-class
2432 -Wreinterpret-base-class
2433 -Wrequires-super-attribute
2434 -Wreserved-user-defined-literal
2435 -Wreturn-stack-address
2437 -Wselector-type-mismatch
2439 -Wserialized-diagnostics
2441 -Wshift-count-negative
2442 -Wshift-count-overflow
2443 -Wshift-negative-value
2445 -Wshift-sign-overflow
2447 -Wsizeof-array-argument
2448 -Wsource-uses-openmp
2451 -Wstatic-local-in-inline
2455 -Wstrlcpy-strlcat-size
2457 -Wsuggest-attribute=format
2458 -Wsuggest-attribute=noreturn
2459 -Wsuper-class-method-mismatch
2462 -Wtautological-constant-out-of-range-compare
2463 -Wtentative-definition-incomplete-type
2466 -Wtypedef-redefinition
2469 -Wundefined-internal
2470 -Wundefined-reinterpret-cast
2472 -Wunicode-whitespace
2473 -Wunknown-warning-option
2474 -Wunnamed-type-template-args
2475 -Wunneeded-member-function
2477 -Wunsupported-visibility
2478 -Wunused-but-set-parameter
2479 -Wunused-but-set-variable
2480 -Wunused-command-line-argument
2481 -Wunused-const-variable=2
2482 -Wunused-exception-parameter
2483 -Wunused-local-typedefs
2484 -Wunused-member-function
2485 -Wunused-sanitize-argument
2486 -Wunused-volatile-lvalue
2487 -Wuser-defined-literals
2490 -Wvector-conversions
2495 ], [ TOR_TRY_COMPILE_WITH_CFLAGS(warning_flag, [],
2496 [TOR_WARNING_FLAGS="$TOR_WARNING_FLAGS warning_flag" CFLAGS="$CFLAGS warning_flag"], true)
2499 dnl We should re-enable this in some later version. Clang doesn't
2500 dnl mind, but it causes trouble with GCC.
2501 dnl -Wstrict-overflow=2
2503 dnl These seem to require annotations that we don't currently use,
2504 dnl and they give false positives in our pthreads wrappers. (Clang 4)
2506 dnl -Wthread-safety-analysis
2507 dnl -Wthread-safety-attributes
2508 dnl -Wthread-safety-beta
2509 dnl -Wthread-safety-precise
2511 W_FLAGS="$W_FLAGS -W -Wfloat-equal -Wundef -Wpointer-arith"
2512 W_FLAGS="$W_FLAGS -Wstrict-prototypes -Wmissing-prototypes -Wwrite-strings"
2513 W_FLAGS="$W_FLAGS -Wredundant-decls -Wchar-subscripts -Wcomment -Wformat=2"
2514 W_FLAGS="$W_FLAGS -Wwrite-strings"
2515 W_FLAGS="$W_FLAGS -Wnested-externs -Wbad-function-cast -Wswitch-enum"
2516 W_FLAGS="$W_FLAGS -Waggregate-return -Wpacked -Wunused"
2517 W_FLAGS="$W_FLAGS -Wunused-parameter "
2518 # These interfere with building main() { return 0; }, which autoconf
2519 # likes to use as its default program.
2520 W_FLAGS="$W_FLAGS -Wold-style-definition -Wmissing-declarations"
2522 TOR_WARNING_FLAGS="$TOR_WARNING_FLAGS $W_FLAGS"
2523 CFLAGS="$CFLAGS $W_FLAGS"
2525 if test "$tor_cv_cflags__Wnull_dereference" = "yes"; then
2526 AC_DEFINE([HAVE_CFLAG_WNULL_DEREFERENCE], 1, [True if we have -Wnull-dereference])
2528 if test "$tor_cv_cflags__Woverlength_strings" = "yes"; then
2529 AC_DEFINE([HAVE_CFLAG_WOVERLENGTH_STRINGS], 1, [True if we have -Woverlength-strings])
2531 if test "$tor_cv_cflags__warn_unused_const_variable_2" = "yes"; then
2532 AC_DEFINE([HAVE_CFLAG_WUNUSED_CONST_VARIABLE], 1, [True if we have -Wunused-const-variable])
2535 CFLAGS="$CFLAGS_NOWARNINGS"
2537 if test "x$enable_fatal_warnings" = "xyes"; then
2538 # I'd like to use TOR_CHECK_CFLAGS here, but I can't, since the
2539 # default autoconf programs are full of errors.
