Merge branch 'maint-0.3.5' into maint-0.4.3
[tor.git] / configure.ac
blobeb5a038541e2392321c0cfdd24a870f53f9b1c19
1 dnl Copyright (c) 2001-2004, Roger Dingledine
2 dnl Copyright (c) 2004-2006, Roger Dingledine, Nick Mathewson
3 dnl Copyright (c) 2007-2019, The Tor Project, Inc.
4 dnl See LICENSE for licensing information
6 AC_PREREQ([2.63])
7 AC_INIT([tor],[0.4.3.8])
8 AC_CONFIG_SRCDIR([src/app/main/tor_main.c])
9 AC_CONFIG_MACRO_DIR([m4])
11 configure_flags="$*"
13 # DO NOT EDIT THIS DEFINITION BY HAND UNLESS YOU KNOW WHAT YOU'RE DOING.
15 # The update_versions.py script updates this definition when the
16 # version number changes.  Tor uses it to make sure that it
17 # only shuts down for missing "required protocols" when those protocols
18 # are listed as required by a consensus after this date.
19 AC_DEFINE(APPROX_RELEASE_DATE, ["2021-01-28"], # for 0.4.3.8
20           [Approximate date when this software was released. (Updated when the version changes.)])
22 # "foreign" means we don't follow GNU package layout standards
23 # "1.11" means we require automake version 1.11 or newer
24 # "subdir-objects" means put .o files in the same directory as the .c files
25 AM_INIT_AUTOMAKE([foreign 1.11 subdir-objects -Wall -Werror])
27 m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])])
28 AC_CONFIG_HEADERS([orconfig.h])
30 AC_USE_SYSTEM_EXTENSIONS
31 AC_CANONICAL_HOST
33 PKG_PROG_PKG_CONFIG
34 if test "x$PKG_CONFIG" = "x" ; then
35     pkg_config_user_action="install pkg-config, and check the PKG_CONFIG_PATH environment variable"
36     AC_MSG_NOTICE([Some libraries need pkg-config, including systemd, nss, lzma, zstd, and custom mallocs.])
37     AC_MSG_NOTICE([To use those libraries, $pkg_config_user_action.])
38 else
39     pkg_config_user_action="check the PKG_CONFIG_PATH environment variable"
42 if test "x$PKG_CONFIG_PATH" = "x" && test "x$prefix" != "xNONE" && test "$host" != "$build"; then
43    export PKG_CONFIG_PATH=$prefix/lib/pkgconfig
44    AC_MSG_NOTICE([set PKG_CONFIG_PATH=$PKG_CONFIG_PATH to support cross-compiling])
47 AC_ARG_ENABLE(openbsd-malloc,
48    AS_HELP_STRING(--enable-openbsd-malloc, [use malloc code from OpenBSD.  Linux only. Deprecated: see --with-malloc]))
49 AC_ARG_ENABLE(static-openssl,
50    AS_HELP_STRING(--enable-static-openssl, [link against a static openssl library. Requires --with-openssl-dir]))
51 AC_ARG_ENABLE(static-libevent,
52    AS_HELP_STRING(--enable-static-libevent, [link against a static libevent library. Requires --with-libevent-dir]))
53 AC_ARG_ENABLE(static-zlib,
54    AS_HELP_STRING(--enable-static-zlib, [link against a static zlib library. Requires --with-zlib-dir]))
55 AC_ARG_ENABLE(static-tor,
56    AS_HELP_STRING(--enable-static-tor, [create an entirely static Tor binary. Requires --with-openssl-dir and --with-libevent-dir and --with-zlib-dir]))
57 AC_ARG_ENABLE(unittests,
58    AS_HELP_STRING(--disable-unittests, [don't build unit tests for Tor. Risky!]))
59 AC_ARG_ENABLE(coverage,
60    AS_HELP_STRING(--enable-coverage, [enable coverage support in the unit-test build]))
61 AC_ARG_ENABLE(asserts-in-tests,
62    AS_HELP_STRING(--disable-asserts-in-tests, [disable tor_assert() calls in the unit tests, for branch coverage]))
63 AC_ARG_ENABLE(system-torrc,
64    AS_HELP_STRING(--disable-system-torrc, [don't look for a system-wide torrc file]))
65 AC_ARG_ENABLE(libfuzzer,
66    AS_HELP_STRING(--enable-libfuzzer, [build extra fuzzers based on 'libfuzzer']))
67 AC_ARG_ENABLE(oss-fuzz,
68    AS_HELP_STRING(--enable-oss-fuzz, [build extra fuzzers based on 'oss-fuzz' environment]))
69 AC_ARG_ENABLE(memory-sentinels,
70    AS_HELP_STRING(--disable-memory-sentinels, [disable code that tries to prevent some kinds of memory access bugs. For fuzzing only.]))
71 AC_ARG_ENABLE(rust,
72    AS_HELP_STRING(--enable-rust, [enable rust integration]))
73 AC_ARG_ENABLE(cargo-online-mode,
74    AS_HELP_STRING(--enable-cargo-online-mode, [Allow cargo to make network requests to fetch crates. For builds with rust only.]))
75 AC_ARG_ENABLE(restart-debugging,
76    AS_HELP_STRING(--enable-restart-debugging, [Build Tor with support for debugging in-process restart. Developers only.]))
77 AC_ARG_ENABLE(zstd-advanced-apis,
78    AS_HELP_STRING(--disable-zstd-advanced-apis, [Build without support for zstd's "static-only" APIs.]))
79 AC_ARG_ENABLE(nss,
80    AS_HELP_STRING(--enable-nss, [Use Mozilla's NSS TLS library. (EXPERIMENTAL)]))
81 AC_ARG_ENABLE(pic,
82    AS_HELP_STRING(--enable-pic, [Build Tor's binaries as position-independent code, suitable to link as a library.]))
84 AC_ARG_ENABLE(missing-doc-warnings,
85    AS_HELP_STRING(--enable-missing-doc-warnings, [Tell doxygen to warn about missing documentation. Makes doxygen warnings nonfatal.]))
87 if test "$enable_missing_doc_warnings" = "yes"; then
88    DOXYGEN_FATAL_WARNINGS=NO
89    DOXYGEN_WARN_ON_MISSING=YES
90 elif test "$enable_fatal_warnings" = "yes"; then
91    # Fatal warnings from doxygen are nice, but not if we're warning about
92    # missing documentation.
93    DOXYGEN_FATAL_WARNINGS=YES
94    DOXYGEN_WARN_ON_MISSING=NO
95 else
96    DOXYGEN_FATAL_WARNINGS=NO
97    DOXYGEN_WARN_ON_MISSING=NO
99 AC_SUBST(DOXYGEN_FATAL_WARNINGS)
100 AC_SUBST(DOXYGEN_WARN_ON_MISSING)
102 if test "x$enable_coverage" != "xyes" -a "x$enable_asserts_in_tests" = "xno" ; then
103     AC_MSG_ERROR([Can't disable assertions outside of coverage build])
106 AM_CONDITIONAL(UNITTESTS_ENABLED, test "x$enable_unittests" != "xno")
107 AM_CONDITIONAL(COVERAGE_ENABLED, test "x$enable_coverage" = "xyes")
108 AM_CONDITIONAL(DISABLE_ASSERTS_IN_UNIT_TESTS, test "x$enable_asserts_in_tests" = "xno")
109 AM_CONDITIONAL(LIBFUZZER_ENABLED, test "x$enable_libfuzzer" = "xyes")
110 AM_CONDITIONAL(OSS_FUZZ_ENABLED, test "x$enable_oss_fuzz" = "xyes")
111 AM_CONDITIONAL(USE_RUST, test "x$enable_rust" = "xyes")
112 AM_CONDITIONAL(USE_NSS, test "x$enable_nss" = "xyes")
113 AM_CONDITIONAL(USE_OPENSSL, test "x$enable_nss" != "xyes")
115 if test "x$enable_nss" = "xyes"; then
116   AC_DEFINE(ENABLE_NSS, 1,
117             [Defined if we're building with NSS.])
118 else
119   AC_DEFINE(ENABLE_OPENSSL, 1,
120             [Defined if we're building with OpenSSL or LibreSSL])
123 if test "$enable_static_tor" = "yes"; then
124   enable_static_libevent="yes";
125   enable_static_openssl="yes";
126   enable_static_zlib="yes";
127   CFLAGS="$CFLAGS -static"
130 if test "$enable_system_torrc" = "no"; then
131   AC_DEFINE(DISABLE_SYSTEM_TORRC, 1,
132             [Defined if we're not going to look for a torrc in SYSCONF])
135 if test "$enable_memory_sentinels" = "no"; then
136   AC_DEFINE(DISABLE_MEMORY_SENTINELS, 1,
137            [Defined if we're turning off memory safety code to look for bugs])
140 AC_ARG_ENABLE(manpage,
141               AS_HELP_STRING(--disable-manpage, [Disable manpage generation.]))
143 AC_ARG_ENABLE(html-manual,
144               AS_HELP_STRING(--disable-html-manual, [Disable HTML documentation.]))
146 AC_ARG_ENABLE(asciidoc,
147      AS_HELP_STRING(--disable-asciidoc, [don't use asciidoc (disables building of manpages)]),
148      [case "${enableval}" in
149         "yes") asciidoc=true ;;
150         "no")  asciidoc=false ;;
151         *) AC_MSG_ERROR(bad value for --disable-asciidoc) ;;
152       esac], [asciidoc=true])
154 # systemd notify support
155 AC_ARG_ENABLE(systemd,
156       AS_HELP_STRING(--enable-systemd, [enable systemd notification support]),
157       [case "${enableval}" in
158         "yes") systemd=true ;;
159         "no")  systemd=false ;;
160         * ) AC_MSG_ERROR(bad value for --enable-systemd) ;;
161       esac], [systemd=auto])
163 if test "$enable_restart_debugging" = "yes"; then
164   AC_DEFINE(ENABLE_RESTART_DEBUGGING, 1,
165             [Defined if we're building with support for in-process restart debugging.])
168 if test "$enable_zstd_advanced_apis" != "no"; then
169    AC_DEFINE(ENABLE_ZSTD_ADVANCED_APIS, 1,
170              [Defined if we're going to try to use zstd's "static-only" APIs.])
173 # systemd support
174 if test "x$enable_systemd" = "xno"; then
175     have_systemd=no;
176 else
177     PKG_CHECK_MODULES(SYSTEMD,
178         [libsystemd-daemon],
179         have_systemd=yes,
180         have_systemd=no)
181     if test "x$have_systemd" = "xno"; then
182         AC_MSG_NOTICE([Okay, checking for systemd a different way...])
183         PKG_CHECK_MODULES(SYSTEMD,
184             [libsystemd],
185             have_systemd=yes,
186             have_systemd=no)
187     fi
190 if test "x$have_systemd" = "xyes"; then
191     AC_DEFINE(HAVE_SYSTEMD,1,[Have systemd])
192     TOR_SYSTEMD_CFLAGS="${SYSTEMD_CFLAGS}"
193     TOR_SYSTEMD_LIBS="${SYSTEMD_LIBS}"
194     PKG_CHECK_MODULES(LIBSYSTEMD209, [libsystemd >= 209],
195          [AC_DEFINE(HAVE_SYSTEMD_209,1,[Have systemd v209 or greater])], [])
197 AC_SUBST(TOR_SYSTEMD_CFLAGS)
198 AC_SUBST(TOR_SYSTEMD_LIBS)
200 if test "x$enable_systemd" = "xyes" -a "x$have_systemd" != "xyes" ; then
201     AC_MSG_ERROR([Explicitly requested systemd support, but systemd not found, $pkg_config_user_action, or set SYSTEMD_CFLAGS and SYSTEMD_LIBS.])
204 case "$host" in
205    *-*-solaris* )
206      AC_DEFINE(_REENTRANT, 1, [Define on some platforms to activate x_r() functions in time.h])
207      ;;
208 esac
210 AC_ARG_ENABLE(gcc-warnings,
211      AS_HELP_STRING(--enable-gcc-warnings, [deprecated alias for enable-fatal-warnings]))
212 AC_ARG_ENABLE(fatal-warnings,
213      AS_HELP_STRING(--enable-fatal-warnings, [tell the compiler to treat all warnings as errors.]))
214 AC_ARG_ENABLE(gcc-warnings-advisory,
215      AS_HELP_STRING(--disable-gcc-warnings-advisory, [disable the regular verbose warnings]))
217 dnl Others suggest '/gs /safeseh /nxcompat /dynamicbase' for non-gcc on Windows
218 AC_ARG_ENABLE(gcc-hardening,
219     AS_HELP_STRING(--disable-gcc-hardening, [disable compiler security checks]))
221 dnl Deprecated --enable-expensive-hardening but keep it for now for backward compat.
222 AC_ARG_ENABLE(expensive-hardening,
223     AS_HELP_STRING(--enable-expensive-hardening, [enable more fragile and expensive compiler hardening; makes Tor slower]))
224 AC_ARG_ENABLE(fragile-hardening,
225     AS_HELP_STRING(--enable-fragile-hardening, [enable more fragile and expensive compiler hardening; makes Tor slower]))
226 if test "x$enable_expensive_hardening" = "xyes" || test "x$enable_fragile_hardening" = "xyes"; then
227   fragile_hardening="yes"
228   AC_DEFINE(DEBUG_SMARTLIST, 1, [Enable smartlist debugging])
231 dnl Linker hardening options
232 dnl Currently these options are ELF specific - you can't use this with MacOSX
233 AC_ARG_ENABLE(linker-hardening,
234     AS_HELP_STRING(--disable-linker-hardening, [disable linker security fixups]))
236 AC_ARG_ENABLE(local-appdata,
237    AS_HELP_STRING(--enable-local-appdata, [default to host local application data paths on Windows]))
238 if test "$enable_local_appdata" = "yes"; then
239   AC_DEFINE(ENABLE_LOCAL_APPDATA, 1,
240             [Defined if we default to host local appdata paths on Windows])
243 AC_ARG_ENABLE(tool-name-check,
244      AS_HELP_STRING(--disable-tool-name-check, [check for sanely named toolchain when cross-compiling]))
246 AC_ARG_ENABLE(seccomp,
247      AS_HELP_STRING(--disable-seccomp, [do not attempt to use libseccomp]))
249 AC_ARG_ENABLE(libscrypt,
250      AS_HELP_STRING(--disable-libscrypt, [do not attempt to use libscrypt]))
252 dnl Enable event tracing which are transformed to debug log statement.
253 AC_ARG_ENABLE(event-tracing-debug,
254      AS_HELP_STRING(--enable-event-tracing-debug, [build with event tracing to debug log]))
255 AM_CONDITIONAL([USE_EVENT_TRACING_DEBUG], [test "x$enable_event_tracing_debug" = "xyes"])
257 if test x$enable_event_tracing_debug = xyes; then
258   AC_DEFINE([USE_EVENT_TRACING_DEBUG], [1], [Tracing framework to log debug])
259   AC_DEFINE([TOR_EVENT_TRACING_ENABLED], [1], [Compile the event tracing instrumentation])
262 dnl Enable Android only features.
263 AC_ARG_ENABLE(android,
264      AS_HELP_STRING(--enable-android, [build with Android features enabled]))
265 AM_CONDITIONAL([USE_ANDROID], [test "x$enable_android" = "xyes"])
267 if test "x$enable_android" = "xyes"; then
268   AC_DEFINE([USE_ANDROID], [1], [Compile with Android specific features enabled])
270   dnl Check if the Android log library is available.
271   AC_CHECK_HEADERS([android/log.h])
272   AC_SEARCH_LIBS(__android_log_write, [log])
276 dnl ---
277 dnl Tor modules options. These options are namespaced with --disable-module-XXX
278 dnl ---
280 dnl All our modules.
281 m4_define(MODULES, relay dirauth dircache)
283 dnl Relay module.
