1 dnl Copyright (c) 2001-2004, Roger Dingledine
2 dnl Copyright (c) 2004-2006, Roger Dingledine, Nick Mathewson
3 dnl Copyright (c) 2007-2015, The Tor Project, Inc.
4 dnl See LICENSE for licensing information
6 AC_INIT([tor],[0.2.7.6-dev])
7 AC_CONFIG_SRCDIR([src/or/main.c])
8 AC_CONFIG_MACRO_DIR([m4])
10 m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])])
11 AC_CONFIG_HEADERS([orconfig.h])
17 if test -f /etc/redhat-release ; then
18 if test -f /usr/kerberos/include ; then
19 CPPFLAGS="$CPPFLAGS -I/usr/kerberos/include"
23 # Not a no-op; we want to make sure that CPPFLAGS is set before we use
24 # the += operator on it in src/or/Makefile.am
25 CPPFLAGS="$CPPFLAGS -I\${top_srcdir}/src/common"
27 #XXXX020 We should make these enabled or not, before 0.2.0.x-final
28 AC_ARG_ENABLE(openbsd-malloc,
29 AS_HELP_STRING(--enable-openbsd-malloc, [use malloc code from OpenBSD. Linux only]))
30 AC_ARG_ENABLE(instrument-downloads,
31 AS_HELP_STRING(--enable-instrument-downloads, [instrument downloads of directory resources etc.]))
32 AC_ARG_ENABLE(static-openssl,
33 AS_HELP_STRING(--enable-static-openssl, [link against a static openssl library. Requires --with-openssl-dir]))
34 AC_ARG_ENABLE(static-libevent,
35 AS_HELP_STRING(--enable-static-libevent, [link against a static libevent library. Requires --with-libevent-dir]))
36 AC_ARG_ENABLE(static-zlib,
37 AS_HELP_STRING(--enable-static-zlib, [link against a static zlib library. Requires --with-zlib-dir]))
38 AC_ARG_ENABLE(static-tor,
39 AS_HELP_STRING(--enable-static-tor, [create an entirely static Tor binary. Requires --with-openssl-dir and --with-libevent-dir and --with-zlib-dir]))
40 AC_ARG_ENABLE(unittests,
41 AS_HELP_STRING(--disable-unittests, [don't build unit tests for Tor. Risky!]))
42 AC_ARG_ENABLE(coverage,
43 AS_HELP_STRING(--enable-coverage, [enable coverage support in the unit-test build]))
44 AC_ARG_ENABLE(system-torrc,
45 AS_HELP_STRING(--disable-system-torrc, [don't look for a system-wide torrc file]))
47 AM_CONDITIONAL(UNITTESTS_ENABLED, test x$enable_unittests != xno)
48 AM_CONDITIONAL(COVERAGE_ENABLED, test x$enable_coverage = xyes)
50 if test "$enable_static_tor" = "yes"; then
51 enable_static_libevent="yes";
52 enable_static_openssl="yes";
53 enable_static_zlib="yes";
54 CFLAGS="$CFLAGS -static"
57 if test "$enable_system_torrc" = "no"; then
58 AC_DEFINE(DISABLE_SYSTEM_TORRC, 1,
59 [Defined if we're not going to look for a torrc in SYSCONF])
62 AM_CONDITIONAL(USE_OPENBSD_MALLOC, test x$enable_openbsd_malloc = xyes)
63 if test x$enable_instrument_downloads = xyes; then
64 AC_DEFINE(INSTRUMENT_DOWNLOADS, 1,
65 [Defined if we want to keep track of how much of each kind of resource we download.])
68 AC_ARG_ENABLE(transparent,
69 AS_HELP_STRING(--disable-transparent, [disable transparent proxy support]),
70 [case "${enableval}" in
71 yes) transparent=true ;;
72 no) transparent=false ;;
73 *) AC_MSG_ERROR(bad value for --enable-transparent) ;;
74 esac], [transparent=true])
76 AC_ARG_ENABLE(asciidoc,
77 AS_HELP_STRING(--disable-asciidoc, [don't use asciidoc (disables building of manpages)]),
78 [case "${enableval}" in
81 *) AC_MSG_ERROR(bad value for --disable-asciidoc) ;;
82 esac], [asciidoc=true])
84 # systemd notify support
85 AC_ARG_ENABLE(systemd,
86 AS_HELP_STRING(--enable-systemd, [enable systemd notification support]),
87 [case "${enableval}" in
90 * ) AC_MSG_ERROR(bad value for --enable-systemd) ;;
91 esac], [systemd=auto])
96 if test x$enable_systemd = xno ; then
99 PKG_CHECK_MODULES(SYSTEMD,
103 if test x$have_systemd=xno; then
104 AC_MSG_NOTICE([Okay, checking for systemd a different way...])
105 PKG_CHECK_MODULES(SYSTEMD,
112 if test x$have_systemd = xyes; then
113 AC_DEFINE(HAVE_SYSTEMD,1,[Have systemd])
114 TOR_SYSTEMD_CFLAGS="${SYSTEMD_CFLAGS}"
115 TOR_SYSTEMD_LIBS="${SYSTEMD_LIBS}"
116 PKG_CHECK_MODULES(LIBSYSTEMD209, [libsystemd >= 209],
117 [AC_DEFINE(HAVE_SYSTEMD_209,1,[Have systemd v209 or more])], [])
119 AC_SUBST(TOR_SYSTEMD_CFLAGS)
120 AC_SUBST(TOR_SYSTEMD_LIBS)
122 if test x$enable_systemd = xyes -a x$have_systemd != xyes ; then
123 AC_MSG_ERROR([Explicitly requested systemd support, but systemd not found])
128 AC_DEFINE(_REENTRANT, 1, [Define on some platforms to activate x_r() functions in time.h])
132 AC_ARG_ENABLE(gcc-warnings,
133 AS_HELP_STRING(--enable-gcc-warnings, [enable verbose warnings]))
134 AC_ARG_ENABLE(gcc-warnings-advisory,
135 AS_HELP_STRING(--enable-gcc-warnings-advisory, [enable verbose warnings, excluding -Werror]))
137 dnl Others suggest '/gs /safeseh /nxcompat /dynamicbase' for non-gcc on Windows
138 AC_ARG_ENABLE(gcc-hardening,
139 AS_HELP_STRING(--disable-gcc-hardening, [disable compiler security checks]))
141 AC_ARG_ENABLE(expensive-hardening,
142 AS_HELP_STRING(--enable-expensive-hardening, [enable more expensive compiler hardening; makes Tor slower]))
144 dnl Linker hardening options
145 dnl Currently these options are ELF specific - you can't use this with MacOSX
146 AC_ARG_ENABLE(linker-hardening,
147 AS_HELP_STRING(--disable-linker-hardening, [disable linker security fixups]))
149 AC_ARG_ENABLE(local-appdata,
150 AS_HELP_STRING(--enable-local-appdata, [default to host local application data paths on Windows]))
151 if test "$enable_local_appdata" = "yes"; then
152 AC_DEFINE(ENABLE_LOCAL_APPDATA, 1,
153 [Defined if we default to host local appdata paths on Windows])
157 AC_ARG_ENABLE(tor2web-mode,
158 AS_HELP_STRING(--enable-tor2web-mode, [support tor2web non-anonymous mode]),
159 [if test x$enableval = xyes; then
160 CFLAGS="$CFLAGS -D ENABLE_TOR2WEB_MODE=1"
163 AC_ARG_ENABLE(bufferevents,
164 AS_HELP_STRING(--enable-bufferevents, [use Libevent's buffered IO]))
166 AC_ARG_ENABLE(tool-name-check,
167 AS_HELP_STRING(--disable-tool-name-check, [check for sanely named toolchain when cross-compiling]))
169 AC_ARG_ENABLE(seccomp,
170 AS_HELP_STRING(--disable-seccomp, [do not attempt to use libseccomp]))
172 AC_ARG_ENABLE(libscrypt,
173 AS_HELP_STRING(--disable-libscrypt, [do not attempt to use libscrypt]))
175 dnl check for the correct "ar" when cross-compiling
176 AN_MAKEVAR([AR], [AC_PROG_AR])
177 AN_PROGRAM([ar], [AC_PROG_AR])
178 AC_DEFUN([AC_PROG_AR], [AC_CHECK_TOOL([AR], [ar], [ar])])
181 dnl Check whether the above macro has settled for a simply named tool even
182 dnl though we're cross compiling. We must do this before running AC_PROG_CC,
183 dnl because that will find any cc on the system, not only the cross-compiler,
