1 dnl Copyright (c) 2001-2004, Roger Dingledine
2 dnl Copyright (c) 2004-2006, Roger Dingledine, Nick Mathewson
3 dnl Copyright (c) 2007-2018, The Tor Project, Inc.
4 dnl See LICENSE for licensing information
7 AC_INIT([tor],[0.4.0.0-alpha-dev])
8 AC_CONFIG_SRCDIR([src/app/main/tor_main.c])
9 AC_CONFIG_MACRO_DIR([m4])
11 # "foreign" means we don't follow GNU package layout standards
12 # "1.11" means we require automake version 1.11 or newer
13 # "subdir-objects" means put .o files in the same directory as the .c files
14 AM_INIT_AUTOMAKE([foreign 1.11 subdir-objects -Wall -Werror])
16 m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])])
17 AC_CONFIG_HEADERS([orconfig.h])
19 AC_USE_SYSTEM_EXTENSIONS
24 AC_ARG_ENABLE(openbsd-malloc,
25 AS_HELP_STRING(--enable-openbsd-malloc, [use malloc code from OpenBSD. Linux only. Deprecated: see --with-malloc]))
26 AC_ARG_ENABLE(static-openssl,
27 AS_HELP_STRING(--enable-static-openssl, [link against a static openssl library. Requires --with-openssl-dir]))
28 AC_ARG_ENABLE(static-libevent,
29 AS_HELP_STRING(--enable-static-libevent, [link against a static libevent library. Requires --with-libevent-dir]))
30 AC_ARG_ENABLE(static-zlib,
31 AS_HELP_STRING(--enable-static-zlib, [link against a static zlib library. Requires --with-zlib-dir]))
32 AC_ARG_ENABLE(static-tor,
33 AS_HELP_STRING(--enable-static-tor, [create an entirely static Tor binary. Requires --with-openssl-dir and --with-libevent-dir and --with-zlib-dir]))
34 AC_ARG_ENABLE(unittests,
35 AS_HELP_STRING(--disable-unittests, [don't build unit tests for Tor. Risky!]))
36 AC_ARG_ENABLE(coverage,
37 AS_HELP_STRING(--enable-coverage, [enable coverage support in the unit-test build]))
38 AC_ARG_ENABLE(asserts-in-tests,
39 AS_HELP_STRING(--disable-asserts-in-tests, [disable tor_assert() calls in the unit tests, for branch coverage]))
40 AC_ARG_ENABLE(system-torrc,
41 AS_HELP_STRING(--disable-system-torrc, [don't look for a system-wide torrc file]))
42 AC_ARG_ENABLE(libfuzzer,
43 AS_HELP_STRING(--enable-libfuzzer, [build extra fuzzers based on 'libfuzzer']))
44 AC_ARG_ENABLE(oss-fuzz,
45 AS_HELP_STRING(--enable-oss-fuzz, [build extra fuzzers based on 'oss-fuzz' environment]))
46 AC_ARG_ENABLE(memory-sentinels,
47 AS_HELP_STRING(--disable-memory-sentinels, [disable code that tries to prevent some kinds of memory access bugs. For fuzzing only.]))
49 AS_HELP_STRING(--enable-rust, [enable rust integration]))
50 AC_ARG_ENABLE(cargo-online-mode,
51 AS_HELP_STRING(--enable-cargo-online-mode, [Allow cargo to make network requests to fetch crates. For builds with rust only.]))
52 AC_ARG_ENABLE(restart-debugging,
53 AS_HELP_STRING(--enable-restart-debugging, [Build Tor with support for debugging in-process restart. Developers only.]))
54 AC_ARG_ENABLE(zstd-advanced-apis,
55 AS_HELP_STRING(--disable-zstd-advanced-apis, [Build without support for zstd's "static-only" APIs.]))
57 AS_HELP_STRING(--enable-nss, [Use Mozilla's NSS TLS library. (EXPERIMENTAL)]))
59 AS_HELP_STRING(--enable-pic, [Build Tor's binaries as position-independent code, suitable to link as a library.]))
61 if test "x$enable_coverage" != "xyes" -a "x$enable_asserts_in_tests" = "xno" ; then
62 AC_MSG_ERROR([Can't disable assertions outside of coverage build])
65 AM_CONDITIONAL(UNITTESTS_ENABLED, test "x$enable_unittests" != "xno")
66 AM_CONDITIONAL(COVERAGE_ENABLED, test "x$enable_coverage" = "xyes")
67 AM_CONDITIONAL(DISABLE_ASSERTS_IN_UNIT_TESTS, test "x$enable_asserts_in_tests" = "xno")
68 AM_CONDITIONAL(LIBFUZZER_ENABLED, test "x$enable_libfuzzer" = "xyes")
69 AM_CONDITIONAL(OSS_FUZZ_ENABLED, test "x$enable_oss_fuzz" = "xyes")
70 AM_CONDITIONAL(USE_RUST, test "x$enable_rust" = "xyes")
71 AM_CONDITIONAL(USE_NSS, test "x$enable_nss" = "xyes")
72 AM_CONDITIONAL(USE_OPENSSL, test "x$enable_nss" != "xyes")
74 if test "x$enable_nss" = "xyes"; then
75 AC_DEFINE(ENABLE_NSS, 1,
76 [Defined if we're building with NSS.])
78 AC_DEFINE(ENABLE_OPENSSL, 1,
79 [Defined if we're building with OpenSSL or LibreSSL])
82 if test "$enable_static_tor" = "yes"; then
83 enable_static_libevent="yes";
84 enable_static_openssl="yes";
85 enable_static_zlib="yes";
86 CFLAGS="$CFLAGS -static"
89 if test "$enable_system_torrc" = "no"; then
90 AC_DEFINE(DISABLE_SYSTEM_TORRC, 1,
91 [Defined if we're not going to look for a torrc in SYSCONF])
94 if test "$enable_memory_sentinels" = "no"; then
95 AC_DEFINE(DISABLE_MEMORY_SENTINELS, 1,
96 [Defined if we're turning off memory safety code to look for bugs])
99 AC_ARG_ENABLE(asciidoc,
100 AS_HELP_STRING(--disable-asciidoc, [don't use asciidoc (disables building of manpages)]),
101 [case "${enableval}" in
102 "yes") asciidoc=true ;;
103 "no") asciidoc=false ;;
104 *) AC_MSG_ERROR(bad value for --disable-asciidoc) ;;
105 esac], [asciidoc=true])
107 # systemd notify support
108 AC_ARG_ENABLE(systemd,
109 AS_HELP_STRING(--enable-systemd, [enable systemd notification support]),
110 [case "${enableval}" in
111 "yes") systemd=true ;;
112 "no") systemd=false ;;
113 * ) AC_MSG_ERROR(bad value for --enable-systemd) ;;
114 esac], [systemd=auto])
116 if test "$enable_restart_debugging" = "yes"; then
117 AC_DEFINE(ENABLE_RESTART_DEBUGGING, 1,
118 [Defined if we're building with support for in-process restart debugging.])
121 if test "$enable_zstd_advanced_apis" != "no"; then
122 AC_DEFINE(ENABLE_ZSTD_ADVANCED_APIS, 1,
123 [Defined if we're going to try to use zstd's "static-only" APIs.])
127 if test "x$enable_systemd" = "xno"; then
130 PKG_CHECK_MODULES(SYSTEMD,
134 if test "x$have_systemd" = "xno"; then
135 AC_MSG_NOTICE([Okay, checking for systemd a different way...])
136 PKG_CHECK_MODULES(SYSTEMD,
143 if test "x$have_systemd" = "xyes"; then
144 AC_DEFINE(HAVE_SYSTEMD,1,[Have systemd])
145 TOR_SYSTEMD_CFLAGS="${SYSTEMD_CFLAGS}"
146 TOR_SYSTEMD_LIBS="${SYSTEMD_LIBS}"
147 PKG_CHECK_MODULES(LIBSYSTEMD209, [libsystemd >= 209],
148 [AC_DEFINE(HAVE_SYSTEMD_209,1,[Have systemd v209 or more])], [])
150 AC_SUBST(TOR_SYSTEMD_CFLAGS)
151 AC_SUBST(TOR_SYSTEMD_LIBS)
153 if test "x$enable_systemd" = "xyes" -a "x$have_systemd" != "xyes" ; then
154 AC_MSG_ERROR([Explicitly requested systemd support, but systemd not found])
159 AC_DEFINE(_REENTRANT, 1, [Define on some platforms to activate x_r() functions in time.h])
163 AC_ARG_ENABLE(gcc-warnings,
164 AS_HELP_STRING(--enable-gcc-warnings, [deprecated alias for enable-fatal-warnings]))
165 AC_ARG_ENABLE(fatal-warnings,
166 AS_HELP_STRING(--enable-fatal-warnings, [tell the compiler to treat all warnings as errors.]))
167 AC_ARG_ENABLE(gcc-warnings-advisory,
168 AS_HELP_STRING(--disable-gcc-warnings-advisory, [disable the regular verbose warnings]))
170 dnl Others suggest '/gs /safeseh /nxcompat /dynamicbase' for non-gcc on Windows
171 AC_ARG_ENABLE(gcc-hardening,
172 AS_HELP_STRING(--disable-gcc-hardening, [disable compiler security checks]))
174 dnl Deprecated --enable-expensive-hardening but keep it for now for backward compat.
175 AC_ARG_ENABLE(expensive-hardening,
176 AS_HELP_STRING(--enable-expensive-hardening, [enable more fragile and expensive compiler hardening; makes Tor slower]))
177 AC_ARG_ENABLE(fragile-hardening,
178 AS_HELP_STRING(--enable-fragile-hardening, [enable more fragile and expensive compiler hardening; makes Tor slower]))
179 if test "x$enable_expensive_hardening" = "xyes" || test "x$enable_fragile_hardening" = "xyes"; then
180 fragile_hardening="yes"
181 AC_DEFINE(DEBUG_SMARTLIST, 1, [Enable smartlist debugging])
184 dnl Linker hardening options
185 dnl Currently these options are ELF specific - you can't use this with MacOSX
186 AC_ARG_ENABLE(linker-hardening,
187 AS_HELP_STRING(--disable-linker-hardening, [disable linker security fixups]))
189 AC_ARG_ENABLE(local-appdata,
190 AS_HELP_STRING(--enable-local-appdata, [default to host local application data paths on Windows]))
191 if test "$enable_local_appdata" = "yes"; then
192 AC_DEFINE(ENABLE_LOCAL_APPDATA, 1,
193 [Defined if we default to host local appdata paths on Windows])
196 AC_ARG_ENABLE(tool-name-check,
197 AS_HELP_STRING(--disable-tool-name-check, [check for sanely named toolchain when cross-compiling]))
199 AC_ARG_ENABLE(seccomp,
200 AS_HELP_STRING(--disable-seccomp, [do not attempt to use libseccomp]))
202 AC_ARG_ENABLE(libscrypt,
203 AS_HELP_STRING(--disable-libscrypt, [do not attempt to use libscrypt]))
205 dnl Enable event tracing which are transformed to debug log statement.
206 AC_ARG_ENABLE(event-tracing-debug,
207 AS_HELP_STRING(--enable-event-tracing-debug, [build with event tracing to debug log]))
208 AM_CONDITIONAL([USE_EVENT_TRACING_DEBUG], [test "x$enable_event_tracing_debug" = "xyes"])
210 if test x$enable_event_tracing_debug = xyes; then
211 AC_DEFINE([USE_EVENT_TRACING_DEBUG], [1], [Tracing framework to log debug])
212 AC_DEFINE([TOR_EVENT_TRACING_ENABLED], [1], [Compile the event tracing instrumentation])
215 dnl Enable Android only features.
