forked from ntpsec/ntpsec
-
Notifications
You must be signed in to change notification settings - Fork 0
/
wscript
1194 lines (1026 loc) · 43.3 KB
/
wscript
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
# Copyright the NTPsec project contributors
#
# SPDX-License-Identifier: BSD-2-Clause
from __future__ import print_function
from datetime import datetime
import itertools
import os
import shlex
import sys
import time
from waflib import Build
from waflib import Context
from waflib import Scripting
from waflib import Utils
from waflib.Build import (BuildContext, CleanContext, InstallContext,
StepContext, ListContext)
from waflib.Context import BOTH
from waflib.Errors import WafError
from waflib.Logs import pprint
from waflib.Tools import waf_unit_test
# Avoid writing .pyc files in wafhelpers/
sys.dont_write_bytecode = True
from wafhelpers.options import options_cmd
from wafhelpers.probes import probe_header, probe_function
from wafhelpers.test import test_write_log, test_print_log
pprint.__doc__ = None
APPNAME = 'ntpsec'
out = "build"
config = {
"out": out,
"OPT_STORE": {}
}
def help(ctx):
"Be helpful, give a usage"
print('''
Usage: waf <command>
build Build the project
check Run tests
configure Configure the project
dist Create a release
install Install the project
loccount Show SLOC count of the source tree
uninstall Uninstall the project
''')
def options(ctx):
options_cmd(ctx, config)
ctx.load('asciidoc', tooldir='wafhelpers/')
ctx.recurse("pylib")
def configure(ctx):
ctx.load('asciidoc', tooldir='wafhelpers/')
class oc(Build.BuildContext):
cmd = 'oc'
def exec_command(self, cmd, **kw):
kw['output'] = BOTH
try:
err, out = self.cmd_and_log(cmd, **kw)
except WafError as e:
self.logger.debug('WafError')
return e.returncode
if (len(out) and any(word in out for word
in ['err', 'err:', 'error', 'error:',
'ignored', 'illegal', 'unknown',
'unrecognized', 'warning'])):
self.logger.debug('noooo %r' % out)
return 1
if err:
self.logger.debug('noooo %r' % err)
return 1
return 0
def msg(str):
pprint("YELLOW", str)
def msg_setting(name, val):
pprint("NORMAL", " %-30s: " % name, sep="")
pprint("YELLOW", val)
srcnode = ctx.srcnode.abspath()
bldnode = ctx.bldnode.abspath()
ctx.run_build_cls = 'check'
ctx.load('waf', tooldir='wafhelpers/')
ctx.load('waf_unit_test')
ctx.load('gnu_dirs')
with open("VERSION", "r") as f:
ntpsec_release = f.read().split(" ")[0].strip()
ctx.env.OPT_STORE = config["OPT_STORE"]
opt_map = {}
# Wipe out and override flags with those from the commandline
for flag in ctx.env.OPT_STORE:
if flag == "--undefine":
for sym in ctx.env.OPT_STORE[flag]:
ctx.undefine(sym)
elif flag == "--define":
for symval in ctx.env.OPT_STORE[flag]:
(sym, val) = symval.split("=")
try:
ctx.define(sym, int(val))
except ValueError:
ctx.define(sym, val)
else:
opt = flag.replace("--", "").upper()
opt_map[opt] = ctx.env.OPT_STORE[flag]
ctx.env['ntpc'] = ctx.options.enable_pylib
ctx.env['ntpcver'] = '1.1.0'
msg("--- Configuring host ---")
ctx.setenv('host', ctx.env.derive())
ctx.load('compiler_c')
ctx.start_msg('Checking compiler version')
ctx.end_msg("%s" % ".".join(ctx.env.CC_VERSION))
# Some distros do not have /sbin in the PATH for non-root users. We honor
# the real PATH first, but append the sbin directories.
ctx.find_program(
"ldconfig", var="BIN_LDCONFIG", mandatory=False,
path_list=(os.environ.get('PATH','').split(os.pathsep) +
["/sbin", "/usr/sbin", "/usr/local/sbin"]))
# Ensure m4 is present, or bison will fail with SIGPIPE
ctx.find_program('m4')
ctx.load('bison')
for opt in opt_map:
ctx.env[opt] = opt_map[opt]