184 dnl and then verify that a binary built with this compiler runs on the
185 dnl build system. It will then come to the false conclusion that we're not
187 if test x$enable_tool_name_check != xno; then
188 if test x$ac_tool_warned = xyes; then
189 AC_MSG_ERROR([We are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
190 elif test "x$ac_ct_AR" != x -a x$cross_compiling = xmaybe; then
191 AC_MSG_ERROR([We think we are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
200 AC_PATH_PROG([PERL], [perl])
202 dnl autoconf 2.59 appears not to support AC_PROG_SED
203 AC_CHECK_PROG([SED],[sed],[sed],[/bin/false])
205 dnl check for asciidoc and a2x
206 AC_PATH_PROG([ASCIIDOC], [asciidoc], none)
207 AC_PATH_PROGS([A2X], [a2x a2x.py], none)
209 AM_CONDITIONAL(USE_ASCIIDOC, test x$asciidoc = xtrue)
211 AM_CONDITIONAL(USE_FW_HELPER, test x$natpmp = xtrue || test x$upnp = xtrue)
212 AM_CONDITIONAL(NAT_PMP, test x$natpmp = xtrue)
213 AM_CONDITIONAL(MINIUPNPC, test x$upnp = xtrue)
217 AC_ARG_VAR([PYTHON], [path to Python binary])
218 AC_CHECK_PROGS(PYTHON, [python python2 python2.7 python3 python3.3])
219 if test "x$PYTHON" = "x"; then
220 AC_MSG_WARN([Python unavailable; some tests will not be run.])
222 AM_CONDITIONAL(USEPYTHON, [test "x$PYTHON" != "x"])
224 ifdef([AC_C_FLEXIBLE_ARRAY_MEMBER], [
225 AC_C_FLEXIBLE_ARRAY_MEMBER
227 dnl Maybe we've got an old autoconf...
228 AC_CACHE_CHECK([for flexible array members],
232 struct abc { int a; char b[]; };
234 struct abc *def = malloc(sizeof(struct abc)+sizeof(char));
237 [tor_cv_c_flexarray=yes],
238 [tor_cv_c_flexarray=no])])
239 if test $tor_cv_flexarray = yes ; then
240 AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
242 AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [1], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
246 AC_CACHE_CHECK([for working C99 mid-block declaration syntax],
249 [AC_LANG_PROGRAM([], [int x; x = 3; int y; y = 4 + x;])],
250 [tor_cv_c_c99_decl=yes],
251 [tor_cv_c_c99_decl=no] )])
252 if test "$tor_cv_c_c99_decl" != "yes"; then
253 AC_MSG_ERROR([Your compiler doesn't support c99 mid-block declarations. This is required as of Tor 0.2.6.x])
256 AC_CACHE_CHECK([for working C99 designated initializers],
257 tor_cv_c_c99_designated_init,
259 [AC_LANG_PROGRAM([struct s { int a; int b; };],
260 [[ struct s ss = { .b = 5, .a = 6 }; ]])],
261 [tor_cv_c_c99_designated_init=yes],
262 [tor_cv_c_c99_designated_init=no] )])
264 if test "$tor_cv_c_c99_designated_init" != "yes"; then
265 AC_MSG_ERROR([Your compiler doesn't support c99 designated initializers. This is required as of Tor 0.2.6.x])
269 AC_ARG_WITH(tor-user,
270 AS_HELP_STRING(--with-tor-user=NAME, [specify username for tor daemon]),
278 AC_ARG_WITH(tor-group,
279 AS_HELP_STRING(--with-tor-group=NAME, [specify group name for tor daemon]),
287 dnl If _WIN32 is defined and non-zero, we are building for win32
288 AC_MSG_CHECKING([for win32])
289 AC_RUN_IFELSE([AC_LANG_SOURCE([
290 int main(int c, char **v) {
301 bwin32=true; AC_MSG_RESULT([yes]),
302 bwin32=false; AC_MSG_RESULT([no]),
303 bwin32=cross; AC_MSG_RESULT([cross])
306 if test "$bwin32" = cross; then
307 AC_MSG_CHECKING([for win32 (cross)])
308 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
310 int main(int c, char **v) {return 0;}
313 int main(int c, char **v) {return x(y);}
316 bwin32=true; AC_MSG_RESULT([yes]),
317 bwin32=false; AC_MSG_RESULT([no]))
322 /* Defined to access windows functions and definitions for >=WinXP */
324 # define WINVER 0x0501
327 /* Defined to access _other_ windows functions and definitions for >=WinXP */
328 # ifndef _WIN32_WINNT
329 # define _WIN32_WINNT 0x0501
332 /* Defined to avoid including some windows headers as part of Windows.h */
333 # ifndef WIN32_LEAN_AND_MEAN
334 # define WIN32_LEAN_AND_MEAN 1
340 AM_CONDITIONAL(BUILD_NT_SERVICES, test x$bwin32 = xtrue)
342 dnl Enable C99 when compiling with MIPSpro
343 AC_MSG_CHECKING([for MIPSpro compiler])
344 AC_COMPILE_IFELSE([AC_LANG_PROGRAM(, [
345 #if (defined(__sgi) && defined(_COMPILER_VERSION))
350 bmipspro=false; AC_MSG_RESULT(no),
351 bmipspro=true; AC_MSG_RESULT(yes))
353 if test "$bmipspro" = true; then
354 CFLAGS="$CFLAGS -c99"
359 AC_SEARCH_LIBS(socket, [socket network])
360 AC_SEARCH_LIBS(gethostbyname, [nsl])
361 AC_SEARCH_LIBS(dlopen, [dl])
362 AC_SEARCH_LIBS(inet_aton, [resolv])
363 AC_SEARCH_LIBS(backtrace, [execinfo])
365 AC_SEARCH_LIBS([clock_gettime], [rt])
366 if test "$LIBS" != "$saved_LIBS"; then
367 # Looks like we need -lrt for clock_gettime().
371 AC_SEARCH_LIBS(pthread_create, [pthread])
372 AC_SEARCH_LIBS(pthread_detach, [pthread])
374 AM_CONDITIONAL(THREADS_WIN32, test "$bwin32" = "true")
375 AM_CONDITIONAL(THREADS_PTHREADS, test "$bwin32" = "false")
377 dnl -------------------------------------------------------------------
378 dnl Check for functions before libevent, since libevent-1.2 apparently
379 dnl exports strlcpy without defining it in a header.
385 backtrace_symbols_fd \
425 if test "$bwin32" != true; then
426 AC_CHECK_HEADERS(pthread.h)
427 AC_CHECK_FUNCS(pthread_create)
428 AC_CHECK_FUNCS(pthread_condattr_setclock)
431 if test "$bwin32" = true; then
432 AC_CHECK_DECLS([SecureZeroMemory, _getwch], , , [
439 AM_CONDITIONAL(BUILD_READPASSPHRASE_C, test x$ac_cv_func_readpassphrase = xno && test $bwin32 = false)
441 dnl ------------------------------------------------------
442 dnl Where do you live, libevent? And how do we call you?
444 if test "$bwin32" = true; then
445 TOR_LIB_WS32=-lws2_32
446 TOR_LIB_IPHLPAPI=-liphlpapi
447 # Some of the cargo-cults recommend -lwsock32 as well, but I don't
448 # think it's actually necessary.
