git.m6w6.name Git - awesomized/libmemcached/blob - m4/ax_harden_compiler_flags.m4

   1 # ===========================================================================
   2 #      https://github.com/BrianAker/ddm4/
   3 # ===========================================================================
   4 #
   5 # SYNOPSIS
   6 #
   7 #   AX_HARDEN_COMPILER_FLAGS() AX_HARDEN_LINKER_FLAGS()
   8 #
   9 # DESCRIPTION
  10 #
  11 #   Any compiler flag that "hardens" or tests code. C99 is assumed.
  12 #
  13 #   NOTE: Implementation based on AX_APPEND_FLAG.
  14 #
  15 # LICENSE
  16 #
  17 #  Copyright (C) 2012 Brian Aker
  18 #  All rights reserved.
  19 #
  20 #  Redistribution and use in source and binary forms, with or without
  21 #  modification, are permitted provided that the following conditions are
  22 #  met:
  23 #
  24 #      * Redistributions of source code must retain the above copyright
  25 #  notice, this list of conditions and the following disclaimer.
  26 #
  27 #      * Redistributions in binary form must reproduce the above
  28 #  copyright notice, this list of conditions and the following disclaimer
  29 #  in the documentation and/or other materials provided with the
  30 #  distribution.
  31 #
  32 #      * The names of its contributors may not be used to endorse or
  33 #  promote products derived from this software without specific prior
  34 #  written permission.
  35 #
  36 #  THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  37 #  "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
  38 #  LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
  39 #  A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
  40 #  OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  41 #  SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
  42 #  LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
  43 #  DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
  44 #  THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  45 #  (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  46 #  OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  47
  48 # The Following flags are not checked for
  49 # -Wdeclaration-after-statement is counter to C99
  50 # _APPEND_COMPILE_FLAGS_ERROR([-std=c++11]) -- Not ready yet
  51 # _APPEND_COMPILE_FLAGS_ERROR([-pedantic]) --
  52 # ?  _APPEND_COMPILE_FLAGS_ERROR([-Wlong-long]) -- Don't turn on for
  53 # compatibility issues memcached_stat_st
  54
  55 #serial 7
  56
  57 AC_DEFUN([_WARNINGS_AS_ERRORS],
  58     [AC_CACHE_CHECK([if all warnings into errors],[ac_cv_warnings_as_errors],
  59       [AS_IF([test "x$ac_cv_vcs_checkout" = xyes],[ac_cv_warnings_as_errors=yes],
  60         [ac_cv_warnings_as_errors=no])
  61       ])
  62     ])
  63
  64 AC_DEFUN([_APPEND_LINK_FLAGS_ERROR],
  65          [AC_REQUIRE([AX_APPEND_LINK_FLAGS])
  66          AX_APPEND_LINK_FLAGS([$1],[LIB],[-Werror])
  67          ])
  68
  69 AC_DEFUN([_APPEND_COMPILE_FLAGS_ERROR],
  70          [AC_REQUIRE([AX_APPEND_COMPILE_FLAGS])
  71          AX_APPEND_COMPILE_FLAGS([$1],,[-Werror])
  72          ])
  73
  74 # Everything above this does the heavy lifting, while what follows does the specifics.
  75
  76 AC_DEFUN([_HARDEN_LINKER_FLAGS],
  77          [_APPEND_LINK_FLAGS_ERROR([-z relro -z now])
  78          _APPEND_LINK_FLAGS_ERROR([-pie])
  79          AS_IF([test "x$ac_cv_warnings_as_errors" = xyes],
  80                [AX_APPEND_LINK_FLAGS([-Werror])])
  81          ])
  82
  83 AC_DEFUN([_HARDEN_CC_COMPILER_FLAGS],
  84          [AC_LANG_PUSH([C])dnl
  85
  86          _APPEND_COMPILE_FLAGS_ERROR([-g])
  87          AS_IF([test "x$ax_enable_debug" = xyes],
  88                [_APPEND_COMPILE_FLAGS_ERROR([-ggdb])
  89                _APPEND_COMPILE_FLAGS_ERROR([-O0])],
  90                [_APPEND_COMPILE_FLAGS_ERROR([-O2])])
  91
  92          _APPEND_COMPILE_FLAGS_ERROR([-Wno-pragmas])
  93          _APPEND_COMPILE_FLAGS_ERROR([-Wall])
  94          _APPEND_COMPILE_FLAGS_ERROR([-Wextra])
  95          _APPEND_COMPILE_FLAGS_ERROR([-Wunknown-pragmas])
  96          _APPEND_COMPILE_FLAGS_ERROR([-Wthis-test-should-fail])
  97          _APPEND_COMPILE_FLAGS_ERROR([-std=c99])
  98 # Anything below this comment please keep sorted.
