1 dnl Copyright (c) 2001-2004, Roger Dingledine
2 dnl Copyright (c) 2004-2006, Roger Dingledine, Nick Mathewson
3 dnl Copyright (c) 2007-2013, The Tor Project, Inc.
4 dnl See LICENSE for licensing information
6 AC_INIT([tor],[0.2.5.8-rc])
7 AC_CONFIG_SRCDIR([src/or/main.c])
8 AC_CONFIG_MACRO_DIR([m4])
10 m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])])
11 AC_CONFIG_HEADERS([orconfig.h])
15 if test -f /etc/redhat-release ; then
16 if test -f /usr/kerberos/include ; then
17 CPPFLAGS="$CPPFLAGS -I/usr/kerberos/include"
21 # Not a no-op; we want to make sure that CPPFLAGS is set before we use
22 # the += operator on it in src/or/Makefile.am
23 CPPFLAGS="$CPPFLAGS -I\${top_srcdir}/src/common"
25 #XXXX020 We should make these enabled or not, before 0.2.0.x-final
26 AC_ARG_ENABLE(buf-freelists,
27 AS_HELP_STRING(--enable-buf-freelists, enable freelists for buffer RAM))
28 AC_ARG_ENABLE(mempools,
29 AS_HELP_STRING(--enable-mempools, enable mempools for relay cells))
30 AC_ARG_ENABLE(openbsd-malloc,
31 AS_HELP_STRING(--enable-openbsd-malloc, Use malloc code from openbsd. Linux only))
32 AC_ARG_ENABLE(instrument-downloads,
33 AS_HELP_STRING(--enable-instrument-downloads, Instrument downloads of directory resources etc.))
34 AC_ARG_ENABLE(static-openssl,
35 AS_HELP_STRING(--enable-static-openssl, Link against a static openssl library. Requires --with-openssl-dir))
36 AC_ARG_ENABLE(static-libevent,
37 AS_HELP_STRING(--enable-static-libevent, Link against a static libevent library. Requires --with-libevent-dir))
38 AC_ARG_ENABLE(static-zlib,
39 AS_HELP_STRING(--enable-static-zlib, Link against a static zlib library. Requires --with-zlib-dir))
40 AC_ARG_ENABLE(static-tor,
41 AS_HELP_STRING(--enable-static-tor, Create an entirely static Tor binary. Requires --with-openssl-dir and --with-libevent-dir and --with-zlib-dir))
42 AC_ARG_ENABLE(curve25519,
43 AS_HELP_STRING(--disable-curve25519, Build Tor with no curve25519 elliptic-curve crypto support))
44 AC_ARG_ENABLE(unittests,
45 AS_HELP_STRING(--disable-unittests, [Don't build unit tests for Tor. Risky!]))
46 AC_ARG_ENABLE(coverage,
47 AS_HELP_STRING(--enable-coverage, [Enable coverage support in the unit-test build]))
49 AM_CONDITIONAL(UNITTESTS_ENABLED, test x$enable_unittests != xno)
50 AM_CONDITIONAL(COVERAGE_ENABLED, test x$enable_coverage = xyes)
52 if test "$enable_static_tor" = "yes"; then
53 enable_static_libevent="yes";
54 enable_static_openssl="yes";
55 enable_static_zlib="yes";
56 CFLAGS="$CFLAGS -static"
59 if test x$enable_buf_freelists = xyes; then
60 AC_DEFINE(ENABLE_BUF_FREELISTS, 1,
61 [Defined if we try to use freelists for buffer RAM chunks])
64 AM_CONDITIONAL(USE_MEMPOOLS, test x$enable_mempools = xyes)
65 if test x$enable_mempools = xyes; then
66 AC_DEFINE(ENABLE_MEMPOOLS, 1,
67 [Defined if we try to use mempools for cells being relayed])
70 AM_CONDITIONAL(USE_OPENBSD_MALLOC, test x$enable_openbsd_malloc = xyes)
71 if test x$enable_instrument_downloads = xyes; then
72 AC_DEFINE(INSTRUMENT_DOWNLOADS, 1,
73 [Defined if we want to keep track of how much of each kind of resource we download.])
76 AC_ARG_ENABLE(transparent,
77 AS_HELP_STRING(--disable-transparent, disable transparent proxy support),
78 [case "${enableval}" in
79 yes) transparent=true ;;
80 no) transparent=false ;;
81 *) AC_MSG_ERROR(bad value for --enable-transparent) ;;
82 esac], [transparent=true])
84 AC_ARG_ENABLE(asciidoc,
85 AS_HELP_STRING(--disable-asciidoc, don't use asciidoc (disables building of manpages)),
86 [case "${enableval}" in
89 *) AC_MSG_ERROR(bad value for --disable-asciidoc) ;;
90 esac], [asciidoc=true])
92 # By default, we're not ready to ship a NAT-PMP aware Tor
93 AC_ARG_ENABLE(nat-pmp,
94 AS_HELP_STRING(--enable-nat-pmp, enable NAT-PMP support),
95 [case "${enableval}" in
98 * ) AC_MSG_ERROR(bad value for --enable-nat-pmp) ;;
99 esac], [natpmp=false])
101 # By default, we're not ready to ship a UPnP aware Tor
103 AS_HELP_STRING(--enable-upnp, enable UPnP support),
104 [case "${enableval}" in
107 * ) AC_MSG_ERROR(bad value for --enable-upnp) ;;
111 AC_ARG_ENABLE(threads,
112 AS_HELP_STRING(--disable-threads, disable multi-threading support))
114 if test x$enable_threads = x; then
117 # Don't try multithreading on solaris -- cpuworkers seem to lock.
118 AC_MSG_NOTICE([You are running Solaris; Sometimes threading makes
119 cpu workers lock up here, so I will disable threads.])
120 enable_threads="no";;
122 enable_threads="yes";;
126 if test "$enable_threads" = "yes"; then
127 AC_DEFINE(ENABLE_THREADS, 1, [Defined if we will try to use multithreading])
132 AC_DEFINE(_REENTRANT, 1, [Define on some platforms to activate x_r() functions in time.h])
136 AC_ARG_ENABLE(gcc-warnings,
137 AS_HELP_STRING(--enable-gcc-warnings, enable verbose warnings))
138 AC_ARG_ENABLE(gcc-warnings-advisory,
139 AS_HELP_STRING(--enable-gcc-warnings-advisory, [enable verbose warnings, excluding -Werror]))
141 dnl Others suggest '/gs /safeseh /nxcompat /dynamicbase' for non-gcc on Windows
142 AC_ARG_ENABLE(gcc-hardening,
143 AS_HELP_STRING(--disable-gcc-hardening, disable compiler security checks))
145 AC_ARG_ENABLE(expensive-hardening,
146 AS_HELP_STRING(--enable-expensive-hardening, enable more expensive compiler hardening; makes Tor slower))
148 dnl Linker hardening options
149 dnl Currently these options are ELF specific - you can't use this with MacOSX
150 AC_ARG_ENABLE(linker-hardening,
151 AS_HELP_STRING(--disable-linker-hardening, disable linker security fixups))
153 AC_ARG_ENABLE(local-appdata,
154 AS_HELP_STRING(--enable-local-appdata, default to host local application data paths on Windows))
155 if test "$enable_local_appdata" = "yes"; then
156 AC_DEFINE(ENABLE_LOCAL_APPDATA, 1,
157 [Defined if we default to host local appdata paths on Windows])
