configure.ac 76 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081208220832084208520862087208820892090209120922093209420952096209720982099210021012102210321042105210621072108210921102111211221132114211521162117211821192120212121222123212421252126212721282129213021312132213321342135213621372138213921402141214221432144214521462147214821492150215121522153215421552156215721582159216021612162216321642165216621672168216921702171217221732174217521762177217821792180218121822183218421852186218721882189219021912192219321942195219621972198219922002201220222032204220522062207220822092210221122122213221422152216221722182219222022212222222322242225222622272228222922302231223222332234223522362237223822392240224122422243224422452246224722482249225022512252225322542255225622572258225922602261226222632264226522662267226822692270227122722273227422752276227722782279228022812282228322842285228622872288228922902291229222932294229522962297229822992300230123022303230423052306230723082309231023112312231323142315231623172318231923202321232223232324232523262327232823292330233123322333233423352336233723382339234023412342234323442345234623472348234923502351235223532354235523562357235823592360236123622363236423652366236723682369237023712372237323742375237623772378237923802381238223832384238523862387238823892390239123922393239423952396239723982399240024012402240324042405240624072408240924102411241224132414241524162417241824192420242124222423242424252426242724282429243024312432243324342435243624372438243924402441244224432444244524462447244824492450245124522453
  1. dnl Copyright (c) 2001-2004, Roger Dingledine
  2. dnl Copyright (c) 2004-2006, Roger Dingledine, Nick Mathewson
  3. dnl Copyright (c) 2007-2018, The Tor Project, Inc.
  4. dnl See LICENSE for licensing information
  5. AC_PREREQ([2.63])
  6. AC_INIT([tor],[0.3.5.0-alpha-dev])
  7. AC_CONFIG_SRCDIR([src/app/main/tor_main.c])
  8. AC_CONFIG_MACRO_DIR([m4])
  9. # "foreign" means we don't follow GNU package layout standards
  10. # "1.11" means we require automake version 1.11 or newer
  11. # "subdir-objects" means put .o files in the same directory as the .c files
  12. AM_INIT_AUTOMAKE([foreign 1.11 subdir-objects -Wall -Werror])
  13. m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])])
  14. AC_CONFIG_HEADERS([orconfig.h])
  15. AC_USE_SYSTEM_EXTENSIONS
  16. AC_CANONICAL_HOST
  17. PKG_PROG_PKG_CONFIG
  18. AC_ARG_ENABLE(openbsd-malloc,
  19. AS_HELP_STRING(--enable-openbsd-malloc, [use malloc code from OpenBSD. Linux only. Deprecated: see --with-malloc]))
  20. AC_ARG_ENABLE(static-openssl,
  21. AS_HELP_STRING(--enable-static-openssl, [link against a static openssl library. Requires --with-openssl-dir]))
  22. AC_ARG_ENABLE(static-libevent,
  23. AS_HELP_STRING(--enable-static-libevent, [link against a static libevent library. Requires --with-libevent-dir]))
  24. AC_ARG_ENABLE(static-zlib,
  25. AS_HELP_STRING(--enable-static-zlib, [link against a static zlib library. Requires --with-zlib-dir]))
  26. AC_ARG_ENABLE(static-tor,
  27. AS_HELP_STRING(--enable-static-tor, [create an entirely static Tor binary. Requires --with-openssl-dir and --with-libevent-dir and --with-zlib-dir]))
  28. AC_ARG_ENABLE(unittests,
  29. AS_HELP_STRING(--disable-unittests, [don't build unit tests for Tor. Risky!]))
  30. AC_ARG_ENABLE(coverage,
  31. AS_HELP_STRING(--enable-coverage, [enable coverage support in the unit-test build]))
  32. AC_ARG_ENABLE(asserts-in-tests,
  33. AS_HELP_STRING(--disable-asserts-in-tests, [disable tor_assert() calls in the unit tests, for branch coverage]))
  34. AC_ARG_ENABLE(system-torrc,
  35. AS_HELP_STRING(--disable-system-torrc, [don't look for a system-wide torrc file]))
  36. AC_ARG_ENABLE(libfuzzer,
  37. AS_HELP_STRING(--enable-libfuzzer, [build extra fuzzers based on 'libfuzzer']))
  38. AC_ARG_ENABLE(oss-fuzz,
  39. AS_HELP_STRING(--enable-oss-fuzz, [build extra fuzzers based on 'oss-fuzz' environment]))
  40. AC_ARG_ENABLE(memory-sentinels,
  41. AS_HELP_STRING(--disable-memory-sentinels, [disable code that tries to prevent some kinds of memory access bugs. For fuzzing only.]))
  42. AC_ARG_ENABLE(rust,
  43. AS_HELP_STRING(--enable-rust, [enable rust integration]))
  44. AC_ARG_ENABLE(cargo-online-mode,
  45. AS_HELP_STRING(--enable-cargo-online-mode, [Allow cargo to make network requests to fetch crates. For builds with rust only.]))
  46. AC_ARG_ENABLE(restart-debugging,
  47. AS_HELP_STRING(--enable-restart-debugging, [Build Tor with support for debugging in-process restart. Developers only.]))
  48. AC_ARG_ENABLE(zstd-advanced-apis,
  49. AS_HELP_STRING(--disable-zstd-advanced-apis, [Build without support for zstd's "static-only" APIs.]))
  50. AC_ARG_ENABLE(nss,
  51. AS_HELP_STRING(--enable-nss, [Use Mozilla's NSS TLS library. (EXPERIMENTAL)]))
  52. if test "x$enable_coverage" != "xyes" -a "x$enable_asserts_in_tests" = "xno" ; then
  53. AC_MSG_ERROR([Can't disable assertions outside of coverage build])
  54. fi
  55. AM_CONDITIONAL(UNITTESTS_ENABLED, test "x$enable_unittests" != "xno")
  56. AM_CONDITIONAL(COVERAGE_ENABLED, test "x$enable_coverage" = "xyes")
  57. AM_CONDITIONAL(DISABLE_ASSERTS_IN_UNIT_TESTS, test "x$enable_asserts_in_tests" = "xno")
  58. AM_CONDITIONAL(LIBFUZZER_ENABLED, test "x$enable_libfuzzer" = "xyes")
  59. AM_CONDITIONAL(OSS_FUZZ_ENABLED, test "x$enable_oss_fuzz" = "xyes")
  60. AM_CONDITIONAL(USE_RUST, test "x$enable_rust" = "xyes")
  61. AM_CONDITIONAL(USE_NSS, test "x$enable_nss" = "xyes")
  62. AM_CONDITIONAL(USE_OPENSSL, test "x$enable_nss" != "xyes")
  63. if test "x$enable_nss" = "xyes"; then
  64. AC_DEFINE(ENABLE_NSS, 1,
  65. [Defined if we're building with NSS.])
  66. else
  67. AC_DEFINE(ENABLE_OPENSSL, 1,
  68. [Defined if we're building with OpenSSL or LibreSSL])
  69. fi
  70. if test "$enable_static_tor" = "yes"; then
  71. enable_static_libevent="yes";
  72. enable_static_openssl="yes";
  73. enable_static_zlib="yes";
  74. CFLAGS="$CFLAGS -static"
  75. fi
  76. if test "$enable_system_torrc" = "no"; then
  77. AC_DEFINE(DISABLE_SYSTEM_TORRC, 1,
  78. [Defined if we're not going to look for a torrc in SYSCONF])
  79. fi
  80. if test "$enable_memory_sentinels" = "no"; then
  81. AC_DEFINE(DISABLE_MEMORY_SENTINELS, 1,
  82. [Defined if we're turning off memory safety code to look for bugs])
  83. fi
  84. AC_ARG_ENABLE(asciidoc,
  85. AS_HELP_STRING(--disable-asciidoc, [don't use asciidoc (disables building of manpages)]),
  86. [case "${enableval}" in
  87. "yes") asciidoc=true ;;
  88. "no") asciidoc=false ;;
  89. *) AC_MSG_ERROR(bad value for --disable-asciidoc) ;;
  90. esac], [asciidoc=true])
  91. # systemd notify support
  92. AC_ARG_ENABLE(systemd,
  93. AS_HELP_STRING(--enable-systemd, [enable systemd notification support]),
  94. [case "${enableval}" in
  95. "yes") systemd=true ;;
  96. "no") systemd=false ;;
  97. * ) AC_MSG_ERROR(bad value for --enable-systemd) ;;
  98. esac], [systemd=auto])
  99. if test "$enable_restart_debugging" = "yes"; then
  100. AC_DEFINE(ENABLE_RESTART_DEBUGGING, 1,
  101. [Defined if we're building with support for in-process restart debugging.])
  102. fi
  103. if test "$enable_zstd_advanced_apis" != "no"; then
  104. AC_DEFINE(ENABLE_ZSTD_ADVANCED_APIS, 1,
  105. [Defined if we're going to try to use zstd's "static-only" APIs.])
  106. fi
  107. # systemd support
  108. if test "x$enable_systemd" = "xno"; then
  109. have_systemd=no;
  110. else
  111. PKG_CHECK_MODULES(SYSTEMD,
  112. [libsystemd-daemon],
  113. have_systemd=yes,
  114. have_systemd=no)
  115. if test "x$have_systemd" = "xno"; then
  116. AC_MSG_NOTICE([Okay, checking for systemd a different way...])
  117. PKG_CHECK_MODULES(SYSTEMD,
  118. [libsystemd],
  119. have_systemd=yes,
  120. have_systemd=no)
  121. fi
  122. fi
  123. if test "x$have_systemd" = "xyes"; then
  124. AC_DEFINE(HAVE_SYSTEMD,1,[Have systemd])
  125. TOR_SYSTEMD_CFLAGS="${SYSTEMD_CFLAGS}"
  126. TOR_SYSTEMD_LIBS="${SYSTEMD_LIBS}"
  127. PKG_CHECK_MODULES(LIBSYSTEMD209, [libsystemd >= 209],
  128. [AC_DEFINE(HAVE_SYSTEMD_209,1,[Have systemd v209 or more])], [])
  129. fi
  130. AC_SUBST(TOR_SYSTEMD_CFLAGS)
  131. AC_SUBST(TOR_SYSTEMD_LIBS)
  132. if test "x$enable_systemd" = "xyes" -a "x$have_systemd" != "xyes" ; then
  133. AC_MSG_ERROR([Explicitly requested systemd support, but systemd not found])
  134. fi
  135. case "$host" in
  136. *-*-solaris* )
  137. AC_DEFINE(_REENTRANT, 1, [Define on some platforms to activate x_r() functions in time.h])
  138. ;;
  139. esac
  140. AC_ARG_ENABLE(gcc-warnings,
  141. AS_HELP_STRING(--enable-gcc-warnings, [deprecated alias for enable-fatal-warnings]))
  142. AC_ARG_ENABLE(fatal-warnings,
  143. AS_HELP_STRING(--enable-fatal-warnings, [tell the compiler to treat all warnings as errors.]))
  144. AC_ARG_ENABLE(gcc-warnings-advisory,
  145. AS_HELP_STRING(--disable-gcc-warnings-advisory, [disable the regular verbose warnings]))
  146. dnl Others suggest '/gs /safeseh /nxcompat /dynamicbase' for non-gcc on Windows
  147. AC_ARG_ENABLE(gcc-hardening,
  148. AS_HELP_STRING(--disable-gcc-hardening, [disable compiler security checks]))
  149. dnl Deprecated --enable-expensive-hardening but keep it for now for backward compat.
  150. AC_ARG_ENABLE(expensive-hardening,
  151. AS_HELP_STRING(--enable-expensive-hardening, [enable more fragile and expensive compiler hardening; makes Tor slower]))
  152. AC_ARG_ENABLE(fragile-hardening,
  153. AS_HELP_STRING(--enable-fragile-hardening, [enable more fragile and expensive compiler hardening; makes Tor slower]))
  154. if test "x$enable_expensive_hardening" = "xyes" || test "x$enable_fragile_hardening" = "xyes"; then
  155. fragile_hardening="yes"
  156. AC_DEFINE(DEBUG_SMARTLIST, 1, [Enable smartlist debugging])
  157. fi
  158. dnl Linker hardening options
  159. dnl Currently these options are ELF specific - you can't use this with MacOSX
  160. AC_ARG_ENABLE(linker-hardening,
  161. AS_HELP_STRING(--disable-linker-hardening, [disable linker security fixups]))
  162. AC_ARG_ENABLE(local-appdata,
  163. AS_HELP_STRING(--enable-local-appdata, [default to host local application data paths on Windows]))
  164. if test "$enable_local_appdata" = "yes"; then
  165. AC_DEFINE(ENABLE_LOCAL_APPDATA, 1,
  166. [Defined if we default to host local appdata paths on Windows])
  167. fi
  168. AC_ARG_ENABLE(tool-name-check,
  169. AS_HELP_STRING(--disable-tool-name-check, [check for sanely named toolchain when cross-compiling]))
  170. AC_ARG_ENABLE(seccomp,
  171. AS_HELP_STRING(--disable-seccomp, [do not attempt to use libseccomp]))
  172. AC_ARG_ENABLE(libscrypt,
  173. AS_HELP_STRING(--disable-libscrypt, [do not attempt to use libscrypt]))
  174. dnl Enable event tracing which are transformed to debug log statement.
  175. AC_ARG_ENABLE(event-tracing-debug,
  176. AS_HELP_STRING(--enable-event-tracing-debug, [build with event tracing to debug log]))
  177. AM_CONDITIONAL([USE_EVENT_TRACING_DEBUG], [test "x$enable_event_tracing_debug" = "xyes"])
  178. if test x$enable_event_tracing_debug = xyes; then
  179. AC_DEFINE([USE_EVENT_TRACING_DEBUG], [1], [Tracing framework to log debug])
  180. AC_DEFINE([TOR_EVENT_TRACING_ENABLED], [1], [Compile the event tracing instrumentation])
  181. fi
  182. dnl Enable Android only features.
  183. AC_ARG_ENABLE(android,
  184. AS_HELP_STRING(--enable-android, [build with Android features enabled]))
  185. AM_CONDITIONAL([USE_ANDROID], [test "x$enable_android" = "xyes"])
  186. if test "x$enable_android" = "xyes"; then
  187. AC_DEFINE([USE_ANDROID], [1], [Compile with Android specific features enabled])
  188. dnl Check if the Android log library is available.
  189. AC_CHECK_HEADERS([android/log.h])
  190. AC_SEARCH_LIBS(__android_log_write, [log])
  191. fi
  192. dnl ---
  193. dnl Tor modules options. These options are namespaced with --disable-module-XXX
  194. dnl ---
  195. dnl All our modules.
  196. m4_define(MODULES, dirauth)
  197. dnl Directory Authority module.
