/[gentoo-x86]/eclass/flag-o-matic.eclass
Gentoo

Diff of /eclass/flag-o-matic.eclass

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

Revision 1.72 Revision 1.88
1# Copyright 1999-2004 Gentoo Foundation 1# Copyright 1999-2005 Gentoo Foundation
2# Distributed under the terms of the GNU General Public License v2 2# Distributed under the terms of the GNU General Public License v2
3# $Header: /var/cvsroot/gentoo-x86/eclass/flag-o-matic.eclass,v 1.72 2004/10/09 18:28:46 vapier Exp $ 3# $Header: /var/cvsroot/gentoo-x86/eclass/flag-o-matic.eclass,v 1.88 2005/07/06 20:20:03 agriffis Exp $
4#
5# Author Bart Verwilst <verwilst@gentoo.org>
6 4
7ECLASS=flag-o-matic
8INHERITED="$INHERITED $ECLASS" 5INHERITED="$INHERITED $ECLASS"
9 6
10# Please leave ${IUSE} in this until portage .51 is stable, otherwise
11# IUSE gets clobbered.
12IUSE="${IUSE} debug"
13
14# need access to emktemp() 7# need access to emktemp()
15inherit eutils 8inherit eutils toolchain-funcs multilib
16 9
17# 10#
18#### filter-flags <flags> #### 11#### filter-flags <flags> ####
19# Remove particular flags from C[XX]FLAGS 12# Remove particular flags from C[XX]FLAGS
20# Matches only complete flags 13# Matches only complete flags
57# Add extra flags to your current LDFLAGS 50# Add extra flags to your current LDFLAGS
58# 51#
59#### filter-ldflags <flags> #### 52#### filter-ldflags <flags> ####
60# Remove particular flags from LDFLAGS 53# Remove particular flags from LDFLAGS
61# Matches only complete flags 54# Matches only complete flags
62#
63#### etexec-flags ####
64# hooked function for hardened gcc that appends
65# -fno-pic to {C,CXX,LD}FLAGS
66# when a package is filtering -fpic, -fPIC, -fpie, -fPIE
67# 55#
68#### fstack-flags #### 56#### fstack-flags ####
69# hooked function for hardened gcc that appends 57# hooked function for hardened gcc that appends
70# -fno-stack-protector to {C,CXX,LD}FLAGS 58# -fno-stack-protector to {C,CXX,LD}FLAGS
71# when a package is filtering -fstack-protector, -fstack-protector-all 59# when a package is filtering -fstack-protector, -fstack-protector-all
72# notice: modern automatic specs files will also suppress -fstack-protector-all 60# notice: modern automatic specs files will also suppress -fstack-protector-all
73# when only -fno-stack-protector is given 61# when only -fno-stack-protector is given
74# 62#
63#### has_pic ####
64# Returns true if the compiler by default or with current CFLAGS
65# builds position-independent code.
66#
67#### has_ssp_all ####
68# Returns true if the compiler by default or with current CFLAGS
69# generates stack smash protections for all functions
70#
71#### has_ssp ####
72# Returns true if the compiler by default or with current CFLAGS
73# generates stack smash protections for most vulnerable functions
74#
75 75
76# C[XX]FLAGS that we allow in strip-flags 76# C[XX]FLAGS that we allow in strip-flags
77setup-allowed-flags() { 77setup-allowed-flags() {
78 if [ -z "${ALLOWED_FLAGS}" ] ; then 78 if [[ -z ${ALLOWED_FLAGS} ]] ; then
79 export ALLOWED_FLAGS="-O -O1 -O2 -mcpu -march -mtune -fstack-protector -fno-stack-protector -fno-pie -fno-unit-at-a-time -pipe -g" 79 export ALLOWED_FLAGS="-pipe"
80 case "${ARCH}" in 80 export ALLOWED_FLAGS="${ALLOWED_FLAGS} -O -O0 -O1 -O2 -mcpu -march -mtune"
81 mips) ALLOWED_FLAGS="${ALLOWED_FLAGS} -mips1 -mips2 -mips3 -mips4 -mips32 -mips64 -mips16 -EL -EB -mabi" ;; 81 export ALLOWED_FLAGS="${ALLOWED_FLAGS} -fstack-protector -fstack-protector-all"
82 amd64) ALLOWED_FLAGS="${ALLOWED_FLAGS} -fPIC -m64" ;; 82 export ALLOWED_FLAGS="${ALLOWED_FLAGS} -fbounds-checking -fno-bounds-checking"
