/[gentoo-x86]/eclass/flag-o-matic.eclass
Gentoo

Diff of /eclass/flag-o-matic.eclass

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

Revision 1.72 Revision 1.87
1# Copyright 1999-2004 Gentoo Foundation 1# Copyright 1999-2005 Gentoo Foundation
2# Distributed under the terms of the GNU General Public License v2 2# Distributed under the terms of the GNU General Public License v2
3# $Header: /var/cvsroot/gentoo-x86/eclass/flag-o-matic.eclass,v 1.72 2004/10/09 18:28:46 vapier Exp $ 3# $Header: /var/cvsroot/gentoo-x86/eclass/flag-o-matic.eclass,v 1.87 2005/06/24 22:06:19 vapier Exp $
4#
5# Author Bart Verwilst <verwilst@gentoo.org>
6 4
7ECLASS=flag-o-matic 5ECLASS=flag-o-matic
8INHERITED="$INHERITED $ECLASS" 6INHERITED="$INHERITED $ECLASS"
9 7
10# Please leave ${IUSE} in this until portage .51 is stable, otherwise
11# IUSE gets clobbered.
12IUSE="${IUSE} debug"
13
14# need access to emktemp() 8# need access to emktemp()
15inherit eutils 9inherit eutils toolchain-funcs multilib
16 10
17# 11#
18#### filter-flags <flags> #### 12#### filter-flags <flags> ####
19# Remove particular flags from C[XX]FLAGS 13# Remove particular flags from C[XX]FLAGS
20# Matches only complete flags 14# Matches only complete flags
57# Add extra flags to your current LDFLAGS 51# Add extra flags to your current LDFLAGS
58# 52#
59#### filter-ldflags <flags> #### 53#### filter-ldflags <flags> ####
60# Remove particular flags from LDFLAGS 54# Remove particular flags from LDFLAGS
61# Matches only complete flags 55# Matches only complete flags
62#
63#### etexec-flags ####
64# hooked function for hardened gcc that appends
65# -fno-pic to {C,CXX,LD}FLAGS
66# when a package is filtering -fpic, -fPIC, -fpie, -fPIE
67# 56#
68#### fstack-flags #### 57#### fstack-flags ####
69# hooked function for hardened gcc that appends 58# hooked function for hardened gcc that appends
70# -fno-stack-protector to {C,CXX,LD}FLAGS 59# -fno-stack-protector to {C,CXX,LD}FLAGS
71# when a package is filtering -fstack-protector, -fstack-protector-all 60# when a package is filtering -fstack-protector, -fstack-protector-all
72# notice: modern automatic specs files will also suppress -fstack-protector-all 61# notice: modern automatic specs files will also suppress -fstack-protector-all
73# when only -fno-stack-protector is given 62# when only -fno-stack-protector is given
74# 63#
64#### has_pic ####
65# Returns true if the compiler by default or with current CFLAGS
66# builds position-independent code.
67#
68#### has_ssp_all ####
69# Returns true if the compiler by default or with current CFLAGS
70# generates stack smash protections for all functions
71#
72#### has_ssp ####
73# Returns true if the compiler by default or with current CFLAGS
74# generates stack smash protections for most vulnerable functions
75#
75 76
76# C[XX]FLAGS that we allow in strip-flags 77# C[XX]FLAGS that we allow in strip-flags
77setup-allowed-flags() { 78setup-allowed-flags() {
78 if [ -z "${ALLOWED_FLAGS}" ] ; then 79 if [[ -z ${ALLOWED_FLAGS} ]] ; then
79 export ALLOWED_FLAGS="-O -O1 -O2 -mcpu -march -mtune -fstack-protector -fno-stack-protector -fno-pie -fno-unit-at-a-time -pipe -g" 80 export ALLOWED_FLAGS="-pipe"
80 case "${ARCH}" in 81 export ALLOWED_FLAGS="${ALLOWED_FLAGS} -O -O0 -O1 -O2 -mcpu -march -mtune"
81 mips) ALLOWED_FLAGS="${ALLOWED_FLAGS} -mips1 -mips2 -mips3 -mips4 -mips32 -mips64 -mips16 -EL -EB -mabi" ;; 82 export ALLOWED_FLAGS="${ALLOWED_FLAGS} -fstack-protector -fstack-protector-all"
82 amd64) ALLOWED_FLAGS="${ALLOWED_FLAGS} -fPIC -m64" ;; 83 export ALLOWED_FLAGS="${ALLOWED_FLAGS} -fbounds-checking -fno-bounds-checking"
