1 dnl Copyright (c) 2001-2004, Roger Dingledine
2 dnl Copyright (c) 2004-2006, Roger Dingledine, Nick Mathewson
3 dnl Copyright (c) 2007-2019, The Tor Project, Inc.
4 dnl See LICENSE for licensing information
7 AC_INIT([tor],[0.4.5.9-dev])
8 AC_CONFIG_SRCDIR([src/app/main/tor_main.c])
9 AC_CONFIG_MACRO_DIR([m4])
13 # DO NOT EDIT THIS DEFINITION BY HAND UNLESS YOU KNOW WHAT YOU'RE DOING.
15 # The update_versions.py script updates this definition when the
16 # version number changes. Tor uses it to make sure that it
17 # only shuts down for missing "required protocols" when those protocols
18 # are listed as required by a consensus after this date.
19 AC_DEFINE(APPROX_RELEASE_DATE, ["2021-06-14"], # for 0.4.5.9-dev
20 [Approximate date when this software was released. (Updated when the version changes.)])
22 # "foreign" means we don't follow GNU package layout standards
23 # "1.11" means we require automake version 1.11 or newer
24 # "subdir-objects" means put .o files in the same directory as the .c files
25 AM_INIT_AUTOMAKE([foreign 1.11 subdir-objects -Wall -Werror])
28 tor_incr_n_warnings() {
29 tor_ac_n_warnings=`expr $tor_ac_n_warnings + 1`
32 m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])])
33 AC_CONFIG_HEADERS([orconfig.h])
35 AC_USE_SYSTEM_EXTENSIONS
39 if test "x$PKG_CONFIG" = "x" ; then
40 pkg_config_user_action="install pkg-config, and check the PKG_CONFIG_PATH environment variable"
41 AC_MSG_NOTICE([Some libraries need pkg-config, including systemd, nss, lzma, zstd, and custom mallocs.])
42 AC_MSG_NOTICE([To use those libraries, $pkg_config_user_action.])
44 pkg_config_user_action="check the PKG_CONFIG_PATH environment variable"
47 if test "x$PKG_CONFIG_PATH" = "x" && test "x$prefix" != "xNONE" && test "$host" != "$build"; then
48 export PKG_CONFIG_PATH=$prefix/lib/pkgconfig
49 AC_MSG_NOTICE([set PKG_CONFIG_PATH=$PKG_CONFIG_PATH to support cross-compiling])
52 AC_ARG_ENABLE(openbsd-malloc,
53 AS_HELP_STRING(--enable-openbsd-malloc, [use malloc code from OpenBSD. Linux only. Deprecated: see --with-malloc]))
54 AC_ARG_ENABLE(static-openssl,
55 AS_HELP_STRING(--enable-static-openssl, [link against a static openssl library. Requires --with-openssl-dir]))
56 AC_ARG_ENABLE(static-libevent,
57 AS_HELP_STRING(--enable-static-libevent, [link against a static libevent library. Requires --with-libevent-dir]))
58 AC_ARG_ENABLE(static-zlib,
59 AS_HELP_STRING(--enable-static-zlib, [link against a static zlib library. Requires --with-zlib-dir]))
60 AC_ARG_ENABLE(static-tor,
61 AS_HELP_STRING(--enable-static-tor, [create an entirely static Tor binary. Requires --with-openssl-dir and --with-libevent-dir and --with-zlib-dir]))
62 AC_ARG_ENABLE(unittests,
63 AS_HELP_STRING(--disable-unittests, [don't build unit tests for Tor. Risky!]))
64 AC_ARG_ENABLE(coverage,
65 AS_HELP_STRING(--enable-coverage, [enable coverage support in the unit-test build]))
66 AC_ARG_ENABLE(asserts-in-tests,
67 AS_HELP_STRING(--disable-asserts-in-tests, [disable tor_assert() calls in the unit tests, for branch coverage]))
68 AC_ARG_ENABLE(system-torrc,
69 AS_HELP_STRING(--disable-system-torrc, [don't look for a system-wide torrc file]))
70 AC_ARG_ENABLE(libfuzzer,
71 AS_HELP_STRING(--enable-libfuzzer, [build extra fuzzers based on 'libfuzzer']))
72 AC_ARG_ENABLE(oss-fuzz,
73 AS_HELP_STRING(--enable-oss-fuzz, [build extra fuzzers based on 'oss-fuzz' environment]))
74 AC_ARG_ENABLE(memory-sentinels,
75 AS_HELP_STRING(--disable-memory-sentinels, [disable code that tries to prevent some kinds of memory access bugs. For fuzzing only.]))
77 AS_HELP_STRING(--enable-rust, [enable rust integration]))
78 AC_ARG_ENABLE(cargo-online-mode,
79 AS_HELP_STRING(--enable-cargo-online-mode, [Allow cargo to make network requests to fetch crates. For builds with rust only.]))
80 AC_ARG_ENABLE(restart-debugging,
81 AS_HELP_STRING(--enable-restart-debugging, [Build Tor with support for debugging in-process restart. Developers only.]))
82 AC_ARG_ENABLE(zstd-advanced-apis,
83 AS_HELP_STRING(--disable-zstd-advanced-apis, [Build without support for zstd's "static-only" APIs.]))
85 AS_HELP_STRING(--enable-nss, [Use Mozilla's NSS TLS library. (EXPERIMENTAL)]))
87 AS_HELP_STRING(--enable-pic, [Build Tor's binaries as position-independent code, suitable to link as a library.]))
89 AC_ARG_ENABLE(missing-doc-warnings,
90 AS_HELP_STRING(--enable-missing-doc-warnings, [Tell doxygen to warn about missing documentation. Makes doxygen warnings nonfatal.]))
92 if test "$enable_missing_doc_warnings" = "yes"; then
93 DOXYGEN_FATAL_WARNINGS=NO
94 DOXYGEN_WARN_ON_MISSING=YES
95 elif test "$enable_fatal_warnings" = "yes"; then
96 # Fatal warnings from doxygen are nice, but not if we're warning about
97 # missing documentation.
98 DOXYGEN_FATAL_WARNINGS=YES
99 DOXYGEN_WARN_ON_MISSING=NO
101 DOXYGEN_FATAL_WARNINGS=NO
102 DOXYGEN_WARN_ON_MISSING=NO
104 AC_SUBST(DOXYGEN_FATAL_WARNINGS)
105 AC_SUBST(DOXYGEN_WARN_ON_MISSING)
107 if test "x$enable_coverage" != "xyes" -a "x$enable_asserts_in_tests" = "xno" ; then
108 AC_MSG_ERROR([Can't disable assertions outside of coverage build])
111 AM_CONDITIONAL(UNITTESTS_ENABLED, test "x$enable_unittests" != "xno")
112 AM_CONDITIONAL(COVERAGE_ENABLED, test "x$enable_coverage" = "xyes")
113 AM_CONDITIONAL(DISABLE_ASSERTS_IN_UNIT_TESTS, test "x$enable_asserts_in_tests" = "xno")
114 AM_CONDITIONAL(LIBFUZZER_ENABLED, test "x$enable_libfuzzer" = "xyes")
115 AM_CONDITIONAL(OSS_FUZZ_ENABLED, test "x$enable_oss_fuzz" = "xyes")
116 AM_CONDITIONAL(USE_RUST, test "x$enable_rust" = "xyes")
117 AM_CONDITIONAL(USE_NSS, test "x$enable_nss" = "xyes")
118 AM_CONDITIONAL(USE_OPENSSL, test "x$enable_nss" != "xyes")
120 if test "x$enable_nss" = "xyes"; then
121 AC_DEFINE(ENABLE_NSS, 1,
122 [Defined if we're building with NSS.])
124 AC_DEFINE(ENABLE_OPENSSL, 1,
125 [Defined if we're building with OpenSSL or LibreSSL])
128 if test "$enable_static_tor" = "yes"; then
129 enable_static_libevent="yes";
130 enable_static_openssl="yes";
131 enable_static_zlib="yes";
132 TOR_STATIC_LDFLAGS="-static"
134 AC_SUBST(TOR_STATIC_LDFLAGS)
136 if test "$enable_system_torrc" = "no"; then
137 AC_DEFINE(DISABLE_SYSTEM_TORRC, 1,
138 [Defined if we're not going to look for a torrc in SYSCONF])
141 if test "$enable_memory_sentinels" = "no"; then
142 AC_DEFINE(DISABLE_MEMORY_SENTINELS, 1,
143 [Defined if we're turning off memory safety code to look for bugs])
146 AC_ARG_ENABLE(manpage,
147 AS_HELP_STRING(--disable-manpage, [Disable manpage generation.]))
149 AC_ARG_ENABLE(html-manual,
150 AS_HELP_STRING(--disable-html-manual, [Disable HTML documentation.]))
152 AC_ARG_ENABLE(asciidoc,
153 AS_HELP_STRING(--disable-asciidoc, [don't use asciidoc (disables building of manpages)]),
154 [case "${enableval}" in
155 "yes") asciidoc=true ;;
156 "no") asciidoc=false ;;
157 *) AC_MSG_ERROR(bad value for --disable-asciidoc) ;;
158 esac], [asciidoc=true])
160 # systemd notify support
161 AC_ARG_ENABLE(systemd,
162 AS_HELP_STRING(--enable-systemd, [enable systemd notification support]),
163 [case "${enableval}" in
164 "yes") systemd=true ;;
165 "no") systemd=false ;;
166 * ) AC_MSG_ERROR(bad value for --enable-systemd) ;;
167 esac], [systemd=auto])
169 if test "$enable_restart_debugging" = "yes"; then
170 AC_DEFINE(ENABLE_RESTART_DEBUGGING, 1,
171 [Defined if we're building with support for in-process restart debugging.])
174 if test "$enable_zstd_advanced_apis" != "no"; then
175 AC_DEFINE(ENABLE_ZSTD_ADVANCED_APIS, 1,
176 [Defined if we're going to try to use zstd's "static-only" APIs.])
180 if test "x$enable_systemd" = "xno"; then
183 PKG_CHECK_MODULES(SYSTEMD,
187 if test "x$have_systemd" = "xno"; then
188 AC_MSG_NOTICE([Okay, checking for systemd a different way...])
189 PKG_CHECK_MODULES(SYSTEMD,
196 if test "x$have_systemd" = "xyes"; then
197 AC_DEFINE(HAVE_SYSTEMD,1,[Have systemd])
198 TOR_SYSTEMD_CFLAGS="${SYSTEMD_CFLAGS}"
199 TOR_SYSTEMD_LIBS="${SYSTEMD_LIBS}"
200 PKG_CHECK_MODULES(LIBSYSTEMD209, [libsystemd >= 209],
201 [AC_DEFINE(HAVE_SYSTEMD_209,1,[Have systemd v209 or greater])], [])
203 AC_SUBST(TOR_SYSTEMD_CFLAGS)
204 AC_SUBST(TOR_SYSTEMD_LIBS)
206 if test "x$enable_systemd" = "xyes" -a "x$have_systemd" != "xyes" ; then
207 AC_MSG_ERROR([Explicitly requested systemd support, but systemd not found, $pkg_config_user_action, or set SYSTEMD_CFLAGS and SYSTEMD_LIBS.])
212 AC_DEFINE(_REENTRANT, 1, [Define on some platforms to activate x_r() functions in time.h])
216 AC_ARG_ENABLE(gcc-warnings,
217 AS_HELP_STRING(--enable-gcc-warnings, [deprecated alias for enable-fatal-warnings]))
218 AC_ARG_ENABLE(fatal-warnings,
219 AS_HELP_STRING(--enable-fatal-warnings, [tell the compiler to treat all warnings as errors.]))
220 AC_ARG_ENABLE(gcc-warnings-advisory,
221 AS_HELP_STRING(--disable-gcc-warnings-advisory, [disable the regular verbose warnings]))
223 dnl Others suggest '/gs /safeseh /nxcompat /dynamicbase' for non-gcc on Windows
224 AC_ARG_ENABLE(gcc-hardening,
225 AS_HELP_STRING(--disable-gcc-hardening, [disable compiler security checks]))
227 dnl Deprecated --enable-expensive-hardening but keep it for now for backward compat.
228 AC_ARG_ENABLE(expensive-hardening,
229 AS_HELP_STRING(--enable-expensive-hardening, [enable more fragile and expensive compiler hardening; makes Tor slower]))
230 AC_ARG_ENABLE(fragile-hardening,
231 AS_HELP_STRING(--enable-fragile-hardening, [enable more fragile and expensive compiler hardening; makes Tor slower]))
232 if test "x$enable_expensive_hardening" = "xyes" || test "x$enable_fragile_hardening" = "xyes"; then
233 fragile_hardening="yes"
234 AC_DEFINE(DEBUG_SMARTLIST, 1, [Enable smartlist debugging])
237 AC_ARG_ENABLE(all-bugs-are-fatal,
238 AS_HELP_STRING(--enable-all-bugs-are-fatal, [force all soft asserts in Tor codebase (tor_assert_nonfatal(), BUG(), etc.) to act as hard asserts (tor_assert() and equivalents); makes Tor fragile; only recommended for dev builds]))
240 if test "x$enable_all_bugs_are_fatal" = "xyes"; then
241 AC_DEFINE(ALL_BUGS_ARE_FATAL, 1, [All assert failures are fatal])
244 dnl Linker hardening options
245 dnl Currently these options are ELF specific - you can't use this with MacOSX
246 AC_ARG_ENABLE(linker-hardening,
247 AS_HELP_STRING(--disable-linker-hardening, [disable linker security fixups]))
249 AC_ARG_ENABLE(local-appdata,
250 AS_HELP_STRING(--enable-local-appdata, [default to host local application data paths on Windows]))
251 if test "$enable_local_appdata" = "yes"; then
252 AC_DEFINE(ENABLE_LOCAL_APPDATA, 1,
253 [Defined if we default to host local appdata paths on Windows])
256 AC_ARG_ENABLE(tool-name-check,
257 AS_HELP_STRING(--disable-tool-name-check, [check for sanely named toolchain when cross-compiling]))
259 AC_ARG_ENABLE(seccomp,
260 AS_HELP_STRING(--disable-seccomp, [do not attempt to use libseccomp]))
262 AC_ARG_ENABLE(libscrypt,
263 AS_HELP_STRING(--disable-libscrypt, [do not attempt to use libscrypt]))
265 dnl --- Tracing Options. ---
269 dnl LTTng instrumentation option.