  198. AC_ARG_ENABLE([module-dirauth],
  199. AS_HELP_STRING([--disable-module-dirauth],
  200. [Do not build tor with the dirauth module]),
  201. [], dnl Action if-given
  202. AC_DEFINE([HAVE_MODULE_DIRAUTH], [1],
  203. [Compile with Directory Authority feature support]))
  204. AM_CONDITIONAL(BUILD_MODULE_DIRAUTH, [test "x$enable_module_dirauth" != "xno"])
  205. dnl Helper variables.
  206. TOR_MODULES_ALL_ENABLED=
  207. AC_DEFUN([ADD_MODULE], [
  208. MODULE=m4_toupper($1)
  209. TOR_MODULES_ALL_ENABLED="${TOR_MODULES_ALL_ENABLED} -DHAVE_MODULE_${MODULE}=1"
  210. ])
  211. m4_foreach_w([module], MODULES, [ADD_MODULE([module])])
  212. AC_SUBST(TOR_MODULES_ALL_ENABLED)
  213. dnl check for the correct "ar" when cross-compiling.
  214. dnl (AM_PROG_AR was new in automake 1.11.2, which we do not yet require,
  215. dnl so kludge up a replacement for the case where it isn't there yet.)
  216. m4_ifdef([AM_PROG_AR],
  217. [AM_PROG_AR],
  218. [AN_MAKEVAR([AR], [AC_PROG_AR])
  219. AN_PROGRAM([ar], [AC_PROG_AR])
  220. AC_DEFUN([AC_PROG_AR], [AC_CHECK_TOOL([AR], [ar], [:])])
  221. AC_PROG_AR])
  222. dnl Check whether the above macro has settled for a simply named tool even
  223. dnl though we're cross compiling. We must do this before running AC_PROG_CC,
  224. dnl because that will find any cc on the system, not only the cross-compiler,
  225. dnl and then verify that a binary built with this compiler runs on the
  226. dnl build system. It will then come to the false conclusion that we're not
  227. dnl cross-compiling.
  228. if test "x$enable_tool_name_check" != "xno"; then
  229. if test "x$ac_tool_warned" = "xyes"; then
  230. AC_MSG_ERROR([We are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
  231. elif test "x$ac_ct_AR" != "x" -a "x$cross_compiling" = "xmaybe"; then
  232. AC_MSG_ERROR([We think we are cross compiling but could not find a properly named toolchain. Do you have your cross-compiling toolchain in PATH? (You can --disable-tool-name-check to ignore this.)])
  233. fi
  234. fi
  235. AC_PROG_CC
  236. AC_PROG_CPP
  237. AC_PROG_MAKE_SET
  238. AC_PROG_RANLIB
  239. AC_PROG_SED
  240. AC_ARG_VAR([PERL], [path to Perl binary])
  241. AC_CHECK_PROGS([PERL], [perl])
  242. AM_CONDITIONAL(USE_PERL, [test "x$ac_cv_prog_PERL" != "x"])
  243. dnl check for asciidoc and a2x
  244. AC_PATH_PROG([ASCIIDOC], [asciidoc], none)
  245. AC_PATH_PROGS([A2X], [a2x a2x.py], none)
  246. AM_CONDITIONAL(USE_ASCIIDOC, test "x$asciidoc" = "xtrue")
  247. AM_PROG_CC_C_O
  248. AC_PROG_CC_C99
  249. AC_ARG_VAR([PYTHON], [path to Python binary])
  250. AC_CHECK_PROGS(PYTHON, [ \
  251. python3 \
  252. python3.8 python3.7 python3.6 python3.5 python3.4 \
  253. python \
  254. python2 python2.7])
  255. if test "x$PYTHON" = "x"; then
  256. AC_MSG_WARN([Python unavailable; some tests will not be run.])
  257. fi
  258. AM_CONDITIONAL(USEPYTHON, [test "x$PYTHON" != "x"])
  259. dnl List all external rust crates we depend on here. Include the version
  260. rust_crates=" \
  261. digest-0.7.2 \
  262. libc-0.2.39 \
  263. "
  264. AC_SUBST(rust_crates)
  265. ifdef([AC_C_FLEXIBLE_ARRAY_MEMBER], [
  266. AC_C_FLEXIBLE_ARRAY_MEMBER
  267. ], [
  268. dnl Maybe we've got an old autoconf...
  269. AC_CACHE_CHECK([for flexible array members],
  270. tor_cv_c_flexarray,
  271. [AC_COMPILE_IFELSE(
  272. AC_LANG_PROGRAM([
  273. struct abc { int a; char b[]; };
  274. ], [
  275. struct abc *def = malloc(sizeof(struct abc)+sizeof(char));
  276. def->b[0] = 33;
  277. ]),
  278. [tor_cv_c_flexarray=yes],
  279. [tor_cv_c_flexarray=no])])
  280. if test "$tor_cv_flexarray" = "yes"; then
  281. AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
  282. else
  283. AC_DEFINE([FLEXIBLE_ARRAY_MEMBER], [1], [Define to nothing if C supports flexible array members, and to 1 if it does not.])
  284. fi
  285. ])
  286. AC_CACHE_CHECK([for working C99 mid-block declaration syntax],
  287. tor_cv_c_c99_decl,
  288. [AC_COMPILE_IFELSE(
  289. [AC_LANG_PROGRAM([], [int x; x = 3; int y; y = 4 + x;])],
  290. [tor_cv_c_c99_decl=yes],
  291. [tor_cv_c_c99_decl=no] )])
  292. if test "$tor_cv_c_c99_decl" != "yes"; then
  293. AC_MSG_ERROR([Your compiler doesn't support c99 mid-block declarations. This is required as of Tor 0.2.6.x])
  294. fi
  295. AC_CACHE_CHECK([for working C99 designated initializers],
  296. tor_cv_c_c99_designated_init,
  297. [AC_COMPILE_IFELSE(
  298. [AC_LANG_PROGRAM([struct s { int a; int b; };],
  299. [[ struct s ss = { .b = 5, .a = 6 }; ]])],
  300. [tor_cv_c_c99_designated_init=yes],
  301. [tor_cv_c_c99_designated_init=no] )])
  302. if test "$tor_cv_c_c99_designated_init" != "yes"; then
  303. AC_MSG_ERROR([Your compiler doesn't support c99 designated initializers. This is required as of Tor 0.2.6.x])
  304. fi
  305. TORUSER=_tor
  306. AC_ARG_WITH(tor-user,
  307. AS_HELP_STRING(--with-tor-user=NAME, [specify username for tor daemon]),
  308. [
  309. TORUSER=$withval
  310. ]
  311. )
  312. AC_SUBST(TORUSER)
  313. TORGROUP=_tor
  314. AC_ARG_WITH(tor-group,
  315. AS_HELP_STRING(--with-tor-group=NAME, [specify group name for tor daemon]),
  316. [
  317. TORGROUP=$withval
  318. ]
  319. )
  320. AC_SUBST(TORGROUP)
  321. dnl If _WIN32 is defined and non-zero, we are building for win32
  322. AC_MSG_CHECKING([for win32])
  323. AC_RUN_IFELSE([AC_LANG_SOURCE([
  324. int main(int c, char **v) {
  325. #ifdef _WIN32
  326. #if _WIN32
  327. return 0;
  328. #else
  329. return 1;
  330. #endif
  331. #else
  332. return 2;
  333. #endif
  334. }])],
  335. bwin32=true; AC_MSG_RESULT([yes]),
  336. bwin32=false; AC_MSG_RESULT([no]),
  337. bwin32=cross; AC_MSG_RESULT([cross])
  338. )
  339. if test "$bwin32" = "cross"; then
  340. AC_MSG_CHECKING([for win32 (cross)])
  341. AC_COMPILE_IFELSE([AC_LANG_SOURCE([
  342. #ifdef _WIN32
  343. int main(int c, char **v) {return 0;}
  344. #else
  345. #error
  346. int main(int c, char **v) {return x(y);}
  347. #endif
  348. ])],
  349. bwin32=true; AC_MSG_RESULT([yes]),
  350. bwin32=false; AC_MSG_RESULT([no]))
  351. fi
  352. AH_BOTTOM([
  353. #ifdef _WIN32
  354. /* Defined to access windows functions and definitions for >=WinXP */
  355. # ifndef WINVER
  356. # define WINVER 0x0501
  357. # endif
  358. /* Defined to access _other_ windows functions and definitions for >=WinXP */
  359. # ifndef _WIN32_WINNT
  360. # define _WIN32_WINNT 0x0501
  361. # endif
  362. /* Defined to avoid including some windows headers as part of Windows.h */
  363. # ifndef WIN32_LEAN_AND_MEAN
  364. # define WIN32_LEAN_AND_MEAN 1
  365. # endif
  366. #endif
  367. ])
  368. AM_CONDITIONAL(WIN32, test "x$bwin32" = "xtrue")
  369. AM_CONDITIONAL(BUILD_NT_SERVICES, test "x$bwin32" = "xtrue")
  370. AM_CONDITIONAL(BUILD_LIBTORRUNNER, test "x$bwin32" != "xtrue")
  371. dnl Enable C99 when compiling with MIPSpro
  372. AC_MSG_CHECKING([for MIPSpro compiler])
  373. AC_COMPILE_IFELSE([AC_LANG_PROGRAM(, [
  374. #if (defined(__sgi) && defined(_COMPILER_VERSION))
  375. #error
  376. return x(y);
  377. #endif
  378. ])],
  379. bmipspro=false; AC_MSG_RESULT(no),
  380. bmipspro=true; AC_MSG_RESULT(yes))
  381. if test "$bmipspro" = "true"; then
  382. CFLAGS="$CFLAGS -c99"
  383. fi
  384. AC_C_BIGENDIAN
  385. AC_ARG_VAR([TOR_RUST_TARGET], [Rust target, must be specified when cross-compiling (HOST != BUILD). example: i686-pc-windows-gnu])
  386. if test "x$enable_rust" = "xyes"; then
  387. AC_ARG_VAR([RUSTC], [path to the rustc binary])
  388. AC_CHECK_PROG([RUSTC], [rustc], [rustc],[no])
  389. if test "x$RUSTC" = "xno"; then
  390. AC_MSG_ERROR([rustc unavailable but rust integration requested.])
  391. fi
  392. AC_ARG_VAR([CARGO], [path to the cargo binary])
  393. AC_CHECK_PROG([CARGO], [cargo], [cargo],[no])
  394. if test "x$CARGO" = "xno"; then
  395. AC_MSG_ERROR([cargo unavailable but rust integration requested.])
  396. fi
  397. AC_DEFINE([HAVE_RUST], 1, [have Rust])
  398. if test "x$enable_fatal_warnings" = "xyes"; then
  399. RUST_WARN=
  400. else
  401. RUST_WARN=#
  402. fi
  403. if test "x$enable_cargo_online_mode" = "xyes"; then
  404. CARGO_ONLINE=
  405. RUST_DL=#
  406. else
  407. CARGO_ONLINE=--frozen
  408. RUST_DL=
  409. dnl When we're not allowed to touch the network, we need crate dependencies
  410. dnl locally available.
  411. AC_MSG_CHECKING([rust crate dependencies])
  412. AC_ARG_VAR([TOR_RUST_DEPENDENCIES], [path to directory with local crate mirror])
  413. if test "x$TOR_RUST_DEPENDENCIES" = "x"; then
  414. TOR_RUST_DEPENDENCIES="${srcdir}/src/ext/rust/crates"
  415. fi
  416. dnl Check whether the path exists before we try to cd into it.
  417. if test ! -d "$TOR_RUST_DEPENDENCIES"; then
  418. AC_MSG_ERROR([Rust dependency directory $TOR_RUST_DEPENDENCIES does not exist. Specify a dependency directory using the TOR_RUST_DEPENDENCIES variable or allow cargo to fetch crates using --enable-cargo-online-mode.])
  419. ERRORED=1
  420. fi
  421. dnl Make the path absolute, since we'll be using it from within a
  422. dnl subdirectory.
  423. TOR_RUST_DEPENDENCIES=$(cd "$TOR_RUST_DEPENDENCIES" ; pwd)
  424. for dep in $rust_crates; do
  425. if test ! -d "$TOR_RUST_DEPENDENCIES"/"$dep"; then
  426. AC_MSG_ERROR([Failure to find rust dependency $TOR_RUST_DEPENDENCIES/$dep. Specify a dependency directory using the TOR_RUST_DEPENDENCIES variable or allow cargo to fetch crates using --enable-cargo-online-mode.])
  427. ERRORED=1
  428. fi
  429. done
  430. if test "x$ERRORED" = "x"; then
  431. AC_MSG_RESULT([yes])
  432. fi
  433. fi
  434. dnl This is a workaround for #46797
  435. dnl (a.k.a https://github.com/rust-lang/rust/issues/46797 ). Once the
  436. dnl upstream bug is fixed, we can remove this workaround.
  437. case "$host_os" in
  438. darwin*)
  439. TOR_RUST_EXTRA_LIBS="-lresolv"
  440. ;;
  441. esac
  442. dnl For now both MSVC and MinGW rust libraries will output static libs with
  443. dnl the MSVC naming convention.
  444. if test "$bwin32" = "true"; then
  445. tor_rust_static_name=tor_rust.lib
  446. else
  447. tor_rust_static_name=libtor_rust.a
  448. fi
  449. AC_CANONICAL_BUILD
  450. if test -n "$TOR_RUST_TARGET"; then
  451. if test "$host" = "$build"; then
  452. AC_MSG_ERROR([HOST = BUILD is invalid if TOR_RUST_TARGET is specified, see configure --help for more information.])
  453. fi
  454. RUST_TARGET_PROP="target = '$TOR_RUST_TARGET'"
  455. TOR_RUST_LIB_PATH="src/rust/target/$TOR_RUST_TARGET/release/$tor_rust_static_name"
  456. else
  457. if test "$host" != "$build"; then
  458. AC_MSG_ERROR([TOR_RUST_TARGET must be specified when cross-compiling with Rust enabled.])
  459. fi
  460. RUST_TARGET_PROP=
  461. TOR_RUST_LIB_PATH="src/rust/target/release/$tor_rust_static_name"
  462. fi
  463. AC_SUBST(RUST_TARGET_PROP)
  464. AC_SUBST(TOR_RUST_LIB_PATH)
  465. AC_SUBST(CARGO_ONLINE)
  466. AC_SUBST(RUST_WARN)
  467. AC_SUBST(RUST_DL)
  468. dnl Let's check the rustc version, too
  469. AC_MSG_CHECKING([rust version])
  470. RUSTC_VERSION=`$RUSTC --version`
  471. RUSTC_VERSION_MAJOR=`$RUSTC --version | cut -d ' ' -f 2 | cut -d '.' -f 1`
  472. RUSTC_VERSION_MINOR=`$RUSTC --version | cut -d ' ' -f 2 | cut -d '.' -f 2`
  473. if test "x$RUSTC_VERSION_MAJOR" = "x" -o "x$RUSTC_VERSION_MINOR" = "x"; then
  474. AC_MSG_ERROR([rustc version couldn't be identified])
  475. fi
  476. if test "$RUSTC_VERSION_MAJOR" -lt 2 -a "$RUSTC_VERSION_MINOR" -lt 14; then
  477. AC_MSG_ERROR([rustc must be at least version 1.14])
  478. fi
  479. AC_MSG_RESULT([$RUSTC_VERSION])
  480. fi
  481. AC_SUBST(TOR_RUST_EXTRA_LIBS)
  482. AC_SEARCH_LIBS(socket, [socket network])
  483. AC_SEARCH_LIBS(gethostbyname, [nsl])
  484. AC_SEARCH_LIBS(dlopen, [dl])
  485. AC_SEARCH_LIBS(inet_aton, [resolv])
  486. AC_SEARCH_LIBS(backtrace, [execinfo])
  487. saved_LIBS="$LIBS"
  488. AC_SEARCH_LIBS([clock_gettime], [rt])
  489. if test "$LIBS" != "$saved_LIBS"; then
  490. # Looks like we need -lrt for clock_gettime().