83 x86) ALLOWED_FLAGS="${ALLOWED_FLAGS} -m32" ;; 84 export ALLOWED_FLAGS="${ALLOWED_FLAGS} -fno-pie -fno-unit-at-a-time"
84 alpha) ALLOWED_FLAGS="${ALLOWED_FLAGS} -fPIC" ;; 85 export ALLOWED_FLAGS="${ALLOWED_FLAGS} -g -g0 -g1 -g2 -g3 -ggdb -ggdb0 -ggdb1 -ggdb2 -ggdb3"
85 ia64) ALLOWED_FLAGS="${ALLOWED_FLAGS} -fPIC" ;;
86 esac
87 fi 86 fi
88 # allow a bunch of flags that negate features / control ABI 87 # allow a bunch of flags that negate features / control ABI
89 ALLOWED_FLAGS="${ALLOWED_FLAGS} -fno-stack-protector -fno-stack-protector-all" 88 ALLOWED_FLAGS="${ALLOWED_FLAGS} -fno-stack-protector -fno-stack-protector-all"
90 case "${ARCH}" in 89 ALLOWED_FLAGS="${ALLOWED_FLAGS} -mregparm -mno-app-regs -mapp-regs \
91 x86|amd64|ia64) ALLOWED_FLAGS="${ALLOWED_FLAGS} -mno-mmx -mno-sse -mno-sse2 -mno-sse3 -mno-3dnow" ;; 90 -mno-mmx -mno-sse -mno-sse2 -mno-sse3 -mno-3dnow \
92 esac 91 -mips1 -mips2 -mips3 -mips4 -mips32 -mips64 -mips16 \
93 ALLOWED_FLAGS="${ALLOWED_FLAGS} -mregparm -mno-app-regs -mapp-regs -msoft-float -mflat -mno-faster-structs -mfaster-structs -mlittle-endian -mbig-endian -mlive-g0 -mcmodel -mno-stack-bias -mstack-bias" 92 -msoft-float -mno-soft-float -mhard-float -mno-hard-float -mfpu \
93 -mflat -mno-flat -mno-faster-structs -mfaster-structs \
94 -m32 -m64 -mabi -mlittle-endian -mbig-endian -EL -EB -fPIC \
95 -mlive-g0 -mcmodel -mstack-bias -mno-stack-bias"
94 96
95 # C[XX]FLAGS that we are think is ok, but needs testing 97 # C[XX]FLAGS that we are think is ok, but needs testing
96 # NOTE: currently -Os have issues with gcc3 and K6* arch's 98 # NOTE: currently -Os have issues with gcc3 and K6* arch's
97 export UNSTABLE_FLAGS="-Os -O3 -freorder-blocks -fprefetch-loop-arrays" 99 export UNSTABLE_FLAGS="-Os -O3 -freorder-blocks -fprefetch-loop-arrays"
98 return 0 100 return 0
99} 101}
100 102
101filter-flags() { 103filter-flags() {
102 local x f fset 104 local x f fset
103 declare -a new_CFLAGS new_CXXFLAGS 105 declare -a new_CFLAGS new_CXXFLAGS
104 106
105 for x in "$@" ; do 107 for x in "$@" ; do
106 case "${x}" in 108 case "${x}" in
107 -fPIC|-fpic|-fPIE|-fpie|-pie) etexec-flags;; 109 -fPIC|-fpic|-fPIE|-fpie|-pie)
110 append-flags `test_flag -fno-pie`;;
108 -fstack-protector|-fstack-protector-all) fstack-flags;; 111 -fstack-protector|-fstack-protector-all)
112 fstack-flags;;
109 esac 113 esac
110 done 114 done
111 115
112 for fset in CFLAGS CXXFLAGS; do 116 for fset in CFLAGS CXXFLAGS; do
113 # Looping over the flags instead of using a global 117 # Looping over the flags instead of using a global
134append-lfs-flags() { 138append-lfs-flags() {
135 append-flags -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE 139 append-flags -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE
136} 140}
137 141
138append-flags() { 142append-flags() {
143 [[ -z $* ]] && return 0
139 export CFLAGS="${CFLAGS} $*" 144 export CFLAGS="${CFLAGS} $*"
140 export CXXFLAGS="${CXXFLAGS} $*" 145 export CXXFLAGS="${CXXFLAGS} $*"
141 [ -n "`is-flag -fno-stack-protector`" -o \ 146 [ -n "`is-flag -fno-stack-protector`" -o \
142 -n "`is-flag -fno-stack-protector-all`" ] && fstack-flags 147 -n "`is-flag -fno-stack-protector-all`" ] && fstack-flags
143 return 0 148 return 0
144} 149}
145 150
146replace-flags() { 151replace-flags() {
147 local f fset 152 local f fset
148 declare -a new_CFLAGS new_CXXFLAGS 153 declare -a new_CFLAGS new_CXXFLAGS
149 154
150 for fset in CFLAGS CXXFLAGS; do 155 for fset in CFLAGS CXXFLAGS; do
151 # Looping over the flags instead of using a global 156 # Looping over the flags instead of using a global
152 # substitution ensures that we're working with flag atoms. 157 # substitution ensures that we're working with flag atoms.