  99          _APPEND_COMPILE_FLAGS_ERROR([--param=ssp-buffer-size=1])
 100 # _APPEND_COMPILE_FLAGS_ERROR([-Wmissing-format-attribute])
 101           _APPEND_COMPILE_FLAGS_ERROR([-Wno-attributes])
 102           _APPEND_COMPILE_FLAGS_ERROR([-Waddress])
 103           _APPEND_COMPILE_FLAGS_ERROR([-Warray-bounds])
 104           _APPEND_COMPILE_FLAGS_ERROR([-Wbad-function-cast])
 105 # Not in use -Wc++-compat
 106           _APPEND_COMPILE_FLAGS_ERROR([-Wchar-subscripts])
 107           _APPEND_COMPILE_FLAGS_ERROR([-Wcomment])
 108           _APPEND_COMPILE_FLAGS_ERROR([-Wfloat-equal])
 109           _APPEND_COMPILE_FLAGS_ERROR([-Wformat-security])
 110           _APPEND_COMPILE_FLAGS_ERROR([-Wformat=2])
 111           _APPEND_COMPILE_FLAGS_ERROR([-Wlogical-op])
 112           _APPEND_COMPILE_FLAGS_ERROR([-Wmaybe-uninitialized])
 113           _APPEND_COMPILE_FLAGS_ERROR([-Wmissing-field-initializers])
 114           AS_IF([test "x$MINGW" = xyes],
 115                 [_APPEND_COMPILE_FLAGS_ERROR([-Wno-missing-noreturn])],
 116                 [_APPEND_COMPILE_FLAGS_ERROR([-Wmissing-noreturn])])
 117           _APPEND_COMPILE_FLAGS_ERROR([-Wmissing-prototypes])
 118           _APPEND_COMPILE_FLAGS_ERROR([-Wnested-externs])
 119           _APPEND_COMPILE_FLAGS_ERROR([-Wnormalized=id])
 120           _APPEND_COMPILE_FLAGS_ERROR([-Wold-style-definition])
 121           _APPEND_COMPILE_FLAGS_ERROR([-Woverride-init])
 122           _APPEND_COMPILE_FLAGS_ERROR([-Wpointer-arith])
 123           _APPEND_COMPILE_FLAGS_ERROR([-Wpointer-sign])
 124           AS_IF([test "x$MINGW" = xyes],
 125                 [_APPEND_COMPILE_FLAGS_ERROR([-Wno-suggest-attribute=const])
 126                 _APPEND_COMPILE_FLAGS_ERROR([-Wno-suggest-attribute=noreturn])
 127                 _APPEND_COMPILE_FLAGS_ERROR([-Wno-suggest-attribute=pure])
 128                 _APPEND_COMPILE_FLAGS_ERROR([-Wno-redundant-decls])],
 129                 [_APPEND_COMPILE_FLAGS_ERROR([-Wredundant-decls])])
 130
 131           _APPEND_COMPILE_FLAGS_ERROR([-Wshadow])
 132           _APPEND_COMPILE_FLAGS_ERROR([-Wshorten-64-to-32])
 133           _APPEND_COMPILE_FLAGS_ERROR([-Wsign-compare])
 134           _APPEND_COMPILE_FLAGS_ERROR([-Wstrict-overflow=1])
 135           _APPEND_COMPILE_FLAGS_ERROR([-Wstrict-prototypes])
 136           _APPEND_COMPILE_FLAGS_ERROR([-Wswitch-enum])
 137           _APPEND_COMPILE_FLAGS_ERROR([-Wundef])
 138           _APPEND_COMPILE_FLAGS_ERROR([-Wunused])
 139           _APPEND_COMPILE_FLAGS_ERROR([-Wunused-result])
 140           _APPEND_COMPILE_FLAGS_ERROR([-Wunused-variable])
 141           _APPEND_COMPILE_FLAGS_ERROR([-Wwrite-strings])
 142           _APPEND_COMPILE_FLAGS_ERROR([-floop-parallelize-all])
 143           _APPEND_COMPILE_FLAGS_ERROR([-fwrapv])
 144           _APPEND_COMPILE_FLAGS_ERROR([-fmudflapt])
 145
 146           AS_IF([test "x$ax_enable_debug" = xno],
 147             [AS_IF([test "x$ac_cv_vcs_checkout" = xyes],
 148                   [_APPEND_COMPILE_FLAGS_ERROR([-fstack-check])
 149                   AS_IF([test "x$ac_c_gcc_recent" = xyes],
