Configure

   1 #! /usr/bin/env perl
   2 # -*- mode: perl; -*-
   3 # Copyright 2016-2020 The OpenSSL Project Authors. All Rights Reserved.
   4 #
   5 # Licensed under the Apache License 2.0 (the "License").  You may not use
   6 # this file except in compliance with the License.  You can obtain a copy
   7 # in the file LICENSE in the source distribution or at
   8 # https://www.openssl.org/source/license.html
   9
  10 ##  Configure -- OpenSSL source tree configuration script
  11
  12 use 5.10.0;
  13 use strict;
  14 use Config;
  15 use FindBin;
  16 use lib "$FindBin::Bin/util/perl";
  17 use File::Basename;
  18 use File::Spec::Functions qw/:DEFAULT abs2rel rel2abs splitdir/;
  19 use File::Path qw/mkpath/;
  20 use OpenSSL::fallback "$FindBin::Bin/external/perl/MODULES.txt";
  21 use OpenSSL::Glob;
  22 use OpenSSL::Template;
  23 use OpenSSL::config;
  24
  25 # see INSTALL.md for instructions.
  26
  27 my $orig_death_handler = $SIG{__DIE__};
  28 $SIG{__DIE__} = \&death_handler;
  29
  30 my $usage="Usage: Configure [no-<cipher> ...] [enable-<cipher> ...] [-Dxxx] [-lxxx] [-Lxxx] [-fxxx] [-Kxxx] [no-hw-xxx|no-hw] [[no-]threads] [[no-]shared] [[no-]zlib|zlib-dynamic] [no-asm] [no-egd] [sctp] [386] [--prefix=DIR] [--openssldir=OPENSSLDIR] [--with-xxx[=vvv]] [--config=FILE] os/compiler[:flags]\n";
  31
  32 # Options:
  33 #
  34 # --config      add the given configuration file, which will be read after
  35 #               any "Configurations*" files that are found in the same
  36 #               directory as this script.
  37 # --prefix      prefix for the OpenSSL installation, which includes the
  38 #               directories bin, lib, include, share/man, share/doc/openssl
  39 #               This becomes the value of INSTALLTOP in Makefile
  40 #               (Default: /usr/local)
  41 # --openssldir  OpenSSL data area, such as openssl.cnf, certificates and keys.
  42 #               If it's a relative directory, it will be added on the directory
  43 #               given with --prefix.
  44 #               This becomes the value of OPENSSLDIR in Makefile and in C.
  45 #               (Default: PREFIX/ssl)
  46 #
  47 # --cross-compile-prefix Add specified prefix to binutils components.
  48 #
  49 # --api         One of 0.9.8, 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1, or 3.0
  50 #               Define the public APIs as they were for that version
  51 #               including patch releases.  If 'no-deprecated' is also
  52 #               given, do not compile support for interfaces deprecated
  53 #               up to and including the specified OpenSSL version.
  54 #
  55 # no-hw-xxx     do not compile support for specific crypto hardware.
  56 #               Generic OpenSSL-style methods relating to this support
  57 #               are always compiled but return NULL if the hardware
  58 #               support isn't compiled.
  59 # no-hw         do not compile support for any crypto hardware.
  60 # [no-]threads  [don't] try to create a library that is suitable for
  61 #               multithreaded applications (default is "threads" if we
  62 #               know how to do it)
  63 # [no-]shared   [don't] try to create shared libraries when supported.
  64 # [no-]pic      [don't] try to build position independent code when supported.
  65 #               If disabled, it also disables shared and dynamic-engine.
  66 # no-asm        do not use assembler
  67 # no-egd        do not compile support for the entropy-gathering daemon APIs
  68 # [no-]zlib     [don't] compile support for zlib compression.
  69 # zlib-dynamic  Like "zlib", but the zlib library is expected to be a shared
  70 #               library and will be loaded in run-time by the OpenSSL library.
  71 # sctp          include SCTP support
  72 # no-uplink     Don't build support for UPLINK interface.
  73 # enable-weak-ssl-ciphers
  74 #               Enable weak ciphers that are disabled by default.
  75 # 386           generate 80386 code in assembly modules
  76 # no-sse2       disables IA-32 SSE2 code in assembly modules, the above
  77 #               mentioned '386' option implies this one
  78 # no-<cipher>   build without specified algorithm (dsa, idea, rc5, ...)