216 AC_ARG_ENABLE(android,
217 AS_HELP_STRING(--enable-android, [build with Android features enabled]))
218 AM_CONDITIONAL([USE_ANDROID], [test "x$enable_android" = "xyes"])
220 if test "x$enable_android" = "xyes"; then
221 AC_DEFINE([USE_ANDROID], [1], [Compile with Android specific features enabled])
223 dnl Check if the Android log library is available.
224 AC_CHECK_HEADERS([android/log.h])
225 AC_SEARCH_LIBS(__android_log_write, [log])
230 dnl Tor modules options. These options are namespaced with --disable-module-XXX
234 m4_define(MODULES, dirauth)
236 dnl Directory Authority module.
237 AC_ARG_ENABLE([module-dirauth],
238 AS_HELP_STRING([--disable-module-dirauth],
239 [Do not build tor with the dirauth module]),
240 [], dnl Action if-given
241 AC_DEFINE([HAVE_MODULE_DIRAUTH], [1],
242 [Compile with Directory Authority feature support]))
243 AM_CONDITIONAL(BUILD_MODULE_DIRAUTH, [test "x$enable_module_dirauth" != "xno"])
245 dnl Helper variables.
246 TOR_MODULES_ALL_ENABLED=
247 AC_DEFUN([ADD_MODULE], [
248 MODULE=m4_toupper($1)
249 TOR_MODULES_ALL_ENABLED="${TOR_MODULES_ALL_ENABLED} -DHAVE_MODULE_${MODULE}=1"
251 m4_foreach_w([module], MODULES, [ADD_MODULE([module])])
252 AC_SUBST(TOR_MODULES_ALL_ENABLED)
254 dnl check for the correct "ar" when cross-compiling.
255 dnl (AM_PROG_AR was new in automake 1.11.2, which we do not yet require,
256 dnl so kludge up a replacement for the case where it isn't there yet.)
257 m4_ifdef([AM_PROG_AR],
259 [AN_MAKEVAR([AR], [AC_PROG_AR])
260 AN_PROGRAM([ar], [AC_PROG_AR])
261 AC_DEFUN([AC_PROG_AR], [AC_CHECK_TOOL([AR], [ar], [:])])
264 dnl Check whether the above macro has settled for a simply named tool even
265 dnl though we're cross compiling. We must do this before running AC_PROG_CC,
266 dnl because that will find any cc on the system, not only the cross-compiler,
267 dnl and then verify that a binary built with this compiler runs on the
268 dnl build system. It will then come to the false conclusion that we're not
270 if test "x$enable_tool_name_check" != "xno"; then
271 if test "x$ac_tool_warned" = "xyes"; then
272 AC_MSG_ERROR([We are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
273 elif test "x$ac_ct_AR" != "x" -a "x$cross_compiling" = "xmaybe"; then
274 AC_MSG_ERROR([We think we are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
284 AC_ARG_VAR([PERL], [path to Perl binary])
285 AC_CHECK_PROGS([PERL], [perl])
286 AM_CONDITIONAL(USE_PERL, [test "x$ac_cv_prog_PERL" != "x"])
288 dnl check for asciidoc and a2x
289 AC_PATH_PROG([ASCIIDOC], [asciidoc], none)
290 AC_PATH_PROGS([A2X], [a2x a2x.py], none)
292 AM_CONDITIONAL(USE_ASCIIDOC, test "x$asciidoc" = "xtrue")
297 AC_ARG_VAR([PYTHON], [path to Python binary])
298 AC_CHECK_PROGS(PYTHON, [ \
300 python3.8 python3.7 python3.6 python3.5 python3.4 \
303 if test "x$PYTHON" = "x"; then
304 AC_MSG_WARN([Python unavailable; some tests will not be run.])
306 AM_CONDITIONAL(USEPYTHON, [test "x$PYTHON" != "x"])
308 dnl List all external rust crates we depend on here. Include the version
313 AC_SUBST(rust_crates)
315 ifdef([AC_C_FLEXIBLE_ARRAY_MEMBER], [
316 AC_C_FLEXIBLE_ARRAY_MEMBER
318 dnl Maybe we've got an old autoconf...
319 AC_CACHE_CHECK([for flexible array members],
323 struct abc { int a; char b[]; };
325 struct abc *def = malloc(sizeof(struct abc)+sizeof(char));
328 [tor_cv_c_flexarray=yes],
329 [tor_cv_c_flexarray=no])])
330 if test "$tor_cv_flexarray" = "yes"; then
331 AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
333 AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [1], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
337 AC_CACHE_CHECK([for working C99 mid-block declaration syntax],
340 [AC_LANG_PROGRAM([], [int x; x = 3; int y; y = 4 + x;])],
341 [tor_cv_c_c99_decl=yes],
342 [tor_cv_c_c99_decl=no] )])
343 if test "$tor_cv_c_c99_decl" != "yes"; then
344 AC_MSG_ERROR([Your compiler doesn't support c99 mid-block declarations. This is required as of Tor 0.2.6.x])
347 AC_CACHE_CHECK([for working C99 designated initializers],
348 tor_cv_c_c99_designated_init,
350 [AC_LANG_PROGRAM([struct s { int a; int b; };],
351 [[ struct s ss = { .b = 5, .a = 6 }; ]])],
352 [tor_cv_c_c99_designated_init=yes],
353 [tor_cv_c_c99_designated_init=no] )])
355 if test "$tor_cv_c_c99_designated_init" != "yes"; then
356 AC_MSG_ERROR([Your compiler doesn't support c99 designated initializers. This is required as of Tor 0.2.6.x])
360 AC_ARG_WITH(tor-user,
361 AS_HELP_STRING(--with-tor-user=NAME, [specify username for tor daemon]),
369 AC_ARG_WITH(tor-group,
370 AS_HELP_STRING(--with-tor-group=NAME, [specify group name for tor daemon]),
378 dnl If _WIN32 is defined and non-zero, we are building for win32
379 AC_MSG_CHECKING([for win32])
380 AC_RUN_IFELSE([AC_LANG_SOURCE([
381 int main(int c, char **v) {
392 bwin32=true; AC_MSG_RESULT([yes]),
393 bwin32=false; AC_MSG_RESULT([no]),
394 bwin32=cross; AC_MSG_RESULT([cross])
397 if test "$bwin32" = "cross"; then
398 AC_MSG_CHECKING([for win32 (cross)])
399 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
401 int main(int c, char **v) {return 0;}
404 int main(int c, char **v) {return x(y);}
407 bwin32=true; AC_MSG_RESULT([yes]),
408 bwin32=false; AC_MSG_RESULT([no]))
413 /* Defined to access windows functions and definitions for >=WinXP */
415 # define WINVER 0x0501
418 /* Defined to access _other_ windows functions and definitions for >=WinXP */
419 # ifndef _WIN32_WINNT
420 # define _WIN32_WINNT 0x0501
423 /* Defined to avoid including some windows headers as part of Windows.h */
424 # ifndef WIN32_LEAN_AND_MEAN
425 # define WIN32_LEAN_AND_MEAN 1
430 AM_CONDITIONAL(WIN32, test "x$bwin32" = "xtrue")
431 AM_CONDITIONAL(BUILD_NT_SERVICES, test "x$bwin32" = "xtrue")
432 AM_CONDITIONAL(BUILD_LIBTORRUNNER, test "x$bwin32" != "xtrue")
434 dnl Enable C99 when compiling with MIPSpro
435 AC_MSG_CHECKING([for MIPSpro compiler])
436 AC_COMPILE_IFELSE([AC_LANG_PROGRAM(, [
437 #if (defined(__sgi) && defined(_COMPILER_VERSION))
442 bmipspro=false; AC_MSG_RESULT(no),
443 bmipspro=true; AC_MSG_RESULT(yes))
445 if test "$bmipspro" = "true"; then
446 CFLAGS="$CFLAGS -c99"
451 AC_ARG_VAR([TOR_RUST_TARGET], [Rust target, must be specified when cross-compiling (HOST != BUILD). example: i686-pc-windows-gnu])
453 if test "x$enable_rust" = "xyes"; then
454 AC_ARG_VAR([RUSTC], [path to the rustc binary])
455 AC_CHECK_PROG([RUSTC], [rustc], [rustc],[no])
456 if test "x$RUSTC" = "xno"; then
457 AC_MSG_ERROR([rustc unavailable but rust integration requested.])
460 AC_ARG_VAR([CARGO], [path to the cargo binary])
461 AC_CHECK_PROG([CARGO], [cargo], [cargo],[no])
462 if test "x$CARGO" = "xno"; then
463 AC_MSG_ERROR([cargo unavailable but rust integration requested.])
466 AC_DEFINE([HAVE_RUST], 1, [have Rust])
467 if test "x$enable_fatal_warnings" = "xyes"; then
472 if test "x$enable_cargo_online_mode" = "xyes"; then
476 CARGO_ONLINE=--frozen
479 dnl When we're not allowed to touch the network, we need crate dependencies
480 dnl locally available.
481 AC_MSG_CHECKING([rust crate dependencies])
482 AC_ARG_VAR([TOR_RUST_DEPENDENCIES], [path to directory with local crate mirror])
483 if test "x$TOR_RUST_DEPENDENCIES" = "x"; then
484 TOR_RUST_DEPENDENCIES="${srcdir}/src/ext/rust/crates"
486 dnl Check whether the path exists before we try to cd into it.
487 if test ! -d "$TOR_RUST_DEPENDENCIES"; then
488 AC_MSG_ERROR([Rust dependency directory $TOR_RUST_DEPENDENCIES does not exist. Specify a dependency directory using the TOR_RUST_DEPENDENCIES variable or allow cargo to fetch crates using --enable-cargo-online-mode.])
491 dnl Make the path absolute, since we'll be using it from within a
493 TOR_RUST_DEPENDENCIES=$(cd "$TOR_RUST_DEPENDENCIES" ; pwd)
495 for dep in $rust_crates; do
496 if test ! -d "$TOR_RUST_DEPENDENCIES"/"$dep"; then
497 AC_MSG_ERROR([Failure to find rust dependency $TOR_RUST_DEPENDENCIES/$dep. Specify a dependency directory using the TOR_RUST_DEPENDENCIES variable or allow cargo to fetch crates using --enable-cargo-online-mode.])
501 if test "x$ERRORED" = "x"; then
506 dnl This is a workaround for #46797
507 dnl (a.k.a https://github.com/rust-lang/rust/issues/46797 ). Once the
508 dnl upstream bug is fixed, we can remove this workaround.
511 TOR_RUST_EXTRA_LIBS="-lresolv"
515 dnl For now both MSVC and MinGW rust libraries will output static libs with
516 dnl the MSVC naming convention.