83 x86) ALLOWED_FLAGS="${ALLOWED_FLAGS} -m32" ;; 83 export ALLOWED_FLAGS="${ALLOWED_FLAGS} -fno-pie -fno-unit-at-a-time"
84 alpha) ALLOWED_FLAGS="${ALLOWED_FLAGS} -fPIC" ;; 84 export ALLOWED_FLAGS="${ALLOWED_FLAGS} -g -g0 -g1 -g2 -g3 -ggdb -ggdb0 -ggdb1 -ggdb2 -ggdb3"
85 ia64) ALLOWED_FLAGS="${ALLOWED_FLAGS} -fPIC" ;;
86 esac
87 fi 85 fi
88 # allow a bunch of flags that negate features / control ABI 86 # allow a bunch of flags that negate features / control ABI
89 ALLOWED_FLAGS="${ALLOWED_FLAGS} -fno-stack-protector -fno-stack-protector-all" 87 ALLOWED_FLAGS="${ALLOWED_FLAGS} -fno-stack-protector -fno-stack-protector-all"
90 case "${ARCH}" in 88 ALLOWED_FLAGS="${ALLOWED_FLAGS} -mregparm -mno-app-regs -mapp-regs \
91 x86|amd64|ia64) ALLOWED_FLAGS="${ALLOWED_FLAGS} -mno-mmx -mno-sse -mno-sse2 -mno-sse3 -mno-3dnow" ;; 89 -mno-mmx -mno-sse -mno-sse2 -mno-sse3 -mno-3dnow \
92 esac 90 -mips1 -mips2 -mips3 -mips4 -mips32 -mips64 -mips16 \
93 ALLOWED_FLAGS="${ALLOWED_FLAGS} -mregparm -mno-app-regs -mapp-regs -msoft-float -mflat -mno-faster-structs -mfaster-structs -mlittle-endian -mbig-endian -mlive-g0 -mcmodel -mno-stack-bias -mstack-bias" 91 -msoft-float -mno-soft-float -mhard-float -mno-hard-float -mfpu \
92 -mflat -mno-flat -mno-faster-structs -mfaster-structs \
93 -m32 -m64 -mabi -mlittle-endian -mbig-endian -EL -EB -fPIC \
94 -mlive-g0 -mcmodel -mstack-bias -mno-stack-bias"
94 95
95 # C[XX]FLAGS that we are think is ok, but needs testing 96 # C[XX]FLAGS that we are think is ok, but needs testing
96 # NOTE: currently -Os have issues with gcc3 and K6* arch's 97 # NOTE: currently -Os have issues with gcc3 and K6* arch's
97 export UNSTABLE_FLAGS="-Os -O3 -freorder-blocks -fprefetch-loop-arrays" 98 export UNSTABLE_FLAGS="-Os -O3 -freorder-blocks -fprefetch-loop-arrays"
98 return 0 99 return 0
99} 100}
100 101
101filter-flags() { 102filter-flags() {
102 local x f fset 103 local x f fset
103 declare -a new_CFLAGS new_CXXFLAGS 104 declare -a new_CFLAGS new_CXXFLAGS
104 105
105 for x in "$@" ; do 106 for x in "$@" ; do
106 case "${x}" in 107 case "${x}" in
107 -fPIC|-fpic|-fPIE|-fpie|-pie) etexec-flags;; 108 -fPIC|-fpic|-fPIE|-fpie|-pie)
109 append-flags `test_flag -fno-pie`;;
108 -fstack-protector|-fstack-protector-all) fstack-flags;; 110 -fstack-protector|-fstack-protector-all)
111 fstack-flags;;
109 esac 112 esac
110 done 113 done
111 114
112 for fset in CFLAGS CXXFLAGS; do 115 for fset in CFLAGS CXXFLAGS; do
113 # Looping over the flags instead of using a global 116 # Looping over the flags instead of using a global
134append-lfs-flags() { 137append-lfs-flags() {
135 append-flags -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE 138 append-flags -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE
136} 139}
137 140
138append-flags() { 141append-flags() {
142 [[ -z $* ]] && return 0
139 export CFLAGS="${CFLAGS} $*" 143 export CFLAGS="${CFLAGS} $*"
140 export CXXFLAGS="${CXXFLAGS} $*" 144 export CXXFLAGS="${CXXFLAGS} $*"
141 [ -n "`is-flag -fno-stack-protector`" -o \ 145 [ -n "`is-flag -fno-stack-protector`" -o \
142 -n "`is-flag -fno-stack-protector-all`" ] && fstack-flags 146 -n "`is-flag -fno-stack-protector-all`" ] && fstack-flags
143 return 0 147 return 0
144} 148}
145 149
146replace-flags() { 150replace-flags() {
147 local f fset 151 local f fset
148 declare -a new_CFLAGS new_CXXFLAGS 152 declare -a new_CFLAGS new_CXXFLAGS
149 153
150 for fset in CFLAGS CXXFLAGS; do 154 for fset in CFLAGS CXXFLAGS; do
151 # Looping over the flags instead of using a global 155 # Looping over the flags instead of using a global
152 # substitution ensures that we're working with flag atoms. 156 # substitution ensures that we're working with flag atoms.
