| cmake_minimum_required (VERSION 2.8.11) |
| |
| # Report AppleClang separately from Clang. Their version numbers are different. |
| # https://cmake.org/cmake/help/v3.0/policy/CMP0025.html |
| if(POLICY CMP0025) |
| cmake_policy(SET CMP0025 NEW) |
| endif() |
| |
| # Defer enabling C and CXX languages. |
| project (BoringSSL NONE) |
| |
| if(WIN32) |
| # On Windows, prefer cl over gcc if both are available. By default most of |
| # the CMake generators prefer gcc, even on Windows. |
| set(CMAKE_GENERATOR_CC cl) |
| endif() |
| |
| include(sources.cmake) |
| |
| enable_language(C) |
| enable_language(CXX) |
| |
| if(ANDROID) |
| # Android-NDK CMake files reconfigure the path and so Go and Perl won't be |
| # found. However, ninja will still find them in $PATH if we just name them. |
| if(NOT PERL_EXECUTABLE) |
| set(PERL_EXECUTABLE "perl") |
| endif() |
| if(NOT GO_EXECUTABLE) |
| set(GO_EXECUTABLE "go") |
| endif() |
| else() |
| find_package(Perl REQUIRED) |
| find_program(GO_EXECUTABLE go) |
| endif() |
| |
| if (NOT GO_EXECUTABLE) |
| message(FATAL_ERROR "Could not find Go") |
| endif() |
| |
| if (BORINGSSL_ALLOW_CXX_RUNTIME) |
| add_definitions(-DBORINGSSL_ALLOW_CXX_RUNTIME) |
| endif() |
| |
| if(CMAKE_CXX_COMPILER_ID MATCHES "Clang") |
| set(CLANG 1) |
| endif() |
| |
| if(CMAKE_COMPILER_IS_GNUCXX OR CLANG) |
| # Note clang-cl is odd and sets both CLANG and MSVC. We base our configuration |
| # primarily on our normal Clang one. |
| set(C_CXX_FLAGS "-Werror -Wformat=2 -Wsign-compare -Wmissing-field-initializers -Wwrite-strings") |
| if(MSVC) |
| # clang-cl sets different default warnings than clang. It also treats -Wall |
| # as -Weverything, to match MSVC. Instead -W3 is the alias for -Wall. |
| # See http://llvm.org/viewvc/llvm-project?view=revision&revision=319116 |
| set(C_CXX_FLAGS "${C_CXX_FLAGS} -W3 -Wno-unused-parameter -fmsc-version=1900") |
| # googletest suppresses warning C4996 via a pragma, but clang-cl does not |
| # honor it. Suppress it here to compensate. See https://crbug.com/772117. |
| set(C_CXX_FLAGS "${C_CXX_FLAGS} -Wno-deprecated-declarations") |
| else() |
| set(C_CXX_FLAGS "${C_CXX_FLAGS} -Wall -ggdb -fvisibility=hidden -fno-common") |
| endif() |
| |
| if(CLANG) |
| set(C_CXX_FLAGS "${C_CXX_FLAGS} -Wnewline-eof -fcolor-diagnostics") |
| else() |
| # GCC (at least 4.8.4) has a bug where it'll find unreachable free() calls |
| # and declare that the code is trying to free a stack pointer. |
| set(C_CXX_FLAGS "${C_CXX_FLAGS} -Wno-free-nonheap-object") |
| endif() |
| |
| if(CLANG OR NOT "7.0.0" VERSION_GREATER CMAKE_C_COMPILER_VERSION) |
| set(C_CXX_FLAGS "${C_CXX_FLAGS} -Wimplicit-fallthrough") |
| endif() |
| |
| set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} ${C_CXX_FLAGS} -Wmissing-prototypes -Wold-style-definition -Wstrict-prototypes") |
| set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} ${C_CXX_FLAGS} -Wmissing-declarations") |
| |
| if(NOT MSVC) |
| set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -std=c++11") |
| if(APPLE) |
| set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -stdlib=libc++") |
| endif() |
| if(NOT BORINGSSL_ALLOW_CXX_RUNTIME) |
| set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -fno-exceptions -fno-rtti") |
| endif() |
| endif() |
| |
| # In GCC, -Wmissing-declarations is the C++ spelling of -Wmissing-prototypes |
| # and using the wrong one is an error. In Clang, -Wmissing-prototypes is the |