270 AC_ARG_ENABLE(tracing-instrumentation-lttng,
271 AS_HELP_STRING([--enable-tracing-instrumentation-lttng],
272 [build with LTTng-UST instrumentation]))
273 AM_CONDITIONAL([USE_TRACING_INSTRUMENTATION_LTTNG],
274 [test "x$enable_tracing_instrumentation_lttng" = "xyes"])
276 if test "x$enable_tracing_instrumentation_lttng" = "xyes"; then
277 AC_CHECK_HEADERS([lttng/tracepoint.h], [],
278 [AC_MSG_ERROR([LTTng instrumentation headers not found.
279 On Debian, apt install liblttng-ust-dev"])], [])
280 AC_DEFINE([USE_TRACING_INSTRUMENTATION_LTTNG], [1], [Using LTTng instrumentation])
281 TOR_TRACE_LIBS="-llttng-ust -ldl"
285 dnl USDT instrumentation option.
286 AC_ARG_ENABLE(tracing-instrumentation-usdt,
287 AS_HELP_STRING([--enable-tracing-instrumentation-usdt],
288 [build with tracing USDT instrumentation]))
289 AM_CONDITIONAL([USE_TRACING_INSTRUMENTATION_USDT],
290 [test "x$enable_tracing_instrumentation_usdt" = "xyes"])
292 if test "x$enable_tracing_instrumentation_usdt" = "xyes"; then
293 AC_CHECK_HEADERS([sys/sdt.h], [],
294 [AC_MSG_ERROR([USDT instrumentation requires sys/sdt.h header.
295 On Debian, apt install systemtap-sdt-dev])], [])
296 AC_MSG_CHECKING([STAP_PROBEV()])
297 AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
298 #define SDT_USE_VARIADIC
302 STAP_PROBEV(p, n, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12);
306 dnl LTTng generates USDT probes if the UST library was built with
307 dnl --with-sdt. There is unfortunately no way to check that so we always
308 dnl build the USDT probes even though LTTng instrumentation was requested.
309 AC_DEFINE([USE_TRACING_INSTRUMENTATION_USDT], [1], [Using USDT instrumentation])
313 AC_MSG_ERROR([USDT tracing support requires STAP_PROBEV()])
317 dnl Tracepoints event to debug logs.
318 AC_ARG_ENABLE(tracing-instrumentation-log-debug,
319 AS_HELP_STRING([--enable-tracing-instrumentation-log-debug],
320 [build with tracing event to debug log]),
321 AC_DEFINE([USE_TRACING_INSTRUMENTATION_LOG_DEBUG], [1],
322 [Tracepoints to log debug]), [])
323 AM_CONDITIONAL([USE_TRACING_INSTRUMENTATION_LOG_DEBUG],
324 [test "x$enable_tracing_instrumentation_log_debug" = "xyes"])
325 if test "x$enable_tracing_instrumentation_log_debug" = "xyes"; then
329 dnl Define that tracing is supported if any instrumentation is used.
330 AM_COND_IF([USE_TRACING_INSTRUMENTATION_LOG_DEBUG],
331 AC_DEFINE([HAVE_TRACING], [1], [Compiled with tracing support]))
332 AM_COND_IF([USE_TRACING_INSTRUMENTATION_USDT],
333 AC_DEFINE([HAVE_TRACING], [1], [Compiled with tracing support]))
334 AM_COND_IF([USE_TRACING_INSTRUMENTATION_LTTNG],
335 AC_DEFINE([HAVE_TRACING], [1], [Compiled with tracing support]))
336 AM_CONDITIONAL([USE_TRACING], [test "x$have_tracing" = x1 ])
338 dnl Finally, define the trace libs.
339 AC_SUBST([TOR_TRACE_LIBS])
341 dnl -- End Tracing Options. --
343 dnl Enable Android only features.
344 AC_ARG_ENABLE(android,
345 AS_HELP_STRING(--enable-android, [build with Android features enabled]))
346 AM_CONDITIONAL([USE_ANDROID], [test "x$enable_android" = "xyes"])
348 if test "x$enable_android" = "xyes"; then
349 AC_DEFINE([USE_ANDROID], [1], [Compile with Android specific features enabled])
354 dnl Tor modules options. These options are namespaced with --disable-module-XXX
358 m4_define(MODULES, relay dirauth dircache)
360 # Some modules are only disabled through another option. For those, we don't
361 # want to print the help in the summary at the end of the configure. Any entry
362 # in the following set will not print the "--disable-module-NAME" command in
364 m4_set_add_all([MODULES_WITH_NO_OPTIONS], [dircache])
367 AC_ARG_ENABLE([module-relay],
368 AS_HELP_STRING([--disable-module-relay],
369 [Build tor without the Relay modules: tor can not run as a relay, bridge, or authority. Implies --disable-module-dirauth]))
370 AM_CONDITIONAL(BUILD_MODULE_RELAY, [test "x$enable_module_relay" != "xno"])
371 AM_COND_IF(BUILD_MODULE_RELAY,
372 AC_DEFINE([HAVE_MODULE_RELAY], [1],
373 [Compile with Relay feature support]))
375 dnl Dircache module. (This cannot be enabled or disabled independently of
376 dnl the relay module. It is not listed by --list-modules for this reason.)
377 AM_CONDITIONAL(BUILD_MODULE_DIRCACHE,
378 [test "x$enable_module_relay" != "xno"])
379 AM_COND_IF(BUILD_MODULE_DIRCACHE,
380 AC_DEFINE([HAVE_MODULE_DIRCACHE], [1],
381 [Compile with directory cache support]))
383 dnl Directory Authority module.
384 AC_ARG_ENABLE([module-dirauth],
385 AS_HELP_STRING([--disable-module-dirauth],
386 [Build tor without the Directory Authority module: tor can not run as a directory authority or bridge authority]))
387 AM_CONDITIONAL(BUILD_MODULE_DIRAUTH,[test "x$enable_module_dirauth" != "xno" && test "x$enable_module_relay" != "xno"])
388 AM_COND_IF(BUILD_MODULE_DIRAUTH,
389 AC_DEFINE([HAVE_MODULE_DIRAUTH], [1],
390 [Compile with Directory Authority feature support]))
392 dnl Helper variables.
393 TOR_MODULES_ALL_ENABLED=
394 AC_DEFUN([ADD_MODULE], [
395 MODULE=m4_toupper($1)
396 TOR_MODULES_ALL_ENABLED="${TOR_MODULES_ALL_ENABLED} -DHAVE_MODULE_${MODULE}=1"
398 m4_foreach_w([module], MODULES, [ADD_MODULE([module])])
399 AC_SUBST(TOR_MODULES_ALL_ENABLED)
401 dnl check for the correct "ar" when cross-compiling.
402 dnl (AM_PROG_AR was new in automake 1.11.2, which we do not yet require,
403 dnl so kludge up a replacement for the case where it isn't there yet.)
404 m4_ifdef([AM_PROG_AR],
406 [AN_MAKEVAR([AR], [AC_PROG_AR])
407 AN_PROGRAM([ar], [AC_PROG_AR])
408 AC_DEFUN([AC_PROG_AR], [AC_CHECK_TOOL([AR], [ar], [:])])
411 dnl Check whether the above macro has settled for a simply named tool even
412 dnl though we're cross compiling. We must do this before running AC_PROG_CC,
413 dnl because that will find any cc on the system, not only the cross-compiler,
414 dnl and then verify that a binary built with this compiler runs on the
415 dnl build system. It will then come to the false conclusion that we're not
417 if test "x$enable_tool_name_check" != "xno"; then
418 if test "x$ac_tool_warned" = "xyes"; then
419 AC_MSG_ERROR([We are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
420 elif test "x$ac_ct_AR" != "x" -a "x$cross_compiling" = "xmaybe"; then
421 AC_MSG_ERROR([We think we are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
431 AC_ARG_VAR([PERL], [path to Perl binary])
432 AC_CHECK_PROGS([PERL], [perl])
433 AM_CONDITIONAL(USE_PERL, [test "x$ac_cv_prog_PERL" != "x"])
435 dnl check for asciidoc and a2x
436 AC_PATH_PROG([ASCIIDOC], [asciidoc], none)
437 AC_PATH_PROGS([A2X], [a2x a2x.py], none)
439 AM_CONDITIONAL(USE_ASCIIDOC, test "x$asciidoc" = "xtrue")
440 AM_CONDITIONAL(BUILD_MANPAGE, [test "x$enable_manpage" != "xno"])
441 AM_CONDITIONAL(BUILD_HTML_DOCS, [test "x$enable_html_manual" != "xno"])
445 dnl Before autoconf 2.70, AC_PROG_CC_C99 is supposedly necessary for some
446 dnl compilers if you wan't C99 support. Starting with 2.70, it is obsolete and
448 m4_version_prereq([2.70], [:], [AC_PROG_CC_C99])
450 AC_CACHE_CHECK([for Python 3], [tor_cv_PYTHON],
451 [AC_PATH_PROGS_FEATURE_CHECK([PYTHON], [ \
453 python3.8 python3.7 python3.6 python3.5 python3.4 \
455 [["$ac_path_PYTHON" -c 'import sys; sys.exit(sys.version_info[0]<3)' && tor_cv_PYTHON="$ac_path_PYTHON" ac_path_PYTHON_found=:]] )])
456 AC_SUBST([PYTHON], [$tor_cv_PYTHON])
458 PYTHON="$tor_cv_PYTHON"
460 if test "x$PYTHON" = "x"; then
462 AC_MSG_WARN([Python 3 unavailable; some tests will not be run.])
465 AM_CONDITIONAL(USEPYTHON, [test "x$PYTHON" != "x"])
467 dnl List all external rust crates we depend on here. Include the version
472 AC_SUBST(rust_crates)
474 ifdef([AC_C_FLEXIBLE_ARRAY_MEMBER], [
475 AC_C_FLEXIBLE_ARRAY_MEMBER
477 dnl Maybe we've got an old autoconf...
478 AC_CACHE_CHECK([for flexible array members],
482 struct abc { int a; char b[]; };
484 struct abc *def = malloc(sizeof(struct abc)+sizeof(char));
487 [tor_cv_c_flexarray=yes],
488 [tor_cv_c_flexarray=no])])
489 if test "$tor_cv_flexarray" = "yes"; then
490 AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
492 AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [1], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
496 AC_CACHE_CHECK([for working C99 mid-block declaration syntax],
499 [AC_LANG_PROGRAM([], [int x; x = 3; int y; y = 4 + x;])],
500 [tor_cv_c_c99_decl=yes],
501 [tor_cv_c_c99_decl=no] )])
502 if test "$tor_cv_c_c99_decl" != "yes"; then
503 AC_MSG_ERROR([Your compiler doesn't support c99 mid-block declarations. This is required as of Tor 0.2.6.x])
506 AC_CACHE_CHECK([for working C99 designated initializers],
507 tor_cv_c_c99_designated_init,
509 [AC_LANG_PROGRAM([struct s { int a; int b; };],
510 [[ struct s ss = { .b = 5, .a = 6 }; ]])],
511 [tor_cv_c_c99_designated_init=yes],
512 [tor_cv_c_c99_designated_init=no] )])
514 if test "$tor_cv_c_c99_designated_init" != "yes"; then
515 AC_MSG_ERROR([Your compiler doesn't support c99 designated initializers. This is required as of Tor 0.2.6.x])
518 saved_CFLAGS="$CFLAGS"
519 CFLAGS="$CFLAGS -Werror"
520 AC_CACHE_CHECK([for __attribute__((fallthrough))],
521 tor_cv_c_attr_fallthrough,
523 [AC_LANG_PROGRAM([extern int x; void fn(void) ;],
524 [[ switch (x) { case 1: fn(); __attribute__((fallthrough));
525 case 2: fn(); break; } ]])],
526 [tor_cv_c_attr_fallthrough=yes],
527 [tor_cv_c_attr_fallthrough=no] )])
528 CFLAGS="$saved_CFLAGS"
530 if test "$tor_cv_c_attr_fallthrough" = "yes"; then
531 AC_DEFINE(HAVE_ATTR_FALLTHROUGH, [1], [defined if we have the fallthrough attribute.])
535 AC_ARG_WITH(tor-user,
536 AS_HELP_STRING(--with-tor-user=NAME, [specify username for tor daemon]),
544 AC_ARG_WITH(tor-group,
545 AS_HELP_STRING(--with-tor-group=NAME, [specify group name for tor daemon]),
553 dnl If _WIN32 is defined and non-zero, we are building for win32
554 AC_MSG_CHECKING([for win32])
555 AC_RUN_IFELSE([AC_LANG_SOURCE([
556 int main(int c, char **v) {
567 bwin32=true; AC_MSG_RESULT([yes]),
568 bwin32=false; AC_MSG_RESULT([no]),
569 bwin32=cross; AC_MSG_RESULT([cross])
572 if test "$bwin32" = "cross"; then
573 AC_MSG_CHECKING([for win32 (cross)])
574 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
576 int main(int c, char **v) {return 0;}
579 int main(int c, char **v) {return x(y);}
582 bwin32=true; AC_MSG_RESULT([yes]),
583 bwin32=false; AC_MSG_RESULT([no]))
588 /* Defined to access windows functions and definitions for >=WinVista */
590 # define WINVER 0x0600
593 /* Defined to access _other_ windows functions and definitions for >=WinVista */
594 # ifndef _WIN32_WINNT
595 # define _WIN32_WINNT 0x0600
598 /* Defined to avoid including some windows headers as part of Windows.h */
599 # ifndef WIN32_LEAN_AND_MEAN
600 # define WIN32_LEAN_AND_MEAN 1
605 AM_CONDITIONAL(WIN32, test "x$bwin32" = "xtrue")
606 AM_CONDITIONAL(BUILD_NT_SERVICES, test "x$bwin32" = "xtrue")
607 AM_CONDITIONAL(BUILD_LIBTORRUNNER, test "x$bwin32" != "xtrue")
609 dnl Enable C99 when compiling with MIPSpro
610 AC_MSG_CHECKING([for MIPSpro compiler])
611 AC_COMPILE_IFELSE([AC_LANG_PROGRAM(, [
612 #if (defined(__sgi) && defined(_COMPILER_VERSION))
617 bmipspro=false; AC_MSG_RESULT(no),
618 bmipspro=true; AC_MSG_RESULT(yes))
620 if test "$bmipspro" = "true"; then
621 CFLAGS="$CFLAGS -c99"
626 AC_ARG_VAR([TOR_RUST_TARGET], [Rust target, must be specified when cross-compiling (HOST != BUILD). example: i686-pc-windows-gnu])
628 if test "x$enable_rust" = "xyes"; then
629 AC_ARG_VAR([RUSTC], [path to the rustc binary])
630 AC_CHECK_PROG([RUSTC], [rustc], [rustc],[no])
631 if test "x$RUSTC" = "xno"; then
632 AC_MSG_ERROR([rustc unavailable but rust integration requested.])
635 AC_ARG_VAR([CARGO], [path to the cargo binary])
636 AC_CHECK_PROG([CARGO], [cargo], [cargo],[no])
637 if test "x$CARGO" = "xno"; then
638 AC_MSG_ERROR([cargo unavailable but rust integration requested.])
641 AC_DEFINE([HAVE_RUST], 1, [have Rust])
642 if test "x$enable_fatal_warnings" = "xyes"; then
647 if test "x$enable_cargo_online_mode" = "xyes"; then
651 CARGO_ONLINE=--frozen
654 dnl When we're not allowed to touch the network, we need crate dependencies
655 dnl locally available.