284 AC_ARG_ENABLE([module-relay],
285               AS_HELP_STRING([--disable-module-relay],
286                              [Build tor without the Relay modules: tor can not run as a relay, bridge, or authority. Implies --disable-module-dirauth]))
287 AM_CONDITIONAL(BUILD_MODULE_RELAY, [test "x$enable_module_relay" != "xno"])
288 AM_COND_IF(BUILD_MODULE_RELAY,
289            AC_DEFINE([HAVE_MODULE_RELAY], [1],
290                      [Compile with Relay feature support]))
292 dnl Dircache module.  (This cannot be enabled or disabled independently of
293 dnl the relay module.  It is not listed by --list-modules for this reason.)
294 AM_CONDITIONAL(BUILD_MODULE_DIRCACHE,
295                [test "x$enable_module_relay" != "xno"])
296 AM_COND_IF(BUILD_MODULE_DIRCACHE,
297            AC_DEFINE([HAVE_MODULE_DIRCACHE], [1],
298                      [Compile with directory cache support]))
300 dnl Directory Authority module.
301 AC_ARG_ENABLE([module-dirauth],
302               AS_HELP_STRING([--disable-module-dirauth],
303                              [Build tor without the Directory Authority module: tor can not run as a directory authority or bridge authority]))
304 AM_CONDITIONAL(BUILD_MODULE_DIRAUTH,[test "x$enable_module_dirauth" != "xno" && test "x$enable_module_relay" != "xno"])
305 AM_COND_IF(BUILD_MODULE_DIRAUTH,
306            AC_DEFINE([HAVE_MODULE_DIRAUTH], [1],
307                      [Compile with Directory Authority feature support]))
309 dnl Helper variables.
310 TOR_MODULES_ALL_ENABLED=
311 AC_DEFUN([ADD_MODULE], [
312     MODULE=m4_toupper($1)
313     TOR_MODULES_ALL_ENABLED="${TOR_MODULES_ALL_ENABLED} -DHAVE_MODULE_${MODULE}=1"
315 m4_foreach_w([module], MODULES, [ADD_MODULE([module])])
316 AC_SUBST(TOR_MODULES_ALL_ENABLED)
318 dnl check for the correct "ar" when cross-compiling.
319 dnl   (AM_PROG_AR was new in automake 1.11.2, which we do not yet require,
320 dnl    so kludge up a replacement for the case where it isn't there yet.)
321 m4_ifdef([AM_PROG_AR],
322          [AM_PROG_AR],
323          [AN_MAKEVAR([AR], [AC_PROG_AR])
324           AN_PROGRAM([ar], [AC_PROG_AR])
325           AC_DEFUN([AC_PROG_AR], [AC_CHECK_TOOL([AR], [ar], [:])])
326           AC_PROG_AR])
328 dnl Check whether the above macro has settled for a simply named tool even
329 dnl though we're cross compiling. We must do this before running AC_PROG_CC,
330 dnl because that will find any cc on the system, not only the cross-compiler,
331 dnl and then verify that a binary built with this compiler runs on the
332 dnl build system. It will then come to the false conclusion that we're not
333 dnl cross-compiling.
334 if test "x$enable_tool_name_check" != "xno"; then
335     if test "x$ac_tool_warned" = "xyes"; then
336         AC_MSG_ERROR([We are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
337         elif test "x$ac_ct_AR" != "x" -a "x$cross_compiling" = "xmaybe"; then
338                 AC_MSG_ERROR([We think we are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
339         fi
342 AC_PROG_CC
343 AC_PROG_CPP
344 AC_PROG_MAKE_SET
345 AC_PROG_RANLIB
346 AC_PROG_SED
348 AC_ARG_VAR([PERL], [path to Perl binary])
349 AC_CHECK_PROGS([PERL], [perl])
350 AM_CONDITIONAL(USE_PERL, [test "x$ac_cv_prog_PERL" != "x"])
352 dnl check for asciidoc and a2x
353 AC_PATH_PROG([ASCIIDOC], [asciidoc], none)
354 AC_PATH_PROGS([A2X], [a2x a2x.py], none)
356 AM_CONDITIONAL(USE_ASCIIDOC, test "x$asciidoc" = "xtrue")
357 AM_CONDITIONAL(BUILD_MANPAGE, [test "x$enable_manpage" != "xno"])
358 AM_CONDITIONAL(BUILD_HTML_DOCS, [test "x$enable_html_manual" != "xno"])
360 AM_PROG_CC_C_O
361 AC_PROG_CC_C99
363 AC_CACHE_CHECK([for Python 3], [tor_cv_PYTHON],
364    [AC_PATH_PROGS_FEATURE_CHECK([PYTHON], [ \
365         python3 \
366         python3.8 python3.7 python3.6 python3.5 python3.4 \
367         python ],
368    [["$ac_path_PYTHON" -c 'import sys; sys.exit(sys.version_info[0]<3)' && tor_cv_PYTHON="$ac_path_PYTHON" ac_path_PYTHON_found=:]] )])
369 AC_SUBST([PYTHON], [$tor_cv_PYTHON])
371 PYTHON="$tor_cv_PYTHON"
373 if test "x$PYTHON" = "x"; then
374   AC_MSG_WARN([Python 3 unavailable; some tests will not be run.])
377 AM_CONDITIONAL(USEPYTHON, [test "x$PYTHON" != "x"])
379 dnl List all external rust crates we depend on here. Include the version
380 rust_crates=" \
381     digest-0.7.2 \
382     libc-0.2.39 \
384 AC_SUBST(rust_crates)
386 ifdef([AC_C_FLEXIBLE_ARRAY_MEMBER], [
387 AC_C_FLEXIBLE_ARRAY_MEMBER
388 ], [
389  dnl Maybe we've got an old autoconf...
390  AC_CACHE_CHECK([for flexible array members],
391      tor_cv_c_flexarray,
392      [AC_COMPILE_IFELSE(
393        AC_LANG_PROGRAM([
394  struct abc { int a; char b[]; };
395 ], [
396  struct abc *def = malloc(sizeof(struct abc)+sizeof(char));
397  def->b[0] = 33;
399   [tor_cv_c_flexarray=yes],
400   [tor_cv_c_flexarray=no])])
401  if test "$tor_cv_flexarray" = "yes"; then
402    AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
403  else
404    AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [1], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
405  fi
408 AC_CACHE_CHECK([for working C99 mid-block declaration syntax],
409       tor_cv_c_c99_decl,
410       [AC_COMPILE_IFELSE(
411          [AC_LANG_PROGRAM([], [int x; x = 3; int y; y = 4 + x;])],
412          [tor_cv_c_c99_decl=yes],
413          [tor_cv_c_c99_decl=no] )])
414 if test "$tor_cv_c_c99_decl" != "yes"; then
415   AC_MSG_ERROR([Your compiler doesn't support c99 mid-block declarations. This is required as of Tor 0.2.6.x])
418 AC_CACHE_CHECK([for working C99 designated initializers],
419       tor_cv_c_c99_designated_init,
420       [AC_COMPILE_IFELSE(
421          [AC_LANG_PROGRAM([struct s { int a; int b; };],
422                [[ struct s ss = { .b = 5, .a = 6 }; ]])],
423          [tor_cv_c_c99_designated_init=yes],
424          [tor_cv_c_c99_designated_init=no] )])
426 if test "$tor_cv_c_c99_designated_init" != "yes"; then
427   AC_MSG_ERROR([Your compiler doesn't support c99 designated initializers. This is required as of Tor 0.2.6.x])
430 saved_CFLAGS="$CFLAGS"
431 CFLAGS="$CFLAGS -Werror"
432 AC_CACHE_CHECK([for __attribute__((fallthrough))],
433       tor_cv_c_attr_fallthrough,
434       [AC_COMPILE_IFELSE(
435          [AC_LANG_PROGRAM([extern int x; void fn(void) ;],
436                [[ switch (x) { case 1: fn(); __attribute__((fallthrough));
437                                case 2: fn(); break; } ]])],
438          [tor_cv_c_attr_fallthrough=yes],
439          [tor_cv_c_attr_fallthrough=no] )])
440 CFLAGS="$saved_CFLAGS"
442 if test "$tor_cv_c_attr_fallthrough" = "yes"; then
443   AC_DEFINE(HAVE_ATTR_FALLTHROUGH, [1], [defined if we have the fallthrough attribute.])
446 TORUSER=_tor
447 AC_ARG_WITH(tor-user,
448         AS_HELP_STRING(--with-tor-user=NAME, [specify username for tor daemon]),
449         [
450            TORUSER=$withval
451         ]
453 AC_SUBST(TORUSER)
455 TORGROUP=_tor
456 AC_ARG_WITH(tor-group,
457         AS_HELP_STRING(--with-tor-group=NAME, [specify group name for tor daemon]),
458         [
459            TORGROUP=$withval
460         ]
462 AC_SUBST(TORGROUP)
465 dnl If _WIN32 is defined and non-zero, we are building for win32
466 AC_MSG_CHECKING([for win32])
467 AC_RUN_IFELSE([AC_LANG_SOURCE([
468 int main(int c, char **v) {
469 #ifdef _WIN32
470 #if _WIN32
471   return 0;
472 #else
473   return 1;
474 #endif
475 #else
476   return 2;
477 #endif
478 }])],
479 bwin32=true; AC_MSG_RESULT([yes]),
480 bwin32=false; AC_MSG_RESULT([no]),
481 bwin32=cross; AC_MSG_RESULT([cross])
484 if test "$bwin32" = "cross"; then
485 AC_MSG_CHECKING([for win32 (cross)])
486 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
487 #ifdef _WIN32
488 int main(int c, char **v) {return 0;}
489 #else
490 #error
491 int main(int c, char **v) {return x(y);}
492 #endif
493 ])],
494 bwin32=true; AC_MSG_RESULT([yes]),
495 bwin32=false; AC_MSG_RESULT([no]))
498 AH_BOTTOM([
499 #ifdef _WIN32
500 /* Defined to access windows functions and definitions for >=WinXP */
501 # ifndef WINVER
502 #  define WINVER 0x0501
503 # endif
505 /* Defined to access _other_ windows functions and definitions for >=WinXP */
506 # ifndef _WIN32_WINNT
507 #  define _WIN32_WINNT 0x0501
508 # endif
510 /* Defined to avoid including some windows headers as part of Windows.h */
511 # ifndef WIN32_LEAN_AND_MEAN
512 #  define WIN32_LEAN_AND_MEAN 1
513 # endif
514 #endif
517 AM_CONDITIONAL(WIN32, test "x$bwin32" = "xtrue")
518 AM_CONDITIONAL(BUILD_NT_SERVICES, test "x$bwin32" = "xtrue")
519 AM_CONDITIONAL(BUILD_LIBTORRUNNER, test "x$bwin32" != "xtrue")
521 dnl Enable C99 when compiling with MIPSpro
522 AC_MSG_CHECKING([for MIPSpro compiler])
523 AC_COMPILE_IFELSE([AC_LANG_PROGRAM(, [
524 #if (defined(__sgi) && defined(_COMPILER_VERSION))
525 #error
526   return x(y);
527 #endif
528 ])],
529 bmipspro=false; AC_MSG_RESULT(no),
530 bmipspro=true; AC_MSG_RESULT(yes))
532 if test "$bmipspro" = "true"; then
533   CFLAGS="$CFLAGS -c99"
536 AC_C_BIGENDIAN
538 AC_ARG_VAR([TOR_RUST_TARGET], [Rust target, must be specified when cross-compiling (HOST != BUILD). example: i686-pc-windows-gnu])
540 if test "x$enable_rust" = "xyes"; then
541   AC_ARG_VAR([RUSTC], [path to the rustc binary])
542   AC_CHECK_PROG([RUSTC], [rustc], [rustc],[no])
543   if test "x$RUSTC" = "xno"; then
544     AC_MSG_ERROR([rustc unavailable but rust integration requested.])
545   fi
547   AC_ARG_VAR([CARGO], [path to the cargo binary])
548   AC_CHECK_PROG([CARGO], [cargo], [cargo],[no])
549   if test "x$CARGO" = "xno"; then
550     AC_MSG_ERROR([cargo unavailable but rust integration requested.])
551   fi
553   AC_DEFINE([HAVE_RUST], 1, [have Rust])
554   if test "x$enable_fatal_warnings" = "xyes"; then
555     RUST_WARN=
556   else
557     RUST_WARN=#
558   fi
559   if test "x$enable_cargo_online_mode" = "xyes"; then
560     CARGO_ONLINE=
561     RUST_DL=#
562   else
563     CARGO_ONLINE=--frozen
564     RUST_DL=
566     dnl When we're not allowed to touch the network, we need crate dependencies
567     dnl locally available.
568     AC_MSG_CHECKING([rust crate dependencies])
569     AC_ARG_VAR([TOR_RUST_DEPENDENCIES], [path to directory with local crate mirror])
570     if test "x$TOR_RUST_DEPENDENCIES" = "x"; then
571       TOR_RUST_DEPENDENCIES="${srcdir}/src/ext/rust/crates"
572     fi
573     dnl Check whether the path exists before we try to cd into it.
574     if test ! -d "$TOR_RUST_DEPENDENCIES"; then
575       AC_MSG_ERROR([Rust dependency directory $TOR_RUST_DEPENDENCIES does not exist. Specify a dependency directory using the TOR_RUST_DEPENDENCIES variable or allow cargo to fetch crates using --enable-cargo-online-mode.])
576       ERRORED=1
577     fi
578     dnl Make the path absolute, since we'll be using it from within a
579     dnl subdirectory.
580     TOR_RUST_DEPENDENCIES=$(cd "$TOR_RUST_DEPENDENCIES" ; pwd)
582     for dep in $rust_crates; do
583       if test ! -d "$TOR_RUST_DEPENDENCIES"/"$dep"; then
584         AC_MSG_ERROR([Failure to find rust dependency $TOR_RUST_DEPENDENCIES/$dep. Specify a dependency directory using the TOR_RUST_DEPENDENCIES variable or allow cargo to fetch crates using --enable-cargo-online-mode.])
585         ERRORED=1
586       fi
587     done
588     if test "x$ERRORED" = "x"; then
589       AC_MSG_RESULT([yes])
590     fi
591   fi
593   dnl For now both MSVC and MinGW rust libraries will output static libs with
594   dnl the MSVC naming convention.
595   if test "$bwin32" = "true"; then
596     tor_rust_static_name=tor_rust.lib
597   else
598     tor_rust_static_name=libtor_rust.a
599   fi
601   AC_CANONICAL_BUILD
603   if test -n "$TOR_RUST_TARGET"; then
604     if test "$host" = "$build"; then
605       AC_MSG_ERROR([HOST = BUILD is invalid if TOR_RUST_TARGET is specified, see configure --help for more information.])
606     fi
607     RUST_TARGET_PROP="target = '$TOR_RUST_TARGET'"
608     TOR_RUST_LIB_PATH="src/rust/target/$TOR_RUST_TARGET/release/$tor_rust_static_name"
609   else
610     if test "$host" != "$build"; then
611       AC_MSG_ERROR([TOR_RUST_TARGET must be specified when cross-compiling with Rust enabled.])
612     fi
613     RUST_TARGET_PROP=
614     TOR_RUST_LIB_PATH="src/rust/target/release/$tor_rust_static_name"
615   fi
617   AC_SUBST(RUST_TARGET_PROP)
618   AC_SUBST(TOR_RUST_LIB_PATH)
619   AC_SUBST(CARGO_ONLINE)
620   AC_SUBST(RUST_WARN)
621   AC_SUBST(RUST_DL)
623   dnl Let's check the rustc version, too
624   AC_MSG_CHECKING([rust version])
625   RUSTC_VERSION=`$RUSTC --version`
626   RUSTC_VERSION_MAJOR=`$RUSTC --version | cut -d ' ' -f 2 | cut -d '.' -f 1`
627   RUSTC_VERSION_MINOR=`$RUSTC --version | cut -d ' ' -f 2 | cut -d '.' -f 2`
628   if test "x$RUSTC_VERSION_MAJOR" = "x" -o "x$RUSTC_VERSION_MINOR" = "x"; then
629     AC_MSG_ERROR([rustc version couldn't be identified])
630   fi
631   if test "$RUSTC_VERSION_MAJOR" -lt 2 -a "$RUSTC_VERSION_MINOR" -lt 31; then
632     AC_MSG_ERROR([rustc must be at least version 1.31.0])
633   fi
634   AC_MSG_RESULT([$RUSTC_VERSION])
637 AC_SEARCH_LIBS(socket, [socket network])
638 AC_SEARCH_LIBS(gethostbyname, [nsl])
639 AC_SEARCH_LIBS(dlopen, [dl])
640 AC_SEARCH_LIBS(inet_aton, [resolv])
641 AC_SEARCH_LIBS(backtrace, [execinfo])
642 saved_LIBS="$LIBS"
643 AC_SEARCH_LIBS([clock_gettime], [rt])
644 if test "$LIBS" != "$saved_LIBS"; then
645    # Looks like we need -lrt for clock_gettime().
