Update harden flags
[awesomized/libmemcached] / m4 / ax_harden_compiler_flags.m4
index 7eecc0a192a7268c079f89527192cc1d2f13c374..7a1fca9be5d28b6a21f5a2b0946f9c0573668412 100644 (file)
@@ -1,10 +1,13 @@
 # ===========================================================================
-#      http://www.gnu.org/software/autoconf-archive/ax_append_flag.html
+#      https://github.com/BrianAker/ddm4/
 # ===========================================================================
 #
 # SYNOPSIS
 #
-#   AX_HARDEN_COMPILER_FLAGS
+#   AX_HARDEN_COMPILER_FLAGS()
+#   AX_HARDEN_LINKER_FLAGS()
+#   AX_HARDEN_CC_COMPILER_FLAGS()
+#   AX_HARDEN_CXX_COMPILER_FLAGS()
 #
 # DESCRIPTION
 #
 #
 #  Copyright (C) 2012 Brian Aker
 #  All rights reserved.
-#  
+#
 #  Redistribution and use in source and binary forms, with or without
 #  modification, are permitted provided that the following conditions are
 #  met:
-#  
+#
 #      * Redistributions of source code must retain the above copyright
 #  notice, this list of conditions and the following disclaimer.
-#  
+#
 #      * Redistributions in binary form must reproduce the above
 #  copyright notice, this list of conditions and the following disclaimer
 #  in the documentation and/or other materials provided with the
 #  distribution.
-#  
+#
 #      * The names of its contributors may not be used to endorse or
 #  promote products derived from this software without specific prior
 #  written permission.
-#  
+#
 #  THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 #  "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 #  LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
 
 # The Following flags are not checked for
 # -Wdeclaration-after-statement is counter to C99
-# AX_APPEND_COMPILE_FLAGS([-std=c++11]) -- Not ready yet
-# AX_APPEND_COMPILE_FLAGS([-pedantic]) -- ?
-# AX_APPEND_COMPILE_FLAGS([-Wstack-protector]) -- Issues on 32bit compile
-# AX_APPEND_COMPILE_FLAGS([-fstack-protector-all]) -- Issues on 32bit compile
-# AX_APPEND_COMPILE_FLAGS([-Wlong-long]) -- Don't turn on for compatibility issues memcached_stat_st
-
-#serial 2
-  AC_DEFUN([AX_HARDEN_LINKER_FLAGS], [
-      AC_REQUIRE([AX_CHECK_LINK_FLAG])
-      AC_REQUIRE([AX_VCS_CHECKOUT])
-      AC_REQUIRE([AX_DEBUG])
-
-      AS_IF([test "$ac_cv_vcs_checkout" = yes], [
-          AX_CHECK_LINK_FLAG([-Werror])
-          ])
-      AX_CHECK_LINK_FLAG([-z relro -z now])
-      AX_CHECK_LINK_FLAG([-pie])
-      ])
+# AX_APPEND_COMPILE_FLAGS_ERROR([-std=c++11]) -- Not ready yet
+# AX_APPEND_COMPILE_FLAGS_ERROR([-pedantic]) -- ?