222 226
223 local NEW_CFLAGS="" 227 local NEW_CFLAGS=""
224 local NEW_CXXFLAGS="" 228 local NEW_CXXFLAGS=""
225 229
226 # Allow unstable C[XX]FLAGS if we are using unstable profile ... 230 # Allow unstable C[XX]FLAGS if we are using unstable profile ...
227 if has ~${ARCH} ${ACCEPT_KEYWORDS} ; then 231 if has ~$(tc-arch) ${ACCEPT_KEYWORDS} ; then
228 use debug && einfo "Enabling the use of some unstable flags"
229 ALLOWED_FLAGS="${ALLOWED_FLAGS} ${UNSTABLE_FLAGS}" 232 ALLOWED_FLAGS="${ALLOWED_FLAGS} ${UNSTABLE_FLAGS}"
230 fi 233 fi
231 234
232 set -f # disable pathname expansion 235 set -f # disable pathname expansion
233 236
265 export CXXFLAGS="${NEW_CXXFLAGS}" 268 export CXXFLAGS="${NEW_CXXFLAGS}"
266 return 0 269 return 0
267} 270}
268 271
269test_flag() { 272test_flag() {
270 local cc=${CC:-gcc} ; cc=${cc%% *}
271 if ${cc} -S -xc "$@" -o "$(emktemp)" /dev/null &>/dev/null; then 273 if $(tc-getCC) -S -xc "$@" -o "$(emktemp)" /dev/null &>/dev/null; then
272 printf "%s\n" "$*" 274 printf "%s\n" "$*"
273 return 0 275 return 0
274 fi 276 fi
275 return 1 277 return 1
276} 278}
277 279
278test_version_info() { 280test_version_info() {
279 local cc=${CC:-gcc} ; cc=${cc%% *}
280 if [[ $(${cc} --version 2>&1) == *$1* ]]; then 281 if [[ $($(tc-getCC) --version 2>&1) == *$1* ]]; then
281 return 0 282 return 0
282 else 283 else
283 return 1 284 return 1
284 fi 285 fi
285} 286}
321 [ -f "${GCC_SPECS}" -a "${GCC_SPECS}" != "${GCC_SPECS/hardened/}" ] && \ 322 [ -f "${GCC_SPECS}" -a "${GCC_SPECS}" != "${GCC_SPECS/hardened/}" ] && \
322 return 0 323 return 0
323 return 1 324 return 1
324} 325}
325 326
327# indicate whether PIC is set
326has_pic() { 328has_pic() {
327 [ "${CFLAGS/-fPIC}" != "${CFLAGS}" ] && return 0 329 [ "${CFLAGS/-fPIC}" != "${CFLAGS}" ] && return 0
328 [ "${CFLAGS/-fpic}" != "${CFLAGS}" ] && return 0 330 [ "${CFLAGS/-fpic}" != "${CFLAGS}" ] && return 0
329 test_version_info pie && return 0 331 [ "$(echo | $(tc-getCC) ${CFLAGS} -E -dM - | grep __PIC__)" ] && return 0
330 return 1 332 return 1
331} 333}
332 334
335# indicate whether PIE is set
333has_pie() { 336has_pie() {
334 [ "${CFLAGS/-fPIE}" != "${CFLAGS}" ] && return 0 337 [ "${CFLAGS/-fPIE}" != "${CFLAGS}" ] && return 0
335 [ "${CFLAGS/-fpie}" != "${CFLAGS}" ] && return 0 338 [ "${CFLAGS/-fpie}" != "${CFLAGS}" ] && return 0
336 test_version_info pie && return 0 339 [ "$(echo | $(tc-getCC) ${CFLAGS} -E -dM - | grep __PIE__)" ] && return 0
340 # test PIC while waiting for specs to be updated to generate __PIE__
341 [ "$(echo | $(tc-getCC) ${CFLAGS} -E -dM - | grep __PIC__)" ] && return 0
337 return 1 342 return 1
338} 343}
