1 dnl Copyright (c) 2001-2004, Roger Dingledine
2 dnl Copyright (c) 2004-2006, Roger Dingledine, Nick Mathewson
3 dnl Copyright (c) 2007-2018, The Tor Project, Inc.
4 dnl See LICENSE for licensing information
7 AC_INIT([tor],[0.3.6.0-alpha-dev])
8 AC_CONFIG_SRCDIR([src/app/main/tor_main.c])
9 AC_CONFIG_MACRO_DIR([m4])
11 # "foreign" means we don't follow GNU package layout standards
12 # "1.11" means we require automake version 1.11 or newer
13 # "subdir-objects" means put .o files in the same directory as the .c files
14 AM_INIT_AUTOMAKE([foreign 1.11 subdir-objects -Wall -Werror])
16 m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])])
17 AC_CONFIG_HEADERS([orconfig.h])
19 AC_USE_SYSTEM_EXTENSIONS
24 AC_ARG_ENABLE(openbsd-malloc,
25 AS_HELP_STRING(--enable-openbsd-malloc, [use malloc code from OpenBSD. Linux only. Deprecated: see --with-malloc]))
26 AC_ARG_ENABLE(static-openssl,
27 AS_HELP_STRING(--enable-static-openssl, [link against a static openssl library. Requires --with-openssl-dir]))
28 AC_ARG_ENABLE(static-libevent,
29 AS_HELP_STRING(--enable-static-libevent, [link against a static libevent library. Requires --with-libevent-dir]))
30 AC_ARG_ENABLE(static-zlib,
31 AS_HELP_STRING(--enable-static-zlib, [link against a static zlib library. Requires --with-zlib-dir]))
32 AC_ARG_ENABLE(static-tor,
33 AS_HELP_STRING(--enable-static-tor, [create an entirely static Tor binary. Requires --with-openssl-dir and --with-libevent-dir and --with-zlib-dir]))
34 AC_ARG_ENABLE(unittests,
35 AS_HELP_STRING(--disable-unittests, [don't build unit tests for Tor. Risky!]))
36 AC_ARG_ENABLE(coverage,
37 AS_HELP_STRING(--enable-coverage, [enable coverage support in the unit-test build]))
38 AC_ARG_ENABLE(asserts-in-tests,
39 AS_HELP_STRING(--disable-asserts-in-tests, [disable tor_assert() calls in the unit tests, for branch coverage]))
40 AC_ARG_ENABLE(system-torrc,
41 AS_HELP_STRING(--disable-system-torrc, [don't look for a system-wide torrc file]))
42 AC_ARG_ENABLE(libfuzzer,
43 AS_HELP_STRING(--enable-libfuzzer, [build extra fuzzers based on 'libfuzzer']))
44 AC_ARG_ENABLE(oss-fuzz,
45 AS_HELP_STRING(--enable-oss-fuzz, [build extra fuzzers based on 'oss-fuzz' environment]))
46 AC_ARG_ENABLE(memory-sentinels,
47 AS_HELP_STRING(--disable-memory-sentinels, [disable code that tries to prevent some kinds of memory access bugs. For fuzzing only.]))
49 AS_HELP_STRING(--enable-rust, [enable rust integration]))
50 AC_ARG_ENABLE(cargo-online-mode,
51 AS_HELP_STRING(--enable-cargo-online-mode, [Allow cargo to make network requests to fetch crates. For builds with rust only.]))
52 AC_ARG_ENABLE(restart-debugging,
53 AS_HELP_STRING(--enable-restart-debugging, [Build Tor with support for debugging in-process restart. Developers only.]))
54 AC_ARG_ENABLE(zstd-advanced-apis,
55 AS_HELP_STRING(--disable-zstd-advanced-apis, [Build without support for zstd's "static-only" APIs.]))
57 AS_HELP_STRING(--enable-nss, [Use Mozilla's NSS TLS library. (EXPERIMENTAL)]))
59 AS_HELP_STRING(--enable-pic, [Build Tor's binaries as position-independent code, suitable to link as a library.]))
61 if test "x$enable_coverage" != "xyes" -a "x$enable_asserts_in_tests" = "xno" ; then
62 AC_MSG_ERROR([Can't disable assertions outside of coverage build])
65 AM_CONDITIONAL(UNITTESTS_ENABLED, test "x$enable_unittests" != "xno")
66 AM_CONDITIONAL(COVERAGE_ENABLED, test "x$enable_coverage" = "xyes")
67 AM_CONDITIONAL(DISABLE_ASSERTS_IN_UNIT_TESTS, test "x$enable_asserts_in_tests" = "xno")
68 AM_CONDITIONAL(LIBFUZZER_ENABLED, test "x$enable_libfuzzer" = "xyes")
69 AM_CONDITIONAL(OSS_FUZZ_ENABLED, test "x$enable_oss_fuzz" = "xyes")
70 AM_CONDITIONAL(USE_RUST, test "x$enable_rust" = "xyes")
71 AM_CONDITIONAL(USE_NSS, test "x$enable_nss" = "xyes")
72 AM_CONDITIONAL(USE_OPENSSL, test "x$enable_nss" != "xyes")
74 if test "x$enable_nss" = "xyes"; then
75 AC_DEFINE(ENABLE_NSS, 1,
76 [Defined if we're building with NSS.])
78 AC_DEFINE(ENABLE_OPENSSL, 1,
79 [Defined if we're building with OpenSSL or LibreSSL])
82 if test "$enable_static_tor" = "yes"; then
83 enable_static_libevent="yes";
84 enable_static_openssl="yes";
85 enable_static_zlib="yes";
86 CFLAGS="$CFLAGS -static"
89 if test "$enable_system_torrc" = "no"; then
90 AC_DEFINE(DISABLE_SYSTEM_TORRC, 1,
91 [Defined if we're not going to look for a torrc in SYSCONF])
94 if test "$enable_memory_sentinels" = "no"; then
95 AC_DEFINE(DISABLE_MEMORY_SENTINELS, 1,
96 [Defined if we're turning off memory safety code to look for bugs])
99 AC_ARG_ENABLE(asciidoc,
100 AS_HELP_STRING(--disable-asciidoc, [don't use asciidoc (disables building of manpages)]),
101 [case "${enableval}" in
102 "yes") asciidoc=true ;;
103 "no") asciidoc=false ;;
104 *) AC_MSG_ERROR(bad value for --disable-asciidoc) ;;
105 esac], [asciidoc=true])
107 # systemd notify support
108 AC_ARG_ENABLE(systemd,
109 AS_HELP_STRING(--enable-systemd, [enable systemd notification support]),
110 [case "${enableval}" in
111 "yes") systemd=true ;;
112 "no") systemd=false ;;
113 * ) AC_MSG_ERROR(bad value for --enable-systemd) ;;
114 esac], [systemd=auto])
116 if test "$enable_restart_debugging" = "yes"; then
117 AC_DEFINE(ENABLE_RESTART_DEBUGGING, 1,
118 [Defined if we're building with support for in-process restart debugging.])
121 if test "$enable_zstd_advanced_apis" != "no"; then
122 AC_DEFINE(ENABLE_ZSTD_ADVANCED_APIS, 1,
123 [Defined if we're going to try to use zstd's "static-only" APIs.])
127 if test "x$enable_systemd" = "xno"; then
130 PKG_CHECK_MODULES(SYSTEMD,
134 if test "x$have_systemd" = "xno"; then
135 AC_MSG_NOTICE([Okay, checking for systemd a different way...])
136 PKG_CHECK_MODULES(SYSTEMD,
143 if test "x$have_systemd" = "xyes"; then
144 AC_DEFINE(HAVE_SYSTEMD,1,[Have systemd])
145 TOR_SYSTEMD_CFLAGS="${SYSTEMD_CFLAGS}"
146 TOR_SYSTEMD_LIBS="${SYSTEMD_LIBS}"
147 PKG_CHECK_MODULES(LIBSYSTEMD209, [libsystemd >= 209],
148 [AC_DEFINE(HAVE_SYSTEMD_209,1,[Have systemd v209 or more])], [])
150 AC_SUBST(TOR_SYSTEMD_CFLAGS)
151 AC_SUBST(TOR_SYSTEMD_LIBS)
153 if test "x$enable_systemd" = "xyes" -a "x$have_systemd" != "xyes" ; then
154 AC_MSG_ERROR([Explicitly requested systemd support, but systemd not found])
159 AC_DEFINE(_REENTRANT, 1, [Define on some platforms to activate x_r() functions in time.h])
163 AC_ARG_ENABLE(gcc-warnings,
164 AS_HELP_STRING(--enable-gcc-warnings, [deprecated alias for enable-fatal-warnings]))
165 AC_ARG_ENABLE(fatal-warnings,
166 AS_HELP_STRING(--enable-fatal-warnings, [tell the compiler to treat all warnings as errors.]))
167 AC_ARG_ENABLE(gcc-warnings-advisory,
168 AS_HELP_STRING(--disable-gcc-warnings-advisory, [disable the regular verbose warnings]))
170 dnl Others suggest '/gs /safeseh /nxcompat /dynamicbase' for non-gcc on Windows
171 AC_ARG_ENABLE(gcc-hardening,
172 AS_HELP_STRING(--disable-gcc-hardening, [disable compiler security checks]))
174 dnl Deprecated --enable-expensive-hardening but keep it for now for backward compat.
175 AC_ARG_ENABLE(expensive-hardening,
176 AS_HELP_STRING(--enable-expensive-hardening, [enable more fragile and expensive compiler hardening; makes Tor slower]))
177 AC_ARG_ENABLE(fragile-hardening,
178 AS_HELP_STRING(--enable-fragile-hardening, [enable more fragile and expensive compiler hardening; makes Tor slower]))
179 if test "x$enable_expensive_hardening" = "xyes" || test "x$enable_fragile_hardening" = "xyes"; then
180 fragile_hardening="yes"
181 AC_DEFINE(DEBUG_SMARTLIST, 1, [Enable smartlist debugging])
184 dnl Linker hardening options
185 dnl Currently these options are ELF specific - you can't use this with MacOSX
186 AC_ARG_ENABLE(linker-hardening,
187 AS_HELP_STRING(--disable-linker-hardening, [disable linker security fixups]))
189 AC_ARG_ENABLE(local-appdata,
190 AS_HELP_STRING(--enable-local-appdata, [default to host local application data paths on Windows]))
191 if test "$enable_local_appdata" = "yes"; then
192 AC_DEFINE(ENABLE_LOCAL_APPDATA, 1,
193 [Defined if we default to host local appdata paths on Windows])
196 AC_ARG_ENABLE(tool-name-check,
197 AS_HELP_STRING(--disable-tool-name-check, [check for sanely named toolchain when cross-compiling]))
199 AC_ARG_ENABLE(seccomp,
200 AS_HELP_STRING(--disable-seccomp, [do not attempt to use libseccomp]))
202 AC_ARG_ENABLE(libscrypt,
203 AS_HELP_STRING(--disable-libscrypt, [do not attempt to use libscrypt]))
205 dnl Enable event tracing which are transformed to debug log statement.
206 AC_ARG_ENABLE(event-tracing-debug,
207 AS_HELP_STRING(--enable-event-tracing-debug, [build with event tracing to debug log]))
208 AM_CONDITIONAL([USE_EVENT_TRACING_DEBUG], [test "x$enable_event_tracing_debug" = "xyes"])
210 if test x$enable_event_tracing_debug = xyes; then
211 AC_DEFINE([USE_EVENT_TRACING_DEBUG], [1], [Tracing framework to log debug])
212 AC_DEFINE([TOR_EVENT_TRACING_ENABLED], [1], [Compile the event tracing instrumentation])
215 dnl Enable Android only features.