656 AC_MSG_CHECKING([rust crate dependencies])
657 AC_ARG_VAR([TOR_RUST_DEPENDENCIES], [path to directory with local crate mirror])
658 if test "x$TOR_RUST_DEPENDENCIES" = "x"; then
659 TOR_RUST_DEPENDENCIES="${srcdir}/src/ext/rust/crates"
661 dnl Check whether the path exists before we try to cd into it.
662 if test ! -d "$TOR_RUST_DEPENDENCIES"; then
663 AC_MSG_ERROR([Rust dependency directory $TOR_RUST_DEPENDENCIES does not exist. Specify a dependency directory using the TOR_RUST_DEPENDENCIES variable or allow cargo to fetch crates using --enable-cargo-online-mode.])
666 dnl Make the path absolute, since we'll be using it from within a
668 TOR_RUST_DEPENDENCIES=$(cd "$TOR_RUST_DEPENDENCIES" ; pwd)
670 for dep in $rust_crates; do
671 if test ! -d "$TOR_RUST_DEPENDENCIES"/"$dep"; then
672 AC_MSG_ERROR([Failure to find rust dependency $TOR_RUST_DEPENDENCIES/$dep. Specify a dependency directory using the TOR_RUST_DEPENDENCIES variable or allow cargo to fetch crates using --enable-cargo-online-mode.])
676 if test "x$ERRORED" = "x"; then
681 dnl For now both MSVC and MinGW rust libraries will output static libs with
682 dnl the MSVC naming convention.
683 if test "$bwin32" = "true"; then
684 tor_rust_static_name=tor_rust.lib
686 tor_rust_static_name=libtor_rust.a
691 if test -n "$TOR_RUST_TARGET"; then
692 if test "$host" = "$build"; then
693 AC_MSG_ERROR([HOST = BUILD is invalid if TOR_RUST_TARGET is specified, see configure --help for more information.])
695 RUST_TARGET_PROP="target = '$TOR_RUST_TARGET'"
696 TOR_RUST_LIB_PATH="src/rust/target/$TOR_RUST_TARGET/release/$tor_rust_static_name"
698 if test "$host" != "$build"; then
699 AC_MSG_ERROR([TOR_RUST_TARGET must be specified when cross-compiling with Rust enabled.])
702 TOR_RUST_LIB_PATH="src/rust/target/release/$tor_rust_static_name"
705 AC_SUBST(RUST_TARGET_PROP)
706 AC_SUBST(TOR_RUST_LIB_PATH)
707 AC_SUBST(CARGO_ONLINE)
711 dnl Let's check the rustc version, too
712 AC_MSG_CHECKING([rust version])
713 RUSTC_VERSION=`$RUSTC --version`
714 RUSTC_VERSION_MAJOR=`$RUSTC --version | cut -d ' ' -f 2 | cut -d '.' -f 1`
715 RUSTC_VERSION_MINOR=`$RUSTC --version | cut -d ' ' -f 2 | cut -d '.' -f 2`
716 if test "x$RUSTC_VERSION_MAJOR" = "x" -o "x$RUSTC_VERSION_MINOR" = "x"; then
717 AC_MSG_ERROR([rustc version couldn't be identified])
719 if test "$RUSTC_VERSION_MAJOR" -lt 2 -a "$RUSTC_VERSION_MINOR" -lt 31; then
720 AC_MSG_ERROR([rustc must be at least version 1.31.0])
722 AC_MSG_RESULT([$RUSTC_VERSION])
725 AC_SEARCH_LIBS(socket, [socket network])
726 AC_SEARCH_LIBS(gethostbyname, [nsl])
727 AC_SEARCH_LIBS(dlopen, [dl])
728 AC_SEARCH_LIBS(inet_aton, [resolv])
729 AC_SEARCH_LIBS(backtrace, [execinfo])
731 AC_SEARCH_LIBS([clock_gettime], [rt])
732 if test "$LIBS" != "$saved_LIBS"; then
733 # Looks like we need -lrt for clock_gettime().
737 if test "$bwin32" = "false"; then
738 AC_SEARCH_LIBS(pthread_create, [pthread])
739 AC_SEARCH_LIBS(pthread_detach, [pthread])
742 AM_CONDITIONAL(THREADS_WIN32, test "$bwin32" = "true")
743 AM_CONDITIONAL(THREADS_PTHREADS, test "$bwin32" = "false")
747 RtlSecureZeroMemory \
751 backtrace_symbols_fd \
758 get_current_dir_name \
766 gnu_get_libc_version \
804 # Apple messed up when they added some functions: they
805 # forgot to decorate them with appropriate AVAILABLE_MAC_OS_VERSION
808 # We should only probe for these functions if we are sure that we
809 # are not targeting OS X 10.9 or earlier.
810 AC_MSG_CHECKING([for a pre-Yosemite OS X build target])
811 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
813 # include <AvailabilityMacros.h>
814 # ifndef MAC_OS_X_VERSION_10_10
815 # define MAC_OS_X_VERSION_10_10 101000
817 # if defined(MAC_OS_X_VERSION_MIN_REQUIRED)
818 # if MAC_OS_X_VERSION_MIN_REQUIRED < MAC_OS_X_VERSION_10_10
819 # error "Running on Mac OS X 10.9 or earlier"
824 [on_macos_pre_10_10=no ; AC_MSG_RESULT([no])],
825 [on_macos_pre_10_10=yes; AC_MSG_RESULT([yes])])
827 if test "$on_macos_pre_10_10" = "no"; then
829 mach_approximate_time \
833 # We should only probe for these functions if we are sure that we
834 # are not targeting OSX 10.11 or earlier.
835 AC_MSG_CHECKING([for a pre-Sierra OSX build target])
836 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
838 # include <AvailabilityMacros.h>
839 # ifndef MAC_OS_X_VERSION_10_12
840 # define MAC_OS_X_VERSION_10_12 101200
842 # if defined(MAC_OS_X_VERSION_MIN_REQUIRED)
843 # if MAC_OS_X_VERSION_MIN_REQUIRED < MAC_OS_X_VERSION_10_12
844 # error "Running on Mac OSX 10.11 or earlier"
849 [on_macos_pre_10_12=no ; AC_MSG_RESULT([no])],
850 [on_macos_pre_10_12=yes; AC_MSG_RESULT([yes])])
852 if test "$on_macos_pre_10_12" = "no"; then
859 if test "$bwin32" != "true"; then
860 AC_CHECK_HEADERS(pthread.h)
861 AC_CHECK_FUNCS(pthread_create)
862 AC_CHECK_FUNCS(pthread_condattr_setclock)
865 if test "$bwin32" = "true"; then
866 AC_CHECK_DECLS([SecureZeroMemory, _getwch], , , [
873 AM_CONDITIONAL(BUILD_READPASSPHRASE_C,
874 test "x$ac_cv_func_readpassphrase" = "xno" && test "$bwin32" = "false")
878 AC_MSG_CHECKING([whether free(NULL) works])
879 AC_RUN_IFELSE([AC_LANG_PROGRAM([
885 [free_null_ok=true; AC_MSG_RESULT(yes)],
886 [free_null_ok=false; AC_MSG_RESULT(no)],
887 [free_null_ok=cross; AC_MSG_RESULT(cross)])
889 if test "$free_null_ok" = "false"; then
890 AC_MSG_ERROR([Your libc implementation doesn't allow free(NULL), as required by C99.])
893 dnl ------------------------------------------------------
894 dnl Where do you live, libevent? And how do we call you?
896 if test "$bwin32" = "true"; then
897 TOR_LIB_WS32=-lws2_32
898 TOR_LIB_IPHLPAPI=-liphlpapi
899 TOR_LIB_SHLWAPI=-lshlwapi
900 # Some of the cargo-cults recommend -lwsock32 as well, but I don't
901 # think it's actually necessary.
903 TOR_LIB_USERENV=-luserenv
904 TOR_LIB_BCRYPT=-lbcrypt
905 TOR_LIB_CRYPT32=-lcrypt32
911 AC_SUBST(TOR_LIB_WS32)
912 AC_SUBST(TOR_LIB_GDI)
913 AC_SUBST(TOR_LIB_IPHLPAPI)
914 AC_SUBST(TOR_LIB_BCRYPT)
915 AC_SUBST(TOR_LIB_CRYPT32)
916 AC_SUBST(TOR_LIB_SHLWAPI)
917 AC_SUBST(TOR_LIB_USERENV)
919 tor_libevent_pkg_redhat="libevent"
920 tor_libevent_pkg_debian="libevent-dev"
921 tor_libevent_devpkg_redhat="libevent-devel"
922 tor_libevent_devpkg_debian="libevent-dev"
924 dnl On Gnu/Linux or any place we require it, we'll add librt to the Libevent
925 dnl linking for static builds.
926 STATIC_LIBEVENT_FLAGS=""
927 if test "$enable_static_libevent" = "yes"; then
928 if test "$have_rt" = "yes"; then
929 STATIC_LIBEVENT_FLAGS=" -lrt "
933 TOR_SEARCH_LIBRARY(libevent, $trylibeventdir, [-levent $STATIC_LIBEVENT_FLAGS $TOR_LIB_IPHLPAPI $TOR_LIB_BCRYPT $TOR_LIB_WS32], [
935 #include <winsock2.h>
937 #include <sys/time.h>
938 #include <sys/types.h>
939 #include <event2/event.h>], [
941 #include <winsock2.h>
944 struct event_base *event_base_new(void);
945 void event_base_free(struct event_base *);],
948 {WSADATA d; WSAStartup(0x101,&d); }
950 event_base_free(event_base_new());
951 ], [--with-libevent-dir], [/opt/libevent])
953 dnl Determine the incantation needed to link libevent.
955 save_LDFLAGS="$LDFLAGS"
956 save_CPPFLAGS="$CPPFLAGS"
958 LIBS="$STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32 $save_LIBS"
959 LDFLAGS="$TOR_LDFLAGS_libevent $LDFLAGS"
960 CPPFLAGS="$TOR_CPPFLAGS_libevent $CPPFLAGS"
962 AC_CHECK_HEADERS(event2/event.h event2/dns.h event2/bufferevent_ssl.h)
964 if test "$enable_static_libevent" = "yes"; then
965 if test "$tor_cv_library_libevent_dir" = "(system)"; then
966 AC_MSG_ERROR("You must specify an explicit --with-libevent-dir=x option when using --enable-static-libevent")
968 TOR_LIBEVENT_LIBS="$TOR_LIBDIR_libevent/libevent.a $STATIC_LIBEVENT_FLAGS"
971 if test "x$ac_cv_header_event2_event_h" = "xyes"; then
972 AC_SEARCH_LIBS(event_new, [event event_core], , AC_MSG_ERROR("libevent2 is installed but linking it failed while searching for event_new"))
973 AC_SEARCH_LIBS(evdns_base_new, [event event_extra], , AC_MSG_ERROR("libevent2 is installed but linking it failed while searching for evdns_base_new"))
975 if test "$ac_cv_search_event_new" != "none required"; then
976 TOR_LIBEVENT_LIBS="$ac_cv_search_event_new"
978 if test "$ac_cv_search_evdns_base_new" != "none required"; then
979 TOR_LIBEVENT_LIBS="$ac_cv_search_evdns_base_new $TOR_LIBEVENT_LIBS"
982 AC_MSG_ERROR("libevent2 is required but the headers could not be found")
986 dnl Now check for particular libevent functions.
987 AC_CHECK_FUNCS([evutil_secure_rng_set_urandom_device_file \
988 evutil_secure_rng_add_bytes \
989 evdns_base_get_nameserver_addr \
994 LDFLAGS="$save_LDFLAGS"
995 CPPFLAGS="$save_CPPFLAGS"
997 dnl Check that libevent is at least at version 2.0.10, the first stable
998 dnl release of its series
999 CPPFLAGS="$CPPFLAGS $TOR_CPPFLAGS_libevent"
1000 AC_MSG_CHECKING([whether Libevent is new enough])
1001 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
1002 #include <event2/event.h>
1003 #if !defined(LIBEVENT_VERSION_NUMBER) || LIBEVENT_VERSION_NUMBER < 0x02000a00
1009 ])], [ AC_MSG_RESULT([yes]) ],
1010 [ AC_MSG_RESULT([no])
1011 AC_MSG_ERROR([Libevent is not new enough. We require 2.0.10-stable or later]) ] )
1014 LDFLAGS="$save_LDFLAGS"
1015 CPPFLAGS="$save_CPPFLAGS"
1017 AC_SUBST(TOR_LIBEVENT_LIBS)
1019 dnl ------------------------------------------------------
1020 dnl Where do you live, libm?
1022 dnl On some platforms (Haiku/BeOS) the math library is
1023 dnl part of libroot. In which case don't link against lm
1026 AC_SEARCH_LIBS(pow, [m], , AC_MSG_ERROR([Could not find pow in libm or libc.]))
1027 if test "$ac_cv_search_pow" != "none required"; then
1028 TOR_LIB_MATH="$ac_cv_search_pow"
1031 AC_SUBST(TOR_LIB_MATH)
1033 dnl ------------------------------------------------------
1034 dnl Hello, NSS. You're new around here.
1035 if test "x$enable_nss" = "xyes"; then
1036 PKG_CHECK_MODULES(NSS,
1039 [have_nss=no; AC_MSG_ERROR([You asked for NSS but I can't find it, $pkg_config_user_action, or set NSS_CFLAGS and NSS_LIBS.])])
1040 AC_SUBST(NSS_CFLAGS)
1044 dnl ------------------------------------------------------
1045 dnl Where do you live, openssl? And how do we call you?