646    have_rt=yes
649 if test "$bwin32" = "false"; then
650   AC_SEARCH_LIBS(pthread_create, [pthread])
651   AC_SEARCH_LIBS(pthread_detach, [pthread])
654 AM_CONDITIONAL(THREADS_WIN32, test "$bwin32" = "true")
655 AM_CONDITIONAL(THREADS_PTHREADS, test "$bwin32" = "false")
657 AC_CHECK_FUNCS(
658         _NSGetEnviron \
659         RtlSecureZeroMemory \
660         SecureZeroMemory \
661         accept4 \
662         backtrace \
663         backtrace_symbols_fd \
664         eventfd \
665         explicit_bzero \
666         timingsafe_memcmp \
667         flock \
668         fsync \
669         ftime \
670         get_current_dir_name \
671         getaddrinfo \
672         getdelim \
673         getifaddrs \
674         getline \
675         getpass \
676         getrlimit \
677         gettimeofday \
678         gmtime_r \
679         gnu_get_libc_version \
680         htonll \
681         inet_aton \
682         ioctl \
683         issetugid \
684         llround \
685         localtime_r \
686         lround \
687         madvise \
688         memmem \
689         memset_s \
690         minherit \
691         mmap \
692         pipe \
693         pipe2 \
694         prctl \
695         readpassphrase \
696         rint \
697         sigaction \
698         socketpair \
699         statvfs \
700         strncasecmp \
701         strcasecmp \
702         strlcat \
703         strlcpy \
704         strnlen \
705         strptime \
706         strtok_r \
707         strtoull \
708         sysconf \
709         sysctl \
710         truncate \
711         uname \
712         usleep \
713         vasprintf \
714         _vscprintf
717 # Apple messed up when they added some functions: they
718 # forgot to decorate them with appropriate AVAILABLE_MAC_OS_VERSION
719 # checks.
721 # We should only probe for these functions if we are sure that we
722 # are not targeting OS X 10.9 or earlier.
723 AC_MSG_CHECKING([for a pre-Yosemite OS X build target])
724 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
725 #ifdef __APPLE__
726 #  include <AvailabilityMacros.h>
727 #  ifndef MAC_OS_X_VERSION_10_10
728 #    define MAC_OS_X_VERSION_10_10 101000
729 #  endif
730 #  if defined(MAC_OS_X_VERSION_MIN_REQUIRED)
731 #    if MAC_OS_X_VERSION_MIN_REQUIRED < MAC_OS_X_VERSION_10_10
732 #      error "Running on Mac OS X 10.9 or earlier"
733 #    endif
734 #  endif
735 #endif
736 ]], [[]])],
737    [on_macos_pre_10_10=no ; AC_MSG_RESULT([no])],
738    [on_macos_pre_10_10=yes; AC_MSG_RESULT([yes])])
740 if test "$on_macos_pre_10_10" = "no"; then
741   AC_CHECK_FUNCS(
742         mach_approximate_time \
743   )
746 # We should only probe for these functions if we are sure that we
747 # are not targeting OSX 10.11 or earlier.
748 AC_MSG_CHECKING([for a pre-Sierra OSX build target])
749 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
750 #ifdef __APPLE__
751 #  include <AvailabilityMacros.h>
752 #  ifndef MAC_OS_X_VERSION_10_12
753 #    define MAC_OS_X_VERSION_10_12 101200
754 #  endif
755 #  if defined(MAC_OS_X_VERSION_MIN_REQUIRED)
756 #    if MAC_OS_X_VERSION_MIN_REQUIRED < MAC_OS_X_VERSION_10_12
757 #      error "Running on Mac OSX 10.11 or earlier"
758 #    endif
759 #  endif
760 #endif
761 ]], [[]])],
762    [on_macos_pre_10_12=no ; AC_MSG_RESULT([no])],
763    [on_macos_pre_10_12=yes; AC_MSG_RESULT([yes])])
765 if test "$on_macos_pre_10_12" = "no"; then
766   AC_CHECK_FUNCS(
767         clock_gettime \
768         getentropy \
769   )
772 if test "$bwin32" != "true"; then
773   AC_CHECK_HEADERS(pthread.h)
774   AC_CHECK_FUNCS(pthread_create)
775   AC_CHECK_FUNCS(pthread_condattr_setclock)
778 if test "$bwin32" = "true"; then
779   AC_CHECK_DECLS([SecureZeroMemory, _getwch], , , [
780 #include <windows.h>
781 #include <conio.h>
782 #include <wchar.h>
783                  ])
786 AM_CONDITIONAL(BUILD_READPASSPHRASE_C,
787   test "x$ac_cv_func_readpassphrase" = "xno" && test "$bwin32" = "false")
789 AC_MSG_CHECKING([whether free(NULL) works])
790 AC_RUN_IFELSE([AC_LANG_PROGRAM([
791   #include <stdlib.h>
792 ], [
793 char *p = NULL;
794 free(p);
795 ])],
796 [free_null_ok=true; AC_MSG_RESULT(yes)],
797 [free_null_ok=false; AC_MSG_RESULT(no)],
798 [free_null_ok=cross; AC_MSG_RESULT(cross)])
800 if test "$free_null_ok" = "false"; then
801    AC_MSG_ERROR([Your libc implementation doesn't allow free(NULL), as required by C99.])
804 dnl ------------------------------------------------------
805 dnl Where do you live, libevent?  And how do we call you?
807 if test "$bwin32" = "true"; then
808   TOR_LIB_WS32=-lws2_32
809   TOR_LIB_IPHLPAPI=-liphlpapi
810   # Some of the cargo-cults recommend -lwsock32 as well, but I don't
811   # think it's actually necessary.
812   TOR_LIB_GDI=-lgdi32
813   TOR_LIB_USERENV=-luserenv
814 else
815   TOR_LIB_WS32=
816   TOR_LIB_GDI=
817   TOR_LIB_USERENV=
819 AC_SUBST(TOR_LIB_WS32)
820 AC_SUBST(TOR_LIB_GDI)
821 AC_SUBST(TOR_LIB_IPHLPAPI)
822 AC_SUBST(TOR_LIB_USERENV)
824 tor_libevent_pkg_redhat="libevent"
825 tor_libevent_pkg_debian="libevent-dev"
826 tor_libevent_devpkg_redhat="libevent-devel"
827 tor_libevent_devpkg_debian="libevent-dev"
829 dnl On Gnu/Linux or any place we require it, we'll add librt to the Libevent
830 dnl linking for static builds.
831 STATIC_LIBEVENT_FLAGS=""
832 if test "$enable_static_libevent" = "yes"; then
833     if test "$have_rt" = "yes"; then
834       STATIC_LIBEVENT_FLAGS=" -lrt "
835     fi
838 TOR_SEARCH_LIBRARY(libevent, $trylibeventdir, [-levent $STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32], [
839 #ifdef _WIN32
840 #include <winsock2.h>
841 #endif
842 #include <sys/time.h>
843 #include <sys/types.h>
844 #include <event2/event.h>], [
845 #ifdef _WIN32
846 #include <winsock2.h>
847 #endif
848 struct event_base;
849 struct event_base *event_base_new(void);
850 void event_base_free(struct event_base *);],
851     [
852 #ifdef _WIN32
853 {WSADATA d; WSAStartup(0x101,&d); }
854 #endif
855 event_base_free(event_base_new());
856 ], [--with-libevent-dir], [/opt/libevent])
858 dnl Determine the incantation needed to link libevent.
859 save_LIBS="$LIBS"
860 save_LDFLAGS="$LDFLAGS"
861 save_CPPFLAGS="$CPPFLAGS"
863 LIBS="$STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32 $save_LIBS"
864 LDFLAGS="$TOR_LDFLAGS_libevent $LDFLAGS"
865 CPPFLAGS="$TOR_CPPFLAGS_libevent $CPPFLAGS"
867 AC_CHECK_HEADERS(event2/event.h event2/dns.h event2/bufferevent_ssl.h)
869 if test "$enable_static_libevent" = "yes"; then
870    if test "$tor_cv_library_libevent_dir" = "(system)"; then
871      AC_MSG_ERROR("You must specify an explicit --with-libevent-dir=x option when using --enable-static-libevent")
872    else
873      TOR_LIBEVENT_LIBS="$TOR_LIBDIR_libevent/libevent.a $STATIC_LIBEVENT_FLAGS"
874    fi
875 else
876      if test "x$ac_cv_header_event2_event_h" = "xyes"; then
877        AC_SEARCH_LIBS(event_new, [event event_core], , AC_MSG_ERROR("libevent2 is installed but linking it failed while searching for event_new"))
878        AC_SEARCH_LIBS(evdns_base_new, [event event_extra], , AC_MSG_ERROR("libevent2 is installed but linking it failed while searching for evdns_base_new"))
880        if test "$ac_cv_search_event_new" != "none required"; then
881          TOR_LIBEVENT_LIBS="$ac_cv_search_event_new"
882        fi
883        if test "$ac_cv_search_evdns_base_new" != "none required"; then
884          TOR_LIBEVENT_LIBS="$ac_cv_search_evdns_base_new $TOR_LIBEVENT_LIBS"
885        fi
886      else
887        AC_MSG_ERROR("libevent2 is required but the headers could not be found")
888      fi
891 dnl Now check for particular libevent functions.
892 AC_CHECK_FUNCS([evutil_secure_rng_set_urandom_device_file \
893                 evutil_secure_rng_add_bytes \
894                 evdns_base_get_nameserver_addr \
898 LIBS="$save_LIBS"
899 LDFLAGS="$save_LDFLAGS"
900 CPPFLAGS="$save_CPPFLAGS"
902 dnl Check that libevent is at least at version 2.0.10, the first stable
903 dnl release of its series
904 CPPFLAGS="$CPPFLAGS $TOR_CPPFLAGS_libevent"
905 AC_MSG_CHECKING([whether Libevent is new enough])
906 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
907 #include <event2/event.h>
908 #if !defined(LIBEVENT_VERSION_NUMBER) || LIBEVENT_VERSION_NUMBER < 0x02000a00
909 #error
910 int x = y(zz);
911 #else
912 int x = 1;
913 #endif
914 ])], [ AC_MSG_RESULT([yes]) ],
915    [ AC_MSG_RESULT([no])
916      AC_MSG_ERROR([Libevent is not new enough.  We require 2.0.10-stable or later]) ] )
918 LIBS="$save_LIBS"
919 LDFLAGS="$save_LDFLAGS"
920 CPPFLAGS="$save_CPPFLAGS"
922 AC_SUBST(TOR_LIBEVENT_LIBS)
924 dnl ------------------------------------------------------
925 dnl Where do you live, libm?
927 dnl On some platforms (Haiku/BeOS) the math library is
928 dnl part of libroot. In which case don't link against lm
929 TOR_LIB_MATH=""
930 save_LIBS="$LIBS"
931 AC_SEARCH_LIBS(pow, [m], , AC_MSG_ERROR([Could not find pow in libm or libc.]))
932 if test "$ac_cv_search_pow" != "none required"; then
933     TOR_LIB_MATH="$ac_cv_search_pow"
935 LIBS="$save_LIBS"
936 AC_SUBST(TOR_LIB_MATH)
938 dnl ------------------------------------------------------
939 dnl Hello, NSS.  You're new around here.
940 if test "x$enable_nss" = "xyes"; then
941   PKG_CHECK_MODULES(NSS,
942      [nss],
943      [have_nss=yes],
944      [have_nss=no; AC_MSG_ERROR([You asked for NSS but I can't find it, $pkg_config_user_action, or set NSS_CFLAGS and NSS_LIBS.])])
945   AC_SUBST(NSS_CFLAGS)
946   AC_SUBST(NSS_LIBS)
949 dnl ------------------------------------------------------
950 dnl Where do you live, openssl?  And how do we call you?
952 if test "x$enable_nss" != "xyes"; then
954 tor_openssl_pkg_redhat="openssl"
955 tor_openssl_pkg_debian="libssl-dev"
956 tor_openssl_devpkg_redhat="openssl-devel"
957 tor_openssl_devpkg_debian="libssl-dev"
959 ALT_openssl_WITHVAL=""
960 AC_ARG_WITH(ssl-dir,
961   AS_HELP_STRING(--with-ssl-dir=PATH, [obsolete alias for --with-openssl-dir]),
962   [
963       if test "x$withval" != "xno" && test "x$withval" != "x"; then
964          ALT_openssl_WITHVAL="$withval"
965       fi
966   ])
968 AC_MSG_NOTICE([Now, we'll look for OpenSSL >= 1.0.1])
969 TOR_SEARCH_LIBRARY(openssl, $tryssldir, [-lssl -lcrypto $TOR_LIB_GDI $TOR_LIB_WS32],
970     [#include <openssl/ssl.h>
971      char *getenv(const char *);],
972     [struct ssl_cipher_st;
973      unsigned SSL_CIPHER_get_id(const struct ssl_cipher_st *);
974      char *getenv(const char *);],
975     dnl This funny-looking test program calls getenv, so that the compiler
976     dnl will neither make code that call SSL_CIPHER_get_id(NULL) [producing
977     dnl a crash], nor optimize out the call to SSL_CIPHER_get_id().
978     dnl We look for SSL_cipher_get_id() because it is present in
979     dnl OpenSSL >=1.0.1, because it is not deprecated, and because Tor
980     dnl depends on it.
981     [if (getenv("THIS_SHOULDNT_BE_SET_X201803")) SSL_CIPHER_get_id((void *)0);], [],
982     [/usr/local/opt/openssl /usr/local/openssl /usr/lib/openssl /usr/local/ssl /usr/lib/ssl /usr/local /opt/openssl])
984 dnl XXXX check for OPENSSL_VERSION_NUMBER == SSLeay()
986 if test "$enable_static_openssl" = "yes"; then
987    if test "$tor_cv_library_openssl_dir" = "(system)"; then
988      AC_MSG_ERROR("You must specify an explicit --with-openssl-dir=x option when using --enable-static-openssl")
989    else
990      TOR_OPENSSL_LIBS="$TOR_LIBDIR_openssl/libssl.a $TOR_LIBDIR_openssl/libcrypto.a"
991    fi
992 else
993      TOR_OPENSSL_LIBS="-lssl -lcrypto"
995 AC_SUBST(TOR_OPENSSL_LIBS)
997 dnl Now check for particular openssl functions.
998 save_LIBS="$LIBS"
999 save_LDFLAGS="$LDFLAGS"
1000 save_CPPFLAGS="$CPPFLAGS"
1001 LIBS="$TOR_OPENSSL_LIBS $LIBS"
1002 LDFLAGS="$TOR_LDFLAGS_openssl $LDFLAGS"
1003 CPPFLAGS="$TOR_CPPFLAGS_openssl $CPPFLAGS"
1005 dnl Tor currently uses a number of APIs that are deprecated in OpenSSL 3.0.0
1006 dnl and later.  We want to migrate away from them, but that will be a lot of
1007 dnl work. (See ticket tor#40166.)  For now, we disable the deprecation
1008 dnl warnings.