517 if test "$bwin32" = "true"; then
518 tor_rust_static_name=tor_rust.lib
520 tor_rust_static_name=libtor_rust.a
525 if test -n "$TOR_RUST_TARGET"; then
526 if test "$host" = "$build"; then
527 AC_MSG_ERROR([HOST = BUILD is invalid if TOR_RUST_TARGET is specified, see configure --help for more information.])
529 RUST_TARGET_PROP="target = '$TOR_RUST_TARGET'"
530 TOR_RUST_LIB_PATH="src/rust/target/$TOR_RUST_TARGET/release/$tor_rust_static_name"
532 if test "$host" != "$build"; then
533 AC_MSG_ERROR([TOR_RUST_TARGET must be specified when cross-compiling with Rust enabled.])
536 TOR_RUST_LIB_PATH="src/rust/target/release/$tor_rust_static_name"
539 AC_SUBST(RUST_TARGET_PROP)
540 AC_SUBST(TOR_RUST_LIB_PATH)
541 AC_SUBST(CARGO_ONLINE)
545 dnl Let's check the rustc version, too
546 AC_MSG_CHECKING([rust version])
547 RUSTC_VERSION=`$RUSTC --version`
548 RUSTC_VERSION_MAJOR=`$RUSTC --version | cut -d ' ' -f 2 | cut -d '.' -f 1`
549 RUSTC_VERSION_MINOR=`$RUSTC --version | cut -d ' ' -f 2 | cut -d '.' -f 2`
550 if test "x$RUSTC_VERSION_MAJOR" = "x" -o "x$RUSTC_VERSION_MINOR" = "x"; then
551 AC_MSG_ERROR([rustc version couldn't be identified])
553 if test "$RUSTC_VERSION_MAJOR" -lt 2 -a "$RUSTC_VERSION_MINOR" -lt 14; then
554 AC_MSG_ERROR([rustc must be at least version 1.14])
556 AC_MSG_RESULT([$RUSTC_VERSION])
559 AC_SUBST(TOR_RUST_EXTRA_LIBS)
561 AC_SEARCH_LIBS(socket, [socket network])
562 AC_SEARCH_LIBS(gethostbyname, [nsl])
563 AC_SEARCH_LIBS(dlopen, [dl])
564 AC_SEARCH_LIBS(inet_aton, [resolv])
565 AC_SEARCH_LIBS(backtrace, [execinfo])
567 AC_SEARCH_LIBS([clock_gettime], [rt])
568 if test "$LIBS" != "$saved_LIBS"; then
569 # Looks like we need -lrt for clock_gettime().
573 if test "$bwin32" = "false"; then
574 AC_SEARCH_LIBS(pthread_create, [pthread])
575 AC_SEARCH_LIBS(pthread_detach, [pthread])
578 AM_CONDITIONAL(THREADS_WIN32, test "$bwin32" = "true")
579 AM_CONDITIONAL(THREADS_PTHREADS, test "$bwin32" = "false")
583 RtlSecureZeroMemory \
587 backtrace_symbols_fd \
593 get_current_dir_name \
602 gnu_get_libc_version \
638 # Apple messed up when they added some functions: they
639 # forgot to decorate them with appropriate AVAILABLE_MAC_OS_VERSION
642 # We should only probe for these functions if we are sure that we
643 # are not targeting OS X 10.9 or earlier.
644 AC_MSG_CHECKING([for a pre-Yosemite OS X build target])
645 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
647 # include <AvailabilityMacros.h>
648 # ifndef MAC_OS_X_VERSION_10_10
649 # define MAC_OS_X_VERSION_10_10 101000
651 # if defined(MAC_OS_X_VERSION_MIN_REQUIRED)
652 # if MAC_OS_X_VERSION_MIN_REQUIRED < MAC_OS_X_VERSION_10_10
653 # error "Running on Mac OS X 10.9 or earlier"
658 [on_macos_pre_10_10=no ; AC_MSG_RESULT([no])],
659 [on_macos_pre_10_10=yes; AC_MSG_RESULT([yes])])
661 if test "$on_macos_pre_10_10" = "no"; then
663 mach_approximate_time \
667 # We should only probe for these functions if we are sure that we
668 # are not targeting OSX 10.11 or earlier.
669 AC_MSG_CHECKING([for a pre-Sierra OSX build target])
670 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
672 # include <AvailabilityMacros.h>
673 # ifndef MAC_OS_X_VERSION_10_12
674 # define MAC_OS_X_VERSION_10_12 101200
676 # if defined(MAC_OS_X_VERSION_MIN_REQUIRED)
677 # if MAC_OS_X_VERSION_MIN_REQUIRED < MAC_OS_X_VERSION_10_12
678 # error "Running on Mac OSX 10.11 or earlier"
683 [on_macos_pre_10_12=no ; AC_MSG_RESULT([no])],
684 [on_macos_pre_10_12=yes; AC_MSG_RESULT([yes])])
686 if test "$on_macos_pre_10_12" = "no"; then
693 if test "$bwin32" != "true"; then
694 AC_CHECK_HEADERS(pthread.h)
695 AC_CHECK_FUNCS(pthread_create)
696 AC_CHECK_FUNCS(pthread_condattr_setclock)
699 if test "$bwin32" = "true"; then
700 AC_CHECK_DECLS([SecureZeroMemory, _getwch], , , [
707 AM_CONDITIONAL(BUILD_READPASSPHRASE_C,
708 test "x$ac_cv_func_readpassphrase" = "xno" && test "$bwin32" = "false")
710 AC_MSG_CHECKING([whether free(NULL) works])
711 AC_RUN_IFELSE([AC_LANG_PROGRAM([
717 [free_null_ok=true; AC_MSG_RESULT(yes)],
718 [free_null_ok=false; AC_MSG_RESULT(no)],
719 [free_null_ok=cross; AC_MSG_RESULT(cross)])
721 if test "$free_null_ok" = "false"; then
722 AC_MSG_ERROR([Your libc implementation doesn't allow free(NULL), as required by C99.])
725 dnl ------------------------------------------------------
726 dnl Where do you live, libevent? And how do we call you?
728 if test "$bwin32" = "true"; then
729 TOR_LIB_WS32=-lws2_32
730 TOR_LIB_IPHLPAPI=-liphlpapi
731 # Some of the cargo-cults recommend -lwsock32 as well, but I don't
732 # think it's actually necessary.
734 TOR_LIB_USERENV=-luserenv
740 AC_SUBST(TOR_LIB_WS32)
741 AC_SUBST(TOR_LIB_GDI)
742 AC_SUBST(TOR_LIB_IPHLPAPI)
743 AC_SUBST(TOR_LIB_USERENV)
745 tor_libevent_pkg_redhat="libevent"
746 tor_libevent_pkg_debian="libevent-dev"
747 tor_libevent_devpkg_redhat="libevent-devel"
748 tor_libevent_devpkg_debian="libevent-dev"
750 dnl On Gnu/Linux or any place we require it, we'll add librt to the Libevent
751 dnl linking for static builds.
752 STATIC_LIBEVENT_FLAGS=""
753 if test "$enable_static_libevent" = "yes"; then
754 if test "$have_rt" = "yes"; then
755 STATIC_LIBEVENT_FLAGS=" -lrt "
759 TOR_SEARCH_LIBRARY(libevent, $trylibeventdir, [-levent $STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32], [
761 #include <winsock2.h>
763 #include <sys/time.h>
764 #include <sys/types.h>
765 #include <event2/event.h>], [
767 #include <winsock2.h>
770 struct event_base *event_base_new(void);
771 void event_base_free(struct event_base *);],
774 {WSADATA d; WSAStartup(0x101,&d); }
776 event_base_free(event_base_new());
777 ], [--with-libevent-dir], [/opt/libevent])
779 dnl Determine the incantation needed to link libevent.
781 save_LDFLAGS="$LDFLAGS"
782 save_CPPFLAGS="$CPPFLAGS"
784 LIBS="$STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32 $save_LIBS"
785 LDFLAGS="$TOR_LDFLAGS_libevent $LDFLAGS"
786 CPPFLAGS="$TOR_CPPFLAGS_libevent $CPPFLAGS"
788 AC_CHECK_HEADERS(event2/event.h event2/dns.h event2/bufferevent_ssl.h)
790 if test "$enable_static_libevent" = "yes"; then
791 if test "$tor_cv_library_libevent_dir" = "(system)"; then
792 AC_MSG_ERROR("You must specify an explicit --with-libevent-dir=x option when using --enable-static-libevent")
794 TOR_LIBEVENT_LIBS="$TOR_LIBDIR_libevent/libevent.a $STATIC_LIBEVENT_FLAGS"
797 if test "x$ac_cv_header_event2_event_h" = "xyes"; then
798 AC_SEARCH_LIBS(event_new, [event event_core], , AC_MSG_ERROR("libevent2 is installed but linking it failed while searching for event_new"))
799 AC_SEARCH_LIBS(evdns_base_new, [event event_extra], , AC_MSG_ERROR("libevent2 is installed but linking it failed while searching for evdns_base_new"))
801 if test "$ac_cv_search_event_new" != "none required"; then
802 TOR_LIBEVENT_LIBS="$ac_cv_search_event_new"
804 if test "$ac_cv_search_evdns_base_new" != "none required"; then
805 TOR_LIBEVENT_LIBS="$ac_cv_search_evdns_base_new $TOR_LIBEVENT_LIBS"
808 AC_MSG_ERROR("libevent2 is required but the headers could not be found")
812 dnl Now check for particular libevent functions.
813 AC_CHECK_FUNCS([evutil_secure_rng_set_urandom_device_file \
814 evutil_secure_rng_add_bytes \
815 evdns_base_get_nameserver_addr \
820 LDFLAGS="$save_LDFLAGS"
821 CPPFLAGS="$save_CPPFLAGS"
823 dnl Check that libevent is at least at version 2.0.10, the first stable
824 dnl release of its series
825 CPPFLAGS="$CPPFLAGS $TOR_CPPFLAGS_libevent"
826 AC_MSG_CHECKING([whether Libevent is new enough])
827 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
828 #include <event2/event.h>
829 #if !defined(LIBEVENT_VERSION_NUMBER) || LIBEVENT_VERSION_NUMBER < 0x02000a00
835 ])], [ AC_MSG_RESULT([yes]) ],
836 [ AC_MSG_RESULT([no])
837 AC_MSG_ERROR([Libevent is not new enough. We require 2.0.10-stable or later]) ] )
840 LDFLAGS="$save_LDFLAGS"
841 CPPFLAGS="$save_CPPFLAGS"
843 AC_SUBST(TOR_LIBEVENT_LIBS)
845 dnl ------------------------------------------------------
846 dnl Where do you live, libm?
848 dnl On some platforms (Haiku/BeOS) the math library is
849 dnl part of libroot. In which case don't link against lm
852 AC_SEARCH_LIBS(pow, [m], , AC_MSG_ERROR([Could not find pow in libm or libc.]))
853 if test "$ac_cv_search_pow" != "none required"; then
854 TOR_LIB_MATH="$ac_cv_search_pow"
857 AC_SUBST(TOR_LIB_MATH)
859 dnl ------------------------------------------------------
860 dnl Hello, NSS. You're new around here.
861 if test "x$enable_nss" = "xyes"; then
862 PKG_CHECK_MODULES(NSS,
865 [have_nss=no; AC_MSG_ERROR([You asked for NSS but I can't find it.])])
870 dnl ------------------------------------------------------
871 dnl Where do you live, openssl? And how do we call you?
873 if test "x$enable_nss" != "xyes"; then
875 tor_openssl_pkg_redhat="openssl"
876 tor_openssl_pkg_debian="libssl-dev"
877 tor_openssl_devpkg_redhat="openssl-devel"
878 tor_openssl_devpkg_debian="libssl-dev"
880 ALT_openssl_WITHVAL=""
882 AS_HELP_STRING(--with-ssl-dir=PATH, [obsolete alias for --with-openssl-dir]),
884 if test "x$withval" != "xno" && test "x$withval" != "x"; then
885 ALT_openssl_WITHVAL="$withval"
889 AC_MSG_NOTICE([Now, we'll look for OpenSSL >= 1.0.1])
890 TOR_SEARCH_LIBRARY(openssl, $tryssldir, [-lssl -lcrypto $TOR_LIB_GDI $TOR_LIB_WS32],
891 [#include <openssl/ssl.h>
892 char *getenv(const char *);],
893 [struct ssl_cipher_st;
894 unsigned SSL_CIPHER_get_id(const struct ssl_cipher_st *);
895 char *getenv(const char *);],
896 dnl This funny-looking test program calls getenv, so that the compiler
897 dnl will neither make code that call SSL_CIPHER_get_id(NULL) [producing
898 dnl a crash], nor optimize out the call to SSL_CIPHER_get_id().