| # spelling for both and -Wmissing-declarations is some other warning. |
| # |
| # https://gcc.gnu.org/onlinedocs/gcc-7.1.0/gcc/Warning-Options.html#Warning-Options |
| # https://clang.llvm.org/docs/DiagnosticsReference.html#wmissing-prototypes |
| # https://clang.llvm.org/docs/DiagnosticsReference.html#wmissing-declarations |
| if(CLANG) |
| set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -Wmissing-prototypes") |
| endif() |
| |
| if(CMAKE_COMPILER_IS_GNUCXX AND "4.8" VERSION_GREATER CMAKE_C_COMPILER_VERSION) |
| set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Wno-array-bounds") |
| endif() |
| |
| elseif(MSVC) |
| set(MSVC_DISABLED_WARNINGS_LIST |
| "C4061" # enumerator 'identifier' in switch of enum 'enumeration' is not |
| # explicitly handled by a case label |
| # Disable this because it flags even when there is a default. |
| "C4100" # 'exarg' : unreferenced formal parameter |
| "C4127" # conditional expression is constant |
| "C4200" # nonstandard extension used : zero-sized array in |
| # struct/union. |
| "C4204" # nonstandard extension used: non-constant aggregate initializer |
| "C4221" # nonstandard extension used : 'identifier' : cannot be |
| # initialized using address of automatic variable |
| "C4242" # 'function' : conversion from 'int' to 'uint8_t', |
| # possible loss of data |
| "C4244" # 'function' : conversion from 'int' to 'uint8_t', |
| # possible loss of data |
| "C4267" # conversion from 'size_t' to 'int', possible loss of data |
| "C4371" # layout of class may have changed from a previous version of the |
| # compiler due to better packing of member '...' |
| "C4388" # signed/unsigned mismatch |
| "C4296" # '>=' : expression is always true |
| "C4350" # behavior change: 'std::_Wrap_alloc...' |
| "C4365" # '=' : conversion from 'size_t' to 'int', |
| # signed/unsigned mismatch |
| "C4389" # '!=' : signed/unsigned mismatch |
| "C4464" # relative include path contains '..' |
| "C4510" # 'argument' : default constructor could not be generated |
| "C4512" # 'argument' : assignment operator could not be generated |
| "C4514" # 'function': unreferenced inline function has been removed |
| "C4548" # expression before comma has no effect; expected expression with |
| # side-effect" caused by FD_* macros. |
| "C4610" # struct 'argument' can never be instantiated - user defined |
| # constructor required. |
| "C4623" # default constructor was implicitly defined as deleted |
| "C4625" # copy constructor could not be generated because a base class |
| # copy constructor is inaccessible or deleted |
| "C4626" # assignment operator could not be generated because a base class |
| # assignment operator is inaccessible or deleted |
| "C4668" # 'symbol' is not defined as a preprocessor macro, replacing with |
| # '0' for 'directives' |
| # Disable this because GTest uses it everywhere. |
| "C4706" # assignment within conditional expression |
| "C4710" # 'function': function not inlined |
| "C4711" # function 'function' selected for inline expansion |
| "C4800" # 'int' : forcing value to bool 'true' or 'false' |
| # (performance warning) |
| "C4820" # 'bytes' bytes padding added after construct 'member_name' |
| "C5026" # move constructor was implicitly defined as deleted |
| "C5027" # move assignment operator was implicitly defined as deleted |
| "C5045" # Compiler will insert Spectre mitigation for memory load if |
| # /Qspectre switch specified |
| ) |
| set(MSVC_LEVEL4_WARNINGS_LIST |