# Not needed to build. Used by utility scripts.
ctx.find_program("awk", var="BIN_AWK", mandatory=False)
ctx.find_program("sh", var="BIN_SH", mandatory=False)
ctx.check_cfg(
package='systemd', variables=['systemdsystemunitdir'],
uselib_store='SYSTEMD', mandatory=False,
msg="Checking for systemd")
if ctx.env.SYSTEMD_systemdsystemunitdir:
ctx.start_msg("systemd unit directory:")
ctx.end_msg(ctx.env.SYSTEMD_systemdsystemunitdir)
ctx.env.BIN_GIT = False
if os.path.exists(".git"):
ctx.find_program("git", var="BIN_GIT", mandatory=False)
build_desc = ctx.options.build_desc.strip()
if build_desc:
build_desc = ' ' + build_desc
if ctx.env.BIN_GIT:
# 'tag', '7', and 'deadbeef' are fill ins for
# a previous tag (always dropped), commits since that tag,
# the short commit hash. I can see 5 'git describe' outputs
# buildbots and prepush should get: tag-7-gdeadbeef
# working developers should get: tag-7-gdeadbeef-dirty
# patched shallow builders should get: gdeadbeef-dirty
# other shallow builder should get: gdeadbeef
# the thorium poisoned get errors and burst into flame
# 1-2 tokens gets appended verbatim
# 3-4 gets the first token dropped and the rest added
# I have never seen 5+ tokens, we should be safe
cmd = ctx.env.BIN_GIT + shlex.split("describe --tags --dirty --always")
git_short_hash = ctx.cmd_and_log(cmd).strip().split('-')
clip = 1 if len(git_short_hash) > 2 else 0
git_short_hash = '-'.join(git_short_hash[clip:])
ctx.env.NTPSEC_VERSION = "%s+" % ntpsec_release
ctx.env.NTPSEC_VERSION_EXTENDED = ("%s+%s%s" %
(ntpsec_release,
git_short_hash,
build_desc))
else:
ctx.env.NTPSEC_VERSION = "%s" % ntpsec_release
ctx.env.NTPSEC_VERSION_EXTENDED = ("%s%s" % (ntpsec_release,
build_desc))
ctx.define("NTPSEC_VERSION", ctx.env.NTPSEC_VERSION)
ctx.define("NTPSEC_VERSION_EXTENDED", ctx.env.NTPSEC_VERSION_EXTENDED)
# We require some things that C99 doesn't enable, like pthreads.
# These flags get propagated to both the host and main parts of the build.
#
# _POSIX_C_SOURCE
# If ==1, like _POSIX_SOURCE;
# if >=2 add IEEE Std 1003.2;
# if >=199309L, add IEEE Std 1003.1b-1993;
# if >=199506L, add IEEE Std 1003.1c-1995;
# if >=200112L, all of IEEE 1003.1-2004
# if >=200809L, all of IEEE 1003.1-2008
#
# FIXME: We'd like this to be -D_POSIX_C_SOURCE=200809L -D_XOPEN_SOURCE=700
# rather than -D_GNU_SOURCE, but that runs into problems in two places:
# (1) The ISC net handling stuff, where struct in6_addr’ loses a member
# named s6_addr32 that the macros need, and (2) three BSD functions
# related to chroot jailing in the sandbox code.
#
# Note that _POSIX_C_SOURCE >= 199506L and _GNU_SOURCE both turn on
# _POSIX_PTHREAD_SEMANTICS and _REENTRANT
#
ctx.env.CFLAGS = ["-std=c99", "-D_GNU_SOURCE"] + ctx.env.CFLAGS
msg("--- Configuring main ---")
ctx.setenv("main", ctx.env.derive())
from wafhelpers.check_sizeof import check_sizeof
for opt in opt_map:
ctx.env[opt] = opt_map[opt]
if ctx.options.cross_compiler:
ctx.env.ENABLE_CROSS = True
ctx.start_msg("Using Cross compiler CC:")
# ctx.get_cc_version(ctx.env.CC, gcc=True)
ctx.end_msg(ctx.options.cross_compiler)
ctx.env.CC = shlex.split(ctx.options.cross_compiler)
ctx.env.LINK_CC = shlex.split(ctx.options.cross_compiler)
if ctx.env["CROSS-CFLAGS"]:
# Lexically split each part of the CFLAGS, then chain the lists
iter = [shlex.split(x) for x in opt_map["CROSS-CFLAGS"]]
ctx.env.CFLAGS = list(itertools.chain.from_iterable(iter))
if ctx.env["CROSS-LDFLAGS"]:
# Lexically split each part of the LDFLAGS, then chain the lists
iter = [shlex.split(x) for x in opt_map["CROSS-LDFLAGS"]]
ctx.env.LDFLAGS = list(itertools.chain.from_iterable(iter))
if ctx.options.list:
from wafhelpers.refclock import refclock_map
print("ID Description")
print("~~ ~~~~~~~~~~~")
for id in refclock_map:
print("%-5s %s" % (id, refclock_map[id]["descr"]))
return
# These are required by various refclocks
# needs to be tested before CFLAGS are set
if ctx.check_endianness() == "big":
ctx.define("WORDS_BIGENDIAN", 1)
if ctx.options.enable_leap_testing:
ctx.define("ENABLE_LEAP_TESTING", 1,
comment="Enable leap seconds on other than 1st of month.")