899 dnl We look for SSL_cipher_get_id() because it is present in
900 dnl OpenSSL >=1.0.1, because it is not deprecated, and because Tor
902 [if (getenv("THIS_SHOULDNT_BE_SET_X201803")) SSL_CIPHER_get_id((void *)0);], [],
903 [/usr/local/opt/openssl /usr/local/openssl /usr/lib/openssl /usr/local/ssl /usr/lib/ssl /usr/local /opt/openssl])
905 dnl XXXX check for OPENSSL_VERSION_NUMBER == SSLeay()
907 if test "$enable_static_openssl" = "yes"; then
908 if test "$tor_cv_library_openssl_dir" = "(system)"; then
909 AC_MSG_ERROR("You must specify an explicit --with-openssl-dir=x option when using --enable-static-openssl")
911 TOR_OPENSSL_LIBS="$TOR_LIBDIR_openssl/libssl.a $TOR_LIBDIR_openssl/libcrypto.a"
914 TOR_OPENSSL_LIBS="-lssl -lcrypto"
916 AC_SUBST(TOR_OPENSSL_LIBS)
918 dnl Now check for particular openssl functions.
920 save_LDFLAGS="$LDFLAGS"
921 save_CPPFLAGS="$CPPFLAGS"
922 LIBS="$TOR_OPENSSL_LIBS $LIBS"
923 LDFLAGS="$TOR_LDFLAGS_openssl $LDFLAGS"
924 CPPFLAGS="$TOR_CPPFLAGS_openssl $CPPFLAGS"
926 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
927 #include <openssl/opensslv.h>
928 #if !defined(LIBRESSL_VERSION_NUMBER) && OPENSSL_VERSION_NUMBER < 0x1000100fL
933 [ AC_MSG_ERROR([OpenSSL is too old. We require 1.0.1 or later. You can specify a path to a newer one with --with-openssl-dir.]) ])
935 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
936 #include <openssl/opensslv.h>
937 #include <openssl/evp.h>
938 #if defined(OPENSSL_NO_EC) || defined(OPENSSL_NO_ECDH) || defined(OPENSSL_NO_ECDSA)
941 #if !defined(NID_X9_62_prime256v1) || !defined(NID_secp224r1)
942 #error "curves unavailable"
946 [ AC_MSG_ERROR([OpenSSL is built without full ECC support, including curves P256 and P224. You can specify a path to one with ECC support with --with-openssl-dir.]) ])
948 AC_CHECK_MEMBERS([struct ssl_method_st.get_cipher_by_char], , ,
949 [#include <openssl/ssl.h>
953 ERR_load_KDF_strings \
954 SSL_SESSION_get_master_key \
955 SSL_get_server_random \
956 SSL_get_client_ciphers \
957 SSL_get_client_random \
958 SSL_CTX_set1_groups_list \
960 SSL_CTX_set_security_level \
964 dnl Check if OpenSSL has scrypt implementation.
965 AC_CHECK_FUNCS([ EVP_PBE_scrypt ])
967 dnl Check if OpenSSL structures are opaque
968 AC_CHECK_MEMBERS([SSL.state], , ,
969 [#include <openssl/ssl.h>
972 AC_CHECK_SIZEOF(SHA_CTX, , [AC_INCLUDES_DEFAULT()
973 #include <openssl/sha.h>
978 dnl ======================================================================
981 dnl Define the set of checks for KIST scheduler support.
982 AC_DEFUN([CHECK_KIST_SUPPORT],[
983 dnl KIST needs struct tcp_info and for certain members to exist.
985 [struct tcp_info.tcpi_unacked, struct tcp_info.tcpi_snd_mss],
986 , ,[[#include <netinet/tcp.h>]])
987 dnl KIST needs SIOCOUTQNSD to exist for an ioctl call.
988 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
989 #include <linux/sockios.h>
993 ])], have_siocoutqnsd=yes, have_siocoutqnsd=no)
994 if test "x$have_siocoutqnsd" = "xyes"; then
995 if test "x$ac_cv_member_struct_tcp_info_tcpi_unacked" = "xyes"; then
996 if test "x$ac_cv_member_struct_tcp_info_tcpi_snd_mss" = "xyes"; then
997 have_kist_support=yes
1002 dnl Now, trigger the check.
1004 AS_IF([test "x$have_kist_support" = "xyes"],
1005 [AC_DEFINE(HAVE_KIST_SUPPORT, 1, [Defined if KIST scheduler is supported
1007 [AC_MSG_NOTICE([KIST scheduler can't be used. Missing support.])])
1010 LDFLAGS="$save_LDFLAGS"
1011 CPPFLAGS="$save_CPPFLAGS"
1013 dnl ------------------------------------------------------
1014 dnl Where do you live, zlib? And how do we call you?
1016 tor_zlib_pkg_redhat="zlib"
1017 tor_zlib_pkg_debian="zlib1g"
1018 tor_zlib_devpkg_redhat="zlib-devel"
1019 tor_zlib_devpkg_debian="zlib1g-dev"
1021 TOR_SEARCH_LIBRARY(zlib, $tryzlibdir, [-lz],
1022 [#include <zlib.h>],
1023 [const char * zlibVersion(void);],
1024 [zlibVersion();], [--with-zlib-dir],
1027 if test "$enable_static_zlib" = "yes"; then
1028 if test "$tor_cv_library_zlib_dir" = "(system)"; then
1029 AC_MSG_ERROR("You must specify an explicit --with-zlib-dir=x option when
1030 using --enable-static-zlib")
1032 TOR_ZLIB_LIBS="$TOR_LIBDIR_zlib/libz.a"
1037 AC_SUBST(TOR_ZLIB_LIBS)
1039 dnl ------------------------------------------------------
1040 dnl Where we do we find lzma?
1043 AS_HELP_STRING(--enable-lzma, [enable support for the LZMA compression scheme.]),
1044 [case "${enableval}" in
1047 * ) AC_MSG_ERROR(bad value for --enable-lzma) ;;
1050 if test "x$enable_lzma" = "xno"; then
1053 PKG_CHECK_MODULES([LZMA],
1058 if test "x$have_lzma" = "xno" ; then
1059 AC_MSG_WARN([Unable to find liblzma.])
1063 if test "x$have_lzma" = "xyes"; then
1064 AC_DEFINE(HAVE_LZMA,1,[Have LZMA])
1065 TOR_LZMA_CFLAGS="${LZMA_CFLAGS}"
1066 TOR_LZMA_LIBS="${LZMA_LIBS}"
1068 AC_SUBST(TOR_LZMA_CFLAGS)
1069 AC_SUBST(TOR_LZMA_LIBS)
1071 dnl ------------------------------------------------------
1072 dnl Where we do we find zstd?
1075 AS_HELP_STRING(--enable-zstd, [enable support for the Zstandard compression scheme.]),
1076 [case "${enableval}" in
1079 * ) AC_MSG_ERROR(bad value for --enable-zstd) ;;
1082 if test "x$enable_zstd" = "xno"; then
1085 PKG_CHECK_MODULES([ZSTD],
1090 if test "x$have_zstd" = "xno" ; then
1091 AC_MSG_WARN([Unable to find libzstd.])
1095 if test "x$have_zstd" = "xyes"; then
1096 AC_DEFINE(HAVE_ZSTD,1,[Have Zstd])
1097 TOR_ZSTD_CFLAGS="${ZSTD_CFLAGS}"
1098 TOR_ZSTD_LIBS="${ZSTD_LIBS}"
1100 dnl now check for zstd functions
1102 save_CFLAGS="$CFLAGS"
1103 LIBS="$LIBS $ZSTD_LIBS"
1104 CFLAGS="$CFLAGS $ZSTD_CFLAGS"
1105 AC_CHECK_FUNCS(ZSTD_estimateCStreamSize \
1106 ZSTD_estimateDCtxSize)
1108 CFLAGS="$save_CFLAGS"
1110 AC_SUBST(TOR_ZSTD_CFLAGS)
1111 AC_SUBST(TOR_ZSTD_LIBS)
1113 dnl ----------------------------------------------------------------------
1114 dnl Check if libcap is available for capabilities.
1116 tor_cap_pkg_debian="libcap2"
1117 tor_cap_pkg_redhat="libcap"
1118 tor_cap_devpkg_debian="libcap-dev"
1119 tor_cap_devpkg_redhat="libcap-devel"
1121 AC_CHECK_LIB([cap], [cap_init], [],
1122 AC_MSG_NOTICE([Libcap was not found. Capabilities will not be usable.])
1124 AC_CHECK_FUNCS(cap_set_proc)
1126 dnl ---------------------------------------------------------------------
1127 dnl Now that we know about our major libraries, we can check for compiler
1128 dnl and linker hardening options. We need to do this with the libraries known,
1129 dnl since sometimes the linker will like an option but not be willing to
1130 dnl use it with a build of a library.
1132 all_ldflags_for_check="$TOR_LDFLAGS_zlib $TOR_LDFLAGS_openssl $TOR_LDFLAGS_libevent"
1133 all_libs_for_check="$TOR_ZLIB_LIBS $TOR_LIB_MATH $TOR_LIBEVENT_LIBS $TOR_OPENSSL_LIBS $TOR_SYSTEMD_LIBS $TOR_LIB_WS32 $TOR_LIB_GDI $TOR_LIB_USERENV $TOR_CAP_LIBS"
1141 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
1142 #if !defined(__clang__)
1144 #endif])], have_clang=yes, have_clang=no)
1146 if test "x$enable_pic" = "xyes"; then
1147 TOR_CHECK_CFLAGS(-fPIC)
1150 if test "x$enable_gcc_hardening" != "xno"; then
1151 CFLAGS="$CFLAGS -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2"
1152 if test "x$have_clang" = "xyes"; then
1153 TOR_CHECK_CFLAGS(-Qunused-arguments)
1155 TOR_CHECK_CFLAGS(-fstack-protector-all, also_link)
1156 AS_VAR_PUSHDEF([can_compile], [tor_cv_cflags_-fstack-protector-all])
1157 AS_VAR_PUSHDEF([can_link], [tor_can_link_-fstack-protector-all])
1158 m4_ifdef([AS_VAR_IF],[
1159 AS_VAR_IF(can_compile, [yes],
1160 AS_VAR_IF(can_link, [yes],
1162 AC_MSG_ERROR([We tried to build with stack protection; it looks like your compiler supports it but your libc does not provide it. Are you missing libssp? (You can --disable-gcc-hardening to ignore this error.)]))
1164 AS_VAR_POPDEF([can_link])
1165 AS_VAR_POPDEF([can_compile])
1166 TOR_CHECK_CFLAGS(-Wstack-protector)
1167 TOR_CHECK_CFLAGS(--param ssp-buffer-size=1)
1168 if test "$bwin32" = "false" && test "$enable_libfuzzer" != "yes" && test "$enable_oss_fuzz" != "yes"; then
1169 if test "$enable_pic" != "yes"; then
1170 # If we have already enabled -fPIC, then we don't also need to
1171 # compile with -fPIE...
1172 TOR_CHECK_CFLAGS(-fPIE)
1174 # ... but we want to link our executables with -pie in any case, since
1175 # they're executables, not a library.
1176 TOR_CHECK_LDFLAGS(-pie, "$all_ldflags_for_check", "$all_libs_for_check")
1178 TOR_TRY_COMPILE_WITH_CFLAGS(-fwrapv, also_link, CFLAGS_FWRAPV="-fwrapv", true)
1181 if test "$fragile_hardening" = "yes"; then
1182 TOR_TRY_COMPILE_WITH_CFLAGS(-ftrapv, also_link, CFLAGS_FTRAPV="-ftrapv", true)
1183 if test "$tor_cv_cflags__ftrapv" = "yes" && test "$tor_can_link__ftrapv" != "yes"; then
1184 AC_MSG_WARN([The compiler supports -ftrapv, but for some reason I was not able to link with -ftrapv. Are you missing run-time support? Run-time hardening will not work as well as it should.])