222 227
223 local NEW_CFLAGS="" 228 local NEW_CFLAGS=""
224 local NEW_CXXFLAGS="" 229 local NEW_CXXFLAGS=""
225 230
226 # Allow unstable C[XX]FLAGS if we are using unstable profile ... 231 # Allow unstable C[XX]FLAGS if we are using unstable profile ...
227 if has ~${ARCH} ${ACCEPT_KEYWORDS} ; then 232 if has ~$(tc-arch) ${ACCEPT_KEYWORDS} ; then
228 use debug && einfo "Enabling the use of some unstable flags"
229 ALLOWED_FLAGS="${ALLOWED_FLAGS} ${UNSTABLE_FLAGS}" 233 ALLOWED_FLAGS="${ALLOWED_FLAGS} ${UNSTABLE_FLAGS}"
230 fi 234 fi
231 235
232 set -f # disable pathname expansion 236 set -f # disable pathname expansion
233 237
265 export CXXFLAGS="${NEW_CXXFLAGS}" 269 export CXXFLAGS="${NEW_CXXFLAGS}"
266 return 0 270 return 0
267} 271}
268 272
269test_flag() { 273test_flag() {
270 local cc=${CC:-gcc} ; cc=${cc%% *}
271 if ${cc} -S -xc "$@" -o "$(emktemp)" /dev/null &>/dev/null; then 274 if $(tc-getCC) -S -xc "$@" -o "$(emktemp)" /dev/null &>/dev/null; then
272 printf "%s\n" "$*" 275 printf "%s\n" "$*"
273 return 0 276 return 0
274 fi 277 fi
275 return 1 278 return 1
276} 279}
277 280
278test_version_info() { 281test_version_info() {
279 local cc=${CC:-gcc} ; cc=${cc%% *}
280 if [[ $(${cc} --version 2>&1) == *$1* ]]; then 282 if [[ $($(tc-getCC) --version 2>&1) == *$1* ]]; then
281 return 0 283 return 0
282 else 284 else
283 return 1 285 return 1
284 fi 286 fi
285} 287}
321 [ -f "${GCC_SPECS}" -a "${GCC_SPECS}" != "${GCC_SPECS/hardened/}" ] && \ 323 [ -f "${GCC_SPECS}" -a "${GCC_SPECS}" != "${GCC_SPECS/hardened/}" ] && \
322 return 0 324 return 0
323 return 1 325 return 1
324} 326}
325 327
328# indicate whether PIC is set
326has_pic() { 329has_pic() {
327 [ "${CFLAGS/-fPIC}" != "${CFLAGS}" ] && return 0 330 [ "${CFLAGS/-fPIC}" != "${CFLAGS}" ] && return 0
328 [ "${CFLAGS/-fpic}" != "${CFLAGS}" ] && return 0 331 [ "${CFLAGS/-fpic}" != "${CFLAGS}" ] && return 0
329 test_version_info pie && return 0 332 [ "$(echo | $(tc-getCC) ${CFLAGS} -E -dM - | grep __PIC__)" ] && return 0
330 return 1 333 return 1
331} 334}
332 335
336# indicate whether PIE is set
333has_pie() { 337has_pie() {
334 [ "${CFLAGS/-fPIE}" != "${CFLAGS}" ] && return 0 338 [ "${CFLAGS/-fPIE}" != "${CFLAGS}" ] && return 0
335 [ "${CFLAGS/-fpie}" != "${CFLAGS}" ] && return 0 339 [ "${CFLAGS/-fpie}" != "${CFLAGS}" ] && return 0
336 test_version_info pie && return 0 340 [ "$(echo | $(tc-getCC) ${CFLAGS} -E -dM - | grep __PIE__)" ] && return 0
341 # test PIC while waiting for specs to be updated to generate __PIE__
342 [ "$(echo | $(tc-getCC) ${CFLAGS} -E -dM - | grep __PIC__)" ] && return 0
337 return 1 343 return 1
338} 344}