339 344
345# indicate whether code for SSP is being generated for all functions
346has_ssp_all() {
347 # note; this matches only -fstack-protector-all
348 [ "${CFLAGS/-fstack-protector-all}" != "${CFLAGS}" ] && return 0
349 [ "$(echo | $(tc-getCC) ${CFLAGS} -E -dM - | grep __SSP_ALL__)" ] && return 0
350 return 1
351}
352
353# indicate whether code for SSP is being generated
340has_ssp() { 354has_ssp() {
355 # note; this matches both -fstack-protector and -fstack-protector-all
341 [ "${CFLAGS/-fstack-protector}" != "${CFLAGS}" ] && return 0 356 [ "${CFLAGS/-fstack-protector}" != "${CFLAGS}" ] && return 0
342 test_version_info ssp && return 0 357 [ "$(echo | $(tc-getCC) ${CFLAGS} -E -dM - | grep __SSP__)" ] && return 0
343 return 1 358 return 1
344} 359}
345 360
346has_m64() { 361has_m64() {
347 # this doesnt test if the flag is accepted, it tests if the flag 362 # this doesnt test if the flag is accepted, it tests if the flag
348 # actually -WORKS-. non-multilib gcc will take both -m32 and -m64! 363 # actually -WORKS-. non-multilib gcc will take both -m32 and -m64!
349 # please dont replace this function with test_flag in some future 364 # please dont replace this function with test_flag in some future
350 # clean-up! 365 # clean-up!
351 local temp="$(emktemp)" 366 local temp="$(emktemp)"
352 echo "int main() { return(0); }" > ${temp}.c 367 echo "int main() { return(0); }" > ${temp}.c
368 MY_CC=$(tc-getCC)
353 ${CC/ .*/} -m64 -o "$(emktemp)" ${temp}.c > /dev/null 2>&1 369 ${MY_CC/ .*/} -m64 -o "$(emktemp)" ${temp}.c > /dev/null 2>&1
354 local ret=$? 370 local ret=$?
355 rm -f ${temp}.c 371 rm -f ${temp}.c
356 [ "$ret" != "1" ] && return 0 372 [ "$ret" != "1" ] && return 0
357 return 1 373 return 1
358} 374}
360has_m32() { 376has_m32() {
361 # this doesnt test if the flag is accepted, it tests if the flag 377 # this doesnt test if the flag is accepted, it tests if the flag
362 # actually -WORKS-. non-multilib gcc will take both -m32 and -m64! 378 # actually -WORKS-. non-multilib gcc will take both -m32 and -m64!
363 # please dont replace this function with test_flag in some future 379 # please dont replace this function with test_flag in some future
364 # clean-up! 380 # clean-up!
381
382 [ "$(tc-arch)" = "amd64" ] && has_multilib_profile && return 0
383
365 local temp="$(emktemp)" 384 local temp="$(emktemp)"
366 echo "int main() { return(0); }" > ${temp}.c 385 echo "int main() { return(0); }" > ${temp}.c
386 MY_CC=$(tc-getCC)
367 ${CC/ .*/} -m32 -o "$(emktemp)" ${temp}.c > /dev/null 2>&1 387 ${MY_CC/ .*/} -m32 -o "$(emktemp)" ${temp}.c > /dev/null 2>&1
368 local ret=$? 388 local ret=$?