1187 if test "$tor_cv_cflags__ftrapv" != "yes"; then
1188 AC_MSG_ERROR([You requested fragile hardening, but the compiler does not seem to support -ftrapv.])
1191 TOR_TRY_COMPILE_WITH_CFLAGS([-fsanitize=address], also_link, CFLAGS_ASAN="-fsanitize=address", true)
1192 if test "$tor_cv_cflags__fsanitize_address" = "yes" && test "$tor_can_link__fsanitize_address" != "yes"; then
1193 AC_MSG_ERROR([The compiler supports -fsanitize=address, but for some reason I was not able to link when using it. Are you missing run-time support? With GCC you need libubsan.*, and with Clang you need libclang_rt.ubsan*])
1196 TOR_TRY_COMPILE_WITH_CFLAGS([-fsanitize=undefined], also_link, CFLAGS_UBSAN="-fsanitize=undefined", true)
1197 if test "$tor_cv_cflags__fsanitize_address" = "yes" && test "$tor_can_link__fsanitize_address" != "yes"; then
1198 AC_MSG_ERROR([The compiler supports -fsanitize=undefined, but for some reason I was not able to link when using it. Are you missing run-time support? With GCC you need libasan.*, and with Clang you need libclang_rt.ubsan*])
1201 TOR_CHECK_CFLAGS([-fno-omit-frame-pointer])
1204 dnl Find the correct libraries to add in order to use the sanitizers.
1206 dnl When building Rust, Cargo will run the linker with the -nodefaultlibs
1207 dnl option, which will prevent the compiler from linking the sanitizer
1208 dnl libraries it needs. We need to specify them manually.
1210 dnl What's more, we need to specify them in a linker script rather than
1211 dnl from build.rs: these options aren't allowed in the cargo:rustc-flags
1213 RUST_LINKER_OPTIONS=""
1214 if test "x$have_clang" = "xyes"; then
1215 if test "x$CFLAGS_ASAN" != "x"; then
1216 RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -Clink-arg=$CFLAGS_ASAN -Cdefault-linker-libraries"
1218 if test "x$CFLAGS_UBSAN" != "x"; then
1219 RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -Clink-arg=$CFLAGS_UBSAN -Cdefault-linker-libraries"
1222 if test "x$CFLAGS_ASAN" != "x"; then
1223 RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -Clink-arg=-fsanitize=address -Cdefault-linker-libraries"
1225 if test "x$CFLAGS_UBSAN" != "x"; then
1226 RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -Clink-arg=-fsanitize=undefined -Cdefault-linker-libraries"
1229 AC_SUBST(RUST_LINKER_OPTIONS)
1231 CFLAGS_BUGTRAP="$CFLAGS_FTRAPV $CFLAGS_ASAN $CFLAGS_UBSAN"
1232 CFLAGS_CONSTTIME="$CFLAGS_FWRAPV"
1234 mulodi_fixes_ftrapv=no
1235 if test "$have_clang" = "yes"; then
1236 saved_CFLAGS="$CFLAGS"
1237 CFLAGS="$CFLAGS $CFLAGS_FTRAPV"
1238 AC_MSG_CHECKING([whether clang -ftrapv can link a 64-bit int multiply])
1243 int main(int argc, char **argv)
1245 int64_t x = ((int64_t)atoi(argv[1])) * (int64_t)atoi(argv[2])
1246 * (int64_t)atoi(argv[3]);
1249 [ftrapv_can_link=yes; AC_MSG_RESULT([yes])],
1250 [ftrapv_can_link=no; AC_MSG_RESULT([no])])
1251 if test "$ftrapv_can_link" = "no"; then
1252 AC_MSG_CHECKING([whether defining __mulodi4 fixes that])
1257 int64_t __mulodi4(int64_t a, int64_t b, int *overflow) {
1261 int main(int argc, char **argv)
1263 int64_t x = ((int64_t)atoi(argv[1])) * (int64_t)atoi(argv[2])
1264 * (int64_t)atoi(argv[3]);
1267 [mulodi_fixes_ftrapv=yes; AC_MSG_RESULT([yes])],
1268 [mulodi_fixes_ftrapv=no; AC_MSG_RESULT([no])])
1270 CFLAGS="$saved_CFLAGS"
1273 AM_CONDITIONAL(ADD_MULODI4, test "$mulodi_fixes_ftrapv" = "yes")
1275 dnl These cflags add bunches of branches, and we haven't been able to
1276 dnl persuade ourselves that they're suitable for code that needs to be
1278 AC_SUBST(CFLAGS_BUGTRAP)
1279 dnl These cflags are variant ones sutable for code that needs to be
1281 AC_SUBST(CFLAGS_CONSTTIME)
1283 if test "x$enable_linker_hardening" != "xno"; then
1284 TOR_CHECK_LDFLAGS(-z relro -z now, "$all_ldflags_for_check", "$all_libs_for_check")
1287 # For backtrace support
1288 TOR_CHECK_LDFLAGS(-rdynamic)
1290 dnl ------------------------------------------------------
1291 dnl Now see if we have a -fomit-frame-pointer compiler option.
1293 saved_CFLAGS="$CFLAGS"
1294 TOR_CHECK_CFLAGS(-fomit-frame-pointer)
1295 F_OMIT_FRAME_POINTER=''
1296 if test "$saved_CFLAGS" != "$CFLAGS"; then
1297 if test "$fragile_hardening" = "yes"; then
1298 F_OMIT_FRAME_POINTER='-fomit-frame-pointer'
1301 CFLAGS="$saved_CFLAGS"
1302 AC_SUBST(F_OMIT_FRAME_POINTER)
1304 dnl ------------------------------------------------------
1305 dnl If we are adding -fomit-frame-pointer (or if the compiler's doing it
1306 dnl for us, as GCC 4.6 and later do at many optimization levels), then
1307 dnl we should try to add -fasynchronous-unwind-tables so that our backtrace
1309 TOR_CHECK_CFLAGS(-fasynchronous-unwind-tables)
1311 dnl ============================================================
1312 dnl Check for libseccomp
1314 if test "x$enable_seccomp" != "xno"; then
1315 AC_CHECK_HEADERS([seccomp.h])
1316 AC_SEARCH_LIBS(seccomp_init, [seccomp])
1319 dnl ============================================================
1320 dnl Check for libscrypt
1322 if test "x$enable_libscrypt" != "xno"; then
1323 AC_CHECK_HEADERS([libscrypt.h])
1324 AC_SEARCH_LIBS(libscrypt_scrypt, [scrypt])
1325 AC_CHECK_FUNCS([libscrypt_scrypt])
1328 dnl ============================================================
1329 dnl We need an implementation of curve25519.
1331 dnl set these defaults.
1332 build_curve25519_donna=no
1333 build_curve25519_donna_c64=no
1334 use_curve25519_donna=no
1335 use_curve25519_nacl=no
1338 dnl The best choice is using curve25519-donna-c64, but that requires
1340 AC_CACHE_CHECK([whether we can use curve25519-donna-c64],
1341 tor_cv_can_use_curve25519_donna_c64,
1343 [AC_LANG_PROGRAM([dnl
1345 typedef unsigned uint128_t __attribute__((mode(TI)));
1346 int func(uint64_t a, uint64_t b) {
1347 uint128_t c = ((uint128_t)a) * b;
1348 int ok = ((uint64_t)(c>>96)) == 522859 &&
1349 (((uint64_t)(c>>64))&0xffffffffL) == 3604448702L &&
1350 (((uint64_t)(c>>32))&0xffffffffL) == 2351960064L &&
1351 (((uint64_t)(c))&0xffffffffL) == 0;
1355 int ok = func( ((uint64_t)2000000000) * 1000000000,
1356 ((uint64_t)1234567890) << 24);
1359 [tor_cv_can_use_curve25519_donna_c64=yes],
1360 [tor_cv_can_use_curve25519_donna_c64=no],
1362 [AC_LANG_PROGRAM([dnl
1364 typedef unsigned uint128_t __attribute__((mode(TI)));
1365 int func(uint64_t a, uint64_t b) {
1366 uint128_t c = ((uint128_t)a) * b;
1367 int ok = ((uint64_t)(c>>96)) == 522859 &&
1368 (((uint64_t)(c>>64))&0xffffffffL) == 3604448702L &&
1369 (((uint64_t)(c>>32))&0xffffffffL) == 2351960064L &&
1370 (((uint64_t)(c))&0xffffffffL) == 0;
1374 int ok = func( ((uint64_t)2000000000) * 1000000000,
1375 ((uint64_t)1234567890) << 24);
1378 [tor_cv_can_use_curve25519_donna_c64=cross],
1379 [tor_cv_can_use_curve25519_donna_c64=no])])])
1381 AC_CHECK_HEADERS([crypto_scalarmult_curve25519.h \
1382 nacl/crypto_scalarmult_curve25519.h])
1384 AC_CACHE_CHECK([for nacl compiled with a fast curve25519 implementation],
1385 tor_cv_can_use_curve25519_nacl,
1386 [tor_saved_LIBS="$LIBS"
1389 [AC_LANG_PROGRAM([dnl
1390 #ifdef HAVE_CRYPTO_SCALARMULT_CURVE25519_H
1391 #include <crypto_scalarmult_curve25519.h>
1392 #elif defined(HAVE_NACL_CRYPTO_SCALARMULT_CURVE25519_H)
1393 #include <nacl/crypto_scalarmult_curve25519.h>
1395 #ifdef crypto_scalarmult_curve25519_ref_BYTES
1396 #error Hey, this is the reference implementation! That's not fast.
1399 unsigned char *a, *b, *c; crypto_scalarmult_curve25519(a,b,c);
1400 ])], [tor_cv_can_use_curve25519_nacl=yes],
1401 [tor_cv_can_use_curve25519_nacl=no])
1402 LIBS="$tor_saved_LIBS" ])
1404 dnl Okay, now we need to figure out which one to actually use. Fall back
1405 dnl to curve25519-donna.c
1407 if test "x$tor_cv_can_use_curve25519_donna_c64" != "xno"; then
1408 build_curve25519_donna_c64=yes
1409 use_curve25519_donna=yes
1410 elif test "x$tor_cv_can_use_curve25519_nacl" = "xyes"; then
1411 use_curve25519_nacl=yes
1412 CURVE25519_LIBS=-lnacl
1414 build_curve25519_donna=yes
1415 use_curve25519_donna=yes
1418 if test "x$use_curve25519_donna" = "xyes"; then
1419 AC_DEFINE(USE_CURVE25519_DONNA, 1,
1420 [Defined if we should use an internal curve25519_donna{,_c64} implementation])
1422 if test "x$use_curve25519_nacl" = "xyes"; then
1423 AC_DEFINE(USE_CURVE25519_NACL, 1,
1424 [Defined if we should use a curve25519 from nacl])
1426 AM_CONDITIONAL(BUILD_CURVE25519_DONNA,
1427 test "x$build_curve25519_donna" = "xyes")
1428 AM_CONDITIONAL(BUILD_CURVE25519_DONNA_C64,
1429 test "x$build_curve25519_donna_c64" = "xyes")
1430 AC_SUBST(CURVE25519_LIBS)
1432 dnl Make sure to enable support for large off_t if available.