454 AC_SUBST(TOR_LIB_WS32)
455 AC_SUBST(TOR_LIB_GDI)
456 AC_SUBST(TOR_LIB_IPHLPAPI)
458 tor_libevent_pkg_redhat="libevent"
459 tor_libevent_pkg_debian="libevent-dev"
460 tor_libevent_devpkg_redhat="libevent-devel"
461 tor_libevent_devpkg_debian="libevent-dev"
463 dnl On Gnu/Linux or any place we require it, we'll add librt to the Libevent
464 dnl linking for static builds.
465 STATIC_LIBEVENT_FLAGS=""
466 if test "$enable_static_libevent" = "yes"; then
467 if test "$have_rt" = yes; then
468 STATIC_LIBEVENT_FLAGS=" -lrt "
472 TOR_SEARCH_LIBRARY(libevent, $trylibeventdir, [-levent $STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32], [
474 #include <winsock2.h>
477 #include <sys/time.h>
478 #include <sys/types.h>
479 #include <event.h>], [
481 #include <winsock2.h>
483 void exit(int); void *event_init(void);],
486 {WSADATA d; WSAStartup(0x101,&d); }
488 event_init(); exit(0);
489 ], [--with-libevent-dir], [/opt/libevent])
491 dnl Now check for particular libevent functions.
493 save_LDFLAGS="$LDFLAGS"
494 save_CPPFLAGS="$CPPFLAGS"
495 LIBS="-levent $STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32 $LIBS"
496 LDFLAGS="$TOR_LDFLAGS_libevent $LDFLAGS"
497 CPPFLAGS="$TOR_CPPFLAGS_libevent $CPPFLAGS"
498 AC_CHECK_FUNCS([event_get_version_number \
499 evutil_secure_rng_set_urandom_device_file \
500 evutil_secure_rng_init \
502 AC_CHECK_MEMBERS([struct event.min_heap_idx], , ,
506 AC_CHECK_HEADERS(event2/event.h event2/dns.h event2/bufferevent_ssl.h)
509 LDFLAGS="$save_LDFLAGS"
510 CPPFLAGS="$save_CPPFLAGS"
513 AM_CONDITIONAL(USE_EXTERNAL_EVDNS, test x$ac_cv_header_event2_dns_h = xyes)
515 if test "$enable_static_libevent" = "yes"; then
516 if test "$tor_cv_library_libevent_dir" = "(system)"; then
517 AC_MSG_ERROR("You must specify an explicit --with-libevent-dir=x option when using --enable-static-libevent")
519 TOR_LIBEVENT_LIBS="$TOR_LIBDIR_libevent/libevent.a $STATIC_LIBEVENT_FLAGS"
522 TOR_LIBEVENT_LIBS="-levent"
525 dnl This isn't the best test for Libevent 2.0.3-alpha. Once it's released,
526 dnl we can do much better.
527 if test "$enable_bufferevents" = "yes" ; then
528 if test "$ac_cv_header_event2_bufferevent_ssl_h" != "yes" ; then
529 AC_MSG_ERROR([You've asked for bufferevent support, but you're using a version of Libevent without SSL support. This won't work. We need Libevent 2.0.8-rc or later, and you don't seem to even have Libevent 2.0.3-alpha.])
532 CPPFLAGS="$CPPFLAGS $TOR_CPPFLAGS_libevent"
534 # Check for the right version. First see if version detection works.
535 AC_MSG_CHECKING([whether we can detect the Libevent version])
536 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
537 #include <event2/event.h>
538 #if !defined(LIBEVENT_VERSION_NUMBER) || LIBEVENT_VERSION_NUMBER < 10
544 ])], [event_version_number_works=yes; AC_MSG_RESULT([yes]) ],
545 [event_version_number_works=no; AC_MSG_RESULT([no])])
546 if test "$event_version_number_works" != 'yes'; then
547 AC_MSG_WARN([Version detection on Libevent seems broken. Your Libevent installation is probably screwed up or very old.])
549 AC_MSG_CHECKING([whether Libevent is new enough for bufferevents])
550 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
551 #include <event2/event.h>
552 #if !defined(LIBEVENT_VERSION_NUMBER) || LIBEVENT_VERSION_NUMBER < 0x02000d00
558 ])], [ AC_MSG_RESULT([yes]) ],
559 [ AC_MSG_RESULT([no])
560 AC_MSG_ERROR([Libevent does not seem new enough to support bufferevents. We require 2.0.13-stable or later]) ] )
566 LDFLAGS="$save_LDFLAGS"
567 CPPFLAGS="$save_CPPFLAGS"
569 AM_CONDITIONAL(USE_BUFFEREVENTS, test "$enable_bufferevents" = "yes")
570 if test "$enable_bufferevents" = "yes"; then
571 AC_DEFINE(USE_BUFFEREVENTS, 1, [Defined if we're going to use Libevent's buffered IO API])
572 if test "$enable_static_libevent" = "yes"; then
573 TOR_LIBEVENT_LIBS="$TOR_LIBDIR_libevent/libevent_openssl.a $TOR_LIBEVENT_LIBS"
575 TOR_LIBEVENT_LIBS="-levent_openssl $TOR_LIBEVENT_LIBS"
578 AC_SUBST(TOR_LIBEVENT_LIBS)
580 dnl ------------------------------------------------------
581 dnl Where do you live, libm?
583 dnl On some platforms (Haiku/BeOS) the math library is
584 dnl part of libroot. In which case don't link against lm
587 AC_SEARCH_LIBS(pow, [m], , AC_MSG_ERROR([Could not find pow in libm or libc.]))
588 if test "$ac_cv_search_pow" != "none required"; then
589 TOR_LIB_MATH="$ac_cv_search_pow"
592 AC_SUBST(TOR_LIB_MATH)
594 dnl ------------------------------------------------------
595 dnl Where do you live, openssl? And how do we call you?
597 tor_openssl_pkg_redhat="openssl"
598 tor_openssl_pkg_debian="libssl-dev"
599 tor_openssl_devpkg_redhat="openssl-devel"
600 tor_openssl_devpkg_debian="libssl-dev"
602 ALT_openssl_WITHVAL=""
604 AS_HELP_STRING(--with-ssl-dir=PATH, [obsolete alias for --with-openssl-dir]),
606 if test "x$withval" != xno && test "x$withval" != "x" ; then
607 ALT_openssl_WITHVAL="$withval"
611 TOR_SEARCH_LIBRARY(openssl, $tryssldir, [-lssl -lcrypto $TOR_LIB_GDI],
612 [#include <openssl/rand.h>],
613 [void RAND_add(const void *buf, int num, double entropy);],
614 [RAND_add((void*)0,0,0); exit(0);], [],
615 [/usr/local/openssl /usr/lib/openssl /usr/local/ssl /usr/lib/ssl /usr/local /usr/athena /opt/openssl])
617 dnl XXXX check for OPENSSL_VERSION_NUMBER == SSLeay()
619 if test "$enable_static_openssl" = "yes"; then
620 if test "$tor_cv_library_openssl_dir" = "(system)"; then
621 AC_MSG_ERROR("You must specify an explicit --with-openssl-dir=x option when using --enable-static-openssl")
623 TOR_OPENSSL_LIBS="$TOR_LIBDIR_openssl/libssl.a $TOR_LIBDIR_openssl/libcrypto.a"
626 TOR_OPENSSL_LIBS="-lssl -lcrypto"
628 AC_SUBST(TOR_OPENSSL_LIBS)
630 dnl Now check for particular openssl functions.