 150                         [_APPEND_COMPILE_FLAGS_ERROR([-D_FORTIFY_SOURCE=2])
 151                         _APPEND_COMPILE_FLAGS_ERROR([-Wstack-protector])
 152                         _APPEND_COMPILE_FLAGS_ERROR([-fstack-protector])
 153                         _APPEND_COMPILE_FLAGS_ERROR([-fstack-protector-all])
 154                         ])])])
 155
 156          AS_IF([test "x$ac_cv_vcs_checkout" = xyes],
 157                [_APPEND_COMPILE_FLAGS_ERROR([-fstack-check])],
 158                [_APPEND_COMPILE_FLAGS_ERROR([-Wno-pragmas])])
 159
 160          AS_IF([test "x$ac_cv_warnings_as_errors" = xyes],
 161              [AX_APPEND_FLAG([-Werror])])
 162
 163           AC_LANG_POP([C])
 164   ])
 165
 166 AC_DEFUN([_HARDEN_CXX_COMPILER_FLAGS],
 167          [AC_LANG_PUSH([C++])
 168          AC_REQUIRE([_APPEND_COMPILE_FLAGS_ERROR])
 169
 170             _APPEND_COMPILE_FLAGS_ERROR([-g])
 171             AS_IF([test "x$ax_enable_debug" = xyes],
 172                   [_APPEND_COMPILE_FLAGS_ERROR([-O0])
 173                   _APPEND_COMPILE_FLAGS_ERROR([-ggdb])],
 174                   [_APPEND_COMPILE_FLAGS_ERROR([-O2])])
 175
 176             AS_IF([test "x$ac_cv_vcs_checkout" = xyes],
 177                   [_APPEND_COMPILE_FLAGS_ERROR([-fstack-check])],
 178                   [_APPEND_COMPILE_FLAGS_ERROR([-Wno-pragmas])])
 179
 180             _APPEND_COMPILE_FLAGS_ERROR([-Wall])
 181             _APPEND_COMPILE_FLAGS_ERROR([-Wextra])
 182             _APPEND_COMPILE_FLAGS_ERROR([-Wunknown-pragmas])
 183             _APPEND_COMPILE_FLAGS_ERROR([-Wthis-test-should-fail])
 184 # Anything below this comment please keep sorted.
 185             _APPEND_COMPILE_FLAGS_ERROR([--param=ssp-buffer-size=1])
 186 # _APPEND_COMPILE_FLAGS_ERROR([-Wmissing-format-attribute])
 187             _APPEND_COMPILE_FLAGS_ERROR([-Wno-attributes])
 188             _APPEND_COMPILE_FLAGS_ERROR([-Waddress])
 189             _APPEND_COMPILE_FLAGS_ERROR([-Warray-bounds])
 190             _APPEND_COMPILE_FLAGS_ERROR([-Wchar-subscripts])
 191             _APPEND_COMPILE_FLAGS_ERROR([-Wcomment])
 192             _APPEND_COMPILE_FLAGS_ERROR([-Wctor-dtor-privacy])
 193             _APPEND_COMPILE_FLAGS_ERROR([-Wfloat-equal])
 194             _APPEND_COMPILE_FLAGS_ERROR([-Wformat=2])
 195             _APPEND_COMPILE_FLAGS_ERROR([-Wmaybe-uninitialized])
 196             _APPEND_COMPILE_FLAGS_ERROR([-Wmissing-field-initializers])
 197             _APPEND_COMPILE_FLAGS_ERROR([-Wlogical-op])
 198             _APPEND_COMPILE_FLAGS_ERROR([-Wnon-virtual-dtor])
 199             _APPEND_COMPILE_FLAGS_ERROR([-Wnormalized=id])
 200             _APPEND_COMPILE_FLAGS_ERROR([-Woverloaded-virtual])
 201             _APPEND_COMPILE_FLAGS_ERROR([-Wpointer-arith])
 202             AS_IF([test "x$MINGW" = xyes],
 203                   [_APPEND_COMPILE_FLAGS_ERROR([-Wno-suggest-attribute=const])
 204                   _APPEND_COMPILE_FLAGS_ERROR([-Wno-missing-noreturn])
 205                   _APPEND_COMPILE_FLAGS_ERROR([-Wmissing-noreturn])