216 AC_ARG_ENABLE(android,
217 AS_HELP_STRING(--enable-android, [build with Android features enabled]))
218 AM_CONDITIONAL([USE_ANDROID], [test "x$enable_android" = "xyes"])
220 if test "x$enable_android" = "xyes"; then
221 AC_DEFINE([USE_ANDROID], [1], [Compile with Android specific features enabled])
223 dnl Check if the Android log library is available.
224 AC_CHECK_HEADERS([android/log.h])
225 AC_SEARCH_LIBS(__android_log_write, [log])
230 dnl Tor modules options. These options are namespaced with --disable-module-XXX
234 m4_define(MODULES, dirauth)
236 dnl Directory Authority module.
237 AC_ARG_ENABLE([module-dirauth],
238 AS_HELP_STRING([--disable-module-dirauth],
239 [Do not build tor with the dirauth module]),
240 [], dnl Action if-given
241 AC_DEFINE([HAVE_MODULE_DIRAUTH], [1],
242 [Compile with Directory Authority feature support]))
243 AM_CONDITIONAL(BUILD_MODULE_DIRAUTH, [test "x$enable_module_dirauth" != "xno"])
245 dnl Helper variables.
246 TOR_MODULES_ALL_ENABLED=
247 AC_DEFUN([ADD_MODULE], [
248 MODULE=m4_toupper($1)
249 TOR_MODULES_ALL_ENABLED="${TOR_MODULES_ALL_ENABLED} -DHAVE_MODULE_${MODULE}=1"
251 m4_foreach_w([module], MODULES, [ADD_MODULE([module])])
252 AC_SUBST(TOR_MODULES_ALL_ENABLED)
254 dnl check for the correct "ar" when cross-compiling.
255 dnl (AM_PROG_AR was new in automake 1.11.2, which we do not yet require,
256 dnl so kludge up a replacement for the case where it isn't there yet.)
257 m4_ifdef([AM_PROG_AR],
259 [AN_MAKEVAR([AR], [AC_PROG_AR])
260 AN_PROGRAM([ar], [AC_PROG_AR])
261 AC_DEFUN([AC_PROG_AR], [AC_CHECK_TOOL([AR], [ar], [:])])
264 dnl Check whether the above macro has settled for a simply named tool even
265 dnl though we're cross compiling. We must do this before running AC_PROG_CC,
266 dnl because that will find any cc on the system, not only the cross-compiler,
267 dnl and then verify that a binary built with this compiler runs on the
268 dnl build system. It will then come to the false conclusion that we're not
270 if test "x$enable_tool_name_check" != "xno"; then
271 if test "x$ac_tool_warned" = "xyes"; then
272 AC_MSG_ERROR([We are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
273 elif test "x$ac_ct_AR" != "x" -a "x$cross_compiling" = "xmaybe"; then
274 AC_MSG_ERROR([We think we are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
284 AC_ARG_VAR([PERL], [path to Perl binary])
285 AC_CHECK_PROGS([PERL], [perl])
286 AM_CONDITIONAL(USE_PERL, [test "x$ac_cv_prog_PERL" != "x"])
288 dnl check for asciidoc and a2x
289 AC_PATH_PROG([ASCIIDOC], [asciidoc], none)
290 AC_PATH_PROGS([A2X], [a2x a2x.py], none)
292 AM_CONDITIONAL(USE_ASCIIDOC, test "x$asciidoc" = "xtrue")
297 AC_ARG_VAR([PYTHON], [path to Python binary])
298 AC_CHECK_PROGS(PYTHON, [ \
300 python3.8 python3.7 python3.6 python3.5 python3.4 \
303 if test "x$PYTHON" = "x"; then
304 AC_MSG_WARN([Python unavailable; some tests will not be run.])
306 AM_CONDITIONAL(USEPYTHON, [test "x$PYTHON" != "x"])
308 dnl List all external rust crates we depend on here. Include the version
313 AC_SUBST(rust_crates)
315 ifdef([AC_C_FLEXIBLE_ARRAY_MEMBER], [
316 AC_C_FLEXIBLE_ARRAY_MEMBER
318 dnl Maybe we've got an old autoconf...
319 AC_CACHE_CHECK([for flexible array members],
323 struct abc { int a; char b[]; };
325 struct abc *def = malloc(sizeof(struct abc)+sizeof(char));
328 [tor_cv_c_flexarray=yes],
329 [tor_cv_c_flexarray=no])])
330 if test "$tor_cv_flexarray" = "yes"; then
331 AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
333 AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [1], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
337 AC_CACHE_CHECK([for working C99 mid-block declaration syntax],
340 [AC_LANG_PROGRAM([], [int x; x = 3; int y; y = 4 + x;])],
341 [tor_cv_c_c99_decl=yes],
342 [tor_cv_c_c99_decl=no] )])
343 if test "$tor_cv_c_c99_decl" != "yes"; then
344 AC_MSG_ERROR([Your compiler doesn't support c99 mid-block declarations. This is required as of Tor 0.2.6.x])
347 AC_CACHE_CHECK([for working C99 designated initializers],
348 tor_cv_c_c99_designated_init,
350 [AC_LANG_PROGRAM([struct s { int a; int b; };],
351 [[ struct s ss = { .b = 5, .a = 6 }; ]])],
352 [tor_cv_c_c99_designated_init=yes],
353 [tor_cv_c_c99_designated_init=no] )])
355 if test "$tor_cv_c_c99_designated_init" != "yes"; then
356 AC_MSG_ERROR([Your compiler doesn't support c99 designated initializers. This is required as of Tor 0.2.6.x])
360 AC_ARG_WITH(tor-user,
361 AS_HELP_STRING(--with-tor-user=NAME, [specify username for tor daemon]),
369 AC_ARG_WITH(tor-group,
370 AS_HELP_STRING(--with-tor-group=NAME, [specify group name for tor daemon]),
378 dnl If _WIN32 is defined and non-zero, we are building for win32
379 AC_MSG_CHECKING([for win32])
380 AC_RUN_IFELSE([AC_LANG_SOURCE([
381 int main(int c, char **v) {
392 bwin32=true; AC_MSG_RESULT([yes]),
393 bwin32=false; AC_MSG_RESULT([no]),
394 bwin32=cross; AC_MSG_RESULT([cross])
397 if test "$bwin32" = "cross"; then
398 AC_MSG_CHECKING([for win32 (cross)])
399 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
401 int main(int c, char **v) {return 0;}
404 int main(int c, char **v) {return x(y);}
407 bwin32=true; AC_MSG_RESULT([yes]),
408 bwin32=false; AC_MSG_RESULT([no]))
413 /* Defined to access windows functions and definitions for >=WinXP */
415 # define WINVER 0x0501
418 /* Defined to access _other_ windows functions and definitions for >=WinXP */
419 # ifndef _WIN32_WINNT
420 # define _WIN32_WINNT 0x0501
423 /* Defined to avoid including some windows headers as part of Windows.h */
424 # ifndef WIN32_LEAN_AND_MEAN
425 # define WIN32_LEAN_AND_MEAN 1
430 AM_CONDITIONAL(WIN32, test "x$bwin32" = "xtrue")
431 AM_CONDITIONAL(BUILD_NT_SERVICES, test "x$bwin32" = "xtrue")
432 AM_CONDITIONAL(BUILD_LIBTORRUNNER, test "x$bwin32" != "xtrue")
434 dnl Enable C99 when compiling with MIPSpro
435 AC_MSG_CHECKING([for MIPSpro compiler])
436 AC_COMPILE_IFELSE([AC_LANG_PROGRAM(, [
437 #if (defined(__sgi) && defined(_COMPILER_VERSION))
442 bmipspro=false; AC_MSG_RESULT(no),
443 bmipspro=true; AC_MSG_RESULT(yes))
445 if test "$bmipspro" = "true"; then
446 CFLAGS="$CFLAGS -c99"
451 AC_ARG_VAR([TOR_RUST_TARGET], [Rust target, must be specified when cross-compiling (HOST != BUILD). example: i686-pc-windows-gnu])
453 if test "x$enable_rust" = "xyes"; then
454 AC_ARG_VAR([RUSTC], [path to the rustc binary])
455 AC_CHECK_PROG([RUSTC], [rustc], [rustc],[no])
456 if test "x$RUSTC" = "xno"; then
457 AC_MSG_ERROR([rustc unavailable but rust integration requested.])
460 AC_ARG_VAR([CARGO], [path to the cargo binary])
461 AC_CHECK_PROG([CARGO], [cargo], [cargo],[no])
462 if test "x$CARGO" = "xno"; then
463 AC_MSG_ERROR([cargo unavailable but rust integration requested.])
466 AC_DEFINE([HAVE_RUST], 1, [have Rust])
467 if test "x$enable_fatal_warnings" = "xyes"; then
472 if test "x$enable_cargo_online_mode" = "xyes"; then
476 CARGO_ONLINE=--frozen
479 dnl When we're not allowed to touch the network, we need crate dependencies
480 dnl locally available.
481 AC_MSG_CHECKING([rust crate dependencies])
482 AC_ARG_VAR([TOR_RUST_DEPENDENCIES], [path to directory with local crate mirror])
483 if test "x$TOR_RUST_DEPENDENCIES" = "x"; then
484 TOR_RUST_DEPENDENCIES="${srcdir}/src/ext/rust/crates"
486 dnl Check whether the path exists before we try to cd into it.
487 if test ! -d "$TOR_RUST_DEPENDENCIES"; then
488 AC_MSG_ERROR([Rust dependency directory $TOR_RUST_DEPENDENCIES does not exist. Specify a dependency directory using the TOR_RUST_DEPENDENCIES variable or allow cargo to fetch crates using --enable-cargo-online-mode.])
491 dnl Make the path absolute, since we'll be using it from within a
493 TOR_RUST_DEPENDENCIES=$(cd "$TOR_RUST_DEPENDENCIES" ; pwd)
495 for dep in $rust_crates; do
496 if test ! -d "$TOR_RUST_DEPENDENCIES"/"$dep"; then
497 AC_MSG_ERROR([Failure to find rust dependency $TOR_RUST_DEPENDENCIES/$dep. Specify a dependency directory using the TOR_RUST_DEPENDENCIES variable or allow cargo to fetch crates using --enable-cargo-online-mode.])
501 if test "x$ERRORED" = "x"; then
506 dnl This is a workaround for #46797
507 dnl (a.k.a https://github.com/rust-lang/rust/issues/46797 ). Once the
508 dnl upstream bug is fixed, we can remove this workaround.
511 TOR_RUST_EXTRA_LIBS="-lresolv"
515 dnl For now both MSVC and MinGW rust libraries will output static libs with
516 dnl the MSVC naming convention.