632 save_LDFLAGS="$LDFLAGS"
633 save_CPPFLAGS="$CPPFLAGS"
634 LIBS="$TOR_OPENSSL_LIBS $LIBS"
635 LDFLAGS="$TOR_LDFLAGS_openssl $LDFLAGS"
636 CPPFLAGS="$TOR_CPPFLAGS_openssl $CPPFLAGS"
639 #include <openssl/opensslv.h>
640 #if OPENSSL_VERSION_NUMBER < 0x1000000fL
645 [ AC_ERROR([OpenSSL is too old. We require 1.0.0 or later. You can specify a path to a newer one with --with-openssl-dir.]) ])
648 #include <openssl/opensslv.h>
649 #include <openssl/evp.h>
650 #if defined(OPENSSL_NO_EC) || defined(OPENSSL_NO_ECDH) || defined(OPENSSL_NO_ECDSA)
653 #if !defined(NID_X9_62_prime256v1) || !defined(NID_secp224r1)
654 #error "curves unavailable"
658 [ AC_ERROR([OpenSSL is built without full ECC support, including curves P256 and P224. You can specify a path to one with ECC support with --with-openssl-dir.]) ])
660 AC_CHECK_MEMBERS([struct ssl_method_st.get_cipher_by_char], , ,
661 [#include <openssl/ssl.h>
665 SSL_SESSION_get_master_key \
666 SSL_get_server_random \
667 SSL_get_client_ciphers \
668 SSL_get_client_random \
673 dnl Check if OpenSSL has scrypt implementation.
674 AC_CHECK_FUNCS([ EVP_PBE_scrypt ])
677 LDFLAGS="$save_LDFLAGS"
678 CPPFLAGS="$save_CPPFLAGS"
680 dnl ------------------------------------------------------
681 dnl Where do you live, zlib? And how do we call you?
683 tor_zlib_pkg_redhat="zlib"
684 tor_zlib_pkg_debian="zlib1g"
685 tor_zlib_devpkg_redhat="zlib-devel"
686 tor_zlib_devpkg_debian="zlib1g-dev"
688 TOR_SEARCH_LIBRARY(zlib, $tryzlibdir, [-lz],
690 [const char * zlibVersion(void);],
691 [zlibVersion(); exit(0);], [--with-zlib-dir],
694 if test "$enable_static_zlib" = "yes"; then
695 if test "$tor_cv_library_zlib_dir" = "(system)"; then
696 AC_MSG_ERROR("You must specify an explicit --with-zlib-dir=x option when
697 using --enable-static-zlib")
699 TOR_ZLIB_LIBS="$TOR_LIBDIR_zlib/libz.a"
704 AC_SUBST(TOR_ZLIB_LIBS)
706 dnl ---------------------------------------------------------------------
707 dnl Now that we know about our major libraries, we can check for compiler
708 dnl and linker hardening options. We need to do this with the libraries known,
709 dnl since sometimes the linker will like an option but not be willing to
710 dnl use it with a build of a library.
712 all_ldflags_for_check="$TOR_LDFLAGS_zlib $TOR_LDFLAGS_openssl $TOR_LDFLAGS_libevent"
713 all_libs_for_check="$TOR_ZLIB_LIBS $TOR_LIB_MATH $TOR_LIBEVENT_LIBS $TOR_OPENSSL_LIBS $TOR_SYSTEMD_LIBS $TOR_LIB_WS32 $TOR_LIB_GDI"
715 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
716 #if !defined(__clang__)
718 #endif])], have_clang=yes, have_clang=no)
720 if test x$enable_gcc_hardening != xno; then
721 CFLAGS="$CFLAGS -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2"
722 if test x$have_clang = xyes; then
723 TOR_CHECK_CFLAGS(-Qunused-arguments)
725 TOR_CHECK_CFLAGS(-fstack-protector-all, also_link)
726 AS_VAR_PUSHDEF([can_compile], [tor_cv_cflags_-fstack-protector-all])
727 AS_VAR_PUSHDEF([can_link], [tor_can_link_-fstack-protector-all])
728 m4_ifdef([AS_VAR_IF],[
729 AS_VAR_IF(can_compile, [yes],
730 AS_VAR_IF(can_link, [yes],
732 AC_MSG_ERROR([We tried to build with stack protection; it looks like your compiler supports it but your libc does not provide it. Are you missing libssp? (You can --disable-gcc-hardening to ignore this error.)]))
734 AS_VAR_POPDEF([can_link])
735 AS_VAR_POPDEF([can_compile])
736 TOR_CHECK_CFLAGS(-Wstack-protector)
737 TOR_CHECK_CFLAGS(-fwrapv)
738 TOR_CHECK_CFLAGS(--param ssp-buffer-size=1)
739 if test "$bwin32" = "false"; then
740 TOR_CHECK_CFLAGS(-fPIE)
741 TOR_CHECK_LDFLAGS(-pie, "$all_ldflags_for_check", "$all_libs_for_check")
745 if test x$enable_expensive_hardening = xyes ; then
746 TOR_CHECK_CFLAGS([-fsanitize=address])
747 TOR_CHECK_CFLAGS([-fsanitize=undefined])
748 TOR_CHECK_CFLAGS([-fno-omit-frame-pointer])
751 if test x$enable_linker_hardening != xno; then
752 TOR_CHECK_LDFLAGS(-z relro -z now, "$all_ldflags_for_check", "$all_libs_for_check")
755 # For backtrace support
756 TOR_CHECK_LDFLAGS(-rdynamic)
758 dnl ------------------------------------------------------
759 dnl Now see if we have a -fomit-frame-pointer compiler option.
761 saved_CFLAGS="$CFLAGS"
762 TOR_CHECK_CFLAGS(-fomit-frame-pointer)
763 F_OMIT_FRAME_POINTER=''
764 if test "$saved_CFLAGS" != "$CFLAGS"; then
765 if test x$enable_expensive_hardening != xyes ; then
766 F_OMIT_FRAME_POINTER='-fomit-frame-pointer'
769 CFLAGS="$saved_CFLAGS"
770 AC_SUBST(F_OMIT_FRAME_POINTER)
772 dnl ------------------------------------------------------
773 dnl If we are adding -fomit-frame-pointer (or if the compiler's doing it
774 dnl for us, as GCC 4.6 and later do at many optimization levels), then
775 dnl we should try to add -fasynchronous-unwind-tables so that our backtrace
777 TOR_CHECK_CFLAGS(-fasynchronous-unwind-tables)
779 dnl ============================================================
780 dnl Check for libseccomp
782 if test "x$enable_seccomp" != "xno"; then
783 AC_CHECK_HEADERS([seccomp.h])
784 AC_SEARCH_LIBS(seccomp_init, [seccomp])
787 dnl ============================================================
788 dnl Check for libscrypt
790 if test "x$enable_libscrypt" != "xno"; then
791 AC_CHECK_HEADERS([libscrypt.h])
792 AC_SEARCH_LIBS(libscrypt_scrypt, [scrypt])
795 dnl ============================================================
796 dnl We need an implementation of curve25519.
798 dnl set these defaults.