  491. have_rt=yes
  492. fi
  493. if test "$bwin32" = "false"; then
  494. AC_SEARCH_LIBS(pthread_create, [pthread])
  495. AC_SEARCH_LIBS(pthread_detach, [pthread])
  496. fi
  497. AM_CONDITIONAL(THREADS_WIN32, test "$bwin32" = "true")
  498. AM_CONDITIONAL(THREADS_PTHREADS, test "$bwin32" = "false")
  499. AC_CHECK_FUNCS(
  500. _NSGetEnviron \
  501. RtlSecureZeroMemory \
  502. SecureZeroMemory \
  503. accept4 \
  504. backtrace \
  505. backtrace_symbols_fd \
  506. eventfd \
  507. explicit_bzero \
  508. timingsafe_memcmp \
  509. flock \
  510. ftime \
  511. get_current_dir_name \
  512. getaddrinfo \
  513. getdelim \
  514. getifaddrs \
  515. getline \
  516. getpass \
  517. getrlimit \
  518. gettimeofday \
  519. gmtime_r \
  520. gnu_get_libc_version \
  521. htonll \
  522. inet_aton \
  523. ioctl \
  524. issetugid \
  525. llround \
  526. localtime_r \
  527. lround \
  528. memmem \
  529. memset_s \
  530. mmap \
  531. pipe \
  532. pipe2 \
  533. prctl \
  534. readpassphrase \
  535. rint \
  536. sigaction \
  537. socketpair \
  538. statvfs \
  539. strncasecmp \
  540. strcasecmp \
  541. strlcat \
  542. strlcpy \
  543. strnlen \
  544. strptime \
  545. strtok_r \
  546. strtoull \
  547. sysconf \
  548. sysctl \
  549. truncate \
  550. uname \
  551. usleep \
  552. vasprintf \
  553. _vscprintf
  554. )
  555. # Apple messed up when they added some functions: they
  556. # forgot to decorate them with appropriate AVAILABLE_MAC_OS_VERSION
  557. # checks.
  558. # We should only probe for these functions if we are sure that we
  559. # are not targeting OS X 10.9 or earlier.
  560. AC_MSG_CHECKING([for a pre-Yosemite OS X build target])
  561. AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
  562. #ifdef __APPLE__
  563. # include <AvailabilityMacros.h>
  564. # ifndef MAC_OS_X_VERSION_10_10
  565. # define MAC_OS_X_VERSION_10_10 101000
  566. # endif
  567. # if defined(MAC_OS_X_VERSION_MIN_REQUIRED)
  568. # if MAC_OS_X_VERSION_MIN_REQUIRED < MAC_OS_X_VERSION_10_10
  569. # error "Running on Mac OS X 10.9 or earlier"
  570. # endif
  571. # endif
  572. #endif
  573. ]], [[]])],
  574. [on_macos_pre_10_10=no ; AC_MSG_RESULT([no])],
  575. [on_macos_pre_10_10=yes; AC_MSG_RESULT([yes])])
  576. if test "$on_macos_pre_10_10" = "no"; then
  577. AC_CHECK_FUNCS(
  578. mach_approximate_time \
  579. )
  580. fi
  581. # We should only probe for these functions if we are sure that we
  582. # are not targeting OSX 10.11 or earlier.
  583. AC_MSG_CHECKING([for a pre-Sierra OSX build target])
  584. AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
  585. #ifdef __APPLE__
  586. # include <AvailabilityMacros.h>
  587. # ifndef MAC_OS_X_VERSION_10_12
  588. # define MAC_OS_X_VERSION_10_12 101200
  589. # endif
  590. # if defined(MAC_OS_X_VERSION_MIN_REQUIRED)
  591. # if MAC_OS_X_VERSION_MIN_REQUIRED < MAC_OS_X_VERSION_10_12
  592. # error "Running on Mac OSX 10.11 or earlier"
  593. # endif
  594. # endif
  595. #endif
  596. ]], [[]])],
  597. [on_macos_pre_10_12=no ; AC_MSG_RESULT([no])],
  598. [on_macos_pre_10_12=yes; AC_MSG_RESULT([yes])])
  599. if test "$on_macos_pre_10_12" = "no"; then
  600. AC_CHECK_FUNCS(
  601. clock_gettime \
  602. getentropy \
  603. )
  604. fi
  605. if test "$bwin32" != "true"; then
  606. AC_CHECK_HEADERS(pthread.h)
  607. AC_CHECK_FUNCS(pthread_create)
  608. AC_CHECK_FUNCS(pthread_condattr_setclock)
  609. fi
  610. if test "$bwin32" = "true"; then
  611. AC_CHECK_DECLS([SecureZeroMemory, _getwch], , , [
  612. #include <windows.h>
  613. #include <conio.h>
  614. #include <wchar.h>
  615. ])
  616. fi
  617. AM_CONDITIONAL(BUILD_READPASSPHRASE_C,
  618. test "x$ac_cv_func_readpassphrase" = "xno" && test "$bwin32" = "false")
  619. AC_MSG_CHECKING([whether free(NULL) works])
  620. AC_RUN_IFELSE([AC_LANG_PROGRAM([
  621. #include <stdlib.h>
  622. ], [
  623. char *p = NULL;
  624. free(p);
  625. ])],
  626. [free_null_ok=true; AC_MSG_RESULT(yes)],
  627. [free_null_ok=false; AC_MSG_RESULT(no)],
  628. [free_null_ok=cross; AC_MSG_RESULT(cross)])
  629. if test "$free_null_ok" = "false"; then
  630. AC_MSG_ERROR([Your libc implementation doesn't allow free(NULL), as required by C99.])
  631. fi
  632. dnl ------------------------------------------------------
  633. dnl Where do you live, libevent? And how do we call you?
  634. if test "$bwin32" = "true"; then
  635. TOR_LIB_WS32=-lws2_32
  636. TOR_LIB_IPHLPAPI=-liphlpapi
  637. # Some of the cargo-cults recommend -lwsock32 as well, but I don't
  638. # think it's actually necessary.
  639. TOR_LIB_GDI=-lgdi32
  640. TOR_LIB_USERENV=-luserenv
  641. else
  642. TOR_LIB_WS32=
  643. TOR_LIB_GDI=
  644. TOR_LIB_USERENV=
  645. fi
  646. AC_SUBST(TOR_LIB_WS32)
  647. AC_SUBST(TOR_LIB_GDI)
  648. AC_SUBST(TOR_LIB_IPHLPAPI)
  649. AC_SUBST(TOR_LIB_USERENV)
  650. tor_libevent_pkg_redhat="libevent"
  651. tor_libevent_pkg_debian="libevent-dev"
  652. tor_libevent_devpkg_redhat="libevent-devel"
  653. tor_libevent_devpkg_debian="libevent-dev"
  654. dnl On Gnu/Linux or any place we require it, we'll add librt to the Libevent
  655. dnl linking for static builds.
  656. STATIC_LIBEVENT_FLAGS=""
  657. if test "$enable_static_libevent" = "yes"; then
  658. if test "$have_rt" = "yes"; then
  659. STATIC_LIBEVENT_FLAGS=" -lrt "
  660. fi
  661. fi
  662. TOR_SEARCH_LIBRARY(libevent, $trylibeventdir, [-levent $STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32], [
  663. #ifdef _WIN32
  664. #include <winsock2.h>
  665. #endif
  666. #include <sys/time.h>
  667. #include <sys/types.h>
  668. #include <event2/event.h>], [
  669. #ifdef _WIN32
  670. #include <winsock2.h>
  671. #endif
  672. struct event_base;
  673. struct event_base *event_base_new(void);
  674. void event_base_free(struct event_base *);],
  675. [
  676. #ifdef _WIN32
  677. {WSADATA d; WSAStartup(0x101,&d); }
  678. #endif
  679. event_base_free(event_base_new());
  680. ], [--with-libevent-dir], [/opt/libevent])
  681. dnl Determine the incantation needed to link libevent.
  682. save_LIBS="$LIBS"
  683. save_LDFLAGS="$LDFLAGS"
  684. save_CPPFLAGS="$CPPFLAGS"
  685. LIBS="$STATIC_LIBEVENT_FLAGS $TOR_LIB_WS32 $save_LIBS"
  686. LDFLAGS="$TOR_LDFLAGS_libevent $LDFLAGS"
  687. CPPFLAGS="$TOR_CPPFLAGS_libevent $CPPFLAGS"
  688. AC_CHECK_HEADERS(event2/event.h event2/dns.h event2/bufferevent_ssl.h)
  689. if test "$enable_static_libevent" = "yes"; then
  690. if test "$tor_cv_library_libevent_dir" = "(system)"; then
  691. AC_MSG_ERROR("You must specify an explicit --with-libevent-dir=x option when using --enable-static-libevent")
  692. else
  693. TOR_LIBEVENT_LIBS="$TOR_LIBDIR_libevent/libevent.a $STATIC_LIBEVENT_FLAGS"
  694. fi
  695. else
  696. if test "x$ac_cv_header_event2_event_h" = "xyes"; then
  697. AC_SEARCH_LIBS(event_new, [event event_core], , AC_MSG_ERROR("libevent2 is installed but linking it failed while searching for event_new"))
  698. AC_SEARCH_LIBS(evdns_base_new, [event event_extra], , AC_MSG_ERROR("libevent2 is installed but linking it failed while searching for evdns_base_new"))
  699. if test "$ac_cv_search_event_new" != "none required"; then
  700. TOR_LIBEVENT_LIBS="$ac_cv_search_event_new"
  701. fi
  702. if test "$ac_cv_search_evdns_base_new" != "none required"; then
  703. TOR_LIBEVENT_LIBS="$ac_cv_search_evdns_base_new $TOR_LIBEVENT_LIBS"
  704. fi
  705. else
  706. AC_MSG_ERROR("libevent2 is required but the headers could not be found")
  707. fi
  708. fi
  709. dnl Now check for particular libevent functions.
  710. AC_CHECK_FUNCS([evutil_secure_rng_set_urandom_device_file \
  711. evutil_secure_rng_add_bytes \
  712. ])
  713. LIBS="$save_LIBS"
  714. LDFLAGS="$save_LDFLAGS"
  715. CPPFLAGS="$save_CPPFLAGS"
  716. dnl Check that libevent is at least at version 2.0.10, the first stable
  717. dnl release of its series
  718. CPPFLAGS="$CPPFLAGS $TOR_CPPFLAGS_libevent"
  719. AC_MSG_CHECKING([whether Libevent is new enough])
  720. AC_COMPILE_IFELSE([AC_LANG_SOURCE([
  721. #include <event2/event.h>
  722. #if !defined(LIBEVENT_VERSION_NUMBER) || LIBEVENT_VERSION_NUMBER < 0x02000a00
  723. #error
  724. int x = y(zz);
  725. #else
  726. int x = 1;
  727. #endif
  728. ])], [ AC_MSG_RESULT([yes]) ],
  729. [ AC_MSG_RESULT([no])
  730. AC_MSG_ERROR([Libevent is not new enough. We require 2.0.10-stable or later]) ] )
  731. LIBS="$save_LIBS"
  732. LDFLAGS="$save_LDFLAGS"
  733. CPPFLAGS="$save_CPPFLAGS"
  734. AC_SUBST(TOR_LIBEVENT_LIBS)
  735. dnl ------------------------------------------------------
  736. dnl Where do you live, libm?
  737. dnl On some platforms (Haiku/BeOS) the math library is
  738. dnl part of libroot. In which case don't link against lm
  739. TOR_LIB_MATH=""
  740. save_LIBS="$LIBS"
  741. AC_SEARCH_LIBS(pow, [m], , AC_MSG_ERROR([Could not find pow in libm or libc.]))
  742. if test "$ac_cv_search_pow" != "none required"; then
  743. TOR_LIB_MATH="$ac_cv_search_pow"
  744. fi
  745. LIBS="$save_LIBS"
  746. AC_SUBST(TOR_LIB_MATH)
  747. dnl ------------------------------------------------------
  748. dnl Hello, NSS. You're new around here.
  749. if test "x$enable_nss" = "xyes"; then
  750. PKG_CHECK_MODULES(NSS,
  751. [nss],
  752. [have_nss=yes],
  753. [have_nss=no; AC_MSG_ERROR([You asked for NSS but I can't find it.])])
  754. AC_SUBST(NSS_CFLAGS)
  755. AC_SUBST(NSS_LIBS)
  756. fi
  757. dnl ------------------------------------------------------
  758. dnl Where do you live, openssl? And how do we call you?
  759. if test "x$enable_nss" != "xyes"; then
  760. tor_openssl_pkg_redhat="openssl"
  761. tor_openssl_pkg_debian="libssl-dev"
  762. tor_openssl_devpkg_redhat="openssl-devel"
  763. tor_openssl_devpkg_debian="libssl-dev"
  764. ALT_openssl_WITHVAL=""
  765. AC_ARG_WITH(ssl-dir,
  766. AS_HELP_STRING(--with-ssl-dir=PATH, [obsolete alias for --with-openssl-dir]),
  767. [
  768. if test "x$withval" != "xno" && test "x$withval" != "x"; then
  769. ALT_openssl_WITHVAL="$withval"
  770. fi
  771. ])
  772. AC_MSG_NOTICE([Now, we'll look for OpenSSL >= 1.0.1])
  773. TOR_SEARCH_LIBRARY(openssl, $tryssldir, [-lssl -lcrypto $TOR_LIB_GDI $TOR_LIB_WS32],
  774. [#include <openssl/ssl.h>
  775. char *getenv(const char *);],
  776. [struct ssl_cipher_st;
  777. unsigned SSL_CIPHER_get_id(const struct ssl_cipher_st *);
  778. char *getenv(const char *);],
  779. dnl This funny-looking test program calls getenv, so that the compiler
  780. dnl will neither make code that call SSL_CIPHER_get_id(NULL) [producing
  781. dnl a crash], nor optimize out the call to SSL_CIPHER_get_id().