339 345
346# indicate whether code for SSP is being generated for all functions
347has_ssp_all() {
348 # note; this matches only -fstack-protector-all
349 [ "${CFLAGS/-fstack-protector-all}" != "${CFLAGS}" ] && return 0
350 [ "$(echo | $(tc-getCC) ${CFLAGS} -E -dM - | grep __SSP_ALL__)" ] && return 0
351 return 1
352}
353
354# indicate whether code for SSP is being generated
340has_ssp() { 355has_ssp() {
356 # note; this matches both -fstack-protector and -fstack-protector-all
341 [ "${CFLAGS/-fstack-protector}" != "${CFLAGS}" ] && return 0 357 [ "${CFLAGS/-fstack-protector}" != "${CFLAGS}" ] && return 0
342 test_version_info ssp && return 0 358 [ "$(echo | $(tc-getCC) ${CFLAGS} -E -dM - | grep __SSP__)" ] && return 0
343 return 1 359 return 1
344} 360}
345 361
346has_m64() { 362has_m64() {
347 # this doesnt test if the flag is accepted, it tests if the flag 363 # this doesnt test if the flag is accepted, it tests if the flag
348 # actually -WORKS-. non-multilib gcc will take both -m32 and -m64! 364 # actually -WORKS-. non-multilib gcc will take both -m32 and -m64!
349 # please dont replace this function with test_flag in some future 365 # please dont replace this function with test_flag in some future
350 # clean-up! 366 # clean-up!
351 local temp="$(emktemp)" 367 local temp="$(emktemp)"
352 echo "int main() { return(0); }" > ${temp}.c 368 echo "int main() { return(0); }" > ${temp}.c
369 MY_CC=$(tc-getCC)
353 ${CC/ .*/} -m64 -o "$(emktemp)" ${temp}.c > /dev/null 2>&1 370 ${MY_CC/ .*/} -m64 -o "$(emktemp)" ${temp}.c > /dev/null 2>&1
354 local ret=$? 371 local ret=$?
355 rm -f ${temp}.c 372 rm -f ${temp}.c
356 [ "$ret" != "1" ] && return 0 373 [ "$ret" != "1" ] && return 0
357 return 1 374 return 1
358} 375}
360has_m32() { 377has_m32() {
361 # this doesnt test if the flag is accepted, it tests if the flag 378 # this doesnt test if the flag is accepted, it tests if the flag
362 # actually -WORKS-. non-multilib gcc will take both -m32 and -m64! 379 # actually -WORKS-. non-multilib gcc will take both -m32 and -m64!
363 # please dont replace this function with test_flag in some future 380 # please dont replace this function with test_flag in some future
364 # clean-up! 381 # clean-up!
382
383 [ "$(tc-arch)" = "amd64" ] && has_multilib_profile && return 0
384
365 local temp="$(emktemp)" 385 local temp="$(emktemp)"
366 echo "int main() { return(0); }" > ${temp}.c 386 echo "int main() { return(0); }" > ${temp}.c
387 MY_CC=$(tc-getCC)
367 ${CC/ .*/} -m32 -o "$(emktemp)" ${temp}.c > /dev/null 2>&1 388 ${MY_CC/ .*/} -m32 -o "$(emktemp)" ${temp}.c > /dev/null 2>&1
368 local ret=$? 389 local ret=$?