1010 AC_MSG_CHECKING([for OpenSSL >= 3.0.0])
1011 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1012 #include <openssl/opensslv.h>
1013 #if !defined(LIBRESSL_VERSION_NUMBER) && OPENSSL_VERSION_NUMBER <= 0x30000000L
1014 #error "you_have_version_3"
1015 #endif
1016    ]], [[]])],
1017    [ AC_MSG_RESULT([no]) ],
1018    [ AC_MSG_RESULT([yes]);
1019      AC_DEFINE(OPENSSL_SUPPRESS_DEPRECATED, 1, [disable openssl deprecated-function warnings]) ])
1021 AC_MSG_CHECKING([for OpenSSL < 1.0.1])
1022 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1023 #include <openssl/opensslv.h>
1024 #if !defined(LIBRESSL_VERSION_NUMBER) && OPENSSL_VERSION_NUMBER < 0x1000100fL
1025 #error "too old"
1026 #endif
1027    ]], [[]])],
1028    [ AC_MSG_RESULT([no]) ],
1029    [ AC_MSG_ERROR([OpenSSL is too old. We require 1.0.1 or later. You can specify a path to a newer one with --with-openssl-dir.]) ])
1031 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1032 #include <openssl/opensslv.h>
1033 #include <openssl/evp.h>
1034 #if defined(OPENSSL_NO_EC) || defined(OPENSSL_NO_ECDH) || defined(OPENSSL_NO_ECDSA)
1035 #error "no ECC"
1036 #endif
1037 #if !defined(NID_X9_62_prime256v1) || !defined(NID_secp224r1)
1038 #error "curves unavailable"
1039 #endif
1040    ]], [[]])],
1041    [ : ],
1042    [ AC_MSG_ERROR([OpenSSL is built without full ECC support, including curves P256 and P224. You can specify a path to one with ECC support with --with-openssl-dir.]) ])
1044 AC_CHECK_MEMBERS([struct ssl_method_st.get_cipher_by_char], , ,
1045 [#include <openssl/ssl.h>
1048 dnl OpenSSL functions which we might not have.  In theory, we could just
1049 dnl check the openssl version number, but in practice that gets pretty
1050 dnl confusing with LibreSSL, OpenSSL, and various distributions' patches
1051 dnl to them.
1052 AC_CHECK_FUNCS([ \
1053                 ERR_load_KDF_strings \
1054                 EVP_PBE_scrypt \
1055                 EVP_sha3_256 \
1056                 SSL_CIPHER_find \
1057                 SSL_CTX_set1_groups_list \
1058                 SSL_CTX_set_security_level \
1059                 SSL_SESSION_get_master_key \
1060                 SSL_get_client_ciphers \
1061                 SSL_get_client_random \
1062                 SSL_get_server_random \
1063                 TLS_method \
1064                ])
1066 dnl Check if OpenSSL structures are opaque
1067 AC_CHECK_MEMBERS([SSL.state], , ,
1068 [#include <openssl/ssl.h>
1071 AC_CHECK_SIZEOF(SHA_CTX, , [AC_INCLUDES_DEFAULT()
1072 #include <openssl/sha.h>
1075 fi # enable_nss
1077 dnl We will someday make KECCAK_TINY optional, but for now we still need
1078 dnl it for SHAKE, since OpenSSL's SHAKE can't be squeezed more than
1079 dnl once.  See comment in the definition of crypto_xof_t.
1081 dnl AM_CONDITIONAL(BUILD_KECCAK_TINY,
1082 dnl   test "x$ac_cv_func_EVP_sha3_256" != "xyes")
1084 AM_CONDITIONAL(BUILD_KECCAK_TINY, true)
1086 dnl ======================================================================
1087 dnl Can we use KIST?
1089 dnl Define the set of checks for KIST scheduler support.
1090 AC_DEFUN([CHECK_KIST_SUPPORT],[
1091   dnl KIST needs struct tcp_info and for certain members to exist.
1092   AC_CHECK_MEMBERS(
1093     [struct tcp_info.tcpi_unacked, struct tcp_info.tcpi_snd_mss],
1094     , ,[[#include <netinet/tcp.h>]])
1095   dnl KIST needs SIOCOUTQNSD to exist for an ioctl call.
1096   AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
1097                      #include <linux/sockios.h>
1098                      #ifndef SIOCOUTQNSD
1099                      #error
1100                      #endif
1101                      ])], have_siocoutqnsd=yes, have_siocoutqnsd=no)
1102   if test "x$have_siocoutqnsd" = "xyes"; then
1103     if test "x$ac_cv_member_struct_tcp_info_tcpi_unacked" = "xyes"; then
1104       if test "x$ac_cv_member_struct_tcp_info_tcpi_snd_mss" = "xyes"; then
1105         have_kist_support=yes
1106       fi
1107     fi
1108   fi
1110 dnl Now, trigger the check.
1111 CHECK_KIST_SUPPORT
1112 AS_IF([test "x$have_kist_support" = "xyes"],
1113       [AC_DEFINE(HAVE_KIST_SUPPORT, 1, [Defined if KIST scheduler is supported
1114                                         on this system])],
1115       [AC_MSG_NOTICE([KIST scheduler can't be used. Missing support.])])
1117 LIBS="$save_LIBS"
1118 LDFLAGS="$save_LDFLAGS"
1119 CPPFLAGS="$save_CPPFLAGS"
1121 dnl ------------------------------------------------------
1122 dnl Where do you live, zlib?  And how do we call you?
1124 tor_zlib_pkg_redhat="zlib"
1125 tor_zlib_pkg_debian="zlib1g"
1126 tor_zlib_devpkg_redhat="zlib-devel"
1127 tor_zlib_devpkg_debian="zlib1g-dev"
1129 TOR_SEARCH_LIBRARY(zlib, $tryzlibdir, [-lz],
1130     [#include <zlib.h>],
1131     [const char * zlibVersion(void);],
1132     [zlibVersion();], [--with-zlib-dir],
1133     [/opt/zlib])
1135 if test "$enable_static_zlib" = "yes"; then
1136    if test "$tor_cv_library_zlib_dir" = "(system)"; then
1137      AC_MSG_ERROR("You must specify an explicit --with-zlib-dir=x option when
1138  using --enable-static-zlib")
1139    else
1140      TOR_ZLIB_LIBS="$TOR_LIBDIR_zlib/libz.a"
1141    fi
1142 else
1143      TOR_ZLIB_LIBS="-lz"
1145 AC_SUBST(TOR_ZLIB_LIBS)
1147 dnl ------------------------------------------------------
1148 dnl Where we do we find lzma?
1150 AC_ARG_ENABLE(lzma,
1151       AS_HELP_STRING(--enable-lzma, [enable support for the LZMA compression scheme.]),
1152       [case "${enableval}" in
1153         "yes") ;;
1154         "no")  ;;
1155         * ) AC_MSG_ERROR(bad value for --enable-lzma) ;;
1156       esac], [enable_lzma=auto])
1158 if test "x$enable_lzma" = "xno"; then
1159     have_lzma=no;
1160 else
1161     PKG_CHECK_MODULES([LZMA],
1162                       [liblzma],
1163                       have_lzma=yes,
1164                       have_lzma=no)
1166     if test "x$have_lzma" = "xno" ; then
1167         AC_MSG_WARN([Unable to find liblzma, $pkg_config_user_action, or set LZMA_CFLAGS and LZMA_LIBS.])
1168     fi
1171 if test "x$have_lzma" = "xyes"; then
1172     AC_DEFINE(HAVE_LZMA,1,[Have LZMA])
1173     TOR_LZMA_CFLAGS="${LZMA_CFLAGS}"
1174     TOR_LZMA_LIBS="${LZMA_LIBS}"
1176 AC_SUBST(TOR_LZMA_CFLAGS)
1177 AC_SUBST(TOR_LZMA_LIBS)
1179 dnl ------------------------------------------------------
1180 dnl Where we do we find zstd?
1182 AC_ARG_ENABLE(zstd,
1183       AS_HELP_STRING(--enable-zstd, [enable support for the Zstandard compression scheme.]),
1184       [case "${enableval}" in
1185         "yes") ;;
1186         "no")  ;;
1187         * ) AC_MSG_ERROR(bad value for --enable-zstd) ;;
1188       esac], [enable_zstd=auto])
1190 if test "x$enable_zstd" = "xno"; then
1191     have_zstd=no;
1192 else
1193     PKG_CHECK_MODULES([ZSTD],
1194                       [libzstd >= 1.1],
1195                       have_zstd=yes,
1196                       have_zstd=no)
1198     if test "x$have_zstd" = "xno" ; then
1199         AC_MSG_WARN([Unable to find libzstd, $pkg_config_user_action, or set ZSTD_CFLAGS and ZSTD_LIBS.])
1200     fi
1203 if test "x$have_zstd" = "xyes"; then
1204     AC_DEFINE(HAVE_ZSTD,1,[Have Zstd])
1205     TOR_ZSTD_CFLAGS="${ZSTD_CFLAGS}"
1206     TOR_ZSTD_LIBS="${ZSTD_LIBS}"
1208     dnl now check for zstd functions
1209     save_LIBS="$LIBS"
1210     save_CFLAGS="$CFLAGS"
1211     LIBS="$LIBS $ZSTD_LIBS"
1212     CFLAGS="$CFLAGS $ZSTD_CFLAGS"
1213     AC_CHECK_FUNCS(ZSTD_estimateCStreamSize \
1214                    ZSTD_estimateDCtxSize)
1215     LIBS="$save_LIBS"
1216     CFLAGS="$save_CFLAGS"
1218 AC_SUBST(TOR_ZSTD_CFLAGS)
1219 AC_SUBST(TOR_ZSTD_LIBS)
1221 dnl ----------------------------------------------------------------------
1222 dnl Check if libcap is available for capabilities.
1224 tor_cap_pkg_debian="libcap2"
1225 tor_cap_pkg_redhat="libcap"
1226 tor_cap_devpkg_debian="libcap-dev"
1227 tor_cap_devpkg_redhat="libcap-devel"
1229 AC_CHECK_LIB([cap], [cap_init], [],
1230   AC_MSG_NOTICE([Libcap was not found. Capabilities will not be usable.])
1232 AC_CHECK_FUNCS(cap_set_proc)
1234 dnl ---------------------------------------------------------------------
1235 dnl Now that we know about our major libraries, we can check for compiler
1236 dnl and linker hardening options.  We need to do this with the libraries known,
1237 dnl since sometimes the linker will like an option but not be willing to
1238 dnl use it with a build of a library.
1240 all_ldflags_for_check="$TOR_LDFLAGS_zlib $TOR_LDFLAGS_openssl $TOR_LDFLAGS_libevent"
1241 all_libs_for_check="$TOR_ZLIB_LIBS $TOR_LIB_MATH $TOR_LIBEVENT_LIBS $TOR_OPENSSL_LIBS $TOR_SYSTEMD_LIBS $TOR_LIB_WS32 $TOR_LIB_GDI $TOR_LIB_USERENV $TOR_CAP_LIBS"
1243 CFLAGS_FTRAPV=
1244 CFLAGS_FWRAPV=
1245 CFLAGS_ASAN=
1246 CFLAGS_UBSAN=
1249 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
1250 #if !defined(__clang__)
1251 #error
1252 #endif])], have_clang=yes, have_clang=no)
1254 if test "x$enable_pic" = "xyes"; then
1255     TOR_CHECK_CFLAGS(-fPIC)
1258 if test "x$enable_gcc_hardening" != "xno"; then
1259     CFLAGS="$CFLAGS -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2"
1260     if test "x$have_clang" = "xyes"; then
1261         TOR_CHECK_CFLAGS(-Qunused-arguments)
1262     fi
1263     TOR_CHECK_CFLAGS(-fstack-protector-all, also_link)
1264     AS_VAR_PUSHDEF([can_compile], [tor_cv_cflags_-fstack-protector-all])
1265     AS_VAR_PUSHDEF([can_link], [tor_can_link_-fstack-protector-all])
1266 m4_ifdef([AS_VAR_IF],[
1267     AS_VAR_IF(can_compile, [yes],
1268         AS_VAR_IF(can_link, [yes],
1269                   [],
1270                   AC_MSG_ERROR([We tried to build with stack protection; it looks like your compiler supports it but your libc does not provide it. Are you missing libssp? (You can --disable-gcc-hardening to ignore this error.)]))
1271         )])
1272     AS_VAR_POPDEF([can_link])
1273     AS_VAR_POPDEF([can_compile])
1274     TOR_CHECK_CFLAGS(-Wstack-protector)
1275     TOR_CHECK_CFLAGS(--param ssp-buffer-size=1)
1276     if test "$bwin32" = "false" && test "$enable_libfuzzer" != "yes" && test "$enable_oss_fuzz" != "yes"; then
1277        if test "$enable_pic" != "yes"; then
1278            # If we have already enabled -fPIC, then we don't also need to
1279            # compile with -fPIE...
1280            TOR_CHECK_CFLAGS(-fPIE)
1281        fi
1282        # ... but we want to link our executables with -pie in any case, since
1283        # they're executables, not a library.
1284        TOR_CHECK_LDFLAGS(-pie, "$all_ldflags_for_check", "$all_libs_for_check")
1285     fi
1286     TOR_TRY_COMPILE_WITH_CFLAGS(-fwrapv, also_link, CFLAGS_FWRAPV="-fwrapv", true)
1288    AC_MSG_CHECKING([whether we can run hardened binaries])
1289    AC_RUN_IFELSE([AC_LANG_PROGRAM([], [return 0;])],
1290         [AC_MSG_RESULT([yes])],
1291         [AC_MSG_RESULT([no])
1292          AC_MSG_ERROR([dnl
1293  We can link with compiler hardening options, but we can't run with them.
1294  That's a bad sign! If you must, you can pass --disable-gcc-hardening to
1295  configure, but it would be better to figure out what the underlying problem
1296  is.])],
1297         [AC_MSG_RESULT([cross])])
1300 if test "$fragile_hardening" = "yes"; then
1301     TOR_TRY_COMPILE_WITH_CFLAGS(-ftrapv, also_link, CFLAGS_FTRAPV="-ftrapv", true)
1302    if test "$tor_cv_cflags__ftrapv" = "yes" && test "$tor_can_link__ftrapv" != "yes"; then
1303       AC_MSG_WARN([The compiler supports -ftrapv, but for some reason I was not able to link with -ftrapv. Are you missing run-time support? Run-time hardening will not work as well as it should.])
1304    fi
1306    if test "$tor_cv_cflags__ftrapv" != "yes"; then
1307      AC_MSG_ERROR([You requested fragile hardening, but the compiler does not seem to support -ftrapv.])
1308    fi
1310    TOR_TRY_COMPILE_WITH_CFLAGS([-fsanitize=address], also_link, CFLAGS_ASAN="-fsanitize=address", true)
1311     if test "$tor_cv_cflags__fsanitize_address" = "yes" && test "$tor_can_link__fsanitize_address" != "yes"; then
1312       AC_MSG_ERROR([The compiler supports -fsanitize=address, but for some reason I was not able to link when using it. Are you missing run-time support? With GCC you need libubsan.*, and with Clang you need libclang_rt.ubsan*])
1313     fi
1315    TOR_TRY_COMPILE_WITH_CFLAGS([-fsanitize=undefined], also_link, CFLAGS_UBSAN="-fsanitize=undefined", true)
1316     if test "$tor_cv_cflags__fsanitize_address" = "yes" && test "$tor_can_link__fsanitize_address" != "yes"; then
1317       AC_MSG_ERROR([The compiler supports -fsanitize=undefined, but for some reason I was not able to link when using it. Are you missing run-time support? With GCC you need libasan.*, and with Clang you need libclang_rt.ubsan*])
1318     fi
1320    TOR_TRY_COMPILE_WITH_CFLAGS([-fno-sanitize=float-divide-by-zero], also_link, CFLAGS_UBSAN="-fno-sanitize=float-divide-by-zero", true)
1321     if test "$tor_cv_cflags__fno_sanitize_float_divide_by_zero" = "yes" && test "$tor_can_link__fno_sanitize_float_divide_by_zero" != "yes"; then
1322       AC_MSG_ERROR([The compiler supports -fno-sanitize=float-divide-by-zero, but for some reason I was not able to link when using it. Are you missing run-time support? With GCC you need libasan.*, and with Clang you need libclang_rt.ubsan*])
1323     fi
1325 TOR_CHECK_CFLAGS([-fno-omit-frame-pointer])
1328 dnl Find the correct libraries to add in order to use the sanitizers.