  782. dnl We look for SSL_cipher_get_id() because it is present in
  783. dnl OpenSSL >=1.0.1, because it is not deprecated, and because Tor
  784. dnl depends on it.
  785. [if (getenv("THIS_SHOULDNT_BE_SET_X201803")) SSL_CIPHER_get_id((void *)0);], [],
  786. [/usr/local/opt/openssl /usr/local/openssl /usr/lib/openssl /usr/local/ssl /usr/lib/ssl /usr/local /opt/openssl])
  787. dnl XXXX check for OPENSSL_VERSION_NUMBER == SSLeay()
  788. if test "$enable_static_openssl" = "yes"; then
  789. if test "$tor_cv_library_openssl_dir" = "(system)"; then
  790. AC_MSG_ERROR("You must specify an explicit --with-openssl-dir=x option when using --enable-static-openssl")
  791. else
  792. TOR_OPENSSL_LIBS="$TOR_LIBDIR_openssl/libssl.a $TOR_LIBDIR_openssl/libcrypto.a"
  793. fi
  794. else
  795. TOR_OPENSSL_LIBS="-lssl -lcrypto"
  796. fi
  797. AC_SUBST(TOR_OPENSSL_LIBS)
  798. dnl Now check for particular openssl functions.
  799. save_LIBS="$LIBS"
  800. save_LDFLAGS="$LDFLAGS"
  801. save_CPPFLAGS="$CPPFLAGS"
  802. LIBS="$TOR_OPENSSL_LIBS $LIBS"
  803. LDFLAGS="$TOR_LDFLAGS_openssl $LDFLAGS"
  804. CPPFLAGS="$TOR_CPPFLAGS_openssl $CPPFLAGS"
  805. AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
  806. #include <openssl/opensslv.h>
  807. #if !defined(LIBRESSL_VERSION_NUMBER) && OPENSSL_VERSION_NUMBER < 0x1000100fL
  808. #error "too old"
  809. #endif
  810. ]], [[]])],
  811. [ : ],
  812. [ AC_MSG_ERROR([OpenSSL is too old. We require 1.0.1 or later. You can specify a path to a newer one with --with-openssl-dir.]) ])
  813. AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
  814. #include <openssl/opensslv.h>
  815. #include <openssl/evp.h>
  816. #if defined(OPENSSL_NO_EC) || defined(OPENSSL_NO_ECDH) || defined(OPENSSL_NO_ECDSA)
  817. #error "no ECC"
  818. #endif
  819. #if !defined(NID_X9_62_prime256v1) || !defined(NID_secp224r1)
  820. #error "curves unavailable"
  821. #endif
  822. ]], [[]])],
  823. [ : ],
  824. [ AC_MSG_ERROR([OpenSSL is built without full ECC support, including curves P256 and P224. You can specify a path to one with ECC support with --with-openssl-dir.]) ])
  825. AC_CHECK_MEMBERS([struct ssl_method_st.get_cipher_by_char], , ,
  826. [#include <openssl/ssl.h>
  827. ])
  828. AC_CHECK_FUNCS([ \
  829. ERR_load_KDF_strings \
  830. SSL_SESSION_get_master_key \
  831. SSL_get_server_random \
  832. SSL_get_client_ciphers \
  833. SSL_get_client_random \
  834. SSL_CIPHER_find \
  835. SSL_CTX_set_security_level \
  836. TLS_method
  837. ])
  838. dnl Check if OpenSSL has scrypt implementation.
  839. AC_CHECK_FUNCS([ EVP_PBE_scrypt ])
  840. dnl Check if OpenSSL structures are opaque
  841. AC_CHECK_MEMBERS([SSL.state], , ,
  842. [#include <openssl/ssl.h>
  843. ])
  844. AC_CHECK_SIZEOF(SHA_CTX, , [AC_INCLUDES_DEFAULT()
  845. #include <openssl/sha.h>
  846. ])
  847. fi # enable_nss
  848. dnl ======================================================================
  849. dnl Can we use KIST?
  850. dnl Define the set of checks for KIST scheduler support.
  851. AC_DEFUN([CHECK_KIST_SUPPORT],[
  852. dnl KIST needs struct tcp_info and for certain members to exist.
  853. AC_CHECK_MEMBERS(
  854. [struct tcp_info.tcpi_unacked, struct tcp_info.tcpi_snd_mss],
  855. , ,[[#include <netinet/tcp.h>]])
  856. dnl KIST needs SIOCOUTQNSD to exist for an ioctl call.
  857. AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
  858. #include <linux/sockios.h>
  859. #ifndef SIOCOUTQNSD
  860. #error
  861. #endif
  862. ])], have_siocoutqnsd=yes, have_siocoutqnsd=no)
  863. if test "x$have_siocoutqnsd" = "xyes"; then
  864. if test "x$ac_cv_member_struct_tcp_info_tcpi_unacked" = "xyes"; then
  865. if test "x$ac_cv_member_struct_tcp_info_tcpi_snd_mss" = "xyes"; then
  866. have_kist_support=yes
  867. fi
  868. fi
  869. fi
  870. ])
  871. dnl Now, trigger the check.
  872. CHECK_KIST_SUPPORT
  873. AS_IF([test "x$have_kist_support" = "xyes"],
  874. [AC_DEFINE(HAVE_KIST_SUPPORT, 1, [Defined if KIST scheduler is supported
  875. on this system])],
  876. [AC_MSG_NOTICE([KIST scheduler can't be used. Missing support.])])
  877. LIBS="$save_LIBS"
  878. LDFLAGS="$save_LDFLAGS"
  879. CPPFLAGS="$save_CPPFLAGS"
  880. dnl ------------------------------------------------------
  881. dnl Where do you live, zlib? And how do we call you?
  882. tor_zlib_pkg_redhat="zlib"
  883. tor_zlib_pkg_debian="zlib1g"
  884. tor_zlib_devpkg_redhat="zlib-devel"
  885. tor_zlib_devpkg_debian="zlib1g-dev"
  886. TOR_SEARCH_LIBRARY(zlib, $tryzlibdir, [-lz],
  887. [#include <zlib.h>],
  888. [const char * zlibVersion(void);],
  889. [zlibVersion();], [--with-zlib-dir],
  890. [/opt/zlib])
  891. if test "$enable_static_zlib" = "yes"; then
  892. if test "$tor_cv_library_zlib_dir" = "(system)"; then
  893. AC_MSG_ERROR("You must specify an explicit --with-zlib-dir=x option when
  894. using --enable-static-zlib")
  895. else
  896. TOR_ZLIB_LIBS="$TOR_LIBDIR_zlib/libz.a"
  897. fi
  898. else
  899. TOR_ZLIB_LIBS="-lz"
  900. fi
  901. AC_SUBST(TOR_ZLIB_LIBS)
  902. dnl ------------------------------------------------------
  903. dnl Where we do we find lzma?
  904. AC_ARG_ENABLE(lzma,
  905. AS_HELP_STRING(--enable-lzma, [enable support for the LZMA compression scheme.]),
  906. [case "${enableval}" in
  907. "yes") lzma=true ;;
  908. "no") lzma=false ;;
  909. * ) AC_MSG_ERROR(bad value for --enable-lzma) ;;
  910. esac], [lzma=auto])
  911. if test "x$enable_lzma" = "xno"; then
  912. have_lzma=no;
  913. else
  914. PKG_CHECK_MODULES([LZMA],
  915. [liblzma],
  916. have_lzma=yes,
  917. have_lzma=no)
  918. if test "x$have_lzma" = "xno" ; then
  919. AC_MSG_WARN([Unable to find liblzma.])
  920. fi
  921. fi
  922. if test "x$have_lzma" = "xyes"; then
  923. AC_DEFINE(HAVE_LZMA,1,[Have LZMA])
  924. TOR_LZMA_CFLAGS="${LZMA_CFLAGS}"
  925. TOR_LZMA_LIBS="${LZMA_LIBS}"
  926. fi
  927. AC_SUBST(TOR_LZMA_CFLAGS)
  928. AC_SUBST(TOR_LZMA_LIBS)
  929. dnl ------------------------------------------------------
  930. dnl Where we do we find zstd?
  931. AC_ARG_ENABLE(zstd,
  932. AS_HELP_STRING(--enable-zstd, [enable support for the Zstandard compression scheme.]),
  933. [case "${enableval}" in
  934. "yes") zstd=true ;;
  935. "no") zstd=false ;;
  936. * ) AC_MSG_ERROR(bad value for --enable-zstd) ;;
  937. esac], [zstd=auto])
  938. if test "x$enable_zstd" = "xno"; then
  939. have_zstd=no;
  940. else
  941. PKG_CHECK_MODULES([ZSTD],
  942. [libzstd >= 1.1],
  943. have_zstd=yes,
  944. have_zstd=no)
  945. if test "x$have_zstd" = "xno" ; then
  946. AC_MSG_WARN([Unable to find libzstd.])
  947. fi
  948. fi
  949. if test "x$have_zstd" = "xyes"; then
  950. AC_DEFINE(HAVE_ZSTD,1,[Have Zstd])
  951. TOR_ZSTD_CFLAGS="${ZSTD_CFLAGS}"
  952. TOR_ZSTD_LIBS="${ZSTD_LIBS}"
  953. dnl now check for zstd functions
  954. save_LIBS="$LIBS"
  955. save_CFLAGS="$CFLAGS"
  956. LIBS="$LIBS $ZSTD_LIBS"
  957. CFLAGS="$CFLAGS $ZSTD_CFLAGS"
  958. AC_CHECK_FUNCS(ZSTD_estimateCStreamSize \
  959. ZSTD_estimateDCtxSize)
  960. LIBS="$save_LIBS"
  961. CFLAGS="$save_CFLAGS"
  962. fi
  963. AC_SUBST(TOR_ZSTD_CFLAGS)
  964. AC_SUBST(TOR_ZSTD_LIBS)
  965. dnl ----------------------------------------------------------------------
  966. dnl Check if libcap is available for capabilities.
  967. tor_cap_pkg_debian="libcap2"
  968. tor_cap_pkg_redhat="libcap"
  969. tor_cap_devpkg_debian="libcap-dev"
  970. tor_cap_devpkg_redhat="libcap-devel"
  971. AC_CHECK_LIB([cap], [cap_init], [],
  972. AC_MSG_NOTICE([Libcap was not found. Capabilities will not be usable.])
  973. )
  974. AC_CHECK_FUNCS(cap_set_proc)
  975. dnl ---------------------------------------------------------------------
  976. dnl Now that we know about our major libraries, we can check for compiler
  977. dnl and linker hardening options. We need to do this with the libraries known,
  978. dnl since sometimes the linker will like an option but not be willing to
  979. dnl use it with a build of a library.
  980. all_ldflags_for_check="$TOR_LDFLAGS_zlib $TOR_LDFLAGS_openssl $TOR_LDFLAGS_libevent"
  981. all_libs_for_check="$TOR_ZLIB_LIBS $TOR_LIB_MATH $TOR_LIBEVENT_LIBS $TOR_OPENSSL_LIBS $TOR_SYSTEMD_LIBS $TOR_LIB_WS32 $TOR_LIB_GDI $TOR_LIB_USERENV $TOR_CAP_LIBS"
  982. CFLAGS_FTRAPV=
  983. CFLAGS_FWRAPV=
  984. CFLAGS_ASAN=
  985. CFLAGS_UBSAN=
  986. AC_COMPILE_IFELSE([AC_LANG_PROGRAM([], [
  987. #if !defined(__clang__)
  988. #error
  989. #endif])], have_clang=yes, have_clang=no)
  990. if test "x$enable_gcc_hardening" != "xno"; then
  991. CFLAGS="$CFLAGS -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2"
  992. if test "x$have_clang" = "xyes"; then
  993. TOR_CHECK_CFLAGS(-Qunused-arguments)
  994. fi
  995. TOR_CHECK_CFLAGS(-fstack-protector-all, also_link)
  996. AS_VAR_PUSHDEF([can_compile], [tor_cv_cflags_-fstack-protector-all])
  997. AS_VAR_PUSHDEF([can_link], [tor_can_link_-fstack-protector-all])
  998. m4_ifdef([AS_VAR_IF],[
  999. AS_VAR_IF(can_compile, [yes],
  1000. AS_VAR_IF(can_link, [yes],
  1001. [],
  1002. AC_MSG_ERROR([We tried to build with stack protection; it looks like your compiler supports it but your libc does not provide it. Are you missing libssp? (You can --disable-gcc-hardening to ignore this error.)]))
  1003. )])
  1004. AS_VAR_POPDEF([can_link])
  1005. AS_VAR_POPDEF([can_compile])
  1006. TOR_CHECK_CFLAGS(-Wstack-protector)
  1007. TOR_CHECK_CFLAGS(--param ssp-buffer-size=1)
  1008. if test "$bwin32" = "false" && test "$enable_libfuzzer" != "yes" && test "$enable_oss_fuzz" != "yes"; then
  1009. TOR_CHECK_CFLAGS(-fPIE)
  1010. TOR_CHECK_LDFLAGS(-pie, "$all_ldflags_for_check", "$all_libs_for_check")
  1011. fi
  1012. TOR_TRY_COMPILE_WITH_CFLAGS(-fwrapv, also_link, CFLAGS_FWRAPV="-fwrapv", true)
  1013. fi
  1014. if test "$fragile_hardening" = "yes"; then
  1015. TOR_TRY_COMPILE_WITH_CFLAGS(-ftrapv, also_link, CFLAGS_FTRAPV="-ftrapv", true)
  1016. if test "$tor_cv_cflags__ftrapv" = "yes" && test "$tor_can_link__ftrapv" != "yes"; then
  1017. AC_MSG_WARN([The compiler supports -ftrapv, but for some reason I was not able to link with -ftrapv. Are you missing run-time support? Run-time hardening will not work as well as it should.])
  1018. fi
  1019. if test "$tor_cv_cflags__ftrapv" != "yes"; then
  1020. AC_MSG_ERROR([You requested fragile hardening, but the compiler does not seem to support -ftrapv.])
  1021. fi
  1022. TOR_TRY_COMPILE_WITH_CFLAGS([-fsanitize=address], also_link, CFLAGS_ASAN="-fsanitize=address", true)
  1023. if test "$tor_cv_cflags__fsanitize_address" = "yes" && test "$tor_can_link__fsanitize_address" != "yes"; then
  1024. AC_MSG_ERROR([The compiler supports -fsanitize=address, but for some reason I was not able to link when using it. Are you missing run-time support? With GCC you need libubsan.*, and with Clang you need libclang_rt.ubsan*])
  1025. fi
  1026. TOR_TRY_COMPILE_WITH_CFLAGS([-fsanitize=undefined], also_link, CFLAGS_UBSAN="-fsanitize=undefined", true)
  1027. if test "$tor_cv_cflags__fsanitize_address" = "yes" && test "$tor_can_link__fsanitize_address" != "yes"; then
  1028. AC_MSG_ERROR([The compiler supports -fsanitize=undefined, but for some reason I was not able to link when using it. Are you missing run-time support? With GCC you need libasan.*, and with Clang you need libclang_rt.ubsan*])
  1029. fi
  1030. TOR_CHECK_CFLAGS([-fno-omit-frame-pointer])
  1031. fi
  1032. dnl Find the correct libraries to add in order to use the sanitizers.