161 AC_ARG_ENABLE(tor2web-mode,
162 AS_HELP_STRING(--enable-tor2web-mode, support tor2web non-anonymous mode),
163 [if test x$enableval = xyes; then
164 CFLAGS="$CFLAGS -D ENABLE_TOR2WEB_MODE=1"
167 AC_ARG_ENABLE(bufferevents,
168 AS_HELP_STRING(--enable-bufferevents, use Libevent's buffered IO.))
170 AC_ARG_ENABLE(tool-name-check,
171 AS_HELP_STRING(--disable-tool-name-check, check for sanely named toolchain when cross-compiling))
173 AC_ARG_ENABLE(seccomp,
174 AS_HELP_STRING(--disable-seccomp, do not attempt to use libseccomp))
176 dnl check for the correct "ar" when cross-compiling
177 AN_MAKEVAR([AR], [AC_PROG_AR])
178 AN_PROGRAM([ar], [AC_PROG_AR])
179 AC_DEFUN([AC_PROG_AR], [AC_CHECK_TOOL([AR], [ar], [ar])])
182 dnl Check whether the above macro has settled for a simply named tool even
183 dnl though we're cross compiling. We must do this before running AC_PROG_CC,
184 dnl because that will find any cc on the system, not only the cross-compiler,
185 dnl and then verify that a binary built with this compiler runs on the
186 dnl build system. It will then come to the false conclusion that we're not
188 if test x$enable_tool_name_check != xno; then
189 if test x$ac_tool_warned = xyes; then
190 AC_MSG_ERROR([We are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
191 elif test "x$ac_ct_AR" != x -a x$cross_compiling = xmaybe; then
192 AC_MSG_ERROR([We think we are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
201 dnl autoconf 2.59 appears not to support AC_PROG_SED
202 AC_CHECK_PROG([SED],[sed],[sed],[/bin/false])
204 dnl check for asciidoc and a2x
205 AC_PATH_PROG([ASCIIDOC], [asciidoc], none)
206 AC_PATH_PROGS([A2X], [a2x a2x.py], none)
208 AM_CONDITIONAL(USE_ASCIIDOC, test x$asciidoc = xtrue)
210 AM_CONDITIONAL(USE_FW_HELPER, test x$natpmp = xtrue || test x$upnp = xtrue)
211 AM_CONDITIONAL(NAT_PMP, test x$natpmp = xtrue)
212 AM_CONDITIONAL(MINIUPNPC, test x$upnp = xtrue)
216 AC_CHECK_PROGS(PYTHON, [python python2 python2.7 python3 python3.3])
217 if test "x$PYTHON" = "x"; then
218 AC_MSG_WARN([Python unavailable; some tests will not be run.])
220 AM_CONDITIONAL(USEPYTHON, [test "x$PYTHON" != "x"])
222 ifdef([AC_C_FLEXIBLE_ARRAY_MEMBER], [
223 AC_C_FLEXIBLE_ARRAY_MEMBER
225 dnl Maybe we've got an old autoconf...
226 AC_CACHE_CHECK([for flexible array members],
230 struct abc { int a; char b[]; };
232 struct abc *def = malloc(sizeof(struct abc)+sizeof(char));
235 [tor_cv_c_flexarray=yes],
236 [tor_cv_c_flexarray=no])])
237 if test $tor_cv_flexarray = yes ; then
238 AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
240 AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [1], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
244 AC_PATH_PROG([SHA1SUM], [sha1sum], none)
245 AC_PATH_PROG([OPENSSL], [openssl], none)
248 AC_ARG_WITH(tor-user,
249 [ --with-tor-user=NAME Specify username for tor daemon ],
257 AC_ARG_WITH(tor-group,
258 [ --with-tor-group=NAME Specify group name for tor daemon ],
266 dnl If _WIN32 is defined and non-zero, we are building for win32
267 AC_MSG_CHECKING([for win32])
268 AC_RUN_IFELSE([AC_LANG_SOURCE([
269 int main(int c, char **v) {
280 bwin32=true; AC_MSG_RESULT([yes]),
281 bwin32=false; AC_MSG_RESULT([no]),
282 bwin32=cross; AC_MSG_RESULT([cross])
285 if test "$bwin32" = cross; then
286 AC_MSG_CHECKING([for win32 (cross)])
287 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
289 int main(int c, char **v) {return 0;}
292 int main(int c, char **v) {return x(y);}
295 bwin32=true; AC_MSG_RESULT([yes]),
296 bwin32=false; AC_MSG_RESULT([no]))
299 AM_CONDITIONAL(BUILD_NT_SERVICES, test x$bwin32 = xtrue)
301 dnl Enable C99 when compiling with MIPSpro
302 AC_MSG_CHECKING([for MIPSpro compiler])
303 AC_COMPILE_IFELSE([AC_LANG_PROGRAM(, [
304 #if (defined(__sgi) && defined(_COMPILER_VERSION))
309 bmipspro=false; AC_MSG_RESULT(no),
310 bmipspro=true; AC_MSG_RESULT(yes))
312 if test "$bmipspro" = true; then
313 CFLAGS="$CFLAGS -c99"
318 AC_SEARCH_LIBS(socket, [socket network])
319 AC_SEARCH_LIBS(gethostbyname, [nsl])
320 AC_SEARCH_LIBS(dlopen, [dl])
321 AC_SEARCH_LIBS(inet_aton, [resolv])
323 AC_SEARCH_LIBS([clock_gettime], [rt])
324 if test "$LIBS" != "$saved_LIBS"; then
325 # Looks like we need -lrt for clock_gettime().
329 if test "$enable_threads" = "yes"; then
330 AC_SEARCH_LIBS(pthread_create, [pthread])
331 AC_SEARCH_LIBS(pthread_detach, [pthread])
334 dnl -------------------------------------------------------------------
335 dnl Check for functions before libevent, since libevent-1.2 apparently
336 dnl exports strlcpy without defining it in a header.
342 backtrace_symbols_fd \
375 if test "$enable_threads" = "yes"; then
376 AC_CHECK_HEADERS(pthread.h)
377 AC_CHECK_FUNCS(pthread_create)
380 dnl ------------------------------------------------------
381 dnl Where do you live, libevent? And how do we call you?
383 if test "$bwin32" = true; then
384 TOR_LIB_WS32=-lws2_32
385 TOR_LIB_IPHLPAPI=-liphlpapi
386 # Some of the cargo-cults recommend -lwsock32 as well, but I don't
387 # think it's actually necessary.
393 AC_SUBST(TOR_LIB_WS32)
394 AC_SUBST(TOR_LIB_GDI)
395 AC_SUBST(TOR_LIB_IPHLPAPI)
397 dnl We need to do this before we try our disgusting hack below.
398 AC_CHECK_HEADERS([sys/types.h])
400 dnl This is a disgusting hack so we safely include older libevent headers.
401 AC_CHECK_TYPE(u_int64_t, unsigned long long)
402 AC_CHECK_TYPE(u_int32_t, unsigned long)
403 AC_CHECK_TYPE(u_int16_t, unsigned short)
404 AC_CHECK_TYPE(u_int8_t, unsigned char)
406 tor_libevent_pkg_redhat="libevent"
407 tor_libevent_pkg_debian="libevent-dev"
408 tor_libevent_devpkg_redhat="libevent-devel"
409 tor_libevent_devpkg_debian="libevent-dev"
411 dnl On Gnu/Linux or any place we require it, we'll add librt to the Libevent
412 dnl linking for static builds.
413 STATIC_LIBEVENT_FLAGS=""
414 if test "$enable_static_libevent" = "yes"; then
415 if test "$have_rt" = yes; then
416 STATIC_LIBEVENT_FLAGS=" -lrt "
420 TOR_SEARCH_LIBRARY(libevent, $trylibeventdir, [-levent $STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32], [
422 #include <winsock2.h>
425 #include <sys/time.h>
426 #include <sys/types.h>
427 #include <event.h>], [
429 #include <winsock2.h>
431 void exit(int); void *event_init(void);],
434 {WSADATA d; WSAStartup(0x101,&d); }
436 event_init(); exit(0);
437 ], [--with-libevent-dir], [/opt/libevent])
439 dnl Now check for particular libevent functions.