2540 CFLAGS="$CFLAGS -Werror"
2545 AC_SUBST(TOR_WARNING_FLAGS)
2547 echo "$TOR_WARNING_FLAGS">warning_flags
2549 TOR_TRY_COMPILE_WITH_CFLAGS([@warning_flags], [],
2550 CFLAGS="$CFLAGS @warning_flags",
2551 CFLAGS="$CFLAGS $TOR_WARNING_FLAGS")
2553 if test "$enable_coverage" = "yes" && test "$have_clang" = "no"; then
2556 AC_MSG_WARN([Tried to enable coverage on OSX without using the clang compiler. This might not work! If coverage fails, use CC=clang when configuring with --enable-coverage.])
2560 CPPFLAGS="$CPPFLAGS $TOR_CPPFLAGS_libevent $TOR_CPPFLAGS_openssl $TOR_CPPFLAGS_zlib"
2566 contrib/operator-tools/tor.logrotate
2567 contrib/dist/tor.service
2568 src/config/torrc.sample
2569 src/config/torrc.minimal
2570 src/rust/.cargo/config
2571 scripts/maint/checkOptionDocs.pl
2575 if test "x$asciidoc" = "xtrue" && test "$ASCIIDOC" = "none"; then
2576 regular_mans="doc/tor doc/tor-gencert doc/tor-resolve doc/torify"
2577 for file in $regular_mans ; do
2578 if ! [[ -f "$srcdir/$file.1.in" ]] || ! [[ -f "$srcdir/$file.html.in" ]] ; then
2579 echo "==================================";
2581 echo "Building Tor has failed since manpages cannot be built.";
2583 echo "You need asciidoc installed to be able to build the manpages.";
2584 echo "To build without manpages, use the --disable-asciidoc argument";
2585 echo "when calling configure.";
2587 echo "==================================";
2593 if test "$fragile_hardening" = "yes"; then
2597 Warning! Building Tor with --enable-fragile-hardening (also known as
2598 --enable-expensive-hardening) makes some kinds of attacks harder, but makes
2599 other kinds of attacks easier. A Tor instance build with this option will be
2600 somewhat less vulnerable to remote code execution, arithmetic overflow, or
2601 out-of-bounds read/writes... but at the cost of becoming more vulnerable to
2602 denial of service attacks. For more information, see
2603 https://trac.torproject.org/projects/tor/wiki/doc/TorFragileHardening
2611 # Mini-report on what will be built.
2615 PPRINT_SET_INDENT(1)
2619 AS_ECHO("Tor Version: ${PPRINT_COLOR_BLDBLU}Tor $PACKAGE_VERSION $PPRINT_COLOR_RST")
2622 PPRINT_SUBTITLE([Build Features])
2624 PPRINT_PROP_STRING([Compiler], [$CC])
2625 PPRINT_PROP_STRING([Host OS], [$host_os])
2628 test "x$enable_fatal_warnings" = "xyes" && value=1 || value=0
2629 PPRINT_PROP_BOOL([Warnings are fatal (--enable-fatal-warnings)], $value)
2631 test "x$enable_rust" = "xyes" && value=1 || value=0
2632 PPRINT_PROP_BOOL([Rust support (--enable-rust)], $value)
2634 test "x$enable_cargo_online_mode" = "xyes" && value=1 || value=0
2635 PPRINT_PROP_BOOL([Cargo Online Fetch (--enable-cargo-online-mode)], $value)
2637 test "x$enable_android" = "xyes" && value=1 || value=0
2638 PPRINT_PROP_BOOL([Android support (--enable-android)], $value)
2641 PPRINT_SUBTITLE([Static Build])
2643 test "x$enable_static_tor" = "xyes" && value=1 || value=0
2644 PPRINT_PROP_BOOL([tor (--enable-static-tor)], $value)
2646 if test "x$enable_static_libevent" = "xyes"; then
2647 PPRINT_PROP_STRING([libevent], [$TOR_LIBDIR_libevent])
2649 PPRINT_PROP_BOOL([libevent (--enable-static-libevent)], $value)
2652 if test "x$enable_static_openssl" = "xyes"; then