  1033. dnl
  1034. dnl When building Rust, Cargo will run the linker with the -nodefaultlibs
  1035. dnl option, which will prevent the compiler from linking the sanitizer
  1036. dnl libraries it needs. We need to specify them manually.
  1037. dnl
  1038. dnl What's more, we need to specify them in a linker script rather than
  1039. dnl from build.rs: these options aren't allowed in the cargo:rustc-flags
  1040. dnl variable.
  1041. RUST_LINKER_OPTIONS=""
  1042. if test "x$have_clang" = "xyes"; then
  1043. if test "x$CFLAGS_ASAN" != "x"; then
  1044. RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS $CFLAGS_ASAN"
  1045. fi
  1046. if test "x$CFLAGS_UBSAN" != "x"; then
  1047. RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS $CFLAGS_UBSAN"
  1048. fi
  1049. else
  1050. if test "x$CFLAGS_ASAN" != "x"; then
  1051. RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -lasan"
  1052. fi
  1053. if test "x$CFLAGS_UBSAN" != "x"; then
  1054. RUST_LINKER_OPTIONS="$RUST_LINKER_OPTIONS -lubsan"
  1055. fi
  1056. fi
  1057. AC_SUBST(RUST_LINKER_OPTIONS)
  1058. CFLAGS_BUGTRAP="$CFLAGS_FTRAPV $CFLAGS_ASAN $CFLAGS_UBSAN"
  1059. CFLAGS_CONSTTIME="$CFLAGS_FWRAPV"
  1060. mulodi_fixes_ftrapv=no
  1061. if test "$have_clang" = "yes"; then
  1062. saved_CFLAGS="$CFLAGS"
  1063. CFLAGS="$CFLAGS $CFLAGS_FTRAPV"
  1064. AC_MSG_CHECKING([whether clang -ftrapv can link a 64-bit int multiply])
  1065. AC_LINK_IFELSE([
  1066. AC_LANG_SOURCE([[
  1067. #include <stdint.h>
  1068. #include <stdlib.h>
  1069. int main(int argc, char **argv)
  1070. {
  1071. int64_t x = ((int64_t)atoi(argv[1])) * (int64_t)atoi(argv[2])
  1072. * (int64_t)atoi(argv[3]);
  1073. return x == 9;
  1074. } ]])],
  1075. [ftrapv_can_link=yes; AC_MSG_RESULT([yes])],
  1076. [ftrapv_can_link=no; AC_MSG_RESULT([no])])
  1077. if test "$ftrapv_can_link" = "no"; then
  1078. AC_MSG_CHECKING([whether defining __mulodi4 fixes that])
  1079. AC_LINK_IFELSE([
  1080. AC_LANG_SOURCE([[
  1081. #include <stdint.h>
  1082. #include <stdlib.h>
  1083. int64_t __mulodi4(int64_t a, int64_t b, int *overflow) {
  1084. *overflow=0;
  1085. return a;
  1086. }
  1087. int main(int argc, char **argv)
  1088. {
  1089. int64_t x = ((int64_t)atoi(argv[1])) * (int64_t)atoi(argv[2])
  1090. * (int64_t)atoi(argv[3]);
  1091. return x == 9;
  1092. } ]])],
  1093. [mulodi_fixes_ftrapv=yes; AC_MSG_RESULT([yes])],
  1094. [mulodi_fixes_ftrapv=no; AC_MSG_RESULT([no])])
  1095. fi
  1096. CFLAGS="$saved_CFLAGS"
  1097. fi
  1098. AM_CONDITIONAL(ADD_MULODI4, test "$mulodi_fixes_ftrapv" = "yes")
  1099. dnl These cflags add bunches of branches, and we haven't been able to
  1100. dnl persuade ourselves that they're suitable for code that needs to be
  1101. dnl constant time.
  1102. AC_SUBST(CFLAGS_BUGTRAP)
  1103. dnl These cflags are variant ones sutable for code that needs to be
  1104. dnl constant-time.
  1105. AC_SUBST(CFLAGS_CONSTTIME)
  1106. if test "x$enable_linker_hardening" != "xno"; then
  1107. TOR_CHECK_LDFLAGS(-z relro -z now, "$all_ldflags_for_check", "$all_libs_for_check")
  1108. fi
  1109. # For backtrace support
  1110. TOR_CHECK_LDFLAGS(-rdynamic)
  1111. dnl ------------------------------------------------------
  1112. dnl Now see if we have a -fomit-frame-pointer compiler option.
  1113. saved_CFLAGS="$CFLAGS"
  1114. TOR_CHECK_CFLAGS(-fomit-frame-pointer)
  1115. F_OMIT_FRAME_POINTER=''
  1116. if test "$saved_CFLAGS" != "$CFLAGS"; then
  1117. if test "$fragile_hardening" = "yes"; then
  1118. F_OMIT_FRAME_POINTER='-fomit-frame-pointer'
  1119. fi
  1120. fi
  1121. CFLAGS="$saved_CFLAGS"
  1122. AC_SUBST(F_OMIT_FRAME_POINTER)
  1123. dnl ------------------------------------------------------
  1124. dnl If we are adding -fomit-frame-pointer (or if the compiler's doing it
  1125. dnl for us, as GCC 4.6 and later do at many optimization levels), then
  1126. dnl we should try to add -fasynchronous-unwind-tables so that our backtrace
  1127. dnl code will work.
  1128. TOR_CHECK_CFLAGS(-fasynchronous-unwind-tables)
  1129. dnl ============================================================
  1130. dnl Check for libseccomp
  1131. if test "x$enable_seccomp" != "xno"; then
  1132. AC_CHECK_HEADERS([seccomp.h])
  1133. AC_SEARCH_LIBS(seccomp_init, [seccomp])
  1134. fi
  1135. dnl ============================================================
  1136. dnl Check for libscrypt
  1137. if test "x$enable_libscrypt" != "xno"; then
  1138. AC_CHECK_HEADERS([libscrypt.h])
  1139. AC_SEARCH_LIBS(libscrypt_scrypt, [scrypt])
  1140. AC_CHECK_FUNCS([libscrypt_scrypt])
  1141. fi
  1142. dnl ============================================================
  1143. dnl We need an implementation of curve25519.
  1144. dnl set these defaults.
  1145. build_curve25519_donna=no
  1146. build_curve25519_donna_c64=no
  1147. use_curve25519_donna=no
  1148. use_curve25519_nacl=no
  1149. CURVE25519_LIBS=
  1150. dnl The best choice is using curve25519-donna-c64, but that requires
  1151. dnl that we
  1152. AC_CACHE_CHECK([whether we can use curve25519-donna-c64],
  1153. tor_cv_can_use_curve25519_donna_c64,
  1154. [AC_RUN_IFELSE(
  1155. [AC_LANG_PROGRAM([dnl
  1156. #include <stdint.h>
  1157. typedef unsigned uint128_t __attribute__((mode(TI)));
  1158. int func(uint64_t a, uint64_t b) {
  1159. uint128_t c = ((uint128_t)a) * b;
  1160. int ok = ((uint64_t)(c>>96)) == 522859 &&
  1161. (((uint64_t)(c>>64))&0xffffffffL) == 3604448702L &&
  1162. (((uint64_t)(c>>32))&0xffffffffL) == 2351960064L &&
  1163. (((uint64_t)(c))&0xffffffffL) == 0;
  1164. return ok;
  1165. }
  1166. ], [dnl
  1167. int ok = func( ((uint64_t)2000000000) * 1000000000,
  1168. ((uint64_t)1234567890) << 24);
  1169. return !ok;
  1170. ])],
  1171. [tor_cv_can_use_curve25519_donna_c64=yes],
  1172. [tor_cv_can_use_curve25519_donna_c64=no],
  1173. [AC_LINK_IFELSE(
  1174. [AC_LANG_PROGRAM([dnl
  1175. #include <stdint.h>
  1176. typedef unsigned uint128_t __attribute__((mode(TI)));
  1177. int func(uint64_t a, uint64_t b) {
  1178. uint128_t c = ((uint128_t)a) * b;
  1179. int ok = ((uint64_t)(c>>96)) == 522859 &&
  1180. (((uint64_t)(c>>64))&0xffffffffL) == 3604448702L &&
  1181. (((uint64_t)(c>>32))&0xffffffffL) == 2351960064L &&
  1182. (((uint64_t)(c))&0xffffffffL) == 0;
  1183. return ok;
  1184. }
  1185. ], [dnl
  1186. int ok = func( ((uint64_t)2000000000) * 1000000000,
  1187. ((uint64_t)1234567890) << 24);
  1188. return !ok;
  1189. ])],
  1190. [tor_cv_can_use_curve25519_donna_c64=cross],
  1191. [tor_cv_can_use_curve25519_donna_c64=no])])])
  1192. AC_CHECK_HEADERS([crypto_scalarmult_curve25519.h \
  1193. nacl/crypto_scalarmult_curve25519.h])
  1194. AC_CACHE_CHECK([for nacl compiled with a fast curve25519 implementation],
  1195. tor_cv_can_use_curve25519_nacl,
  1196. [tor_saved_LIBS="$LIBS"
  1197. LIBS="$LIBS -lnacl"
  1198. AC_LINK_IFELSE(
  1199. [AC_LANG_PROGRAM([dnl
  1200. #ifdef HAVE_CRYPTO_SCALARMULT_CURVE25519_H
  1201. #include <crypto_scalarmult_curve25519.h>
  1202. #elif defined(HAVE_NACL_CRYPTO_SCALARMULT_CURVE25519_H)
  1203. #include <nacl/crypto_scalarmult_curve25519.h>
  1204. #endif
  1205. #ifdef crypto_scalarmult_curve25519_ref_BYTES
  1206. #error Hey, this is the reference implementation! That's not fast.
  1207. #endif
  1208. ], [
  1209. unsigned char *a, *b, *c; crypto_scalarmult_curve25519(a,b,c);
  1210. ])], [tor_cv_can_use_curve25519_nacl=yes],
  1211. [tor_cv_can_use_curve25519_nacl=no])
  1212. LIBS="$tor_saved_LIBS" ])
  1213. dnl Okay, now we need to figure out which one to actually use. Fall back
  1214. dnl to curve25519-donna.c
  1215. if test "x$tor_cv_can_use_curve25519_donna_c64" != "xno"; then
  1216. build_curve25519_donna_c64=yes
  1217. use_curve25519_donna=yes
  1218. elif test "x$tor_cv_can_use_curve25519_nacl" = "xyes"; then
  1219. use_curve25519_nacl=yes
  1220. CURVE25519_LIBS=-lnacl
  1221. else
  1222. build_curve25519_donna=yes
  1223. use_curve25519_donna=yes
  1224. fi
  1225. if test "x$use_curve25519_donna" = "xyes"; then
  1226. AC_DEFINE(USE_CURVE25519_DONNA, 1,
  1227. [Defined if we should use an internal curve25519_donna{,_c64} implementation])
  1228. fi
  1229. if test "x$use_curve25519_nacl" = "xyes"; then
  1230. AC_DEFINE(USE_CURVE25519_NACL, 1,
  1231. [Defined if we should use a curve25519 from nacl])
  1232. fi
  1233. AM_CONDITIONAL(BUILD_CURVE25519_DONNA,
  1234. test "x$build_curve25519_donna" = "xyes")
  1235. AM_CONDITIONAL(BUILD_CURVE25519_DONNA_C64,
  1236. test "x$build_curve25519_donna_c64" = "xyes")
  1237. AC_SUBST(CURVE25519_LIBS)
  1238. dnl Make sure to enable support for large off_t if available.
  1239. AC_SYS_LARGEFILE
  1240. AC_CHECK_HEADERS([errno.h \
  1241. fcntl.h \
  1242. signal.h \
  1243. string.h \
  1244. sys/capability.h \
  1245. sys/fcntl.h \
  1246. sys/stat.h \
  1247. sys/time.h \
  1248. sys/types.h \
  1249. time.h \
  1250. unistd.h \
  1251. arpa/inet.h \
  1252. crt_externs.h \
  1253. execinfo.h \
  1254. gnu/libc-version.h \
  1255. grp.h \
  1256. ifaddrs.h \
  1257. inttypes.h \
  1258. limits.h \
  1259. linux/types.h \
  1260. machine/limits.h \
  1261. malloc.h \
  1262. malloc/malloc.h \
  1263. malloc_np.h \
  1264. netdb.h \
  1265. netinet/in.h \
  1266. netinet/in6.h \
  1267. pwd.h \
  1268. readpassphrase.h \
  1269. stdatomic.h \
  1270. sys/eventfd.h \
  1271. sys/file.h \
  1272. sys/ioctl.h \
  1273. sys/limits.h \
  1274. sys/mman.h \
  1275. sys/param.h \
  1276. sys/prctl.h \
  1277. sys/random.h \
  1278. sys/resource.h \
  1279. sys/select.h \
  1280. sys/socket.h \
  1281. sys/statvfs.h \
  1282. sys/syscall.h \
  1283. sys/sysctl.h \
  1284. sys/syslimits.h \
  1285. sys/time.h \
  1286. sys/types.h \
  1287. sys/un.h \
  1288. sys/utime.h \
  1289. sys/wait.h \
  1290. syslog.h \
  1291. utime.h])
  1292. AC_CHECK_HEADERS(sys/param.h)
  1293. AC_CHECK_HEADERS(net/if.h, net_if_found=1, net_if_found=0,
  1294. [#ifdef HAVE_SYS_TYPES_H
  1295. #include <sys/types.h>
  1296. #endif
  1297. #ifdef HAVE_SYS_SOCKET_H
  1298. #include <sys/socket.h>
  1299. #endif])
  1300. AC_CHECK_HEADERS(net/pfvar.h, net_pfvar_found=1, net_pfvar_found=0,
  1301. [#ifdef HAVE_SYS_TYPES_H
  1302. #include <sys/types.h>
  1303. #endif
  1304. #ifdef HAVE_SYS_SOCKET_H
  1305. #include <sys/socket.h>
  1306. #endif
  1307. #ifdef HAVE_NET_IF_H
  1308. #include <net/if.h>
  1309. #endif
  1310. #ifdef HAVE_NETINET_IN_H
  1311. #include <netinet/in.h>
  1312. #endif])
  1313. AC_CHECK_HEADERS(linux/if.h,[],[],
  1314. [
  1315. #ifdef HAVE_SYS_SOCKET_H
  1316. #include <sys/socket.h>
  1317. #endif
  1318. ])
  1319. AC_CHECK_HEADERS(linux/netfilter_ipv4.h,
  1320. linux_netfilter_ipv4=1, linux_netfilter_ipv4=0,
  1321. [#ifdef HAVE_SYS_TYPES_H
  1322. #include <sys/types.h>
  1323. #endif
  1324. #ifdef HAVE_SYS_SOCKET_H
  1325. #include <sys/socket.h>
  1326. #endif
  1327. #ifdef HAVE_LIMITS_H
  1328. #include <limits.h>
  1329. #endif
  1330. #ifdef HAVE_LINUX_TYPES_H
  1331. #include <linux/types.h>
  1332. #endif
  1333. #ifdef HAVE_NETINET_IN6_H
  1334. #include <netinet/in6.h>
  1335. #endif
  1336. #ifdef HAVE_NETINET_IN_H
  1337. #include <netinet/in.h>
  1338. #endif])
  1339. AC_CHECK_HEADERS(linux/netfilter_ipv6/ip6_tables.h,
  1340. linux_netfilter_ipv6_ip6_tables=1, linux_netfilter_ipv6_ip6_tables=0,
  1341. [#ifdef HAVE_SYS_TYPES_H
  1342. #include <sys/types.h>
  1343. #endif
  1344. #ifdef HAVE_SYS_SOCKET_H
  1345. #include <sys/socket.h>
  1346. #endif
  1347. #ifdef HAVE_LIMITS_H
  1348. #include <limits.h>
  1349. #endif
  1350. #ifdef HAVE_LINUX_TYPES_H
  1351. #include <linux/types.h>
  1352. #endif
  1353. #ifdef HAVE_NETINET_IN6_H
  1354. #include <netinet/in6.h>
  1355. #endif
  1356. #ifdef HAVE_NETINET_IN_H
  1357. #include <netinet/in.h>
  1358. #endif
  1359. #ifdef HAVE_LINUX_IF_H
  1360. #include <linux/if.h>
  1361. #endif])