1330 dnl When building Rust, Cargo will run the linker with the -nodefaultlibs
1331 dnl option, which will prevent the compiler from linking the sanitizer
1332 dnl libraries it needs.  We need to specify them manually.
1334 dnl What's more, we need to specify them in a linker script rather than
1335 dnl from build.rs: these options aren't allowed in the cargo:rustc-flags
1336 dnl variable.
1337 RUST_LINKER_OPTIONS=""
1338 if test "x$have_clang" = "xyes"; then
1339         if test "x$CFLAGS_ASAN" != "x"; then
1340                 RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -Clink-arg=$CFLAGS_ASAN -Cdefault-linker-libraries"
1341         fi
1342         if test "x$CFLAGS_UBSAN" != "x"; then
1343                 RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -Clink-arg=$CFLAGS_UBSAN -Cdefault-linker-libraries"
1344         fi
1345 else
1346         if test "x$CFLAGS_ASAN" != "x"; then
1347                 RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -Clink-arg=-fsanitize=address -Cdefault-linker-libraries"
1348         fi
1349         if test "x$CFLAGS_UBSAN" != "x"; then
1350                 RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -Clink-arg=-fsanitize=undefined -Cdefault-linker-libraries"
1351         fi
1353 AC_SUBST(RUST_LINKER_OPTIONS)
1355 CFLAGS_BUGTRAP="$CFLAGS_FTRAPV $CFLAGS_ASAN $CFLAGS_UBSAN"
1356 CFLAGS_CONSTTIME="$CFLAGS_FWRAPV"
1358 mulodi_fixes_ftrapv=no
1359 if test "$have_clang" = "yes"; then
1360   saved_CFLAGS="$CFLAGS"
1361   CFLAGS="$CFLAGS $CFLAGS_FTRAPV"
1362   AC_MSG_CHECKING([whether clang -ftrapv can link a 64-bit int multiply])
1363   AC_LINK_IFELSE([
1364       AC_LANG_SOURCE([[
1365           #include <stdint.h>
1366           #include <stdlib.h>
1367           int main(int argc, char **argv)
1368           {
1369             int64_t x = ((int64_t)atoi(argv[1])) * (int64_t)atoi(argv[2])
1370                         * (int64_t)atoi(argv[3]);
1371             return x == 9;
1372           } ]])],
1373           [ftrapv_can_link=yes; AC_MSG_RESULT([yes])],
1374           [ftrapv_can_link=no; AC_MSG_RESULT([no])])
1375   if test "$ftrapv_can_link" = "no"; then
1376     AC_MSG_CHECKING([whether defining __mulodi4 fixes that])
1377     AC_LINK_IFELSE([
1378       AC_LANG_SOURCE([[
1379           #include <stdint.h>
1380           #include <stdlib.h>
1381           int64_t __mulodi4(int64_t a, int64_t b, int *overflow) {
1382              *overflow=0;
1383              return a;
1384           }
1385           int main(int argc, char **argv)
1386           {
1387             int64_t x = ((int64_t)atoi(argv[1])) * (int64_t)atoi(argv[2])
1388                         * (int64_t)atoi(argv[3]);
1389             return x == 9;
1390           } ]])],
1391           [mulodi_fixes_ftrapv=yes; AC_MSG_RESULT([yes])],
1392           [mulodi_fixes_ftrapv=no; AC_MSG_RESULT([no])])
1393   fi
1394   CFLAGS="$saved_CFLAGS"
1397 AM_CONDITIONAL(ADD_MULODI4, test "$mulodi_fixes_ftrapv" = "yes")
1399 dnl These cflags add bunches of branches, and we haven't been able to
1400 dnl persuade ourselves that they're suitable for code that needs to be
1401 dnl constant time.
1402 AC_SUBST(CFLAGS_BUGTRAP)
1403 dnl These cflags are variant ones sutable for code that needs to be
1404 dnl constant-time.
1405 AC_SUBST(CFLAGS_CONSTTIME)
1407 if test "x$enable_linker_hardening" != "xno"; then
1408     TOR_CHECK_LDFLAGS(-z relro -z now, "$all_ldflags_for_check", "$all_libs_for_check")
1411 # For backtrace support
1412 TOR_CHECK_LDFLAGS(-rdynamic)
1414 dnl ------------------------------------------------------
1415 dnl Now see if we have a -fomit-frame-pointer compiler option.
1417 saved_CFLAGS="$CFLAGS"
1418 TOR_CHECK_CFLAGS(-fomit-frame-pointer)
1419 F_OMIT_FRAME_POINTER=''
1420 if test "$saved_CFLAGS" != "$CFLAGS"; then
1421   if test "$fragile_hardening" = "yes"; then
1422     F_OMIT_FRAME_POINTER='-fomit-frame-pointer'
1423   fi
1425 CFLAGS="$saved_CFLAGS"
1426 AC_SUBST(F_OMIT_FRAME_POINTER)
1428 dnl ------------------------------------------------------
1429 dnl If we are adding -fomit-frame-pointer (or if the compiler's doing it
1430 dnl for us, as GCC 4.6 and later do at many optimization levels), then
1431 dnl we should try to add -fasynchronous-unwind-tables so that our backtrace
1432 dnl code will work.
1433 TOR_CHECK_CFLAGS(-fasynchronous-unwind-tables)
1435 dnl ============================================================
1436 dnl Check for libseccomp
1438 if test "x$enable_seccomp" != "xno"; then
1439   AC_CHECK_HEADERS([seccomp.h])
1440   AC_SEARCH_LIBS(seccomp_init, [seccomp])
1443 dnl ============================================================
1444 dnl Check for libscrypt
1446 if test "x$enable_libscrypt" != "xno"; then
1447   AC_CHECK_HEADERS([libscrypt.h])
1448   AC_SEARCH_LIBS(libscrypt_scrypt, [scrypt])
1449   AC_CHECK_FUNCS([libscrypt_scrypt])
1452 dnl ============================================================
1453 dnl We need an implementation of curve25519.
1455 dnl set these defaults.
1456 build_curve25519_donna=no
1457 build_curve25519_donna_c64=no
1458 use_curve25519_donna=no
1459 use_curve25519_nacl=no
1460 CURVE25519_LIBS=
1462 dnl The best choice is using curve25519-donna-c64, but that requires
1463 dnl that we
1464 AC_CACHE_CHECK([whether we can use curve25519-donna-c64],
1465   tor_cv_can_use_curve25519_donna_c64,
1466   [AC_RUN_IFELSE(
1467     [AC_LANG_PROGRAM([dnl
1468       #include <stdint.h>
1469       typedef unsigned uint128_t __attribute__((mode(TI)));
1470   int func(uint64_t a, uint64_t b) {
1471            uint128_t c = ((uint128_t)a) * b;
1472            int ok = ((uint64_t)(c>>96)) == 522859 &&
1473              (((uint64_t)(c>>64))&0xffffffffL) == 3604448702L &&
1474                  (((uint64_t)(c>>32))&0xffffffffL) == 2351960064L &&
1475                  (((uint64_t)(c))&0xffffffffL) == 0;
1476            return ok;
1477       }
1478   ], [dnl
1479     int ok = func( ((uint64_t)2000000000) * 1000000000,
1480                    ((uint64_t)1234567890) << 24);
1481         return !ok;
1482       ])],
1483   [tor_cv_can_use_curve25519_donna_c64=yes],
1484       [tor_cv_can_use_curve25519_donna_c64=no],
1485   [AC_LINK_IFELSE(
1486         [AC_LANG_PROGRAM([dnl
1487       #include <stdint.h>
1488       typedef unsigned uint128_t __attribute__((mode(TI)));
1489   int func(uint64_t a, uint64_t b) {
1490            uint128_t c = ((uint128_t)a) * b;
1491            int ok = ((uint64_t)(c>>96)) == 522859 &&
1492              (((uint64_t)(c>>64))&0xffffffffL) == 3604448702L &&
1493                  (((uint64_t)(c>>32))&0xffffffffL) == 2351960064L &&
1494                  (((uint64_t)(c))&0xffffffffL) == 0;
1495            return ok;
1496       }
1497   ], [dnl
1498     int ok = func( ((uint64_t)2000000000) * 1000000000,
1499                  ((uint64_t)1234567890) << 24);
1500         return !ok;
1501       ])],
1502           [tor_cv_can_use_curve25519_donna_c64=cross],
1503       [tor_cv_can_use_curve25519_donna_c64=no])])])
1505 AC_CHECK_HEADERS([crypto_scalarmult_curve25519.h \
1506                   nacl/crypto_scalarmult_curve25519.h])
1508 AC_CACHE_CHECK([for nacl compiled with a fast curve25519 implementation],
1509   tor_cv_can_use_curve25519_nacl,
1510   [tor_saved_LIBS="$LIBS"
1511    LIBS="$LIBS -lnacl"
1512    AC_LINK_IFELSE(
1513      [AC_LANG_PROGRAM([dnl
1514        #ifdef HAVE_CRYPTO_SCALARMULT_CURVE25519_H
1515        #include <crypto_scalarmult_curve25519.h>
1516    #elif defined(HAVE_NACL_CRYPTO_SCALARMULT_CURVE25519_H)
1517    #include <nacl/crypto_scalarmult_curve25519.h>
1518    #endif
1519        #ifdef crypto_scalarmult_curve25519_ref_BYTES
1520    #error Hey, this is the reference implementation! That's not fast.
1521    #endif
1522      ], [
1523    unsigned char *a, *b, *c; crypto_scalarmult_curve25519(a,b,c);
1524      ])], [tor_cv_can_use_curve25519_nacl=yes],
1525      [tor_cv_can_use_curve25519_nacl=no])
1526    LIBS="$tor_saved_LIBS" ])
1528  dnl Okay, now we need to figure out which one to actually use. Fall back
1529  dnl to curve25519-donna.c
1531  if test "x$tor_cv_can_use_curve25519_donna_c64" != "xno"; then
1532    build_curve25519_donna_c64=yes
1533    use_curve25519_donna=yes
1534  elif test "x$tor_cv_can_use_curve25519_nacl" = "xyes"; then
1535    use_curve25519_nacl=yes
1536    CURVE25519_LIBS=-lnacl
1537  else
1538    build_curve25519_donna=yes
1539    use_curve25519_donna=yes
1540  fi
1542 if test "x$use_curve25519_donna" = "xyes"; then
1543   AC_DEFINE(USE_CURVE25519_DONNA, 1,
1544             [Defined if we should use an internal curve25519_donna{,_c64} implementation])
1546 if test "x$use_curve25519_nacl" = "xyes"; then
1547   AC_DEFINE(USE_CURVE25519_NACL, 1,
1548             [Defined if we should use a curve25519 from nacl])
1550 AM_CONDITIONAL(BUILD_CURVE25519_DONNA,
1551   test "x$build_curve25519_donna" = "xyes")
1552 AM_CONDITIONAL(BUILD_CURVE25519_DONNA_C64,
1553   test "x$build_curve25519_donna_c64" = "xyes")
1554 AC_SUBST(CURVE25519_LIBS)
1556 dnl Make sure to enable support for large off_t if available.
1557 AC_SYS_LARGEFILE
1559 AC_CHECK_HEADERS([errno.h \
1560                   fcntl.h \
1561                   signal.h \
1562                   string.h \
1563                   sys/capability.h \
1564                   sys/fcntl.h \
1565                   sys/stat.h \
1566                   sys/time.h \
1567                   sys/types.h \
1568                   time.h \
1569                   unistd.h \
1570                   arpa/inet.h \
1571                   crt_externs.h \
1572                   execinfo.h \
1573                   gnu/libc-version.h \
1574                   grp.h \
1575                   ifaddrs.h \
1576                   inttypes.h \
1577                   limits.h \
1578                   linux/types.h \
1579                   mach/vm_inherit.h \
1580                   machine/limits.h \
1581                   malloc.h \
1582                   malloc/malloc.h \
1583                   malloc_np.h \
1584                   netdb.h \
1585                   netinet/in.h \
1586                   netinet/in6.h \
1587                   pwd.h \
1588                   readpassphrase.h \
1589                   stdatomic.h \
1590                   sys/eventfd.h \
1591                   sys/file.h \
1592                   sys/ioctl.h \
1593                   sys/limits.h \
1594                   sys/mman.h \
1595                   sys/param.h \
1596                   sys/prctl.h \
1597                   sys/random.h \
1598                   sys/resource.h \
1599                   sys/select.h \
1600                   sys/socket.h \
1601                   sys/statvfs.h \
1602                   sys/syscall.h \
1603                   sys/sysctl.h \
1604                   sys/syslimits.h \
1605                   sys/time.h \
1606                   sys/types.h \
1607                   sys/un.h \
1608                   sys/utime.h \
1609                   sys/wait.h \
1610                   syslog.h \
1611                   utime.h])
1613 AC_CHECK_HEADERS(sys/param.h)
1615 AC_CHECK_HEADERS(net/if.h, net_if_found=1, net_if_found=0,
1616 [#ifdef HAVE_SYS_TYPES_H
1617 #include <sys/types.h>
1618 #endif
1619 #ifdef HAVE_SYS_SOCKET_H
1620 #include <sys/socket.h>
1621 #endif])
1622 AC_CHECK_HEADERS(net/pfvar.h, net_pfvar_found=1, net_pfvar_found=0,
1623 [#ifdef HAVE_SYS_TYPES_H
1624 #include <sys/types.h>
1625 #endif
1626 #ifdef HAVE_SYS_SOCKET_H
1627 #include <sys/socket.h>
1628 #endif
1629 #ifdef HAVE_NET_IF_H
1630 #include <net/if.h>
1631 #endif
1632 #ifdef HAVE_NETINET_IN_H
1633 #include <netinet/in.h>
1634 #endif])
1636 AC_CHECK_HEADERS(linux/if.h,[],[],
1638 #ifdef HAVE_SYS_SOCKET_H
1639 #include <sys/socket.h>
1640 #endif
1643 AC_CHECK_HEADERS(linux/netfilter_ipv4.h,
1644         linux_netfilter_ipv4=1, linux_netfilter_ipv4=0,
1645 [#ifdef HAVE_SYS_TYPES_H
1646 #include <sys/types.h>
1647 #endif
1648 #ifdef HAVE_SYS_SOCKET_H
1649 #include <sys/socket.h>
1650 #endif
1651 #ifdef HAVE_LIMITS_H
1652 #include <limits.h>
1653 #endif
1654 #ifdef HAVE_LINUX_TYPES_H
1655 #include <linux/types.h>
1656 #endif
1657 #ifdef HAVE_NETINET_IN6_H
1658 #include <netinet/in6.h>
1659 #endif
1660 #ifdef HAVE_NETINET_IN_H
1661 #include <netinet/in.h>
1662 #endif])
1664 AC_CHECK_HEADERS(linux/netfilter_ipv6/ip6_tables.h,
1665         linux_netfilter_ipv6_ip6_tables=1, linux_netfilter_ipv6_ip6_tables=0,
1666 [#ifdef HAVE_SYS_TYPES_H
1667 #include <sys/types.h>
1668 #endif
1669 #ifdef HAVE_SYS_SOCKET_H
1670 #include <sys/socket.h>
1671 #endif
1672 #ifdef HAVE_LIMITS_H
1673 #include <limits.h>
1674 #endif
1675 #ifdef HAVE_LINUX_TYPES_H
1676 #include <linux/types.h>
1677 #endif
1678 #ifdef HAVE_NETINET_IN6_H
1679 #include <netinet/in6.h>
1680 #endif
1681 #ifdef HAVE_NETINET_IN_H
1682 #include <netinet/in.h>
1683 #endif
1684 #ifdef HAVE_LINUX_IF_H
1685 #include <linux/if.h>
1686 #endif])