# check for some libs first. some options, like stack protector,
# may depend on some libs, like -lssp
ctx.check_cc(lib="m", comment="Math library")
ctx.check_cc(lib="rt", mandatory=False, comment="realtime library")
ctx.check_cc(lib="pthread", mandatory=False, comment="threads library")
ctx.check_cc(lib="execinfo", mandatory=False,
comment="BSD backtrace library")
ret = ctx.check_cc(lib="bsd", mandatory=False,
comment="BSD compatibility library")
if ret:
ctx.env.LDFLAGS += ["-lbsd"]
# -lssp and -lssp_nonshared may be needed by older gcc to
# support "-fstack-protector-all"
ret = ctx.check_cc(lib="ssp", mandatory=False,
comment="libssp")
if ret:
ctx.env.LDFLAGS += ["-lssp"]
ret = ctx.check_cc(lib="ssp_nonshared", mandatory=False,
comment="libssp_nonshared")
if ret:
ctx.env.LDFLAGS += ["-lssp_nonshared"]
cc_test_flags = [
('PIC', '-fPIC'),
('PIE', '-pie -fPIE'),
# this quiets most of macOS warnings on -fpie
('unused', '-Qunused-arguments'),
# This is a useless warning on any architecture with a barrel
# shifter, which includes Intel and ARM and basically
# everything nowadays. Even so, we'd enable it out of
# perfectionism, but the GCC directives that ought to be
# useful for forcing structure alignment in order to suppress
# it locally don't seem to be working quite right.
# ('w_cast_align', "-Wcast-align"),
('w_cast_qual', "-Wcast-qual"),
('w_disabled_optimization', "-Wdisabled-optimization"),
('w_float_equal', "-Wfloat-equal"),
('w_format', '-Wformat'),
('w_format_security', '-Wformat-security'),
# fails on OpenBSD 6
('w_format_signedness', '-Wformat-signedness'),
('w_implicit_function_declaration', "-Wimplicit-function-declaration"),
('w_init_self', '-Winit-self'),
('w_invalid_pch', '-Winvalid-pch'),
('w_missing_declarations', '-Wmissing-declarations'),
('w_multichar', '-Wmultichar'),
('w_packed', '-Wpacked'),
('w_pointer_arith', '-Wpointer-arith'),
('w_shadow', '-Wshadow'),
# fails on clang
('w_suggest_attribute_noreturn', "-Wsuggest-attribute=noreturn"),
('w_write_strings', '-Wwrite-strings'),
]
# Check which linker flags are supported
ld_hardening_flags = [
('f_stack_protector_all', '-fstack-protector-all'),
("z_now", "-Wl,-z,now"), # no deferred symbol resolution
]
# we prepend our options to CFLAGS, this allows user provided
# CFLAGS to override our computed CFLAGS
if not ctx.options.disable_debug_gdb:
ctx.env.CFLAGS = ["-g"] + ctx.env.CFLAGS
ctx.define("USEBACKTRACE", "1", quote=False)
else:
# not gdb debugging
cc_test_flags += [
('LTO', '-flto'), # link time optimization
]
ld_hardening_flags += [
('stripall', "-Wl,--strip-all"), # Strip binaries
]
if ctx.options.enable_debug:
ctx.define("DEBUG", 1, comment="Enable debug mode")
ctx.env.BISONFLAGS += ["--debug"]
if ctx.options.enable_warnings:
# turn on some annoying warnings
ctx.env.CFLAGS = [
# "-Wall", # for masochists
# "-Waggregate-return", # breaks ldiv(), ntpcal_daysplit(), etc.
# "-Wcast-align", # fails on RasPi, needs fixing.
# "-Wbad-function-cast", # ntpd casts long<->double a lot
# "-Wformat-nonliteral", # complains about a used feature
"-Winline", # some OS have inline issues.
# "-Wmissing-format-attribute", # false positives
# "-Wnested-externs", # incompatible w/ Unity...
# "-Wpadded", # duck... over 3k warnings
# "-Wredundant-decls", # incompatible w/ Unity
"-Wswitch-default", # warns on missing switch-default
# old Bison triggers this
"-Wswitch-enum", # warns on missing enum case handler
] + ctx.env.CFLAGS
cc_test_flags += [
('w_implicit_fallthru', "-Wimplicit-fallthrough=3"),