  1362. transparent_ok=0
  1363. if test "x$net_if_found" = "x1" && test "x$net_pfvar_found" = "x1"; then
  1364. transparent_ok=1
  1365. fi
  1366. if test "x$linux_netfilter_ipv4" = "x1"; then
  1367. transparent_ok=1
  1368. fi
  1369. if test "x$linux_netfilter_ipv6_ip6_tables" = "x1"; then
  1370. transparent_ok=1
  1371. fi
  1372. if test "x$transparent_ok" = "x1"; then
  1373. AC_DEFINE(USE_TRANSPARENT, 1, "Define to enable transparent proxy support")
  1374. else
  1375. AC_MSG_NOTICE([Transparent proxy support enabled, but missing headers.])
  1376. fi
  1377. AC_CHECK_MEMBERS([struct timeval.tv_sec], , ,
  1378. [#ifdef HAVE_SYS_TYPES_H
  1379. #include <sys/types.h>
  1380. #endif
  1381. #ifdef HAVE_SYS_TIME_H
  1382. #include <sys/time.h>
  1383. #endif])
  1384. AC_CHECK_SIZEOF(char)
  1385. AC_CHECK_SIZEOF(short)
  1386. AC_CHECK_SIZEOF(int)
  1387. AC_CHECK_SIZEOF(long)
  1388. AC_CHECK_SIZEOF(long long)
  1389. AC_CHECK_SIZEOF(__int64)
  1390. AC_CHECK_SIZEOF(void *)
  1391. AC_CHECK_SIZEOF(time_t)
  1392. AC_CHECK_SIZEOF(size_t)
  1393. AC_CHECK_SIZEOF(pid_t)
  1394. AC_CHECK_TYPES([uint, u_char, ssize_t])
  1395. AC_PC_FROM_UCONTEXT([:])
  1396. dnl used to include sockaddr_storage, but everybody has that.
  1397. AC_CHECK_TYPES([struct in6_addr, struct sockaddr_in6, sa_family_t], , ,
  1398. [#ifdef HAVE_SYS_TYPES_H
  1399. #include <sys/types.h>
  1400. #endif
  1401. #ifdef HAVE_NETINET_IN_H
  1402. #include <netinet/in.h>
  1403. #endif
  1404. #ifdef HAVE_NETINET_IN6_H
  1405. #include <netinet/in6.h>
  1406. #endif
  1407. #ifdef HAVE_SYS_SOCKET_H
  1408. #include <sys/socket.h>
  1409. #endif
  1410. #ifdef _WIN32
  1411. #define _WIN32_WINNT 0x0501
  1412. #define WIN32_LEAN_AND_MEAN
  1413. #include <winsock2.h>
  1414. #include <ws2tcpip.h>
  1415. #endif
  1416. ])
  1417. AC_CHECK_MEMBERS([struct in6_addr.s6_addr32, struct in6_addr.s6_addr16, struct sockaddr_in.sin_len, struct sockaddr_in6.sin6_len], , ,
  1418. [#ifdef HAVE_SYS_TYPES_H
  1419. #include <sys/types.h>
  1420. #endif
  1421. #ifdef HAVE_NETINET_IN_H
  1422. #include <netinet/in.h>
  1423. #endif
  1424. #ifdef HAVE_NETINET_IN6_H
  1425. #include <netinet/in6.h>
  1426. #endif
  1427. #ifdef HAVE_SYS_SOCKET_H
  1428. #include <sys/socket.h>
  1429. #endif
  1430. #ifdef _WIN32
  1431. #define _WIN32_WINNT 0x0501
  1432. #define WIN32_LEAN_AND_MEAN
  1433. #include <winsock2.h>
  1434. #include <ws2tcpip.h>
  1435. #endif
  1436. ])
  1437. AC_CHECK_TYPES([rlim_t], , ,
  1438. [#ifdef HAVE_SYS_TYPES_H
  1439. #include <sys/types.h>
  1440. #endif
  1441. #ifdef HAVE_SYS_TIME_H
  1442. #include <sys/time.h>
  1443. #endif
  1444. #ifdef HAVE_SYS_RESOURCE_H
  1445. #include <sys/resource.h>
  1446. #endif
  1447. ])
  1448. AX_CHECK_SIGN([time_t],
  1449. [ : ],
  1450. [ : ], [
  1451. #ifdef HAVE_SYS_TYPES_H
  1452. #include <sys/types.h>
  1453. #endif
  1454. #ifdef HAVE_SYS_TIME_H
  1455. #include <sys/time.h>
  1456. #endif
  1457. #ifdef HAVE_TIME_H
  1458. #include <time.h>
  1459. #endif
  1460. ])
  1461. if test "$ax_cv_decl_time_t_signed" = "no"; then
  1462. AC_MSG_ERROR([You have an unsigned time_t; Tor does not support that. Please tell the Tor developers about your interesting platform.])
  1463. fi
  1464. AX_CHECK_SIGN([size_t],
  1465. [ tor_cv_size_t_signed=yes ],
  1466. [ tor_cv_size_t_signed=no ], [
  1467. #ifdef HAVE_SYS_TYPES_H
  1468. #include <sys/types.h>
  1469. #endif
  1470. ])
  1471. if test "$ax_cv_decl_size_t_signed" = "yes"; then
  1472. AC_MSG_ERROR([You have a signed size_t; that's grossly nonconformant.])
  1473. fi
  1474. AX_CHECK_SIGN([enum always],
  1475. [ AC_DEFINE(ENUM_VALS_ARE_SIGNED, 1, [Define if enum is always signed]) ],
  1476. [ : ], [
  1477. enum always { AAA, BBB, CCC };
  1478. ])
  1479. AC_CHECK_SIZEOF(socklen_t, , [AC_INCLUDES_DEFAULT()
  1480. #ifdef HAVE_SYS_SOCKET_H
  1481. #include <sys/socket.h>
  1482. #endif
  1483. ])
  1484. # We want to make sure that we _don't_ have a cell_t defined, like IRIX does.
  1485. AC_CHECK_SIZEOF(cell_t)
  1486. # Let's see if stdatomic works. (There are some debian clangs that screw it
  1487. # up; see Tor bug #26779 and debian bug 903709.)
  1488. AC_CACHE_CHECK([whether C11 stdatomic.h actually works],
  1489. tor_cv_stdatomic_works,
  1490. [AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
  1491. #include <stdatomic.h>
  1492. struct x { atomic_size_t y; };
  1493. void try_atomic_init(struct x *xx)
  1494. {
  1495. atomic_init(&xx->y, 99);
  1496. atomic_fetch_add(&xx->y, 1);
  1497. }
  1498. ]])], [tor_cv_stdatomic_works=yes], [tor_cv_stdatomic_works=no])])
  1499. if test "$tor_cv_stdatomic_works" = "yes"; then
  1500. AC_DEFINE(STDATOMIC_WORKS, 1, [Set to 1 if we can compile a simple stdatomic example.])
  1501. elif test "$ac_cv_header_stdatomic_h" = "yes"; then
  1502. AC_MSG_WARN([Your compiler provides the stdatomic.h header, but it doesn't seem to work. I'll pretend it isn't there. If you are using Clang on Debian, maybe this is because of https://bugs.debian.org/903709 ])
  1503. fi
  1504. # Now make sure that NULL can be represented as zero bytes.
  1505. AC_CACHE_CHECK([whether memset(0) sets pointers to NULL], tor_cv_null_is_zero,
  1506. [AC_RUN_IFELSE([AC_LANG_SOURCE(
  1507. [[#include <stdlib.h>
  1508. #include <string.h>
  1509. #include <stdio.h>
  1510. #ifdef HAVE_STDDEF_H
  1511. #include <stddef.h>
  1512. #endif
  1513. int main () { char *p1,*p2; p1=NULL; memset(&p2,0,sizeof(p2));
  1514. return memcmp(&p1,&p2,sizeof(char*))?1:0; }]])],
  1515. [tor_cv_null_is_zero=yes],
  1516. [tor_cv_null_is_zero=no],
  1517. [tor_cv_null_is_zero=cross])])
  1518. if test "$tor_cv_null_is_zero" = "cross"; then
  1519. # Cross-compiling; let's hope that the target isn't raving mad.
  1520. AC_MSG_NOTICE([Cross-compiling: we'll assume that NULL is represented as a sequence of 0-valued bytes.])
  1521. fi
  1522. if test "$tor_cv_null_is_zero" != "no"; then
  1523. AC_DEFINE([NULL_REP_IS_ZERO_BYTES], 1,
  1524. [Define to 1 iff memset(0) sets pointers to NULL])
  1525. fi
  1526. AC_CACHE_CHECK([whether memset(0) sets doubles to 0.0], tor_cv_dbl0_is_zero,
  1527. [AC_RUN_IFELSE([AC_LANG_SOURCE(
  1528. [[#include <stdlib.h>
  1529. #include <string.h>
  1530. #include <stdio.h>
  1531. #ifdef HAVE_STDDEF_H
  1532. #include <stddef.h>
  1533. #endif
  1534. int main () { double d1,d2; d1=0; memset(&d2,0,sizeof(d2));
  1535. return memcmp(&d1,&d2,sizeof(d1))?1:0; }]])],
  1536. [tor_cv_dbl0_is_zero=yes],
  1537. [tor_cv_dbl0_is_zero=no],
  1538. [tor_cv_dbl0_is_zero=cross])])
  1539. if test "$tor_cv_dbl0_is_zero" = "cross"; then
  1540. # Cross-compiling; let's hope that the target isn't raving mad.
  1541. AC_MSG_NOTICE([Cross-compiling: we'll assume that 0.0 can be represented as a sequence of 0-valued bytes.])
  1542. fi
  1543. if test "$tor_cv_dbl0_is_zero" != "no"; then
  1544. AC_DEFINE([DOUBLE_0_REP_IS_ZERO_BYTES], 1,
  1545. [Define to 1 iff memset(0) sets doubles to 0.0])
  1546. fi
  1547. # And what happens when we malloc zero?
  1548. AC_CACHE_CHECK([whether we can malloc(0) safely.], tor_cv_malloc_zero_works,
  1549. [AC_RUN_IFELSE([AC_LANG_SOURCE(
  1550. [[#include <stdlib.h>
  1551. #include <string.h>
  1552. #include <stdio.h>
  1553. #ifdef HAVE_STDDEF_H
  1554. #include <stddef.h>
  1555. #endif
  1556. int main () { return malloc(0)?0:1; }]])],
  1557. [tor_cv_malloc_zero_works=yes],
  1558. [tor_cv_malloc_zero_works=no],
  1559. [tor_cv_malloc_zero_works=cross])])
  1560. if test "$tor_cv_malloc_zero_works" = "cross"; then
  1561. # Cross-compiling; let's hope that the target isn't raving mad.
  1562. AC_MSG_NOTICE([Cross-compiling: we'll assume that we need to check malloc() arguments for 0.])
  1563. fi
  1564. if test "$tor_cv_malloc_zero_works" = "yes"; then
  1565. AC_DEFINE([MALLOC_ZERO_WORKS], 1,
  1566. [Define to 1 iff malloc(0) returns a pointer])
  1567. fi
  1568. # whether we seem to be in a 2s-complement world.
  1569. AC_CACHE_CHECK([whether we are using 2s-complement arithmetic], tor_cv_twos_complement,
  1570. [AC_RUN_IFELSE([AC_LANG_SOURCE(
  1571. [[int main () { int problem = ((-99) != (~99)+1);
  1572. return problem ? 1 : 0; }]])],
  1573. [tor_cv_twos_complement=yes],
  1574. [tor_cv_twos_complement=no],
  1575. [tor_cv_twos_complement=cross])])
  1576. if test "$tor_cv_twos_complement" = "cross"; then
  1577. # Cross-compiling; let's hope that the target isn't raving mad.
  1578. AC_MSG_NOTICE([Cross-compiling: we'll assume that negative integers are represented with two's complement.])
  1579. fi
  1580. if test "$tor_cv_twos_complement" != "no"; then
  1581. AC_DEFINE([USING_TWOS_COMPLEMENT], 1,
  1582. [Define to 1 iff we represent negative integers with
  1583. two's complement])
  1584. fi
  1585. # What does shifting a negative value do?
  1586. AC_CACHE_CHECK([whether right-shift on negative values does sign-extension], tor_cv_sign_extend,
  1587. [AC_RUN_IFELSE([AC_LANG_SOURCE(
  1588. [[int main () { int okay = (-60 >> 8) == -1; return okay ? 0 : 1; }]])],
  1589. [tor_cv_sign_extend=yes],
  1590. [tor_cv_sign_extend=no],
  1591. [tor_cv_sign_extend=cross])])
  1592. if test "$tor_cv_sign_extend" = "cross"; then
  1593. # Cross-compiling; let's hope that the target isn't raving mad.