+# AX_APPEND_COMPILE_FLAGS_ERROR([-Wstack-protector]) -- Issues on 32bit compile
+# AX_APPEND_COMPILE_FLAGS_ERROR([-fstack-protector-all]) -- Issues on 32bit compile
+# AX_APPEND_COMPILE_FLAGS_ERROR([-Wlong-long]) -- Don't turn on for compatibility issues memcached_stat_st
 
-  AC_DEFUN([AX_HARDEN_C_COMPILER_FLAGS], [
-      AC_REQUIRE([AX_APPEND_COMPILE_FLAGS])
-      AC_REQUIRE([AX_HARDEN_LINKER_FLAGS])
+#serial 5
 
-      AC_LANG_PUSH([C])
-      AS_IF([test "$ax_with_debug" = yes], [
-        AX_APPEND_COMPILE_FLAGS([-O0])],[
-        AX_APPEND_COMPILE_FLAGS([-O2])
-        ])
-
-      ac_cv_warnings_as_errors=no
-      AS_IF([test "$ac_cv_vcs_checkout" = yes], [
-        AX_APPEND_COMPILE_FLAGS([-Werror])
-        ac_cv_warnings_as_errors=yes
-        ])
-
-      AX_APPEND_COMPILE_FLAGS([-Wall])
-      AX_APPEND_COMPILE_FLAGS([-Wextra])
-      AX_APPEND_COMPILE_FLAGS([-Wpragmas])
-      AX_APPEND_COMPILE_FLAGS([--paramssp-buffer-size=1])
-      AX_APPEND_COMPILE_FLAGS([-Waddress])
-      AX_APPEND_COMPILE_FLAGS([-Warray-bounds])
-      AX_APPEND_COMPILE_FLAGS([-Wbad-function-cast])
-      AX_APPEND_COMPILE_FLAGS([-Wchar-subscripts])
-      AX_APPEND_COMPILE_FLAGS([-Wcomment])
-      AX_APPEND_COMPILE_FLAGS([-Wctor-dtor-privacy])
-      AX_APPEND_COMPILE_FLAGS([-Wfloat-equal])
-      AX_APPEND_COMPILE_FLAGS([-Wformat=2])
-      AX_APPEND_COMPILE_FLAGS([-Wlogical-op])
-      AX_APPEND_COMPILE_FLAGS([-Wmaybe-uninitialized])
-      AX_APPEND_COMPILE_FLAGS([-Wmissing-field-initializers])
-      AX_APPEND_COMPILE_FLAGS([-Wmissing-noreturn])
-      AX_APPEND_COMPILE_FLAGS([-Wmissing-prototypes])
-      AX_APPEND_COMPILE_FLAGS([-Wnested-externs])
-      AX_APPEND_COMPILE_FLAGS([-Wnon-virtual-dtor])
-      AX_APPEND_COMPILE_FLAGS([-Wnormalized=id])
-      AX_APPEND_COMPILE_FLAGS([-Wold-style-definition])
-      AX_APPEND_COMPILE_FLAGS([-Woverloaded-virtual])
-      AX_APPEND_COMPILE_FLAGS([-Woverride-init])
-      AX_APPEND_COMPILE_FLAGS([-Wpointer-arith])
-      AX_APPEND_COMPILE_FLAGS([-Wredundant-decls])
-      AX_APPEND_COMPILE_FLAGS([-Wshadow])
-      AX_APPEND_COMPILE_FLAGS([-Wshorten-64-to-32])
-      AX_APPEND_COMPILE_FLAGS([-Wsign-compare])
-      AX_APPEND_COMPILE_FLAGS([-Wstrict-overflow=1])
-      AX_APPEND_COMPILE_FLAGS([-Wstrict-prototypes])
-      AX_APPEND_COMPILE_FLAGS([-Wswitch-enum])
-      AX_APPEND_COMPILE_FLAGS([-Wundef])
-      AX_APPEND_COMPILE_FLAGS([-Wunused-result])
-      AX_APPEND_COMPILE_FLAGS([-Wunused-variable])
-      AX_APPEND_COMPILE_FLAGS([-Wwrite-strings])
-      AX_APPEND_COMPILE_FLAGS([-fPIE])
-      AX_APPEND_COMPILE_FLAGS([-floop-parallelize-all])
-      AX_APPEND_COMPILE_FLAGS([-fwrapv])
-      AX_APPEND_COMPILE_FLAGS([-ggdb])
-      AX_APPEND_COMPILE_FLAGS([-std=c99])
-      AC_LANG_POP
+AC_DEFUN([AX_APPEND_LINK_FLAGS_ERROR],
+    [AC_PREREQ([2.63])dnl
+    AX_APPEND_LINK_FLAGS([$1],[LIB],[-Werror])])
 
-      ])
+AC_DEFUN([AX_APPEND_COMPILE_FLAGS_ERROR],
+    [AC_PREREQ([2.63])dnl
+    AX_APPEND_COMPILE_FLAGS([$1])])
+
+AC_DEFUN([AX_HARDEN_LINKER_FLAGS],
+    [AC_PREREQ([2.63])dnl
+    AC_REQUIRE([AX_CHECK_LINK_FLAG])
+    AC_REQUIRE([AX_VCS_CHECKOUT])
+    AC_REQUIRE([AX_DEBUG])
+    AC_REQUIRE([AX_CXX_COMPILER_VERSION])
+    AX_APPEND_LINK_FLAGS_ERROR([-z relro -z now])
+    AX_APPEND_LINK_FLAGS_ERROR([-pie])
+    AS_IF([test "x$ac_cv_vcs_checkout" = xyes],[AX_APPEND_LINK_FLAGS_ERROR([-Werror])])
+    ])
+
+AC_DEFUN([AX_HARDEN_CC_COMPILER_FLAGS],
+    [AC_PREREQ([2.63])dnl
+    AC_LANG_PUSH([C])dnl
+    AC_REQUIRE([AX_APPEND_COMPILE_FLAGS_ERROR])