# Fails on Solaris, OpenBSD 6, and RasPi
# Complains about a Bison bug
# Cannot be suppressed
# ('w_sign_conversion', "-Wsign-conversion"),
# fails on clang, lots of false positives and Unity complaints
# ('w_suggest_attribute_const', "-Wsuggest-attribute=const"),
# fails on clang, lot's of false positives and Unity complaints
# ('w_suggest_attribute_pure', "-Wsuggest-attribute=pure"),
]
ctx.env.CFLAGS = [
# -O1 will turn on -D_FORTIFY_SOURCE=2 for us
"-O1",
"-Wall",
"-Wextra",
"-Wmissing-prototypes",
"-Wstrict-prototypes",
"-Wundef",
"-Wunused",
] + ctx.env.CFLAGS
# gotta be tricky to test for -Wsuggest-attribute=const
FRAGMENT = '''
int tmp;
int main(int argc, char **argv) {
(void)argc; (void)argv;
tmp = argc;
return argc;
}
'''
# check if C compiler supports some flags
old_run_build_cls = ctx.run_build_cls
ctx.run_build_cls = 'oc'
for (name, ccflag) in cc_test_flags:
ctx.check(cflags=ccflag,
define_name='HAS_' + name,
fragment=FRAGMENT,
mandatory=False,
msg='Checking if C compiler supports ' + ccflag,
run_build_cls='oc')
ctx.run_build_cls = old_run_build_cls
if ctx.env.HAS_PIC:
ctx.env.CFLAGS = ["-fPIC"] + ctx.env.CFLAGS
if ctx.env.HAS_PIE:
ctx.env.LINKFLAGS_NTPD += [
"-pie",
]
ctx.env.CFLAGS_bin = ["-fPIE", "-pie"] + ctx.env.CFLAGS
ld_hardening_flags += [
('relro', "-Wl,-z,relro"), # hardening, marks some read only,
]
if ctx.env.HAS_unused:
ctx.env.CFLAGS = ['-Qunused-arguments'] + ctx.env.CFLAGS
# XXX: -flto currently breaks link of ntpd
if ctx.env.HAS_LTO and False:
ctx.env.CFLAGS = ["-flto"] + ctx.env.CFLAGS
# debug warnings that are not available with all compilers
if ctx.env.HAS_w_implicit_fallthru:
ctx.env.CFLAGS = ['-Wimplicit-fallthrough=3'] + ctx.env.CFLAGS
if ctx.env.HAS_w_suggest_attribute_const:
ctx.env.CFLAGS = ['-Wsuggest-attribute=const'] + ctx.env.CFLAGS
if ctx.env.HAS_w_suggest_attribute_noreturn:
ctx.env.CFLAGS = ['-Wsuggest-attribute=noreturn'] + ctx.env.CFLAGS
if ctx.env.HAS_w_suggest_attribute_pure:
ctx.env.CFLAGS = ['-Wsuggest-attribute=pure'] + ctx.env.CFLAGS
if ctx.env.HAS_w_format_security:
ctx.env.CFLAGS = ['-Wformat-security'] + ctx.env.CFLAGS
if ctx.env.HAS_w_format_signedness:
ctx.env.CFLAGS = ['-Wformat-signedness'] + ctx.env.CFLAGS
# should be before other -Wformat-* in CFLAGS
if ctx.env.HAS_w_format:
ctx.env.CFLAGS = ['-Wformat'] + ctx.env.CFLAGS
if ctx.env.HAS_w_float_equal:
ctx.env.CFLAGS = ['-Wfloat-equal'] + ctx.env.CFLAGS
if ctx.env.HAS_w_init_self:
ctx.env.CFLAGS = ['-Winit-self'] + ctx.env.CFLAGS
if ctx.env.HAS_w_write_strings:
ctx.env.CFLAGS = ['-Wwrite-strings'] + ctx.env.CFLAGS
if ctx.env.HAS_w_pointer_arith:
ctx.env.CFLAGS = ['-Wpointer-arith'] + ctx.env.CFLAGS
if ctx.env.HAS_w_invalid_pch:
ctx.env.CFLAGS = ['-Winvalid-pch'] + ctx.env.CFLAGS
if ctx.env.HAS_w_implicit_function_declaration:
ctx.env.CFLAGS = ['-Wimplicit-function-declaration'] + ctx.env.CFLAGS
if ctx.env.HAS_w_disabled_optimization:
ctx.env.CFLAGS = ['-Wdisabled-optimization'] + ctx.env.CFLAGS
# if ctx.env.HAS_w_cast_align:
# ctx.env.CFLAGS = ['-Wcast-align'] + ctx.env.CFLAGS
if ctx.env.HAS_w_missing_declarations:
ctx.env.CFLAGS = ['-Wmissing-declarations'] + ctx.env.CFLAGS
if ctx.env.HAS_w_cast_qual:
ctx.env.CFLAGS = ['-Wcast-qual'] + ctx.env.CFLAGS
if ctx.env.HAS_w_packed:
ctx.env.CFLAGS = ['-Wpacked'] + ctx.env.CFLAGS
if ctx.env.HAS_w_shadow:
ctx.env.CFLAGS = ['-Wshadow'] + ctx.env.CFLAGS
# if ctx.env.HAS_w_sign_conversion:
# ctx.env.CFLAGS = ['-Wsign-conversion'] + ctx.env.CFLAGS
if ctx.env.HAS_f_stack_protector_all:
ctx.env.CFLAGS = ['-fstack-protector-all'] + ctx.env.CFLAGS
# old gcc takes -z,relro, but then barfs if -fPIE available and used.
# ("relro", "-Wl,-z,relro"), # marks some sections read only
old_run_build_cls = ctx.run_build_cls
ctx.run_build_cls = 'oc'
for (name, ldflag) in ld_hardening_flags:
ctx.check(define_name='HAS_' + name,
fragment=FRAGMENT,
ldflags=ldflag,
mandatory=False,
msg='Checking if linker supports ' + ldflag,
run_build_cls='oc')
if ctx.env['HAS_' + name]:
ctx.env.LDFLAGS += [ldflag]
ctx.run_build_cls = old_run_build_cls
if ctx.env.CC_NAME == "sun":
# we are sun, placeholder
ctx.env.CFLAGS += []
elif ctx.env.CC_NAME == "clang":
# used on macOS, FreeBSD,
# FORTIFY needs LTO to work well
if ctx.env.DEST_OS not in ["darwin", "freebsd"]:
# -flto and friends breaks tests on macOS
# ctx.env.CFLAGS = [
# "-flto"
# "-fsanitize=cfi", # hardening
# "-fsanitize=safe-stack", # hardening
# ] + ctx.env.CFLAGS
ctx.env.LDFLAGS += [
"-Wl,-z,relro", # hardening, marks some section read only,
]
# else: # gcc, probably
# Exclude Unity's support for printing floating point numbers
# since it triggers warnings
# with -Wfloat-equal
ctx.env.CFLAGS = ['-DUNITY_EXCLUDE_FLOAT_PRINT'] + ctx.env.CFLAGS
# XXX: hack
if ctx.env.DEST_OS in ["freebsd"]:
ctx.env.INCLUDES = ["/usr/local/include"]
ctx.env.LIBPATH = ["/usr/local/lib"]
if os.path.isdir("/usr/local/ssl/"):
# This assumes OpenSSL is the only thing that was in /usr/local/
ctx.env.INCLUDES = ["/usr/local/ssl/include"]
ctx.env.LIBPATH = ["/usr/local/ssl/lib"]
elif ctx.env.DEST_OS == "netbsd" and os.path.isdir("/usr/pkg/include"):
ctx.env.INCLUDES = ["/usr/pkg/include"]
ctx.env.LIBPATH = ["/usr/pkg/lib"]
ctx.env.LDFLAGS += ["-rpath=/usr/pkg/lib"]
if os.path.isdir("/usr/local/ssl/"):
# This assumes OpenSSL is the only thing that was in /usr/pkg/
ctx.env.INCLUDES = ["/usr/local/ssl/include"]
ctx.env.LIBPATH = ["/usr/local/ssl/lib"]
elif ctx.env.DEST_OS == "linux" and os.path.isdir("/usr/local/ssl/"):
# This supports building OpenSSL from source
# That allows using OpenSSL 1.1.1 on older CentOS
# or testing pre-release versions of OpenSSL
# see HOWTO-OpenSSL
ctx.env.INCLUDES = ["/usr/local/ssl/include"]
if os.path.isdir("/usr/local/ssl/lib64/"):
ctx.env.LIBPATH = ["/usr/local/ssl/lib64"]
else:
ctx.env.LIBPATH = ["/usr/local/ssl/lib"]
elif ctx.env.DEST_OS == "darwin":
# macports location
if os.path.isdir("/opt/local/include"):
ctx.env.INCLUDES = ["/opt/local/include"]
if os.path.isdir("/opt/local/lib"):
ctx.env.LIBPATH = ["/opt/local/lib"]
# OS X needs this for IPv6
ctx.define("__APPLE_USE_RFC_3542", 1,
comment="Needed for IPv6 support")
elif ctx.env.DEST_OS == "sunos":
# Declare compatibility with the POSIX.1-2001 standard, and any
# headers/interfaces not in conflict with that standard
ctx.define("_POSIX_C_SOURCE", "200112L", quote=False)
ctx.define("__EXTENSIONS__", "1", quote=False)
# Borrowed from waf-1.9, when type_name and field_name were valid keywords
SNIP_TYPE = '''
int main(int argc, char **argv) {
(void)argc; (void)argv;
if ((%(type_name)s *) 0) return 0;
if (sizeof (%(type_name)s)) return 0;
return 1;
}
'''
SNIP_FIELD = '''
#include <stddef.h>
int main(int argc, char **argv) {
char *off;
(void)argc; (void)argv;
off = (char*) &((%(type_name)s*)0)->%(field_name)s;
return (size_t) off < sizeof(%(type_name)s);
}
'''
def to_header(header_name):
return ''.join(['#include <%s>\n' %
x for x in Utils.to_list(header_name)])
structures = (
("struct if_laddrconf", ["sys/types.h", "net/if6.h"], False),
("struct if_laddrreq", ["sys/types.h", "net/if6.h"], False),
("struct timex", ["sys/time.h", "sys/timex.h"], True),
("struct ntptimeval", ["sys/time.h", "sys/timex.h"], False),
)
for (s, h, r) in structures:
ctx.check_cc(
fragment=to_header(h) + SNIP_TYPE % {'type_name': s},
msg='Checking for type %s' % s,
define_name=ctx.have_define(s.upper()),
mandatory=r,
)
structure_fields = (
("struct timex", "time_tick", ["sys/time.h", "sys/timex.h"]),
("struct timex", "modes", ["sys/time.h", "sys/timex.h"]),
("struct ntptimeval", "time.tv_nsec", ["sys/time.h", "sys/timex.h"]),
("struct ntptimeval", "tai", ["sys/time.h", "sys/timex.h"]),
# first in glibc 2.12
)
for (s, f, h) in structure_fields:
ctx.check_cc(
fragment=(to_header(h) + SNIP_FIELD %
{'type_name': s, 'field_name': f}),
msg='Checking for field %s in %s' % (f, s),
define_name=ctx.have_define((s + '_' + f).upper()),
mandatory=False,
)
# mostly used by timespecops.h
sizeofs = [
("time.h", "time_t"),
(None, "long"),
]
for header, sizeof in sorted(sizeofs, key=lambda x: x[1:]):
check_sizeof(ctx, header, sizeof)
# Parts of attic need libssl
if not ctx.options.disable_nts or ctx.options.enable_attic:
# Check via pkg-config first, then fall back to a direct search
if not ctx.check_cfg(
package='libssl', uselib_store='SSL',
args=['--cflags', '--libs'],
msg="Checking for OpenSSL/libssl (via pkg-config)",
define_name='', mandatory=False,
):
ctx.check_cc(msg="Checking for OpenSSL's ssl library",
lib="ssl", mandatory=True)
# Check via pkg-config first, then fall back to a direct search
if not ctx.check_cfg(
package='libcrypto', uselib_store='CRYPTO',
args=['--cflags', '--libs'],
msg="Checking for OpenSSL/libcrypto (via pkg-config)",
define_name='', mandatory=False,
):
ctx.check_cc(msg="Checking for OpenSSL's crypto library",
lib="crypto", mandatory=True)
