]> rtime.felk.cvut.cz Git - coffee/buildroot.git/blob - package/Makefile.in
security hardening: add RELFO, FORTIFY options
[coffee/buildroot.git] / package / Makefile.in
1 ifndef MAKE
2 MAKE := make
3 endif
4 ifndef HOSTMAKE
5 HOSTMAKE = $(MAKE)
6 endif
7 HOSTMAKE := $(shell which $(HOSTMAKE) || type -p $(HOSTMAKE) || echo make)
8
9 # If BR2_JLEVEL is 0, scale the maximum concurrency with the number of
10 # CPUs. An additional job is used in order to keep processors busy
11 # while waiting on I/O.
12 # If the number of processors is not available, assume one.
13 ifeq ($(BR2_JLEVEL),0)
14 PARALLEL_JOBS := $(shell echo \
15         $$((1 + `getconf _NPROCESSORS_ONLN 2>/dev/null || echo 1`)))
16 else
17 PARALLEL_JOBS := $(BR2_JLEVEL)
18 endif
19
20 MAKE1 := $(HOSTMAKE) -j1
21 override MAKE = $(HOSTMAKE) \
22         $(if $(findstring j,$(filter-out --%,$(MAKEFLAGS))),,-j$(PARALLEL_JOBS))
23
24 ifeq ($(BR2_TOOLCHAIN_BUILDROOT),y)
25 TARGET_VENDOR = $(call qstrip,$(BR2_TOOLCHAIN_BUILDROOT_VENDOR))
26 else
27 TARGET_VENDOR = buildroot
28 endif
29
30 # Sanity checks
31 ifeq ($(TARGET_VENDOR),)
32 $(error BR2_TOOLCHAIN_BUILDROOT_VENDOR is not allowed to be empty)
33 endif
34 ifeq ($(TARGET_VENDOR),unknown)
35 $(error BR2_TOOLCHAIN_BUILDROOT_VENDOR cannot be 'unknown'. \
36         It might be confused with the native toolchain)
37 endif
38
39 # Compute GNU_TARGET_NAME
40 GNU_TARGET_NAME = $(ARCH)-$(TARGET_VENDOR)-$(TARGET_OS)-$(LIBC)$(ABI)
41
42 # FLAT binary format needs uclinux
43 ifeq ($(BR2_BINFMT_FLAT),y)
44 TARGET_OS = uclinux
45 else
46 TARGET_OS = linux
47 endif
48
49 ifeq ($(BR2_TOOLCHAIN_USES_UCLIBC),y)
50 LIBC = uclibc
51 else ifeq ($(BR2_TOOLCHAIN_USES_MUSL),y)
52 LIBC = musl
53 else
54 LIBC = gnu
55 endif
56
57 # The ABI suffix is a bit special on ARM, as it needs to be
58 # -uclibcgnueabi for uClibc EABI, and -gnueabi for glibc EABI.
59 # This means that the LIBC and ABI aren't strictly orthogonal,
60 # which explains why we need the test on LIBC below.
61 ifeq ($(BR2_arm)$(BR2_armeb),y)
62 ifeq ($(LIBC),uclibc)
63 ABI = gnueabi
64 else
65 ABI = eabi
66 endif
67
68 ifeq ($(BR2_ARM_EABIHF),y)
69 ABI := $(ABI)hf
70 endif
71 endif
72
73 # For FSL PowerPC there's SPE
74 ifeq ($(BR2_powerpc_SPE),y)
75 ABI = spe
76 # MPC8540s are e500v1 with single precision FP
77 ifeq ($(BR2_powerpc_8540),y)
78 TARGET_ABI += -mabi=spe -mfloat-gprs=single -Wa,-me500
79 endif
80 ifeq ($(BR2_powerpc_8548),y)
81 TARGET_ABI += -mabi=spe -mfloat-gprs=double -Wa,-me500x2
82 endif
83 ifeq ($(BR2_powerpc_e500mc),y)
84 TARGET_ABI += -mabi=spe -mfloat-gprs=double -Wa,-me500mc
85 endif
86 endif
87
88 # Use longcalls option for Xtensa globally.