+    AC_REQUIRE([AX_HARDEN_LINKER_FLAGS])
+
+    ac_cv_warnings_as_errors=no
+    AS_IF([test "x$ac_cv_vcs_checkout" = xyes],
+      [AX_APPEND_COMPILE_FLAGS_ERROR([-Werror])
+      ac_cv_warnings_as_errors=yes],
+      [AX_APPEND_COMPILE_FLAGS_ERROR([-Werror])])
+
+    AX_APPEND_LINK_FLAGS_ERROR([-g])
+    AS_IF([test "x$ax_enable_debug" = xyes],
+      [AX_APPEND_LINK_FLAGS_ERROR([-ggdb])
+      AX_APPEND_LINK_FLAGS_ERROR([-O0])],
+      [AX_APPEND_LINK_FLAGS_ERROR([-O2])])
 
-  AC_DEFUN([AX_HARDEN_CC_COMPILER_FLAGS], [
-      AC_REQUIRE([AX_HARDEN_C_COMPILER_FLAGS])
-      AC_LANG_PUSH([C++])
-
-      AS_IF([test "$ax_with_debug" = yes], [
-        AX_APPEND_COMPILE_FLAGS([-O0])],[
-        AX_APPEND_COMPILE_FLAGS([-O2])
-        AX_APPEND_COMPILE_FLAGS([-D_FORTIFY_SOURCE=2])
-        ])
-
-      AS_IF([test "$ac_cv_vcs_checkout" = yes], [
-        AX_APPEND_COMPILE_FLAGS([-Werror])
-        ])
-
-      AX_APPEND_COMPILE_FLAGS([-Wall])
-      AX_APPEND_COMPILE_FLAGS([-Wextra])
-      AX_APPEND_COMPILE_FLAGS([-Wpragmas])
-      AX_APPEND_COMPILE_FLAGS([--paramssp-buffer-size=1])
-      AX_APPEND_COMPILE_FLAGS([-Waddress])
-      AX_APPEND_COMPILE_FLAGS([-Warray-bounds])
-      AX_APPEND_COMPILE_FLAGS([-Wchar-subscripts])
-      AX_APPEND_COMPILE_FLAGS([-Wcomment])
-      AX_APPEND_COMPILE_FLAGS([-Wctor-dtor-privacy])
-      AX_APPEND_COMPILE_FLAGS([-Wfloat-equal])
-      AX_APPEND_COMPILE_FLAGS([-Wformat=2])
-      AX_APPEND_COMPILE_FLAGS([-Wmaybe-uninitialized])
-      AX_APPEND_COMPILE_FLAGS([-Wmissing-field-initializers])
-      AX_APPEND_COMPILE_FLAGS([-Wmissing-noreturn])
-      AX_APPEND_COMPILE_FLAGS([-Wlogical-op])
-      AX_APPEND_COMPILE_FLAGS([-Wnon-virtual-dtor])
-      AX_APPEND_COMPILE_FLAGS([-Wnormalized=id])
-      AX_APPEND_COMPILE_FLAGS([-Woverloaded-virtual])
-      AX_APPEND_COMPILE_FLAGS([-Wpointer-arith])
-      AX_APPEND_COMPILE_FLAGS([-Wredundant-decls])
-      AX_APPEND_COMPILE_FLAGS([-Wshadow])
-      AX_APPEND_COMPILE_FLAGS([-Wshorten-64-to-32])
-      AX_APPEND_COMPILE_FLAGS([-Wsign-compare])
-      AX_APPEND_COMPILE_FLAGS([-Wstrict-overflow=1])
-      AX_APPEND_COMPILE_FLAGS([-Wswitch-enum])
-      AX_APPEND_COMPILE_FLAGS([-Wundef])
-      AX_APPEND_COMPILE_FLAGS([-Wunused-result])
-      AX_APPEND_COMPILE_FLAGS([-Wunused-variable])
-      AX_APPEND_COMPILE_FLAGS([-Wwrite-strings])
-      AX_APPEND_COMPILE_FLAGS([-floop-parallelize-all])
-      AX_APPEND_COMPILE_FLAGS([-fwrapv])
-      AX_APPEND_COMPILE_FLAGS([-fPIE])
-      AX_APPEND_COMPILE_FLAGS([-ggdb])
-      AC_LANG_POP
+    AX_APPEND_COMPILE_FLAGS_ERROR([-fstack-check])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wno-pragmas])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wall])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wextra])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wunknown-pragmas])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wthis-test-should-fail])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-std=c99])
+# Anything below this comment please keep sorted.
+    AX_APPEND_COMPILE_FLAGS_ERROR([--param=ssp-buffer-size=1])
+# -Wmissing-format-attribute
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wno-attributes])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Waddress])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Warray-bounds])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wbad-function-cast])
+# Not in use -Wc++-compat