| # See https://connect.microsoft.com/VisualStudio/feedback/details/1217660/warning-c4265-when-using-functional-header |
| "C4265" # class has virtual functions, but destructor is not virtual |
| ) |
| string(REPLACE "C" " -wd" MSVC_DISABLED_WARNINGS_STR |
| ${MSVC_DISABLED_WARNINGS_LIST}) |
| string(REPLACE "C" " -w4" MSVC_LEVEL4_WARNINGS_STR |
| ${MSVC_LEVEL4_WARNINGS_LIST}) |
| set(CMAKE_C_FLAGS "-utf-8 -Wall -WX ${MSVC_DISABLED_WARNINGS_STR} ${MSVC_LEVEL4_WARNINGS_STR}") |
| set(CMAKE_CXX_FLAGS "-utf-8 -Wall -WX ${MSVC_DISABLED_WARNINGS_STR} ${MSVC_LEVEL4_WARNINGS_STR}") |
| endif() |
| |
| if(WIN32) |
| add_definitions(-D_HAS_EXCEPTIONS=0) |
| add_definitions(-DWIN32_LEAN_AND_MEAN) |
| add_definitions(-DNOMINMAX) |
| # Allow use of fopen. |
| add_definitions(-D_CRT_SECURE_NO_WARNINGS) |
| # VS 2017 and higher supports STL-only warning suppressions. Manually add to |
| # C++ only to work around a CMake quoting bug when using NASM with the Visual |
| # Studio generator. This will be fixed in CMake 3.13.0. See |
| # https://gitlab.kitware.com/cmake/cmake/merge_requests/2179 |
| add_compile_options($<$<COMPILE_LANGUAGE:CXX>:-D_STL_EXTRA_DISABLED_WARNINGS=4774\ 4987>) |
| endif() |
| |
| if((CMAKE_COMPILER_IS_GNUCXX AND CMAKE_C_COMPILER_VERSION VERSION_GREATER "4.7.99") OR |
| CLANG) |
| set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Wshadow") |
| set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -Wshadow") |
| endif() |
| |
| if(CMAKE_COMPILER_IS_GNUCXX) |
| if ((CMAKE_C_COMPILER_VERSION VERSION_GREATER "4.8.99") OR CLANG) |
| set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -std=c11") |
| else() |
| set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -std=c99") |
| endif() |
| endif() |
| |
| # pthread_rwlock_t requires a feature flag. |
| if(NOT WIN32) |
| set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -D_XOPEN_SOURCE=700") |
| endif() |
| |
| if(FUZZ) |
| if(NOT CLANG) |
| message(FATAL_ERROR "You need to build with Clang for fuzzing to work") |
| endif() |
| |
| add_definitions(-DBORINGSSL_UNSAFE_DETERMINISTIC_MODE) |
| set(RUNNER_ARGS "-deterministic") |
| |
| if(NOT NO_FUZZER_MODE) |
| add_definitions(-DBORINGSSL_UNSAFE_FUZZER_MODE) |
| set(RUNNER_ARGS ${RUNNER_ARGS} "-fuzzer" "-shim-config" "fuzzer_mode.json") |
| endif() |
| |
| set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fsanitize=address -fsanitize-coverage=edge,indirect-calls,trace-pc-guard") |
| set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -fsanitize=address -fsanitize-coverage=edge,indirect-calls,trace-pc-guard") |
| set(CMAKE_EXE_LINKER_FLAGS "${CMAKE_EXE_LINKER_FLAGS} -fsanitize=address") |
| link_directories(.) |
| endif() |
| |
| add_definitions(-DBORINGSSL_IMPLEMENTATION) |
| |
| if (BUILD_SHARED_LIBS) |
| add_definitions(-DBORINGSSL_SHARED_LIBRARY) |
| # Enable position-independent code globally. This is needed because |
| # some library targets are OBJECT libraries. |
| set(CMAKE_POSITION_INDEPENDENT_CODE TRUE) |
| endif() |
| |
| if (MSAN) |
| if(NOT CLANG) |
| message(FATAL_ERROR "Cannot enable MSAN unless using Clang") |
| endif() |
| |
| if (ASAN) |
| message(FATAL_ERROR "ASAN and MSAN are mutually exclusive") |
| endif() |
| |
| set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fsanitize=memory -fsanitize-memory-track-origins -fno-omit-frame-pointer") |
| set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -fsanitize=memory -fsanitize-memory-track-origins -fno-omit-frame-pointer") |