799 build_curve25519_donna=no
800 build_curve25519_donna_c64=no
801 use_curve25519_donna=no
802 use_curve25519_nacl=no
805 dnl The best choice is using curve25519-donna-c64, but that requires
807 AC_CACHE_CHECK([whether we can use curve25519-donna-c64],
808 tor_cv_can_use_curve25519_donna_c64,
810 [AC_LANG_PROGRAM([dnl
812 typedef unsigned uint128_t __attribute__((mode(TI)));
813 int func(uint64_t a, uint64_t b) {
814 uint128_t c = ((uint128_t)a) * b;
815 int ok = ((uint64_t)(c>>96)) == 522859 &&
816 (((uint64_t)(c>>64))&0xffffffffL) == 3604448702L &&
817 (((uint64_t)(c>>32))&0xffffffffL) == 2351960064L &&
818 (((uint64_t)(c))&0xffffffffL) == 0;
822 int ok = func( ((uint64_t)2000000000) * 1000000000,
823 ((uint64_t)1234567890) << 24);
826 [tor_cv_can_use_curve25519_donna_c64=yes],
827 [tor_cv_can_use_curve25519_donna_c64=no],
829 [AC_LANG_PROGRAM([dnl
831 typedef unsigned uint128_t __attribute__((mode(TI)));
832 int func(uint64_t a, uint64_t b) {
833 uint128_t c = ((uint128_t)a) * b;
834 int ok = ((uint64_t)(c>>96)) == 522859 &&
835 (((uint64_t)(c>>64))&0xffffffffL) == 3604448702L &&
836 (((uint64_t)(c>>32))&0xffffffffL) == 2351960064L &&
837 (((uint64_t)(c))&0xffffffffL) == 0;
841 int ok = func( ((uint64_t)2000000000) * 1000000000,
842 ((uint64_t)1234567890) << 24);
845 [tor_cv_can_use_curve25519_donna_c64=cross],
846 [tor_cv_can_use_curve25519_donna_c64=no])])])
848 AC_CHECK_HEADERS([crypto_scalarmult_curve25519.h \
849 nacl/crypto_scalarmult_curve25519.h])
851 AC_CACHE_CHECK([for nacl compiled with a fast curve25519 implementation],
852 tor_cv_can_use_curve25519_nacl,
853 [tor_saved_LIBS="$LIBS"
856 [AC_LANG_PROGRAM([dnl
857 #ifdef HAVE_CRYPTO_SCALARMULT_CURVE25519_H
858 #include <crypto_scalarmult_curve25519.h>
859 #elif defined(HAVE_NACL_CRYPTO_SCALARMULT_CURVE25519_H)
860 #include <nacl/crypto_scalarmult_curve25519.h>
862 #ifdef crypto_scalarmult_curve25519_ref_BYTES
863 #error Hey, this is the reference implementation! That's not fast.
866 unsigned char *a, *b, *c; crypto_scalarmult_curve25519(a,b,c);
867 ])], [tor_cv_can_use_curve25519_nacl=yes],
868 [tor_cv_can_use_curve25519_nacl=no])
869 LIBS="$tor_saved_LIBS" ])
871 dnl Okay, now we need to figure out which one to actually use. Fall back
872 dnl to curve25519-donna.c
874 if test x$tor_cv_can_use_curve25519_donna_c64 != xno; then
875 build_curve25519_donna_c64=yes
876 use_curve25519_donna=yes
877 elif test x$tor_cv_can_use_curve25519_nacl = xyes; then
878 use_curve25519_nacl=yes
879 CURVE25519_LIBS=-lnacl
881 build_curve25519_donna=yes
882 use_curve25519_donna=yes
885 if test x$use_curve25519_donna = xyes; then
886 AC_DEFINE(USE_CURVE25519_DONNA, 1,
887 [Defined if we should use an internal curve25519_donna{,_c64} implementation])
889 if test x$use_curve25519_nacl = xyes; then
890 AC_DEFINE(USE_CURVE25519_NACL, 1,
891 [Defined if we should use a curve25519 from nacl])
893 AM_CONDITIONAL(BUILD_CURVE25519_DONNA, test x$build_curve25519_donna = xyes)
894 AM_CONDITIONAL(BUILD_CURVE25519_DONNA_C64, test x$build_curve25519_donna_c64 = xyes)
895 AC_SUBST(CURVE25519_LIBS)
897 dnl Make sure to enable support for large off_t if available.
912 , , AC_MSG_WARN(Some headers were not found, compilation may fail. If compilation succeeds, please send your orconfig.h to the developers so we can fix this warning.))
914 dnl These headers are not essential
957 AC_CHECK_HEADERS(sys/param.h)
959 AC_CHECK_HEADERS(net/if.h, net_if_found=1, net_if_found=0,
960 [#ifdef HAVE_SYS_TYPES_H
961 #include <sys/types.h>
963 #ifdef HAVE_SYS_SOCKET_H
964 #include <sys/socket.h>
966 AC_CHECK_HEADERS(net/pfvar.h, net_pfvar_found=1, net_pfvar_found=0,
967 [#ifdef HAVE_SYS_TYPES_H
968 #include <sys/types.h>
970 #ifdef HAVE_SYS_SOCKET_H
971 #include <sys/socket.h>
976 #ifdef HAVE_NETINET_IN_H
977 #include <netinet/in.h>
980 AC_CHECK_HEADERS(linux/if.h,[],[],
982 #ifdef HAVE_SYS_SOCKET_H
983 #include <sys/socket.h>
987 AC_CHECK_HEADERS(linux/netfilter_ipv4.h,
988 linux_netfilter_ipv4=1, linux_netfilter_ipv4=0,
989 [#ifdef HAVE_SYS_TYPES_H
990 #include <sys/types.h>
992 #ifdef HAVE_SYS_SOCKET_H
993 #include <sys/socket.h>
998 #ifdef HAVE_LINUX_TYPES_H
999 #include <linux/types.h>
1001 #ifdef HAVE_NETINET_IN6_H
1002 #include <netinet/in6.h>
1004 #ifdef HAVE_NETINET_IN_H
1005 #include <netinet/in.h>
1008 AC_CHECK_HEADERS(linux/netfilter_ipv6/ip6_tables.h,
1009 linux_netfilter_ipv6_ip6_tables=1, linux_netfilter_ipv6_ip6_tables=0,
1010 [#ifdef HAVE_SYS_TYPES_H
1011 #include <sys/types.h>
1013 #ifdef HAVE_SYS_SOCKET_H
1014 #include <sys/socket.h>
1016 #ifdef HAVE_LIMITS_H
1019 #ifdef HAVE_LINUX_TYPES_H
1020 #include <linux/types.h>
1022 #ifdef HAVE_NETINET_IN6_H
1023 #include <netinet/in6.h>
1025 #ifdef HAVE_NETINET_IN_H
1026 #include <netinet/in.h>
1028 #ifdef HAVE_LINUX_IF_H
1029 #include <linux/if.h>
1032 if test x$transparent = xtrue ; then
1034 if test x$net_if_found = x1 && test x$net_pfvar_found = x1 ; then
1037 if test x$linux_netfilter_ipv4 = x1 ; then
1040 if test x$linux_netfilter_ipv6_ip6_tables = x1 ; then
1043 if test x$transparent_ok = x1 ; then
1044 AC_DEFINE(USE_TRANSPARENT, 1, "Define to enable transparent proxy support")
1046 *-*-openbsd* | *-*-bitrig*)
1047 AC_DEFINE(OPENBSD, 1, "Define to handle pf on OpenBSD properly") ;;
1050 AC_MSG_NOTICE([Transparent proxy support enabled, but missing headers.])
1054 AC_CHECK_MEMBERS([struct timeval.tv_sec], , ,
1055 [#ifdef HAVE_SYS_TYPES_H
1056 #include <sys/types.h>
1058 #ifdef HAVE_SYS_TIME_H
1059 #include <sys/time.h>
1062 dnl In case we aren't given a working stdint.h, we'll need to grow our own.
1065 AC_CHECK_SIZEOF(int8_t)
1066 AC_CHECK_SIZEOF(int16_t)
1067 AC_CHECK_SIZEOF(int32_t)
1068 AC_CHECK_SIZEOF(int64_t)
1069 AC_CHECK_SIZEOF(uint8_t)
1070 AC_CHECK_SIZEOF(uint16_t)
1071 AC_CHECK_SIZEOF(uint32_t)
1072 AC_CHECK_SIZEOF(uint64_t)
1073 AC_CHECK_SIZEOF(intptr_t)
1074 AC_CHECK_SIZEOF(uintptr_t)
1076 dnl AC_CHECK_TYPES([int8_t, int16_t, int32_t, int64_t, uint8_t, uint16_t, uint32_t, uint64_t, intptr_t, uintptr_t])
1078 AC_CHECK_SIZEOF(char)
1079 AC_CHECK_SIZEOF(short)
1080 AC_CHECK_SIZEOF(int)
1081 AC_CHECK_SIZEOF(long)
1082 AC_CHECK_SIZEOF(long long)
1083 AC_CHECK_SIZEOF(__int64)
1084 AC_CHECK_SIZEOF(void *)
1085 AC_CHECK_SIZEOF(time_t)
1086 AC_CHECK_SIZEOF(size_t)
1087 AC_CHECK_SIZEOF(pid_t)
1089 AC_CHECK_TYPES([uint, u_char, ssize_t])
1091 AC_PC_FROM_UCONTEXT([:])
1093 dnl used to include sockaddr_storage, but everybody has that.