 206                   _APPEND_COMPILE_FLAGS_ERROR([-Wno-suggest-attribute=noreturn])
 207                   _APPEND_COMPILE_FLAGS_ERROR([-Wno-error=suggest-attribute=noreturn])
 208                   _APPEND_COMPILE_FLAGS_ERROR([-Wno-redundant-decls])],
 209                   [_APPEND_COMPILE_FLAGS_ERROR([-Wredundant-decls])])
 210             _APPEND_COMPILE_FLAGS_ERROR([-Wshadow])
 211             _APPEND_COMPILE_FLAGS_ERROR([-Wshorten-64-to-32])
 212             _APPEND_COMPILE_FLAGS_ERROR([-Wsign-compare])
 213             _APPEND_COMPILE_FLAGS_ERROR([-Wstrict-overflow=1])
 214             _APPEND_COMPILE_FLAGS_ERROR([-Wswitch-enum])
 215             _APPEND_COMPILE_FLAGS_ERROR([-Wundef])
 216             _APPEND_COMPILE_FLAGS_ERROR([-Wc++11-compat])
 217             _APPEND_COMPILE_FLAGS_ERROR([-Wunused])
 218             _APPEND_COMPILE_FLAGS_ERROR([-Wunused-result])
 219             _APPEND_COMPILE_FLAGS_ERROR([-Wunused-variable])
 220             _APPEND_COMPILE_FLAGS_ERROR([-Wwrite-strings])
 221             _APPEND_COMPILE_FLAGS_ERROR([-Wformat-security])
 222             _APPEND_COMPILE_FLAGS_ERROR([-floop-parallelize-all])
 223             _APPEND_COMPILE_FLAGS_ERROR([-fwrapv])
 224             _APPEND_COMPILE_FLAGS_ERROR([-fmudflapt])
 225
 226             AS_IF([test "x$ax_enable_debug" = xno],
 227             [AS_IF([test "x$ac_cv_vcs_checkout" = xyes],
 228                   [_APPEND_COMPILE_FLAGS_ERROR([-fstack-check])
 229                   AS_IF([test "x$ac_c_gcc_recent" = xyes],
 230                         [_APPEND_COMPILE_FLAGS_ERROR([-D_FORTIFY_SOURCE=2])
 231                         _APPEND_COMPILE_FLAGS_ERROR([-Wstack-protector])
 232                         _APPEND_COMPILE_FLAGS_ERROR([-fstack-protector])
 233                         _APPEND_COMPILE_FLAGS_ERROR([-fstack-protector-all])
 234                         ])])])
 235
 236             AS_IF([test "x$ac_cv_warnings_as_errors" = xyes],
 237                   [AX_APPEND_FLAG([-Werror])])
 238             AC_LANG_POP([C++])
 239   ])
 240
 241   AC_DEFUN([_CC_OTHER_FLAGS],
 242             [AC_REQUIRE([_APPEND_COMPILE_FLAGS_ERROR])
 243
 244             AC_LANG_PUSH([C])
 245             _APPEND_COMPILE_FLAGS_ERROR([-pipe])
 246             AC_LANG_POP([C])
 247             ])
 248
 249 # All of the heavy lifting happens in _HARDEN_LINKER_FLAGS,
 250 # _HARDEN_CC_COMPILER_FLAGS, _HARDEN_CXX_COMPILER_FLAGS, _CC_OTHER_FLAGS
 251   AC_DEFUN([AX_HARDEN_COMPILER_FLAGS],
 252            [AC_PREREQ([2.63])dnl
 253            AC_REQUIRE([_WARNINGS_AS_ERRORS])
 254            AC_REQUIRE([AX_APPEND_LINK_FLAGS])
 255            AC_REQUIRE([AX_COMPILER_VERSION])
 256            AC_REQUIRE([AX_DEBUG])
 257            AC_REQUIRE([AX_VCS_CHECKOUT])
 258
 259            AC_REQUIRE([gl_VISIBILITY])
 260            AS_IF([test -n "$CFLAG_VISIBILITY"],[CPPFLAGS="$CPPFLAGS $CFLAG_VISIBILITY"])
 261
 262            AC_REQUIRE([_HARDEN_LINKER_FLAGS])
 263            AC_REQUIRE([_HARDEN_CC_COMPILER_FLAGS])
 264            AC_REQUIRE([_HARDEN_CXX_COMPILER_FLAGS])
 265            AC_REQUIRE([_CC_OTHER_FLAGS])
 266            ])