517 if test "$bwin32" = "true"; then
518 tor_rust_static_name=tor_rust.lib
520 tor_rust_static_name=libtor_rust.a
525 if test -n "$TOR_RUST_TARGET"; then
526 if test "$host" = "$build"; then
527 AC_MSG_ERROR([HOST = BUILD is invalid if TOR_RUST_TARGET is specified, see configure --help for more information.])
529 RUST_TARGET_PROP="target = '$TOR_RUST_TARGET'"
530 TOR_RUST_LIB_PATH="src/rust/target/$TOR_RUST_TARGET/release/$tor_rust_static_name"
532 if test "$host" != "$build"; then
533 AC_MSG_ERROR([TOR_RUST_TARGET must be specified when cross-compiling with Rust enabled.])
536 TOR_RUST_LIB_PATH="src/rust/target/release/$tor_rust_static_name"
539 AC_SUBST(RUST_TARGET_PROP)
540 AC_SUBST(TOR_RUST_LIB_PATH)
541 AC_SUBST(CARGO_ONLINE)
545 dnl Let's check the rustc version, too
546 AC_MSG_CHECKING([rust version])
547 RUSTC_VERSION=`$RUSTC --version`
548 RUSTC_VERSION_MAJOR=`$RUSTC --version | cut -d ' ' -f 2 | cut -d '.' -f 1`
549 RUSTC_VERSION_MINOR=`$RUSTC --version | cut -d ' ' -f 2 | cut -d '.' -f 2`
550 if test "x$RUSTC_VERSION_MAJOR" = "x" -o "x$RUSTC_VERSION_MINOR" = "x"; then
551 AC_MSG_ERROR([rustc version couldn't be identified])
553 if test "$RUSTC_VERSION_MAJOR" -lt 2 -a "$RUSTC_VERSION_MINOR" -lt 14; then
554 AC_MSG_ERROR([rustc must be at least version 1.14])
556 AC_MSG_RESULT([$RUSTC_VERSION])
559 AC_SUBST(TOR_RUST_EXTRA_LIBS)
561 AC_SEARCH_LIBS(socket, [socket network])
562 AC_SEARCH_LIBS(gethostbyname, [nsl])
563 AC_SEARCH_LIBS(dlopen, [dl])
564 AC_SEARCH_LIBS(inet_aton, [resolv])
565 AC_SEARCH_LIBS(backtrace, [execinfo])
567 AC_SEARCH_LIBS([clock_gettime], [rt])
568 if test "$LIBS" != "$saved_LIBS"; then
569 # Looks like we need -lrt for clock_gettime().
573 if test "$bwin32" = "false"; then
574 AC_SEARCH_LIBS(pthread_create, [pthread])
575 AC_SEARCH_LIBS(pthread_detach, [pthread])
578 AM_CONDITIONAL(THREADS_WIN32, test "$bwin32" = "true")
579 AM_CONDITIONAL(THREADS_PTHREADS, test "$bwin32" = "false")
583 RtlSecureZeroMemory \
587 backtrace_symbols_fd \
593 get_current_dir_name \
602 gnu_get_libc_version \
638 # Apple messed up when they added some functions: they
639 # forgot to decorate them with appropriate AVAILABLE_MAC_OS_VERSION
642 # We should only probe for these functions if we are sure that we
643 # are not targeting OS X 10.9 or earlier.
644 AC_MSG_CHECKING([for a pre-Yosemite OS X build target])
645 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
647 # include <AvailabilityMacros.h>
648 # ifndef MAC_OS_X_VERSION_10_10
649 # define MAC_OS_X_VERSION_10_10 101000
651 # if defined(MAC_OS_X_VERSION_MIN_REQUIRED)
652 # if MAC_OS_X_VERSION_MIN_REQUIRED < MAC_OS_X_VERSION_10_10
653 # error "Running on Mac OS X 10.9 or earlier"
658 [on_macos_pre_10_10=no ; AC_MSG_RESULT([no])],
659 [on_macos_pre_10_10=yes; AC_MSG_RESULT([yes])])
661 if test "$on_macos_pre_10_10" = "no"; then
663 mach_approximate_time \
667 # We should only probe for these functions if we are sure that we
668 # are not targeting OSX 10.11 or earlier.
669 AC_MSG_CHECKING([for a pre-Sierra OSX build target])
670 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
672 # include <AvailabilityMacros.h>
673 # ifndef MAC_OS_X_VERSION_10_12
674 # define MAC_OS_X_VERSION_10_12 101200
676 # if defined(MAC_OS_X_VERSION_MIN_REQUIRED)
677 # if MAC_OS_X_VERSION_MIN_REQUIRED < MAC_OS_X_VERSION_10_12
678 # error "Running on Mac OSX 10.11 or earlier"
683 [on_macos_pre_10_12=no ; AC_MSG_RESULT([no])],
684 [on_macos_pre_10_12=yes; AC_MSG_RESULT([yes])])
686 if test "$on_macos_pre_10_12" = "no"; then
693 if test "$bwin32" != "true"; then
694 AC_CHECK_HEADERS(pthread.h)
695 AC_CHECK_FUNCS(pthread_create)
696 AC_CHECK_FUNCS(pthread_condattr_setclock)
699 if test "$bwin32" = "true"; then
700 AC_CHECK_DECLS([SecureZeroMemory, _getwch], , , [
707 AM_CONDITIONAL(BUILD_READPASSPHRASE_C,
708 test "x$ac_cv_func_readpassphrase" = "xno" && test "$bwin32" = "false")
710 AC_MSG_CHECKING([whether free(NULL) works])
711 AC_RUN_IFELSE([AC_LANG_PROGRAM([
717 [free_null_ok=true; AC_MSG_RESULT(yes)],
718 [free_null_ok=false; AC_MSG_RESULT(no)],
719 [free_null_ok=cross; AC_MSG_RESULT(cross)])
721 if test "$free_null_ok" = "false"; then
722 AC_MSG_ERROR([Your libc implementation doesn't allow free(NULL), as required by C99.])
725 dnl ------------------------------------------------------
726 dnl Where do you live, libevent? And how do we call you?
728 if test "$bwin32" = "true"; then
729 TOR_LIB_WS32=-lws2_32
730 TOR_LIB_IPHLPAPI=-liphlpapi
731 # Some of the cargo-cults recommend -lwsock32 as well, but I don't
732 # think it's actually necessary.
734 TOR_LIB_USERENV=-luserenv
740 AC_SUBST(TOR_LIB_WS32)
741 AC_SUBST(TOR_LIB_GDI)
742 AC_SUBST(TOR_LIB_IPHLPAPI)
743 AC_SUBST(TOR_LIB_USERENV)
745 tor_libevent_pkg_redhat="libevent"
746 tor_libevent_pkg_debian="libevent-dev"
747 tor_libevent_devpkg_redhat="libevent-devel"
748 tor_libevent_devpkg_debian="libevent-dev"
750 dnl On Gnu/Linux or any place we require it, we'll add librt to the Libevent
751 dnl linking for static builds.
752 STATIC_LIBEVENT_FLAGS=""
753 if test "$enable_static_libevent" = "yes"; then
754 if test "$have_rt" = "yes"; then
755 STATIC_LIBEVENT_FLAGS=" -lrt "
759 TOR_SEARCH_LIBRARY(libevent, $trylibeventdir, [-levent $STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32], [
761 #include <winsock2.h>
763 #include <sys/time.h>
764 #include <sys/types.h>
765 #include <event2/event.h>], [
767 #include <winsock2.h>
770 struct event_base *event_base_new(void);
771 void event_base_free(struct event_base *);],
774 {WSADATA d; WSAStartup(0x101,&d); }
776 event_base_free(event_base_new());
777 ], [--with-libevent-dir], [/opt/libevent])
779 dnl Determine the incantation needed to link libevent.
781 save_LDFLAGS="$LDFLAGS"
782 save_CPPFLAGS="$CPPFLAGS"
784 LIBS="$STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32 $save_LIBS"
785 LDFLAGS="$TOR_LDFLAGS_libevent $LDFLAGS"
786 CPPFLAGS="$TOR_CPPFLAGS_libevent $CPPFLAGS"
788 AC_CHECK_HEADERS(event2/event.h event2/dns.h event2/bufferevent_ssl.h)
790 if test "$enable_static_libevent" = "yes"; then
791 if test "$tor_cv_library_libevent_dir" = "(system)"; then
792 AC_MSG_ERROR("You must specify an explicit --with-libevent-dir=x option when using --enable-static-libevent")
794 TOR_LIBEVENT_LIBS="$TOR_LIBDIR_libevent/libevent.a $STATIC_LIBEVENT_FLAGS"
797 if test "x$ac_cv_header_event2_event_h" = "xyes"; then
798 AC_SEARCH_LIBS(event_new, [event event_core], , AC_MSG_ERROR("libevent2 is installed but linking it failed while searching for event_new"))
799 AC_SEARCH_LIBS(evdns_base_new, [event event_extra], , AC_MSG_ERROR("libevent2 is installed but linking it failed while searching for evdns_base_new"))
801 if test "$ac_cv_search_event_new" != "none required"; then
802 TOR_LIBEVENT_LIBS="$ac_cv_search_event_new"
804 if test "$ac_cv_search_evdns_base_new" != "none required"; then
805 TOR_LIBEVENT_LIBS="$ac_cv_search_evdns_base_new $TOR_LIBEVENT_LIBS"
808 AC_MSG_ERROR("libevent2 is required but the headers could not be found")
812 dnl Now check for particular libevent functions.
813 AC_CHECK_FUNCS([evutil_secure_rng_set_urandom_device_file \
814 evutil_secure_rng_add_bytes \
815 evdns_base_get_nameserver_addr \
820 LDFLAGS="$save_LDFLAGS"
821 CPPFLAGS="$save_CPPFLAGS"
823 dnl Check that libevent is at least at version 2.0.10, the first stable
824 dnl release of its series
825 CPPFLAGS="$CPPFLAGS $TOR_CPPFLAGS_libevent"
826 AC_MSG_CHECKING([whether Libevent is new enough])
827 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
828 #include <event2/event.h>
829 #if !defined(LIBEVENT_VERSION_NUMBER) || LIBEVENT_VERSION_NUMBER < 0x02000a00
835 ])], [ AC_MSG_RESULT([yes]) ],
836 [ AC_MSG_RESULT([no])
837 AC_MSG_ERROR([Libevent is not new enough. We require 2.0.10-stable or later]) ] )
840 LDFLAGS="$save_LDFLAGS"
841 CPPFLAGS="$save_CPPFLAGS"
843 AC_SUBST(TOR_LIBEVENT_LIBS)
845 dnl ------------------------------------------------------
846 dnl Where do you live, libm?
848 dnl On some platforms (Haiku/BeOS) the math library is
849 dnl part of libroot. In which case don't link against lm
852 AC_SEARCH_LIBS(pow, [m], , AC_MSG_ERROR([Could not find pow in libm or libc.]))
853 if test "$ac_cv_search_pow" != "none required"; then
854 TOR_LIB_MATH="$ac_cv_search_pow"
857 AC_SUBST(TOR_LIB_MATH)
859 dnl ------------------------------------------------------
860 dnl Hello, NSS. You're new around here.
861 if test "x$enable_nss" = "xyes"; then
862 PKG_CHECK_MODULES(NSS,
865 [have_nss=no; AC_MSG_ERROR([You asked for NSS but I can't find it.])])
870 dnl ------------------------------------------------------
871 dnl Where do you live, openssl? And how do we call you?
873 if test "x$enable_nss" != "xyes"; then
875 tor_openssl_pkg_redhat="openssl"
876 tor_openssl_pkg_debian="libssl-dev"
877 tor_openssl_devpkg_redhat="openssl-devel"
878 tor_openssl_devpkg_debian="libssl-dev"
880 ALT_openssl_WITHVAL=""
882 AS_HELP_STRING(--with-ssl-dir=PATH, [obsolete alias for --with-openssl-dir]),
884 if test "x$withval" != "xno" && test "x$withval" != "x"; then
885 ALT_openssl_WITHVAL="$withval"
889 AC_MSG_NOTICE([Now, we'll look for OpenSSL >= 1.0.1])
890 TOR_SEARCH_LIBRARY(openssl, $tryssldir, [-lssl -lcrypto $TOR_LIB_GDI $TOR_LIB_WS32],
891 [#include <openssl/ssl.h>
892 char *getenv(const char *);],
893 [struct ssl_cipher_st;
894 unsigned SSL_CIPHER_get_id(const struct ssl_cipher_st *);
895 char *getenv(const char *);],
896 dnl This funny-looking test program calls getenv, so that the compiler
897 dnl will neither make code that call SSL_CIPHER_get_id(NULL) [producing
898 dnl a crash], nor optimize out the call to SSL_CIPHER_get_id().