1047 if test "x$enable_nss" != "xyes"; then
1049 tor_openssl_pkg_redhat="openssl"
1050 tor_openssl_pkg_debian="libssl-dev"
1051 tor_openssl_devpkg_redhat="openssl-devel"
1052 tor_openssl_devpkg_debian="libssl-dev"
1054 ALT_openssl_WITHVAL=""
1055 AC_ARG_WITH(ssl-dir,
1056 AS_HELP_STRING(--with-ssl-dir=PATH, [obsolete alias for --with-openssl-dir]),
1058 if test "x$withval" != "xno" && test "x$withval" != "x"; then
1059 ALT_openssl_WITHVAL="$withval"
1063 AC_MSG_NOTICE([Now, we'll look for OpenSSL >= 1.0.1])
1064 TOR_SEARCH_LIBRARY(openssl, $tryssldir, [-lssl -lcrypto $TOR_LIB_GDI $TOR_LIB_WS32 $TOR_LIB_CRYPT32],
1065 [#include <openssl/ssl.h>
1066 char *getenv(const char *);],
1067 [struct ssl_cipher_st;
1068 unsigned SSL_CIPHER_get_id(const struct ssl_cipher_st *);
1069 char *getenv(const char *);],
1070 dnl This funny-looking test program calls getenv, so that the compiler
1071 dnl will neither make code that call SSL_CIPHER_get_id(NULL) [producing
1072 dnl a crash], nor optimize out the call to SSL_CIPHER_get_id().
1073 dnl We look for SSL_cipher_get_id() because it is present in
1074 dnl OpenSSL >=1.0.1, because it is not deprecated, and because Tor
1076 [if (getenv("THIS_SHOULDNT_BE_SET_X201803")) SSL_CIPHER_get_id((void *)0);], [],
1077 [/usr/local/opt/openssl /usr/local/openssl /usr/lib/openssl /usr/local/ssl /usr/lib/ssl /usr/local /opt/openssl])
1079 if test "$enable_static_openssl" = "yes"; then
1080 if test "$tor_cv_library_openssl_dir" = "(system)"; then
1081 AC_MSG_ERROR("You must specify an explicit --with-openssl-dir=x option when using --enable-static-openssl")
1083 TOR_OPENSSL_LIBS="$TOR_LIBDIR_openssl/libssl.a $TOR_LIBDIR_openssl/libcrypto.a $TOR_LIB_WS32 $TOR_LIB_CRYPT32 $TOR_LIB_BCRYPT"
1086 TOR_OPENSSL_LIBS="-lssl -lcrypto"
1088 AC_SUBST(TOR_OPENSSL_LIBS)
1090 dnl Now validate openssl, and check for particular openssl functions.
1092 save_LDFLAGS="$LDFLAGS"
1093 save_CPPFLAGS="$CPPFLAGS"
1094 LIBS="$TOR_OPENSSL_LIBS $LIBS"
1095 LDFLAGS="$TOR_LDFLAGS_openssl $LDFLAGS"
1096 CPPFLAGS="$TOR_CPPFLAGS_openssl $CPPFLAGS"
1098 dnl Tor currently uses a number of APIs that are deprecated in OpenSSL 3.0.0
1099 dnl and later. We want to migrate away from them, but that will be a lot of
1100 dnl work. (See ticket tor#40166.) For now, we disable the deprecation
1103 AC_MSG_CHECKING([for OpenSSL >= 3.0.0])
1104 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1105 #include <openssl/opensslv.h>
1106 #if !defined(LIBRESSL_VERSION_NUMBER) && OPENSSL_VERSION_NUMBER <= 0x30000000L
1107 #error "you_have_version_3"
1110 [ AC_MSG_RESULT([no]) ],
1111 [ AC_MSG_RESULT([yes]);
1112 AC_DEFINE(OPENSSL_SUPPRESS_DEPRECATED, 1, [disable openssl deprecated-function warnings]) ])
1114 AC_MSG_CHECKING([for OpenSSL < 1.0.1])
1115 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1116 #include <openssl/opensslv.h>
1117 #if !defined(LIBRESSL_VERSION_NUMBER) && OPENSSL_VERSION_NUMBER < 0x1000100fL
1121 [ AC_MSG_RESULT([no]) ],
1122 [ AC_MSG_ERROR([OpenSSL is too old. We require 1.0.1 or later. You can specify a path to a newer one with --with-openssl-dir.]) ])
1124 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
1125 #include <openssl/opensslv.h>
1126 #include <openssl/evp.h>
1127 #if defined(OPENSSL_NO_EC) || defined(OPENSSL_NO_ECDH) || defined(OPENSSL_NO_ECDSA)
1130 #if !defined(NID_X9_62_prime256v1) || !defined(NID_secp224r1)
1131 #error "curves unavailable"
1135 [ AC_MSG_ERROR([OpenSSL is built without full ECC support, including curves P256 and P224. You can specify a path to one with ECC support with --with-openssl-dir.]) ])
1137 dnl Let's see if we have a version mismatch between includes and libs.
1138 AC_MSG_CHECKING([for significant mismatch between openssl headers and libraries])
1140 AC_RUN_IFELSE([AC_LANG_SOURCE([AC_LANG_PROGRAM([[
1141 #include <openssl/opensslv.h>
1142 #include <openssl/crypto.h>
1144 /* Include major, minor, and fix, but not patch or status. */
1145 unsigned long mask = 0xfffff000;
1146 unsigned long linking = OpenSSL_version_num() & mask;
1147 unsigned long running = OPENSSL_VERSION_NUMBER & mask;
1148 return !(linking==running);
1149 ]])])], [openssl_ver_mismatch=no], [
1150 # This is a kludge to figure out whether compilation failed, or whether
1151 # running the program failed.
1152 if test "$ac_retval" = "1"; then
1153 openssl_ver_mismatch=inconclusive
1155 openssl_ver_mismatch=yes
1156 fi], [openssl_ver_mismatch=cross])
1157 AC_MSG_RESULT([$openssl_ver_mismatch])
1159 AC_CHECK_MEMBERS([struct ssl_method_st.get_cipher_by_char], , ,
1160 [#include <openssl/ssl.h>
1163 dnl OpenSSL functions which we might not have. In theory, we could just
1164 dnl check the openssl version number, but in practice that gets pretty
1165 dnl confusing with LibreSSL, OpenSSL, and various distributions' patches
1168 ERR_load_KDF_strings \
1171 SSL_CTX_set1_groups_list \
1172 SSL_CTX_set_security_level \
1173 SSL_SESSION_get_master_key \
1174 SSL_get_client_ciphers \
1175 SSL_get_client_random \
1176 SSL_get_server_random \
1180 dnl Check if OpenSSL structures are opaque
1181 AC_CHECK_MEMBERS([SSL.state], , ,
1182 [#include <openssl/ssl.h>
1185 AC_CHECK_SIZEOF(SHA_CTX, , [AC_INCLUDES_DEFAULT()
1186 #include <openssl/sha.h>
1191 dnl We will someday make KECCAK_TINY optional, but for now we still need
1192 dnl it for SHAKE, since OpenSSL's SHAKE can't be squeezed more than
1193 dnl once. See comment in the definition of crypto_xof_t.
1195 dnl AM_CONDITIONAL(BUILD_KECCAK_TINY,
1196 dnl test "x$ac_cv_func_EVP_sha3_256" != "xyes")
1198 AM_CONDITIONAL(BUILD_KECCAK_TINY, true)
1200 dnl ======================================================================
1201 dnl Can we use KIST?
1203 dnl Define the set of checks for KIST scheduler support.
1204 AC_DEFUN([CHECK_KIST_SUPPORT],[
1205 dnl KIST needs struct tcp_info and for certain members to exist.
1207 [struct tcp_info.tcpi_unacked, struct tcp_info.tcpi_snd_mss],
1208 , ,[[#include <netinet/tcp.h>]])
1209 dnl KIST needs SIOCOUTQNSD to exist for an ioctl call.
1210 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
1211 #include <linux/sockios.h>
1215 ])], have_siocoutqnsd=yes, have_siocoutqnsd=no)
1216 if test "x$have_siocoutqnsd" = "xyes"; then
1217 if test "x$ac_cv_member_struct_tcp_info_tcpi_unacked" = "xyes"; then
1218 if test "x$ac_cv_member_struct_tcp_info_tcpi_snd_mss" = "xyes"; then
1219 have_kist_support=yes
1224 dnl Now, trigger the check.
1226 AS_IF([test "x$have_kist_support" = "xyes"],
1227 [AC_DEFINE(HAVE_KIST_SUPPORT, 1, [Defined if KIST scheduler is supported
1229 [AC_MSG_NOTICE([KIST scheduler can't be used. Missing support.])])
1232 LDFLAGS="$save_LDFLAGS"
1233 CPPFLAGS="$save_CPPFLAGS"
1235 dnl ------------------------------------------------------
1236 dnl Where do you live, zlib? And how do we call you?
1238 tor_zlib_pkg_redhat="zlib"
1239 tor_zlib_pkg_debian="zlib1g"
1240 tor_zlib_devpkg_redhat="zlib-devel"
1241 tor_zlib_devpkg_debian="zlib1g-dev"
1243 TOR_SEARCH_LIBRARY(zlib, $tryzlibdir, [-lz],
1244 [#include <zlib.h>],
1245 [const char * zlibVersion(void);],
1246 [zlibVersion();], [--with-zlib-dir],
1249 if test "$enable_static_zlib" = "yes"; then
1250 if test "$tor_cv_library_zlib_dir" = "(system)"; then
1251 AC_MSG_ERROR("You must specify an explicit --with-zlib-dir=x option when
1252 using --enable-static-zlib")
1254 TOR_ZLIB_LIBS="$TOR_LIBDIR_zlib/libz.a"
1259 AC_SUBST(TOR_ZLIB_LIBS)
1261 dnl ------------------------------------------------------
1262 dnl Where we do we find lzma?
1265 AS_HELP_STRING(--enable-lzma, [enable support for the LZMA compression scheme.]),
1266 [case "${enableval}" in
1269 * ) AC_MSG_ERROR(bad value for --enable-lzma) ;;
1270 esac], [enable_lzma=auto])
1272 if test "x$enable_lzma" = "xno"; then
1275 PKG_CHECK_MODULES([LZMA],
1280 if test "x$have_lzma" = "xno" ; then
1282 AC_MSG_WARN([Unable to find liblzma, $pkg_config_user_action, or set LZMA_CFLAGS and LZMA_LIBS.])
1286 if test "x$have_lzma" = "xyes"; then
1287 AC_DEFINE(HAVE_LZMA,1,[Have LZMA])
1288 TOR_LZMA_CFLAGS="${LZMA_CFLAGS}"
1289 TOR_LZMA_LIBS="${LZMA_LIBS}"
1291 AC_SUBST(TOR_LZMA_CFLAGS)
1292 AC_SUBST(TOR_LZMA_LIBS)
1294 dnl ------------------------------------------------------
1295 dnl Where we do we find zstd?
1298 AS_HELP_STRING(--enable-zstd, [enable support for the Zstandard compression scheme.]),
1299 [case "${enableval}" in
1302 * ) AC_MSG_ERROR(bad value for --enable-zstd) ;;
1303 esac], [enable_zstd=auto])
1305 if test "x$enable_zstd" = "xno"; then
1308 PKG_CHECK_MODULES([ZSTD],
1313 if test "x$have_zstd" = "xno" ; then
1315 AC_MSG_WARN([Unable to find libzstd, $pkg_config_user_action, or set ZSTD_CFLAGS and ZSTD_LIBS.])
1319 if test "x$have_zstd" = "xyes"; then
1320 AC_DEFINE(HAVE_ZSTD,1,[Have Zstd])
1321 TOR_ZSTD_CFLAGS="${ZSTD_CFLAGS}"
1322 TOR_ZSTD_LIBS="${ZSTD_LIBS}"
1324 dnl now check for zstd functions
1326 save_CFLAGS="$CFLAGS"
1327 LIBS="$LIBS $ZSTD_LIBS"
1328 CFLAGS="$CFLAGS $ZSTD_CFLAGS"
1329 AC_CHECK_FUNCS(ZSTD_estimateCStreamSize \
1330 ZSTD_estimateDCtxSize)
1332 CFLAGS="$save_CFLAGS"
1334 AC_SUBST(TOR_ZSTD_CFLAGS)
1335 AC_SUBST(TOR_ZSTD_LIBS)
1337 dnl ----------------------------------------------------------------------
1338 dnl Check if libcap is available for capabilities.
1340 tor_cap_pkg_debian="libcap2"
1341 tor_cap_pkg_redhat="libcap"
1342 tor_cap_devpkg_debian="libcap-dev"
1343 tor_cap_devpkg_redhat="libcap-devel"
1345 AC_CHECK_LIB([cap], [cap_init], [],
1346 AC_MSG_NOTICE([Libcap was not found. Capabilities will not be usable.])
1348 AC_CHECK_FUNCS(cap_set_proc)
1350 dnl ---------------------------------------------------------------------
1351 dnl Now that we know about our major libraries, we can check for compiler
1352 dnl and linker hardening options. We need to do this with the libraries known,
1353 dnl since sometimes the linker will like an option but not be willing to
1354 dnl use it with a build of a library.
1356 all_ldflags_for_check="$TOR_LDFLAGS_zlib $TOR_LDFLAGS_openssl $TOR_LDFLAGS_libevent"
1357 all_libs_for_check="$TOR_ZLIB_LIBS $TOR_LIB_MATH $TOR_LIBEVENT_LIBS $TOR_OPENSSL_LIBS $TOR_SYSTEMD_LIBS $TOR_LIB_WS32 $TOR_LIB_GDI $TOR_LIB_USERENV $TOR_CAP_LIBS"
1365 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
1366 #if !defined(__clang__)
1368 #endif])], have_clang=yes, have_clang=no)
1370 if test "x$enable_pic" = "xyes"; then
1371 TOR_CHECK_CFLAGS(-fPIC)
1374 if test "x$enable_gcc_hardening" != "xno"; then
1375 CFLAGS="$CFLAGS -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2"
1376 if test "x$have_clang" = "xyes"; then
1377 TOR_CHECK_CFLAGS(-Qunused-arguments)
1379 TOR_CHECK_CFLAGS(-fstack-protector-all, also_link)
1380 AS_VAR_PUSHDEF([can_compile], [tor_cv_cflags_-fstack-protector-all])
1381 AS_VAR_PUSHDEF([can_link], [tor_can_link_-fstack-protector-all])
1382 m4_ifdef([AS_VAR_IF],[
1383 AS_VAR_IF(can_compile, [yes],
1384 AS_VAR_IF(can_link, [yes],
1386 AC_MSG_ERROR([We tried to build with stack protection; it looks like your compiler supports it but your libc does not provide it. Are you missing libssp? (You can --disable-gcc-hardening to ignore this error.)]))