441 save_LDFLAGS="$LDFLAGS"
442 save_CPPFLAGS="$CPPFLAGS"
443 LIBS="-levent $STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32 $LIBS"
444 LDFLAGS="$TOR_LDFLAGS_libevent $LDFLAGS"
445 CPPFLAGS="$TOR_CPPFLAGS_libevent $CPPFLAGS"
446 AC_CHECK_FUNCS([event_get_version \
447 event_get_version_number \
449 event_set_log_callback \
450 evutil_secure_rng_set_urandom_device_file \
451 evutil_secure_rng_init \
452 event_base_loopexit])
453 AC_CHECK_MEMBERS([struct event.min_heap_idx], , ,
457 AC_CHECK_HEADERS(event2/event.h event2/dns.h event2/bufferevent_ssl.h)
460 LDFLAGS="$save_LDFLAGS"
461 CPPFLAGS="$save_CPPFLAGS"
464 AM_CONDITIONAL(USE_EXTERNAL_EVDNS, test x$ac_cv_header_event2_dns_h = xyes)
466 if test "$enable_static_libevent" = "yes"; then
467 if test "$tor_cv_library_libevent_dir" = "(system)"; then
468 AC_MSG_ERROR("You must specify an explicit --with-libevent-dir=x option when using --enable-static-libevent")
470 TOR_LIBEVENT_LIBS="$TOR_LIBDIR_libevent/libevent.a $STATIC_LIBEVENT_FLAGS"
473 TOR_LIBEVENT_LIBS="-levent"
476 dnl This isn't the best test for Libevent 2.0.3-alpha. Once it's released,
477 dnl we can do much better.
478 if test "$enable_bufferevents" = "yes" ; then
479 if test "$ac_cv_header_event2_bufferevent_ssl_h" != "yes" ; then
480 AC_MSG_ERROR([You've asked for bufferevent support, but you're using a version of Libevent without SSL support. This won't work. We need Libevent 2.0.8-rc or later, and you don't seem to even have Libevent 2.0.3-alpha.])
483 CPPFLAGS="$CPPFLAGS $TOR_CPPFLAGS_libevent"
485 # Check for the right version. First see if version detection works.
486 AC_MSG_CHECKING([whether we can detect the Libevent version])
487 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
488 #include <event2/event.h>
489 #if !defined(LIBEVENT_VERSION_NUMBER) || LIBEVENT_VERSION_NUMBER < 10
495 ])], [event_version_number_works=yes; AC_MSG_RESULT([yes]) ],
496 [event_version_number_works=no; AC_MSG_RESULT([no])])
497 if test "$event_version_number_works" != 'yes'; then
498 AC_MSG_WARN([Version detection on Libevent seems broken. Your Libevent installation is probably screwed up or very old.])
500 AC_MSG_CHECKING([whether Libevent is new enough for bufferevents])
501 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
502 #include <event2/event.h>
503 #if !defined(LIBEVENT_VERSION_NUMBER) || LIBEVENT_VERSION_NUMBER < 0x02000d00
509 ])], [ AC_MSG_RESULT([yes]) ],
510 [ AC_MSG_RESULT([no])
511 AC_MSG_ERROR([Libevent does not seem new enough to support bufferevents. We require 2.0.13-stable or later]) ] )
517 LDFLAGS="$save_LDFLAGS"
518 CPPFLAGS="$save_CPPFLAGS"
520 AM_CONDITIONAL(USE_BUFFEREVENTS, test "$enable_bufferevents" = "yes")
521 if test "$enable_bufferevents" = "yes"; then
522 AC_DEFINE(USE_BUFFEREVENTS, 1, [Defined if we're going to use Libevent's buffered IO API])
523 if test "$enable_static_libevent" = "yes"; then
524 TOR_LIBEVENT_LIBS="$TOR_LIBDIR_libevent/libevent_openssl.a $TOR_LIBEVENT_LIBS"
526 TOR_LIBEVENT_LIBS="-levent_openssl $TOR_LIBEVENT_LIBS"
529 AC_SUBST(TOR_LIBEVENT_LIBS)
531 dnl ------------------------------------------------------
532 dnl Where do you live, libm?
534 dnl On some platforms (Haiku/BeOS) the math library is
535 dnl part of libroot. In which case don't link against lm
538 AC_SEARCH_LIBS(pow, [m], , AC_MSG_ERROR([Could not find pow in libm or libc.]))
539 if test "$ac_cv_search_pow" != "none required"; then
540 TOR_LIB_MATH="$ac_cv_search_pow"
543 AC_SUBST(TOR_LIB_MATH)
545 dnl ------------------------------------------------------
546 dnl Where do you live, openssl? And how do we call you?
548 tor_openssl_pkg_redhat="openssl"
549 tor_openssl_pkg_debian="libssl-dev"
550 tor_openssl_devpkg_redhat="openssl-devel"
551 tor_openssl_devpkg_debian="libssl-dev"
553 ALT_openssl_WITHVAL=""
555 [ --with-ssl-dir=PATH Obsolete alias for --with-openssl-dir ],
557 if test "x$withval" != xno && test "x$withval" != "x" ; then
558 ALT_openssl_WITHVAL="$withval"
562 TOR_SEARCH_LIBRARY(openssl, $tryssldir, [-lssl -lcrypto $TOR_LIB_GDI],
563 [#include <openssl/rand.h>],
564 [void RAND_add(const void *buf, int num, double entropy);],
565 [RAND_add((void*)0,0,0); exit(0);], [],
566 [/usr/local/openssl /usr/lib/openssl /usr/local/ssl /usr/lib/ssl /usr/local /usr/athena /opt/openssl])
568 dnl XXXX check for OPENSSL_VERSION_NUMBER == SSLeay()
570 if test "$enable_static_openssl" = "yes"; then
571 if test "$tor_cv_library_openssl_dir" = "(system)"; then
572 AC_MSG_ERROR("You must specify an explicit --with-openssl-dir=x option when using --enable-static-openssl")
574 TOR_OPENSSL_LIBS="$TOR_LIBDIR_openssl/libssl.a $TOR_LIBDIR_openssl/libcrypto.a"
577 TOR_OPENSSL_LIBS="-lssl -lcrypto"
579 AC_SUBST(TOR_OPENSSL_LIBS)
581 AC_CHECK_MEMBERS([struct ssl_method_st.get_cipher_by_char], , ,
582 [#include <openssl/ssl.h>
585 dnl ------------------------------------------------------
586 dnl Where do you live, zlib? And how do we call you?
588 tor_zlib_pkg_redhat="zlib"
589 tor_zlib_pkg_debian="zlib1g"
590 tor_zlib_devpkg_redhat="zlib-devel"
591 tor_zlib_devpkg_debian="zlib1g-dev"
593 TOR_SEARCH_LIBRARY(zlib, $tryzlibdir, [-lz],
595 [const char * zlibVersion(void);],
596 [zlibVersion(); exit(0);], [--with-zlib-dir],
599 if test "$enable_static_zlib" = "yes"; then
600 if test "$tor_cv_library_zlib_dir" = "(system)"; then
601 AC_MSG_ERROR("You must specify an explicit --with-zlib-dir=x option when
602 using --enable-static-zlib")
604 TOR_ZLIB_LIBS="$TOR_LIBDIR_zlib/libz.a"
609 AC_SUBST(TOR_ZLIB_LIBS)
611 dnl ---------------------------------------------------------------------
612 dnl Now that we know about our major libraries, we can check for compiler
613 dnl and linker hardening options. We need to do this with the libraries known,
614 dnl since sometimes the linker will like an option but not be willing to
615 dnl use it with a build of a library.