899 dnl We look for SSL_cipher_get_id() because it is present in
900 dnl OpenSSL >=1.0.1, because it is not deprecated, and because Tor
902 [if (getenv("THIS_SHOULDNT_BE_SET_X201803")) SSL_CIPHER_get_id((void *)0);], [],
903 [/usr/local/opt/openssl /usr/local/openssl /usr/lib/openssl /usr/local/ssl /usr/lib/ssl /usr/local /opt/openssl])
905 dnl XXXX check for OPENSSL_VERSION_NUMBER == SSLeay()
907 if test "$enable_static_openssl" = "yes"; then
908 if test "$tor_cv_library_openssl_dir" = "(system)"; then
909 AC_MSG_ERROR("You must specify an explicit --with-openssl-dir=x option when using --enable-static-openssl")
911 TOR_OPENSSL_LIBS="$TOR_LIBDIR_openssl/libssl.a $TOR_LIBDIR_openssl/libcrypto.a"
914 TOR_OPENSSL_LIBS="-lssl -lcrypto"
916 AC_SUBST(TOR_OPENSSL_LIBS)
918 dnl Now check for particular openssl functions.
920 save_LDFLAGS="$LDFLAGS"
921 save_CPPFLAGS="$CPPFLAGS"
922 LIBS="$TOR_OPENSSL_LIBS $LIBS"
923 LDFLAGS="$TOR_LDFLAGS_openssl $LDFLAGS"
924 CPPFLAGS="$TOR_CPPFLAGS_openssl $CPPFLAGS"
926 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
927 #include <openssl/opensslv.h>
928 #if !defined(LIBRESSL_VERSION_NUMBER) && OPENSSL_VERSION_NUMBER < 0x1000100fL
933 [ AC_MSG_ERROR([OpenSSL is too old. We require 1.0.1 or later. You can specify a path to a newer one with --with-openssl-dir.]) ])
935 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
936 #include <openssl/opensslv.h>
937 #include <openssl/evp.h>
938 #if defined(OPENSSL_NO_EC) || defined(OPENSSL_NO_ECDH) || defined(OPENSSL_NO_ECDSA)
941 #if !defined(NID_X9_62_prime256v1) || !defined(NID_secp224r1)
942 #error "curves unavailable"
946 [ AC_MSG_ERROR([OpenSSL is built without full ECC support, including curves P256 and P224. You can specify a path to one with ECC support with --with-openssl-dir.]) ])
948 AC_CHECK_MEMBERS([struct ssl_method_st.get_cipher_by_char], , ,
949 [#include <openssl/ssl.h>
953 ERR_load_KDF_strings \
954 SSL_SESSION_get_master_key \
955 SSL_get_server_random \
956 SSL_get_client_ciphers \
957 SSL_get_client_random \
959 SSL_CTX_set_security_level \
963 dnl Check if OpenSSL has scrypt implementation.
964 AC_CHECK_FUNCS([ EVP_PBE_scrypt ])
966 dnl Check if OpenSSL structures are opaque
967 AC_CHECK_MEMBERS([SSL.state], , ,
968 [#include <openssl/ssl.h>
971 AC_CHECK_SIZEOF(SHA_CTX, , [AC_INCLUDES_DEFAULT()
972 #include <openssl/sha.h>
977 dnl ======================================================================
980 dnl Define the set of checks for KIST scheduler support.
981 AC_DEFUN([CHECK_KIST_SUPPORT],[
982 dnl KIST needs struct tcp_info and for certain members to exist.
984 [struct tcp_info.tcpi_unacked, struct tcp_info.tcpi_snd_mss],
985 , ,[[#include <netinet/tcp.h>]])
986 dnl KIST needs SIOCOUTQNSD to exist for an ioctl call.
987 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
988 #include <linux/sockios.h>
992 ])], have_siocoutqnsd=yes, have_siocoutqnsd=no)
993 if test "x$have_siocoutqnsd" = "xyes"; then
994 if test "x$ac_cv_member_struct_tcp_info_tcpi_unacked" = "xyes"; then
995 if test "x$ac_cv_member_struct_tcp_info_tcpi_snd_mss" = "xyes"; then
996 have_kist_support=yes
1001 dnl Now, trigger the check.
1003 AS_IF([test "x$have_kist_support" = "xyes"],
1004 [AC_DEFINE(HAVE_KIST_SUPPORT, 1, [Defined if KIST scheduler is supported
1006 [AC_MSG_NOTICE([KIST scheduler can't be used. Missing support.])])
1009 LDFLAGS="$save_LDFLAGS"
1010 CPPFLAGS="$save_CPPFLAGS"
1012 dnl ------------------------------------------------------
1013 dnl Where do you live, zlib? And how do we call you?
1015 tor_zlib_pkg_redhat="zlib"
1016 tor_zlib_pkg_debian="zlib1g"
1017 tor_zlib_devpkg_redhat="zlib-devel"
1018 tor_zlib_devpkg_debian="zlib1g-dev"
1020 TOR_SEARCH_LIBRARY(zlib, $tryzlibdir, [-lz],
1021 [#include <zlib.h>],
1022 [const char * zlibVersion(void);],
1023 [zlibVersion();], [--with-zlib-dir],
1026 if test "$enable_static_zlib" = "yes"; then
1027 if test "$tor_cv_library_zlib_dir" = "(system)"; then
1028 AC_MSG_ERROR("You must specify an explicit --with-zlib-dir=x option when
1029 using --enable-static-zlib")
1031 TOR_ZLIB_LIBS="$TOR_LIBDIR_zlib/libz.a"
1036 AC_SUBST(TOR_ZLIB_LIBS)
1038 dnl ------------------------------------------------------
1039 dnl Where we do we find lzma?
1042 AS_HELP_STRING(--enable-lzma, [enable support for the LZMA compression scheme.]),
1043 [case "${enableval}" in
1046 * ) AC_MSG_ERROR(bad value for --enable-lzma) ;;
1049 if test "x$enable_lzma" = "xno"; then
1052 PKG_CHECK_MODULES([LZMA],
1057 if test "x$have_lzma" = "xno" ; then
1058 AC_MSG_WARN([Unable to find liblzma.])
1062 if test "x$have_lzma" = "xyes"; then
1063 AC_DEFINE(HAVE_LZMA,1,[Have LZMA])
1064 TOR_LZMA_CFLAGS="${LZMA_CFLAGS}"
1065 TOR_LZMA_LIBS="${LZMA_LIBS}"
1067 AC_SUBST(TOR_LZMA_CFLAGS)
1068 AC_SUBST(TOR_LZMA_LIBS)
1070 dnl ------------------------------------------------------
1071 dnl Where we do we find zstd?
1074 AS_HELP_STRING(--enable-zstd, [enable support for the Zstandard compression scheme.]),
1075 [case "${enableval}" in
1078 * ) AC_MSG_ERROR(bad value for --enable-zstd) ;;
1081 if test "x$enable_zstd" = "xno"; then
1084 PKG_CHECK_MODULES([ZSTD],
1089 if test "x$have_zstd" = "xno" ; then
1090 AC_MSG_WARN([Unable to find libzstd.])
1094 if test "x$have_zstd" = "xyes"; then
1095 AC_DEFINE(HAVE_ZSTD,1,[Have Zstd])
1096 TOR_ZSTD_CFLAGS="${ZSTD_CFLAGS}"
1097 TOR_ZSTD_LIBS="${ZSTD_LIBS}"
1099 dnl now check for zstd functions
1101 save_CFLAGS="$CFLAGS"
1102 LIBS="$LIBS $ZSTD_LIBS"
1103 CFLAGS="$CFLAGS $ZSTD_CFLAGS"
1104 AC_CHECK_FUNCS(ZSTD_estimateCStreamSize \
1105 ZSTD_estimateDCtxSize)
1107 CFLAGS="$save_CFLAGS"
1109 AC_SUBST(TOR_ZSTD_CFLAGS)
1110 AC_SUBST(TOR_ZSTD_LIBS)
1112 dnl ----------------------------------------------------------------------
1113 dnl Check if libcap is available for capabilities.
1115 tor_cap_pkg_debian="libcap2"
1116 tor_cap_pkg_redhat="libcap"
1117 tor_cap_devpkg_debian="libcap-dev"
1118 tor_cap_devpkg_redhat="libcap-devel"
1120 AC_CHECK_LIB([cap], [cap_init], [],
1121 AC_MSG_NOTICE([Libcap was not found. Capabilities will not be usable.])
1123 AC_CHECK_FUNCS(cap_set_proc)
1125 dnl ---------------------------------------------------------------------
1126 dnl Now that we know about our major libraries, we can check for compiler
1127 dnl and linker hardening options. We need to do this with the libraries known,
1128 dnl since sometimes the linker will like an option but not be willing to
1129 dnl use it with a build of a library.
1131 all_ldflags_for_check="$TOR_LDFLAGS_zlib $TOR_LDFLAGS_openssl $TOR_LDFLAGS_libevent"
1132 all_libs_for_check="$TOR_ZLIB_LIBS $TOR_LIB_MATH $TOR_LIBEVENT_LIBS $TOR_OPENSSL_LIBS $TOR_SYSTEMD_LIBS $TOR_LIB_WS32 $TOR_LIB_GDI $TOR_LIB_USERENV $TOR_CAP_LIBS"
1140 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
1141 #if !defined(__clang__)
1143 #endif])], have_clang=yes, have_clang=no)
1145 if test "x$enable_pic" = "xyes"; then
1146 TOR_CHECK_CFLAGS(-fPIC)
1149 if test "x$enable_gcc_hardening" != "xno"; then
1150 CFLAGS="$CFLAGS -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2"
1151 if test "x$have_clang" = "xyes"; then
1152 TOR_CHECK_CFLAGS(-Qunused-arguments)
1154 TOR_CHECK_CFLAGS(-fstack-protector-all, also_link)
1155 AS_VAR_PUSHDEF([can_compile], [tor_cv_cflags_-fstack-protector-all])
1156 AS_VAR_PUSHDEF([can_link], [tor_can_link_-fstack-protector-all])
1157 m4_ifdef([AS_VAR_IF],[
1158 AS_VAR_IF(can_compile, [yes],
1159 AS_VAR_IF(can_link, [yes],
1161 AC_MSG_ERROR([We tried to build with stack protection; it looks like your compiler supports it but your libc does not provide it. Are you missing libssp? (You can --disable-gcc-hardening to ignore this error.)]))
1163 AS_VAR_POPDEF([can_link])
1164 AS_VAR_POPDEF([can_compile])
1165 TOR_CHECK_CFLAGS(-Wstack-protector)
1166 TOR_CHECK_CFLAGS(--param ssp-buffer-size=1)
1167 if test "$bwin32" = "false" && test "$enable_libfuzzer" != "yes" && test "$enable_oss_fuzz" != "yes"; then
1168 if test "$enable_pic" != "yes"; then
1169 # If we have already enabled -fPIC, then we don't also need to
1170 # compile with -fPIE...
1171 TOR_CHECK_CFLAGS(-fPIE)
1173 # ... but we want to link our executables with -pie in any case, since
1174 # they're executables, not a library.
1175 TOR_CHECK_LDFLAGS(-pie, "$all_ldflags_for_check", "$all_libs_for_check")
1177 TOR_TRY_COMPILE_WITH_CFLAGS(-fwrapv, also_link, CFLAGS_FWRAPV="-fwrapv", true)
1180 if test "$fragile_hardening" = "yes"; then
1181 TOR_TRY_COMPILE_WITH_CFLAGS(-ftrapv, also_link, CFLAGS_FTRAPV="-ftrapv", true)
1182 if test "$tor_cv_cflags__ftrapv" = "yes" && test "$tor_can_link__ftrapv" != "yes"; then
1183 AC_MSG_WARN([The compiler supports -ftrapv, but for some reason I was not able to link with -ftrapv. Are you missing run-time support? Run-time hardening will not work as well as it should.])