# Optional functions. Do all function checks here, otherwise
# we're likely to duplicate them.
optional_functions = (
('_Unwind_Backtrace', ["unwind.h"]),
('adjtimex', ["sys/time.h", "sys/timex.h"]),
('backtrace_symbols_fd', ["execinfo.h"]),
('ntp_adjtime', ["sys/time.h", "sys/timex.h"]), # BSD
('ntp_gettime', ["sys/time.h", "sys/timex.h"]), # BSD
('res_init', ["netinet/in.h", "arpa/nameser.h", "resolv.h"]),
('strlcpy', ["string.h"]),
('strlcat', ["string.h"]),
('timegm', ["time.h"]),
# Hack. It's not a function, but this works.
('PRIV_NTP_ADJTIME', ["sys/priv.h"]) # FreeBSD
)
for ft in optional_functions:
probe_function(ctx, function=ft[0], prerequisites=ft[1])
# This area is still work in progress
# Need to disable making symbols
# but not until killing off HAVE_TIMER_CREATE
# Sanity checks to give a sensible error message
required_functions = (
# Check for ancient version of OpenSSL.
('EVP_MD_CTX_new', ["openssl/evp.h"], "CRYPTO", False),
# MacOS doesn't have timer_create ??
('timer_create', ["signal.h", "time.h"], "RT", False),
# Very old versions of OpenSSL don't have cmac.h
# We could add ifdefs, but old crypto is deprecated in favor of CMAC
# and so far, all the systems that we want to support are new enough.
('CMAC_CTX_new', ["openssl/cmac.h"], "CRYPTO", True),
# Next should be above, but it needs a library
# EVP_PKEY_new_CMAC_key added in OpenSSL 1.1.1
('EVP_PKEY_new_CMAC_key', ["openssl/cmac.h"], "CRYPTO", False))
for ft in required_functions:
probe_function(ctx, function=ft[0],
prerequisites=ft[1], use=ft[2],
mandatory=ft[3])
# check for BSD versions outside of libc
if not ctx.get_define("HAVE_STRLCAT"):
ret = probe_function(ctx, function='strlcat',
prerequisites=['bsd/string.h'])
if ret:
ctx.define("HAVE_STRLCAT", 1, comment="Using bsd/strlcat")
if not ctx.get_define("HAVE_STRLCPY"):
ret = probe_function(ctx, function='strlcpy',
prerequisites=['bsd/string.h'])
if ret:
ctx.define("HAVE_STRLCPY", 1, comment="Using bsd/strlcpy")
# Nobody uses the symbol, but this seems like a good sanity check.
ctx.check_cc(header_name="stdbool.h", mandatory=True,
comment="Sanity check.")
# This is a list of every optional include header in the
# codebase that is guarded by a directly corresponding HAVE_*_H symbol.
#
# In some cases one HAVE symbol controls inclusion of more
# than one header. In these cases only the one header name
# matching the pattern of the HAVE_*_H symbol name is listed
# here, so we can invert the relationship to generate tests
# for all the symbols.
#
# Some of these are cruft from ancient big-iron systems and should
# be removed.
optional_headers = (
"alloca.h",
("arpa/nameser.h", ["sys/types.h"]),
"bsd/string.h", # bsd emulation
("ifaddrs.h", ["sys/types.h"]),
("linux/if_addr.h", ["sys/socket.h"]),
("linux/rtnetlink.h", ["sys/socket.h"]),
"linux/serial.h",
"net/if6.h",
("net/route.h", ["sys/types.h", "sys/socket.h", "net/if.h"]),
"openssl/opensslv.h", # just for wafhelper OpenSSL
"priv.h", # Solaris
"stdatomic.h",
"sys/clockctl.h", # NetBSD
"sys/ioctl.h",
"sys/modem.h", # Apple
"sys/sockio.h",
("sys/sysctl.h", ["sys/types.h"]),
("timepps.h", ["inttypes.h"]),
("sys/timepps.h", ["inttypes.h", "sys/time.h"]),
("sys/timex.h", ["sys/time.h"]),
)
for hdr in optional_headers:
if isinstance(hdr, str):
if ctx.check_cc(header_name=hdr, mandatory=False,
comment="<%s> header" % hdr):
continue
else:
(hdr, prereqs) = hdr
if probe_header(ctx, hdr, prereqs):
continue
if os.path.exists("/usr/include/" + hdr):