1388 AS_VAR_POPDEF([can_link])
1389 AS_VAR_POPDEF([can_compile])
1390 TOR_CHECK_CFLAGS(-Wstack-protector)
1391 TOR_CHECK_CFLAGS(--param ssp-buffer-size=1)
1392 if test "$bwin32" = "false" && test "$enable_libfuzzer" != "yes" && test "$enable_oss_fuzz" != "yes"; then
1393 if test "$enable_pic" != "yes"; then
1394 # If we have already enabled -fPIC, then we don't also need to
1395 # compile with -fPIE...
1396 TOR_CHECK_CFLAGS(-fPIE)
1398 # ... but we want to link our executables with -pie in any case, since
1399 # they're executables, not a library.
1400 TOR_CHECK_LDFLAGS(-pie, "$all_ldflags_for_check", "$all_libs_for_check")
1402 TOR_TRY_COMPILE_WITH_CFLAGS(-fwrapv, also_link, CFLAGS_FWRAPV="-fwrapv", true)
1404 AC_MSG_CHECKING([whether we can run hardened binaries])
1405 AC_RUN_IFELSE([AC_LANG_PROGRAM([], [return 0;])],
1406 [AC_MSG_RESULT([yes])],
1407 [AC_MSG_RESULT([no])
1409 We can link with compiler hardening options, but we can't run with them.
1410 That's a bad sign! If you must, you can pass --disable-gcc-hardening to
1411 configure, but it would be better to figure out what the underlying problem
1413 [AC_MSG_RESULT([cross])])
1416 if test "$fragile_hardening" = "yes"; then
1417 TOR_TRY_COMPILE_WITH_CFLAGS(-ftrapv, also_link, CFLAGS_FTRAPV="-ftrapv", true)
1418 if test "$tor_cv_cflags__ftrapv" = "yes" && test "$tor_can_link__ftrapv" != "yes"; then
1420 AC_MSG_WARN([The compiler supports -ftrapv, but for some reason I was not able to link with -ftrapv. Are you missing run-time support? Run-time hardening will not work as well as it should.])
1423 if test "$tor_cv_cflags__ftrapv" != "yes"; then
1424 AC_MSG_ERROR([You requested fragile hardening, but the compiler does not seem to support -ftrapv.])
1427 TOR_TRY_COMPILE_WITH_CFLAGS([-fsanitize=address], also_link, CFLAGS_ASAN="-fsanitize=address", true)
1428 if test "$tor_cv_cflags__fsanitize_address" = "yes" && test "$tor_can_link__fsanitize_address" != "yes"; then
1429 AC_MSG_ERROR([The compiler supports -fsanitize=address, but for some reason I was not able to link when using it. Are you missing run-time support? With GCC you need libubsan.*, and with Clang you need libclang_rt.ubsan*])
1432 TOR_TRY_COMPILE_WITH_CFLAGS([-fsanitize=undefined], also_link, CFLAGS_UBSAN="-fsanitize=undefined", true)
1433 if test "$tor_cv_cflags__fsanitize_address" = "yes" && test "$tor_can_link__fsanitize_address" != "yes"; then
1434 AC_MSG_ERROR([The compiler supports -fsanitize=undefined, but for some reason I was not able to link when using it. Are you missing run-time support? With GCC you need libasan.*, and with Clang you need libclang_rt.ubsan*])
1437 TOR_TRY_COMPILE_WITH_CFLAGS([-fno-sanitize=float-divide-by-zero], also_link, CFLAGS_UBSAN="-fno-sanitize=float-divide-by-zero", true)
1438 if test "$tor_cv_cflags__fno_sanitize_float_divide_by_zero" = "yes" && test "$tor_can_link__fno_sanitize_float_divide_by_zero" != "yes"; then
1439 AC_MSG_ERROR([The compiler supports -fno-sanitize=float-divide-by-zero, but for some reason I was not able to link when using it. Are you missing run-time support? With GCC you need libasan.*, and with Clang you need libclang_rt.ubsan*])
1442 TOR_CHECK_CFLAGS([-fno-omit-frame-pointer])
1445 dnl Find the correct libraries to add in order to use the sanitizers.
1447 dnl When building Rust, Cargo will run the linker with the -nodefaultlibs
1448 dnl option, which will prevent the compiler from linking the sanitizer
1449 dnl libraries it needs. We need to specify them manually.
1451 dnl What's more, we need to specify them in a linker script rather than
1452 dnl from build.rs: these options aren't allowed in the cargo:rustc-flags
1454 RUST_LINKER_OPTIONS=""
1455 if test "x$have_clang" = "xyes"; then
1456 if test "x$CFLAGS_ASAN" != "x"; then
1457 RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -Clink-arg=$CFLAGS_ASAN -Cdefault-linker-libraries"
1459 if test "x$CFLAGS_UBSAN" != "x"; then
1460 RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -Clink-arg=$CFLAGS_UBSAN -Cdefault-linker-libraries"
1463 if test "x$CFLAGS_ASAN" != "x"; then
1464 RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -Clink-arg=-fsanitize=address -Cdefault-linker-libraries"
1466 if test "x$CFLAGS_UBSAN" != "x"; then
1467 RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -Clink-arg=-fsanitize=undefined -Cdefault-linker-libraries"
1470 AC_SUBST(RUST_LINKER_OPTIONS)
1472 CFLAGS_BUGTRAP="$CFLAGS_FTRAPV $CFLAGS_ASAN $CFLAGS_UBSAN"
1473 CFLAGS_CONSTTIME="$CFLAGS_FWRAPV"
1475 mulodi_fixes_ftrapv=no
1476 if test "$have_clang" = "yes"; then
1477 saved_CFLAGS="$CFLAGS"
1478 CFLAGS="$CFLAGS $CFLAGS_FTRAPV"
1479 AC_MSG_CHECKING([whether clang -ftrapv can link a 64-bit int multiply])
1484 int main(int argc, char **argv)
1486 int64_t x = ((int64_t)atoi(argv[1])) * (int64_t)atoi(argv[2])
1487 * (int64_t)atoi(argv[3]);
1490 [ftrapv_can_link=yes; AC_MSG_RESULT([yes])],
1491 [ftrapv_can_link=no; AC_MSG_RESULT([no])])
1492 if test "$ftrapv_can_link" = "no"; then
1493 AC_MSG_CHECKING([whether defining __mulodi4 fixes that])
1498 int64_t __mulodi4(int64_t a, int64_t b, int *overflow) {
1502 int main(int argc, char **argv)
1504 int64_t x = ((int64_t)atoi(argv[1])) * (int64_t)atoi(argv[2])
1505 * (int64_t)atoi(argv[3]);
1508 [mulodi_fixes_ftrapv=yes; AC_MSG_RESULT([yes])],
1509 [mulodi_fixes_ftrapv=no; AC_MSG_RESULT([no])])
1511 CFLAGS="$saved_CFLAGS"
1514 AM_CONDITIONAL(ADD_MULODI4, test "$mulodi_fixes_ftrapv" = "yes")
1516 dnl These cflags add bunches of branches, and we haven't been able to
1517 dnl persuade ourselves that they're suitable for code that needs to be
1519 AC_SUBST(CFLAGS_BUGTRAP)
1520 dnl These cflags are variant ones suitable for code that needs to be
1522 AC_SUBST(CFLAGS_CONSTTIME)
1524 if test "x$enable_linker_hardening" != "xno"; then
1525 TOR_CHECK_LDFLAGS(-z relro -z now, "$all_ldflags_for_check", "$all_libs_for_check")
1528 # For backtrace support
1529 TOR_CHECK_LDFLAGS(-rdynamic)
1531 dnl ------------------------------------------------------
1532 dnl Now see if we have a -fomit-frame-pointer compiler option.
1534 saved_CFLAGS="$CFLAGS"
1535 TOR_CHECK_CFLAGS(-fomit-frame-pointer)
1536 F_OMIT_FRAME_POINTER=''
1537 if test "$saved_CFLAGS" != "$CFLAGS"; then
1538 if test "$fragile_hardening" = "yes"; then
1539 F_OMIT_FRAME_POINTER='-fomit-frame-pointer'
1542 CFLAGS="$saved_CFLAGS"
1543 AC_SUBST(F_OMIT_FRAME_POINTER)
1545 dnl ------------------------------------------------------
1546 dnl If we are adding -fomit-frame-pointer (or if the compiler's doing it
1547 dnl for us, as GCC 4.6 and later do at many optimization levels), then
1548 dnl we should try to add -fasynchronous-unwind-tables so that our backtrace
1550 TOR_CHECK_CFLAGS(-fasynchronous-unwind-tables)
1552 dnl ============================================================
1553 dnl Check for libseccomp
1555 if test "x$enable_seccomp" != "xno"; then
1556 AC_CHECK_HEADERS([seccomp.h])
1557 AC_SEARCH_LIBS(seccomp_init, [seccomp])
1560 dnl ============================================================
1561 dnl Check for libscrypt
1563 if test "x$enable_libscrypt" != "xno"; then
1564 AC_CHECK_HEADERS([libscrypt.h])
1565 AC_SEARCH_LIBS(libscrypt_scrypt, [scrypt])
1566 AC_CHECK_FUNCS([libscrypt_scrypt])
1569 dnl ============================================================
1570 dnl We need an implementation of curve25519.
1572 dnl set these defaults.
1573 build_curve25519_donna=no
1574 build_curve25519_donna_c64=no
1575 use_curve25519_donna=no
1576 use_curve25519_nacl=no
1579 dnl The best choice is using curve25519-donna-c64, but that requires
1581 AC_CACHE_CHECK([whether we can use curve25519-donna-c64],
1582 tor_cv_can_use_curve25519_donna_c64,
1584 [AC_LANG_PROGRAM([dnl
1586 typedef unsigned uint128_t __attribute__((mode(TI)));
1587 int func(uint64_t a, uint64_t b) {
1588 uint128_t c = ((uint128_t)a) * b;
1589 int ok = ((uint64_t)(c>>96)) == 522859 &&
1590 (((uint64_t)(c>>64))&0xffffffffL) == 3604448702L &&
1591 (((uint64_t)(c>>32))&0xffffffffL) == 2351960064L &&
1592 (((uint64_t)(c))&0xffffffffL) == 0;
1596 int ok = func( ((uint64_t)2000000000) * 1000000000,
1597 ((uint64_t)1234567890) << 24);
1600 [tor_cv_can_use_curve25519_donna_c64=yes],
1601 [tor_cv_can_use_curve25519_donna_c64=no],
1603 [AC_LANG_PROGRAM([dnl
1605 typedef unsigned uint128_t __attribute__((mode(TI)));
1606 int func(uint64_t a, uint64_t b) {
1607 uint128_t c = ((uint128_t)a) * b;
1608 int ok = ((uint64_t)(c>>96)) == 522859 &&
1609 (((uint64_t)(c>>64))&0xffffffffL) == 3604448702L &&
1610 (((uint64_t)(c>>32))&0xffffffffL) == 2351960064L &&
1611 (((uint64_t)(c))&0xffffffffL) == 0;
1615 int ok = func( ((uint64_t)2000000000) * 1000000000,
1616 ((uint64_t)1234567890) << 24);
1619 [tor_cv_can_use_curve25519_donna_c64=cross],
1620 [tor_cv_can_use_curve25519_donna_c64=no])])])
1622 AC_CHECK_HEADERS([crypto_scalarmult_curve25519.h \
1623 nacl/crypto_scalarmult_curve25519.h])
1625 AC_CACHE_CHECK([for nacl compiled with a fast curve25519 implementation],
1626 tor_cv_can_use_curve25519_nacl,
1627 [tor_saved_LIBS="$LIBS"
1630 [AC_LANG_PROGRAM([dnl
1631 #ifdef HAVE_CRYPTO_SCALARMULT_CURVE25519_H
1632 #include <crypto_scalarmult_curve25519.h>
1633 #elif defined(HAVE_NACL_CRYPTO_SCALARMULT_CURVE25519_H)
1634 #include <nacl/crypto_scalarmult_curve25519.h>
1636 #ifdef crypto_scalarmult_curve25519_ref_BYTES
1637 #error Hey, this is the reference implementation! That's not fast.
1640 unsigned char *a, *b, *c; crypto_scalarmult_curve25519(a,b,c);
1641 ])], [tor_cv_can_use_curve25519_nacl=yes],
1642 [tor_cv_can_use_curve25519_nacl=no])
1643 LIBS="$tor_saved_LIBS" ])
1645 dnl Okay, now we need to figure out which one to actually use. Fall back
1646 dnl to curve25519-donna.c
1648 if test "x$tor_cv_can_use_curve25519_donna_c64" != "xno"; then
1649 build_curve25519_donna_c64=yes
1650 use_curve25519_donna=yes
1651 elif test "x$tor_cv_can_use_curve25519_nacl" = "xyes"; then
1652 use_curve25519_nacl=yes
1653 CURVE25519_LIBS=-lnacl
1655 build_curve25519_donna=yes
1656 use_curve25519_donna=yes
1659 if test "x$use_curve25519_donna" = "xyes"; then
1660 AC_DEFINE(USE_CURVE25519_DONNA, 1,
1661 [Defined if we should use an internal curve25519_donna{,_c64} implementation])
1663 if test "x$use_curve25519_nacl" = "xyes"; then
1664 AC_DEFINE(USE_CURVE25519_NACL, 1,
1665 [Defined if we should use a curve25519 from nacl])
1667 AM_CONDITIONAL(BUILD_CURVE25519_DONNA,
1668 test "x$build_curve25519_donna" = "xyes")
1669 AM_CONDITIONAL(BUILD_CURVE25519_DONNA_C64,
1670 test "x$build_curve25519_donna_c64" = "xyes")
1671 AC_SUBST(CURVE25519_LIBS)
1673 dnl Make sure to enable support for large off_t if available.