369 rm -f ${temp}.c 390 rm -f ${temp}.c
370 [ "$ret" != "1" ] && return 0 391 [ "$ret" != "1" ] && return 0
371 return 1 392 return 1
372} 393}
373 394
374replace-sparc64-flags() { 395replace-sparc64-flags() {
375 local SPARC64_CPUS="ultrasparc v9" 396 local SPARC64_CPUS="ultrasparc v9"
376 397
377 if [ "${CFLAGS/mtune}" != "${CFLAGS}" ]; then 398 if [ "${CFLAGS/mtune}" != "${CFLAGS}" ]; then
378 for x in ${SPARC64_CPUS}; do 399 for x in ${SPARC64_CPUS}; do
379 CFLAGS="${CFLAGS/-mcpu=${x}/-mcpu=v8}" 400 CFLAGS="${CFLAGS/-mcpu=${x}/-mcpu=v8}"
380 done 401 done
381 else 402 else
382 for x in ${SPARC64_CPUS}; do 403 for x in ${SPARC64_CPUS}; do
383 CFLAGS="${CFLAGS/-mcpu=${x}/-mcpu=v8 -mtune=${x}}" 404 CFLAGS="${CFLAGS/-mcpu=${x}/-mcpu=v8 -mtune=${x}}"
384 done 405 done
385 fi 406 fi
386 407
387 if [ "${CXXFLAGS/mtune}" != "${CXXFLAGS}" ]; then 408 if [ "${CXXFLAGS/mtune}" != "${CXXFLAGS}" ]; then
388 for x in ${SPARC64_CPUS}; do 409 for x in ${SPARC64_CPUS}; do
389 CXXFLAGS="${CXXFLAGS/-mcpu=${x}/-mcpu=v8}" 410 CXXFLAGS="${CXXFLAGS/-mcpu=${x}/-mcpu=v8}"
390 done 411 done
391 else 412 else
392 for x in ${SPARC64_CPUS}; do 413 for x in ${SPARC64_CPUS}; do
407 428
408 # we do this fancy spacing stuff so as to not filter 429 # we do this fancy spacing stuff so as to not filter
409 # out part of a flag ... we want flag atoms ! :D 430 # out part of a flag ... we want flag atoms ! :D
410 LDFLAGS=" ${LDFLAGS} " 431 LDFLAGS=" ${LDFLAGS} "
411 for x in "$@" ; do 432 for x in "$@" ; do
412 LDFLAGS="${LDFLAGS// ${x} / }" 433 LDFLAGS=${LDFLAGS// ${x} / }
413 done 434 done
435 [[ -z ${LDFLAGS// } ]] \
436 && LDFLAGS="" \
414 LDFLAGS="${LDFLAGS:1:${#LDFLAGS}-2}" 437 || LDFLAGS=${LDFLAGS:1:${#LDFLAGS}-2}
415 export LDFLAGS 438 export LDFLAGS
416 return 0
417}
418
419etexec-flags() {
420 # if you're not using a hardened compiler you wont need this
421 # PIC/no-pic kludge in the first place.
422 has_hardened || return 0
423 # this kludge breaks on amd64, and probably other -fPIC dependant
424 # archs.
425 use amd64 && return 0
426
427 if has_pie || has_pic; then
428 [ -z "`is-flag -fno-pic`" ] &&
429 export CFLAGS="${CFLAGS} `test_flag -fno-pic`"
430 [ -z "`is-flag -nopie`" ] &&
431 export CFLAGS="${CFLAGS} `test_flag -nopie`"
432 fi
433 return 0 439 return 0
434} 440}
435 441
436fstack-flags() { 442fstack-flags() {
437 if has_ssp; then 443 if has_ssp; then
438 [ -z "`is-flag -fno-stack-protector`" ] && 444 [ -z "`is-flag -fno-stack-protector`" ] &&
439 export CFLAGS="${CFLAGS} `test_flag -fno-stack-protector`" 445 export CFLAGS="${CFLAGS} `test_flag -fno-stack-protector`"
440 fi 446 fi
441 return 0 447 return 0
442} 448}
449
450# This is thanks to great work from Paul de Vrieze <gentoo-user@devrieze.net>,
451# bug #9016. Also thanks to Jukka Salmi <salmi@gmx.net> (bug #13907) for more
452# fixes.
453#
454# Export CFLAGS and CXXFLAGS that are compadible with gcc-2.95.3
455gcc2-flags() {
456 if [[ $(tc-arch) == "x86" || $(tc-arch) == "amd64" ]] ; then
457 CFLAGS=${CFLAGS//-mtune=/-mcpu=}
458 CXXFLAGS=${CXXFLAGS//-mtune=/-mcpu=}
459 fi
460
461 replace-cpu-flags k6-{2,3} k6
462 replace-cpu-flags athlon{,-{tbird,4,xp,mp}} i686
463
464 replace-cpu-flags pentium-mmx i586
465 replace-cpu-flags pentium{2,3,4} i686
466
467 replace-cpu-flags ev6{7,8} ev6
468
469 export CFLAGS CXXFLAGS
470}

Legend:
Removed from v.1.72  
changed lines
  Added in v.1.87

  ViewVC Help
Powered by ViewVC 1.1.20