1094 AC_CHECK_TYPES([struct in6_addr, struct sockaddr_in6, sa_family_t], , ,
1095 [#ifdef HAVE_SYS_TYPES_H
1096 #include <sys/types.h>
1098 #ifdef HAVE_NETINET_IN_H
1099 #include <netinet/in.h>
1101 #ifdef HAVE_NETINET_IN6_H
1102 #include <netinet/in6.h>
1104 #ifdef HAVE_SYS_SOCKET_H
1105 #include <sys/socket.h>
1108 #define _WIN32_WINNT 0x0501
1109 #define WIN32_LEAN_AND_MEAN
1110 #include <winsock2.h>
1111 #include <ws2tcpip.h>
1114 AC_CHECK_MEMBERS([struct in6_addr.s6_addr32, struct in6_addr.s6_addr16, struct sockaddr_in.sin_len, struct sockaddr_in6.sin6_len], , ,
1115 [#ifdef HAVE_SYS_TYPES_H
1116 #include <sys/types.h>
1118 #ifdef HAVE_NETINET_IN_H
1119 #include <netinet/in.h>
1121 #ifdef HAVE_NETINET_IN6_H
1122 #include <netinet/in6.h>
1124 #ifdef HAVE_SYS_SOCKET_H
1125 #include <sys/socket.h>
1128 #define _WIN32_WINNT 0x0501
1129 #define WIN32_LEAN_AND_MEAN
1130 #include <winsock2.h>
1131 #include <ws2tcpip.h>
1135 AC_CHECK_TYPES([rlim_t], , ,
1136 [#ifdef HAVE_SYS_TYPES_H
1137 #include <sys/types.h>
1139 #ifdef HAVE_SYS_TIME_H
1140 #include <sys/time.h>
1142 #ifdef HAVE_SYS_RESOURCE_H
1143 #include <sys/resource.h>
1147 AX_CHECK_SIGN([time_t],
1148 [ AC_DEFINE(TIME_T_IS_SIGNED, 1, [Define if time_t is signed]) ],
1150 #ifdef HAVE_SYS_TYPES_H
1151 #include <sys/types.h>
1153 #ifdef HAVE_SYS_TIME_H
1154 #include <sys/time.h>
1161 if test "$ax_cv_decl_time_t_signed" = no; then
1162 AC_MSG_WARN([You have an unsigned time_t; some things will probably break. Please tell the Tor developers about your interesting platform.])
1165 AX_CHECK_SIGN([size_t],
1166 [ tor_cv_size_t_signed=yes ],
1167 [ tor_cv_size_t_signed=no ], [
1168 #ifdef HAVE_SYS_TYPES_H
1169 #include <sys/types.h>
1173 if test "$ax_cv_decl_size_t_signed" = yes; then
1174 AC_MSG_ERROR([You have a signed size_t; that's grossly nonconformant.])
1177 AX_CHECK_SIGN([enum always],
1178 [ AC_DEFINE(ENUM_VALS_ARE_SIGNED, 1, [Define if enum is always signed]) ],
1180 enum always { AAA, BBB, CCC };
1183 AC_CHECK_SIZEOF(socklen_t, , [AC_INCLUDES_DEFAULT()
1184 #ifdef HAVE_SYS_SOCKET_H
1185 #include <sys/socket.h>
1189 # We want to make sure that we _don't_ have a cell_t defined, like IRIX does.
1191 AC_CHECK_SIZEOF(cell_t)
1193 # Now make sure that NULL can be represented as zero bytes.
1194 AC_CACHE_CHECK([whether memset(0) sets pointers to NULL], tor_cv_null_is_zero,
1195 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1196 [[#include <stdlib.h>
1199 #ifdef HAVE_STDDEF_H
1202 int main () { char *p1,*p2; p1=NULL; memset(&p2,0,sizeof(p2));
1203 return memcmp(&p1,&p2,sizeof(char*))?1:0; }]])],
1204 [tor_cv_null_is_zero=yes],
1205 [tor_cv_null_is_zero=no],
1206 [tor_cv_null_is_zero=cross])])
1208 if test "$tor_cv_null_is_zero" = cross ; then
1209 # Cross-compiling; let's hope that the target isn't raving mad.
1210 AC_MSG_NOTICE([Cross-compiling: we'll assume that NULL is represented as a sequence of 0-valued bytes.])
1213 if test "$tor_cv_null_is_zero" != no; then
1214 AC_DEFINE([NULL_REP_IS_ZERO_BYTES], 1,
1215 [Define to 1 iff memset(0) sets pointers to NULL])
1218 AC_CACHE_CHECK([whether memset(0) sets doubles to 0.0], tor_cv_dbl0_is_zero,
1219 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1220 [[#include <stdlib.h>
1223 #ifdef HAVE_STDDEF_H
1226 int main () { double d1,d2; d1=0; memset(&d2,0,sizeof(d2));
1227 return memcmp(&d1,&d2,sizeof(d1))?1:0; }]])],
1228 [tor_cv_dbl0_is_zero=yes],
1229 [tor_cv_dbl0_is_zero=no],
1230 [tor_cv_dbl0_is_zero=cross])])
1232 if test "$tor_cv_dbl0_is_zero" = cross ; then
1233 # Cross-compiling; let's hope that the target isn't raving mad.
1234 AC_MSG_NOTICE([Cross-compiling: we'll assume that 0.0 can be represented as a sequence of 0-valued bytes.])
1237 if test "$tor_cv_dbl0_is_zero" != no; then
1238 AC_DEFINE([DOUBLE_0_REP_IS_ZERO_BYTES], 1,
1239 [Define to 1 iff memset(0) sets doubles to 0.0])
1242 # And what happens when we malloc zero?
1243 AC_CACHE_CHECK([whether we can malloc(0) safely.], tor_cv_malloc_zero_works,
1244 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1245 [[#include <stdlib.h>
1248 #ifdef HAVE_STDDEF_H
1251 int main () { return malloc(0)?0:1; }]])],
1252 [tor_cv_malloc_zero_works=yes],
1253 [tor_cv_malloc_zero_works=no],
1254 [tor_cv_malloc_zero_works=cross])])
1256 if test "$tor_cv_malloc_zero_works" = cross; then
1257 # Cross-compiling; let's hope that the target isn't raving mad.
1258 AC_MSG_NOTICE([Cross-compiling: we'll assume that we need to check malloc() arguments for 0.])
1261 if test "$tor_cv_malloc_zero_works" = yes; then
1262 AC_DEFINE([MALLOC_ZERO_WORKS], 1,
1263 [Define to 1 iff malloc(0) returns a pointer])
1266 # whether we seem to be in a 2s-complement world.
1267 AC_CACHE_CHECK([whether we are using 2s-complement arithmetic], tor_cv_twos_complement,
1268 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1269 [[int main () { int problem = ((-99) != (~99)+1);
1270 return problem ? 1 : 0; }]])],
1271 [tor_cv_twos_complement=yes],
1272 [tor_cv_twos_complement=no],
1273 [tor_cv_twos_complement=cross])])
1275 if test "$tor_cv_twos_complement" = cross ; then
1276 # Cross-compiling; let's hope that the target isn't raving mad.
1277 AC_MSG_NOTICE([Cross-compiling: we'll assume that negative integers are represented with two's complement.])
1280 if test "$tor_cv_twos_complement" != no ; then
1281 AC_DEFINE([USING_TWOS_COMPLEMENT], 1,
1282 [Define to 1 iff we represent negative integers with two's complement])
1285 # What does shifting a negative value do?