1688 transparent_ok=0
1689 if test "x$net_if_found" = "x1" && test "x$net_pfvar_found" = "x1"; then
1690   transparent_ok=1
1692 if test "x$linux_netfilter_ipv4" = "x1"; then
1693   transparent_ok=1
1695 if test "x$linux_netfilter_ipv6_ip6_tables" = "x1"; then
1696   transparent_ok=1
1698 if test "x$transparent_ok" = "x1"; then
1699   AC_DEFINE(USE_TRANSPARENT, 1, "Define to enable transparent proxy support")
1700 else
1701   AC_MSG_NOTICE([Transparent proxy support enabled, but missing headers.])
1704 AC_CHECK_MEMBERS([struct timeval.tv_sec], , ,
1705 [#ifdef HAVE_SYS_TYPES_H
1706 #include <sys/types.h>
1707 #endif
1708 #ifdef HAVE_SYS_TIME_H
1709 #include <sys/time.h>
1710 #endif])
1712 AC_CHECK_SIZEOF(char)
1713 AC_CHECK_SIZEOF(short)
1714 AC_CHECK_SIZEOF(int)
1715 AC_CHECK_SIZEOF(unsigned int)
1716 AC_CHECK_SIZEOF(long)
1717 AC_CHECK_SIZEOF(long long)
1718 AC_CHECK_SIZEOF(__int64)
1719 AC_CHECK_SIZEOF(void *)
1720 AC_CHECK_SIZEOF(time_t)
1721 AC_CHECK_SIZEOF(size_t)
1722 AC_CHECK_SIZEOF(pid_t)
1724 AC_CHECK_TYPES([uint, u_char, ssize_t])
1726 AC_PC_FROM_UCONTEXT([:])
1728 dnl used to include sockaddr_storage, but everybody has that.
1729 AC_CHECK_TYPES([struct in6_addr, struct sockaddr_in6, sa_family_t], , ,
1730 [#ifdef HAVE_SYS_TYPES_H
1731 #include <sys/types.h>
1732 #endif
1733 #ifdef HAVE_NETINET_IN_H
1734 #include <netinet/in.h>
1735 #endif
1736 #ifdef HAVE_NETINET_IN6_H
1737 #include <netinet/in6.h>
1738 #endif
1739 #ifdef HAVE_SYS_SOCKET_H
1740 #include <sys/socket.h>
1741 #endif
1742 #ifdef _WIN32
1743 #define _WIN32_WINNT 0x0501
1744 #define WIN32_LEAN_AND_MEAN
1745 #include <winsock2.h>
1746 #include <ws2tcpip.h>
1747 #endif
1749 AC_CHECK_MEMBERS([struct in6_addr.s6_addr32, struct in6_addr.s6_addr16, struct sockaddr_in.sin_len, struct sockaddr_in6.sin6_len], , ,
1750 [#ifdef HAVE_SYS_TYPES_H
1751 #include <sys/types.h>
1752 #endif
1753 #ifdef HAVE_NETINET_IN_H
1754 #include <netinet/in.h>
1755 #endif
1756 #ifdef HAVE_NETINET_IN6_H
1757 #include <netinet/in6.h>
1758 #endif
1759 #ifdef HAVE_SYS_SOCKET_H
1760 #include <sys/socket.h>
1761 #endif
1762 #ifdef _WIN32
1763 #define _WIN32_WINNT 0x0501
1764 #define WIN32_LEAN_AND_MEAN
1765 #include <winsock2.h>
1766 #include <ws2tcpip.h>
1767 #endif
1770 AC_CHECK_TYPES([rlim_t], , ,
1771 [#ifdef HAVE_SYS_TYPES_H
1772 #include <sys/types.h>
1773 #endif
1774 #ifdef HAVE_SYS_TIME_H
1775 #include <sys/time.h>
1776 #endif
1777 #ifdef HAVE_SYS_RESOURCE_H
1778 #include <sys/resource.h>
1779 #endif
1782 AX_CHECK_SIGN([time_t],
1783        [ : ],
1784        [ : ], [
1785 #ifdef HAVE_SYS_TYPES_H
1786 #include <sys/types.h>
1787 #endif
1788 #ifdef HAVE_SYS_TIME_H
1789 #include <sys/time.h>
1790 #endif
1791 #ifdef HAVE_TIME_H
1792 #include <time.h>
1793 #endif
1796 if test "$ax_cv_decl_time_t_signed" = "no"; then
1797   AC_MSG_ERROR([You have an unsigned time_t; Tor does not support that. Please tell the Tor developers about your interesting platform.])
1800 AX_CHECK_SIGN([size_t],
1801        [ tor_cv_size_t_signed=yes ],
1802        [ tor_cv_size_t_signed=no ], [
1803 #ifdef HAVE_SYS_TYPES_H
1804 #include <sys/types.h>
1805 #endif
1808 if test "$ax_cv_decl_size_t_signed" = "yes"; then
1809   AC_MSG_ERROR([You have a signed size_t; that's grossly nonconformant.])
1812 AX_CHECK_SIGN([enum always],
1813        [ AC_DEFINE(ENUM_VALS_ARE_SIGNED, 1, [Define if enum is always signed]) ],
1814        [ : ], [
1815  enum always { AAA, BBB, CCC };
1818 AC_CHECK_SIZEOF(socklen_t, , [AC_INCLUDES_DEFAULT()
1819 #ifdef HAVE_SYS_SOCKET_H
1820 #include <sys/socket.h>
1821 #endif
1824 # We want to make sure that we _don't_ have a cell_t defined, like IRIX does.
1826 AC_CHECK_SIZEOF(cell_t)
1828 # Let's see if stdatomic works. (There are some debian clangs that screw it
1829 # up; see Tor bug #26779 and debian bug 903709.)
1830 AC_CACHE_CHECK([whether C11 stdatomic.h actually works],
1831                tor_cv_stdatomic_works,
1832 [AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
1833 #include <stdatomic.h>
1834 struct x { atomic_size_t y; };
1835 void try_atomic_init(struct x *xx)
1837   atomic_init(&xx->y, 99);
1838   atomic_fetch_add(&xx->y, 1);
1840 ]])], [tor_cv_stdatomic_works=yes], [tor_cv_stdatomic_works=no])])
1842 if test "$tor_cv_stdatomic_works" = "yes"; then
1843    AC_DEFINE(STDATOMIC_WORKS, 1, [Set to 1 if we can compile a simple stdatomic example.])
1844 elif test "$ac_cv_header_stdatomic_h" = "yes"; then
1845    AC_MSG_WARN([Your compiler provides the stdatomic.h header, but it doesn't seem to work.  I'll pretend it isn't there. If you are using Clang on Debian, maybe this is because of https://bugs.debian.org/903709 ])
1848 # Now make sure that NULL can be represented as zero bytes.
1849 AC_CACHE_CHECK([whether memset(0) sets pointers to NULL], tor_cv_null_is_zero,
1850 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1851 [[#include <stdlib.h>
1852 #include <string.h>
1853 #include <stdio.h>
1854 #ifdef HAVE_STDDEF_H
1855 #include <stddef.h>
1856 #endif
1857 int main () { char *p1,*p2; p1=NULL; memset(&p2,0,sizeof(p2));
1858 return memcmp(&p1,&p2,sizeof(char*))?1:0; }]])],
1859        [tor_cv_null_is_zero=yes],
1860        [tor_cv_null_is_zero=no],
1861        [tor_cv_null_is_zero=cross])])
1863 if test "$tor_cv_null_is_zero" = "cross"; then
1864   # Cross-compiling; let's hope that the target isn't raving mad.
1865   AC_MSG_NOTICE([Cross-compiling: we'll assume that NULL is represented as a sequence of 0-valued bytes.])
1868 if test "$tor_cv_null_is_zero" != "no"; then
1869   AC_DEFINE([NULL_REP_IS_ZERO_BYTES], 1,
1870             [Define to 1 iff memset(0) sets pointers to NULL])
1873 AC_CACHE_CHECK([whether memset(0) sets doubles to 0.0], tor_cv_dbl0_is_zero,
1874 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1875 [[#include <stdlib.h>
1876 #include <string.h>
1877 #include <stdio.h>
1878 #ifdef HAVE_STDDEF_H
1879 #include <stddef.h>
1880 #endif
1881 int main () { double d1,d2; d1=0; memset(&d2,0,sizeof(d2));
1882 return memcmp(&d1,&d2,sizeof(d1))?1:0; }]])],
1883        [tor_cv_dbl0_is_zero=yes],
1884        [tor_cv_dbl0_is_zero=no],
1885        [tor_cv_dbl0_is_zero=cross])])
1887 if test "$tor_cv_dbl0_is_zero" = "cross"; then
1888   # Cross-compiling; let's hope that the target isn't raving mad.
1889   AC_MSG_NOTICE([Cross-compiling: we'll assume that 0.0 can be represented as a sequence of 0-valued bytes.])
1892 if test "$tor_cv_dbl0_is_zero" != "no"; then
1893   AC_DEFINE([DOUBLE_0_REP_IS_ZERO_BYTES], 1,
1894             [Define to 1 iff memset(0) sets doubles to 0.0])
1897 # And what happens when we malloc zero?
1898 AC_CACHE_CHECK([whether we can malloc(0) safely.], tor_cv_malloc_zero_works,
1899 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1900 [[#include <stdlib.h>
1901 #include <string.h>
1902 #include <stdio.h>
1903 #ifdef HAVE_STDDEF_H
1904 #include <stddef.h>
1905 #endif
1906 int main () { return malloc(0)?0:1; }]])],
1907        [tor_cv_malloc_zero_works=yes],
1908        [tor_cv_malloc_zero_works=no],
1909        [tor_cv_malloc_zero_works=cross])])
1911 if test "$tor_cv_malloc_zero_works" = "cross"; then
1912   # Cross-compiling; let's hope that the target isn't raving mad.
1913   AC_MSG_NOTICE([Cross-compiling: we'll assume that we need to check malloc() arguments for 0.])
1916 if test "$tor_cv_malloc_zero_works" = "yes"; then
1917   AC_DEFINE([MALLOC_ZERO_WORKS], 1,
1918             [Define to 1 iff malloc(0) returns a pointer])
1921 # whether we seem to be in a 2s-complement world.
1922 AC_CACHE_CHECK([whether we are using 2s-complement arithmetic], tor_cv_twos_complement,
1923 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1924 [[int main () { int problem = ((-99) != (~99)+1);
1925 return problem ? 1 : 0; }]])],
1926        [tor_cv_twos_complement=yes],
1927        [tor_cv_twos_complement=no],
1928        [tor_cv_twos_complement=cross])])
1930 if test "$tor_cv_twos_complement" = "cross"; then
1931   # Cross-compiling; let's hope that the target isn't raving mad.
1932   AC_MSG_NOTICE([Cross-compiling: we'll assume that negative integers are represented with two's complement.])
1935 if test "$tor_cv_twos_complement" != "no"; then
1936   AC_DEFINE([USING_TWOS_COMPLEMENT], 1,
1937             [Define to 1 iff we represent negative integers with
1938              two's complement])
1941 # What does shifting a negative value do?
1942 AC_CACHE_CHECK([whether right-shift on negative values does sign-extension], tor_cv_sign_extend,
1943 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1944 [[int main () { int okay = (-60 >> 8) == -1; return okay ? 0 : 1; }]])],
1945        [tor_cv_sign_extend=yes],
1946        [tor_cv_sign_extend=no],
1947        [tor_cv_sign_extend=cross])])
1949 if test "$tor_cv_sign_extend" = "cross"; then
1950   # Cross-compiling; let's hope that the target isn't raving mad.
1951   AC_MSG_NOTICE([Cross-compiling: we'll assume that right-shifting negative integers causes sign-extension])
1954 if test "$tor_cv_sign_extend" != "no"; then
1955   AC_DEFINE([RSHIFT_DOES_SIGN_EXTEND], 1,
1956             [Define to 1 iff right-shifting a negative value performs sign-extension])
1959 # Is uint8_t the same type as unsigned char?
1960 AC_CACHE_CHECK([whether uint8_t is the same type as unsigned char], tor_cv_uint8_uchar,
1961 [AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
1962 #include <stdint.h>
1963 extern uint8_t c;
1964 unsigned char c;]])],
1965        [tor_cv_uint8_uchar=yes],
1966        [tor_cv_uint8_uchar=no],
1967        [tor_cv_uint8_uchar=cross])])
1969 if test "$tor_cv_uint8_uchar" = "cross"; then
1970   AC_MSG_NOTICE([Cross-compiling: we'll assume that uint8_t is the same type as unsigned char])
1973 if test "$tor_cv_uint8_uchar" = "no"; then
1974   AC_MSG_ERROR([We assume that uint8_t is the same type as unsigned char, but your compiler disagrees.])
1977 AC_ARG_WITH(tcmalloc,
1978 AS_HELP_STRING(--with-tcmalloc, [use tcmalloc memory allocation library. Deprecated; see --with-malloc]))
1980 default_malloc=system
1982 if test "x$enable_openbsd_malloc" = "xyes" ; then
1983   AC_MSG_NOTICE([The --enable-openbsd-malloc argument is deprecated; use --with-malloc=openbsd instead.])
1984   default_malloc=openbsd
1987 if test "x$with_tcmalloc" = "xyes"; then
1988   AC_MSG_NOTICE([The --with-tcmalloc argument is deprecated; use --with-malloc=tcmalloc instead.])
1989   default_malloc=tcmalloc
1992 AC_ARG_WITH(malloc,
1993    AS_HELP_STRING([--with-malloc=[system,jemalloc,tcmalloc,openbsd]],
1994                   [select special malloc implementation [system]]),
1995    [ malloc="$with_malloc" ], [ malloc="$default_malloc" ])
1997 AS_CASE([$malloc],
1998   [tcmalloc], [
1999       PKG_CHECK_MODULES([TCMALLOC],
2000                         [libtcmalloc],
2001                         have_tcmalloc=yes,
2002                         have_tcmalloc=no)
2004       if test "x$have_tcmalloc" = "xno" ; then
2005           AC_MSG_ERROR([Unable to find tcmalloc requested by --with-malloc, $pkg_config_user_action, or set TCMALLOC_CFLAGS and TCMALLOC_LIBS.])
2006       fi
2008       CFLAGS="$CFLAGS $TCMALLOC_CFLAGS"
2009       LIBS="$TCMALLOC_LIBS $LIBS"
2010   ],
2012   [jemalloc], [
2013       PKG_CHECK_MODULES([JEMALLOC],
2014                         [jemalloc],
2015                         have_jemalloc=yes,
2016                         have_jemalloc=no)
2018       if test "x$have_jemalloc" = "xno" ; then
2019           AC_MSG_ERROR([Unable to find jemalloc requested by --with-malloc, $pkg_config_user_action, or set JEMALLOC_CFLAGS and JEMALLOC_LIBS.])