617 all_ldflags_for_check="$TOR_LDFLAGS_zlib $TOR_LDFLAGS_openssl $TOR_LDFLAGS_libevent"
618 all_libs_for_check="$TOR_ZLIB_LIBS $TOR_LIB_MATH $TOR_LIBEVENT_LIBS $TOR_OPENSSL_LIBS $TOR_LIB_WS32 $TOR_LIB_GDI"
620 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
621 #if !defined(__clang__)
623 #endif])], have_clang=yes, have_clang=no)
625 if test x$enable_gcc_hardening != xno; then
626 CFLAGS="$CFLAGS -D_FORTIFY_SOURCE=2"
627 if test x$have_clang = xyes; then
628 TOR_CHECK_CFLAGS(-Qunused-arguments)
630 TOR_CHECK_CFLAGS(-fstack-protector-all, also_link)
631 AS_VAR_PUSHDEF([can_compile], [tor_cv_cflags_-fstack-protector-all])
632 AS_VAR_PUSHDEF([can_link], [tor_can_link_-fstack-protector-all])
633 AS_VAR_IF(can_compile, [yes],
634 AS_VAR_IF(can_link, [yes],
636 AC_MSG_ERROR([We tried to build with stack protection; it looks like your compiler supports it but your libc does not provide it. Are you missing libssp? (You can --disable-gcc-hardening to ignore this error.)]))
638 AS_VAR_POPDEF([can_link])
639 AS_VAR_POPDEF([can_compile])
640 TOR_CHECK_CFLAGS(-Wstack-protector)
641 TOR_CHECK_CFLAGS(-fwrapv)
642 TOR_CHECK_CFLAGS(--param ssp-buffer-size=1)
643 if test "$bwin32" = "false"; then
644 TOR_CHECK_CFLAGS(-fPIE)
645 TOR_CHECK_LDFLAGS(-pie, "$all_ldflags_for_check", "$all_libs_for_check")
649 if test x$enable_expensive_hardening = xyes ; then
650 TOR_CHECK_CFLAGS([-fsanitize=address])
651 TOR_CHECK_CFLAGS([-fsanitize=undefined])
652 TOR_CHECK_CFLAGS([-fno-omit-frame-pointer])
655 if test x$enable_linker_hardening != xno; then
656 TOR_CHECK_LDFLAGS(-z relro -z now, "$all_ldflags_for_check", "$all_libs_for_check")
659 # For backtrace support
660 TOR_CHECK_LDFLAGS(-rdynamic)
662 dnl ------------------------------------------------------
663 dnl Now see if we have a -fomit-frame-pointer compiler option.
665 saved_CFLAGS="$CFLAGS"
666 TOR_CHECK_CFLAGS(-fomit-frame-pointer)
667 F_OMIT_FRAME_POINTER=''
668 if test "$saved_CFLAGS" != "$CFLAGS"; then
669 if test x$enable_expensive_hardening != xyes ; then
670 F_OMIT_FRAME_POINTER='-fomit-frame-pointer'
673 CFLAGS="$saved_CFLAGS"
674 AC_SUBST(F_OMIT_FRAME_POINTER)
676 dnl ------------------------------------------------------
677 dnl If we are adding -fomit-frame-pointer (or if the compiler's doing it
678 dnl for us, as GCC 4.6 and later do at many optimization levels), then
679 dnl we should try to add -fasynchronous-unwind-tables so that our backtrace
681 TOR_CHECK_CFLAGS(-fasynchronous-unwind-tables)
683 dnl ------------------------------------------------------
684 dnl Where do you live, libnatpmp? And how do we call you?
685 dnl There are no packages for Debian or Redhat as of this patch
687 if test "$natpmp" = "true"; then
688 AC_DEFINE(NAT_PMP, 1, [Define to 1 if we are building with nat-pmp.])
689 TOR_SEARCH_LIBRARY(libnatpmp, $trylibnatpmpdir, [-lnatpmp $TOR_LIB_WS32 $TOR_LIB_IPHLPAPI],
690 [#include <natpmp.h>],
694 #include <natpmp.h>],
697 natpmpresp_t response;
698 r = initnatpmp(&natpmp, 0, 0);],
699 [printf("initnatpmp() returned %d (%s)\n", r, r?"FAILED":"SUCCESS");
701 [--with-libnatpmp-dir],
706 dnl ------------------------------------------------------
707 dnl Where do you live, libminiupnpc? And how do we call you?
708 dnl There are no packages for Debian or Redhat as of this patch
710 if test "$upnp" = "true"; then
711 AC_DEFINE(MINIUPNPC, 1, [Define to 1 if we are building with UPnP.])
713 dnl Before we call TOR_SEARCH_LIBRARY we'll do a quick compile test
714 dnl to see if we have miniupnpc-1.5 or -1.6
715 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([#include <miniupnpc/miniupnpc.h>],
716 [upnpDiscover(1, 0, 0, 0);exit(0);])],[miniupnpc15="true"],[miniupnpc15="false"])
718 if test "$miniupnpc15" = "true" ; then
719 AC_DEFINE([MINIUPNPC15],[1],[libminiupnpc version 1.5 found])
720 TOR_SEARCH_LIBRARY(libminiupnpc, $trylibminiupnpcdir, [-lminiupnpc $TOR_LIB_WS32 $TOR_LIB_IPHLPAPI],
721 [#include <miniupnpc/miniwget.h>
722 #include <miniupnpc/miniupnpc.h>
723 #include <miniupnpc/upnpcommands.h>],
724 [void upnpDiscover(int delay, const char * multicastif,
725 const char * minissdpdsock, int sameport);],
726 [upnpDiscover(1, 0, 0, 0); exit(0);],
727 [--with-libminiupnpc-dir],
730 TOR_SEARCH_LIBRARY(libminiupnpc, $trylibminiupnpcdir, [-lminiupnpc $TOR_LIB_WS32 $TOR_LIB_IPHLPAPI],
731 [#include <miniupnpc/miniwget.h>
732 #include <miniupnpc/miniupnpc.h>
733 #include <miniupnpc/upnpcommands.h>],
734 [void upnpDiscover(int delay, const char * multicastif,
735 const char * minissdpdsock, int sameport, int ipv6, int * error);],
736 [upnpDiscover(1, 0, 0, 0, 0, 0); exit(0);],
737 [--with-libminiupnpc-dir],
742 dnl ============================================================
743 dnl Check for libseccomp
745 if test "x$enable_seccomp" != "xno"; then
746 AC_CHECK_HEADERS([seccomp.h])
747 AC_SEARCH_LIBS(seccomp_init, [seccomp])
750 dnl ============================================================
751 dnl We need an implementation of curve25519.
753 dnl set these defaults.