1676 AC_CHECK_HEADERS([errno.h \
1690 gnu/libc-version.h \
1728 AC_CHECK_HEADERS(sys/param.h)
1730 AC_CHECK_HEADERS(net/if.h, net_if_found=1, net_if_found=0,
1731 [#ifdef HAVE_SYS_TYPES_H
1732 #include <sys/types.h>
1734 #ifdef HAVE_SYS_SOCKET_H
1735 #include <sys/socket.h>
1737 AC_CHECK_HEADERS(net/pfvar.h, net_pfvar_found=1, net_pfvar_found=0,
1738 [#ifdef HAVE_SYS_TYPES_H
1739 #include <sys/types.h>
1741 #ifdef HAVE_SYS_SOCKET_H
1742 #include <sys/socket.h>
1744 #ifdef HAVE_NET_IF_H
1747 #ifdef HAVE_NETINET_IN_H
1748 #include <netinet/in.h>
1751 AC_CHECK_HEADERS(linux/if.h,[],[],
1753 #ifdef HAVE_SYS_SOCKET_H
1754 #include <sys/socket.h>
1758 AC_CHECK_HEADERS(linux/netfilter_ipv4.h,
1759 linux_netfilter_ipv4=1, linux_netfilter_ipv4=0,
1760 [#ifdef HAVE_SYS_TYPES_H
1761 #include <sys/types.h>
1763 #ifdef HAVE_SYS_SOCKET_H
1764 #include <sys/socket.h>
1766 #ifdef HAVE_LIMITS_H
1769 #ifdef HAVE_LINUX_TYPES_H
1770 #include <linux/types.h>
1772 #ifdef HAVE_NETINET_IN6_H
1773 #include <netinet/in6.h>
1775 #ifdef HAVE_NETINET_IN_H
1776 #include <netinet/in.h>
1779 AC_CHECK_HEADERS(linux/netfilter_ipv6/ip6_tables.h,
1780 linux_netfilter_ipv6_ip6_tables=1, linux_netfilter_ipv6_ip6_tables=0,
1781 [#ifdef HAVE_SYS_TYPES_H
1782 #include <sys/types.h>
1784 #ifdef HAVE_SYS_SOCKET_H
1785 #include <sys/socket.h>
1787 #ifdef HAVE_LIMITS_H
1790 #ifdef HAVE_LINUX_TYPES_H
1791 #include <linux/types.h>
1793 #ifdef HAVE_NETINET_IN6_H
1794 #include <netinet/in6.h>
1796 #ifdef HAVE_NETINET_IN_H
1797 #include <netinet/in.h>
1799 #ifdef HAVE_LINUX_IF_H
1800 #include <linux/if.h>
1804 if test "x$net_if_found" = "x1" && test "x$net_pfvar_found" = "x1"; then
1807 if test "x$linux_netfilter_ipv4" = "x1"; then
1810 if test "x$linux_netfilter_ipv6_ip6_tables" = "x1"; then
1813 if test "x$transparent_ok" = "x1"; then
1814 AC_DEFINE(USE_TRANSPARENT, 1, "Define to enable transparent proxy support")
1816 AC_MSG_NOTICE([Transparent proxy support enabled, but missing headers.])
1819 AC_CHECK_MEMBERS([struct timeval.tv_sec], , ,
1820 [#ifdef HAVE_SYS_TYPES_H
1821 #include <sys/types.h>
1823 #ifdef HAVE_SYS_TIME_H
1824 #include <sys/time.h>
1827 AC_CHECK_SIZEOF(char)
1828 AC_CHECK_SIZEOF(short)
1829 AC_CHECK_SIZEOF(int)
1830 AC_CHECK_SIZEOF(unsigned int)
1831 AC_CHECK_SIZEOF(long)
1832 AC_CHECK_SIZEOF(long long)
1833 AC_CHECK_SIZEOF(__int64)
1834 AC_CHECK_SIZEOF(void *)
1835 AC_CHECK_SIZEOF(time_t)
1836 AC_CHECK_SIZEOF(size_t)
1837 AC_CHECK_SIZEOF(pid_t)
1839 AC_CHECK_TYPES([uint, u_char, ssize_t])
1841 AC_PC_FROM_UCONTEXT([:])
1843 dnl used to include sockaddr_storage, but everybody has that.
1844 AC_CHECK_TYPES([struct in6_addr, struct sockaddr_in6, sa_family_t], , ,
1845 [#ifdef HAVE_SYS_TYPES_H
1846 #include <sys/types.h>
1848 #ifdef HAVE_NETINET_IN_H
1849 #include <netinet/in.h>
1851 #ifdef HAVE_NETINET_IN6_H
1852 #include <netinet/in6.h>
1854 #ifdef HAVE_SYS_SOCKET_H
1855 #include <sys/socket.h>
1858 #define _WIN32_WINNT 0x0501
1859 #define WIN32_LEAN_AND_MEAN
1860 #include <winsock2.h>
1861 #include <ws2tcpip.h>
1864 AC_CHECK_MEMBERS([struct in6_addr.s6_addr32, struct in6_addr.s6_addr16, struct sockaddr_in.sin_len, struct sockaddr_in6.sin6_len], , ,
1865 [#ifdef HAVE_SYS_TYPES_H
1866 #include <sys/types.h>
1868 #ifdef HAVE_NETINET_IN_H
1869 #include <netinet/in.h>
1871 #ifdef HAVE_NETINET_IN6_H
1872 #include <netinet/in6.h>
1874 #ifdef HAVE_SYS_SOCKET_H
1875 #include <sys/socket.h>
1878 #define _WIN32_WINNT 0x0501
1879 #define WIN32_LEAN_AND_MEAN
1880 #include <winsock2.h>
1881 #include <ws2tcpip.h>
1885 AC_CHECK_TYPES([rlim_t], , ,
1886 [#ifdef HAVE_SYS_TYPES_H
1887 #include <sys/types.h>
1889 #ifdef HAVE_SYS_TIME_H
1890 #include <sys/time.h>
1892 #ifdef HAVE_SYS_RESOURCE_H
1893 #include <sys/resource.h>
1897 AX_CHECK_SIGN([time_t],
1900 #ifdef HAVE_SYS_TYPES_H
1901 #include <sys/types.h>
1903 #ifdef HAVE_SYS_TIME_H
1904 #include <sys/time.h>
1911 if test "$ax_cv_decl_time_t_signed" = "no"; then
1912 AC_MSG_ERROR([You have an unsigned time_t; Tor does not support that. Please tell the Tor developers about your interesting platform.])
1915 AX_CHECK_SIGN([size_t],
1916 [ tor_cv_size_t_signed=yes ],
1917 [ tor_cv_size_t_signed=no ], [
1918 #ifdef HAVE_SYS_TYPES_H
1919 #include <sys/types.h>
1923 if test "$ax_cv_decl_size_t_signed" = "yes"; then
1924 AC_MSG_ERROR([You have a signed size_t; that's grossly nonconformant.])
1927 AX_CHECK_SIGN([enum always],
1928 [ AC_DEFINE(ENUM_VALS_ARE_SIGNED, 1, [Define if enum is always signed]) ],
1930 enum always { AAA, BBB, CCC };
1933 AC_CHECK_SIZEOF(socklen_t, , [AC_INCLUDES_DEFAULT()
1934 #ifdef HAVE_SYS_SOCKET_H
1935 #include <sys/socket.h>
1939 # We want to make sure that we _don't_ have a cell_t defined, like IRIX does.
1941 AC_CHECK_SIZEOF(cell_t)
1943 # Let's see if stdatomic works. (There are some debian clangs that screw it
1944 # up; see Tor bug #26779 and debian bug 903709.)
1945 AC_CACHE_CHECK([whether C11 stdatomic.h actually works],
1946 tor_cv_stdatomic_works,
1947 [AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
1948 #include <stdatomic.h>
1949 struct x { atomic_size_t y; };
1950 void try_atomic_init(struct x *xx)
1952 atomic_init(&xx->y, 99);
1953 atomic_fetch_add(&xx->y, 1);
1955 ]])], [tor_cv_stdatomic_works=yes], [tor_cv_stdatomic_works=no])])
1957 if test "$tor_cv_stdatomic_works" = "yes"; then
1958 AC_DEFINE(STDATOMIC_WORKS, 1, [Set to 1 if we can compile a simple stdatomic example.])
1959 elif test "$ac_cv_header_stdatomic_h" = "yes"; then
1961 AC_MSG_WARN([Your compiler provides the stdatomic.h header, but it doesn't seem to work. I'll pretend it isn't there. If you are using Clang on Debian, maybe this is because of https://bugs.debian.org/903709 ])
1964 # Now make sure that NULL can be represented as zero bytes.
1965 AC_CACHE_CHECK([whether memset(0) sets pointers to NULL], tor_cv_null_is_zero,
1966 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1967 [[#include <stdlib.h>
1970 #ifdef HAVE_STDDEF_H
1973 int main () { char *p1,*p2; p1=NULL; memset(&p2,0,sizeof(p2));
1974 return memcmp(&p1,&p2,sizeof(char*))?1:0; }]])],
1975 [tor_cv_null_is_zero=yes],
1976 [tor_cv_null_is_zero=no],
1977 [tor_cv_null_is_zero=cross])])
1979 if test "$tor_cv_null_is_zero" = "cross"; then
1980 # Cross-compiling; let's hope that the target isn't raving mad.
1981 AC_MSG_NOTICE([Cross-compiling: we'll assume that NULL is represented as a sequence of 0-valued bytes.])
1984 if test "$tor_cv_null_is_zero" != "no"; then
1985 AC_DEFINE([NULL_REP_IS_ZERO_BYTES], 1,
1986 [Define to 1 iff memset(0) sets pointers to NULL])
1989 AC_CACHE_CHECK([whether memset(0) sets doubles to 0.0], tor_cv_dbl0_is_zero,
1990 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1991 [[#include <stdlib.h>
1994 #ifdef HAVE_STDDEF_H
1997 int main () { double d1,d2; d1=0; memset(&d2,0,sizeof(d2));
1998 return memcmp(&d1,&d2,sizeof(d1))?1:0; }]])],
1999 [tor_cv_dbl0_is_zero=yes],
2000 [tor_cv_dbl0_is_zero=no],
2001 [tor_cv_dbl0_is_zero=cross])])
2003 if test "$tor_cv_dbl0_is_zero" = "cross"; then
2004 # Cross-compiling; let's hope that the target isn't raving mad.
2005 AC_MSG_NOTICE([Cross-compiling: we'll assume that 0.0 can be represented as a sequence of 0-valued bytes.])
2008 if test "$tor_cv_dbl0_is_zero" != "no"; then
2009 AC_DEFINE([DOUBLE_0_REP_IS_ZERO_BYTES], 1,
2010 [Define to 1 iff memset(0) sets doubles to 0.0])
2013 # And what happens when we malloc zero?
2014 AC_CACHE_CHECK([whether we can malloc(0) safely.], tor_cv_malloc_zero_works,
2015 [AC_RUN_IFELSE([AC_LANG_SOURCE(
2016 [[#include <stdlib.h>
2019 #ifdef HAVE_STDDEF_H
2022 int main () { return malloc(0)?0:1; }]])],
2023 [tor_cv_malloc_zero_works=yes],
2024 [tor_cv_malloc_zero_works=no],
2025 [tor_cv_malloc_zero_works=cross])])
2027 if test "$tor_cv_malloc_zero_works" = "cross"; then
2028 # Cross-compiling; let's hope that the target isn't raving mad.
2029 AC_MSG_NOTICE([Cross-compiling: we'll assume that we need to check malloc() arguments for 0.])
2032 if test "$tor_cv_malloc_zero_works" = "yes"; then
2033 AC_DEFINE([MALLOC_ZERO_WORKS], 1,
2034 [Define to 1 iff malloc(0) returns a pointer])
2037 # whether we seem to be in a 2s-complement world.
2038 AC_CACHE_CHECK([whether we are using 2s-complement arithmetic], tor_cv_twos_complement,
2039 [AC_RUN_IFELSE([AC_LANG_SOURCE(
2040 [[int main () { int problem = ((-99) != (~99)+1);
2041 return problem ? 1 : 0; }]])],
2042 [tor_cv_twos_complement=yes],
2043 [tor_cv_twos_complement=no],
2044 [tor_cv_twos_complement=cross])])
2046 if test "$tor_cv_twos_complement" = "cross"; then
2047 # Cross-compiling; let's hope that the target isn't raving mad.
2048 AC_MSG_NOTICE([Cross-compiling: we'll assume that negative integers are represented with two's complement.])
2051 if test "$tor_cv_twos_complement" != "no"; then
2052 AC_DEFINE([USING_TWOS_COMPLEMENT], 1,
2053 [Define to 1 iff we represent negative integers with
2057 # What does shifting a negative value do?
2058 AC_CACHE_CHECK([whether right-shift on negative values does sign-extension], tor_cv_sign_extend,
2059 [AC_RUN_IFELSE([AC_LANG_SOURCE(
2060 [[int main () { int okay = (-60 >> 8) == -1; return okay ? 0 : 1; }]])],
2061 [tor_cv_sign_extend=yes],
2062 [tor_cv_sign_extend=no],
2063 [tor_cv_sign_extend=cross])])
2065 if test "$tor_cv_sign_extend" = "cross"; then
2066 # Cross-compiling; let's hope that the target isn't raving mad.
2067 AC_MSG_NOTICE([Cross-compiling: we'll assume that right-shifting negative integers causes sign-extension])
2070 if test "$tor_cv_sign_extend" != "no"; then
2071 AC_DEFINE([RSHIFT_DOES_SIGN_EXTEND], 1,
2072 [Define to 1 iff right-shifting a negative value performs sign-extension])
2075 # Is uint8_t the same type as unsigned char?
2076 AC_CACHE_CHECK([whether uint8_t is the same type as unsigned char], tor_cv_uint8_uchar,
2077 [AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
2080 unsigned char c;]])],
2081 [tor_cv_uint8_uchar=yes],
2082 [tor_cv_uint8_uchar=no],
2083 [tor_cv_uint8_uchar=cross])])
2085 if test "$tor_cv_uint8_uchar" = "cross"; then
2086 AC_MSG_NOTICE([Cross-compiling: we'll assume that uint8_t is the same type as unsigned char])
2089 if test "$tor_cv_uint8_uchar" = "no"; then
2090 AC_MSG_ERROR([We assume that uint8_t is the same type as unsigned char, but your compiler disagrees.])
2093 AC_ARG_WITH(tcmalloc,
2094 AS_HELP_STRING(--with-tcmalloc, [use tcmalloc memory allocation library. Deprecated; see --with-malloc]))
2096 default_malloc=system
2098 if test "x$enable_openbsd_malloc" = "xyes" ; then
2099 AC_MSG_NOTICE([The --enable-openbsd-malloc argument is deprecated; use --with-malloc=openbsd instead.])
2100 default_malloc=openbsd
2103 if test "x$with_tcmalloc" = "xyes"; then
2104 AC_MSG_NOTICE([The --with-tcmalloc argument is deprecated; use --with-malloc=tcmalloc instead.])
2105 default_malloc=tcmalloc
2109 AS_HELP_STRING([--with-malloc=[system,jemalloc,tcmalloc,openbsd]],
2110 [select special malloc implementation [system]]),
2111 [ malloc="$with_malloc" ], [ malloc="$default_malloc" ])
2115 PKG_CHECK_MODULES([TCMALLOC],
2120 if test "x$have_tcmalloc" = "xno" ; then
2121 AC_MSG_ERROR([Unable to find tcmalloc requested by --with-malloc, $pkg_config_user_action, or set TCMALLOC_CFLAGS and TCMALLOC_LIBS.])