2020       fi
2022       CFLAGS="$CFLAGS $JEMALLOC_CFLAGS"
2023       LIBS="$JEMALLOC_LIBS $LIBS"
2024       using_custom_malloc=yes
2025   ],
2027   [openbsd], [
2028     AC_MSG_WARN([The openbsd malloc port is deprecated in Tor 0.3.5 and will be removed in a future version.])
2029     enable_openbsd_malloc=yes
2030   ],
2032   [system], [
2033      # handle this later, including the jemalloc fallback
2034     AC_CHECK_FUNCS(mallinfo)
2035   ],
2037   [AC_MSG_ERROR([--with-malloc=`$with_malloc' not supported, see --help])
2040 AM_CONDITIONAL(USE_OPENBSD_MALLOC, test "x$enable_openbsd_malloc" = "xyes")
2042 if test "$malloc" != "system"; then
2043   # Tell the C compiler not to use the system allocator functions.
2044   TOR_CHECK_CFLAGS([-fno-builtin-malloc -fno-builtin-realloc -fno-builtin-calloc -fno-builtin-free])
2046 if test "$using_custom_malloc" = "yes"; then
2047   # Tell the C compiler not to use the system allocator functions.
2048   TOR_CHECK_CFLAGS([-fno-builtin-malloc -fno-builtin-realloc -fno-builtin-calloc -fno-builtin-free])
2051 # By default, we're going to assume we don't have mlockall()
2052 # bionic and other platforms have various broken mlockall subsystems.
2053 # Some systems don't have a working mlockall, some aren't linkable,
2054 # and some have it but don't declare it.
2055 AC_CHECK_FUNCS(mlockall)
2056 AC_CHECK_DECLS([mlockall], , , [
2057 #ifdef HAVE_SYS_MMAN_H
2058 #include <sys/mman.h>
2059 #endif])
2061 # Allow user to specify an alternate syslog facility
2062 AC_ARG_WITH(syslog-facility,
2063 AS_HELP_STRING(--with-syslog-facility=LOG, [syslog facility to use (default=LOG_DAEMON)]),
2064 syslog_facility="$withval", syslog_facility="LOG_DAEMON")
2065 AC_DEFINE_UNQUOTED(LOGFACILITY,$syslog_facility,[name of the syslog facility])
2066 AC_SUBST(LOGFACILITY)
2068 # Check if we have getresuid and getresgid
2069 AC_CHECK_FUNCS(getresuid getresgid)
2071 # Check for gethostbyname_r in all its glorious incompatible versions.
2072 #   (This logic is based on that in Python's configure.in)
2073 AH_TEMPLATE(HAVE_GETHOSTBYNAME_R,
2074   [Define this if you have any gethostbyname_r()])
2076 AC_CHECK_FUNC(gethostbyname_r, [
2077   AC_MSG_CHECKING([how many arguments gethostbyname_r() wants])
2078   OLD_CFLAGS=$CFLAGS
2079   CFLAGS="$CFLAGS $MY_CPPFLAGS $MY_THREAD_CPPFLAGS $MY_CFLAGS"
2080   AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
2081 #include <netdb.h>
2082   ]], [[
2083     char *cp1, *cp2;
2084     struct hostent *h1, *h2;
2085     int i1, i2;
2086     (void)gethostbyname_r(cp1,h1,cp2,i1,&h2,&i2);
2087   ]])],[
2088     AC_DEFINE(HAVE_GETHOSTBYNAME_R)
2089     AC_DEFINE(HAVE_GETHOSTBYNAME_R_6_ARG, 1,
2090      [Define this if gethostbyname_r takes 6 arguments])
2091     AC_MSG_RESULT(6)
2092   ], [
2093     AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
2094 #include <netdb.h>
2095     ]], [[
2096       char *cp1, *cp2;
2097       struct hostent *h1;
2098       int i1, i2;
2099       (void)gethostbyname_r(cp1,h1,cp2,i1,&i2);
2100     ]])], [
2101       AC_DEFINE(HAVE_GETHOSTBYNAME_R)
2102       AC_DEFINE(HAVE_GETHOSTBYNAME_R_5_ARG, 1,
2103         [Define this if gethostbyname_r takes 5 arguments])
2104       AC_MSG_RESULT(5)
2105    ], [
2106       AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
2107 #include <netdb.h>
2108      ]], [[
2109        char *cp1;
2110        struct hostent *h1;
2111        struct hostent_data hd;
2112        (void) gethostbyname_r(cp1,h1,&hd);
2113      ]])], [
2114        AC_DEFINE(HAVE_GETHOSTBYNAME_R)
2115        AC_DEFINE(HAVE_GETHOSTBYNAME_R_3_ARG, 1,
2116          [Define this if gethostbyname_r takes 3 arguments])
2117        AC_MSG_RESULT(3)
2118      ], [
2119        AC_MSG_RESULT(0)
2120      ])
2121   ])
2122  ])
2123  CFLAGS=$OLD_CFLAGS
2126 AC_CACHE_CHECK([whether the C compiler supports __func__],
2127   tor_cv_have_func_macro,
2128   AC_COMPILE_IFELSE([AC_LANG_SOURCE([
2129 #include <stdio.h>
2130 int main(int c, char **v) { puts(__func__); }])],
2131   tor_cv_have_func_macro=yes,
2132   tor_cv_have_func_macro=no))
2134 AC_CACHE_CHECK([whether the C compiler supports __FUNC__],
2135   tor_cv_have_FUNC_macro,
2136   AC_COMPILE_IFELSE([AC_LANG_SOURCE([
2137 #include <stdio.h>
2138 int main(int c, char **v) { puts(__FUNC__); }])],
2139   tor_cv_have_FUNC_macro=yes,
2140   tor_cv_have_FUNC_macro=no))
2142 AC_CACHE_CHECK([whether the C compiler supports __FUNCTION__],
2143   tor_cv_have_FUNCTION_macro,
2144   AC_COMPILE_IFELSE([AC_LANG_SOURCE([
2145 #include <stdio.h>
2146 int main(int c, char **v) { puts(__FUNCTION__); }])],
2147   tor_cv_have_FUNCTION_macro=yes,
2148   tor_cv_have_FUNCTION_macro=no))
2150 AC_CACHE_CHECK([whether we have extern char **environ already declared],
2151   tor_cv_have_environ_declared,
2152   AC_COMPILE_IFELSE([AC_LANG_SOURCE([
2153 #ifdef HAVE_UNISTD_H
2154 #include <unistd.h>
2155 #endif
2156 #include <stdlib.h>
2157 int main(int c, char **v) { char **t = environ; }])],
2158   tor_cv_have_environ_declared=yes,
2159   tor_cv_have_environ_declared=no))
2161 if test "$tor_cv_have_func_macro" = "yes"; then
2162   AC_DEFINE(HAVE_MACRO__func__, 1, [Defined if the compiler supports __func__])
2165 if test "$tor_cv_have_FUNC_macro" = "yes"; then
2166   AC_DEFINE(HAVE_MACRO__FUNC__, 1, [Defined if the compiler supports __FUNC__])
2169 if test "$tor_cv_have_FUNCTION_macro" = "yes"; then
2170   AC_DEFINE(HAVE_MACRO__FUNCTION__, 1,
2171            [Defined if the compiler supports __FUNCTION__])
2174 if test "$tor_cv_have_environ_declared" = "yes"; then
2175   AC_DEFINE(HAVE_EXTERN_ENVIRON_DECLARED, 1,
2176            [Defined if we have extern char **environ already declared])
2179 # $prefix stores the value of the --prefix command line option, or
2180 # NONE if the option wasn't set.  In the case that it wasn't set, make
2181 # it be the default, so that we can use it to expand directories now.
2182 if test "x$prefix" = "xNONE"; then
2183   prefix=$ac_default_prefix
2186 # and similarly for $exec_prefix
2187 if test "x$exec_prefix" = "xNONE"; then
2188   exec_prefix=$prefix
2191 if test "x$BUILDDIR" = "x"; then
2192   BUILDDIR=`pwd`
2194 AC_SUBST(BUILDDIR)
2195 AH_TEMPLATE([BUILDDIR],[tor's build directory])
2196 AC_DEFINE_UNQUOTED(BUILDDIR,"$BUILDDIR")
2198 if test "x$SRCDIR" = "x"; then
2199   SRCDIR=$(cd "$srcdir"; pwd)
2201 AH_TEMPLATE([SRCDIR],[tor's sourcedir directory])
2202 AC_DEFINE_UNQUOTED(SRCDIR,"$SRCDIR")
2204 if test "x$CONFDIR" = "x"; then
2205   CONFDIR=`eval echo $sysconfdir/tor`
2207 AC_SUBST(CONFDIR)
2208 AH_TEMPLATE([CONFDIR],[tor's configuration directory])
2209 AC_DEFINE_UNQUOTED(CONFDIR,"$CONFDIR")
2211 BINDIR=`eval echo $bindir`
2212 AC_SUBST(BINDIR)
2213 LOCALSTATEDIR=`eval echo $localstatedir`
2214 AC_SUBST(LOCALSTATEDIR)
2216 if test "$bwin32" = "true"; then
2217   # Test if the linker supports the --nxcompat and --dynamicbase options
2218   # for Windows
2219   save_LDFLAGS="$LDFLAGS"
2220   LDFLAGS="-Wl,--nxcompat -Wl,--dynamicbase"
2221   AC_MSG_CHECKING([whether the linker supports DllCharacteristics])
2222   AC_LINK_IFELSE([AC_LANG_PROGRAM([])],
2223     [AC_MSG_RESULT([yes])]
2224     [save_LDFLAGS="$save_LDFLAGS $LDFLAGS"],
2225     [AC_MSG_RESULT([no])]
2226   )
2227   LDFLAGS="$save_LDFLAGS"
2230 # Set CFLAGS _after_ all the above checks, since our warnings are stricter
2231 # than autoconf's macros like.
2232 if test "$GCC" = "yes"; then
2233   # Disable GCC's strict aliasing checks.  They are an hours-to-debug
2234   # accident waiting to happen.
2235   CFLAGS="$CFLAGS -Wall -fno-strict-aliasing"
2236 else
2237   # Override optimization level for non-gcc compilers
2238   CFLAGS="$CFLAGS -O"
2239   enable_gcc_warnings=no
2240   enable_gcc_warnings_advisory=no
2243 # Warnings implies advisory-warnings and -Werror.
2244 if test "$enable_gcc_warnings" = "yes"; then
2245   enable_gcc_warnings_advisory=yes
2246   enable_fatal_warnings=yes
2249 # OS X Lion started deprecating the system openssl. Let's just disable
2250 # all deprecation warnings on OS X. Also, to potentially make the binary
2251 # a little smaller, let's enable dead_strip.
2252 case "$host_os" in
2254  darwin*)
2255     CFLAGS="$CFLAGS -Wno-deprecated-declarations"
2256     LDFLAGS="$LDFLAGS -dead_strip" ;;
2257 esac
2259 TOR_WARNING_FLAGS=""
2261 # Add some more warnings which we use in development but not in the
2262 # released versions.  (Some relevant gcc versions can't handle these.)
2264 # Note that we have to do this near the end  of the autoconf process, or
2265 # else we may run into problems when these warnings hit on the testing C
2266 # programs that autoconf wants to build.
2267 if test "x$enable_gcc_warnings_advisory" != "xno"; then
2269   case "$host" in
2270     *-*-openbsd* | *-*-bitrig*)
2271       # Some OpenBSD versions (like 4.8) have -Wsystem-headers by default.
2272       # That's fine, except that the headers don't pass -Wredundant-decls.
2273       # Therefore, let's disable -Wsystem-headers when we're building
2274       # with maximal warnings on OpenBSD.
2275       CFLAGS="$CFLAGS -Wno-system-headers" ;;
2276   esac
2278   CFLAGS_NOWARNINGS="$CFLAGS"
2280   # GCC4.3 users once report trouble with -Wstrict-overflow=5.  GCC5 users
2281   # have it work better.
2282   # CFLAGS="$CFLAGS -Wstrict-overflow=1"
2284   # This warning was added in gcc 4.3, but it appears to generate
2285   # spurious warnings in gcc 4.4.  I don't know if it works in 4.5.