755 build_curve25519_donna=no
756 build_curve25519_donna_c64=no
757 use_curve25519_donna=no
758 use_curve25519_nacl=no
761 if test x$enable_curve25519 != xno; then
763 dnl The best choice is using curve25519-donna-c64, but that requires
765 AC_CACHE_CHECK([whether we can use curve25519-donna-c64],
766 tor_cv_can_use_curve25519_donna_c64,
768 [AC_LANG_PROGRAM([dnl
770 typedef unsigned uint128_t __attribute__((mode(TI)));
771 int func(uint64_t a, uint64_t b) {
772 uint128_t c = ((uint128_t)a) * b;
773 int ok = ((uint64_t)(c>>96)) == 522859 &&
774 (((uint64_t)(c>>64))&0xffffffffL) == 3604448702L &&
775 (((uint64_t)(c>>32))&0xffffffffL) == 2351960064L &&
776 (((uint64_t)(c))&0xffffffffL) == 0;
780 int ok = func( ((uint64_t)2000000000) * 1000000000,
781 ((uint64_t)1234567890) << 24);
784 [tor_cv_can_use_curve25519_donna_c64=yes],
785 [tor_cv_can_use_curve25519_donna_c64=no],
787 [AC_LANG_PROGRAM([dnl
789 typedef unsigned uint128_t __attribute__((mode(TI)));
790 int func(uint64_t a, uint64_t b) {
791 uint128_t c = ((uint128_t)a) * b;
792 int ok = ((uint64_t)(c>>96)) == 522859 &&
793 (((uint64_t)(c>>64))&0xffffffffL) == 3604448702L &&
794 (((uint64_t)(c>>32))&0xffffffffL) == 2351960064L &&
795 (((uint64_t)(c))&0xffffffffL) == 0;
799 int ok = func( ((uint64_t)2000000000) * 1000000000,
800 ((uint64_t)1234567890) << 24);
803 [tor_cv_can_use_curve25519_donna_c64=cross],
804 [tor_cv_can_use_curve25519_donna_c64=no])])])
806 AC_CHECK_HEADERS([crypto_scalarmult_curve25519.h \
807 nacl/crypto_scalarmult_curve25519.h])
809 AC_CACHE_CHECK([for nacl compiled with a fast curve25519 implementation],
810 tor_cv_can_use_curve25519_nacl,
811 [tor_saved_LIBS="$LIBS"
814 [AC_LANG_PROGRAM([dnl
815 #ifdef HAVE_CRYPTO_SCALARMULT_CURVE25519_H
816 #include <crypto_scalarmult_curve25519.h>
817 #elif defined(HAVE_NACL_CRYPTO_SCALARMULT_CURVE25519_H)
818 #include <nacl/crypto_scalarmult_curve25519.h>
820 #ifdef crypto_scalarmult_curve25519_ref_BYTES
821 #error Hey, this is the reference implementation! That's not fast.
824 unsigned char *a, *b, *c; crypto_scalarmult_curve25519(a,b,c);
825 ])], [tor_cv_can_use_curve25519_nacl=yes],
826 [tor_cv_can_use_curve25519_nacl=no])
827 LIBS="$tor_saved_LIBS" ])
829 dnl Okay, now we need to figure out which one to actually use. Fall back
830 dnl to curve25519-donna.c
832 if test x$tor_cv_can_use_curve25519_donna_c64 != xno; then
833 build_curve25519_donna_c64=yes
834 use_curve25519_donna=yes
835 elif test x$tor_cv_can_use_curve25519_nacl = xyes; then
836 use_curve25519_nacl=yes
837 CURVE25519_LIBS=-lnacl
839 build_curve25519_donna=yes
840 use_curve25519_donna=yes
842 have_a_curve25519=yes
845 if test x$have_a_curve25519 = xyes; then
846 AC_DEFINE(CURVE25519_ENABLED, 1,
847 [Defined if we have a curve25519 implementation])
849 if test x$use_curve25519_donna = xyes; then
850 AC_DEFINE(USE_CURVE25519_DONNA, 1,
851 [Defined if we should use an internal curve25519_donna{,_c64} implementation])
853 if test x$use_curve25519_nacl = xyes; then
854 AC_DEFINE(USE_CURVE25519_NACL, 1,
855 [Defined if we should use a curve25519 from nacl])
857 AM_CONDITIONAL(BUILD_CURVE25519_DONNA, test x$build_curve25519_donna = xyes)
858 AM_CONDITIONAL(BUILD_CURVE25519_DONNA_C64, test x$build_curve25519_donna_c64 = xyes)
859 AM_CONDITIONAL(CURVE25519_ENABLED, test x$have_a_curve25519 = xyes)
860 AC_SUBST(CURVE25519_LIBS)
862 dnl Make sure to enable support for large off_t if available.
877 , , AC_MSG_WARN(Some headers were not found, compilation may fail. If compilation succeeds, please send your orconfig.h to the developers so we can fix this warning.))
879 dnl These headers are not essential
919 AC_CHECK_HEADERS(sys/param.h)
921 AC_CHECK_HEADERS(net/if.h, net_if_found=1, net_if_found=0,
922 [#ifdef HAVE_SYS_TYPES_H
923 #include <sys/types.h>
925 #ifdef HAVE_SYS_SOCKET_H
926 #include <sys/socket.h>
928 AC_CHECK_HEADERS(net/pfvar.h, net_pfvar_found=1, net_pfvar_found=0,
929 [#ifdef HAVE_SYS_TYPES_H
930 #include <sys/types.h>
932 #ifdef HAVE_SYS_SOCKET_H
933 #include <sys/socket.h>
938 AC_CHECK_HEADERS(linux/netfilter_ipv4.h,
939 linux_netfilter_ipv4=1, linux_netfilter_ipv4=0,
940 [#ifdef HAVE_SYS_TYPES_H
941 #include <sys/types.h>
943 #ifdef HAVE_SYS_SOCKET_H
944 #include <sys/socket.h>
949 #ifdef HAVE_LINUX_TYPES_H
950 #include <linux/types.h>
952 #ifdef HAVE_NETINET_IN6_H
953 #include <netinet/in6.h>
955 #ifdef HAVE_NETINET_IN_H
956 #include <netinet/in.h>
959 if test x$transparent = xtrue ; then
961 if test x$net_if_found = x1 && test x$net_pfvar_found = x1 ; then
964 if test x$linux_netfilter_ipv4 = x1 ; then
967 if test x$transparent_ok = x1 ; then
968 AC_DEFINE(USE_TRANSPARENT, 1, "Define to enable transparent proxy support")
970 *-*-openbsd* | *-*-bitrig*)
971 AC_DEFINE(OPENBSD, 1, "Define to handle pf on OpenBSD properly") ;;
974 AC_MSG_NOTICE([Transparent proxy support enabled, but missing headers.])
978 AC_CHECK_MEMBERS([struct timeval.tv_sec], , ,
979 [#ifdef HAVE_SYS_TYPES_H
980 #include <sys/types.h>
982 #ifdef HAVE_SYS_TIME_H
983 #include <sys/time.h>
986 dnl In case we aren't given a working stdint.h, we'll need to grow our own.
989 AC_CHECK_SIZEOF(int8_t)
990 AC_CHECK_SIZEOF(int16_t)
991 AC_CHECK_SIZEOF(int32_t)
992 AC_CHECK_SIZEOF(int64_t)
993 AC_CHECK_SIZEOF(uint8_t)
994 AC_CHECK_SIZEOF(uint16_t)
995 AC_CHECK_SIZEOF(uint32_t)
996 AC_CHECK_SIZEOF(uint64_t)
997 AC_CHECK_SIZEOF(intptr_t)
998 AC_CHECK_SIZEOF(uintptr_t)
1000 dnl AC_CHECK_TYPES([int8_t, int16_t, int32_t, int64_t, uint8_t, uint16_t, uint32_t, uint64_t, intptr_t, uintptr_t])
1002 AC_CHECK_SIZEOF(char)
1003 AC_CHECK_SIZEOF(short)
1004 AC_CHECK_SIZEOF(int)
1005 AC_CHECK_SIZEOF(long)
1006 AC_CHECK_SIZEOF(long long)
1007 AC_CHECK_SIZEOF(__int64)
1008 AC_CHECK_SIZEOF(void *)
1009 AC_CHECK_SIZEOF(time_t)
1010 AC_CHECK_SIZEOF(size_t)
1011 AC_CHECK_SIZEOF(pid_t)
1013 AC_CHECK_TYPES([uint, u_char, ssize_t])
1015 AC_PC_FROM_UCONTEXT([/bin/true])
1017 dnl used to include sockaddr_storage, but everybody has that.