  1594. AC_MSG_NOTICE([Cross-compiling: we'll assume that right-shifting negative integers causes sign-extension])
  1595. fi
  1596. if test "$tor_cv_sign_extend" != "no"; then
  1597. AC_DEFINE([RSHIFT_DOES_SIGN_EXTEND], 1,
  1598. [Define to 1 iff right-shifting a negative value performs sign-extension])
  1599. fi
  1600. # Is uint8_t the same type as unsigned char?
  1601. AC_CACHE_CHECK([whether uint8_t is the same type as unsigned char], tor_cv_uint8_uchar,
  1602. [AC_COMPILE_IFELSE([AC_LANG_SOURCE([[
  1603. #include <stdint.h>
  1604. extern uint8_t c;
  1605. unsigned char c;]])],
  1606. [tor_cv_uint8_uchar=yes],
  1607. [tor_cv_uint8_uchar=no],
  1608. [tor_cv_uint8_uchar=cross])])
  1609. if test "$tor_cv_uint8_uchar" = "cross"; then
  1610. AC_MSG_NOTICE([Cross-compiling: we'll assume that uint8_t is the same type as unsigned char])
  1611. fi
  1612. if test "$tor_cv_uint8_uchar" = "no"; then
  1613. AC_MSG_ERROR([We assume that uint8_t is the same type as unsigned char, but your compiler disagrees.])
  1614. fi
  1615. AC_ARG_WITH(tcmalloc,
  1616. AS_HELP_STRING(--with-tcmalloc, [use tcmalloc memory allocation library. Deprecated; see --with-malloc]),
  1617. [ tcmalloc=yes ], [ tcmalloc=no ])
  1618. default_malloc=system
  1619. if test "x$enable_openbsd_malloc" = "xyes" ; then
  1620. AC_MSG_NOTICE([The --enable-openbsd-malloc argument is deprecated; use --with-malloc=openbsd instead.])
  1621. default_malloc=openbsd
  1622. fi
  1623. if test "x$tcmalloc" = "xyes"; then
  1624. AC_MSG_NOTICE([The --with-tcmalloc argument is deprecated; use --with-malloc=tcmalloc instead.])
  1625. default_malloc=tcmalloc
  1626. fi
  1627. AC_ARG_WITH(malloc,
  1628. AS_HELP_STRING([--with-malloc=[system,jemalloc,tcmalloc,openbsd]],
  1629. [select special malloc implementation [system]]),
  1630. [ malloc="$with_malloc" ], [ malloc="$default_malloc" ])
  1631. AS_CASE([$malloc],
  1632. [tcmalloc], [
  1633. PKG_CHECK_MODULES([TCMALLOC],
  1634. [libtcmalloc],
  1635. have_tcmalloc=yes,
  1636. have_tcmalloc=no)
  1637. if test "x$have_tcmalloc" = "xno" ; then
  1638. AC_MSG_ERROR([Unable to find tcmalloc requested by --with-malloc.])
  1639. fi
  1640. CFLAGS="$CFLAGS $TCMALLOC_CFLAGS"
  1641. LIBS="$TCMALLOC_LIBS $LIBS"
  1642. ],
  1643. [jemalloc], [
  1644. PKG_CHECK_MODULES([JEMALLOC],
  1645. [jemalloc],
  1646. have_jemalloc=yes,
  1647. have_jemalloc=no)
  1648. if test "x$have_tcmalloc" = "xno" ; then
  1649. AC_MSG_ERROR([Unable to find jemalloc requested by --with-malloc.])
  1650. fi
  1651. CFLAGS="$CFLAGS $JEMALLOC_CFLAGS"
  1652. LIBS="$JEMALLOC_LIBS $LIBS"
  1653. using_custom_malloc=yes
  1654. ],
  1655. [openbsd], [
  1656. AC_MSG_WARN([The openbsd malloc port is deprecated in Tor 0.3.5 and will be removed in a future version.])
  1657. enable_openbsd_malloc=yes
  1658. ],
  1659. [system], [
  1660. # handle this later, including the jemalloc fallback
  1661. AC_CHECK_FUNCS(mallinfo)
  1662. ],
  1663. [AC_MSG_ERROR([--with-malloc=`$with_malloc' not supported, see --help])
  1664. ])
  1665. AM_CONDITIONAL(USE_OPENBSD_MALLOC, test "x$enable_openbsd_malloc" = "xyes")
  1666. if test "$malloc" != "system"; then
  1667. # Tell the C compiler not to use the system allocator functions.
  1668. TOR_CHECK_CFLAGS([-fno-builtin-malloc -fno-builtin-realloc -fno-builtin-calloc -fno-builtin-free])
  1669. fi
  1670. if test "$using_custom_malloc" = "yes"; then
  1671. # Tell the C compiler not to use the system allocator functions.
  1672. TOR_CHECK_CFLAGS([-fno-builtin-malloc -fno-builtin-realloc -fno-builtin-calloc -fno-builtin-free])
  1673. fi
  1674. # By default, we're going to assume we don't have mlockall()
  1675. # bionic and other platforms have various broken mlockall subsystems.
  1676. # Some systems don't have a working mlockall, some aren't linkable,
  1677. # and some have it but don't declare it.
  1678. AC_CHECK_FUNCS(mlockall)
  1679. AC_CHECK_DECLS([mlockall], , , [
  1680. #ifdef HAVE_SYS_MMAN_H
  1681. #include <sys/mman.h>
  1682. #endif])
  1683. # Allow user to specify an alternate syslog facility
  1684. AC_ARG_WITH(syslog-facility,
  1685. AS_HELP_STRING(--with-syslog-facility=LOG, [syslog facility to use (default=LOG_DAEMON)]),
  1686. syslog_facility="$withval", syslog_facility="LOG_DAEMON")
  1687. AC_DEFINE_UNQUOTED(LOGFACILITY,$syslog_facility,[name of the syslog facility])
  1688. AC_SUBST(LOGFACILITY)
  1689. # Check if we have getresuid and getresgid
  1690. AC_CHECK_FUNCS(getresuid getresgid)
  1691. # Check for gethostbyname_r in all its glorious incompatible versions.
  1692. # (This logic is based on that in Python's configure.in)
  1693. AH_TEMPLATE(HAVE_GETHOSTBYNAME_R,
  1694. [Define this if you have any gethostbyname_r()])
  1695. AC_CHECK_FUNC(gethostbyname_r, [
  1696. AC_MSG_CHECKING([how many arguments gethostbyname_r() wants])
  1697. OLD_CFLAGS=$CFLAGS
  1698. CFLAGS="$CFLAGS $MY_CPPFLAGS $MY_THREAD_CPPFLAGS $MY_CFLAGS"
  1699. AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
  1700. #include <netdb.h>
  1701. ]], [[
  1702. char *cp1, *cp2;
  1703. struct hostent *h1, *h2;
  1704. int i1, i2;
  1705. (void)gethostbyname_r(cp1,h1,cp2,i1,&h2,&i2);
  1706. ]])],[
  1707. AC_DEFINE(HAVE_GETHOSTBYNAME_R)
  1708. AC_DEFINE(HAVE_GETHOSTBYNAME_R_6_ARG, 1,
  1709. [Define this if gethostbyname_r takes 6 arguments])
  1710. AC_MSG_RESULT(6)
  1711. ], [
  1712. AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
  1713. #include <netdb.h>
  1714. ]], [[
  1715. char *cp1, *cp2;
  1716. struct hostent *h1;
  1717. int i1, i2;
  1718. (void)gethostbyname_r(cp1,h1,cp2,i1,&i2);
  1719. ]])], [
  1720. AC_DEFINE(HAVE_GETHOSTBYNAME_R)
  1721. AC_DEFINE(HAVE_GETHOSTBYNAME_R_5_ARG, 1,
  1722. [Define this if gethostbyname_r takes 5 arguments])
  1723. AC_MSG_RESULT(5)
  1724. ], [
  1725. AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
  1726. #include <netdb.h>
  1727. ]], [[
  1728. char *cp1;
  1729. struct hostent *h1;
  1730. struct hostent_data hd;
  1731. (void) gethostbyname_r(cp1,h1,&hd);
  1732. ]])], [
  1733. AC_DEFINE(HAVE_GETHOSTBYNAME_R)
  1734. AC_DEFINE(HAVE_GETHOSTBYNAME_R_3_ARG, 1,
  1735. [Define this if gethostbyname_r takes 3 arguments])
  1736. AC_MSG_RESULT(3)
  1737. ], [
  1738. AC_MSG_RESULT(0)
  1739. ])
  1740. ])
  1741. ])
  1742. CFLAGS=$OLD_CFLAGS
  1743. ])
  1744. AC_CACHE_CHECK([whether the C compiler supports __func__],
  1745. tor_cv_have_func_macro,
  1746. AC_COMPILE_IFELSE([AC_LANG_SOURCE([
  1747. #include <stdio.h>
  1748. int main(int c, char **v) { puts(__func__); }])],
  1749. tor_cv_have_func_macro=yes,
  1750. tor_cv_have_func_macro=no))
  1751. AC_CACHE_CHECK([whether the C compiler supports __FUNC__],
  1752. tor_cv_have_FUNC_macro,
  1753. AC_COMPILE_IFELSE([AC_LANG_SOURCE([
  1754. #include <stdio.h>
  1755. int main(int c, char **v) { puts(__FUNC__); }])],
  1756. tor_cv_have_FUNC_macro=yes,
  1757. tor_cv_have_FUNC_macro=no))
  1758. AC_CACHE_CHECK([whether the C compiler supports __FUNCTION__],
  1759. tor_cv_have_FUNCTION_macro,
  1760. AC_COMPILE_IFELSE([AC_LANG_SOURCE([
  1761. #include <stdio.h>
  1762. int main(int c, char **v) { puts(__FUNCTION__); }])],
  1763. tor_cv_have_FUNCTION_macro=yes,
  1764. tor_cv_have_FUNCTION_macro=no))
  1765. AC_CACHE_CHECK([whether we have extern char **environ already declared],
  1766. tor_cv_have_environ_declared,
  1767. AC_COMPILE_IFELSE([AC_LANG_SOURCE([
  1768. #ifdef HAVE_UNISTD_H
  1769. #include <unistd.h>
  1770. #endif
  1771. #include <stdlib.h>
  1772. int main(int c, char **v) { char **t = environ; }])],
  1773. tor_cv_have_environ_declared=yes,
  1774. tor_cv_have_environ_declared=no))
  1775. if test "$tor_cv_have_func_macro" = "yes"; then
  1776. AC_DEFINE(HAVE_MACRO__func__, 1, [Defined if the compiler supports __func__])
  1777. fi
  1778. if test "$tor_cv_have_FUNC_macro" = "yes"; then
  1779. AC_DEFINE(HAVE_MACRO__FUNC__, 1, [Defined if the compiler supports __FUNC__])
  1780. fi
  1781. if test "$tor_cv_have_FUNCTION_macro" = "yes"; then
  1782. AC_DEFINE(HAVE_MACRO__FUNCTION__, 1,
  1783. [Defined if the compiler supports __FUNCTION__])
  1784. fi
  1785. if test "$tor_cv_have_environ_declared" = "yes"; then
  1786. AC_DEFINE(HAVE_EXTERN_ENVIRON_DECLARED, 1,
  1787. [Defined if we have extern char **environ already declared])
  1788. fi
  1789. # $prefix stores the value of the --prefix command line option, or
  1790. # NONE if the option wasn't set. In the case that it wasn't set, make
  1791. # it be the default, so that we can use it to expand directories now.
  1792. if test "x$prefix" = "xNONE"; then
  1793. prefix=$ac_default_prefix
  1794. fi
  1795. # and similarly for $exec_prefix
  1796. if test "x$exec_prefix" = "xNONE"; then
  1797. exec_prefix=$prefix
  1798. fi
  1799. if test "x$BUILDDIR" = "x"; then
  1800. BUILDDIR=`pwd`
  1801. fi
  1802. AC_SUBST(BUILDDIR)
  1803. AH_TEMPLATE([BUILDDIR],[tor's build directory])
  1804. AC_DEFINE_UNQUOTED(BUILDDIR,"$BUILDDIR")
  1805. if test "x$SRCDIR" = "x"; then
  1806. SRCDIR=$(cd "$srcdir"; pwd)
  1807. fi
  1808. AH_TEMPLATE([SRCDIR],[tor's sourcedir directory])
  1809. AC_DEFINE_UNQUOTED(SRCDIR,"$SRCDIR")
  1810. if test "x$CONFDIR" = "x"; then
  1811. CONFDIR=`eval echo $sysconfdir/tor`
  1812. fi
  1813. AC_SUBST(CONFDIR)
  1814. AH_TEMPLATE([CONFDIR],[tor's configuration directory])
  1815. AC_DEFINE_UNQUOTED(CONFDIR,"$CONFDIR")
  1816. BINDIR=`eval echo $bindir`
  1817. AC_SUBST(BINDIR)
  1818. LOCALSTATEDIR=`eval echo $localstatedir`
  1819. AC_SUBST(LOCALSTATEDIR)
  1820. if test "$bwin32" = "true"; then
  1821. # Test if the linker supports the --nxcompat and --dynamicbase options
  1822. # for Windows
  1823. save_LDFLAGS="$LDFLAGS"
  1824. LDFLAGS="-Wl,--nxcompat -Wl,--dynamicbase"
  1825. AC_MSG_CHECKING([whether the linker supports DllCharacteristics])
  1826. AC_LINK_IFELSE([AC_LANG_PROGRAM([])],
  1827. [AC_MSG_RESULT([yes])]
  1828. [save_LDFLAGS="$save_LDFLAGS $LDFLAGS"],
  1829. [AC_MSG_RESULT([no])]
  1830. )
  1831. LDFLAGS="$save_LDFLAGS"
  1832. fi
  1833. # Set CFLAGS _after_ all the above checks, since our warnings are stricter
  1834. # than autoconf's macros like.
  1835. if test "$GCC" = "yes"; then
  1836. # Disable GCC's strict aliasing checks. They are an hours-to-debug
  1837. # accident waiting to happen.
  1838. CFLAGS="$CFLAGS -Wall -fno-strict-aliasing"
  1839. else
  1840. # Override optimization level for non-gcc compilers
  1841. CFLAGS="$CFLAGS -O"
  1842. enable_gcc_warnings=no
  1843. enable_gcc_warnings_advisory=no
  1844. fi
  1845. # Warnings implies advisory-warnings and -Werror.
  1846. if test "$enable_gcc_warnings" = "yes"; then
  1847. enable_gcc_warnings_advisory=yes
  1848. enable_fatal_warnings=yes
  1849. fi
  1850. # OS X Lion started deprecating the system openssl. Let's just disable
  1851. # all deprecation warnings on OS X. Also, to potentially make the binary
  1852. # a little smaller, let's enable dead_strip.