  79 # -<xxx> +<xxx> All options which are unknown to the 'Configure' script are
  80 # /<xxx>        passed through to the compiler. Unix-style options beginning
  81 #               with a '-' or '+' are recognized, as well as Windows-style
  82 #               options beginning with a '/'. If the option contains arguments
  83 #               separated by spaces, then the URL-style notation %20 can be
  84 #               used for the space character in order to avoid having to quote
  85 #               the option. For example, -opt%20arg gets expanded to -opt arg.
  86 #               In fact, any ASCII character can be encoded as %xx using its
  87 #               hexadecimal encoding.
  88 # -static       while -static is also a pass-through compiler option (and
  89 #               as such is limited to environments where it's actually
  90 #               meaningful), it triggers a number configuration options,
  91 #               namely no-pic, no-shared and no-threads. It is
  92 #               argued that the only reason to produce statically linked
  93 #               binaries (and in context it means executables linked with
  94 #               -static flag, and not just executables linked with static
  95 #               libcrypto.a) is to eliminate dependency on specific run-time,
  96 #               a.k.a. libc version. The mentioned config options are meant
  97 #               to achieve just that. Unfortunately on Linux it's impossible
  98 #               to eliminate the dependency completely for openssl executable
  99 #               because of getaddrinfo and gethostbyname calls, which can
 100 #               invoke dynamically loadable library facility anyway to meet
 101 #               the lookup requests. For this reason on Linux statically
 102 #               linked openssl executable has rather debugging value than
 103 #               production quality.
 104 #
 105 # BN_LLONG      use the type 'long long' in crypto/bn/bn.h
 106 # RC4_CHAR      use 'char' instead of 'int' for RC4_INT in crypto/rc4/rc4.h
 107 # Following are set automatically by this script
 108 #
 109 # MD5_ASM       use some extra md5 assembler,
 110 # SHA1_ASM      use some extra sha1 assembler, must define L_ENDIAN for x86
 111 # RMD160_ASM    use some extra ripemd160 assembler,
 112 # SHA256_ASM    sha256_block is implemented in assembler
 113 # SHA512_ASM    sha512_block is implemented in assembler
 114 # AES_ASM       AES_[en|de]crypt is implemented in assembler
 115
 116 # Minimum warning options... any contributions to OpenSSL should at least
 117 # get past these.  Note that we only use these with C compilers, not with
 118 # C++ compilers.
 119
 120 # DEBUG_UNUSED enables __owur (warn unused result) checks.
 121 # -DPEDANTIC complements -pedantic and is meant to mask code that
 122 # is not strictly standard-compliant and/or implementation-specific,
 123 # e.g. inline assembly, disregards to alignment requirements, such
 124 # that -pedantic would complain about. Incidentally -DPEDANTIC has
 125 # to be used even in sanitized builds, because sanitizer too is
 126 # supposed to and does take notice of non-standard behaviour. Then
 127 # -pedantic with pre-C9x compiler would also complain about 'long
 128 # long' not being supported. As 64-bit algorithms are common now,
 129 # it grew impossible to resolve this without sizeable additional
 130 # code, so we just tell compiler to be pedantic about everything
 131 # but 'long long' type.
 132
 133 my @gcc_devteam_warn = qw(
 134     -DDEBUG_UNUSED
 135     -DPEDANTIC -pedantic -Wno-long-long
 136     -Wall
 137     -Wextra
 138     -Wno-unused-parameter
 139     -Wno-missing-field-initializers
 140     -Wswitch
 141     -Wsign-compare
 142     -Wshadow
 143     -Wformat
 144     -Wtype-limits
 145     -Wundef
 146     -Werror
 147     -Wmissing-prototypes
 148     -Wstrict-prototypes
 149 );
 150
 151 # These are used in addition to $gcc_devteam_warn when the compiler is clang.
 152 # TODO(openssl-team): fix problems and investigate if (at least) the
 153 # following warnings can also be enabled:
 154 #       -Wcast-align
 155 #       -Wunreachable-code -- no, too ugly/compiler-specific
 156 #       -Wlanguage-extension-token -- no, we use asm()
 157 #       -Wunused-macros -- no, too tricky for BN and _XOPEN_SOURCE etc
 158 #       -Wextended-offsetof -- no, needed in CMS ASN1 code
 159 my @clang_devteam_warn = qw(
 160     -Wno-unknown-warning-option
 161     -Wswitch-default
 162     -Wno-parentheses-equality
 163     -Wno-language-extension-token
 164     -Wno-extended-offsetof
 165     -Wconditional-uninitialized
 166     -Wincompatible-pointer-types-discards-qualifiers
 167     -Wmissing-variable-declarations
 168 );
 169
 170 my @cl_devteam_warn = qw(
 171     /WX
 172 );
 173
 174 my $strict_warnings = 0;
 175
 176 # As for $BSDthreads. Idea is to maintain "collective" set of flags,
 177 # which would cover all BSD flavors. -pthread applies to them all,
 178 # but is treated differently. OpenBSD expands is as -D_POSIX_THREAD
 179 # -lc_r, which is sufficient. FreeBSD 4.x expands it as -lc_r,
 180 # which has to be accompanied by explicit -D_THREAD_SAFE and
 181 # sometimes -D_REENTRANT. FreeBSD 5.x expands it as -lc_r, which
 182 # seems to be sufficient?