2124 CFLAGS="$CFLAGS $TCMALLOC_CFLAGS"
2125 LIBS="$TCMALLOC_LIBS $LIBS"
2129 PKG_CHECK_MODULES([JEMALLOC],
2134 if test "x$have_jemalloc" = "xno" ; then
2135 AC_MSG_ERROR([Unable to find jemalloc requested by --with-malloc, $pkg_config_user_action, or set JEMALLOC_CFLAGS and JEMALLOC_LIBS.])
2138 CFLAGS="$CFLAGS $JEMALLOC_CFLAGS"
2139 LIBS="$JEMALLOC_LIBS $LIBS"
2140 using_custom_malloc=yes
2145 AC_MSG_WARN([The openbsd malloc port is deprecated in Tor 0.3.5 and will be removed in a future version.])
2146 enable_openbsd_malloc=yes
2150 # handle this later, including the jemalloc fallback
2153 [AC_MSG_ERROR([--with-malloc=`$with_malloc' not supported, see --help])
2156 AM_CONDITIONAL(USE_OPENBSD_MALLOC, test "x$enable_openbsd_malloc" = "xyes")
2158 if test "$malloc" != "system"; then
2159 # Tell the C compiler not to use the system allocator functions.
2160 TOR_CHECK_CFLAGS([-fno-builtin-malloc -fno-builtin-realloc -fno-builtin-calloc -fno-builtin-free])
2162 if test "$using_custom_malloc" = "yes"; then
2163 # Tell the C compiler not to use the system allocator functions.
2164 TOR_CHECK_CFLAGS([-fno-builtin-malloc -fno-builtin-realloc -fno-builtin-calloc -fno-builtin-free])
2167 # By default, we're going to assume we don't have mlockall()
2168 # bionic and other platforms have various broken mlockall subsystems.
2169 # Some systems don't have a working mlockall, some aren't linkable,
2170 # and some have it but don't declare it.
2171 AC_CHECK_FUNCS(mlockall)
2172 AC_CHECK_DECLS([mlockall], , , [
2173 #ifdef HAVE_SYS_MMAN_H
2174 #include <sys/mman.h>
2177 # Allow user to specify an alternate syslog facility
2178 AC_ARG_WITH(syslog-facility,
2179 AS_HELP_STRING(--with-syslog-facility=LOG, [syslog facility to use (default=LOG_DAEMON)]),
2180 syslog_facility="$withval", syslog_facility="LOG_DAEMON")
2181 AC_DEFINE_UNQUOTED(LOGFACILITY,$syslog_facility,[name of the syslog facility])
2182 AC_SUBST(LOGFACILITY)
2184 # Check if we have getresuid and getresgid
2185 AC_CHECK_FUNCS(getresuid getresgid)
2187 # Check for gethostbyname_r in all its glorious incompatible versions.
2188 # (This logic is based on that in Python's configure.in)
2189 AH_TEMPLATE(HAVE_GETHOSTBYNAME_R,
2190 [Define this if you have any gethostbyname_r()])
2192 AC_CHECK_FUNC(gethostbyname_r, [
2193 AC_MSG_CHECKING([how many arguments gethostbyname_r() wants])
2195 CFLAGS="$CFLAGS $MY_CPPFLAGS $MY_THREAD_CPPFLAGS $MY_CFLAGS"
2196 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
2200 struct hostent *h1, *h2;
2202 (void)gethostbyname_r(cp1,h1,cp2,i1,&h2,&i2);
2204 AC_DEFINE(HAVE_GETHOSTBYNAME_R)
2205 AC_DEFINE(HAVE_GETHOSTBYNAME_R_6_ARG, 1,
2206 [Define this if gethostbyname_r takes 6 arguments])
2209 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
2215 (void)gethostbyname_r(cp1,h1,cp2,i1,&i2);
2217 AC_DEFINE(HAVE_GETHOSTBYNAME_R)
2218 AC_DEFINE(HAVE_GETHOSTBYNAME_R_5_ARG, 1,
2219 [Define this if gethostbyname_r takes 5 arguments])
2222 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
2227 struct hostent_data hd;
2228 (void) gethostbyname_r(cp1,h1,&hd);
2230 AC_DEFINE(HAVE_GETHOSTBYNAME_R)
2231 AC_DEFINE(HAVE_GETHOSTBYNAME_R_3_ARG, 1,
2232 [Define this if gethostbyname_r takes 3 arguments])
2242 AC_CACHE_CHECK([whether the C compiler supports __func__],
2243 tor_cv_have_func_macro,
2244 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
2246 int main(int c, char **v) { puts(__func__); }])],
2247 tor_cv_have_func_macro=yes,
2248 tor_cv_have_func_macro=no))
2250 AC_CACHE_CHECK([whether the C compiler supports __FUNC__],
2251 tor_cv_have_FUNC_macro,
2252 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
2254 int main(int c, char **v) { puts(__FUNC__); }])],
2255 tor_cv_have_FUNC_macro=yes,
2256 tor_cv_have_FUNC_macro=no))
2258 AC_CACHE_CHECK([whether the C compiler supports __FUNCTION__],
2259 tor_cv_have_FUNCTION_macro,
2260 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
2262 int main(int c, char **v) { puts(__FUNCTION__); }])],
2263 tor_cv_have_FUNCTION_macro=yes,
2264 tor_cv_have_FUNCTION_macro=no))
2266 AC_CACHE_CHECK([whether we have extern char **environ already declared],
2267 tor_cv_have_environ_declared,
2268 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
2269 #ifdef HAVE_UNISTD_H
2273 int main(int c, char **v) { char **t = environ; }])],
2274 tor_cv_have_environ_declared=yes,
2275 tor_cv_have_environ_declared=no))
2277 if test "$tor_cv_have_func_macro" = "yes"; then
2278 AC_DEFINE(HAVE_MACRO__func__, 1, [Defined if the compiler supports __func__])
2281 if test "$tor_cv_have_FUNC_macro" = "yes"; then
2282 AC_DEFINE(HAVE_MACRO__FUNC__, 1, [Defined if the compiler supports __FUNC__])
2285 if test "$tor_cv_have_FUNCTION_macro" = "yes"; then
2286 AC_DEFINE(HAVE_MACRO__FUNCTION__, 1,
2287 [Defined if the compiler supports __FUNCTION__])
2290 if test "$tor_cv_have_environ_declared" = "yes"; then
2291 AC_DEFINE(HAVE_EXTERN_ENVIRON_DECLARED, 1,
2292 [Defined if we have extern char **environ already declared])
2295 # $prefix stores the value of the --prefix command line option, or
2296 # NONE if the option wasn't set. In the case that it wasn't set, make
2297 # it be the default, so that we can use it to expand directories now.
2298 if test "x$prefix" = "xNONE"; then
2299 prefix=$ac_default_prefix
2302 # and similarly for $exec_prefix
2303 if test "x$exec_prefix" = "xNONE"; then
2307 if test "x$BUILDDIR" = "x"; then
2311 AH_TEMPLATE([BUILDDIR],[tor's build directory])
2312 AC_DEFINE_UNQUOTED(BUILDDIR,"$BUILDDIR")
2314 if test "x$SRCDIR" = "x"; then
2315 SRCDIR=$(cd "$srcdir"; pwd)
2317 AH_TEMPLATE([SRCDIR],[tor's sourcedir directory])
2318 AC_DEFINE_UNQUOTED(SRCDIR,"$SRCDIR")
2320 if test "x$CONFDIR" = "x"; then
2321 CONFDIR=`eval echo $sysconfdir/tor`
2324 AH_TEMPLATE([CONFDIR],[tor's configuration directory])
2325 AC_DEFINE_UNQUOTED(CONFDIR,"$CONFDIR")
2327 BINDIR=`eval echo $bindir`
2329 LOCALSTATEDIR=`eval echo $localstatedir`
2330 AC_SUBST(LOCALSTATEDIR)
2332 if test "$bwin32" = "true"; then
2333 # Test if the linker supports the --nxcompat and --dynamicbase options
2335 save_LDFLAGS="$LDFLAGS"
2336 LDFLAGS="-Wl,--nxcompat -Wl,--dynamicbase"
2337 AC_MSG_CHECKING([whether the linker supports DllCharacteristics])
2338 AC_LINK_IFELSE([AC_LANG_PROGRAM([])],
2339 [AC_MSG_RESULT([yes])]
2340 [save_LDFLAGS="$save_LDFLAGS $LDFLAGS"],
2341 [AC_MSG_RESULT([no])]
2343 LDFLAGS="$save_LDFLAGS"
2346 # Set CFLAGS _after_ all the above checks, since our warnings are stricter
2347 # than autoconf's macros like.
2348 if test "$GCC" = "yes"; then
2349 # Disable GCC's strict aliasing checks. They are an hours-to-debug
2350 # accident waiting to happen.
2351 CFLAGS="$CFLAGS -Wall -fno-strict-aliasing"
2353 # Override optimization level for non-gcc compilers
2355 enable_gcc_warnings=no
2356 enable_gcc_warnings_advisory=no
2359 # Warnings implies advisory-warnings and -Werror.
2360 if test "$enable_gcc_warnings" = "yes"; then
2361 enable_gcc_warnings_advisory=yes
2362 enable_fatal_warnings=yes
2365 # OS X Lion started deprecating the system openssl. Let's just disable
2366 # all deprecation warnings on OS X. Also, to potentially make the binary
2367 # a little smaller, let's enable dead_strip.
2371 CFLAGS="$CFLAGS -Wno-deprecated-declarations"
2372 LDFLAGS="$LDFLAGS -dead_strip" ;;
2375 TOR_WARNING_FLAGS=""
2377 # Add some more warnings which we use in development but not in the
2378 # released versions. (Some relevant gcc versions can't handle these.)
2380 # Note that we have to do this near the end of the autoconf process, or
2381 # else we may run into problems when these warnings hit on the testing C
2382 # programs that autoconf wants to build.
2383 if test "x$enable_gcc_warnings_advisory" != "xno"; then
2386 *-*-openbsd* | *-*-bitrig*)
2387 # Some OpenBSD versions (like 4.8) have -Wsystem-headers by default.
2388 # That's fine, except that the headers don't pass -Wredundant-decls.
2389 # Therefore, let's disable -Wsystem-headers when we're building
2390 # with maximal warnings on OpenBSD.
2391 CFLAGS="$CFLAGS -Wno-system-headers" ;;
2394 CFLAGS_NOWARNINGS="$CFLAGS"
2396 # GCC4.3 users once report trouble with -Wstrict-overflow=5. GCC5 users
2397 # have it work better.
2398 # CFLAGS="$CFLAGS -Wstrict-overflow=1"
2400 # This warning was added in gcc 4.3, but it appears to generate
2401 # spurious warnings in gcc 4.4. I don't know if it works in 4.5.
2402 #CFLAGS="$CFLAGS -Wlogical-op"
2404 m4_foreach_w([warning_flag], [
2406 -Waddress-of-array-temporary
2407 -Waddress-of-temporary
2409 -Wanonymous-pack-parens
2412 -Warc-bridge-casts-disallowed-in-nonarc
2413 -Warc-maybe-repeated-use-of-weak
2414 -Warc-performSelector-leaks
2415 -Warc-repeated-use-of-weak
2417 -Warray-bounds-pointer-arithmetic
2419 -Wasm-operand-widths
2421 -Watomic-property-with-user-defined-accessor
2423 -Wauto-storage-class
2426 -Wbackslash-newline-escape
2427 -Wbad-array-new-length
2428 -Wbind-to-temporary-copy
2429 -Wbitfield-constant-conversion
2432 -Wbuiltin-requires-header
2434 -Wcompare-distinct-pointer-types
2435 -Wcomplex-component-init
2436 -Wconditional-type-mismatch
2438 -Wconstant-conversion
2439 -Wconstant-logical-operand
2440 -Wconstexpr-not-const
2441 -Wcustom-atomic-properties
2443 -Wdangling-initializer-list
2445 -Wdelegating-ctor-cycles
2446 -Wdeprecated-implementations
2447 -Wdeprecated-register
2448 -Wdirect-ivar-access
2450 -Wdistributed-object-modifiers
2452 -Wdollar-in-identifier-extension
2454 -Wduplicate-decl-specifier
2456 -Wduplicate-method-arg
2457 -Wduplicate-method-match
2459 -Wdynamic-class-memaccess
2460 -Wembedded-directive
2461 -Wempty-translation-unit
2463 -Wexit-time-destructors
2464 -Wexplicit-ownership-type
2465 -Wextern-initializer
2469 -Wflexible-array-extensions
2472 -Wfour-char-constants
2474 -Wglobal-constructors
2475 -Wgnu-array-member-paren-init
2477 -Wgnu-static-float-init
2480 -Widiomatic-parentheses
2481 -Wignored-attributes
2482 -Wimplicit-atomic-properties
2483 -Wimplicit-conversion-floating-point-to-bool
2484 -Wimplicit-exception-spec-mismatch
2485 -Wimplicit-fallthrough
2486 -Wimplicit-fallthrough-per-function
2487 -Wimplicit-retain-self
2488 -Wimport-preprocessor-directive-pedantic
2489 -Wincompatible-library-redeclaration
2490 -Wincompatible-pointer-types-discards-qualifiers
2491 -Wincomplete-implementation
2493 -Wincomplete-umbrella
2496 -Wint-to-void-pointer-cast
2502 -Winvalid-source-encoding
2503 -Winvalid-token-paste
2504 -Wknr-promoted-parameter
2505 -Wlarge-by-value-copy
2506 -Wliteral-conversion
2508 -Wlocal-type-template-args
2512 -Wmalformed-warning-check
2516 -Wmismatched-parameter-types
2517 -Wmismatched-return-types
2518 -Wmissing-field-initializers
2519 -Wmissing-format-attribute
2521 -Wmissing-selector-name
2523 -Wmissing-variable-declarations
2527 -Wnon-literal-null-conversion
2529 -Wnonportable-cfstrings
2535 -Wout-of-line-declaration
2537 -Woverlength-strings
2539 -Woverriding-method-mismatch
2540 -Wpointer-type-mismatch
2541 -Wpredefined-identifier-outside-function
2542 -Wprotocol-property-synthesis-ambiguity
2543 -Wreadonly-iboutlet-property
2544 -Wreadonly-setter-attrs
2546 -Wreceiver-forward-class
2548 -Wreinterpret-base-class
2549 -Wrequires-super-attribute
2550 -Wreserved-user-defined-literal
2551 -Wreturn-stack-address
2553 -Wselector-type-mismatch
2555 -Wserialized-diagnostics
2557 -Wshift-count-negative
2558 -Wshift-count-overflow
2559 -Wshift-negative-value
2561 -Wshift-sign-overflow
2563 -Wsizeof-array-argument
2564 -Wsource-uses-openmp
2567 -Wstatic-local-in-inline
2571 -Wstrlcpy-strlcat-size
2573 -Wsuggest-attribute=format
2574 -Wsuggest-attribute=noreturn
2575 -Wsuper-class-method-mismatch
2578 -Wtautological-constant-out-of-range-compare
2579 -Wtentative-definition-incomplete-type
2582 -Wtypedef-redefinition
2585 -Wundefined-internal
2586 -Wundefined-reinterpret-cast
2588 -Wunicode-whitespace
2589 -Wunknown-warning-option
2590 -Wunnamed-type-template-args
2591 -Wunneeded-member-function
2593 -Wunsupported-visibility
2594 -Wunused-but-set-parameter
2595 -Wunused-but-set-variable
2596 -Wunused-command-line-argument
2597 -Wunused-const-variable=2
2598 -Wunused-exception-parameter
2599 -Wunused-local-typedefs
2600 -Wunused-member-function
2601 -Wunused-sanitize-argument
2602 -Wunused-volatile-lvalue
2603 -Wuser-defined-literals
2606 -Wvector-conversions
2611 ], [ TOR_TRY_COMPILE_WITH_CFLAGS(warning_flag, [],
2612 [TOR_WARNING_FLAGS="$TOR_WARNING_FLAGS warning_flag" CFLAGS="$CFLAGS warning_flag"], true)
2615 dnl We should re-enable this in some later version. Clang doesn't
2616 dnl mind, but it causes trouble with GCC.