| set(OPENSSL_NO_ASM "1") |
| endif() |
| |
| if (ASAN) |
| if(NOT CLANG) |
| message(FATAL_ERROR "Cannot enable ASAN unless using Clang") |
| endif() |
| |
| set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fsanitize=address -fsanitize-address-use-after-scope -fno-omit-frame-pointer") |
| set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -fsanitize=address -fsanitize-address-use-after-scope -fno-omit-frame-pointer") |
| set(OPENSSL_NO_ASM "1") |
| endif() |
| |
| if(CFI) |
| if(NOT CLANG) |
| message(FATAL_ERROR "Cannot enable CFI unless using Clang") |
| endif() |
| |
| # TODO(crbug.com/785442): Remove -fsanitize-cfi-icall-generalize-pointers. |
| set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fsanitize=cfi -fno-sanitize-trap=cfi -fsanitize-cfi-icall-generalize-pointers -flto") |
| set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -fsanitize=cfi -fno-sanitize-trap=cfi -fsanitize-cfi-icall-generalize-pointers -flto") |
| # We use Chromium's copy of clang, which requires -fuse-ld=lld if building |
| # with -flto. That, in turn, can't handle -ggdb. |
| set(CMAKE_EXE_LINKER_FLAGS "${CMAKE_EXE_LINKER_FLAGS} -fuse-ld=lld") |
| string(REPLACE "-ggdb" "-g" CMAKE_C_FLAGS "${CMAKE_C_FLAGS}") |
| string(REPLACE "-ggdb" "-g" CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS}") |
| # -flto causes object files to contain LLVM bitcode. Mixing those with |
| # assembly output in the same static library breaks the linker. |
| set(OPENSSL_NO_ASM "1") |
| endif() |
| |
| if (GCOV) |
| set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fprofile-arcs -ftest-coverage") |
| set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -fprofile-arcs -ftest-coverage") |
| endif() |
| |
| if(FIPS) |
| add_definitions(-DBORINGSSL_FIPS) |
| if(FIPS_BREAK_TEST) |
| add_definitions("-DBORINGSSL_FIPS_BREAK_${FIPS_BREAK_TEST}=1") |
| endif() |
| # Delocate does not work for ASan and MSan builds. |
| if(NOT ASAN AND NOT MSAN) |
| set(FIPS_DELOCATE "1") |
| endif() |
| endif() |
| |
| if(OPENSSL_SMALL) |
| add_definitions(-DOPENSSL_SMALL) |
| endif() |
| |
| # CMake's iOS support uses Apple's multiple-architecture toolchain. It takes an |
| # architecture list from CMAKE_OSX_ARCHITECTURES, leaves CMAKE_SYSTEM_PROCESSOR |
| # alone, and expects all architecture-specific logic to be conditioned within |
| # the source files rather than the build. This does not work for our assembly |
| # files, so we fix CMAKE_SYSTEM_PROCESSOR and only support single-architecture |
| # builds. |
| if (NOT OPENSSL_NO_ASM AND CMAKE_OSX_ARCHITECTURES) |
| list(LENGTH CMAKE_OSX_ARCHITECTURES NUM_ARCHES) |
| if (NOT ${NUM_ARCHES} EQUAL 1) |
| message(FATAL_ERROR "Universal binaries not supported.") |
| endif() |
| list(GET CMAKE_OSX_ARCHITECTURES 0 CMAKE_SYSTEM_PROCESSOR) |
| endif() |
| |
| if (OPENSSL_NO_ASM) |
| add_definitions(-DOPENSSL_NO_ASM) |
| set(ARCH "generic") |
| elseif (${CMAKE_SYSTEM_PROCESSOR} STREQUAL "x86_64") |
| set(ARCH "x86_64") |
| elseif (${CMAKE_SYSTEM_PROCESSOR} STREQUAL "amd64") |
| set(ARCH "x86_64") |
| elseif (${CMAKE_SYSTEM_PROCESSOR} STREQUAL "AMD64") |
| # cmake reports AMD64 on Windows, but we might be building for 32-bit. |
| if (CMAKE_CL_64) |
| set(ARCH "x86_64") |
| else() |
| set(ARCH "x86") |
| endif() |
| elseif (${CMAKE_SYSTEM_PROCESSOR} STREQUAL "x86") |
| set(ARCH "x86") |
| elseif (${CMAKE_SYSTEM_PROCESSOR} STREQUAL "i386") |