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wchar-subscripts])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wcomment])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wfloat-equal])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wformat-security])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wformat=2])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wlogical-op])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wmaybe-uninitialized])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wmissing-field-initializers])
+    AS_IF([test "$MINGW" = "yes"],
+        [AX_APPEND_COMPILE_FLAGS_ERROR([-Wno-missing-noreturn])],
+        [AX_APPEND_COMPILE_FLAGS_ERROR([-Wmissing-noreturn])])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wmissing-prototypes])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wnested-externs])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wnormalized=id])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wold-style-definition])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Woverride-init])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wpointer-arith])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wpointer-sign])
+    AS_IF([test "x$MINGW" = xyes],
+        [AX_APPEND_COMPILE_FLAGS_ERROR([-Wno-suggest-attribute=const])
+        AX_APPEND_COMPILE_FLAGS_ERROR([-Wno-suggest-attribute=noreturn])
+        AX_APPEND_COMPILE_FLAGS_ERROR([-Wno-suggest-attribute=pure])
+        AX_APPEND_COMPILE_FLAGS_ERROR([-Wno-redundant-decls])],
+        [AX_APPEND_COMPILE_FLAGS_ERROR([-Wredundant-decls])])
+
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wshadow])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wshorten-64-to-32])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wsign-compare])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wstrict-overflow=1])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wstrict-prototypes])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wswitch-enum])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wundef])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wunused])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wunused-result])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wunused-variable])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wwrite-strings])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-floop-parallelize-all])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-fwrapv])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-fmudflapt])
+    AC_LANG_POP([C])
+])
+
+AC_DEFUN([AX_HARDEN_CXX_COMPILER_FLAGS],
+    [AC_PREREQ([2.63])dnl
+    AC_REQUIRE([AX_HARDEN_CC_COMPILER_FLAGS])
+    AC_LANG_PUSH([C++])
+
+    AS_IF([test "x$ac_cv_warnings_as_errors" = xyes],
+      [AX_APPEND_COMPILE_FLAGS_ERROR([-Werror])],
+      [AX_APPEND_COMPILE_FLAGS_ERROR([-Werror])])
+
+    AX_APPEND_COMPILE_FLAGS_ERROR([-g])
+    AS_IF([test "x$ax_enable_debug" = xyes],
+      [AX_APPEND_COMPILE_FLAGS_ERROR([-O0])
+      AX_APPEND_COMPILE_FLAGS_ERROR([-ggdb])],
+      [AX_APPEND_COMPILE_FLAGS_ERROR([-O2])
+      AX_APPEND_COMPILE_FLAGS_ERROR([-D_FORTIFY_SOURCE=2])])
+
+    AS_IF([test "x$ac_cv_vcs_checkout" = xyes],
+      [AX_APPEND_COMPILE_FLAGS_ERROR([-Werror])
+      AX_APPEND_COMPILE_FLAGS_ERROR([-fstack-check])],
+      [AX_APPEND_COMPILE_FLAGS_ERROR([-Wno-pragmas])])
+
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wall])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wextra])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wunknown-pragmas])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wthis-test-should-fail])
+# Anything below this comment please keep sorted.