1186 if test "$tor_cv_cflags__ftrapv" != "yes"; then
1187 AC_MSG_ERROR([You requested fragile hardening, but the compiler does not seem to support -ftrapv.])
1190 TOR_TRY_COMPILE_WITH_CFLAGS([-fsanitize=address], also_link, CFLAGS_ASAN="-fsanitize=address", true)
1191 if test "$tor_cv_cflags__fsanitize_address" = "yes" && test "$tor_can_link__fsanitize_address" != "yes"; then
1192 AC_MSG_ERROR([The compiler supports -fsanitize=address, but for some reason I was not able to link when using it. Are you missing run-time support? With GCC you need libubsan.*, and with Clang you need libclang_rt.ubsan*])
1195 TOR_TRY_COMPILE_WITH_CFLAGS([-fsanitize=undefined], also_link, CFLAGS_UBSAN="-fsanitize=undefined", true)
1196 if test "$tor_cv_cflags__fsanitize_address" = "yes" && test "$tor_can_link__fsanitize_address" != "yes"; then
1197 AC_MSG_ERROR([The compiler supports -fsanitize=undefined, but for some reason I was not able to link when using it. Are you missing run-time support? With GCC you need libasan.*, and with Clang you need libclang_rt.ubsan*])
1200 TOR_CHECK_CFLAGS([-fno-omit-frame-pointer])
1203 dnl Find the correct libraries to add in order to use the sanitizers.
1205 dnl When building Rust, Cargo will run the linker with the -nodefaultlibs
1206 dnl option, which will prevent the compiler from linking the sanitizer
1207 dnl libraries it needs. We need to specify them manually.
1209 dnl What's more, we need to specify them in a linker script rather than
1210 dnl from build.rs: these options aren't allowed in the cargo:rustc-flags
1212 RUST_LINKER_OPTIONS=""
1213 if test "x$have_clang" = "xyes"; then
1214 if test "x$CFLAGS_ASAN" != "x"; then
1215 RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -Clink-arg=$CFLAGS_ASAN -Cdefault-linker-libraries"
1217 if test "x$CFLAGS_UBSAN" != "x"; then
1218 RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -Clink-arg=$CFLAGS_UBSAN -Cdefault-linker-libraries"
1221 if test "x$CFLAGS_ASAN" != "x"; then
1222 RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -Clink-arg=-fsanitize=address -Cdefault-linker-libraries"
1224 if test "x$CFLAGS_UBSAN" != "x"; then
1225 RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -Clink-arg=-fsanitize=undefined -Cdefault-linker-libraries"
1228 AC_SUBST(RUST_LINKER_OPTIONS)
1230 CFLAGS_BUGTRAP="$CFLAGS_FTRAPV $CFLAGS_ASAN $CFLAGS_UBSAN"
1231 CFLAGS_CONSTTIME="$CFLAGS_FWRAPV"
1233 mulodi_fixes_ftrapv=no
1234 if test "$have_clang" = "yes"; then
1235 saved_CFLAGS="$CFLAGS"
1236 CFLAGS="$CFLAGS $CFLAGS_FTRAPV"
1237 AC_MSG_CHECKING([whether clang -ftrapv can link a 64-bit int multiply])
1242 int main(int argc, char **argv)
1244 int64_t x = ((int64_t)atoi(argv[1])) * (int64_t)atoi(argv[2])
1245 * (int64_t)atoi(argv[3]);
1248 [ftrapv_can_link=yes; AC_MSG_RESULT([yes])],
1249 [ftrapv_can_link=no; AC_MSG_RESULT([no])])
1250 if test "$ftrapv_can_link" = "no"; then
1251 AC_MSG_CHECKING([whether defining __mulodi4 fixes that])
1256 int64_t __mulodi4(int64_t a, int64_t b, int *overflow) {
1260 int main(int argc, char **argv)
1262 int64_t x = ((int64_t)atoi(argv[1])) * (int64_t)atoi(argv[2])
1263 * (int64_t)atoi(argv[3]);
1266 [mulodi_fixes_ftrapv=yes; AC_MSG_RESULT([yes])],
1267 [mulodi_fixes_ftrapv=no; AC_MSG_RESULT([no])])
1269 CFLAGS="$saved_CFLAGS"
1272 AM_CONDITIONAL(ADD_MULODI4, test "$mulodi_fixes_ftrapv" = "yes")
1274 dnl These cflags add bunches of branches, and we haven't been able to
1275 dnl persuade ourselves that they're suitable for code that needs to be
1277 AC_SUBST(CFLAGS_BUGTRAP)
1278 dnl These cflags are variant ones sutable for code that needs to be
1280 AC_SUBST(CFLAGS_CONSTTIME)
1282 if test "x$enable_linker_hardening" != "xno"; then
1283 TOR_CHECK_LDFLAGS(-z relro -z now, "$all_ldflags_for_check", "$all_libs_for_check")
1286 # For backtrace support
1287 TOR_CHECK_LDFLAGS(-rdynamic)
1289 dnl ------------------------------------------------------
1290 dnl Now see if we have a -fomit-frame-pointer compiler option.
1292 saved_CFLAGS="$CFLAGS"
1293 TOR_CHECK_CFLAGS(-fomit-frame-pointer)
1294 F_OMIT_FRAME_POINTER=''
1295 if test "$saved_CFLAGS" != "$CFLAGS"; then
1296 if test "$fragile_hardening" = "yes"; then
1297 F_OMIT_FRAME_POINTER='-fomit-frame-pointer'
1300 CFLAGS="$saved_CFLAGS"
1301 AC_SUBST(F_OMIT_FRAME_POINTER)
1303 dnl ------------------------------------------------------
1304 dnl If we are adding -fomit-frame-pointer (or if the compiler's doing it
1305 dnl for us, as GCC 4.6 and later do at many optimization levels), then
1306 dnl we should try to add -fasynchronous-unwind-tables so that our backtrace
1308 TOR_CHECK_CFLAGS(-fasynchronous-unwind-tables)
1310 dnl ============================================================
1311 dnl Check for libseccomp
1313 if test "x$enable_seccomp" != "xno"; then
1314 AC_CHECK_HEADERS([seccomp.h])
1315 AC_SEARCH_LIBS(seccomp_init, [seccomp])
1318 dnl ============================================================
1319 dnl Check for libscrypt
1321 if test "x$enable_libscrypt" != "xno"; then
1322 AC_CHECK_HEADERS([libscrypt.h])
1323 AC_SEARCH_LIBS(libscrypt_scrypt, [scrypt])
1324 AC_CHECK_FUNCS([libscrypt_scrypt])
1327 dnl ============================================================
1328 dnl We need an implementation of curve25519.
1330 dnl set these defaults.
1331 build_curve25519_donna=no
1332 build_curve25519_donna_c64=no
1333 use_curve25519_donna=no
1334 use_curve25519_nacl=no
1337 dnl The best choice is using curve25519-donna-c64, but that requires
1339 AC_CACHE_CHECK([whether we can use curve25519-donna-c64],
1340 tor_cv_can_use_curve25519_donna_c64,
1342 [AC_LANG_PROGRAM([dnl
1344 typedef unsigned uint128_t __attribute__((mode(TI)));
1345 int func(uint64_t a, uint64_t b) {
1346 uint128_t c = ((uint128_t)a) * b;
1347 int ok = ((uint64_t)(c>>96)) == 522859 &&
1348 (((uint64_t)(c>>64))&0xffffffffL) == 3604448702L &&
1349 (((uint64_t)(c>>32))&0xffffffffL) == 2351960064L &&
1350 (((uint64_t)(c))&0xffffffffL) == 0;
1354 int ok = func( ((uint64_t)2000000000) * 1000000000,
1355 ((uint64_t)1234567890) << 24);
1358 [tor_cv_can_use_curve25519_donna_c64=yes],
1359 [tor_cv_can_use_curve25519_donna_c64=no],
1361 [AC_LANG_PROGRAM([dnl
1363 typedef unsigned uint128_t __attribute__((mode(TI)));
1364 int func(uint64_t a, uint64_t b) {
1365 uint128_t c = ((uint128_t)a) * b;
1366 int ok = ((uint64_t)(c>>96)) == 522859 &&
1367 (((uint64_t)(c>>64))&0xffffffffL) == 3604448702L &&
1368 (((uint64_t)(c>>32))&0xffffffffL) == 2351960064L &&
1369 (((uint64_t)(c))&0xffffffffL) == 0;
1373 int ok = func( ((uint64_t)2000000000) * 1000000000,
1374 ((uint64_t)1234567890) << 24);
1377 [tor_cv_can_use_curve25519_donna_c64=cross],
1378 [tor_cv_can_use_curve25519_donna_c64=no])])])
1380 AC_CHECK_HEADERS([crypto_scalarmult_curve25519.h \
1381 nacl/crypto_scalarmult_curve25519.h])
1383 AC_CACHE_CHECK([for nacl compiled with a fast curve25519 implementation],
1384 tor_cv_can_use_curve25519_nacl,
1385 [tor_saved_LIBS="$LIBS"
1388 [AC_LANG_PROGRAM([dnl
1389 #ifdef HAVE_CRYPTO_SCALARMULT_CURVE25519_H
1390 #include <crypto_scalarmult_curve25519.h>
1391 #elif defined(HAVE_NACL_CRYPTO_SCALARMULT_CURVE25519_H)
1392 #include <nacl/crypto_scalarmult_curve25519.h>
1394 #ifdef crypto_scalarmult_curve25519_ref_BYTES
1395 #error Hey, this is the reference implementation! That's not fast.
1398 unsigned char *a, *b, *c; crypto_scalarmult_curve25519(a,b,c);
1399 ])], [tor_cv_can_use_curve25519_nacl=yes],
1400 [tor_cv_can_use_curve25519_nacl=no])
1401 LIBS="$tor_saved_LIBS" ])
1403 dnl Okay, now we need to figure out which one to actually use. Fall back
1404 dnl to curve25519-donna.c
1406 if test "x$tor_cv_can_use_curve25519_donna_c64" != "xno"; then
1407 build_curve25519_donna_c64=yes
1408 use_curve25519_donna=yes
1409 elif test "x$tor_cv_can_use_curve25519_nacl" = "xyes"; then
1410 use_curve25519_nacl=yes
1411 CURVE25519_LIBS=-lnacl
1413 build_curve25519_donna=yes
1414 use_curve25519_donna=yes
1417 if test "x$use_curve25519_donna" = "xyes"; then
1418 AC_DEFINE(USE_CURVE25519_DONNA, 1,
1419 [Defined if we should use an internal curve25519_donna{,_c64} implementation])
1421 if test "x$use_curve25519_nacl" = "xyes"; then
1422 AC_DEFINE(USE_CURVE25519_NACL, 1,
1423 [Defined if we should use a curve25519 from nacl])
1425 AM_CONDITIONAL(BUILD_CURVE25519_DONNA,
1426 test "x$build_curve25519_donna" = "xyes")
1427 AM_CONDITIONAL(BUILD_CURVE25519_DONNA_C64,
1428 test "x$build_curve25519_donna_c64" = "xyes")
1429 AC_SUBST(CURVE25519_LIBS)
1431 dnl Make sure to enable support for large off_t if available.