1435 AC_CHECK_HEADERS([errno.h \
1449 gnu/libc-version.h \
1488 AC_CHECK_HEADERS(sys/param.h)
1490 AC_CHECK_HEADERS(net/if.h, net_if_found=1, net_if_found=0,
1491 [#ifdef HAVE_SYS_TYPES_H
1492 #include <sys/types.h>
1494 #ifdef HAVE_SYS_SOCKET_H
1495 #include <sys/socket.h>
1497 AC_CHECK_HEADERS(net/pfvar.h, net_pfvar_found=1, net_pfvar_found=0,
1498 [#ifdef HAVE_SYS_TYPES_H
1499 #include <sys/types.h>
1501 #ifdef HAVE_SYS_SOCKET_H
1502 #include <sys/socket.h>
1504 #ifdef HAVE_NET_IF_H
1507 #ifdef HAVE_NETINET_IN_H
1508 #include <netinet/in.h>
1511 AC_CHECK_HEADERS(linux/if.h,[],[],
1513 #ifdef HAVE_SYS_SOCKET_H
1514 #include <sys/socket.h>
1518 AC_CHECK_HEADERS(linux/netfilter_ipv4.h,
1519 linux_netfilter_ipv4=1, linux_netfilter_ipv4=0,
1520 [#ifdef HAVE_SYS_TYPES_H
1521 #include <sys/types.h>
1523 #ifdef HAVE_SYS_SOCKET_H
1524 #include <sys/socket.h>
1526 #ifdef HAVE_LIMITS_H
1529 #ifdef HAVE_LINUX_TYPES_H
1530 #include <linux/types.h>
1532 #ifdef HAVE_NETINET_IN6_H
1533 #include <netinet/in6.h>
1535 #ifdef HAVE_NETINET_IN_H
1536 #include <netinet/in.h>
1539 AC_CHECK_HEADERS(linux/netfilter_ipv6/ip6_tables.h,
1540 linux_netfilter_ipv6_ip6_tables=1, linux_netfilter_ipv6_ip6_tables=0,
1541 [#ifdef HAVE_SYS_TYPES_H
1542 #include <sys/types.h>
1544 #ifdef HAVE_SYS_SOCKET_H
1545 #include <sys/socket.h>
1547 #ifdef HAVE_LIMITS_H
1550 #ifdef HAVE_LINUX_TYPES_H
1551 #include <linux/types.h>
1553 #ifdef HAVE_NETINET_IN6_H
1554 #include <netinet/in6.h>
1556 #ifdef HAVE_NETINET_IN_H
1557 #include <netinet/in.h>
1559 #ifdef HAVE_LINUX_IF_H
1560 #include <linux/if.h>
1564 if test "x$net_if_found" = "x1" && test "x$net_pfvar_found" = "x1"; then
1567 if test "x$linux_netfilter_ipv4" = "x1"; then
1570 if test "x$linux_netfilter_ipv6_ip6_tables" = "x1"; then
1573 if test "x$transparent_ok" = "x1"; then
1574 AC_DEFINE(USE_TRANSPARENT, 1, "Define to enable transparent proxy support")
1576 AC_MSG_NOTICE([Transparent proxy support enabled, but missing headers.])
1579 AC_CHECK_MEMBERS([struct timeval.tv_sec], , ,
1580 [#ifdef HAVE_SYS_TYPES_H
1581 #include <sys/types.h>
1583 #ifdef HAVE_SYS_TIME_H
1584 #include <sys/time.h>
1587 AC_CHECK_SIZEOF(char)
1588 AC_CHECK_SIZEOF(short)
1589 AC_CHECK_SIZEOF(int)
1590 AC_CHECK_SIZEOF(long)
1591 AC_CHECK_SIZEOF(long long)
1592 AC_CHECK_SIZEOF(__int64)
1593 AC_CHECK_SIZEOF(void *)
1594 AC_CHECK_SIZEOF(time_t)
1595 AC_CHECK_SIZEOF(size_t)
1596 AC_CHECK_SIZEOF(pid_t)
1598 AC_CHECK_TYPES([uint, u_char, ssize_t])
1600 AC_PC_FROM_UCONTEXT([:])
1602 dnl used to include sockaddr_storage, but everybody has that.
1603 AC_CHECK_TYPES([struct in6_addr, struct sockaddr_in6, sa_family_t], , ,
1604 [#ifdef HAVE_SYS_TYPES_H
1605 #include <sys/types.h>
1607 #ifdef HAVE_NETINET_IN_H
1608 #include <netinet/in.h>
1610 #ifdef HAVE_NETINET_IN6_H
1611 #include <netinet/in6.h>
1613 #ifdef HAVE_SYS_SOCKET_H
1614 #include <sys/socket.h>
1617 #define _WIN32_WINNT 0x0501
1618 #define WIN32_LEAN_AND_MEAN
1619 #include <winsock2.h>
1620 #include <ws2tcpip.h>
1623 AC_CHECK_MEMBERS([struct in6_addr.s6_addr32, struct in6_addr.s6_addr16, struct sockaddr_in.sin_len, struct sockaddr_in6.sin6_len], , ,
1624 [#ifdef HAVE_SYS_TYPES_H
1625 #include <sys/types.h>
1627 #ifdef HAVE_NETINET_IN_H
1628 #include <netinet/in.h>
1630 #ifdef HAVE_NETINET_IN6_H
1631 #include <netinet/in6.h>
1633 #ifdef HAVE_SYS_SOCKET_H
1634 #include <sys/socket.h>
1637 #define _WIN32_WINNT 0x0501
1638 #define WIN32_LEAN_AND_MEAN
1639 #include <winsock2.h>
1640 #include <ws2tcpip.h>
1644 AC_CHECK_TYPES([rlim_t], , ,
1645 [#ifdef HAVE_SYS_TYPES_H
1646 #include <sys/types.h>
1648 #ifdef HAVE_SYS_TIME_H
1649 #include <sys/time.h>
1651 #ifdef HAVE_SYS_RESOURCE_H
1652 #include <sys/resource.h>
1656 AX_CHECK_SIGN([time_t],
1659 #ifdef HAVE_SYS_TYPES_H
1660 #include <sys/types.h>
1662 #ifdef HAVE_SYS_TIME_H
1663 #include <sys/time.h>
1670 if test "$ax_cv_decl_time_t_signed" = "no"; then
1671 AC_MSG_ERROR([You have an unsigned time_t; Tor does not support that. Please tell the Tor developers about your interesting platform.])
1674 AX_CHECK_SIGN([size_t],
1675 [ tor_cv_size_t_signed=yes ],
1676 [ tor_cv_size_t_signed=no ], [
1677 #ifdef HAVE_SYS_TYPES_H
1678 #include <sys/types.h>
1682 if test "$ax_cv_decl_size_t_signed" = "yes"; then
1683 AC_MSG_ERROR([You have a signed size_t; that's grossly nonconformant.])
1686 AX_CHECK_SIGN([enum always],
1687 [ AC_DEFINE(ENUM_VALS_ARE_SIGNED, 1, [Define if enum is always signed]) ],
1689 enum always { AAA, BBB, CCC };
1692 AC_CHECK_SIZEOF(socklen_t, , [AC_INCLUDES_DEFAULT()
1693 #ifdef HAVE_SYS_SOCKET_H
1694 #include <sys/socket.h>
1698 # We want to make sure that we _don't_ have a cell_t defined, like IRIX does.
1700 AC_CHECK_SIZEOF(cell_t)
1702 # Let's see if stdatomic works. (There are some debian clangs that screw it
1703 # up; see Tor bug #26779 and debian bug 903709.)
1704 AC_CACHE_CHECK([whether C11 stdatomic.h actually works],
1705 tor_cv_stdatomic_works,
1706 [AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
1707 #include <stdatomic.h>
1708 struct x { atomic_size_t y; };
1709 void try_atomic_init(struct x *xx)
1711 atomic_init(&xx->y, 99);
1712 atomic_fetch_add(&xx->y, 1);
1714 ]])], [tor_cv_stdatomic_works=yes], [tor_cv_stdatomic_works=no])])
1716 if test "$tor_cv_stdatomic_works" = "yes"; then
1717 AC_DEFINE(STDATOMIC_WORKS, 1, [Set to 1 if we can compile a simple stdatomic example.])
1718 elif test "$ac_cv_header_stdatomic_h" = "yes"; then
1719 AC_MSG_WARN([Your compiler provides the stdatomic.h header, but it doesn't seem to work. I'll pretend it isn't there. If you are using Clang on Debian, maybe this is because of https://bugs.debian.org/903709 ])
1722 # Now make sure that NULL can be represented as zero bytes.
1723 AC_CACHE_CHECK([whether memset(0) sets pointers to NULL], tor_cv_null_is_zero,
1724 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1725 [[#include <stdlib.h>
1728 #ifdef HAVE_STDDEF_H
1731 int main () { char *p1,*p2; p1=NULL; memset(&p2,0,sizeof(p2));
1732 return memcmp(&p1,&p2,sizeof(char*))?1:0; }]])],
1733 [tor_cv_null_is_zero=yes],
1734 [tor_cv_null_is_zero=no],
1735 [tor_cv_null_is_zero=cross])])
1737 if test "$tor_cv_null_is_zero" = "cross"; then
1738 # Cross-compiling; let's hope that the target isn't raving mad.
1739 AC_MSG_NOTICE([Cross-compiling: we'll assume that NULL is represented as a sequence of 0-valued bytes.])
1742 if test "$tor_cv_null_is_zero" != "no"; then
1743 AC_DEFINE([NULL_REP_IS_ZERO_BYTES], 1,
1744 [Define to 1 iff memset(0) sets pointers to NULL])
1747 AC_CACHE_CHECK([whether memset(0) sets doubles to 0.0], tor_cv_dbl0_is_zero,
1748 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1749 [[#include <stdlib.h>
1752 #ifdef HAVE_STDDEF_H
1755 int main () { double d1,d2; d1=0; memset(&d2,0,sizeof(d2));
1756 return memcmp(&d1,&d2,sizeof(d1))?1:0; }]])],
1757 [tor_cv_dbl0_is_zero=yes],
1758 [tor_cv_dbl0_is_zero=no],
1759 [tor_cv_dbl0_is_zero=cross])])
1761 if test "$tor_cv_dbl0_is_zero" = "cross"; then
1762 # Cross-compiling; let's hope that the target isn't raving mad.
1763 AC_MSG_NOTICE([Cross-compiling: we'll assume that 0.0 can be represented as a sequence of 0-valued bytes.])
1766 if test "$tor_cv_dbl0_is_zero" != "no"; then
1767 AC_DEFINE([DOUBLE_0_REP_IS_ZERO_BYTES], 1,
1768 [Define to 1 iff memset(0) sets doubles to 0.0])
1771 # And what happens when we malloc zero?
1772 AC_CACHE_CHECK([whether we can malloc(0) safely.], tor_cv_malloc_zero_works,
1773 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1774 [[#include <stdlib.h>
1777 #ifdef HAVE_STDDEF_H
1780 int main () { return malloc(0)?0:1; }]])],
1781 [tor_cv_malloc_zero_works=yes],
1782 [tor_cv_malloc_zero_works=no],
1783 [tor_cv_malloc_zero_works=cross])])
1785 if test "$tor_cv_malloc_zero_works" = "cross"; then
1786 # Cross-compiling; let's hope that the target isn't raving mad.
1787 AC_MSG_NOTICE([Cross-compiling: we'll assume that we need to check malloc() arguments for 0.])
1790 if test "$tor_cv_malloc_zero_works" = "yes"; then
1791 AC_DEFINE([MALLOC_ZERO_WORKS], 1,
1792 [Define to 1 iff malloc(0) returns a pointer])
1795 # whether we seem to be in a 2s-complement world.
1796 AC_CACHE_CHECK([whether we are using 2s-complement arithmetic], tor_cv_twos_complement,
1797 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1798 [[int main () { int problem = ((-99) != (~99)+1);
1799 return problem ? 1 : 0; }]])],
1800 [tor_cv_twos_complement=yes],
1801 [tor_cv_twos_complement=no],
1802 [tor_cv_twos_complement=cross])])
1804 if test "$tor_cv_twos_complement" = "cross"; then
1805 # Cross-compiling; let's hope that the target isn't raving mad.