89 # The 'longcalls' option allows calls across a greater range of addresses,
90 # and is required for some packages. While this option can degrade both
91 # code size and performance, the linker can usually optimize away the
92 # overhead when a call ends up within a certain range.
93 #
94 # Use auto-litpools for Xtensa globally.
95 # Collecting literals into separate section can be advantageous if that
96 # section is placed into DTCM at link time. This is applicable for code
97 # running on bare metal, but makes no sense under linux, where userspace
98 # is isolated from the physical memory details. OTOH placing literals into
99 # separate section breaks build of huge source files, because l32r
100 # instruction can only access literals in 256 KBytes range.
101 #
102 ifeq ($(BR2_xtensa),y)
103 TARGET_ABI += -mlongcalls -mauto-litpools
104 endif
105
106 ifeq ($(BR2_arc)$(BR2_ARC_ATOMIC_EXT),yy)
107 TARGET_ABI += -matomic
108 endif
109
110 STAGING_SUBDIR = $(GNU_TARGET_NAME)/sysroot
111 STAGING_DIR    = $(HOST_DIR)/$(STAGING_SUBDIR)
112
113 ifeq ($(BR2_OPTIMIZE_0),y)
114 TARGET_OPTIMIZATION = -O0
115 endif
116 ifeq ($(BR2_OPTIMIZE_1),y)
117 TARGET_OPTIMIZATION = -O1
118 endif
119 ifeq ($(BR2_OPTIMIZE_2),y)
120 TARGET_OPTIMIZATION = -O2
121 endif
122 ifeq ($(BR2_OPTIMIZE_3),y)
123 TARGET_OPTIMIZATION = -O3
124 endif
125 ifeq ($(BR2_OPTIMIZE_G),y)
126 TARGET_OPTIMIZATION = -Og
127 endif
128 ifeq ($(BR2_OPTIMIZE_S),y)
129 TARGET_OPTIMIZATION = -Os
130 endif
131 ifeq ($(BR2_DEBUG_1),y)
132 TARGET_DEBUGGING = -g1
133 endif
134 ifeq ($(BR2_DEBUG_2),y)
135 TARGET_DEBUGGING = -g2
136 endif
137 ifeq ($(BR2_DEBUG_3),y)
138 TARGET_DEBUGGING = -g3
139 endif
140
141 TARGET_CFLAGS_RELRO = -Wl,-z,relro
142 TARGET_CFLAGS_RELRO_FULL = -Wl,-z,now $(TARGET_CFLAGS_RELRO)
143
144 TARGET_LDFLAGS = $(call qstrip,$(BR2_TARGET_LDFLAGS))
145
146 ifeq ($(BR2_SSP_REGULAR),y)
147 TARGET_CPPFLAGS += -fstack-protector
148 else ifeq ($(BR2_SSP_STRONG),y)
149 TARGET_CPPFLAGS += -fstack-protector-strong
150 else ifeq ($(BR2_SSP_ALL),y)
151 TARGET_CPPFLAGS += -fstack-protector-all
152 endif
153
154 ifeq ($(BR2_RELRO_PARTIAL),y)
155 TARGET_CPPFLAGS += $(TARGET_CFLAGS_RELRO)
156 TARGET_LDFLAGS += $(TARGET_CFLAGS_RELRO)
157 else ifeq ($(BR2_RELRO_FULL),y)
158 TARGET_CPPFLAGS += -fPIE $(TARGET_CFLAGS_RELRO_FULL)
159 TARGET_LDFLAGS += -pie
160 endif
161
162 ifeq ($(BR2_FORTIFY_SOURCE_1),y)
163 TARGET_CPPFLAGS += -D_FORTIFY_SOURCE=1
164 else ifeq ($(BR2_FORTIFY_SOURCE_2),y)
165 TARGET_CPPFLAGS += -D_FORTIFY_SOURCE=2
166 endif
167
168 TARGET_CPPFLAGS += -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64
169 TARGET_CFLAGS = $(TARGET_CPPFLAGS) $(TARGET_ABI) $(TARGET_OPTIMIZATION) $(TARGET_DEBUGGING)
170 TARGET_CXXFLAGS = $(TARGET_CFLAGS)