1434 AC_CHECK_HEADERS([errno.h \
1448 gnu/libc-version.h \
1487 AC_CHECK_HEADERS(sys/param.h)
1489 AC_CHECK_HEADERS(net/if.h, net_if_found=1, net_if_found=0,
1490 [#ifdef HAVE_SYS_TYPES_H
1491 #include <sys/types.h>
1493 #ifdef HAVE_SYS_SOCKET_H
1494 #include <sys/socket.h>
1496 AC_CHECK_HEADERS(net/pfvar.h, net_pfvar_found=1, net_pfvar_found=0,
1497 [#ifdef HAVE_SYS_TYPES_H
1498 #include <sys/types.h>
1500 #ifdef HAVE_SYS_SOCKET_H
1501 #include <sys/socket.h>
1503 #ifdef HAVE_NET_IF_H
1506 #ifdef HAVE_NETINET_IN_H
1507 #include <netinet/in.h>
1510 AC_CHECK_HEADERS(linux/if.h,[],[],
1512 #ifdef HAVE_SYS_SOCKET_H
1513 #include <sys/socket.h>
1517 AC_CHECK_HEADERS(linux/netfilter_ipv4.h,
1518 linux_netfilter_ipv4=1, linux_netfilter_ipv4=0,
1519 [#ifdef HAVE_SYS_TYPES_H
1520 #include <sys/types.h>
1522 #ifdef HAVE_SYS_SOCKET_H
1523 #include <sys/socket.h>
1525 #ifdef HAVE_LIMITS_H
1528 #ifdef HAVE_LINUX_TYPES_H
1529 #include <linux/types.h>
1531 #ifdef HAVE_NETINET_IN6_H
1532 #include <netinet/in6.h>
1534 #ifdef HAVE_NETINET_IN_H
1535 #include <netinet/in.h>
1538 AC_CHECK_HEADERS(linux/netfilter_ipv6/ip6_tables.h,
1539 linux_netfilter_ipv6_ip6_tables=1, linux_netfilter_ipv6_ip6_tables=0,
1540 [#ifdef HAVE_SYS_TYPES_H
1541 #include <sys/types.h>
1543 #ifdef HAVE_SYS_SOCKET_H
1544 #include <sys/socket.h>
1546 #ifdef HAVE_LIMITS_H
1549 #ifdef HAVE_LINUX_TYPES_H
1550 #include <linux/types.h>
1552 #ifdef HAVE_NETINET_IN6_H
1553 #include <netinet/in6.h>
1555 #ifdef HAVE_NETINET_IN_H
1556 #include <netinet/in.h>
1558 #ifdef HAVE_LINUX_IF_H
1559 #include <linux/if.h>
1563 if test "x$net_if_found" = "x1" && test "x$net_pfvar_found" = "x1"; then
1566 if test "x$linux_netfilter_ipv4" = "x1"; then
1569 if test "x$linux_netfilter_ipv6_ip6_tables" = "x1"; then
1572 if test "x$transparent_ok" = "x1"; then
1573 AC_DEFINE(USE_TRANSPARENT, 1, "Define to enable transparent proxy support")
1575 AC_MSG_NOTICE([Transparent proxy support enabled, but missing headers.])
1578 AC_CHECK_MEMBERS([struct timeval.tv_sec], , ,
1579 [#ifdef HAVE_SYS_TYPES_H
1580 #include <sys/types.h>
1582 #ifdef HAVE_SYS_TIME_H
1583 #include <sys/time.h>
1586 AC_CHECK_SIZEOF(char)
1587 AC_CHECK_SIZEOF(short)
1588 AC_CHECK_SIZEOF(int)
1589 AC_CHECK_SIZEOF(long)
1590 AC_CHECK_SIZEOF(long long)
1591 AC_CHECK_SIZEOF(__int64)
1592 AC_CHECK_SIZEOF(void *)
1593 AC_CHECK_SIZEOF(time_t)
1594 AC_CHECK_SIZEOF(size_t)
1595 AC_CHECK_SIZEOF(pid_t)
1597 AC_CHECK_TYPES([uint, u_char, ssize_t])
1599 AC_PC_FROM_UCONTEXT([:])
1601 dnl used to include sockaddr_storage, but everybody has that.
1602 AC_CHECK_TYPES([struct in6_addr, struct sockaddr_in6, sa_family_t], , ,
1603 [#ifdef HAVE_SYS_TYPES_H
1604 #include <sys/types.h>
1606 #ifdef HAVE_NETINET_IN_H
1607 #include <netinet/in.h>
1609 #ifdef HAVE_NETINET_IN6_H
1610 #include <netinet/in6.h>
1612 #ifdef HAVE_SYS_SOCKET_H
1613 #include <sys/socket.h>
1616 #define _WIN32_WINNT 0x0501
1617 #define WIN32_LEAN_AND_MEAN
1618 #include <winsock2.h>
1619 #include <ws2tcpip.h>
1622 AC_CHECK_MEMBERS([struct in6_addr.s6_addr32, struct in6_addr.s6_addr16, struct sockaddr_in.sin_len, struct sockaddr_in6.sin6_len], , ,
1623 [#ifdef HAVE_SYS_TYPES_H
1624 #include <sys/types.h>
1626 #ifdef HAVE_NETINET_IN_H
1627 #include <netinet/in.h>
1629 #ifdef HAVE_NETINET_IN6_H
1630 #include <netinet/in6.h>
1632 #ifdef HAVE_SYS_SOCKET_H
1633 #include <sys/socket.h>
1636 #define _WIN32_WINNT 0x0501
1637 #define WIN32_LEAN_AND_MEAN
1638 #include <winsock2.h>
1639 #include <ws2tcpip.h>
1643 AC_CHECK_TYPES([rlim_t], , ,
1644 [#ifdef HAVE_SYS_TYPES_H
1645 #include <sys/types.h>
1647 #ifdef HAVE_SYS_TIME_H
1648 #include <sys/time.h>
1650 #ifdef HAVE_SYS_RESOURCE_H
1651 #include <sys/resource.h>
1655 AX_CHECK_SIGN([time_t],
1658 #ifdef HAVE_SYS_TYPES_H
1659 #include <sys/types.h>
1661 #ifdef HAVE_SYS_TIME_H
1662 #include <sys/time.h>
1669 if test "$ax_cv_decl_time_t_signed" = "no"; then
1670 AC_MSG_ERROR([You have an unsigned time_t; Tor does not support that. Please tell the Tor developers about your interesting platform.])
1673 AX_CHECK_SIGN([size_t],
1674 [ tor_cv_size_t_signed=yes ],
1675 [ tor_cv_size_t_signed=no ], [
1676 #ifdef HAVE_SYS_TYPES_H
1677 #include <sys/types.h>
1681 if test "$ax_cv_decl_size_t_signed" = "yes"; then
1682 AC_MSG_ERROR([You have a signed size_t; that's grossly nonconformant.])
1685 AX_CHECK_SIGN([enum always],
1686 [ AC_DEFINE(ENUM_VALS_ARE_SIGNED, 1, [Define if enum is always signed]) ],
1688 enum always { AAA, BBB, CCC };
1691 AC_CHECK_SIZEOF(socklen_t, , [AC_INCLUDES_DEFAULT()
1692 #ifdef HAVE_SYS_SOCKET_H
1693 #include <sys/socket.h>
1697 # We want to make sure that we _don't_ have a cell_t defined, like IRIX does.
1699 AC_CHECK_SIZEOF(cell_t)
1701 # Let's see if stdatomic works. (There are some debian clangs that screw it
1702 # up; see Tor bug #26779 and debian bug 903709.)
1703 AC_CACHE_CHECK([whether C11 stdatomic.h actually works],
1704 tor_cv_stdatomic_works,
1705 [AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
1706 #include <stdatomic.h>
1707 struct x { atomic_size_t y; };
1708 void try_atomic_init(struct x *xx)
1710 atomic_init(&xx->y, 99);
1711 atomic_fetch_add(&xx->y, 1);
1713 ]])], [tor_cv_stdatomic_works=yes], [tor_cv_stdatomic_works=no])])
1715 if test "$tor_cv_stdatomic_works" = "yes"; then
1716 AC_DEFINE(STDATOMIC_WORKS, 1, [Set to 1 if we can compile a simple stdatomic example.])
1717 elif test "$ac_cv_header_stdatomic_h" = "yes"; then
1718 AC_MSG_WARN([Your compiler provides the stdatomic.h header, but it doesn't seem to work. I'll pretend it isn't there. If you are using Clang on Debian, maybe this is because of https://bugs.debian.org/903709 ])
1721 # Now make sure that NULL can be represented as zero bytes.
1722 AC_CACHE_CHECK([whether memset(0) sets pointers to NULL], tor_cv_null_is_zero,
1723 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1724 [[#include <stdlib.h>
1727 #ifdef HAVE_STDDEF_H
1730 int main () { char *p1,*p2; p1=NULL; memset(&p2,0,sizeof(p2));
1731 return memcmp(&p1,&p2,sizeof(char*))?1:0; }]])],
1732 [tor_cv_null_is_zero=yes],
1733 [tor_cv_null_is_zero=no],
1734 [tor_cv_null_is_zero=cross])])
1736 if test "$tor_cv_null_is_zero" = "cross"; then
1737 # Cross-compiling; let's hope that the target isn't raving mad.
1738 AC_MSG_NOTICE([Cross-compiling: we'll assume that NULL is represented as a sequence of 0-valued bytes.])
1741 if test "$tor_cv_null_is_zero" != "no"; then
1742 AC_DEFINE([NULL_REP_IS_ZERO_BYTES], 1,
1743 [Define to 1 iff memset(0) sets pointers to NULL])
1746 AC_CACHE_CHECK([whether memset(0) sets doubles to 0.0], tor_cv_dbl0_is_zero,
1747 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1748 [[#include <stdlib.h>
1751 #ifdef HAVE_STDDEF_H
1754 int main () { double d1,d2; d1=0; memset(&d2,0,sizeof(d2));
1755 return memcmp(&d1,&d2,sizeof(d1))?1:0; }]])],
1756 [tor_cv_dbl0_is_zero=yes],
1757 [tor_cv_dbl0_is_zero=no],
1758 [tor_cv_dbl0_is_zero=cross])])
1760 if test "$tor_cv_dbl0_is_zero" = "cross"; then
1761 # Cross-compiling; let's hope that the target isn't raving mad.
1762 AC_MSG_NOTICE([Cross-compiling: we'll assume that 0.0 can be represented as a sequence of 0-valued bytes.])
1765 if test "$tor_cv_dbl0_is_zero" != "no"; then
1766 AC_DEFINE([DOUBLE_0_REP_IS_ZERO_BYTES], 1,
1767 [Define to 1 iff memset(0) sets doubles to 0.0])
1770 # And what happens when we malloc zero?
1771 AC_CACHE_CHECK([whether we can malloc(0) safely.], tor_cv_malloc_zero_works,
1772 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1773 [[#include <stdlib.h>
1776 #ifdef HAVE_STDDEF_H
1779 int main () { return malloc(0)?0:1; }]])],
1780 [tor_cv_malloc_zero_works=yes],
1781 [tor_cv_malloc_zero_works=no],
1782 [tor_cv_malloc_zero_works=cross])])
1784 if test "$tor_cv_malloc_zero_works" = "cross"; then
1785 # Cross-compiling; let's hope that the target isn't raving mad.
1786 AC_MSG_NOTICE([Cross-compiling: we'll assume that we need to check malloc() arguments for 0.])
1789 if test "$tor_cv_malloc_zero_works" = "yes"; then
1790 AC_DEFINE([MALLOC_ZERO_WORKS], 1,
1791 [Define to 1 iff malloc(0) returns a pointer])
1794 # whether we seem to be in a 2s-complement world.
1795 AC_CACHE_CHECK([whether we are using 2s-complement arithmetic], tor_cv_twos_complement,
1796 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1797 [[int main () { int problem = ((-99) != (~99)+1);
1798 return problem ? 1 : 0; }]])],
1799 [tor_cv_twos_complement=yes],
1800 [tor_cv_twos_complement=no],
1801 [tor_cv_twos_complement=cross])])
1803 if test "$tor_cv_twos_complement" = "cross"; then
1804 # Cross-compiling; let's hope that the target isn't raving mad.