1286 AC_CACHE_CHECK([whether right-shift on negative values does sign-extension], tor_cv_sign_extend,
1287 [AC_RUN_IFELSE([AC_LANG_SOURCE(
1288 [[int main () { int okay = (-60 >> 8) == -1; return okay ? 0 : 1; }]])],
1289 [tor_cv_sign_extend=yes],
1290 [tor_cv_sign_extend=no],
1291 [tor_cv_sign_extend=cross])])
1293 if test "$tor_cv_sign_extend" = cross ; then
1294 # Cross-compiling; let's hope that the target isn't raving mad.
1295 AC_MSG_NOTICE([Cross-compiling: we'll assume that right-shifting negative integers causes sign-extension])
1298 if test "$tor_cv_sign_extend" != no ; then
1299 AC_DEFINE([RSHIFT_DOES_SIGN_EXTEND], 1,
1300 [Define to 1 iff right-shifting a negative value performs sign-extension])
1303 # Whether we should use the dmalloc memory allocation debugging library.
1304 AC_MSG_CHECKING(whether to use dmalloc (debug memory allocation library))
1305 AC_ARG_WITH(dmalloc,
1306 AS_HELP_STRING(--with-dmalloc, [use debug memory allocation library]),
1307 [if [[ "$withval" = "yes" ]]; then
1313 fi], [ dmalloc=0; AC_MSG_RESULT(no) ]
1316 if [[ $dmalloc -eq 1 ]]; then
1317 AC_CHECK_HEADERS(dmalloc.h, , AC_MSG_ERROR(dmalloc header file not found. Do you have the development files for dmalloc installed?))
1318 AC_SEARCH_LIBS(dmalloc_malloc, [dmallocth dmalloc], , AC_MSG_ERROR(Libdmalloc library not found. If you enable it you better have it installed.))
1319 AC_DEFINE(USE_DMALLOC, 1, [Debug memory allocation library])
1320 AC_CHECK_FUNCS(dmalloc_strdup dmalloc_strndup)
1323 AC_ARG_WITH(tcmalloc,
1324 AS_HELP_STRING(--with-tcmalloc, [use tcmalloc memory allocation library]),
1325 [ tcmalloc=yes ], [ tcmalloc=no ])
1327 if test x$tcmalloc = xyes ; then
1328 LDFLAGS="-ltcmalloc $LDFLAGS"
1331 using_custom_malloc=no
1332 if test x$enable_openbsd_malloc = xyes ; then
1333 using_custom_malloc=yes
1335 if test x$tcmalloc = xyes ; then
1336 using_custom_malloc=yes
1338 if test $using_custom_malloc = no ; then
1339 AC_CHECK_FUNCS(mallinfo)
1342 # By default, we're going to assume we don't have mlockall()
1343 # bionic and other platforms have various broken mlockall subsystems.
1344 # Some systems don't have a working mlockall, some aren't linkable,
1345 # and some have it but don't declare it.
1346 AC_CHECK_FUNCS(mlockall)
1347 AC_CHECK_DECLS([mlockall], , , [
1348 #ifdef HAVE_SYS_MMAN_H
1349 #include <sys/mman.h>
1352 # Allow user to specify an alternate syslog facility
1353 AC_ARG_WITH(syslog-facility,
1354 AS_HELP_STRING(--with-syslog-facility=LOG, [syslog facility to use (default=LOG_DAEMON)]),
1355 syslog_facility="$withval", syslog_facility="LOG_DAEMON")
1356 AC_DEFINE_UNQUOTED(LOGFACILITY,$syslog_facility,[name of the syslog facility])
1357 AC_SUBST(LOGFACILITY)
1359 # Check if we have getresuid and getresgid
1360 AC_CHECK_FUNCS(getresuid getresgid)
1362 # Check for gethostbyname_r in all its glorious incompatible versions.
1363 # (This logic is based on that in Python's configure.in)
1364 AH_TEMPLATE(HAVE_GETHOSTBYNAME_R,
1365 [Define this if you have any gethostbyname_r()])
1367 AC_CHECK_FUNC(gethostbyname_r, [
1368 AC_MSG_CHECKING([how many arguments gethostbyname_r() wants])
1370 CFLAGS="$CFLAGS $MY_CPPFLAGS $MY_THREAD_CPPFLAGS $MY_CFLAGS"
1371 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([
1375 struct hostent *h1, *h2;
1377 (void)gethostbyname_r(cp1,h1,cp2,i1,&h2,&i2);
1379 AC_DEFINE(HAVE_GETHOSTBYNAME_R)
1380 AC_DEFINE(HAVE_GETHOSTBYNAME_R_6_ARG, 1,
1381 [Define this if gethostbyname_r takes 6 arguments])
1390 (void)gethostbyname_r(cp1,h1,cp2,i1,&i2);
1392 AC_DEFINE(HAVE_GETHOSTBYNAME_R)
1393 AC_DEFINE(HAVE_GETHOSTBYNAME_R_5_ARG, 1,
1394 [Define this if gethostbyname_r takes 5 arguments])
1402 struct hostent_data hd;
1403 (void) gethostbyname_r(cp1,h1,&hd);
1405 AC_DEFINE(HAVE_GETHOSTBYNAME_R)
1406 AC_DEFINE(HAVE_GETHOSTBYNAME_R_3_ARG, 1,
1407 [Define this if gethostbyname_r takes 3 arguments])
1417 AC_CACHE_CHECK([whether the C compiler supports __func__],
1418 tor_cv_have_func_macro,
1419 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
1421 int main(int c, char **v) { puts(__func__); }])],
1422 tor_cv_have_func_macro=yes,
1423 tor_cv_have_func_macro=no))
1425 AC_CACHE_CHECK([whether the C compiler supports __FUNC__],
1426 tor_cv_have_FUNC_macro,
1427 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
1429 int main(int c, char **v) { puts(__FUNC__); }])],
1430 tor_cv_have_FUNC_macro=yes,
1431 tor_cv_have_FUNC_macro=no))
1433 AC_CACHE_CHECK([whether the C compiler supports __FUNCTION__],
1434 tor_cv_have_FUNCTION_macro,
1435 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
1437 int main(int c, char **v) { puts(__FUNCTION__); }])],
1438 tor_cv_have_FUNCTION_macro=yes,
1439 tor_cv_have_FUNCTION_macro=no))
1441 AC_CACHE_CHECK([whether we have extern char **environ already declared],
1442 tor_cv_have_environ_declared,
1443 AC_COMPILE_IFELSE([AC_LANG_SOURCE([
1444 /* We define _GNU_SOURCE here because it is also defined in compat.c.
1445 * Without it environ doesn't get declared. */
1447 #ifdef HAVE_UNISTD_H
1451 int main(int c, char **v) { char **t = environ; }])],
1452 tor_cv_have_environ_declared=yes,
1453 tor_cv_have_environ_declared=no))
1455 if test "$tor_cv_have_func_macro" = 'yes'; then
1456 AC_DEFINE(HAVE_MACRO__func__, 1, [Defined if the compiler supports __func__])
1459 if test "$tor_cv_have_FUNC_macro" = 'yes'; then
1460 AC_DEFINE(HAVE_MACRO__FUNC__, 1, [Defined if the compiler supports __FUNC__])
1463 if test "$tor_cv_have_FUNCTION_macro" = 'yes'; then
1464 AC_DEFINE(HAVE_MACRO__FUNCTION__, 1,
1465 [Defined if the compiler supports __FUNCTION__])
1468 if test "$tor_cv_have_environ_declared" = 'yes'; then
1469 AC_DEFINE(HAVE_EXTERN_ENVIRON_DECLARED, 1,
1470 [Defined if we have extern char **environ already declared])
1473 # $prefix stores the value of the --prefix command line option, or
1474 # NONE if the option wasn't set. In the case that it wasn't set, make
1475 # it be the default, so that we can use it to expand directories now.