1806 AC_MSG_NOTICE([Cross-compiling: we'll assume that negative integers are represented with two's complement.])
1809 if test "$tor_cv_twos_complement" != "no"; then
1810 AC_DEFINE([USING_TWOS_COMPLEMENT], 1,
1811 [Define to 1 iff we represent negative integers with
1815 # What does shifting a negative value do?
1816 AC_CACHE_CHECK([whether right-shift on negative values does sign-extension], tor_cv_sign_extend,
1817 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1818 [[int main () { int okay = (-60 >> 8) == -1; return okay ? 0 : 1; }]])],
1819 [tor_cv_sign_extend=yes],
1820 [tor_cv_sign_extend=no],
1821 [tor_cv_sign_extend=cross])])
1823 if test "$tor_cv_sign_extend" = "cross"; then
1824 # Cross-compiling; let's hope that the target isn't raving mad.
1825 AC_MSG_NOTICE([Cross-compiling: we'll assume that right-shifting negative integers causes sign-extension])
1828 if test "$tor_cv_sign_extend" != "no"; then
1829 AC_DEFINE([RSHIFT_DOES_SIGN_EXTEND], 1,
1830 [Define to 1 iff right-shifting a negative value performs sign-extension])
1833 # Is uint8_t the same type as unsigned char?
1834 AC_CACHE_CHECK([whether uint8_t is the same type as unsigned char], tor_cv_uint8_uchar,
1835 [AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
1838 unsigned char c;]])],
1839 [tor_cv_uint8_uchar=yes],
1840 [tor_cv_uint8_uchar=no],
1841 [tor_cv_uint8_uchar=cross])])
1843 if test "$tor_cv_uint8_uchar" = "cross"; then
1844 AC_MSG_NOTICE([Cross-compiling: we'll assume that uint8_t is the same type as unsigned char])
1847 if test "$tor_cv_uint8_uchar" = "no"; then
1848 AC_MSG_ERROR([We assume that uint8_t is the same type as unsigned char, but your compiler disagrees.])
1851 AC_ARG_WITH(tcmalloc,
1852 AS_HELP_STRING(--with-tcmalloc, [use tcmalloc memory allocation library. Deprecated; see --with-malloc]),
1853 [ tcmalloc=yes ], [ tcmalloc=no ])
1855 default_malloc=system
1857 if test "x$enable_openbsd_malloc" = "xyes" ; then
1858 AC_MSG_NOTICE([The --enable-openbsd-malloc argument is deprecated; use --with-malloc=openbsd instead.])
1859 default_malloc=openbsd
1862 if test "x$tcmalloc" = "xyes"; then
1863 AC_MSG_NOTICE([The --with-tcmalloc argument is deprecated; use --with-malloc=tcmalloc instead.])
1864 default_malloc=tcmalloc
1868 AS_HELP_STRING([--with-malloc=[system,jemalloc,tcmalloc,openbsd]],
1869 [select special malloc implementation [system]]),
1870 [ malloc="$with_malloc" ], [ malloc="$default_malloc" ])
1874 PKG_CHECK_MODULES([TCMALLOC],
1879 if test "x$have_tcmalloc" = "xno" ; then
1880 AC_MSG_ERROR([Unable to find tcmalloc requested by --with-malloc.])
1883 CFLAGS="$CFLAGS $TCMALLOC_CFLAGS"
1884 LIBS="$TCMALLOC_LIBS $LIBS"
1888 PKG_CHECK_MODULES([JEMALLOC],
1893 if test "x$have_tcmalloc" = "xno" ; then
1894 AC_MSG_ERROR([Unable to find jemalloc requested by --with-malloc.])
1897 CFLAGS="$CFLAGS $JEMALLOC_CFLAGS"
1898 LIBS="$JEMALLOC_LIBS $LIBS"
1899 using_custom_malloc=yes
1903 AC_MSG_WARN([The openbsd malloc port is deprecated in Tor 0.3.5 and will be removed in a future version.])
1904 enable_openbsd_malloc=yes
1908 # handle this later, including the jemalloc fallback
1909 AC_CHECK_FUNCS(mallinfo)
1912 [AC_MSG_ERROR([--with-malloc=`$with_malloc' not supported, see --help])
1915 AM_CONDITIONAL(USE_OPENBSD_MALLOC, test "x$enable_openbsd_malloc" = "xyes")
1917 if test "$malloc" != "system"; then
1918 # Tell the C compiler not to use the system allocator functions.
1919 TOR_CHECK_CFLAGS([-fno-builtin-malloc -fno-builtin-realloc -fno-builtin-calloc -fno-builtin-free])
1921 if test "$using_custom_malloc" = "yes"; then
1922 # Tell the C compiler not to use the system allocator functions.
1923 TOR_CHECK_CFLAGS([-fno-builtin-malloc -fno-builtin-realloc -fno-builtin-calloc -fno-builtin-free])
1926 # By default, we're going to assume we don't have mlockall()
1927 # bionic and other platforms have various broken mlockall subsystems.
1928 # Some systems don't have a working mlockall, some aren't linkable,
1929 # and some have it but don't declare it.
1930 AC_CHECK_FUNCS(mlockall)
1931 AC_CHECK_DECLS([mlockall], , , [
1932 #ifdef HAVE_SYS_MMAN_H
1933 #include <sys/mman.h>
1936 # Allow user to specify an alternate syslog facility
1937 AC_ARG_WITH(syslog-facility,
1938 AS_HELP_STRING(--with-syslog-facility=LOG, [syslog facility to use (default=LOG_DAEMON)]),
1939 syslog_facility="$withval", syslog_facility="LOG_DAEMON")
1940 AC_DEFINE_UNQUOTED(LOGFACILITY,$syslog_facility,[name of the syslog facility])
1941 AC_SUBST(LOGFACILITY)
1943 # Check if we have getresuid and getresgid
1944 AC_CHECK_FUNCS(getresuid getresgid)
1946 # Check for gethostbyname_r in all its glorious incompatible versions.
1947 # (This logic is based on that in Python's configure.in)
1948 AH_TEMPLATE(HAVE_GETHOSTBYNAME_R,
1949 [Define this if you have any gethostbyname_r()])
1951 AC_CHECK_FUNC(gethostbyname_r, [
1952 AC_MSG_CHECKING([how many arguments gethostbyname_r() wants])
1954 CFLAGS="$CFLAGS $MY_CPPFLAGS $MY_THREAD_CPPFLAGS $MY_CFLAGS"
1955 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1959 struct hostent *h1, *h2;
1961 (void)gethostbyname_r(cp1,h1,cp2,i1,&h2,&i2);
1963 AC_DEFINE(HAVE_GETHOSTBYNAME_R)
1964 AC_DEFINE(HAVE_GETHOSTBYNAME_R_6_ARG, 1,
1965 [Define this if gethostbyname_r takes 6 arguments])
1968 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1974 (void)gethostbyname_r(cp1,h1,cp2,i1,&i2);
1976 AC_DEFINE(HAVE_GETHOSTBYNAME_R)
1977 AC_DEFINE(HAVE_GETHOSTBYNAME_R_5_ARG, 1,
1978 [Define this if gethostbyname_r takes 5 arguments])
1981 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1986 struct hostent_data hd;
1987 (void) gethostbyname_r(cp1,h1,&hd);
1989 AC_DEFINE(HAVE_GETHOSTBYNAME_R)
1990 AC_DEFINE(HAVE_GETHOSTBYNAME_R_3_ARG, 1,
1991 [Define this if gethostbyname_r takes 3 arguments])
2001 AC_CACHE_CHECK([whether the C compiler supports __func__],
2002 tor_cv_have_func_macro,
2003 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
2005 int main(int c, char **v) { puts(__func__); }])],
2006 tor_cv_have_func_macro=yes,
2007 tor_cv_have_func_macro=no))
2009 AC_CACHE_CHECK([whether the C compiler supports __FUNC__],
2010 tor_cv_have_FUNC_macro,
2011 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
2013 int main(int c, char **v) { puts(__FUNC__); }])],
2014 tor_cv_have_FUNC_macro=yes,
2015 tor_cv_have_FUNC_macro=no))
2017 AC_CACHE_CHECK([whether the C compiler supports __FUNCTION__],
2018 tor_cv_have_FUNCTION_macro,
2019 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
2021 int main(int c, char **v) { puts(__FUNCTION__); }])],
2022 tor_cv_have_FUNCTION_macro=yes,
2023 tor_cv_have_FUNCTION_macro=no))
2025 AC_CACHE_CHECK([whether we have extern char **environ already declared],
2026 tor_cv_have_environ_declared,
2027 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
2028 #ifdef HAVE_UNISTD_H
2032 int main(int c, char **v) { char **t = environ; }])],
2033 tor_cv_have_environ_declared=yes,
2034 tor_cv_have_environ_declared=no))
2036 if test "$tor_cv_have_func_macro" = "yes"; then
2037 AC_DEFINE(HAVE_MACRO__func__, 1, [Defined if the compiler supports __func__])
2040 if test "$tor_cv_have_FUNC_macro" = "yes"; then
2041 AC_DEFINE(HAVE_MACRO__FUNC__, 1, [Defined if the compiler supports __FUNC__])
2044 if test "$tor_cv_have_FUNCTION_macro" = "yes"; then
2045 AC_DEFINE(HAVE_MACRO__FUNCTION__, 1,
2046 [Defined if the compiler supports __FUNCTION__])
2049 if test "$tor_cv_have_environ_declared" = "yes"; then
2050 AC_DEFINE(HAVE_EXTERN_ENVIRON_DECLARED, 1,
2051 [Defined if we have extern char **environ already declared])
2054 # $prefix stores the value of the --prefix command line option, or
2055 # NONE if the option wasn't set. In the case that it wasn't set, make
2056 # it be the default, so that we can use it to expand directories now.
2057 if test "x$prefix" = "xNONE"; then
2058 prefix=$ac_default_prefix
2061 # and similarly for $exec_prefix
2062 if test "x$exec_prefix" = "xNONE"; then
2066 if test "x$BUILDDIR" = "x"; then
2070 AH_TEMPLATE([BUILDDIR],[tor's build directory])
2071 AC_DEFINE_UNQUOTED(BUILDDIR,"$BUILDDIR")
2073 if test "x$SRCDIR" = "x"; then
2074 SRCDIR=$(cd "$srcdir"; pwd)
2076 AH_TEMPLATE([SRCDIR],[tor's sourcedir directory])
2077 AC_DEFINE_UNQUOTED(SRCDIR,"$SRCDIR")
2079 if test "x$CONFDIR" = "x"; then
2080 CONFDIR=`eval echo $sysconfdir/tor`
2083 AH_TEMPLATE([CONFDIR],[tor's configuration directory])
2084 AC_DEFINE_UNQUOTED(CONFDIR,"$CONFDIR")
2086 BINDIR=`eval echo $bindir`
2088 LOCALSTATEDIR=`eval echo $localstatedir`
2089 AC_SUBST(LOCALSTATEDIR)
2091 if test "$bwin32" = "true"; then
2092 # Test if the linker supports the --nxcompat and --dynamicbase options
2094 save_LDFLAGS="$LDFLAGS"
2095 LDFLAGS="-Wl,--nxcompat -Wl,--dynamicbase"
2096 AC_MSG_CHECKING([whether the linker supports DllCharacteristics])
2097 AC_LINK_IFELSE([AC_LANG_PROGRAM([])],
2098 [AC_MSG_RESULT([yes])]
2099 [save_LDFLAGS="$save_LDFLAGS $LDFLAGS"],
2100 [AC_MSG_RESULT([no])]
2102 LDFLAGS="$save_LDFLAGS"
2105 # Set CFLAGS _after_ all the above checks, since our warnings are stricter
2106 # than autoconf's macros like.