1805 AC_MSG_NOTICE([Cross-compiling: we'll assume that negative integers are represented with two's complement.])
1808 if test "$tor_cv_twos_complement" != "no"; then
1809 AC_DEFINE([USING_TWOS_COMPLEMENT], 1,
1810 [Define to 1 iff we represent negative integers with
1814 # What does shifting a negative value do?
1815 AC_CACHE_CHECK([whether right-shift on negative values does sign-extension], tor_cv_sign_extend,
1816 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1817 [[int main () { int okay = (-60 >> 8) == -1; return okay ? 0 : 1; }]])],
1818 [tor_cv_sign_extend=yes],
1819 [tor_cv_sign_extend=no],
1820 [tor_cv_sign_extend=cross])])
1822 if test "$tor_cv_sign_extend" = "cross"; then
1823 # Cross-compiling; let's hope that the target isn't raving mad.
1824 AC_MSG_NOTICE([Cross-compiling: we'll assume that right-shifting negative integers causes sign-extension])
1827 if test "$tor_cv_sign_extend" != "no"; then
1828 AC_DEFINE([RSHIFT_DOES_SIGN_EXTEND], 1,
1829 [Define to 1 iff right-shifting a negative value performs sign-extension])
1832 # Is uint8_t the same type as unsigned char?
1833 AC_CACHE_CHECK([whether uint8_t is the same type as unsigned char], tor_cv_uint8_uchar,
1834 [AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
1837 unsigned char c;]])],
1838 [tor_cv_uint8_uchar=yes],
1839 [tor_cv_uint8_uchar=no],
1840 [tor_cv_uint8_uchar=cross])])
1842 if test "$tor_cv_uint8_uchar" = "cross"; then
1843 AC_MSG_NOTICE([Cross-compiling: we'll assume that uint8_t is the same type as unsigned char])
1846 if test "$tor_cv_uint8_uchar" = "no"; then
1847 AC_MSG_ERROR([We assume that uint8_t is the same type as unsigned char, but your compiler disagrees.])
1850 AC_ARG_WITH(tcmalloc,
1851 AS_HELP_STRING(--with-tcmalloc, [use tcmalloc memory allocation library. Deprecated; see --with-malloc]),
1852 [ tcmalloc=yes ], [ tcmalloc=no ])
1854 default_malloc=system
1856 if test "x$enable_openbsd_malloc" = "xyes" ; then
1857 AC_MSG_NOTICE([The --enable-openbsd-malloc argument is deprecated; use --with-malloc=openbsd instead.])
1858 default_malloc=openbsd
1861 if test "x$tcmalloc" = "xyes"; then
1862 AC_MSG_NOTICE([The --with-tcmalloc argument is deprecated; use --with-malloc=tcmalloc instead.])
1863 default_malloc=tcmalloc
1867 AS_HELP_STRING([--with-malloc=[system,jemalloc,tcmalloc,openbsd]],
1868 [select special malloc implementation [system]]),
1869 [ malloc="$with_malloc" ], [ malloc="$default_malloc" ])
1873 PKG_CHECK_MODULES([TCMALLOC],
1878 if test "x$have_tcmalloc" = "xno" ; then
1879 AC_MSG_ERROR([Unable to find tcmalloc requested by --with-malloc.])
1882 CFLAGS="$CFLAGS $TCMALLOC_CFLAGS"
1883 LIBS="$TCMALLOC_LIBS $LIBS"
1887 PKG_CHECK_MODULES([JEMALLOC],
1892 if test "x$have_tcmalloc" = "xno" ; then
1893 AC_MSG_ERROR([Unable to find jemalloc requested by --with-malloc.])
1896 CFLAGS="$CFLAGS $JEMALLOC_CFLAGS"
1897 LIBS="$JEMALLOC_LIBS $LIBS"
1898 using_custom_malloc=yes
1902 AC_MSG_WARN([The openbsd malloc port is deprecated in Tor 0.3.5 and will be removed in a future version.])
1903 enable_openbsd_malloc=yes
1907 # handle this later, including the jemalloc fallback
1908 AC_CHECK_FUNCS(mallinfo)
1911 [AC_MSG_ERROR([--with-malloc=`$with_malloc' not supported, see --help])
1914 AM_CONDITIONAL(USE_OPENBSD_MALLOC, test "x$enable_openbsd_malloc" = "xyes")
1916 if test "$malloc" != "system"; then
1917 # Tell the C compiler not to use the system allocator functions.
1918 TOR_CHECK_CFLAGS([-fno-builtin-malloc -fno-builtin-realloc -fno-builtin-calloc -fno-builtin-free])
1920 if test "$using_custom_malloc" = "yes"; then
1921 # Tell the C compiler not to use the system allocator functions.
1922 TOR_CHECK_CFLAGS([-fno-builtin-malloc -fno-builtin-realloc -fno-builtin-calloc -fno-builtin-free])
1925 # By default, we're going to assume we don't have mlockall()
1926 # bionic and other platforms have various broken mlockall subsystems.
1927 # Some systems don't have a working mlockall, some aren't linkable,
1928 # and some have it but don't declare it.
1929 AC_CHECK_FUNCS(mlockall)
1930 AC_CHECK_DECLS([mlockall], , , [
1931 #ifdef HAVE_SYS_MMAN_H
1932 #include <sys/mman.h>
1935 # Allow user to specify an alternate syslog facility
1936 AC_ARG_WITH(syslog-facility,
1937 AS_HELP_STRING(--with-syslog-facility=LOG, [syslog facility to use (default=LOG_DAEMON)]),
1938 syslog_facility="$withval", syslog_facility="LOG_DAEMON")
1939 AC_DEFINE_UNQUOTED(LOGFACILITY,$syslog_facility,[name of the syslog facility])
1940 AC_SUBST(LOGFACILITY)
1942 # Check if we have getresuid and getresgid
1943 AC_CHECK_FUNCS(getresuid getresgid)
1945 # Check for gethostbyname_r in all its glorious incompatible versions.
1946 # (This logic is based on that in Python's configure.in)
1947 AH_TEMPLATE(HAVE_GETHOSTBYNAME_R,
1948 [Define this if you have any gethostbyname_r()])
1950 AC_CHECK_FUNC(gethostbyname_r, [
1951 AC_MSG_CHECKING([how many arguments gethostbyname_r() wants])
1953 CFLAGS="$CFLAGS $MY_CPPFLAGS $MY_THREAD_CPPFLAGS $MY_CFLAGS"
1954 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1958 struct hostent *h1, *h2;
1960 (void)gethostbyname_r(cp1,h1,cp2,i1,&h2,&i2);
1962 AC_DEFINE(HAVE_GETHOSTBYNAME_R)
1963 AC_DEFINE(HAVE_GETHOSTBYNAME_R_6_ARG, 1,
1964 [Define this if gethostbyname_r takes 6 arguments])
1967 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1973 (void)gethostbyname_r(cp1,h1,cp2,i1,&i2);
1975 AC_DEFINE(HAVE_GETHOSTBYNAME_R)
1976 AC_DEFINE(HAVE_GETHOSTBYNAME_R_5_ARG, 1,
1977 [Define this if gethostbyname_r takes 5 arguments])
1980 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1985 struct hostent_data hd;
1986 (void) gethostbyname_r(cp1,h1,&hd);
1988 AC_DEFINE(HAVE_GETHOSTBYNAME_R)
1989 AC_DEFINE(HAVE_GETHOSTBYNAME_R_3_ARG, 1,
1990 [Define this if gethostbyname_r takes 3 arguments])
2000 AC_CACHE_CHECK([whether the C compiler supports __func__],
2001 tor_cv_have_func_macro,
2002 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
2004 int main(int c, char **v) { puts(__func__); }])],
2005 tor_cv_have_func_macro=yes,
2006 tor_cv_have_func_macro=no))
2008 AC_CACHE_CHECK([whether the C compiler supports __FUNC__],
2009 tor_cv_have_FUNC_macro,
2010 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
2012 int main(int c, char **v) { puts(__FUNC__); }])],
2013 tor_cv_have_FUNC_macro=yes,
2014 tor_cv_have_FUNC_macro=no))
2016 AC_CACHE_CHECK([whether the C compiler supports __FUNCTION__],
2017 tor_cv_have_FUNCTION_macro,
2018 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
2020 int main(int c, char **v) { puts(__FUNCTION__); }])],
2021 tor_cv_have_FUNCTION_macro=yes,
2022 tor_cv_have_FUNCTION_macro=no))
2024 AC_CACHE_CHECK([whether we have extern char **environ already declared],
2025 tor_cv_have_environ_declared,
2026 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
2027 #ifdef HAVE_UNISTD_H
2031 int main(int c, char **v) { char **t = environ; }])],
2032 tor_cv_have_environ_declared=yes,
2033 tor_cv_have_environ_declared=no))
2035 if test "$tor_cv_have_func_macro" = "yes"; then
2036 AC_DEFINE(HAVE_MACRO__func__, 1, [Defined if the compiler supports __func__])
2039 if test "$tor_cv_have_FUNC_macro" = "yes"; then
2040 AC_DEFINE(HAVE_MACRO__FUNC__, 1, [Defined if the compiler supports __FUNC__])
2043 if test "$tor_cv_have_FUNCTION_macro" = "yes"; then
2044 AC_DEFINE(HAVE_MACRO__FUNCTION__, 1,
2045 [Defined if the compiler supports __FUNCTION__])
2048 if test "$tor_cv_have_environ_declared" = "yes"; then
2049 AC_DEFINE(HAVE_EXTERN_ENVIRON_DECLARED, 1,
2050 [Defined if we have extern char **environ already declared])
2053 # $prefix stores the value of the --prefix command line option, or
2054 # NONE if the option wasn't set. In the case that it wasn't set, make
2055 # it be the default, so that we can use it to expand directories now.
2056 if test "x$prefix" = "xNONE"; then
2057 prefix=$ac_default_prefix
2060 # and similarly for $exec_prefix
2061 if test "x$exec_prefix" = "xNONE"; then
2065 if test "x$BUILDDIR" = "x"; then
2069 AH_TEMPLATE([BUILDDIR],[tor's build directory])
2070 AC_DEFINE_UNQUOTED(BUILDDIR,"$BUILDDIR")
2072 if test "x$SRCDIR" = "x"; then
2073 SRCDIR=$(cd "$srcdir"; pwd)
2075 AH_TEMPLATE([SRCDIR],[tor's sourcedir directory])
2076 AC_DEFINE_UNQUOTED(SRCDIR,"$SRCDIR")
2078 if test "x$CONFDIR" = "x"; then
2079 CONFDIR=`eval echo $sysconfdir/tor`
2082 AH_TEMPLATE([CONFDIR],[tor's configuration directory])
2083 AC_DEFINE_UNQUOTED(CONFDIR,"$CONFDIR")
2085 BINDIR=`eval echo $bindir`
2087 LOCALSTATEDIR=`eval echo $localstatedir`
2088 AC_SUBST(LOCALSTATEDIR)
2090 if test "$bwin32" = "true"; then
2091 # Test if the linker supports the --nxcompat and --dynamicbase options
2093 save_LDFLAGS="$LDFLAGS"
2094 LDFLAGS="-Wl,--nxcompat -Wl,--dynamicbase"
2095 AC_MSG_CHECKING([whether the linker supports DllCharacteristics])
2096 AC_LINK_IFELSE([AC_LANG_PROGRAM([])],
2097 [AC_MSG_RESULT([yes])]
2098 [save_LDFLAGS="$save_LDFLAGS $LDFLAGS"],
2099 [AC_MSG_RESULT([no])]
2101 LDFLAGS="$save_LDFLAGS"
2104 # Set CFLAGS _after_ all the above checks, since our warnings are stricter
2105 # than autoconf's macros like.