2653 PPRINT_PROP_STRING([libssl], [$TOR_LIBDIR_openssl])
2655 PPRINT_PROP_BOOL([libssl (--enable-static-openssl)], $value)
2658 if test "x$enable_static_zlib" = "xyes"; then
2659 PPRINT_PROP_STRING([zlib1g], [$TOR_LIBDIR_zlib])
2661 PPRINT_PROP_BOOL([zlib1g (--enable-static-zlib)], $value)
2665 PPRINT_SUBTITLE([Optional Libraries])
2667 test "x$enable_nss" = "xyes" && value=1 || value=0
2668 PPRINT_PROP_BOOL([libnss (--enable-nss)], $value)
2670 test "x$enable_seccomp" != "xno" && value=1 || value=0
2671 PPRINT_PROP_BOOL([libseccomp (--disable-seccomp)], $value)
2673 test "x$enable_libscrypt" != "xno" && value=1 || value=0
2674 PPRINT_PROP_BOOL([libscrypt (--disable-libscrypt)], $value)
2676 test "x$enable_systemd" = "xyes" && value=1 || value=0
2677 PPRINT_PROP_BOOL([Systemd support (--enable-systemd)], $value)
2679 test "x$enable_lzma" = "xyes" && value=1 || value=0
2680 PPRINT_PROP_BOOL([liblzma (--enable-lzma)], $value)
2682 test "x$enable_zstd" = "xyes" && value=1 || value=0
2683 PPRINT_PROP_BOOL([libzstd (--enable-zstd)], $value)
2686 PPRINT_SUBTITLE([Hardening])
2688 test "x$enable_gcc_hardening" != "xno" && value=1 || value=0
2689 PPRINT_PROP_BOOL([Compiler Hardening (--disable-gcc-hardening)], $value)
2691 test "x$enable_linker_hardening" != "xno" && value=1 || value=0
2692 PPRINT_PROP_BOOL([Linker Hardening (--disable-linker-hardening)], $value)
2694 test "x$fragile_hardening" = "xyes" && value=1 || value=0
2695 PPRINT_PROP_BOOL([Fragile Hardening (--enable-fragile-hardening, dev only)], $value)
2698 PPRINT_SUBTITLE([Modules])
2700 m4_foreach_w([mname], MODULES,
2702 AM_COND_IF(m4_join([], [BUILD_MODULE_], m4_toupper([]mname[])), value=1, value=0)
2703 PPRINT_PROP_BOOL([mname (--disable-module-mname)], $value)
2708 PPRINT_SUBTITLE([Documentation])
2710 test "x$enable_asciidoc" != "xno" && value=1 || value=0
2711 PPRINT_PROP_BOOL([AsciiDoc (--disable-asciidoc)], $value)
2713 test "x$enable_manpage" != "xno" && value=1 || value=0
2714 PPRINT_PROP_BOOL([Man Pages (--disable-manpage)], $value)
2716 test "x$enable_html_manual" != "xno" && value=1 || value=0
2717 PPRINT_PROP_BOOL([HTML Manual (--disable-html-manual)], $value)
2720 PPRINT_SUBTITLE([Tests])
2722 test "x$enable_unittests" != "xno" && value=1 || value=0
2723 PPRINT_PROP_BOOL([Unit tests (--disable-unittests)], $value)
2725 test "x$enable_asserts_in_tests" = "xno" && value=1 || value=0
2726 PPRINT_PROP_BOOL([assert()s enabled (--enable-asserts-in-tests, dev only)], $value)
2728 test "x$enable_coverage" = "xyes" && value=1 || value=0
2729 PPRINT_PROP_BOOL([Code Coverage (--enable-coverage)], $value)
2731 test "x$enable_libfuzzer" = "xyes" && value=1 || value=0
2732 PPRINT_PROP_BOOL([libFuzzer support (--enable-libfuzzer)], $value)
2734 test "x$enable_oss_fuzz" = "xyes" && value=1 || value=0
2735 PPRINT_PROP_BOOL([OSS-Fuzz support (--enable-oss-fuzz)], $value)
2738 PPRINT_SUBTITLE([Install Directories])
2740 report_mandir="`eval eval echo $mandir`"
2741 PPRINT_PROP_STRING([Binaries], [$BINDIR])
2742 PPRINT_PROP_STRING([Configuration], [$CONFDIR])
2743 PPRINT_PROP_STRING([Man Pages], [$report_mandir])
2746 AS_ECHO(["Configure Line: ./configure $configure_flags"])