171 TARGET_FCFLAGS = $(TARGET_ABI) $(TARGET_OPTIMIZATION) $(TARGET_DEBUGGING)
172
173 ifeq ($(BR2_BINFMT_FLAT),y)
174 TARGET_CFLAGS += $(if $($(PKG)_FLAT_STACKSIZE),-Wl$(comma)-elf2flt=-s$($(PKG)_FLAT_STACKSIZE),\
175         -Wl$(comma)-elf2flt)
176 TARGET_CXXFLAGS += $(if $($(PKG)_FLAT_STACKSIZE),-Wl$(comma)-elf2flt=-s$($(PKG)_FLAT_STACKSIZE),\
177         -Wl$(comma)-elf2flt)
178 TARGET_FCFLAGS += $(if $($(PKG)_FLAT_STACKSIZE),-Wl$(comma)-elf2flt=-s$($(PKG)_FLAT_STACKSIZE),\
179         -Wl$(comma)-elf2flt)
180 TARGET_LDFLAGS += $(if $($(PKG)_FLAT_STACKSIZE),-Wl$(comma)-elf2flt=-s$($(PKG)_FLAT_STACKSIZE),-Wl$(comma)-elf2flt)
181 endif
182
183 ifeq ($(BR2_BINFMT_FLAT_SHARED),y)
184 TARGET_LDFLAGS += -mid-shared-library -mshared-library-id=0
185 TARGET_CFLAGS += -mid-shared-library -mshared-library-id=0
186 TARGET_FCFLAGS += -mid-shared-library -mshared-library-id=0
187 TARGET_CXXFLAGS += -mid-shared-library -mshared-library-id=0
188 endif
189 ifeq ($(BR2_BINFMT_FLAT_SEP_DATA),y)
190 TARGET_LDFLAGS += -msep-data
191 TARGET_CFLAGS += -msep-data
192 TARGET_FCFLAGS += -msep-data
193 TARGET_CXXFLAGS += -msep-data
194 endif
195
196 ifeq ($(BR2_TOOLCHAIN_BUILDROOT),y)
197 TARGET_CROSS = $(HOST_DIR)/bin/$(GNU_TARGET_NAME)-
198 else
199 TARGET_CROSS = $(HOST_DIR)/bin/$(TOOLCHAIN_EXTERNAL_PREFIX)-
200 endif
201
202 # Define TARGET_xx variables for all common binutils/gcc
203 TARGET_AR       = $(TARGET_CROSS)ar
204 TARGET_AS       = $(TARGET_CROSS)as
205 TARGET_CC       = $(TARGET_CROSS)gcc
206 TARGET_CPP      = $(TARGET_CROSS)cpp
207 TARGET_CXX      = $(TARGET_CROSS)g++
208 TARGET_FC       = $(TARGET_CROSS)gfortran
209 TARGET_LD       = $(TARGET_CROSS)ld
210 TARGET_NM       = $(TARGET_CROSS)nm
211 TARGET_RANLIB   = $(TARGET_CROSS)ranlib
212 TARGET_READELF  = $(TARGET_CROSS)readelf
213 TARGET_OBJCOPY  = $(TARGET_CROSS)objcopy
214 TARGET_OBJDUMP  = $(TARGET_CROSS)objdump
215
216 ifeq ($(BR2_STRIP_strip),y)
217 STRIP_STRIP_DEBUG := --strip-debug
218 TARGET_STRIP = $(TARGET_CROSS)strip
219 STRIPCMD = $(TARGET_CROSS)strip --remove-section=.comment --remove-section=.note
220 else
221 TARGET_STRIP = /bin/true
222 STRIPCMD = $(TARGET_STRIP)
223 endif
224 INSTALL := $(shell which install || type -p install)
225 FLEX := $(shell which flex || type -p flex)
226 BISON := $(shell which bison || type -p bison)
227 UNZIP := $(shell which unzip || type -p unzip) -q
228
229 APPLY_PATCHES = PATH=$(HOST_DIR)/bin:$$PATH support/scripts/apply-patches.sh $(if $(QUIET),-s)
230
231 HOST_CPPFLAGS  = -I$(HOST_DIR)/include
232 HOST_CFLAGS   ?= -O2
233 HOST_CFLAGS   += $(HOST_CPPFLAGS)
234 HOST_CXXFLAGS += $(HOST_CFLAGS)
235 HOST_LDFLAGS  += -L$(HOST_DIR)/lib -Wl,-rpath,$(HOST_DIR)/lib
236
237 # The macros below are taken from linux 4.11 and adapted slightly.