  1853. case "$host_os" in
  1854. darwin*)
  1855. CFLAGS="$CFLAGS -Wno-deprecated-declarations"
  1856. LDFLAGS="$LDFLAGS -dead_strip" ;;
  1857. esac
  1858. # Add some more warnings which we use in development but not in the
  1859. # released versions. (Some relevant gcc versions can't handle these.)
  1860. #
  1861. # Note that we have to do this near the end of the autoconf process, or
  1862. # else we may run into problems when these warnings hit on the testing C
  1863. # programs that autoconf wants to build.
  1864. if test "x$enable_gcc_warnings_advisory" != "xno"; then
  1865. case "$host" in
  1866. *-*-openbsd* | *-*-bitrig*)
  1867. # Some OpenBSD versions (like 4.8) have -Wsystem-headers by default.
  1868. # That's fine, except that the headers don't pass -Wredundant-decls.
  1869. # Therefore, let's disable -Wsystem-headers when we're building
  1870. # with maximal warnings on OpenBSD.
  1871. CFLAGS="$CFLAGS -Wno-system-headers" ;;
  1872. esac
  1873. # GCC4.3 users once report trouble with -Wstrict-overflow=5. GCC5 users
  1874. # have it work better.
  1875. # CFLAGS="$CFLAGS -Wstrict-overflow=1"
  1876. # This warning was added in gcc 4.3, but it appears to generate
  1877. # spurious warnings in gcc 4.4. I don't know if it works in 4.5.
  1878. #CFLAGS="$CFLAGS -Wlogical-op"
  1879. m4_foreach_w([warning_flag], [
  1880. -Waddress
  1881. -Waddress-of-array-temporary
  1882. -Waddress-of-temporary
  1883. -Wambiguous-macro
  1884. -Wanonymous-pack-parens
  1885. -Warc
  1886. -Warc-abi
  1887. -Warc-bridge-casts-disallowed-in-nonarc
  1888. -Warc-maybe-repeated-use-of-weak
  1889. -Warc-performSelector-leaks
  1890. -Warc-repeated-use-of-weak
  1891. -Warray-bounds
  1892. -Warray-bounds-pointer-arithmetic
  1893. -Wasm
  1894. -Wasm-operand-widths
  1895. -Watomic-properties
  1896. -Watomic-property-with-user-defined-accessor
  1897. -Wauto-import
  1898. -Wauto-storage-class
  1899. -Wauto-var-id
  1900. -Wavailability
  1901. -Wbackslash-newline-escape
  1902. -Wbad-array-new-length
  1903. -Wbind-to-temporary-copy
  1904. -Wbitfield-constant-conversion
  1905. -Wbool-conversion
  1906. -Wbool-conversions
  1907. -Wbuiltin-requires-header
  1908. -Wchar-align
  1909. -Wcompare-distinct-pointer-types
  1910. -Wcomplex-component-init
  1911. -Wconditional-type-mismatch
  1912. -Wconfig-macros
  1913. -Wconstant-conversion
  1914. -Wconstant-logical-operand
  1915. -Wconstexpr-not-const
  1916. -Wcustom-atomic-properties
  1917. -Wdangling-field
  1918. -Wdangling-initializer-list
  1919. -Wdate-time
  1920. -Wdelegating-ctor-cycles
  1921. -Wdeprecated-implementations
  1922. -Wdeprecated-register
  1923. -Wdirect-ivar-access
  1924. -Wdiscard-qual
  1925. -Wdistributed-object-modifiers
  1926. -Wdivision-by-zero
  1927. -Wdollar-in-identifier-extension
  1928. -Wdouble-promotion
  1929. -Wduplicate-decl-specifier
  1930. -Wduplicate-enum
  1931. -Wduplicate-method-arg
  1932. -Wduplicate-method-match
  1933. -Wduplicated-cond
  1934. -Wdynamic-class-memaccess
  1935. -Wembedded-directive
  1936. -Wempty-translation-unit
  1937. -Wenum-conversion
  1938. -Wexit-time-destructors
  1939. -Wexplicit-ownership-type
  1940. -Wextern-initializer
  1941. -Wextra
  1942. -Wextra-semi
  1943. -Wextra-tokens
  1944. -Wflexible-array-extensions
  1945. -Wfloat-conversion
  1946. -Wformat-non-iso
  1947. -Wfour-char-constants
  1948. -Wgcc-compat
  1949. -Wglobal-constructors
  1950. -Wgnu-array-member-paren-init
  1951. -Wgnu-designator
  1952. -Wgnu-static-float-init
  1953. -Wheader-guard
  1954. -Wheader-hygiene
  1955. -Widiomatic-parentheses
  1956. -Wignored-attributes
  1957. -Wimplicit-atomic-properties
  1958. -Wimplicit-conversion-floating-point-to-bool
  1959. -Wimplicit-exception-spec-mismatch
  1960. -Wimplicit-fallthrough
  1961. -Wimplicit-fallthrough-per-function
  1962. -Wimplicit-retain-self
  1963. -Wimport-preprocessor-directive-pedantic
  1964. -Wincompatible-library-redeclaration
  1965. -Wincompatible-pointer-types-discards-qualifiers
  1966. -Wincomplete-implementation
  1967. -Wincomplete-module
  1968. -Wincomplete-umbrella
  1969. -Winit-self
  1970. -Wint-conversions
  1971. -Wint-to-void-pointer-cast
  1972. -Winteger-overflow
  1973. -Winvalid-constexpr
  1974. -Winvalid-iboutlet
  1975. -Winvalid-noreturn
  1976. -Winvalid-pp-token
  1977. -Winvalid-source-encoding
  1978. -Winvalid-token-paste
  1979. -Wknr-promoted-parameter
  1980. -Wlarge-by-value-copy
  1981. -Wliteral-conversion
  1982. -Wliteral-range
  1983. -Wlocal-type-template-args
  1984. -Wlogical-op
  1985. -Wloop-analysis
  1986. -Wmain-return-type
  1987. -Wmalformed-warning-check
  1988. -Wmethod-signatures
  1989. -Wmicrosoft
  1990. -Wmicrosoft-exists
  1991. -Wmismatched-parameter-types
  1992. -Wmismatched-return-types
  1993. -Wmissing-field-initializers
  1994. -Wmissing-format-attribute
  1995. -Wmissing-noreturn
  1996. -Wmissing-selector-name
  1997. -Wmissing-sysroot
  1998. -Wmissing-variable-declarations
  1999. -Wmodule-conflict
  2000. -Wnested-anon-types
  2001. -Wnewline-eof
  2002. -Wnon-literal-null-conversion
  2003. -Wnon-pod-varargs
  2004. -Wnonportable-cfstrings
  2005. -Wnormalized=nfkc
  2006. -Wnull-arithmetic
  2007. -Wnull-character
  2008. -Wnull-conversion
  2009. -Wnull-dereference
  2010. -Wout-of-line-declaration
  2011. -Wover-aligned
  2012. -Woverlength-strings
  2013. -Woverride-init
  2014. -Woverriding-method-mismatch
  2015. -Wpointer-type-mismatch
  2016. -Wpredefined-identifier-outside-function
  2017. -Wprotocol-property-synthesis-ambiguity
  2018. -Wreadonly-iboutlet-property
  2019. -Wreadonly-setter-attrs
  2020. -Wreceiver-expr
  2021. -Wreceiver-forward-class
  2022. -Wreceiver-is-weak
  2023. -Wreinterpret-base-class
  2024. -Wrequires-super-attribute
  2025. -Wreserved-user-defined-literal
  2026. -Wreturn-stack-address
  2027. -Wsection
  2028. -Wselector-type-mismatch
  2029. -Wsentinel
  2030. -Wserialized-diagnostics
  2031. -Wshadow
  2032. -Wshift-count-negative
  2033. -Wshift-count-overflow
  2034. -Wshift-negative-value
  2035. -Wshift-overflow=2
  2036. -Wshift-sign-overflow
  2037. -Wshorten-64-to-32
  2038. -Wsizeof-array-argument
  2039. -Wsource-uses-openmp
  2040. -Wstatic-float-init
  2041. -Wstatic-in-inline
  2042. -Wstatic-local-in-inline
  2043. -Wstrict-overflow=1
  2044. -Wstring-compare
  2045. -Wstring-conversion
  2046. -Wstrlcpy-strlcat-size
  2047. -Wstrncat-size
  2048. -Wsuggest-attribute=format
  2049. -Wsuggest-attribute=noreturn
  2050. -Wsuper-class-method-mismatch
  2051. -Wswitch-bool
  2052. -Wsync-nand
  2053. -Wtautological-constant-out-of-range-compare
  2054. -Wtentative-definition-incomplete-type
  2055. -Wtrampolines
  2056. -Wtype-safety
  2057. -Wtypedef-redefinition
  2058. -Wtypename-missing
  2059. -Wundefined-inline
  2060. -Wundefined-internal
  2061. -Wundefined-reinterpret-cast
  2062. -Wunicode
  2063. -Wunicode-whitespace
  2064. -Wunknown-warning-option
  2065. -Wunnamed-type-template-args
  2066. -Wunneeded-member-function
  2067. -Wunsequenced
  2068. -Wunsupported-visibility
  2069. -Wunused-but-set-parameter
  2070. -Wunused-but-set-variable
  2071. -Wunused-command-line-argument
  2072. -Wunused-const-variable=2
  2073. -Wunused-exception-parameter
  2074. -Wunused-local-typedefs
  2075. -Wunused-member-function
  2076. -Wunused-sanitize-argument
  2077. -Wunused-volatile-lvalue
  2078. -Wuser-defined-literals
  2079. -Wvariadic-macros
  2080. -Wvector-conversion
  2081. -Wvector-conversions
  2082. -Wvexing-parse
  2083. -Wvisibility
  2084. -Wvla-extension
  2085. -Wzero-length-array
  2086. ], [ TOR_CHECK_CFLAGS([warning_flag]) ])
  2087. dnl We should re-enable this in some later version. Clang doesn't
  2088. dnl mind, but it causes trouble with GCC.
  2089. dnl -Wstrict-overflow=2
  2090. dnl These seem to require annotations that we don't currently use,
  2091. dnl and they give false positives in our pthreads wrappers. (Clang 4)
  2092. dnl -Wthread-safety
  2093. dnl -Wthread-safety-analysis
  2094. dnl -Wthread-safety-attributes
  2095. dnl -Wthread-safety-beta
  2096. dnl -Wthread-safety-precise
  2097. CFLAGS="$CFLAGS -W -Wfloat-equal -Wundef -Wpointer-arith"
  2098. CFLAGS="$CFLAGS -Wstrict-prototypes -Wmissing-prototypes -Wwrite-strings"
  2099. CFLAGS="$CFLAGS -Wredundant-decls -Wchar-subscripts -Wcomment -Wformat=2"
  2100. CFLAGS="$CFLAGS -Wwrite-strings"
  2101. CFLAGS="$CFLAGS -Wnested-externs -Wbad-function-cast -Wswitch-enum"
  2102. CFLAGS="$CFLAGS -Waggregate-return -Wpacked -Wunused"
  2103. CFLAGS="$CFLAGS -Wunused-parameter "
  2104. # These interfere with building main() { return 0; }, which autoconf
  2105. # likes to use as its default program.
  2106. CFLAGS="$CFLAGS -Wold-style-definition -Wmissing-declarations"
  2107. if test "$tor_cv_cflags__Wnull_dereference" = "yes"; then
  2108. AC_DEFINE([HAVE_CFLAG_WNULL_DEREFERENCE], 1, [True if we have -Wnull-dereference])
  2109. fi
  2110. if test "$tor_cv_cflags__Woverlength_strings" = "yes"; then
  2111. AC_DEFINE([HAVE_CFLAG_WOVERLENGTH_STRINGS], 1, [True if we have -Woverlength-strings])
  2112. fi
  2113. if test "$tor_cv_cflags__warn_unused_const_variable_2" = "yes"; then
  2114. AC_DEFINE([HAVE_CFLAG_WUNUSED_CONST_VARIABLE], 1, [True if we have -Wunused-const-variable])
  2115. fi
  2116. if test "x$enable_fatal_warnings" = "xyes"; then
  2117. # I'd like to use TOR_CHECK_CFLAGS here, but I can't, since the
  2118. # default autoconf programs are full of errors.
  2119. CFLAGS="$CFLAGS -Werror"
  2120. fi
  2121. fi
  2122. if test "$enable_coverage" = "yes" && test "$have_clang" = "no"; then
  2123. case "$host_os" in
  2124. darwin*)
  2125. AC_MSG_WARN([Tried to enable coverage on OSX without using the clang compiler. This might not work! If coverage fails, use CC=clang when configuring with --enable-coverage.])
  2126. esac
  2127. fi
  2128. CPPFLAGS="$CPPFLAGS $TOR_CPPFLAGS_libevent $TOR_CPPFLAGS_openssl $TOR_CPPFLAGS_zlib"
  2129. AC_CONFIG_FILES([
  2130. Doxyfile
  2131. Makefile
  2132. config.rust
  2133. link_rust.sh
  2134. contrib/dist/suse/tor.sh
  2135. contrib/operator-tools/tor.logrotate
  2136. contrib/dist/tor.sh
  2137. contrib/dist/torctl
  2138. contrib/dist/tor.service
  2139. src/config/torrc.sample
  2140. src/config/torrc.minimal
  2141. src/rust/.cargo/config
  2142. scripts/maint/checkOptionDocs.pl
  2143. scripts/maint/updateVersions.pl
  2144. ])
  2145. if test "x$asciidoc" = "xtrue" && test "$ASCIIDOC" = "none"; then
  2146. regular_mans="doc/tor doc/tor-gencert doc/tor-resolve doc/torify"
  2147. for file in $regular_mans ; do
  2148. if ! [[ -f "$srcdir/$file.1.in" ]] || ! [[ -f "$srcdir/$file.html.in" ]] ; then
  2149. echo "==================================";
  2150. echo;
  2151. echo "Building Tor has failed since manpages cannot be built.";
  2152. echo;
  2153. echo "You need asciidoc installed to be able to build the manpages.";
  2154. echo "To build without manpages, use the --disable-asciidoc argument";
  2155. echo "when calling configure.";
  2156. echo;
  2157. echo "==================================";
  2158. exit 1;
  2159. fi
  2160. done
  2161. fi
  2162. if test "$fragile_hardening" = "yes"; then
  2163. AC_MSG_WARN([
  2164. ============
  2165. Warning! Building Tor with --enable-fragile-hardening (also known as
  2166. --enable-expensive-hardening) makes some kinds of attacks harder, but makes
  2167. other kinds of attacks easier. A Tor instance build with this option will be
  2168. somewhat less vulnerable to remote code execution, arithmetic overflow, or
  2169. out-of-bounds read/writes... but at the cost of becoming more vulnerable to
  2170. denial of service attacks. For more information, see
  2171. https://trac.torproject.org/projects/tor/wiki/doc/TorFragileHardening
  2172. ============
  2173. ])
  2174. fi
  2175. AC_OUTPUT