 183 our $BSDthreads="-pthread -D_THREAD_SAFE -D_REENTRANT";
 184
 185 #
 186 # API compatibility name to version number mapping.
 187 #
 188 my $apitable = {
 189     # This table expresses when API additions or changes can occur.
 190     # The numbering used changes from 3.0 and on because we updated
 191     # (solidified) our version numbering scheme at that point.
 192
 193     # From 3.0 and on, we internalise the given version number in decimal
 194     # as MAJOR * 10000 + MINOR * 100 + 0
 195     "3.0.0" => 30000,
 196     "3.0"   => 30000,
 197
 198     # Note that before 3.0, we didn't have the same version number scheme.
 199     # Still, the numbering we use here covers what we need.
 200     "1.1.1" => 10101,
 201     "1.1.0" => 10100,
 202     "1.0.2" => 10002,
 203     "1.0.1" => 10001,
 204     "1.0.0" => 10000,
 205     "0.9.8" =>   908,
 206 };
 207
 208 # For OpenSSL::config::get_platform
 209 my %guess_opts = ();
 210
 211 my $dryrun = 0;
 212
 213 our %table = ();
 214 our %config = ();
 215 our %withargs = ();
 216 our $now_printing;      # set to current entry's name in print_table_entry
 217                         # (todo: right thing would be to encapsulate name
 218                         # into %target [class] and make print_table_entry
 219                         # a method)
 220
 221 # Forward declarations ###############################################
 222
 223 # read_config(filename)
 224 #
 225 # Reads a configuration file and populates %table with the contents
 226 # (which the configuration file places in %targets).
 227 sub read_config;
 228
 229 # resolve_config(target)
 230 #
 231 # Resolves all the late evaluations, inheritances and so on for the
 232 # chosen target and any target it inherits from.
 233 sub resolve_config;
 234
 235
 236 # Information collection #############################################
 237
 238 # Unified build supports separate build dir
 239 my $srcdir = catdir(absolutedir(dirname($0))); # catdir ensures local syntax
 240 my $blddir = catdir(absolutedir("."));         # catdir ensures local syntax
 241
 242 # File::Spec::Unix doesn't detect case insensitivity, so we make sure to
 243 # check if the source and build directory are really the same, and make
 244 # them so.  This avoids all kinds of confusion later on.
 245 # We must check @File::Spec::ISA rather than using File::Spec->isa() to
 246 # know if File::Spec ended up loading File::Spec::Unix.
 247 $srcdir = $blddir
 248     if (grep(/::Unix$/, @File::Spec::ISA)
 249         && samedir($srcdir, $blddir));
 250
 251 my $dofile = abs2rel(catfile($srcdir, "util/dofile.pl"));
 252
 253 my $local_config_envname = 'OPENSSL_LOCAL_CONFIG_DIR';
 254
 255 $config{sourcedir} = abs2rel($srcdir, $blddir);
 256 $config{builddir} = abs2rel($blddir, $blddir);
 257 # echo -n 'holy hand grenade of antioch' | openssl sha256
 258 $config{FIPSKEY} =
 259     'f4556650ac31d35461610bac4ed81b1a181b2d8a43ea2854cbae22ca74560813';
 260
 261 # Collect reconfiguration information if needed
 262 my @argvcopy=@ARGV;
 263
 264 if (grep /^reconf(igure)?$/, @argvcopy) {
 265     die "reconfiguring with other arguments present isn't supported"
 266         if scalar @argvcopy > 1;
 267     if (-f "./configdata.pm") {
 268         my $file = "./configdata.pm";
 269         unless (my $return = do $file) {
 270             die "couldn't parse $file: $@" if $@;
 271             die "couldn't do $file: $!"    unless defined $return;
 272             die "couldn't run $file"       unless $return;
 273         }
 274
 275         @argvcopy = defined($configdata::config{perlargv}) ?