238 # Copy more when needed.
239
240 # try-run
241 # Usage: option = $(call try-run, $(CC)...-o "$$TMP",option-ok,otherwise)
242 # Exit code chooses option. "$$TMP" is can be used as temporary file and
243 # is automatically cleaned up.
244 try-run = $(shell set -e;               \
245         TMP="$$(tempfile)";             \
246         if ($(1)) >/dev/null 2>&1;      \
247         then echo "$(2)";               \
248         else echo "$(3)";               \
249         fi;                             \
250         rm -f "$$TMP")
251
252 # host-cc-option
253 # Usage: HOST_FOO_CFLAGS += $(call host-cc-option,-no-pie,)
254 host-cc-option = $(call try-run,\
255         $(HOSTCC) $(HOST_CFLAGS) $(1) -c -x c /dev/null -o "$$TMP",$(1),$(2))
256
257
258 # host-intltool should be executed with the system perl, so we save
259 # the path to the system perl, before a host-perl built by Buildroot
260 # might get installed into $(HOST_DIR)/bin and therefore appears
261 # in our PATH. This system perl will be used as INTLTOOL_PERL.
262 export PERL=$(shell which perl)
263
264 # host-intltool needs libxml-parser-perl, which Buildroot installs in
265 # $(HOST_DIR)/lib/perl, so we must make sure that the system perl
266 # finds this perl module by exporting the proper value for PERL5LIB.
267 export PERL5LIB=$(HOST_DIR)/lib/perl
268
269 TARGET_MAKE_ENV = PATH=$(BR_PATH)
270
271 TARGET_CONFIGURE_OPTS = \
272         $(TARGET_MAKE_ENV) \
273         AR="$(TARGET_AR)" \
274         AS="$(TARGET_AS)" \
275         LD="$(TARGET_LD)" \
276         NM="$(TARGET_NM)" \
277         CC="$(TARGET_CC)" \
278         GCC="$(TARGET_CC)" \
279         CPP="$(TARGET_CPP)" \
280         CXX="$(TARGET_CXX)" \
281         FC="$(TARGET_FC)" \
282         F77="$(TARGET_FC)" \
283         RANLIB="$(TARGET_RANLIB)" \
284         READELF="$(TARGET_READELF)" \
285         STRIP="$(TARGET_STRIP)" \
286         OBJCOPY="$(TARGET_OBJCOPY)" \
287         OBJDUMP="$(TARGET_OBJDUMP)" \
288         AR_FOR_BUILD="$(HOSTAR)" \
289         AS_FOR_BUILD="$(HOSTAS)" \
290         CC_FOR_BUILD="$(HOSTCC)" \
291         GCC_FOR_BUILD="$(HOSTCC)" \
292         CXX_FOR_BUILD="$(HOSTCXX)" \
293         LD_FOR_BUILD="$(HOSTLD)" \
294         CPPFLAGS_FOR_BUILD="$(HOST_CPPFLAGS)" \
295         CFLAGS_FOR_BUILD="$(HOST_CFLAGS)" \
296         CXXFLAGS_FOR_BUILD="$(HOST_CXXFLAGS)" \
297         LDFLAGS_FOR_BUILD="$(HOST_LDFLAGS)" \
298         FCFLAGS_FOR_BUILD="$(HOST_FCFLAGS)" \
299         DEFAULT_ASSEMBLER="$(TARGET_AS)" \
300         DEFAULT_LINKER="$(TARGET_LD)" \