2286   #CFLAGS="$CFLAGS -Wlogical-op"
2288   m4_foreach_w([warning_flag], [
2289      -Waddress
2290      -Waddress-of-array-temporary
2291      -Waddress-of-temporary
2292      -Wambiguous-macro
2293      -Wanonymous-pack-parens
2294      -Warc
2295      -Warc-abi
2296      -Warc-bridge-casts-disallowed-in-nonarc
2297      -Warc-maybe-repeated-use-of-weak
2298      -Warc-performSelector-leaks
2299      -Warc-repeated-use-of-weak
2300      -Warray-bounds
2301      -Warray-bounds-pointer-arithmetic
2302      -Wasm
2303      -Wasm-operand-widths
2304      -Watomic-properties
2305      -Watomic-property-with-user-defined-accessor
2306      -Wauto-import
2307      -Wauto-storage-class
2308      -Wauto-var-id
2309      -Wavailability
2310      -Wbackslash-newline-escape
2311      -Wbad-array-new-length
2312      -Wbind-to-temporary-copy
2313      -Wbitfield-constant-conversion
2314      -Wbool-conversion
2315      -Wbool-conversions
2316      -Wbuiltin-requires-header
2317      -Wchar-align
2318      -Wcompare-distinct-pointer-types
2319      -Wcomplex-component-init
2320      -Wconditional-type-mismatch
2321      -Wconfig-macros
2322      -Wconstant-conversion
2323      -Wconstant-logical-operand
2324      -Wconstexpr-not-const
2325      -Wcustom-atomic-properties
2326      -Wdangling-field
2327      -Wdangling-initializer-list
2328      -Wdate-time
2329      -Wdelegating-ctor-cycles
2330      -Wdeprecated-implementations
2331      -Wdeprecated-register
2332      -Wdirect-ivar-access
2333      -Wdiscard-qual
2334      -Wdistributed-object-modifiers
2335      -Wdivision-by-zero
2336      -Wdollar-in-identifier-extension
2337      -Wdouble-promotion
2338      -Wduplicate-decl-specifier
2339      -Wduplicate-enum
2340      -Wduplicate-method-arg
2341      -Wduplicate-method-match
2342      -Wduplicated-cond
2343      -Wdynamic-class-memaccess
2344      -Wembedded-directive
2345      -Wempty-translation-unit
2346      -Wenum-conversion
2347      -Wexit-time-destructors
2348      -Wexplicit-ownership-type
2349      -Wextern-initializer
2350      -Wextra
2351      -Wextra-semi
2352      -Wextra-tokens
2353      -Wflexible-array-extensions
2354      -Wfloat-conversion
2355      -Wformat-non-iso
2356      -Wfour-char-constants
2357      -Wgcc-compat
2358      -Wglobal-constructors
2359      -Wgnu-array-member-paren-init
2360      -Wgnu-designator
2361      -Wgnu-static-float-init
2362      -Wheader-guard
2363      -Wheader-hygiene
2364      -Widiomatic-parentheses
2365      -Wignored-attributes
2366      -Wimplicit-atomic-properties
2367      -Wimplicit-conversion-floating-point-to-bool
2368      -Wimplicit-exception-spec-mismatch
2369      -Wimplicit-fallthrough
2370      -Wimplicit-fallthrough-per-function
2371      -Wimplicit-retain-self
2372      -Wimport-preprocessor-directive-pedantic
2373      -Wincompatible-library-redeclaration
2374      -Wincompatible-pointer-types-discards-qualifiers
2375      -Wincomplete-implementation
2376      -Wincomplete-module
2377      -Wincomplete-umbrella
2378      -Winit-self
2379      -Wint-conversions
2380      -Wint-to-void-pointer-cast
2381      -Winteger-overflow
2382      -Winvalid-constexpr
2383      -Winvalid-iboutlet
2384      -Winvalid-noreturn
2385      -Winvalid-pp-token
2386      -Winvalid-source-encoding
2387      -Winvalid-token-paste
2388      -Wknr-promoted-parameter
2389      -Wlarge-by-value-copy
2390      -Wliteral-conversion
2391      -Wliteral-range
2392      -Wlocal-type-template-args
2393      -Wlogical-op
2394      -Wloop-analysis
2395      -Wmain-return-type
2396      -Wmalformed-warning-check
2397      -Wmethod-signatures
2398      -Wmicrosoft
2399      -Wmicrosoft-exists
2400      -Wmismatched-parameter-types
2401      -Wmismatched-return-types
2402      -Wmissing-field-initializers
2403      -Wmissing-format-attribute
2404      -Wmissing-noreturn
2405      -Wmissing-selector-name
2406      -Wmissing-sysroot
2407      -Wmissing-variable-declarations
2408      -Wmodule-conflict
2409      -Wnested-anon-types
2410      -Wnewline-eof
2411      -Wnon-literal-null-conversion
2412      -Wnon-pod-varargs
2413      -Wnonportable-cfstrings
2414      -Wnormalized=nfkc
2415      -Wnull-arithmetic
2416      -Wnull-character
2417      -Wnull-conversion
2418      -Wnull-dereference
2419      -Wout-of-line-declaration
2420      -Wover-aligned
2421      -Woverlength-strings
2422      -Woverride-init
2423      -Woverriding-method-mismatch
2424      -Wpointer-type-mismatch
2425      -Wpredefined-identifier-outside-function
2426      -Wprotocol-property-synthesis-ambiguity
2427      -Wreadonly-iboutlet-property
2428      -Wreadonly-setter-attrs
2429      -Wreceiver-expr
2430      -Wreceiver-forward-class
2431      -Wreceiver-is-weak
2432      -Wreinterpret-base-class
2433      -Wrequires-super-attribute
2434      -Wreserved-user-defined-literal
2435      -Wreturn-stack-address
2436      -Wsection
2437      -Wselector-type-mismatch
2438      -Wsentinel
2439      -Wserialized-diagnostics
2440      -Wshadow
2441      -Wshift-count-negative
2442      -Wshift-count-overflow
2443      -Wshift-negative-value
2444      -Wshift-overflow=2
2445      -Wshift-sign-overflow
2446      -Wshorten-64-to-32
2447      -Wsizeof-array-argument
2448      -Wsource-uses-openmp
2449      -Wstatic-float-init
2450      -Wstatic-in-inline
2451      -Wstatic-local-in-inline
2452      -Wstrict-overflow=1
2453      -Wstring-compare
2454      -Wstring-conversion
2455      -Wstrlcpy-strlcat-size
2456      -Wstrncat-size
2457      -Wsuggest-attribute=format
2458      -Wsuggest-attribute=noreturn
2459      -Wsuper-class-method-mismatch
2460      -Wswitch-bool
2461      -Wsync-nand
2462      -Wtautological-constant-out-of-range-compare
2463      -Wtentative-definition-incomplete-type
2464      -Wtrampolines
2465      -Wtype-safety
2466      -Wtypedef-redefinition
2467      -Wtypename-missing
2468      -Wundefined-inline
2469      -Wundefined-internal
2470      -Wundefined-reinterpret-cast
2471      -Wunicode
2472      -Wunicode-whitespace
2473      -Wunknown-warning-option
2474      -Wunnamed-type-template-args
2475      -Wunneeded-member-function
2476      -Wunsequenced
2477      -Wunsupported-visibility
2478      -Wunused-but-set-parameter
2479      -Wunused-but-set-variable
2480      -Wunused-command-line-argument
2481      -Wunused-const-variable=2
2482      -Wunused-exception-parameter
2483      -Wunused-local-typedefs
2484      -Wunused-member-function
2485      -Wunused-sanitize-argument
2486      -Wunused-volatile-lvalue
2487      -Wuser-defined-literals
2488      -Wvariadic-macros
2489      -Wvector-conversion
2490      -Wvector-conversions
2491      -Wvexing-parse
2492      -Wvisibility
2493      -Wvla-extension
2494      -Wzero-length-array
2495   ], [ TOR_TRY_COMPILE_WITH_CFLAGS(warning_flag, [],
2496               [TOR_WARNING_FLAGS="$TOR_WARNING_FLAGS warning_flag" CFLAGS="$CFLAGS warning_flag"], true)
2497      ])
2499 dnl    We should re-enable this in some later version.  Clang doesn't
2500 dnl    mind, but it causes trouble with GCC.
2501 dnl     -Wstrict-overflow=2
2503 dnl    These seem to require annotations that we don't currently use,
2504 dnl    and they give false positives in our pthreads wrappers. (Clang 4)
2505 dnl     -Wthread-safety
2506 dnl     -Wthread-safety-analysis
2507 dnl     -Wthread-safety-attributes
2508 dnl     -Wthread-safety-beta
2509 dnl     -Wthread-safety-precise
2511   W_FLAGS="$W_FLAGS -W -Wfloat-equal -Wundef -Wpointer-arith"
2512   W_FLAGS="$W_FLAGS -Wstrict-prototypes -Wmissing-prototypes -Wwrite-strings"
2513   W_FLAGS="$W_FLAGS -Wredundant-decls -Wchar-subscripts -Wcomment -Wformat=2"
2514   W_FLAGS="$W_FLAGS -Wwrite-strings"
2515   W_FLAGS="$W_FLAGS -Wnested-externs -Wbad-function-cast -Wswitch-enum"
2516   W_FLAGS="$W_FLAGS -Waggregate-return -Wpacked -Wunused"
2517   W_FLAGS="$W_FLAGS -Wunused-parameter "
2518   # These interfere with building main() { return 0; }, which autoconf
2519   # likes to use as its default program.
2520   W_FLAGS="$W_FLAGS -Wold-style-definition -Wmissing-declarations"
2522   TOR_WARNING_FLAGS="$TOR_WARNING_FLAGS $W_FLAGS"
2523   CFLAGS="$CFLAGS $W_FLAGS"
2525   if test "$tor_cv_cflags__Wnull_dereference" = "yes"; then
2526     AC_DEFINE([HAVE_CFLAG_WNULL_DEREFERENCE], 1, [True if we have -Wnull-dereference])
2527   fi
2528   if test "$tor_cv_cflags__Woverlength_strings" = "yes"; then
2529     AC_DEFINE([HAVE_CFLAG_WOVERLENGTH_STRINGS], 1, [True if we have -Woverlength-strings])
2530   fi
2531   if test "$tor_cv_cflags__warn_unused_const_variable_2" = "yes"; then
2532     AC_DEFINE([HAVE_CFLAG_WUNUSED_CONST_VARIABLE], 1, [True if we have -Wunused-const-variable])
2533   fi
2535   CFLAGS="$CFLAGS_NOWARNINGS"
2537   if test "x$enable_fatal_warnings" = "xyes"; then
2538     # I'd like to use TOR_CHECK_CFLAGS here, but I can't, since the
2539     # default autoconf programs are full of errors.
2540     CFLAGS="$CFLAGS -Werror"
2541   fi
2545 AC_SUBST(TOR_WARNING_FLAGS)
2547 echo "$TOR_WARNING_FLAGS">warning_flags
2549 TOR_TRY_COMPILE_WITH_CFLAGS([@warning_flags], [],
2550                             CFLAGS="$CFLAGS @warning_flags",
2551                             CFLAGS="$CFLAGS $TOR_WARNING_FLAGS")
2553 if test "$enable_coverage" = "yes" && test "$have_clang" = "no"; then
2554    case "$host_os" in
2555     darwin*)
2556       AC_MSG_WARN([Tried to enable coverage on OSX without using the clang compiler. This might not work! If coverage fails, use CC=clang when configuring with --enable-coverage.])
2557    esac
2560 CPPFLAGS="$CPPFLAGS $TOR_CPPFLAGS_libevent $TOR_CPPFLAGS_openssl $TOR_CPPFLAGS_zlib"
2562 AC_CONFIG_FILES([
2563         Doxyfile
2564         Makefile
2565         config.rust
2566         contrib/operator-tools/tor.logrotate
2567         contrib/dist/tor.service
2568         src/config/torrc.sample
2569         src/config/torrc.minimal
2570         src/rust/.cargo/config
2571         scripts/maint/checkOptionDocs.pl
2572         warning_flags
2575 if test "x$asciidoc" = "xtrue" && test "$ASCIIDOC" = "none"; then
2576   regular_mans="doc/tor doc/tor-gencert doc/tor-resolve doc/torify"
2577   for file in $regular_mans ; do
2578     if ! [[ -f "$srcdir/$file.1.in" ]] || ! [[ -f "$srcdir/$file.html.in" ]] ; then
2579       echo "==================================";
2580       echo;
2581       echo "Building Tor has failed since manpages cannot be built.";
2582       echo;
2583       echo "You need asciidoc installed to be able to build the manpages.";
2584       echo "To build without manpages, use the --disable-asciidoc argument";
2585       echo "when calling configure.";
2586       echo;
2587       echo "==================================";
2588       exit 1;
2589     fi
2590   done
2593 if test "$fragile_hardening" = "yes"; then
2594   AC_MSG_WARN([
2596 ============
2597 Warning!  Building Tor with --enable-fragile-hardening (also known as
2598 --enable-expensive-hardening) makes some kinds of attacks harder, but makes
2599 other kinds of attacks easier. A Tor instance build with this option will be
2600 somewhat less vulnerable to remote code execution, arithmetic overflow, or
2601 out-of-bounds read/writes... but at the cost of becoming more vulnerable to
2602 denial of service attacks. For more information, see
2603 https://trac.torproject.org/projects/tor/wiki/doc/TorFragileHardening
2604 ============
2605   ])
2608 AC_OUTPUT
2611 # Mini-report on what will be built.
2614 PPRINT_INIT
2615 PPRINT_SET_INDENT(1)
2616 PPRINT_SET_TS(65)
2618 AS_ECHO
2619 AS_ECHO("Tor Version: ${PPRINT_COLOR_BLDBLU}Tor $PACKAGE_VERSION $PPRINT_COLOR_RST")
2620 AS_ECHO
2622 PPRINT_SUBTITLE([Build Features])
2624 PPRINT_PROP_STRING([Compiler], [$CC])
2625 PPRINT_PROP_STRING([Host OS], [$host_os])
2626 AS_ECHO
2628 test "x$enable_fatal_warnings" = "xyes" && value=1 || value=0
2629 PPRINT_PROP_BOOL([Warnings are fatal (--enable-fatal-warnings)], $value)
2631 test "x$enable_rust" = "xyes" && value=1 || value=0
2632 PPRINT_PROP_BOOL([Rust support (--enable-rust)], $value)
2634 test "x$enable_cargo_online_mode" = "xyes" && value=1 || value=0
2635 PPRINT_PROP_BOOL([Cargo Online Fetch (--enable-cargo-online-mode)], $value)
2637 test "x$enable_android" = "xyes" && value=1 || value=0
2638 PPRINT_PROP_BOOL([Android support (--enable-android)], $value)
2640 AS_ECHO
2641 PPRINT_SUBTITLE([Static Build])
2643 test "x$enable_static_tor" = "xyes" && value=1 || value=0
2644 PPRINT_PROP_BOOL([tor (--enable-static-tor)], $value)
2646 if test "x$enable_static_libevent" = "xyes"; then
2647   PPRINT_PROP_STRING([libevent], [$TOR_LIBDIR_libevent])
2648 else
2649   PPRINT_PROP_BOOL([libevent (--enable-static-libevent)], $value)
2652 if test "x$enable_static_openssl" = "xyes"; then
2653   PPRINT_PROP_STRING([libssl], [$TOR_LIBDIR_openssl])
2654 else
2655   PPRINT_PROP_BOOL([libssl (--enable-static-openssl)], $value)
2658 if test "x$enable_static_zlib" = "xyes"; then
2659   PPRINT_PROP_STRING([zlib1g], [$TOR_LIBDIR_zlib])
2660 else
2661   PPRINT_PROP_BOOL([zlib1g (--enable-static-zlib)], $value)
2664 AS_ECHO
2665 PPRINT_SUBTITLE([Optional Libraries])
2667 test "x$enable_nss" = "xyes" && value=1 || value=0
2668 PPRINT_PROP_BOOL([libnss (--enable-nss)], $value)
2670 test "x$enable_seccomp" != "xno" && value=1 || value=0
2671 PPRINT_PROP_BOOL([libseccomp (--disable-seccomp)], $value)
2673 test "x$enable_libscrypt" != "xno" && value=1 || value=0
2674 PPRINT_PROP_BOOL([libscrypt (--disable-libscrypt)], $value)
2676 test "x$enable_systemd" = "xyes" && value=1 || value=0
2677 PPRINT_PROP_BOOL([Systemd support (--enable-systemd)], $value)
2679 test "x$enable_lzma" = "xyes" && value=1 || value=0
2680 PPRINT_PROP_BOOL([liblzma (--enable-lzma)], $value)
2682 test "x$enable_zstd" = "xyes" && value=1 || value=0
2683 PPRINT_PROP_BOOL([libzstd (--enable-zstd)], $value)
2685 AS_ECHO
2686 PPRINT_SUBTITLE([Hardening])
2688 test "x$enable_gcc_hardening" != "xno" && value=1 || value=0
2689 PPRINT_PROP_BOOL([Compiler Hardening (--disable-gcc-hardening)], $value)
2691 test "x$enable_linker_hardening" != "xno" && value=1 || value=0
2692 PPRINT_PROP_BOOL([Linker Hardening (--disable-linker-hardening)], $value)
2694 test "x$fragile_hardening" = "xyes" && value=1 || value=0
2695 PPRINT_PROP_BOOL([Fragile Hardening (--enable-fragile-hardening, dev only)], $value)
2697 AS_ECHO
2698 PPRINT_SUBTITLE([Modules])
2700 m4_foreach_w([mname], MODULES,
2701   [
2702     AM_COND_IF(m4_join([], [BUILD_MODULE_], m4_toupper([]mname[])), value=1, value=0)
2703     PPRINT_PROP_BOOL([mname (--disable-module-mname)], $value)
2704   ]
2707 AS_ECHO
2708 PPRINT_SUBTITLE([Documentation])
2710 test "x$enable_asciidoc" != "xno" && value=1 || value=0
2711 PPRINT_PROP_BOOL([AsciiDoc (--disable-asciidoc)], $value)
2713 test "x$enable_manpage" != "xno" && value=1 || value=0
2714 PPRINT_PROP_BOOL([Man Pages (--disable-manpage)], $value)
2716 test "x$enable_html_manual" != "xno" && value=1 || value=0
2717 PPRINT_PROP_BOOL([HTML Manual (--disable-html-manual)], $value)
2719 AS_ECHO
2720 PPRINT_SUBTITLE([Tests])
2722 test "x$enable_unittests" != "xno" && value=1 || value=0
2723 PPRINT_PROP_BOOL([Unit tests (--disable-unittests)], $value)
2725 test "x$enable_asserts_in_tests" = "xno" && value=1 || value=0
2726 PPRINT_PROP_BOOL([assert()s enabled (--enable-asserts-in-tests, dev only)], $value)
2728 test "x$enable_coverage" = "xyes" && value=1 || value=0
2729 PPRINT_PROP_BOOL([Code Coverage (--enable-coverage)], $value)
2731 test "x$enable_libfuzzer" = "xyes" && value=1 || value=0
2732 PPRINT_PROP_BOOL([libFuzzer support (--enable-libfuzzer)], $value)
2734 test "x$enable_oss_fuzz" = "xyes" && value=1 || value=0
2735 PPRINT_PROP_BOOL([OSS-Fuzz support (--enable-oss-fuzz)], $value)
2737 AS_ECHO
2738 PPRINT_SUBTITLE([Install Directories])
2740 report_mandir="`eval eval echo $mandir`"
2741 PPRINT_PROP_STRING([Binaries], [$BINDIR])
2742 PPRINT_PROP_STRING([Configuration], [$CONFDIR])
2743 PPRINT_PROP_STRING([Man Pages], [$report_mandir])
2745 AS_ECHO
2746 AS_ECHO(["Configure Line: ./configure $configure_flags"])