2106 if test "$GCC" = "yes"; then
2107 # Disable GCC's strict aliasing checks. They are an hours-to-debug
2108 # accident waiting to happen.
2109 CFLAGS="$CFLAGS -Wall -fno-strict-aliasing"
2111 # Override optimization level for non-gcc compilers
2113 enable_gcc_warnings=no
2114 enable_gcc_warnings_advisory=no
2117 # Warnings implies advisory-warnings and -Werror.
2118 if test "$enable_gcc_warnings" = "yes"; then
2119 enable_gcc_warnings_advisory=yes
2120 enable_fatal_warnings=yes
2123 # OS X Lion started deprecating the system openssl. Let's just disable
2124 # all deprecation warnings on OS X. Also, to potentially make the binary
2125 # a little smaller, let's enable dead_strip.
2129 CFLAGS="$CFLAGS -Wno-deprecated-declarations"
2130 LDFLAGS="$LDFLAGS -dead_strip" ;;
2133 # Add some more warnings which we use in development but not in the
2134 # released versions. (Some relevant gcc versions can't handle these.)
2136 # Note that we have to do this near the end of the autoconf process, or
2137 # else we may run into problems when these warnings hit on the testing C
2138 # programs that autoconf wants to build.
2139 if test "x$enable_gcc_warnings_advisory" != "xno"; then
2142 *-*-openbsd* | *-*-bitrig*)
2143 # Some OpenBSD versions (like 4.8) have -Wsystem-headers by default.
2144 # That's fine, except that the headers don't pass -Wredundant-decls.
2145 # Therefore, let's disable -Wsystem-headers when we're building
2146 # with maximal warnings on OpenBSD.
2147 CFLAGS="$CFLAGS -Wno-system-headers" ;;
2150 # GCC4.3 users once report trouble with -Wstrict-overflow=5. GCC5 users
2151 # have it work better.
2152 # CFLAGS="$CFLAGS -Wstrict-overflow=1"
2154 # This warning was added in gcc 4.3, but it appears to generate
2155 # spurious warnings in gcc 4.4. I don't know if it works in 4.5.
2156 #CFLAGS="$CFLAGS -Wlogical-op"
2158 m4_foreach_w([warning_flag], [
2160 -Waddress-of-array-temporary
2161 -Waddress-of-temporary
2163 -Wanonymous-pack-parens
2166 -Warc-bridge-casts-disallowed-in-nonarc
2167 -Warc-maybe-repeated-use-of-weak
2168 -Warc-performSelector-leaks
2169 -Warc-repeated-use-of-weak
2171 -Warray-bounds-pointer-arithmetic
2173 -Wasm-operand-widths
2175 -Watomic-property-with-user-defined-accessor
2177 -Wauto-storage-class
2180 -Wbackslash-newline-escape
2181 -Wbad-array-new-length
2182 -Wbind-to-temporary-copy
2183 -Wbitfield-constant-conversion
2186 -Wbuiltin-requires-header
2188 -Wcompare-distinct-pointer-types
2189 -Wcomplex-component-init
2190 -Wconditional-type-mismatch
2192 -Wconstant-conversion
2193 -Wconstant-logical-operand
2194 -Wconstexpr-not-const
2195 -Wcustom-atomic-properties
2197 -Wdangling-initializer-list
2199 -Wdelegating-ctor-cycles
2200 -Wdeprecated-implementations
2201 -Wdeprecated-register
2202 -Wdirect-ivar-access
2204 -Wdistributed-object-modifiers
2206 -Wdollar-in-identifier-extension
2208 -Wduplicate-decl-specifier
2210 -Wduplicate-method-arg
2211 -Wduplicate-method-match
2213 -Wdynamic-class-memaccess
2214 -Wembedded-directive
2215 -Wempty-translation-unit
2217 -Wexit-time-destructors
2218 -Wexplicit-ownership-type
2219 -Wextern-initializer
2223 -Wflexible-array-extensions
2226 -Wfour-char-constants
2228 -Wglobal-constructors
2229 -Wgnu-array-member-paren-init
2231 -Wgnu-static-float-init
2234 -Widiomatic-parentheses
2235 -Wignored-attributes
2236 -Wimplicit-atomic-properties
2237 -Wimplicit-conversion-floating-point-to-bool
2238 -Wimplicit-exception-spec-mismatch
2239 -Wimplicit-fallthrough
2240 -Wimplicit-fallthrough-per-function
2241 -Wimplicit-retain-self
2242 -Wimport-preprocessor-directive-pedantic
2243 -Wincompatible-library-redeclaration
2244 -Wincompatible-pointer-types-discards-qualifiers
2245 -Wincomplete-implementation
2247 -Wincomplete-umbrella
2250 -Wint-to-void-pointer-cast
2256 -Winvalid-source-encoding
2257 -Winvalid-token-paste
2258 -Wknr-promoted-parameter
2259 -Wlarge-by-value-copy
2260 -Wliteral-conversion
2262 -Wlocal-type-template-args
2266 -Wmalformed-warning-check
2270 -Wmismatched-parameter-types
2271 -Wmismatched-return-types
2272 -Wmissing-field-initializers
2273 -Wmissing-format-attribute
2275 -Wmissing-selector-name
2277 -Wmissing-variable-declarations
2281 -Wnon-literal-null-conversion
2283 -Wnonportable-cfstrings
2289 -Wout-of-line-declaration
2291 -Woverlength-strings
2293 -Woverriding-method-mismatch
2294 -Wpointer-type-mismatch
2295 -Wpredefined-identifier-outside-function
2296 -Wprotocol-property-synthesis-ambiguity
2297 -Wreadonly-iboutlet-property
2298 -Wreadonly-setter-attrs
2300 -Wreceiver-forward-class
2302 -Wreinterpret-base-class
2303 -Wrequires-super-attribute
2304 -Wreserved-user-defined-literal
2305 -Wreturn-stack-address
2307 -Wselector-type-mismatch
2309 -Wserialized-diagnostics
2311 -Wshift-count-negative
2312 -Wshift-count-overflow
2313 -Wshift-negative-value
2315 -Wshift-sign-overflow
2317 -Wsizeof-array-argument
2318 -Wsource-uses-openmp
2321 -Wstatic-local-in-inline
2325 -Wstrlcpy-strlcat-size
2327 -Wsuggest-attribute=format
2328 -Wsuggest-attribute=noreturn
2329 -Wsuper-class-method-mismatch
2332 -Wtautological-constant-out-of-range-compare
2333 -Wtentative-definition-incomplete-type
2336 -Wtypedef-redefinition
2339 -Wundefined-internal
2340 -Wundefined-reinterpret-cast
2342 -Wunicode-whitespace
2343 -Wunknown-warning-option
2344 -Wunnamed-type-template-args
2345 -Wunneeded-member-function
2347 -Wunsupported-visibility
2348 -Wunused-but-set-parameter
2349 -Wunused-but-set-variable
2350 -Wunused-command-line-argument
2351 -Wunused-const-variable=2
2352 -Wunused-exception-parameter
2353 -Wunused-local-typedefs
2354 -Wunused-member-function
2355 -Wunused-sanitize-argument
2356 -Wunused-volatile-lvalue
2357 -Wuser-defined-literals
2360 -Wvector-conversions
2365 ], [ TOR_CHECK_CFLAGS([warning_flag]) ])
2367 dnl We should re-enable this in some later version. Clang doesn't
2368 dnl mind, but it causes trouble with GCC.
2369 dnl -Wstrict-overflow=2
2371 dnl These seem to require annotations that we don't currently use,
2372 dnl and they give false positives in our pthreads wrappers. (Clang 4)
2374 dnl -Wthread-safety-analysis
2375 dnl -Wthread-safety-attributes
2376 dnl -Wthread-safety-beta
2377 dnl -Wthread-safety-precise
2379 CFLAGS="$CFLAGS -W -Wfloat-equal -Wundef -Wpointer-arith"
2380 CFLAGS="$CFLAGS -Wstrict-prototypes -Wmissing-prototypes -Wwrite-strings"
2381 CFLAGS="$CFLAGS -Wredundant-decls -Wchar-subscripts -Wcomment -Wformat=2"
2382 CFLAGS="$CFLAGS -Wwrite-strings"
2383 CFLAGS="$CFLAGS -Wnested-externs -Wbad-function-cast -Wswitch-enum"
2384 CFLAGS="$CFLAGS -Waggregate-return -Wpacked -Wunused"
2385 CFLAGS="$CFLAGS -Wunused-parameter "
2386 # These interfere with building main() { return 0; }, which autoconf
2387 # likes to use as its default program.
2388 CFLAGS="$CFLAGS -Wold-style-definition -Wmissing-declarations"
2390 if test "$tor_cv_cflags__Wnull_dereference" = "yes"; then
2391 AC_DEFINE([HAVE_CFLAG_WNULL_DEREFERENCE], 1, [True if we have -Wnull-dereference])
2393 if test "$tor_cv_cflags__Woverlength_strings" = "yes"; then
2394 AC_DEFINE([HAVE_CFLAG_WOVERLENGTH_STRINGS], 1, [True if we have -Woverlength-strings])
2396 if test "$tor_cv_cflags__warn_unused_const_variable_2" = "yes"; then
2397 AC_DEFINE([HAVE_CFLAG_WUNUSED_CONST_VARIABLE], 1, [True if we have -Wunused-const-variable])
2400 if test "x$enable_fatal_warnings" = "xyes"; then
2401 # I'd like to use TOR_CHECK_CFLAGS here, but I can't, since the
2402 # default autoconf programs are full of errors.
2403 CFLAGS="$CFLAGS -Werror"
2408 if test "$enable_coverage" = "yes" && test "$have_clang" = "no"; then
2411 AC_MSG_WARN([Tried to enable coverage on OSX without using the clang compiler. This might not work! If coverage fails, use CC=clang when configuring with --enable-coverage.])
2415 CPPFLAGS="$CPPFLAGS $TOR_CPPFLAGS_libevent $TOR_CPPFLAGS_openssl $TOR_CPPFLAGS_zlib"
2421 contrib/dist/suse/tor.sh
2422 contrib/operator-tools/tor.logrotate
2425 contrib/dist/tor.service
2426 src/config/torrc.sample
2427 src/config/torrc.minimal
2428 src/rust/.cargo/config
2429 scripts/maint/checkOptionDocs.pl
2430 scripts/maint/updateVersions.pl
2433 if test "x$asciidoc" = "xtrue" && test "$ASCIIDOC" = "none"; then
2434 regular_mans="doc/tor doc/tor-gencert doc/tor-resolve doc/torify"
2435 for file in $regular_mans ; do
2436 if ! [[ -f "$srcdir/$file.1.in" ]] || ! [[ -f "$srcdir/$file.html.in" ]] ; then
2437 echo "==================================";
2439 echo "Building Tor has failed since manpages cannot be built.";
2441 echo "You need asciidoc installed to be able to build the manpages.";
2442 echo "To build without manpages, use the --disable-asciidoc argument";
2443 echo "when calling configure.";
2445 echo "==================================";
2451 if test "$fragile_hardening" = "yes"; then
2455 Warning! Building Tor with --enable-fragile-hardening (also known as
2456 --enable-expensive-hardening) makes some kinds of attacks harder, but makes
2457 other kinds of attacks easier. A Tor instance build with this option will be
2458 somewhat less vulnerable to remote code execution, arithmetic overflow, or
2459 out-of-bounds read/writes... but at the cost of becoming more vulnerable to
2460 denial of service attacks. For more information, see
2461 https://trac.torproject.org/projects/tor/wiki/doc/TorFragileHardening