301         CPPFLAGS="$(TARGET_CPPFLAGS)" \
302         CFLAGS="$(TARGET_CFLAGS)" \
303         CXXFLAGS="$(TARGET_CXXFLAGS)" \
304         LDFLAGS="$(TARGET_LDFLAGS)" \
305         FCFLAGS="$(TARGET_FCFLAGS)" \
306         FFLAGS="$(TARGET_FCFLAGS)" \
307         PKG_CONFIG="$(PKG_CONFIG_HOST_BINARY)" \
308         STAGING_DIR="$(STAGING_DIR)" \
309         INTLTOOL_PERL=$(PERL)
310
311
312 HOST_MAKE_ENV = \
313         PATH=$(BR_PATH) \
314         PKG_CONFIG="$(PKG_CONFIG_HOST_BINARY)" \
315         PKG_CONFIG_SYSROOT_DIR="/" \
316         PKG_CONFIG_ALLOW_SYSTEM_CFLAGS=1 \
317         PKG_CONFIG_ALLOW_SYSTEM_LIBS=1 \
318         PKG_CONFIG_LIBDIR="$(HOST_DIR)/lib/pkgconfig:$(HOST_DIR)/share/pkgconfig"
319
320 HOST_CONFIGURE_OPTS = \
321         $(HOST_MAKE_ENV) \
322         AR="$(HOSTAR)" \
323         AS="$(HOSTAS)" \
324         LD="$(HOSTLD)" \
325         NM="$(HOSTNM)" \
326         CC="$(HOSTCC)" \
327         GCC="$(HOSTCC)" \
328         CXX="$(HOSTCXX)" \
329         CPP="$(HOSTCPP)" \
330         OBJCOPY="$(HOSTOBJCOPY)" \
331         RANLIB="$(HOSTRANLIB)" \
332         CPPFLAGS="$(HOST_CPPFLAGS)" \
333         CFLAGS="$(HOST_CFLAGS)" \
334         CXXFLAGS="$(HOST_CXXFLAGS)" \
335         LDFLAGS="$(HOST_LDFLAGS)" \
336         INTLTOOL_PERL=$(PERL)
337
338 # This is extra environment we can not export ourselves (eg. because some
339 # packages use that variable internally, eg. uboot), so we have to
340 # explicitly pass it to user-supplied external hooks (eg. post-build,
341 # post-images)
342 EXTRA_ENV = \
343         PATH=$(BR_PATH) \
344         BR2_DL_DIR=$(BR2_DL_DIR) \
345         BUILD_DIR=$(BUILD_DIR) \
346         O=$(CANONICAL_O)
347
348 ################################################################################
349 # settings we need to pass to configure
350
351 # does unaligned access trap?
352 BR2_AC_CV_TRAP_CHECK = ac_cv_lbl_unaligned_fail=yes
353 ifeq ($(BR2_i386),y)
354 BR2_AC_CV_TRAP_CHECK = ac_cv_lbl_unaligned_fail=no
355 endif
356 ifeq ($(BR2_x86_64),y)
357 BR2_AC_CV_TRAP_CHECK = ac_cv_lbl_unaligned_fail=no
358 endif
359 ifeq ($(BR2_m68k),y)
360 BR2_AC_CV_TRAP_CHECK = ac_cv_lbl_unaligned_fail=no
361 endif
362 ifeq ($(BR2_powerpc)$(BR2_powerpc64)$(BR2_powerpc64le),y)
363 BR2_AC_CV_TRAP_CHECK = ac_cv_lbl_unaligned_fail=no
364 endif
365
366 ifeq ($(BR2_ENDIAN),"BIG")
367 BR2_AC_CV_C_BIGENDIAN = ac_cv_c_bigendian=yes
368 else
369 BR2_AC_CV_C_BIGENDIAN = ac_cv_c_bigendian=no
370 endif
371
372 # AM_GNU_GETTEXT misdetects musl gettext support.