 276             @{$configdata::config{perlargv}} : ();
 277         die "Incorrect data to reconfigure, please do a normal configuration\n"
 278             if (grep(/^reconf/,@argvcopy));
 279         $config{perlenv} = $configdata::config{perlenv} // {};
 280     } else {
 281         die "Insufficient data to reconfigure, please do a normal configuration\n";
 282     }
 283 }
 284
 285 $config{perlargv} = [ @argvcopy ];
 286
 287 # Historical: if known directories in crypto/ have been removed, it means
 288 # that those sub-systems are disabled.
 289 # (the other option would be to removed them from the SUBDIRS statement in
 290 # crypto/build.info)
 291 # We reverse the input list for cosmetic purely reasons, to compensate that
 292 # 'unshift' adds at the front of the list (i.e. in reverse input order).
 293 foreach ( reverse sort( 'aes', 'aria', 'bf', 'camellia', 'cast', 'des', 'dh',
 294                         'dsa', 'ec', 'hmac', 'idea', 'md2', 'md5', 'mdc2',
 295                         'rc2', 'rc4', 'rc5', 'ripemd', 'seed', 'sha',
 296                         'sm2', 'sm3', 'sm4') ) {
 297     unshift @argvcopy, "no-$_" if ! -d catdir($srcdir, 'crypto', $_);
 298 }
 299
 300 # Collect version numbers
 301 my %version = ();
 302
 303 collect_information(
 304     collect_from_file(catfile($srcdir,'VERSION.dat')),
 305     qr/\s*(\w+)\s*=\s*(.*?)\s*$/ =>
 306         sub {
 307             # Only define it if there is a value at all
 308             if ($2 ne '') {
 309                 my $k = $1;
 310                 my $v = $2;
 311                 # Some values are quoted.  Trim the quotes
 312                 $v = $1 if $v =~ /^"(.*)"$/;
 313                 $version{uc $k} = $v;
 314             }
 315         },
 316     "OTHERWISE" =>
 317         sub { die "Something wrong with this line:\n$_\nin $srcdir/VERSION.dat" },
 318     );
 319
 320 $config{major} = $version{MAJOR} // 'unknown';
 321 $config{minor} = $version{MINOR} // 'unknown';
 322 $config{patch} = $version{PATCH} // 'unknown';
 323 $config{prerelease} =
 324     defined $version{PRE_RELEASE_TAG} ? "-$version{PRE_RELEASE_TAG}" : '';
 325 $config{build_metadata} =
 326     defined $version{BUILD_METADATA} ? "+$version{BUILD_METADATA}" : '';
 327 $config{shlib_version} = $version{SHLIB_VERSION} // 'unknown';
 328 $config{release_date} = $version{RELEASE_DATE} // 'xx XXX xxxx';
 329
 330 $config{version} = "$config{major}.$config{minor}.$config{patch}";
 331 $config{full_version} = "$config{version}$config{prerelease}$config{build_metadata}";
 332
 333 die "erroneous version information in VERSION.dat: ",
 334     "$config{version}, $config{shlib_version}\n"
 335     unless (defined $version{MAJOR}
 336             && defined $version{MINOR}
 337             && defined $version{PATCH}
 338             && defined $version{SHLIB_VERSION});
 339
 340 # Collect target configurations
 341
 342 my $pattern = catfile(dirname($0), "Configurations", "*.conf");
 343 foreach (sort glob($pattern)) {
 344     &read_config($_);
 345 }
 346
 347 if (defined env($local_config_envname)) {
 348     if ($^O eq 'VMS') {
 349         # VMS environment variables are logical names,
 350         # which can be used as is
 351         $pattern = $local_config_envname . ':' . '*.conf';
 352     } else {
 353         $pattern = catfile(env($local_config_envname), '*.conf');
 354     }
 355
 356     foreach (sort glob($pattern)) {
 357         &read_config($_);
 358     }
 359 }
 360
 361 # Save away perl command information
 362 $config{perl_cmd} = $^X;
 363 $config{perl_version} = $Config{version};
 364 $config{perl_archname} = $Config{archname};
 365
 366 $config{prefix}="";
 367 $config{openssldir}="";
 368 $config{processor}="";
 369 $config{libdir}="";
 370 my $auto_threads=1;    # enable threads automatically? true by default
 371 my $default_ranlib;
 372
 373 # Known TLS and DTLS protocols
 374 my @tls = qw(ssl3 tls1 tls1_1 tls1_2 tls1_3);
 375 my @dtls = qw(dtls1 dtls1_2);
 376
 377 # Explicitly known options that are possible to disable.  They can
 378 # be regexps, and will be used like this: /^no-${option}$/
 379 # For developers: keep it sorted alphabetically
 380
 381 my @disablables = (
 382     "acvp_tests",
 383     "afalgeng",
 384     "aria",
