236 lines
12 KiB
Plaintext
236 lines
12 KiB
Plaintext
|
# ===========================================================================
|
||
|
|
# https://github.com/BrianAker/ddm4/
|
||
|
|
# ===========================================================================
|
||
|
|
#
|
||
|
|
# SYNOPSIS
|
||
|
|
#
|
||
|
|
# AX_HARDEN_COMPILER_FLAGS()
|
||
|
|
# AX_HARDEN_LINKER_FLAGS()
|
||
|
|
# AX_HARDEN_CC_COMPILER_FLAGS()
|
||
|
|
# AX_HARDEN_CXX_COMPILER_FLAGS()
|
||
|
|
#
|
||
|
|
# DESCRIPTION
|
||
|
|
#
|
||
|
|
# Any compiler flag that "hardens" or tests code. C99 is assumed.
|
||
|
|
#
|
||
|
|
# NOTE: Implementation based on AX_APPEND_FLAG.
|
||
|
|
#
|
||
|
|
# LICENSE
|
||
|
|
#
|
||
|
|
# Copyright (C) 2012 Brian Aker
|
||
|
|
# All rights reserved.
|
||
|
|
#
|
||
|
|
# Redistribution and use in source and binary forms, with or without
|
||
|
|
# modification, are permitted provided that the following conditions are
|
||
|
|
# met:
|
||
|
|
#
|
||
|
|
# * Redistributions of source code must retain the above copyright
|
||
|
|
# notice, this list of conditions and the following disclaimer.
|
||
|
|
#
|
||
|
|
# * Redistributions in binary form must reproduce the above
|
||
|
|
# copyright notice, this list of conditions and the following disclaimer
|
||
|
|
# in the documentation and/or other materials provided with the
|
||
|
|
# distribution.
|
||
|
|
#
|
||
|
|
# * The names of its contributors may not be used to endorse or
|
||
|
|
# promote products derived from this software without specific prior
|
||
|
|
# written permission.
|
||
|
|
#
|
||
|
|
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
||
|
|
# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
||
|
|
# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
|
||
|
|
# A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
|
||
|
|
# OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
||
|
|
# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
|
||
|
|
# LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
|
||
|
|
# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
|
||
|
|
# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
||
|
|
# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
||
|
|
# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||
|
|
|
||
|
|
# The Following flags are not checked for
|
||
|
|
# -Wdeclaration-after-statement is counter to C99
|
||
|
|
# AX_APPEND_COMPILE_FLAGS([-std=c++11]) -- Not ready yet
|
||
|
|
# AX_APPEND_COMPILE_FLAGS([-pedantic]) -- ?
|
||
|
|
# AX_APPEND_COMPILE_FLAGS([-Wstack-protector]) -- Issues on 32bit compile
|
||
|
|
# AX_APPEND_COMPILE_FLAGS([-fstack-protector-all]) -- Issues on 32bit compile
|
||
|
|
# AX_APPEND_COMPILE_FLAGS([-Wlong-long]) -- Don't turn on for compatibility issues memcached_stat_st
|
||
|
|
# AX_APPEND_COMPILE_FLAGS([-Wold-style-definition],,[$ax_append_compile_cflags_extra])
|
||
|
|
# AX_APPEND_COMPILE_FLAGS([-std=c99],,[$ax_append_compile_cflags_extra])
|
||
|
|
# AX_APPEND_COMPILE_FLAGS([-Wlogical-op],,[$ax_append_compile_cflags_extra])
|
||
|
|
# AX_APPEND_COMPILE_FLAGS([-fstack-check],,[$ax_append_compile_cflags_extra]) -- problems with fastmath stack size checks
|
||
|
|
# AX_APPEND_COMPILE_FLAGS([-floop-parallelize-all],,[$ax_append_compile_cflags_extra]) -- causes RSA verify problem on x64
|
||
|
|
# AX_APPEND_COMPILE_FLAGS([-Wunreachable-code],,[$ax_append_compile_cflags_extra]) -- older clang and when gcc had it are buggy
|
||
|
|
|
||
|
|
#serial 4.1
|
||
|
|
|
||
|
|
AC_DEFUN([AX_HARDEN_LINKER_FLAGS], [
|
||
|
|
AC_REQUIRE([AX_VCS_CHECKOUT])
|
||
|
|
AC_REQUIRE([AX_DEBUG])
|
||
|
|
|
||
|
|
dnl If we are inside of VCS we append -Werror, otherwise we just use it to test other flags
|
||
|
|
AX_HARDEN_LIB=
|
||
|
|
ax_append_compile_link_flags_extra=
|
||
|
|
AS_IF([test "x$ac_cv_vcs_checkout" = "xyes"],[
|
||
|
|
AX_CHECK_LINK_FLAG([-Werror],[
|
||
|
|
AX_HARDEN_LIB="-Werror $AX_HARDEN_LIB"
|
||
|
|
])
|
||
|
|
],[
|
||
|
|
AX_CHECK_LINK_FLAG([-Werror],[
|
||
|
|
ax_append_compile_link_flags_extra='-Werror'
|
||
|
|
])
|
||
|
|
])
|
||
|
|
|
||
|
|
AX_CHECK_LINK_FLAG([-z relro -z now],[
|
||
|
|
AX_HARDEN_LIB="-z relro -z now $AX_HARDEN_LIB"
|
||
|
|
],,[$ax_append_compile_link_flags_extra])
|
||
|
|
|
||
|
|
AX_CHECK_LINK_FLAG([-pie],[
|
||
|
|
AX_HARDEN_LIB="-pie $AX_HARDEN_LIB"
|
||
|
|
],,[$ax_append_compile_link_flags_extra])
|
||
|
|
|
||
|
|
LIB="$LIB $AX_HARDEN_LIB"
|
||
|
|
])
|
||
|
|
|
||
|
|
AC_DEFUN([AX_HARDEN_CC_COMPILER_FLAGS], [
|
||
|
|
AC_REQUIRE([AX_HARDEN_LINKER_FLAGS])
|
||
|
|
|
||
|
|
AC_LANG_PUSH([C])
|
||
|
|
|
||
|
|
CFLAGS=
|
||
|
|
ac_cv_warnings_as_errors=no
|
||
|
|
ax_append_compile_cflags_extra=
|
||
|
|
AS_IF([test "$ac_cv_vcs_checkout" = "yes"],[
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Werror])
|
||
|
|
ac_cv_warnings_as_errors=yes
|
||
|
|
],[
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Werror],[ax_append_compile_cflags_extra])
|
||
|
|
])
|
||
|
|
|
||
|
|
AS_IF([test "$ax_enable_debug" = "yes"], [
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-g])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-ggdb],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-O0],,[$ax_append_compile_cflags_extra])
|
||
|
|
],[])
|
||
|
|
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wno-pragmas],,[$ax_append_compile_cflags_extra])
|
||
|
|
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wall],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wno-strict-aliasing],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wextra],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wunknown-pragmas],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wthis-test-should-fail],,[$ax_append_compile_cflags_extra])
|
||
|
|
dnl Anything below this comment please keep sorted.