2617 dnl -Wstrict-overflow=2
2619 dnl These seem to require annotations that we don't currently use,
2620 dnl and they give false positives in our pthreads wrappers. (Clang 4)
2622 dnl -Wthread-safety-analysis
2623 dnl -Wthread-safety-attributes
2624 dnl -Wthread-safety-beta
2625 dnl -Wthread-safety-precise
2627 W_FLAGS="$W_FLAGS -W -Wfloat-equal -Wundef -Wpointer-arith"
2628 W_FLAGS="$W_FLAGS -Wstrict-prototypes -Wmissing-prototypes -Wwrite-strings"
2629 W_FLAGS="$W_FLAGS -Wredundant-decls -Wchar-subscripts -Wcomment -Wformat=2"
2630 W_FLAGS="$W_FLAGS -Wwrite-strings"
2631 W_FLAGS="$W_FLAGS -Wnested-externs -Wbad-function-cast -Wswitch-enum"
2632 W_FLAGS="$W_FLAGS -Waggregate-return -Wpacked -Wunused"
2633 W_FLAGS="$W_FLAGS -Wunused-parameter "
2634 # These interfere with building main() { return 0; }, which autoconf
2635 # likes to use as its default program.
2636 W_FLAGS="$W_FLAGS -Wold-style-definition -Wmissing-declarations"
2638 TOR_WARNING_FLAGS="$TOR_WARNING_FLAGS $W_FLAGS"
2639 CFLAGS="$CFLAGS $W_FLAGS"
2641 if test "$tor_cv_cflags__Wnull_dereference" = "yes"; then
2642 AC_DEFINE([HAVE_CFLAG_WNULL_DEREFERENCE], 1, [True if we have -Wnull-dereference])
2644 if test "$tor_cv_cflags__Woverlength_strings" = "yes"; then
2645 AC_DEFINE([HAVE_CFLAG_WOVERLENGTH_STRINGS], 1, [True if we have -Woverlength-strings])
2647 if test "$tor_cv_cflags__warn_unused_const_variable_2" = "yes"; then
2648 AC_DEFINE([HAVE_CFLAG_WUNUSED_CONST_VARIABLE], 1, [True if we have -Wunused-const-variable])
2651 CFLAGS="$CFLAGS_NOWARNINGS"
2653 if test "x$enable_fatal_warnings" = "xyes"; then
2654 # I'd like to use TOR_CHECK_CFLAGS here, but I can't, since the
2655 # default autoconf programs are full of errors.
2656 CFLAGS="$CFLAGS -Werror"
2661 AC_SUBST(TOR_WARNING_FLAGS)
2663 echo "$TOR_WARNING_FLAGS">warning_flags
2665 TOR_TRY_COMPILE_WITH_CFLAGS([@warning_flags], [],
2666 CFLAGS="$CFLAGS @warning_flags",
2667 CFLAGS="$CFLAGS $TOR_WARNING_FLAGS")
2669 if test "$enable_coverage" = "yes" && test "$have_clang" = "no"; then
2673 AC_MSG_WARN([Tried to enable coverage on OSX without using the clang compiler. This might not work! If coverage fails, use CC=clang when configuring with --enable-coverage.])
2677 CPPFLAGS="$CPPFLAGS $TOR_CPPFLAGS_libevent $TOR_CPPFLAGS_openssl $TOR_CPPFLAGS_zlib"
2683 contrib/operator-tools/tor.logrotate
2684 src/config/torrc.sample
2685 src/config/torrc.minimal
2686 src/rust/.cargo/config
2687 scripts/maint/checkOptionDocs.pl
2691 if test "x$asciidoc" = "xtrue" && test "$ASCIIDOC" = "none"; then
2692 regular_mans="doc/man/tor doc/man/tor-gencert doc/man/tor-resolve doc/man/torify"
2693 for file in $regular_mans ; do
2694 if ! [[ -f "$srcdir/$file.1.in" ]] || ! [[ -f "$srcdir/$file.html.in" ]] ; then
2695 echo "==================================";
2697 echo "Building Tor has failed since manpages cannot be built.";
2699 echo "You need asciidoc installed to be able to build the manpages.";
2700 echo "To build without manpages, use the --disable-asciidoc argument";
2701 echo "when calling configure.";
2703 echo "==================================";
2709 if test "$fragile_hardening" = "yes"; then
2714 Warning! Building Tor with --enable-fragile-hardening (also known as
2715 --enable-expensive-hardening) makes some kinds of attacks harder, but makes
2716 other kinds of attacks easier. A Tor instance build with this option will be
2717 somewhat less vulnerable to remote code execution, arithmetic overflow, or
2718 out-of-bounds read/writes... but at the cost of becoming more vulnerable to
2719 denial of service attacks. For more information, see
2720 https://gitlab.torproject.org/tpo/core/team/-/wikis/TorFragileHardening
2727 if test "$openssl_ver_mismatch" = "yes"; then
2731 Warning! The version OpenSSL headers we get from compiling with
2732 "${TOR_CPPFLAGS_OPENSSL:-(no extra options)}"
2733 do not match version of the OpenSSL library we get when linking with
2734 "$TOR_LDFLAGS_OPENSSL $TOR_OPENSSL_LIBS".
2735 This might cause compilation to fail. Try using --with-openssl-dir to specify
2736 the exact OpenSSL path you want.
2742 # Mini-report on what will be built.
2746 PPRINT_SET_INDENT(1)
2750 AS_ECHO("Tor Version: ${PPRINT_COLOR_BLDBLU}Tor $PACKAGE_VERSION $PPRINT_COLOR_RST")
2753 PPRINT_SUBTITLE([Build Features])
2755 PPRINT_PROP_STRING([Compiler], [$CC])
2756 PPRINT_PROP_STRING([Host OS], [$host_os])
2759 test "x$enable_fatal_warnings" = "xyes" && value=1 || value=0
2760 PPRINT_PROP_BOOL([Warnings are fatal (--enable-fatal-warnings)], $value)
2762 test "x$enable_rust" = "xyes" && value=1 || value=0
2763 PPRINT_PROP_BOOL([Rust support (--enable-rust)], $value)
2765 test "x$enable_cargo_online_mode" = "xyes" && value=1 || value=0
2766 PPRINT_PROP_BOOL([Cargo Online Fetch (--enable-cargo-online-mode)], $value)
2768 test "x$enable_android" = "xyes" && value=1 || value=0
2769 PPRINT_PROP_BOOL([Android support (--enable-android)], $value)
2772 PPRINT_SUBTITLE([Static Build])
2774 test "x$enable_static_tor" = "xyes" && value=1 || value=0
2775 PPRINT_PROP_BOOL([tor (--enable-static-tor)], $value)
2777 if test "x$enable_static_libevent" = "xyes"; then
2778 PPRINT_PROP_STRING([libevent], [$TOR_LIBDIR_libevent])
2780 PPRINT_PROP_BOOL([libevent (--enable-static-libevent)], $value)
2783 if test "x$enable_static_openssl" = "xyes"; then
2784 PPRINT_PROP_STRING([libssl], [$TOR_LIBDIR_openssl])
2786 PPRINT_PROP_BOOL([libssl (--enable-static-openssl)], $value)
2789 if test "x$enable_static_zlib" = "xyes"; then
2790 PPRINT_PROP_STRING([zlib1g], [$TOR_LIBDIR_zlib])
2792 PPRINT_PROP_BOOL([zlib1g (--enable-static-zlib)], $value)
2796 PPRINT_SUBTITLE([Optional Libraries])
2798 test "x$enable_nss" = "xyes" && value=1 || value=0
2799 PPRINT_PROP_BOOL([libnss (--enable-nss)], $value)
2801 test "x$enable_seccomp" != "xno" && value=1 || value=0
2802 PPRINT_PROP_BOOL([libseccomp (--disable-seccomp)], $value)
2804 test "x$enable_libscrypt" != "xno" && value=1 || value=0
2805 PPRINT_PROP_BOOL([libscrypt (--disable-libscrypt)], $value)
2807 test "x$enable_systemd" = "xyes" && value=1 || value=0
2808 PPRINT_PROP_BOOL([Systemd support (--enable-systemd)], $value)
2810 test "x$enable_lzma" = "xyes" && value=1 || value=0
2811 PPRINT_PROP_BOOL([liblzma (--enable-lzma)], $value)
2813 test "x$enable_zstd" = "xyes" && value=1 || value=0
2814 PPRINT_PROP_BOOL([libzstd (--enable-zstd)], $value)
2817 PPRINT_SUBTITLE([Hardening])
2819 test "x$enable_gcc_hardening" != "xno" && value=1 || value=0
2820 PPRINT_PROP_BOOL([Compiler Hardening (--disable-gcc-hardening)], $value)
2822 test "x$enable_linker_hardening" != "xno" && value=1 || value=0
2823 PPRINT_PROP_BOOL([Linker Hardening (--disable-linker-hardening)], $value)
2825 test "x$fragile_hardening" = "xyes" && value=1 || value=0
2826 PPRINT_PROP_BOOL([Fragile Hardening (--enable-fragile-hardening, dev only)], $value)
2829 PPRINT_SUBTITLE([Modules])
2831 m4_foreach_w([mname], MODULES,
2833 AM_COND_IF(m4_join([], [BUILD_MODULE_], m4_toupper([]mname[])), value=1, value=0)
2834 m4_set_contains([MODULES_WITH_NO_OPTIONS], mname,
2835 PPRINT_PROP_BOOL([mname], $value),
2836 PPRINT_PROP_BOOL([mname (--disable-module-mname)], $value))
2841 PPRINT_SUBTITLE([Documentation])
2843 test "x$enable_asciidoc" != "xno" && value=1 || value=0
2844 PPRINT_PROP_BOOL([AsciiDoc (--disable-asciidoc)], $value)
2846 test "x$enable_manpage" != "xno" && value=1 || value=0
2847 PPRINT_PROP_BOOL([Man Pages (--disable-manpage)], $value)
2849 test "x$enable_html_manual" != "xno" && value=1 || value=0
2850 PPRINT_PROP_BOOL([HTML Manual (--disable-html-manual)], $value)
2853 PPRINT_SUBTITLE([Tests])
2855 test "x$enable_unittests" != "xno" && value=1 || value=0
2856 PPRINT_PROP_BOOL([Unit tests (--disable-unittests)], $value)
2858 test "x$enable_asserts_in_tests" = "xno" && value=1 || value=0
2859 PPRINT_PROP_BOOL([assert()s enabled (--enable-asserts-in-tests, dev only)], $value)
2861 test "x$enable_coverage" = "xyes" && value=1 || value=0
2862 PPRINT_PROP_BOOL([Code Coverage (--enable-coverage)], $value)
2864 test "x$enable_libfuzzer" = "xyes" && value=1 || value=0
2865 PPRINT_PROP_BOOL([libFuzzer support (--enable-libfuzzer)], $value)
2867 test "x$enable_oss_fuzz" = "xyes" && value=1 || value=0
2868 PPRINT_PROP_BOOL([OSS-Fuzz support (--enable-oss-fuzz)], $value)
2871 PPRINT_SUBTITLE([Tracing (--enable-tracing-instrumentation-<type>)])
2873 test "x$enable_tracing_instrumentation_log_debug" = "xyes" && value=1 || value=0
2874 PPRINT_PROP_BOOL([Tracepoints to log_debug() (log-debug)], $value)
2876 test "x$enable_tracing_instrumentation_usdt" = "xyes" && value=1 || value=0
2877 PPRINT_PROP_BOOL([USDT Instrumentation (usdt)], $value)
2879 test "x$enable_tracing_instrumentation_lttng" = "xyes" && value=1 || value=0
2880 PPRINT_PROP_BOOL([LTTng Instrumentation (lttng)], $value)
2883 PPRINT_SUBTITLE([Install Directories])
2885 report_mandir="`eval eval echo $mandir`"
2886 PPRINT_PROP_STRING([Binaries], [$BINDIR])
2887 PPRINT_PROP_STRING([Configuration], [$CONFDIR])
2888 PPRINT_PROP_STRING([Man Pages], [$report_mandir])
2891 AS_ECHO(["Configure Line: ./configure $configure_flags"])
2893 if test "$tor_ac_n_warnings" != "0"; then
2896 Encountered $tor_ac_n_warnings warning(s). See messages above for more info.