1476 if test "x$prefix" = "xNONE"; then
1477 prefix=$ac_default_prefix
1480 # and similarly for $exec_prefix
1481 if test "x$exec_prefix" = "xNONE"; then
1485 if test "x$BUILDDIR" = "x"; then
1489 AH_TEMPLATE([BUILDDIR],[tor's build directory])
1490 AC_DEFINE_UNQUOTED(BUILDDIR,"$BUILDDIR")
1492 if test "x$CONFDIR" = "x"; then
1493 CONFDIR=`eval echo $sysconfdir/tor`
1496 AH_TEMPLATE([CONFDIR],[tor's configuration directory])
1497 AC_DEFINE_UNQUOTED(CONFDIR,"$CONFDIR")
1499 BINDIR=`eval echo $bindir`
1501 LOCALSTATEDIR=`eval echo $localstatedir`
1502 AC_SUBST(LOCALSTATEDIR)
1504 if test "$bwin32" = true; then
1505 # Test if the linker supports the --nxcompat and --dynamicbase options
1507 save_LDFLAGS="$LDFLAGS"
1508 LDFLAGS="-Wl,--nxcompat -Wl,--dynamicbase"
1509 AC_MSG_CHECKING([whether the linker supports DllCharacteristics])
1510 AC_LINK_IFELSE([AC_LANG_PROGRAM([])],
1511 [AC_MSG_RESULT([yes])]
1512 [save_LDFLAGS="$save_LDFLAGS $LDFLAGS"],
1513 [AC_MSG_RESULT([no])]
1515 LDFLAGS="$save_LDFLAGS"
1518 # Set CFLAGS _after_ all the above checks, since our warnings are stricter
1519 # than autoconf's macros like.
1520 if test "$GCC" = yes; then
1521 # Disable GCC's strict aliasing checks. They are an hours-to-debug
1522 # accident waiting to happen.
1523 CFLAGS="$CFLAGS -Wall -fno-strict-aliasing"
1525 # Override optimization level for non-gcc compilers
1527 enable_gcc_warnings=no
1528 enable_gcc_warnings_advisory=no
1531 # OS X Lion started deprecating the system openssl. Let's just disable
1532 # all deprecation warnings on OS X. Also, to potentially make the binary
1533 # a little smaller, let's enable dead_strip.
1537 CFLAGS="$CFLAGS -Wno-deprecated-declarations"
1538 LDFLAGS="$LDFLAGS -dead_strip" ;;
1541 # Add some more warnings which we use in development but not in the
1542 # released versions. (Some relevant gcc versions can't handle these.)
1543 if test x$enable_gcc_warnings = xyes || test x$enable_gcc_warnings_advisory = xyes; then
1545 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
1546 #if !defined(__GNUC__) || (__GNUC__ < 4)
1548 #endif])], have_gcc4=yes, have_gcc4=no)
1550 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
1551 #if !defined(__GNUC__) || (__GNUC__ < 4) || (__GNUC__ == 4 && __GNUC_MINOR__ < 2)
1553 #endif])], have_gcc42=yes, have_gcc42=no)
1555 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
1556 #if !defined(__GNUC__) || (__GNUC__ < 4) || (__GNUC__ == 4 && __GNUC_MINOR__ < 3)
1558 #endif])], have_gcc43=yes, have_gcc43=no)
1560 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
1561 #if !defined(__GNUC__) || (__GNUC__ < 4) || (__GNUC__ == 4 && __GNUC_MINOR__ < 6)
1563 #endif])], have_gcc46=yes, have_gcc46=no)
1566 save_CFLAGS="$CFLAGS"
1567 CFLAGS="$CFLAGS -Wshorten-64-to-32"
1568 AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [])], have_shorten64_flag=yes,
1569 have_shorten64_flag=no)
1570 CFLAGS="$save_CFLAGS"
1573 *-*-openbsd* | *-*-bitrig*)
1574 # Some OpenBSD versions (like 4.8) have -Wsystem-headers by default.
1575 # That's fine, except that the headers don't pass -Wredundant-decls.
1576 # Therefore, let's disable -Wsystem-headers when we're building
1577 # with maximal warnings on OpenBSD.
1578 CFLAGS="$CFLAGS -Wno-system-headers" ;;
1581 CFLAGS="$CFLAGS -W -Wfloat-equal -Wundef -Wpointer-arith"
1582 CFLAGS="$CFLAGS -Wstrict-prototypes -Wmissing-prototypes -Wwrite-strings"
1583 CFLAGS="$CFLAGS -Wredundant-decls -Wchar-subscripts -Wcomment -Wformat=2"
1584 CFLAGS="$CFLAGS -Wwrite-strings -Wmissing-declarations -Wredundant-decls"
1585 CFLAGS="$CFLAGS -Wnested-externs -Wbad-function-cast -Wswitch-enum"
1587 if test x$enable_gcc_warnings = xyes; then
1588 CFLAGS="$CFLAGS -Werror"
1591 # Disabled, so we can use mallinfo(): -Waggregate-return
1593 if test x$have_gcc4 = xyes ; then
1594 # These warnings break gcc 3.3.5 and work on gcc 4.0.2
1595 CFLAGS="$CFLAGS -Winit-self -Wmissing-field-initializers -Wold-style-definition"
1598 if test x$have_gcc42 = xyes ; then
1599 # These warnings break gcc 4.0.2 and work on gcc 4.2
1600 # XXXX020 See if any of these work with earlier versions.
1601 CFLAGS="$CFLAGS -Waddress -Wmissing-noreturn -Wstrict-overflow=1"
1603 # We used to use -Wstrict-overflow=5, but that breaks us heavily under 4.3.
1606 if test x$have_gcc42 = xyes && test x$have_clang = xno; then
1607 # These warnings break gcc 4.0.2 and clang, but work on gcc 4.2
1608 CFLAGS="$CFLAGS -Wnormalized=id -Woverride-init"
1611 if test x$have_gcc43 = xyes ; then
1612 # These warnings break gcc 4.2 and work on gcc 4.3
1613 # XXXX020 See if any of these work with earlier versions.
1614 CFLAGS="$CFLAGS -Wextra -Warray-bounds"
1617 if test x$have_gcc46 = xyes ; then
1618 # This warning was added in gcc 4.3, but it appears to generate
1619 # spurious warnings in gcc 4.4. I don't know if it works in 4.5.
1620 CFLAGS="$CFLAGS -Wlogical-op"
1623 if test x$have_shorten64_flag = xyes ; then
1624 CFLAGS="$CFLAGS -Wshorten-64-to-32"
1629 ##This will break the world on some 64-bit architectures
1630 # CFLAGS="$CFLAGS -Winline"
1633 if test "$enable_coverage" = yes && test "$have_clang" = "no"; then
1636 AC_MSG_WARN([Tried to enable coverage on OSX without using the clang compiler. This might not work! If coverage fails, use CC=clang when configuring with --enable-profiling.])
1640 CPPFLAGS="$CPPFLAGS $TOR_CPPFLAGS_libevent $TOR_CPPFLAGS_openssl $TOR_CPPFLAGS_zlib"
1645 contrib/dist/suse/tor.sh
1646 contrib/operator-tools/tor.logrotate
1649 contrib/dist/tor.service
1650 src/config/torrc.sample
1651 src/config/torrc.minimal
1652 scripts/maint/checkOptionDocs.pl
1653 scripts/maint/updateVersions.pl
1656 if test x$asciidoc = xtrue && test "$ASCIIDOC" = "none" ; then
1657 regular_mans="doc/tor doc/tor-gencert doc/tor-resolve doc/torify"
1658 for file in $regular_mans ; do
1659 if ! [[ -f "$srcdir/$file.1.in" ]] || ! [[ -f "$srcdir/$file.html.in" ]] ; then
1660 echo "==================================";
1662 echo "Building Tor has failed since manpages cannot be built.";
1664 echo "You need asciidoc installed to be able to build the manpages.";
1665 echo "To build without manpages, use the --disable-asciidoc argument";
1666 echo "when calling configure.";
1668 echo "==================================";