| set(ARCH "x86") |
| elseif (${CMAKE_SYSTEM_PROCESSOR} STREQUAL "i686") |
| set(ARCH "x86") |
| elseif (${CMAKE_SYSTEM_PROCESSOR} STREQUAL "aarch64") |
| set(ARCH "aarch64") |
| elseif (${CMAKE_SYSTEM_PROCESSOR} STREQUAL "arm64") |
| set(ARCH "aarch64") |
| elseif (${CMAKE_SYSTEM_PROCESSOR} MATCHES "^arm*") |
| set(ARCH "arm") |
| elseif (${CMAKE_SYSTEM_PROCESSOR} STREQUAL "mips") |
| # Just to avoid the “unknown processor” error. |
| set(ARCH "generic") |
| elseif (${CMAKE_SYSTEM_PROCESSOR} STREQUAL "ppc64le") |
| set(ARCH "ppc64le") |
| else() |
| message(FATAL_ERROR "Unknown processor:" ${CMAKE_SYSTEM_PROCESSOR}) |
| endif() |
| |
| if (ANDROID AND NOT ANDROID_NDK_REVISION AND ${ARCH} STREQUAL "arm") |
| # The third-party Android-NDK CMake files somehow fail to set the -march flag |
| # for assembly files. Without this flag, the compiler believes that it's |
| # building for ARMv5. |
| set(CMAKE_ASM_FLAGS "-march=${CMAKE_SYSTEM_PROCESSOR} ${CMAKE_ASM_FLAGS}") |
| endif() |
| |
| if (${ARCH} STREQUAL "x86" AND APPLE AND ${CMAKE_VERSION} VERSION_LESS "3.0") |
| # With CMake 2.8.x, ${CMAKE_SYSTEM_PROCESSOR} evalutes to i386 on OS X, |
| # but clang defaults to 64-bit builds on OS X unless otherwise told. |
| # Set ARCH to x86_64 so clang and CMake agree. This is fixed in CMake 3. |
| set(ARCH "x86_64") |
| endif() |
| |
| # Add minimal googletest targets. The provided one has many side-effects, and |
| # googletest has a very straightforward build. |
| add_library(boringssl_gtest third_party/googletest/src/gtest-all.cc) |
| target_include_directories(boringssl_gtest PRIVATE third_party/googletest) |
| |
| include_directories(third_party/googletest/include) |
| |
| # Declare a dummy target to build all unit tests. Test targets should inject |
| # themselves as dependencies next to the target definition. |
| add_custom_target(all_tests) |
| |
| add_custom_command( |
| OUTPUT crypto_test_data.cc |
| COMMAND ${GO_EXECUTABLE} run util/embed_test_data.go ${CRYPTO_TEST_DATA} > |
| ${CMAKE_CURRENT_BINARY_DIR}/crypto_test_data.cc |
| DEPENDS util/embed_test_data.go ${CRYPTO_TEST_DATA} |
| WORKING_DIRECTORY ${CMAKE_CURRENT_SOURCE_DIR}) |
| |
| add_library(crypto_test_data OBJECT crypto_test_data.cc) |
| |
| add_subdirectory(crypto) |
| add_subdirectory(third_party/fiat) |
| add_subdirectory(ssl) |
| add_subdirectory(ssl/test) |
| add_subdirectory(fipstools) |
| add_subdirectory(tool) |
| add_subdirectory(decrepit) |
| |
| if(FUZZ) |
| if(LIBFUZZER_FROM_DEPS) |
| file(GLOB LIBFUZZER_SOURCES "util/bot/libFuzzer/*.cpp") |
| add_library(Fuzzer STATIC ${LIBFUZZER_SOURCES}) |
| # libFuzzer does not pass our aggressive warnings. It also must be built |
| # without -fsanitize-coverage options or clang crashes. |
| set_target_properties(Fuzzer PROPERTIES COMPILE_FLAGS "-Wno-shadow -Wno-format-nonliteral -Wno-missing-prototypes -fsanitize-coverage=0") |
| endif() |
| |
| add_subdirectory(fuzz) |
| endif() |
| |
| if (NOT ${CMAKE_VERSION} VERSION_LESS "3.2") |
| # USES_TERMINAL is only available in CMake 3.2 or later. |
| set(MAYBE_USES_TERMINAL USES_TERMINAL) |
| endif() |
| |
| add_custom_target( |
| run_tests |
| COMMAND ${GO_EXECUTABLE} run util/all_tests.go -build-dir |
| ${CMAKE_BINARY_DIR} |
| COMMAND cd ssl/test/runner && |
| ${GO_EXECUTABLE} test -shim-path $<TARGET_FILE:bssl_shim> |
| ${RUNNER_ARGS} |
| WORKING_DIRECTORY ${CMAKE_SOURCE_DIR} |
| DEPENDS all_tests bssl_shim |
| ${MAYBE_USES_TERMINAL}) |