# Sanity check...
print("Compilation check failed but include exists %s" % hdr)
if ((ctx.get_define("HAVE_TIMEPPS_H") or
ctx.get_define("HAVE_SYS_TIMEPPS_H"))):
ctx.define("HAVE_PPSAPI", 1, comment="Enable the PPS API")
# Check for Solaris capabilities
if ctx.get_define("HAVE_PRIV_H") and ctx.env.DEST_OS == "sunos":
ctx.define("HAVE_SOLARIS_PRIVS", 1,
comment="Enable Solaris Privileges (Solaris only)")
from wafhelpers.check_sockaddr import check_sockaddr
check_sockaddr(ctx)
from wafhelpers.check_strerror import check_strerror
check_strerror(ctx)
# Check for Solaris's service configuration facility library
ctx.check_cc(header_name="libscf.h", lib="scf", mandatory=False,
uselib_store="SCF")
# Some systems don't have sys/timex.h eg OS X, OpenBSD...
if ctx.get_define("HAVE_SYS_TIMEX_H"):
ctx.env.HEADER_SYS_TIMEX_H = True
if ctx.options.refclocks:
from wafhelpers.refclock import refclock_config
refclock_config(ctx)
# timegm needed by refclock_nmea, it's not in POSIX
# It's in Linux, FreeBSD, and NetBSD
if not ctx.get_define("HAVE_TIMEGM") and ctx.get_define("CLOCK_NMEA"):
ctx.fatal("Refclock NMEA needs timegm")
# We should provide an implementation.
# Like we do for BSD string functions.
# NetBSD (used to) need to recreate sockets on changed routing.
# Perhaps it still does. If so, this should be set. The autoconf
# build set it "if the OS clears cached routes when more specifics
# become available".
# ctx.define("OS_MISSES_SPECIFIC_ROUTE_UPDATES", 1)
if ctx.options.enable_leap_smear:
ctx.define("ENABLE_LEAP_SMEAR", 1,
comment="Enable experimental leap smearing code")
if ctx.options.enable_mssntp:
ctx.define("ENABLE_MSSNTP", 1,
comment="Enable MS-SNTP extensions "
" https://msdn.microsoft.com/en-us/library/cc212930.aspx")
if ctx.options.enable_attic:
ctx.env.ENABLE_ATTIC = True
if ctx.options.disable_nts:
ctx.env.DISABLE_NTS = True
ctx.define("DISABLE_NTS", 1,
comment="Disable NTS")
if not ctx.options.disable_droproot:
ctx.define("ENABLE_DROPROOT", 1,
comment="Drop root after initialising")
if ctx.options.enable_early_droproot:
ctx.define("ENABLE_EARLY_DROPROOT", 1,
comment="Enable early drop root")
if ctx.options.disable_fuzz:
pprint("YELLOW", "--disable-fuzz is now standard. Clock fuzzing is gone.")
# SO_REUSEADDR socket option is needed to open a socket on an
# interface when the port number is already in use on another
# interface. Linux needs this, NetBSD does not, status on
# other platforms is unknown. It is probably harmless to
# have it on everywhere.
ctx.define("NEED_REUSEADDR_FOR_IFADDRBIND", 1,
comment="Whether SO_REUSEADDR is needed to open "
"same sockets on alternate interfaces, required "
"by Linux at least")
# Check for directory separator
if ctx.env.DEST_OS == "win32":
sep = "\\"
else:
sep = "/"
ctx.define("DIR_SEP", "'%s'" % sep, quote=False,
comment="Directory separator used")
if ctx.get_define("HAVE_SYS_SYSCTL_H"):
ctx.define("HAVE_IFLIST_SYSCTL", 1,
comment="Whether sysctl interface exists")
# Header/library checks
if not ctx.options.disable_droproot and ctx.env.DEST_OS == "linux":
ctx.check_cc(header_name="sys/prctl.h", mandatory=False)
ctx.check_cc(header_name="sys/capability.h", mandatory=False)
ctx.check_cc(lib="cap", comment="Capability library", mandatory=False)
if ((ctx.get_define("HAVE_SYS_CAPABILITY_H") and
ctx.get_define("HAVE_SYS_PRCTL_H") and ctx.env.LIB_CAP)):
ctx.define("HAVE_LINUX_CAPABILITY", 1)
if ctx.options.enable_seccomp:
if ctx.env.DEST_OS != "linux":
ctx.fatal("seccomp is only supported on Linux")
# Check via pkg-config first, then fall back to a direct search
if not ctx.check_cfg(
package='libseccomp', args=['--libs', '--cflags'],
uselib_store='SECCOMP', define_name='HAVE_SECCOMP_H',
mandatory=False
):
ctx.check_cc(header_name="seccomp.h")
ctx.check_cc(lib="seccomp")
if not ctx.options.disable_mdns_registration:
ctx.check_cc(header_name="dns_sd.h", lib="dns_sd", mandatory=False,
uselib_store="DNS_SD")
# Solaris needs -lsocket and -lnsl for socket code
if ctx.env.DEST_OS == "sunos":
ctx.check(features="c cshlib", lib="socket", mandatory=False)
ctx.check(features="c cshlib", lib="nsl", mandatory=False)
if ctx.options.enable_classic_mode:
ctx.define("ENABLE_CLASSIC_MODE", 1)
else:
ctx.undefine("ENABLE_CLASSIC_MODE")
# Ugly hack to examine config symbols
for sym in ctx.env.DEFINES:
if sym.startswith("NTP_SIZEOF_TIME_T="):
timesize = int(sym.split("=")[1])
if timesize < 8:
msg("WARNING: This system has a 32-bit time_t.")