 385     "asan",
 386     "asm",
 387     "async",
 388     "autoalginit",
 389     "autoerrinit",
 390     "autoload-config",
 391     "bf",
 392     "blake2",
 393     "buildtest-c++",
 394     "bulk",
 395     "camellia",
 396     "capieng",
 397     "cast",
 398     "chacha",
 399     "cmac",
 400     "cmp",
 401     "cms",
 402     "comp",
 403     "crypto-mdebug",
 404     "ct",
 405     "deprecated",
 406     "des",
 407     "devcryptoeng",
 408     "dgram",
 409     "dh",
 410     "dsa",
 411     "dso",
 412     "dtls",
 413     "dynamic-engine",
 414     "ec",
 415     "ec2m",
 416     "ecdh",
 417     "ecdsa",
 418     "ec_nistp_64_gcc_128",
 419     "egd",
 420     "engine",
 421     "err",
 422     "external-tests",
 423     "filenames",
 424     "fips",
 425     "fips-securitychecks",
 426     "fuzz-libfuzzer",
 427     "fuzz-afl",
 428     "gost",
 429     "idea",
 430     "ktls",
 431     "legacy",
 432     "makedepend",
 433     "md2",
 434     "md4",
 435     "mdc2",
 436     "module",
 437     "msan",
 438     "multiblock",
 439     "nextprotoneg",
 440     "pinshared",
 441     "ocb",
 442     "ocsp",
 443     "padlockeng",
 444     "pic",
 445     "poly1305",
 446     "posix-io",
 447     "psk",
 448     "rc2",
 449     "rc4",
 450     "rc5",
 451     "rdrand",
 452     "rfc3779",
 453     "rmd160",
 454     "scrypt",
 455     "sctp",
 456     "secure-memory",
 457     "seed",
 458     "shared",
 459     "siphash",
 460     "siv",
 461     "sm2",
 462     "sm3",
 463     "sm4",
 464     "sock",
 465     "srp",
 466     "srtp",
 467     "sse2",
 468     "ssl",
 469     "ssl-trace",
 470     "static-engine",
 471     "stdio",
 472     "tests",
 473     "threads",
 474     "tls",
 475     "trace",
 476     "ts",
 477     "ubsan",
 478     "ui-console",
 479     "unit-test",
 480     "uplink",
 481     "whirlpool",
 482     "weak-ssl-ciphers",
 483     "zlib",
 484     "zlib-dynamic",
 485     );
 486 foreach my $proto ((@tls, @dtls))
 487         {
 488         push(@disablables, $proto);
 489         push(@disablables, "$proto-method") unless $proto eq "tls1_3";
 490         }
 491
 492 # Internal disablables, for aliasing purposes.  They serve no special
 493 # purpose here, but allow scripts to get to know them through configdata.pm,
 494 # where these are merged with @disablables.
 495 # The actual aliasing mechanism is done via %disable_cascades
 496 my @disablables_int = qw(
 497     crmf
 498     );
 499
 500 my %deprecated_disablables = (
 501     "ssl2" => undef,
 502     "buf-freelists" => undef,
 503     "crypto-mdebug-backtrace" => undef,
 504     "hw" => "hw",               # causes cascade, but no macro
 505     "hw-padlock" => "padlockeng",
 506     "ripemd" => "rmd160",
 507     "ui" => "ui-console",
 508     "heartbeats" => undef,
 509     );
 510
 511 # All of the following are disabled by default:
 512
 513 our %disabled = ( # "what"         => "comment"
 514                   "asan"                => "default",
 515                   "buildtest-c++"       => "default",
 516                   "crypto-mdebug"       => "default",
 517                   "crypto-mdebug-backtrace" => "default",
 518                   "devcryptoeng"        => "default",
 519                   "ec_nistp_64_gcc_128" => "default",
 520                   "egd"                 => "default",
 521                   "external-tests"      => "default",
 522                   "fuzz-libfuzzer"      => "default",
 523                   "fuzz-afl"            => "default",
 524                   "md2"                 => "default",
 525                   "msan"                => "default",
 526                   "rc5"                 => "default",
 527                   "sctp"                => "default",
 528                   "ssl-trace"           => "default",
 529                   "ssl3"                => "default",
 530                   "ssl3-method"         => "default",
 531                   "trace"               => "default",
 532                   "ubsan"               => "default",
 533                   "unit-test"           => "default",
 534                   "weak-ssl-ciphers"    => "default",
 535                   "zlib"                => "default",
 536                   "zlib-dynamic"        => "default",