+    AX_APPEND_COMPILE_FLAGS_ERROR([--param=ssp-buffer-size=1])
+# -Wmissing-format-attribute
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wno-attributes])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Waddress])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Warray-bounds])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wchar-subscripts])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wcomment])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wctor-dtor-privacy])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wfloat-equal])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wformat=2])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wmaybe-uninitialized])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wmissing-field-initializers])
+    AS_IF([test "x$MINGW" = xyes],
+        [AX_APPEND_COMPILE_FLAGS_ERROR([-Wno-missing-noreturn])],
+        [AX_APPEND_COMPILE_FLAGS_ERROR([-Wmissing-noreturn])])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wlogical-op])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wnon-virtual-dtor])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wnormalized=id])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Woverloaded-virtual])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wpointer-arith])
+    AS_IF([test "x$MINGW" = xyes],
+        [AX_APPEND_COMPILE_FLAGS_ERROR([-Wno-suggest-attribute=const])
+        AX_APPEND_COMPILE_FLAGS_ERROR([-Wno-suggest-attribute=noreturn])
+        AX_APPEND_COMPILE_FLAGS_ERROR([-Wno-error=suggest-attribute=noreturn])
+        AX_APPEND_COMPILE_FLAGS_ERROR([-Wno-redundant-decls])],
+        [AX_APPEND_COMPILE_FLAGS_ERROR([-Wredundant-decls])])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wshadow])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wshorten-64-to-32])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wsign-compare])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wstrict-overflow=1])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wswitch-enum])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wundef])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wc++11-compat])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wunused])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wunused-result])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wunused-variable])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wwrite-strings])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-Wformat-security])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-floop-parallelize-all])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-fwrapv])
+    AX_APPEND_COMPILE_FLAGS_ERROR([-fmudflapt])
+    AC_LANG_POP([C++])
   ])
+
+  AC_DEFUN([AX_HARDEN_COMPILER_FLAGS],
+      [AC_PREREQ([2.63])dnl
+      AC_REQUIRE([AX_HARDEN_CXX_COMPILER_FLAGS])
+      AC_REQUIRE([AX_CC_OTHER_FLAGS])
+      AC_REQUIRE([gl_VISIBILITY])
+      AS_IF([test -n "$CFLAG_VISIBILITY"],[ CPPFLAGS="$CPPFLAGS $CFLAG_VISIBILITY" ])
+      ])
+
+  AC_DEFUN([AX_CC_OTHER_FLAGS],
+      [AC_PREREQ([2.63])dnl
+      AC_REQUIRE([AX_APPEND_COMPILE_FLAGS_ERROR])
+      AC_REQUIRE([AX_HARDEN_CC_COMPILER_FLAGS])
+      AC_LANG_PUSH([C])
+      AX_APPEND_COMPILE_FLAGS_ERROR([-pipe])
+      AC_LANG_POP([C])
+      ])