msg("WARNING: Your ntpd will fail on 2038-01-19T03:14:07Z.")
if not ctx.env.DISABLE_NTS:
from wafhelpers.openssl import check_libssl_tls13
from wafhelpers.openssl import check_openssl_bad_version
from wafhelpers.openssl import dump_openssl_version
check_libssl_tls13(ctx)
check_openssl_bad_version(ctx)
dump_openssl_version(ctx)
# before write_config()
if ctx.is_defined("HAVE_LINUX_CAPABILITY"):
droproot_type = "Linux"
elif ctx.is_defined("HAVE_SOLARIS_PRIVS"):
droproot_type = "Solaris"
elif ctx.is_defined("HAVE_SYS_CLOCKCTL_H"):
droproot_type = "NetBSD"
elif ctx.is_defined("HAVE_PRIV_NTP_ADJTIME"):
droproot_type = "FreeBSD"
else:
droproot_type = "None"
# write_config() removes symbols
ctx.start_msg("Writing configuration header:")
ctx.write_config_header("config.h")
ctx.end_msg("config.h", "PINK")
def yesno(x):
if x:
return "Yes"
return "No"
msg("")
msg("Build Options")
msg_setting("CC", " ".join(ctx.env.CC))
msg_setting("CFLAGS", " ".join(ctx.env.CFLAGS))
msg_setting("LDFLAGS", " ".join(ctx.env.LDFLAGS))
msg_setting("LINKFLAGS_NTPD", " ".join(ctx.env.LINKFLAGS_NTPD))
msg_setting("PREFIX", ctx.env.PREFIX)
msg_setting("LIBDIR", ctx.env.LIBDIR)
msg_setting("Droproot Support", droproot_type)
msg_setting("Debug Support", yesno(ctx.options.enable_debug))
msg_setting("Refclocks", ", ".join(sorted(ctx.env.REFCLOCK_LIST)))
msg_setting("Build Docs", yesno(ctx.env.BUILD_DOC))
msg_setting("Build Manpages", yesno(ctx.env.BUILD_MAN))
ctx.recurse("pylib")
ctx.env.PYSHEBANG = ctx.options.pyshebang
msg_setting("PYSHEBANG", ctx.env.PYSHEBANG)
# Convert the Python directories to absolute paths.
# This makes them behave the same as PREFIX.
ctx.env.PYTHONDIR = os.path.abspath(ctx.env.PYTHONDIR)
ctx.env.PYTHONARCHDIR = os.path.abspath(ctx.env.PYTHONARCHDIR)
msg_setting("PYTHONDIR", ctx.env.PYTHONDIR)
msg_setting("PYTHONARCHDIR", ctx.env.PYTHONARCHDIR)
class check(BuildContext):
cmd = 'check'
variant = "main"
def bin_test(ctx):
"""Run binary check, use after tests."""
from wafhelpers.bin_test import cmd_bin_test
cmd_bin_test(ctx)
def bin_test_summary(ctx):
"""Display results of binary check, use after tests."""
from wafhelpers.bin_test import bin_test_summary
bin_test_summary(ctx)
variant_cmd = (
("build", BuildContext),
("clean", CleanContext),
("install", InstallContext),
("step", StepContext),
("list", ListContext),
# ("check", BuildContext)
)
for v in ["host", "main"]:
# the reason for creating these subclasses is just for __doc__ below...
for cmd, cls in variant_cmd:
class tmp(cls):
__doc__ = "%s %s" % (cmd, v)
cmd = "%s_%s" % (cmd, v)
variant = v
def init_handler(ctx):
cmd = ctx.cmd
if cmd == 'init_handler':
cmd = 'build'
def make_context(name):
for x in Context.classes:
if x.cmd == name and x.fun != 'init_handler':
return x()
ctx.fatal('No class for %r' % cmd)
# By default we want to iterate over each variant.
for v in ["host", "main"]:
obj = make_context(cmd)
obj.variant = v
pprint("YELLOW", "--- %sing %s ---" % (cmd, v))
obj.execute()
commands = (
("install", "init_handler", None),
("uninstall", "init_handler", None),
("build", "init_handler", None),
("clean", "init_handler", None),
("list", "init_handler", None),
("step", "init_handler", None),
)
for command, func, descr in commands:
class tmp1(Context.Context):
if descr:
__doc__ = descr
cmd = command
fun = func