 537                   "ktls"                => "default",
 538                 );
 539
 540 # Note: => pair form used for aesthetics, not to truly make a hash table
 541 my @disable_cascades = (
 542     # "what"            => [ "cascade", ... ]
 543     "bulk"              => [ "shared", "dso",
 544                              "aria", "async", "autoload-config",
 545                              "blake2", "bf", "camellia", "cast", "chacha",
 546                              "cmac", "cms", "cmp", "comp", "ct",
 547                              "des", "dgram", "dh", "dsa",
 548                              "ec", "engine",
 549                              "filenames",
 550                              "idea", "ktls",
 551                              "md4", "multiblock", "nextprotoneg",
 552                              "ocsp", "ocb", "poly1305", "psk",
 553                              "rc2", "rc4", "rmd160",
 554                              "seed", "siphash", "siv",
 555                              "sm3", "sm4", "srp",
 556                              "srtp", "ssl3-method",
 557                              "ts", "ui-console", "whirlpool",
 558                              "fips-securitychecks" ],
 559     sub { $config{processor} eq "386" }
 560                         => [ "sse2" ],
 561     "ssl"               => [ "ssl3" ],
 562     "ssl3-method"       => [ "ssl3" ],
 563     "zlib"              => [ "zlib-dynamic" ],
 564     "des"               => [ "mdc2" ],
 565     "ec"                => [ "ec2m", "ecdsa", "ecdh", "sm2", "gost" ],
 566     sub { $disabled{"ec"} && $disabled{"dh"} }
 567                         => [ "tls1_3" ],
 568     "dgram"             => [ "dtls", "sctp" ],
 569     "sock"              => [ "dgram" ],
 570     "dtls"              => [ @dtls ],
 571     sub { 0 == scalar grep { !$disabled{$_} } @dtls }
 572                         => [ "dtls" ],
 573
 574     "tls"               => [ @tls ],
 575     sub { 0 == scalar grep { !$disabled{$_} } @tls }
 576                         => [ "tls" ],
 577
 578     "crypto-mdebug"     => [ "crypto-mdebug-backtrace" ],
 579
 580     # If no modules, then no dynamic engines either
 581     "module"            => [ "dynamic-engine" ],
 582
 583     # Without shared libraries, dynamic engines aren't possible.
 584     # This is due to them having to link with libcrypto and register features
 585     # using the ENGINE functionality, and since that relies on global tables,
 586     # those *have* to be exacty the same as the ones accessed from the app,
 587     # which cannot be guaranteed if shared libraries aren't present.
 588     # (note that even with shared libraries, both the app and dynamic engines
 589     # must be linked with the same library)
 590     "shared"            => [ "dynamic-engine", "uplink" ],
 591     "dso"               => [ "dynamic-engine", "module" ],
 592     # Other modules don't necessarily have to link with libcrypto, so shared
 593     # libraries do not have to be a condition to produce those.
 594
 595     # Without position independent code, there can be no shared libraries
 596     # or modules.
 597     "pic"               => [ "shared", "module" ],
 598
 599     "module"            => [ "fips", "dso" ],
 600
 601     "engine"            => [ "dynamic-engine", grep(/eng$/, @disablables) ],
 602     "hw"                => [ "padlockeng" ],
 603
 604     # no-autoalginit is only useful when building non-shared
 605     "autoalginit"       => [ "shared", "apps" ],
 606
 607     "stdio"             => [ "apps", "capieng", "egd" ],
 608     "apps"              => [ "tests" ],
 609     "tests"             => [ "external-tests" ],
 610     "comp"              => [ "zlib" ],
 611     "sm3"               => [ "sm2" ],
 612     sub { !$disabled{"unit-test"} } => [ "heartbeats" ],
 613
 614     sub { !$disabled{"msan"} } => [ "asm" ],
 615
 616     sub { $disabled{cmac}; } => [ "siv" ],
 617     "legacy"                 => [ "md2" ],
 618
 619     "cmp"               => [ "crmf" ],
 620
 621     sub { $disabled{"deprecated-3.0"} }
 622           => [ "engine" ]
 623     );
 624
 625 # Avoid protocol support holes.  Also disable all versions below N, if version
 626 # N is disabled while N+1 is enabled.