1018 AC_CHECK_TYPES([struct in6_addr, struct sockaddr_in6, sa_family_t], , ,
1019 [#ifdef HAVE_SYS_TYPES_H
1020 #include <sys/types.h>
1022 #ifdef HAVE_NETINET_IN_H
1023 #include <netinet/in.h>
1025 #ifdef HAVE_NETINET_IN6_H
1026 #include <netinet/in6.h>
1028 #ifdef HAVE_SYS_SOCKET_H
1029 #include <sys/socket.h>
1032 #define _WIN32_WINNT 0x0501
1033 #define WIN32_LEAN_AND_MEAN
1034 #if defined(_MSC_VER) && (_MSC_VER < 1300)
1035 #include <winsock.h>
1037 #include <winsock2.h>
1038 #include <ws2tcpip.h>
1042 AC_CHECK_MEMBERS([struct in6_addr.s6_addr32, struct in6_addr.s6_addr16, struct sockaddr_in.sin_len, struct sockaddr_in6.sin6_len], , ,
1043 [#ifdef HAVE_SYS_TYPES_H
1044 #include <sys/types.h>
1046 #ifdef HAVE_NETINET_IN_H
1047 #include <netinet/in.h>
1049 #ifdef HAVE_NETINET_IN6_H
1050 #include <netinet/in6.h>
1052 #ifdef HAVE_SYS_SOCKET_H
1053 #include <sys/socket.h>
1056 #define _WIN32_WINNT 0x0501
1057 #define WIN32_LEAN_AND_MEAN
1058 #if defined(_MSC_VER) && (_MSC_VER < 1300)
1059 #include <winsock.h>
1061 #include <winsock2.h>
1062 #include <ws2tcpip.h>
1067 AC_CHECK_TYPES([rlim_t], , ,
1068 [#ifdef HAVE_SYS_TYPES_H
1069 #include <sys/types.h>
1071 #ifdef HAVE_SYS_TIME_H
1072 #include <sys/time.h>
1074 #ifdef HAVE_SYS_RESOURCE_H
1075 #include <sys/resource.h>
1079 AX_CHECK_SIGN([time_t],
1080 [ AC_DEFINE(TIME_T_IS_SIGNED, 1, [Define if time_t is signed]) ],
1082 #ifdef HAVE_SYS_TYPES_H
1083 #include <sys/types.h>
1085 #ifdef HAVE_SYS_TIME_H
1086 #include <sys/time.h>
1093 if test "$ax_cv_decl_time_t_signed" = no; then
1094 AC_MSG_WARN([You have an unsigned time_t; some things will probably break. Please tell the Tor developers about your interesting platform.])
1097 AX_CHECK_SIGN([size_t],
1098 [ tor_cv_size_t_signed=yes ],
1099 [ tor_cv_size_t_signed=no ], [
1100 #ifdef HAVE_SYS_TYPES_H
1101 #include <sys/types.h>
1105 if test "$ax_cv_decl_size_t_signed" = yes; then
1106 AC_MSG_ERROR([You have a signed size_t; that's grossly nonconformant.])
1109 AX_CHECK_SIGN([enum always],
1110 [ AC_DEFINE(ENUM_VALS_ARE_SIGNED, 1, [Define if enum is always signed]) ],
1112 enum always { AAA, BBB, CCC };
1115 AC_CHECK_SIZEOF(socklen_t, , [AC_INCLUDES_DEFAULT()
1116 #ifdef HAVE_SYS_SOCKET_H
1117 #include <sys/socket.h>
1121 # We want to make sure that we _don't_ have a cell_t defined, like IRIX does.
1123 AC_CHECK_SIZEOF(cell_t)
1125 # Now make sure that NULL can be represented as zero bytes.
1126 AC_CACHE_CHECK([whether memset(0) sets pointers to NULL], tor_cv_null_is_zero,
1127 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1128 [[#include <stdlib.h>
1131 #ifdef HAVE_STDDEF_H
1134 int main () { char *p1,*p2; p1=NULL; memset(&p2,0,sizeof(p2));
1135 return memcmp(&p1,&p2,sizeof(char*))?1:0; }]])],
1136 [tor_cv_null_is_zero=yes],
1137 [tor_cv_null_is_zero=no],
1138 [tor_cv_null_is_zero=cross])])
1140 if test "$tor_cv_null_is_zero" = cross ; then
1141 # Cross-compiling; let's hope that the target isn't raving mad.
1142 AC_MSG_NOTICE([Cross-compiling: we'll assume that NULL is represented as a sequence of 0-valued bytes.])
1145 if test "$tor_cv_null_is_zero" != no; then
1146 AC_DEFINE([NULL_REP_IS_ZERO_BYTES], 1,
1147 [Define to 1 iff memset(0) sets pointers to NULL])
1150 AC_CACHE_CHECK([whether memset(0) sets doubles to 0.0], tor_cv_dbl0_is_zero,
1151 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1152 [[#include <stdlib.h>
1155 #ifdef HAVE_STDDEF_H
1158 int main () { double d1,d2; d1=0; memset(&d2,0,sizeof(d2));
1159 return memcmp(&d1,&d2,sizeof(d1))?1:0; }]])],
1160 [tor_cv_dbl0_is_zero=yes],
1161 [tor_cv_dbl0_is_zero=no],
1162 [tor_cv_dbl0_is_zero=cross])])
1164 if test "$tor_cv_dbl0_is_zero" = cross ; then
1165 # Cross-compiling; let's hope that the target isn't raving mad.
1166 AC_MSG_NOTICE([Cross-compiling: we'll assume that 0.0 can be represented as a sequence of 0-valued bytes.])
1169 if test "$tor_cv_dbl0_is_zero" != no; then
1170 AC_DEFINE([DOUBLE_0_REP_IS_ZERO_BYTES], 1,
1171 [Define to 1 iff memset(0) sets doubles to 0.0])
1174 # And what happens when we malloc zero?
1175 AC_CACHE_CHECK([whether we can malloc(0) safely.], tor_cv_malloc_zero_works,
1176 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1177 [[#include <stdlib.h>
1180 #ifdef HAVE_STDDEF_H
1183 int main () { return malloc(0)?0:1; }]])],
1184 [tor_cv_malloc_zero_works=yes],
1185 [tor_cv_malloc_zero_works=no],
1186 [tor_cv_malloc_zero_works=cross])])
1188 if test "$tor_cv_malloc_zero_works" = cross; then
1189 # Cross-compiling; let's hope that the target isn't raving mad.
1190 AC_MSG_NOTICE([Cross-compiling: we'll assume that we need to check malloc() arguments for 0.])
1193 if test "$tor_cv_malloc_zero_works" = yes; then
1194 AC_DEFINE([MALLOC_ZERO_WORKS], 1,
1195 [Define to 1 iff malloc(0) returns a pointer])
1198 # whether we seem to be in a 2s-complement world.
1199 AC_CACHE_CHECK([whether we are using 2s-complement arithmetic], tor_cv_twos_complement,
1200 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1201 [[int main () { int problem = ((-99) != (~99)+1);
1202 return problem ? 1 : 0; }]])],
1203 [tor_cv_twos_complement=yes],
1204 [tor_cv_twos_complement=no],
1205 [tor_cv_twos_complement=cross])])
1207 if test "$tor_cv_twos_complement" = cross ; then
1208 # Cross-compiling; let's hope that the target isn't raving mad.
1209 AC_MSG_NOTICE([Cross-compiling: we'll assume that negative integers are represented with two's complement.])
1212 if test "$tor_cv_twos_complement" != no ; then
1213 AC_DEFINE([USING_TWOS_COMPLEMENT], 1,
1214 [Define to 1 iff we represent negative integers with two's complement])
1217 # What does shifting a negative value do?