369 rm -f ${temp}.c 389 rm -f ${temp}.c
370 [ "$ret" != "1" ] && return 0 390 [ "$ret" != "1" ] && return 0
371 return 1 391 return 1
372} 392}
373 393
374replace-sparc64-flags() { 394replace-sparc64-flags() {
375 local SPARC64_CPUS="ultrasparc v9" 395 local SPARC64_CPUS="ultrasparc v9"
376 396
377 if [ "${CFLAGS/mtune}" != "${CFLAGS}" ]; then 397 if [ "${CFLAGS/mtune}" != "${CFLAGS}" ]; then
378 for x in ${SPARC64_CPUS}; do 398 for x in ${SPARC64_CPUS}; do
379 CFLAGS="${CFLAGS/-mcpu=${x}/-mcpu=v8}" 399 CFLAGS="${CFLAGS/-mcpu=${x}/-mcpu=v8}"
380 done 400 done
381 else 401 else
382 for x in ${SPARC64_CPUS}; do 402 for x in ${SPARC64_CPUS}; do
383 CFLAGS="${CFLAGS/-mcpu=${x}/-mcpu=v8 -mtune=${x}}" 403 CFLAGS="${CFLAGS/-mcpu=${x}/-mcpu=v8 -mtune=${x}}"
384 done 404 done
385 fi 405 fi
386 406
387 if [ "${CXXFLAGS/mtune}" != "${CXXFLAGS}" ]; then 407 if [ "${CXXFLAGS/mtune}" != "${CXXFLAGS}" ]; then
388 for x in ${SPARC64_CPUS}; do 408 for x in ${SPARC64_CPUS}; do
389 CXXFLAGS="${CXXFLAGS/-mcpu=${x}/-mcpu=v8}" 409 CXXFLAGS="${CXXFLAGS/-mcpu=${x}/-mcpu=v8}"
390 done 410 done
391 else 411 else
392 for x in ${SPARC64_CPUS}; do 412 for x in ${SPARC64_CPUS}; do
407 427
408 # we do this fancy spacing stuff so as to not filter 428 # we do this fancy spacing stuff so as to not filter
409 # out part of a flag ... we want flag atoms ! :D 429 # out part of a flag ... we want flag atoms ! :D
410 LDFLAGS=" ${LDFLAGS} " 430 LDFLAGS=" ${LDFLAGS} "
411 for x in "$@" ; do 431 for x in "$@" ; do
412 LDFLAGS="${LDFLAGS// ${x} / }" 432 LDFLAGS=${LDFLAGS// ${x} / }
413 done 433 done
434 [[ -z ${LDFLAGS// } ]] \
435 && LDFLAGS="" \
414 LDFLAGS="${LDFLAGS:1:${#LDFLAGS}-2}" 436 || LDFLAGS=${LDFLAGS:1:${#LDFLAGS}-2}
415 export LDFLAGS 437 export LDFLAGS
416 return 0
417}
418
419etexec-flags() {
420 # if you're not using a hardened compiler you wont need this
421 # PIC/no-pic kludge in the first place.
422 has_hardened || return 0
423 # this kludge breaks on amd64, and probably other -fPIC dependant
424 # archs.
425 use amd64 && return 0
426
427 if has_pie || has_pic; then
428 [ -z "`is-flag -fno-pic`" ] &&
429 export CFLAGS="${CFLAGS} `test_flag -fno-pic`"
430 [ -z "`is-flag -nopie`" ] &&
431 export CFLAGS="${CFLAGS} `test_flag -nopie`"
432 fi
433 return 0 438 return 0
434} 439}
435 440
436fstack-flags() { 441fstack-flags() {
437 if has_ssp; then 442 if has_ssp; then
438 [ -z "`is-flag -fno-stack-protector`" ] && 443 [ -z "`is-flag -fno-stack-protector`" ] &&
439 export CFLAGS="${CFLAGS} `test_flag -fno-stack-protector`" 444 export CFLAGS="${CFLAGS} `test_flag -fno-stack-protector`"
440 fi 445 fi
441 return 0 446 return 0
442} 447}
448
449# This is thanks to great work from Paul de Vrieze <gentoo-user@devrieze.net>,
450# bug #9016. Also thanks to Jukka Salmi <salmi@gmx.net> (bug #13907) for more
451# fixes.
452#
453# Export CFLAGS and CXXFLAGS that are compadible with gcc-2.95.3
454gcc2-flags() {
455 if [[ $(tc-arch) == "x86" || $(tc-arch) == "amd64" ]] ; then
456 CFLAGS=${CFLAGS//-mtune=/-mcpu=}
457 CXXFLAGS=${CXXFLAGS//-mtune=/-mcpu=}
458 fi
459
460 replace-cpu-flags k6-{2,3} k6
461 replace-cpu-flags athlon{,-{tbird,4,xp,mp}} i686
462
463 replace-cpu-flags pentium-mmx i586
464 replace-cpu-flags pentium{2,3,4} i686
465
466 replace-cpu-flags ev6{7,8} ev6
467
468 export CFLAGS CXXFLAGS
469}

Legend:
Removed from v.1.72  
changed lines
  Added in v.1.88

  ViewVC Help
Powered by ViewVC 1.1.20