|
||
|
|
AS_IF([test "$CC" = "clang"],[],[
|
||
|
|
AX_APPEND_COMPILE_FLAGS([--param=ssp-buffer-size=1],,[$ax_append_compile_cflags_extra])
|
||
|
|
])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Waddress],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Warray-bounds],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wbad-function-cast],,[$ax_append_compile_cflags_extra])
|
||
|
|
dnl Not in use -Wc++-compat
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wchar-subscripts],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wcomment],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wfloat-equal],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wformat-security],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wformat=2],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wmaybe-uninitialized],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wmissing-field-initializers],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wmissing-noreturn],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wmissing-prototypes],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wnested-externs],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wnormalized=id],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Woverride-init],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wpointer-arith],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wpointer-sign],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wredundant-decls],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wshadow],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wshorten-64-to-32],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wsign-compare],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wstrict-overflow=1],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wstrict-prototypes],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wswitch-enum],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wundef],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wunused],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wunused-result],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wunused-variable],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wwrite-strings],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-fwrapv],,[$ax_append_compile_cflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-fPIE],,[$ax_append_compile_cflags_extra])
|
||
|
|
AC_LANG_POP
|
||
|
|
])
|
||
|
|
|
||
|
|
AC_DEFUN([AX_HARDEN_CXX_COMPILER_FLAGS], [
|
||
|
|
AC_REQUIRE([AX_HARDEN_CC_COMPILER_FLAGS])
|
||
|
|
AC_LANG_PUSH([C++])
|
||
|
|
|
||
|
|
ax_append_compile_cxxflags_extra=
|
||
|
|
AS_IF([test "$ac_cv_warnings_as_errors" = "yes"],[
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Werror])
|
||
|
|
],[
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Werror],[ax_append_compile_cxxflags_extra])
|
||
|
|
])
|
||
|
|
|
||
|
|
AS_IF([test "$ax_enable_debug" = "yes" ], [
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-g],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-O0],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-ggdb],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
],[
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-D_FORTIFY_SOURCE=2],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
])
|
||
|
|
|
||
|
|
AS_IF([test "$ac_cv_vcs_checkout" = "yes" ], [
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Werror],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
],[
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wno-pragmas],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
])
|
||
|
|
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wall],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wno-strict-aliasing],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wextra],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wunknown-pragmas],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wthis-test-should-fail],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
dnl Anything below this comment please keep sorted.
|
||
|
|
AX_APPEND_COMPILE_FLAGS([--param=ssp-buffer-size=1],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Waddress],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Warray-bounds],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wchar-subscripts],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wcomment],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wctor-dtor-privacy],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wfloat-equal],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wformat=2],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wmaybe-uninitialized],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wmissing-field-initializers],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wmissing-noreturn],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wnon-virtual-dtor],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wnormalized=id],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Woverloaded-virtual],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wpointer-arith],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wredundant-decls],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wshadow],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wshorten-64-to-32],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wsign-compare],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wstrict-overflow=1],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wswitch-enum],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wundef],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wc++11-compat],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wunused],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wunused-result],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wunused-variable],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wwrite-strings],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-Wformat-security],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-fwrapv],,[$ax_append_compile_cxxflags_extra])
|
||
|
|
AC_LANG_POP
|
||
|
|
])
|
||
|
|
|
||
|
|
AC_DEFUN([AX_HARDEN_COMPILER_FLAGS], [
|
||
|
|
AC_REQUIRE([AX_HARDEN_CXX_COMPILER_FLAGS])
|
||
|
|
])
|
||
|
|
|
||
|
|
AC_DEFUN([AX_CC_OTHER_FLAGS], [
|
||
|
|
AC_REQUIRE([AX_HARDEN_CC_COMPILER_FLAGS])
|
||
|
|
|
||
|
|
AC_LANG_PUSH([C])
|
||
|
|
AX_APPEND_COMPILE_FLAGS([-pipe],,[$ax_append_compile_cflags_extra])
|
||
|
|
AC_LANG_POP
|
||
|
|
])
|