1218 AC_CACHE_CHECK([whether right-shift on negative values does sign-extension], tor_cv_sign_extend,
1219 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1220 [[int main () { int okay = (-60 >> 8) == -1; return okay ? 0 : 1; }]])],
1221 [tor_cv_sign_extend=yes],
1222 [tor_cv_sign_extend=no],
1223 [tor_cv_sign_extend=cross])])
1225 if test "$tor_cv_sign_extend" = cross ; then
1226 # Cross-compiling; let's hope that the target isn't raving mad.
1227 AC_MSG_NOTICE([Cross-compiling: we'll assume that right-shifting negative integers causes sign-extension])
1230 if test "$tor_cv_sign_extend" != no ; then
1231 AC_DEFINE([RSHIFT_DOES_SIGN_EXTEND], 1,
1232 [Define to 1 iff right-shifting a negative value performs sign-extension])
1235 # Whether we should use the dmalloc memory allocation debugging library.
1236 AC_MSG_CHECKING(whether to use dmalloc (debug memory allocation library))
1237 AC_ARG_WITH(dmalloc,
1238 [ --with-dmalloc Use debug memory allocation library. ],
1239 [if [[ "$withval" = "yes" ]]; then
1245 fi], [ dmalloc=0; AC_MSG_RESULT(no) ]
1248 if [[ $dmalloc -eq 1 ]]; then
1249 AC_CHECK_HEADERS(dmalloc.h, , AC_MSG_ERROR(dmalloc header file not found. Do you have the development files for dmalloc installed?))
1250 AC_SEARCH_LIBS(dmalloc_malloc, [dmallocth dmalloc], , AC_MSG_ERROR(Libdmalloc library not found. If you enable it you better have it installed.))
1251 AC_DEFINE(USE_DMALLOC, 1, [Debug memory allocation library])
1252 AC_CHECK_FUNCS(dmalloc_strdup dmalloc_strndup)
1255 AC_ARG_WITH(tcmalloc,
1256 [ --with-tcmalloc Use tcmalloc memory allocation library. ],
1257 [ tcmalloc=yes ], [ tcmalloc=no ])
1259 if test x$tcmalloc = xyes ; then
1260 LDFLAGS="-ltcmalloc $LDFLAGS"
1263 using_custom_malloc=no
1264 if test x$enable_openbsd_malloc = xyes ; then
1265 using_custom_malloc=yes
1267 if test x$tcmalloc = xyes ; then
1268 using_custom_malloc=yes
1270 if test $using_custom_malloc = no ; then
1271 AC_CHECK_FUNCS(mallinfo)
1274 # By default, we're going to assume we don't have mlockall()
1275 # bionic and other platforms have various broken mlockall subsystems.
1276 # Some systems don't have a working mlockall, some aren't linkable,
1277 # and some have it but don't declare it.
1278 AC_CHECK_FUNCS(mlockall)
1279 AC_CHECK_DECLS([mlockall], , , [
1280 #ifdef HAVE_SYS_MMAN_H
1281 #include <sys/mman.h>
1284 # Allow user to specify an alternate syslog facility
1285 AC_ARG_WITH(syslog-facility,
1286 [ --with-syslog-facility=LOG syslog facility to use (default=LOG_DAEMON)],
1287 syslog_facility="$withval", syslog_facility="LOG_DAEMON")
1288 AC_DEFINE_UNQUOTED(LOGFACILITY,$syslog_facility,[name of the syslog facility])
1289 AC_SUBST(LOGFACILITY)
1291 # Check if we have getresuid and getresgid
1292 AC_CHECK_FUNCS(getresuid getresgid)
1294 # Check for gethostbyname_r in all its glorious incompatible versions.
1295 # (This logic is based on that in Python's configure.in)
1296 AH_TEMPLATE(HAVE_GETHOSTBYNAME_R,
1297 [Define this if you have any gethostbyname_r()])
1299 AC_CHECK_FUNC(gethostbyname_r, [
1300 AC_MSG_CHECKING([how many arguments gethostbyname_r() wants])
1302 CFLAGS="$CFLAGS $MY_CPPFLAGS $MY_THREAD_CPPFLAGS $MY_CFLAGS"
1303 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([
1307 struct hostent *h1, *h2;
1309 (void)gethostbyname_r(cp1,h1,cp2,i1,&h2,&i2);
1311 AC_DEFINE(HAVE_GETHOSTBYNAME_R)
1312 AC_DEFINE(HAVE_GETHOSTBYNAME_R_6_ARG, 1,
1313 [Define this if gethostbyname_r takes 6 arguments])
1322 (void)gethostbyname_r(cp1,h1,cp2,i1,&i2);
1324 AC_DEFINE(HAVE_GETHOSTBYNAME_R)
1325 AC_DEFINE(HAVE_GETHOSTBYNAME_R_5_ARG, 1,
1326 [Define this if gethostbyname_r takes 5 arguments])
1334 struct hostent_data hd;
1335 (void) gethostbyname_r(cp1,h1,&hd);
1337 AC_DEFINE(HAVE_GETHOSTBYNAME_R)
1338 AC_DEFINE(HAVE_GETHOSTBYNAME_R_3_ARG, 1,
1339 [Define this if gethostbyname_r takes 3 arguments])
1349 AC_CACHE_CHECK([whether the C compiler supports __func__],
1350 tor_cv_have_func_macro,
1351 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
1353 int main(int c, char **v) { puts(__func__); }])],
1354 tor_cv_have_func_macro=yes,
1355 tor_cv_have_func_macro=no))
1357 AC_CACHE_CHECK([whether the C compiler supports __FUNC__],
1358 tor_cv_have_FUNC_macro,
1359 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
1361 int main(int c, char **v) { puts(__FUNC__); }])],
1362 tor_cv_have_FUNC_macro=yes,
1363 tor_cv_have_FUNC_macro=no))
1365 AC_CACHE_CHECK([whether the C compiler supports __FUNCTION__],
1366 tor_cv_have_FUNCTION_macro,
1367 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
1369 int main(int c, char **v) { puts(__FUNCTION__); }])],
1370 tor_cv_have_FUNCTION_macro=yes,
1371 tor_cv_have_FUNCTION_macro=no))
1373 AC_CACHE_CHECK([whether we have extern char **environ already declared],
1374 tor_cv_have_environ_declared,
1375 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
1376 /* We define _GNU_SOURCE here because it is also defined in compat.c.
1377 * Without it environ doesn't get declared. */
1379 #ifdef HAVE_UNISTD_H
1383 int main(int c, char **v) { char **t = environ; }])],
1384 tor_cv_have_environ_declared=yes,
1385 tor_cv_have_environ_declared=no))
1387 if test "$tor_cv_have_func_macro" = 'yes'; then
1388 AC_DEFINE(HAVE_MACRO__func__, 1, [Defined if the compiler supports __func__])
1391 if test "$tor_cv_have_FUNC_macro" = 'yes'; then
1392 AC_DEFINE(HAVE_MACRO__FUNC__, 1, [Defined if the compiler supports __FUNC__])
1395 if test "$tor_cv_have_FUNCTION_macro" = 'yes'; then
1396 AC_DEFINE(HAVE_MACRO__FUNCTION__, 1,
1397 [Defined if the compiler supports __FUNCTION__])
1400 if test "$tor_cv_have_environ_declared" = 'yes'; then
1401 AC_DEFINE(HAVE_EXTERN_ENVIRON_DECLARED, 1,
1402 [Defined if we have extern char **environ already declared])
1405 # $prefix stores the value of the --prefix command line option, or
1406 # NONE if the option wasn't set. In the case that it wasn't set, make
1407 # it be the default, so that we can use it to expand directories now.