373 # musl currently implements api level 1 and 2 (basic + ngettext)
374 # http://www.openwall.com/lists/musl/2015/04/16/3
375 #
376 # These autoconf variables should only be pre-seeded when the minimal
377 # gettext implementation of musl is used. When the full blown
378 # implementation provided by gettext libintl is used, auto-detection
379 # works fine, and pre-seeding those values is actually wrong.
380 ifeq ($(BR2_TOOLCHAIN_USES_MUSL):$(BR2_PACKAGE_GETTEXT_PROVIDES_LIBINTL),y:)
381 BR2_GT_CV_FUNC_GNUGETTEXT_LIBC = \
382         gt_cv_func_gnugettext1_libc=yes \
383         gt_cv_func_gnugettext2_libc=yes
384 endif
385
386 TARGET_CONFIGURE_ARGS = \
387         $(BR2_AC_CV_TRAP_CHECK) \
388         ac_cv_func_mmap_fixed_mapped=yes \
389         ac_cv_func_memcmp_working=yes \
390         ac_cv_have_decl_malloc=yes \
391         gl_cv_func_malloc_0_nonnull=yes \
392         ac_cv_func_malloc_0_nonnull=yes \
393         ac_cv_func_calloc_0_nonnull=yes \
394         ac_cv_func_realloc_0_nonnull=yes \
395         lt_cv_sys_lib_search_path_spec="" \
396         $(BR2_AC_CV_C_BIGENDIAN) \
397         $(BR2_GT_CV_FUNC_GNUGETTEXT_LIBC)
398
399 ################################################################################
400
401 ifeq ($(BR2_SYSTEM_ENABLE_NLS),y)
402 NLS_OPTS = --enable-nls
403 TARGET_NLS_DEPENDENCIES = host-gettext
404 ifeq ($(BR2_PACKAGE_GETTEXT_PROVIDES_LIBINTL),y)
405 TARGET_NLS_DEPENDENCIES += gettext
406 TARGET_NLS_LIBS += -lintl
407 endif
408 else
409 NLS_OPTS = --disable-nls
410 endif
411
412 ifneq ($(BR2_INSTALL_LIBSTDCPP),y)
413 TARGET_CONFIGURE_OPTS += CXX=false CXXCPP=cpp
414 endif
415
416 ifeq ($(BR2_STATIC_LIBS),y)
417 SHARED_STATIC_LIBS_OPTS = --enable-static --disable-shared
418 TARGET_CFLAGS += -static
419 TARGET_CXXFLAGS += -static
420 TARGET_FCFLAGS += -static
421 TARGET_LDFLAGS += -static
422 else ifeq ($(BR2_SHARED_LIBS),y)
423 SHARED_STATIC_LIBS_OPTS = --disable-static --enable-shared
424 else ifeq ($(BR2_SHARED_STATIC_LIBS),y)
425 SHARED_STATIC_LIBS_OPTS = --enable-static --enable-shared
426 endif
427
428 ifeq ($(BR2_COMPILER_PARANOID_UNSAFE_PATH),y)
429 export BR_COMPILER_PARANOID_UNSAFE_PATH=enabled
430 endif
431
432 include package/pkg-download.mk
433 include package/pkg-autotools.mk
434 include package/pkg-cmake.mk
435 include package/pkg-luarocks.mk
436 include package/pkg-perl.mk
437 include package/pkg-python.mk
438 include package/pkg-virtual.mk
439 include package/pkg-generic.mk
440 include package/pkg-kconfig.mk
441 include package/pkg-rebar.mk
442 include package/pkg-kernel-module.mk
443 include package/pkg-waf.mk