 627 #
 628 my @list = (reverse @tls);
 629 while ((my $first, my $second) = (shift @list, shift @list)) {
 630     last unless @list;
 631     push @disable_cascades, ( sub { !$disabled{$first} && $disabled{$second} }
 632                               => [ @list ] );
 633     unshift @list, $second;
 634 }
 635 my @list = (reverse @dtls);
 636 while ((my $first, my $second) = (shift @list, shift @list)) {
 637     last unless @list;
 638     push @disable_cascades, ( sub { !$disabled{$first} && $disabled{$second} }
 639                               => [ @list ] );
 640     unshift @list, $second;
 641 }
 642
 643 # Explicit "no-..." options will be collected in %disabled along with the defaults.
 644 # To remove something from %disabled, use "enable-foo".
 645 # For symmetry, "disable-foo" is a synonym for "no-foo".
 646
 647 # For the "make variables" CPPINCLUDES and CPPDEFINES, we support lists with
 648 # platform specific list separators.  Users from those platforms should
 649 # recognise those separators from how you set up the PATH to find executables.
 650 # The default is the Unix like separator, :, but as an exception, we also
 651 # support the space as separator.
 652 my $list_separator_re =
 653     { VMS           => qr/(?<!\^),/,
 654       MSWin32       => qr/(?<!\\);/ } -> {$^O} // qr/(?<!\\)[:\s]/;
 655 # All the "make variables" we support
 656 # Some get pre-populated for the sake of backward compatibility
 657 # (we supported those before the change to "make variable" support.
 658 my %user = (
 659     AR          => env('AR'),
 660     ARFLAGS     => [],
 661     AS          => undef,
 662     ASFLAGS     => [],
 663     CC          => env('CC'),
 664     CFLAGS      => [ env('CFLAGS') || () ],
 665     CXX         => env('CXX'),
 666     CXXFLAGS    => [ env('CXXFLAGS') || () ],
 667     CPP         => undef,
 668     CPPFLAGS    => [ env('CPPFLAGS') || () ],  # -D, -I, -Wp,
 669     CPPDEFINES  => [],  # Alternative for -D
 670     CPPINCLUDES => [],  # Alternative for -I
 671     CROSS_COMPILE => env('CROSS_COMPILE'),
 672     HASHBANGPERL=> env('HASHBANGPERL') || env('PERL'),
 673     LD          => undef,
 674     LDFLAGS     => [ env('LDFLAGS') || () ],  # -L, -Wl,
 675     LDLIBS      => [ env('LDLIBS') || () ],  # -l
 676     MT          => undef,
 677     MTFLAGS     => [],
 678     PERL        => env('PERL') || ($^O ne "VMS" ? $^X : "perl"),
 679     RANLIB      => env('RANLIB'),
 680     RC          => env('RC') || env('WINDRES'),
 681     RCFLAGS     => [ env('RCFLAGS') || () ],
 682     RM          => undef,
 683    );
 684 # Info about what "make variables" may be prefixed with the cross compiler
 685 # prefix.  This should NEVER mention any such variable with a list for value.
 686 my @user_crossable = qw ( AR AS CC CXX CPP LD MT RANLIB RC );
 687 # The same but for flags given as Configure options.  These are *additional*
 688 # input, as opposed to the VAR=string option that override the corresponding
 689 # config target attributes
 690 my %useradd = (
 691     CPPDEFINES  => [],
 692     CPPINCLUDES => [],
 693     CPPFLAGS    => [],
 694     CFLAGS      => [],
 695     CXXFLAGS    => [],
 696     LDFLAGS     => [],
 697     LDLIBS      => [],
 698     RCFLAGS     => [],
 699    );
 700
 701 my %user_synonyms = (
 702     HASHBANGPERL=> 'PERL',
 703     RC          => 'WINDRES',
 704    );
 705
 706 # Some target attributes have been renamed, this is the translation table
 707 my %target_attr_translate =(
 708     ar          => 'AR',
 709     as          => 'AS',
 710     cc          => 'CC',
 711     cxx         => 'CXX',
 712     cpp         => 'CPP',
 713     hashbangperl => 'HASHBANGPERL',
 714     ld          => 'LD',
 715     mt          => 'MT',
 716     ranlib      => 'RANLIB',
 717     rc          => 'RC',
 718     rm          => 'RM',
 719    );
 720
 721 # Initialisers coming from 'config' scripts
 722 $config{defines} = [ split(/$list_separator_re/, env('__CNF_CPPDEFINES')) ];
 723 $config{includes} = [ split(/$list_separator_re/, env('__CNF_CPPINCLUDES')) ];
 724 $config{cppflags} = [ env('__CNF_CPPFLAGS') || () ];
 725 $config{cflags} = [ env('__CNF_CFLAGS') || () ];
 726 $config{cxxflags} = [ env('__CNF_CXXFLAGS') || () ];
 727 $config{lflags} = [ env('__CNF_LDFLAGS') || () ];
 728 $config{ex_libs} = [ env('__CNF_LDLIBS') || () ];
 729
 730 $config{openssl_api_defines}=[];
 731 $config{openssl_sys_defines}=[];
 732 $config{openssl_feature_defines}=[];
 733 $config{options}="";
 734 $config{build_type} = "release";
 735 my $target="";
 736
 737 my %cmdvars = ();               # Stores FOO='blah' type arguments
 738 my %unsupported_options = ();
 739 my %deprecated_options = ();
 740 # If you change this, update apps/version.c
 741 my @known_seed_sources = qw(getrandom devrandom os egd none rdcpu librandom);
 742 my @seed_sources = ();
 743 while (@argvcopy)
 744         {
 745         $_ = shift @argvcopy;
 746
 747         # Support env variable assignments among the options
 748         if (m|^(\w+)=(.+)?$|)
 749                 {
 750                 $cmdvars{$1} = $2;
 751                 # Every time a variable is given as a configuration argument,
 752                 # it acts as a reset if the variable.