1408 if test "x$prefix" = "xNONE"; then
1409 prefix=$ac_default_prefix
1412 # and similarly for $exec_prefix
1413 if test "x$exec_prefix" = "xNONE"; then
1417 if test "x$BUILDDIR" = "x"; then
1421 AH_TEMPLATE([BUILDDIR],[tor's build directory])
1422 AC_DEFINE_UNQUOTED(BUILDDIR,"$BUILDDIR")
1424 if test "x$CONFDIR" = "x"; then
1425 CONFDIR=`eval echo $sysconfdir/tor`
1428 AH_TEMPLATE([CONFDIR],[tor's configuration directory])
1429 AC_DEFINE_UNQUOTED(CONFDIR,"$CONFDIR")
1431 BINDIR=`eval echo $bindir`
1433 LOCALSTATEDIR=`eval echo $localstatedir`
1434 AC_SUBST(LOCALSTATEDIR)
1436 if test "$bwin32" = true; then
1437 # Test if the linker supports the --nxcompat and --dynamicbase options
1439 save_LDFLAGS="$LDFLAGS"
1440 LDFLAGS="-Wl,--nxcompat -Wl,--dynamicbase"
1441 AC_MSG_CHECKING([whether the linker supports DllCharacteristics])
1442 AC_LINK_IFELSE([AC_LANG_PROGRAM([])],
1443 [AC_MSG_RESULT([yes])]
1444 [save_LDFLAGS="$save_LDFLAGS $LDFLAGS"],
1445 [AC_MSG_RESULT([no])]
1447 LDFLAGS="$save_LDFLAGS"
1450 # Set CFLAGS _after_ all the above checks, since our warnings are stricter
1451 # than autoconf's macros like.
1452 if test "$GCC" = yes; then
1453 # Disable GCC's strict aliasing checks. They are an hours-to-debug
1454 # accident waiting to happen.
1455 CFLAGS="$CFLAGS -Wall -fno-strict-aliasing"
1457 # Autoconf sets -g -O2 by default. Override optimization level
1458 # for non-gcc compilers
1460 enable_gcc_warnings=no
1461 enable_gcc_warnings_advisory=no
1464 # OS X Lion started deprecating the system openssl. Let's just disable
1465 # all deprecation warnings on OS X. Also, to potentially make the binary
1466 # a little smaller, let's enable dead_strip.
1470 CFLAGS="$CFLAGS -Wno-deprecated-declarations"
1471 LDFLAGS="$LDFLAGS -dead_strip" ;;
1474 # Add some more warnings which we use in development but not in the
1475 # released versions. (Some relevant gcc versions can't handle these.)
1476 if test x$enable_gcc_warnings = xyes || test x$enable_gcc_warnings_advisory = xyes; then
1478 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
1479 #if !defined(__GNUC__) || (__GNUC__ < 4)
1481 #endif])], have_gcc4=yes, have_gcc4=no)
1483 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
1484 #if !defined(__GNUC__) || (__GNUC__ < 4) || (__GNUC__ == 4 && __GNUC_MINOR__ < 2)
1486 #endif])], have_gcc42=yes, have_gcc42=no)
1488 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
1489 #if !defined(__GNUC__) || (__GNUC__ < 4) || (__GNUC__ == 4 && __GNUC_MINOR__ < 3)
1491 #endif])], have_gcc43=yes, have_gcc43=no)
1493 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
1494 #if !defined(__GNUC__) || (__GNUC__ < 4) || (__GNUC__ == 4 && __GNUC_MINOR__ < 6)
1496 #endif])], have_gcc46=yes, have_gcc46=no)
1499 save_CFLAGS="$CFLAGS"
1500 CFLAGS="$CFLAGS -Wshorten-64-to-32"
1501 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [])], have_shorten64_flag=yes,
1502 have_shorten64_flag=no)
1503 CFLAGS="$save_CFLAGS"
1506 *-*-openbsd* | *-*-bitrig*)
1507 # Some OpenBSD versions (like 4.8) have -Wsystem-headers by default.
1508 # That's fine, except that the headers don't pass -Wredundant-decls.
1509 # Therefore, let's disable -Wsystem-headers when we're building
1510 # with maximal warnings on OpenBSD.
1511 CFLAGS="$CFLAGS -Wno-system-headers" ;;
1514 CFLAGS="$CFLAGS -W -Wfloat-equal -Wundef -Wpointer-arith"
1515 CFLAGS="$CFLAGS -Wstrict-prototypes -Wmissing-prototypes -Wwrite-strings"
1516 CFLAGS="$CFLAGS -Wredundant-decls -Wchar-subscripts -Wcomment -Wformat=2"
1517 CFLAGS="$CFLAGS -Wwrite-strings -Wmissing-declarations -Wredundant-decls"
1518 CFLAGS="$CFLAGS -Wnested-externs -Wbad-function-cast -Wswitch-enum"
1520 if test x$enable_gcc_warnings = xyes; then
1521 CFLAGS="$CFLAGS -Werror"
1524 # Disabled, so we can use mallinfo(): -Waggregate-return
1526 if test x$have_gcc4 = xyes ; then
1527 # These warnings break gcc 3.3.5 and work on gcc 4.0.2
1528 CFLAGS="$CFLAGS -Winit-self -Wmissing-field-initializers -Wdeclaration-after-statement -Wold-style-definition"
1531 if test x$have_gcc42 = xyes ; then
1532 # These warnings break gcc 4.0.2 and work on gcc 4.2
1533 # XXXX020 See if any of these work with earlier versions.
1534 CFLAGS="$CFLAGS -Waddress -Wmissing-noreturn -Wstrict-overflow=1"
1536 # We used to use -Wstrict-overflow=5, but that breaks us heavily under 4.3.
1539 if test x$have_gcc42 = xyes && test x$have_clang = xno; then
1540 # These warnings break gcc 4.0.2 and clang, but work on gcc 4.2
1541 CFLAGS="$CFLAGS -Wnormalized=id -Woverride-init"
1544 if test x$have_gcc43 = xyes ; then
1545 # These warnings break gcc 4.2 and work on gcc 4.3
1546 # XXXX020 See if any of these work with earlier versions.
1547 CFLAGS="$CFLAGS -Wextra -Warray-bounds"
1550 if test x$have_gcc46 = xyes ; then
1551 # This warning was added in gcc 4.3, but it appears to generate
1552 # spurious warnings in gcc 4.4. I don't know if it works in 4.5.
1553 CFLAGS="$CFLAGS -Wlogical-op"
1556 if test x$have_shorten64_flag = xyes ; then
1557 CFLAGS="$CFLAGS -Wshorten-64-to-32"
1562 ##This will break the world on some 64-bit architectures
1563 # CFLAGS="$CFLAGS -Winline"
1566 if test "$enable_coverage" = yes && test "$have_clang" = "no"; then
1569 AC_MSG_WARN([Tried to enable coverage on OSX without using the clang compiler. This might not work! If coverage fails, use CC=clang when configuring with --enable-profiling.])
1573 CPPFLAGS="$CPPFLAGS $TOR_CPPFLAGS_libevent $TOR_CPPFLAGS_openssl $TOR_CPPFLAGS_zlib"
1578 contrib/dist/suse/tor.sh
1579 contrib/operator-tools/tor.logrotate
1582 contrib/dist/tor.service
1583 src/config/torrc.sample
1586 if test x$asciidoc = xtrue && test "$ASCIIDOC" = "none" ; then
1587 regular_mans="doc/tor doc/tor-gencert doc/tor-resolve doc/torify"
1588 for file in $regular_mans ; do
1589 if ! [[ -f "$srcdir/$file.1.in" ]] || ! [[ -f "$srcdir/$file.html.in" ]] ; then
1590 echo "==================================";
1592 echo "You need asciidoc installed to be able to build the manpage.";
1593 echo "To build without manpages, use the --disable-asciidoc argument";
1594 echo "when calling configure.";
1596 echo "==================================";
1604 if test -x /usr/bin/perl && test -x ./scripts/maint/updateVersions.pl ; then
1605 ./scripts/maint/updateVersions.pl