2107 if test "$GCC" = "yes"; then
2108 # Disable GCC's strict aliasing checks. They are an hours-to-debug
2109 # accident waiting to happen.
2110 CFLAGS="$CFLAGS -Wall -fno-strict-aliasing"
2112 # Override optimization level for non-gcc compilers
2114 enable_gcc_warnings=no
2115 enable_gcc_warnings_advisory=no
2118 # Warnings implies advisory-warnings and -Werror.
2119 if test "$enable_gcc_warnings" = "yes"; then
2120 enable_gcc_warnings_advisory=yes
2121 enable_fatal_warnings=yes
2124 # OS X Lion started deprecating the system openssl. Let's just disable
2125 # all deprecation warnings on OS X. Also, to potentially make the binary
2126 # a little smaller, let's enable dead_strip.
2130 CFLAGS="$CFLAGS -Wno-deprecated-declarations"
2131 LDFLAGS="$LDFLAGS -dead_strip" ;;
2134 # Add some more warnings which we use in development but not in the
2135 # released versions. (Some relevant gcc versions can't handle these.)
2137 # Note that we have to do this near the end of the autoconf process, or
2138 # else we may run into problems when these warnings hit on the testing C
2139 # programs that autoconf wants to build.
2140 if test "x$enable_gcc_warnings_advisory" != "xno"; then
2143 *-*-openbsd* | *-*-bitrig*)
2144 # Some OpenBSD versions (like 4.8) have -Wsystem-headers by default.
2145 # That's fine, except that the headers don't pass -Wredundant-decls.
2146 # Therefore, let's disable -Wsystem-headers when we're building
2147 # with maximal warnings on OpenBSD.
2148 CFLAGS="$CFLAGS -Wno-system-headers" ;;
2151 # GCC4.3 users once report trouble with -Wstrict-overflow=5. GCC5 users
2152 # have it work better.
2153 # CFLAGS="$CFLAGS -Wstrict-overflow=1"
2155 # This warning was added in gcc 4.3, but it appears to generate
2156 # spurious warnings in gcc 4.4. I don't know if it works in 4.5.
2157 #CFLAGS="$CFLAGS -Wlogical-op"
2159 m4_foreach_w([warning_flag], [
2161 -Waddress-of-array-temporary
2162 -Waddress-of-temporary
2164 -Wanonymous-pack-parens
2167 -Warc-bridge-casts-disallowed-in-nonarc
2168 -Warc-maybe-repeated-use-of-weak
2169 -Warc-performSelector-leaks
2170 -Warc-repeated-use-of-weak
2172 -Warray-bounds-pointer-arithmetic
2174 -Wasm-operand-widths
2176 -Watomic-property-with-user-defined-accessor
2178 -Wauto-storage-class
2181 -Wbackslash-newline-escape
2182 -Wbad-array-new-length
2183 -Wbind-to-temporary-copy
2184 -Wbitfield-constant-conversion
2187 -Wbuiltin-requires-header
2189 -Wcompare-distinct-pointer-types
2190 -Wcomplex-component-init
2191 -Wconditional-type-mismatch
2193 -Wconstant-conversion
2194 -Wconstant-logical-operand
2195 -Wconstexpr-not-const
2196 -Wcustom-atomic-properties
2198 -Wdangling-initializer-list
2200 -Wdelegating-ctor-cycles
2201 -Wdeprecated-implementations
2202 -Wdeprecated-register
2203 -Wdirect-ivar-access
2205 -Wdistributed-object-modifiers
2207 -Wdollar-in-identifier-extension
2209 -Wduplicate-decl-specifier
2211 -Wduplicate-method-arg
2212 -Wduplicate-method-match
2214 -Wdynamic-class-memaccess
2215 -Wembedded-directive
2216 -Wempty-translation-unit
2218 -Wexit-time-destructors
2219 -Wexplicit-ownership-type
2220 -Wextern-initializer
2224 -Wflexible-array-extensions
2227 -Wfour-char-constants
2229 -Wglobal-constructors
2230 -Wgnu-array-member-paren-init
2232 -Wgnu-static-float-init
2235 -Widiomatic-parentheses
2236 -Wignored-attributes
2237 -Wimplicit-atomic-properties
2238 -Wimplicit-conversion-floating-point-to-bool
2239 -Wimplicit-exception-spec-mismatch
2240 -Wimplicit-fallthrough
2241 -Wimplicit-fallthrough-per-function
2242 -Wimplicit-retain-self
2243 -Wimport-preprocessor-directive-pedantic
2244 -Wincompatible-library-redeclaration
2245 -Wincompatible-pointer-types-discards-qualifiers
2246 -Wincomplete-implementation
2248 -Wincomplete-umbrella
2251 -Wint-to-void-pointer-cast
2257 -Winvalid-source-encoding
2258 -Winvalid-token-paste
2259 -Wknr-promoted-parameter
2260 -Wlarge-by-value-copy
2261 -Wliteral-conversion
2263 -Wlocal-type-template-args
2267 -Wmalformed-warning-check
2271 -Wmismatched-parameter-types
2272 -Wmismatched-return-types
2273 -Wmissing-field-initializers
2274 -Wmissing-format-attribute
2276 -Wmissing-selector-name
2278 -Wmissing-variable-declarations
2282 -Wnon-literal-null-conversion
2284 -Wnonportable-cfstrings
2290 -Wout-of-line-declaration
2292 -Woverlength-strings
2294 -Woverriding-method-mismatch
2295 -Wpointer-type-mismatch
2296 -Wpredefined-identifier-outside-function
2297 -Wprotocol-property-synthesis-ambiguity
2298 -Wreadonly-iboutlet-property
2299 -Wreadonly-setter-attrs
2301 -Wreceiver-forward-class
2303 -Wreinterpret-base-class
2304 -Wrequires-super-attribute
2305 -Wreserved-user-defined-literal
2306 -Wreturn-stack-address
2308 -Wselector-type-mismatch
2310 -Wserialized-diagnostics
2312 -Wshift-count-negative
2313 -Wshift-count-overflow
2314 -Wshift-negative-value
2316 -Wshift-sign-overflow
2318 -Wsizeof-array-argument
2319 -Wsource-uses-openmp
2322 -Wstatic-local-in-inline
2326 -Wstrlcpy-strlcat-size
2328 -Wsuggest-attribute=format
2329 -Wsuggest-attribute=noreturn
2330 -Wsuper-class-method-mismatch
2333 -Wtautological-constant-out-of-range-compare
2334 -Wtentative-definition-incomplete-type
2337 -Wtypedef-redefinition
2340 -Wundefined-internal
2341 -Wundefined-reinterpret-cast
2343 -Wunicode-whitespace
2344 -Wunknown-warning-option
2345 -Wunnamed-type-template-args
2346 -Wunneeded-member-function
2348 -Wunsupported-visibility
2349 -Wunused-but-set-parameter
2350 -Wunused-but-set-variable
2351 -Wunused-command-line-argument
2352 -Wunused-const-variable=2
2353 -Wunused-exception-parameter
2354 -Wunused-local-typedefs
2355 -Wunused-member-function
2356 -Wunused-sanitize-argument
2357 -Wunused-volatile-lvalue
2358 -Wuser-defined-literals
2361 -Wvector-conversions
2366 ], [ TOR_CHECK_CFLAGS([warning_flag]) ])
2368 dnl We should re-enable this in some later version. Clang doesn't
2369 dnl mind, but it causes trouble with GCC.
2370 dnl -Wstrict-overflow=2
2372 dnl These seem to require annotations that we don't currently use,
2373 dnl and they give false positives in our pthreads wrappers. (Clang 4)
2375 dnl -Wthread-safety-analysis
2376 dnl -Wthread-safety-attributes
2377 dnl -Wthread-safety-beta
2378 dnl -Wthread-safety-precise
2380 CFLAGS="$CFLAGS -W -Wfloat-equal -Wundef -Wpointer-arith"
2381 CFLAGS="$CFLAGS -Wstrict-prototypes -Wmissing-prototypes -Wwrite-strings"
2382 CFLAGS="$CFLAGS -Wredundant-decls -Wchar-subscripts -Wcomment -Wformat=2"
2383 CFLAGS="$CFLAGS -Wwrite-strings"
2384 CFLAGS="$CFLAGS -Wnested-externs -Wbad-function-cast -Wswitch-enum"
2385 CFLAGS="$CFLAGS -Waggregate-return -Wpacked -Wunused"
2386 CFLAGS="$CFLAGS -Wunused-parameter "
2387 # These interfere with building main() { return 0; }, which autoconf
2388 # likes to use as its default program.
2389 CFLAGS="$CFLAGS -Wold-style-definition -Wmissing-declarations"
2391 if test "$tor_cv_cflags__Wnull_dereference" = "yes"; then
2392 AC_DEFINE([HAVE_CFLAG_WNULL_DEREFERENCE], 1, [True if we have -Wnull-dereference])
2394 if test "$tor_cv_cflags__Woverlength_strings" = "yes"; then
2395 AC_DEFINE([HAVE_CFLAG_WOVERLENGTH_STRINGS], 1, [True if we have -Woverlength-strings])
2397 if test "$tor_cv_cflags__warn_unused_const_variable_2" = "yes"; then
2398 AC_DEFINE([HAVE_CFLAG_WUNUSED_CONST_VARIABLE], 1, [True if we have -Wunused-const-variable])
2401 if test "x$enable_fatal_warnings" = "xyes"; then
2402 # I'd like to use TOR_CHECK_CFLAGS here, but I can't, since the
2403 # default autoconf programs are full of errors.
2404 CFLAGS="$CFLAGS -Werror"
2409 if test "$enable_coverage" = "yes" && test "$have_clang" = "no"; then
2412 AC_MSG_WARN([Tried to enable coverage on OSX without using the clang compiler. This might not work! If coverage fails, use CC=clang when configuring with --enable-coverage.])
2416 CPPFLAGS="$CPPFLAGS $TOR_CPPFLAGS_libevent $TOR_CPPFLAGS_openssl $TOR_CPPFLAGS_zlib"
2422 contrib/dist/suse/tor.sh
2423 contrib/operator-tools/tor.logrotate
2426 contrib/dist/tor.service
2427 src/config/torrc.sample
2428 src/config/torrc.minimal
2429 src/rust/.cargo/config
2430 scripts/maint/checkOptionDocs.pl
2431 scripts/maint/updateVersions.pl
2434 if test "x$asciidoc" = "xtrue" && test "$ASCIIDOC" = "none"; then
2435 regular_mans="doc/tor doc/tor-gencert doc/tor-resolve doc/torify"
2436 for file in $regular_mans ; do
2437 if ! [[ -f "$srcdir/$file.1.in" ]] || ! [[ -f "$srcdir/$file.html.in" ]] ; then
2438 echo "==================================";
2440 echo "Building Tor has failed since manpages cannot be built.";
2442 echo "You need asciidoc installed to be able to build the manpages.";
2443 echo "To build without manpages, use the --disable-asciidoc argument";
2444 echo "when calling configure.";
2446 echo "==================================";
2452 if test "$fragile_hardening" = "yes"; then
2456 Warning! Building Tor with --enable-fragile-hardening (also known as
2457 --enable-expensive-hardening) makes some kinds of attacks harder, but makes
2458 other kinds of attacks easier. A Tor instance build with this option will be
2459 somewhat less vulnerable to remote code execution, arithmetic overflow, or
2460 out-of-bounds read/writes... but at the cost of becoming more vulnerable to
2461 denial of service attacks. For more information, see
2462 https://trac.torproject.org/projects/tor/wiki/doc/TorFragileHardening