 753                 if (exists $user{$1})
 754                         {
 755                         $user{$1} = ref $user{$1} eq "ARRAY" ? [] : undef;
 756                         }
 757                 #if (exists $useradd{$1})
 758                 #       {
 759                 #       $useradd{$1} = [];
 760                 #       }
 761                 next;
 762                 }
 763
 764         # VMS is a case insensitive environment, and depending on settings
 765         # out of our control, we may receive options uppercased.  Let's
 766         # downcase at least the part before any equal sign.
 767         if ($^O eq "VMS")
 768                 {
 769                 s/^([^=]*)/lc($1)/e;
 770                 }
 771
 772         # some people just can't read the instructions, clang people have to...
 773         s/^-no-(?!integrated-as)/no-/;
 774
 775         # rewrite some options in "enable-..." form
 776         s /^-?-?shared$/enable-shared/;
 777         s /^sctp$/enable-sctp/;
 778         s /^threads$/enable-threads/;
 779         s /^zlib$/enable-zlib/;
 780         s /^zlib-dynamic$/enable-zlib-dynamic/;
 781
 782         if (/^(no|disable|enable)-(.+)$/)
 783                 {
 784                 my $word = $2;
 785                 if ($word !~ m|hw(?:-.+)| # special treatment for hw regexp opt
 786                         && !exists $deprecated_disablables{$word}
 787                         && !grep { $word eq $_ } @disablables)
 788                         {
 789                         $unsupported_options{$_} = 1;
 790                         next;
 791                         }
 792                 }
 793         if (/^no-(.+)$/ || /^disable-(.+)$/)
 794                 {
 795                 foreach my $proto ((@tls, @dtls))
 796                         {
 797                         if ($1 eq "$proto-method")
 798                                 {
 799                                 $disabled{"$proto"} = "option($proto-method)";
 800                                 last;
 801                                 }
 802                         }
 803                 if ($1 eq "dtls")
 804                         {
 805                         foreach my $proto (@dtls)
 806                                 {
 807                                 $disabled{$proto} = "option(dtls)";
 808                                 }
 809                         $disabled{"dtls"} = "option(dtls)";
 810                         }
 811                 elsif ($1 eq "ssl")
 812                         {
 813                         # Last one of its kind
 814                         $disabled{"ssl3"} = "option(ssl)";
 815                         }
 816                 elsif ($1 eq "tls")
 817                         {
 818                         # XXX: Tests will fail if all SSL/TLS
 819                         # protocols are disabled.
 820                         foreach my $proto (@tls)
 821                                 {
 822                                 $disabled{$proto} = "option(tls)";
 823                                 }
 824                         }
 825                 elsif ($1 eq "static-engine")
 826                         {
 827                         delete $disabled{"dynamic-engine"};
 828                         }
 829                 elsif ($1 eq "dynamic-engine")
 830                         {
 831                         $disabled{"dynamic-engine"} = "option";
 832                         }
 833                 elsif (exists $deprecated_disablables{$1})
 834                         {
 835                         $deprecated_options{$_} = 1;
 836                         if (defined $deprecated_disablables{$1})
 837                                 {
 838                                 $disabled{$deprecated_disablables{$1}} = "option";
 839                                 }
 840                         }
 841                 elsif ($1 =~ m|hw(?:-.+)|) # deprecate hw options in regexp form
 842                         {
 843                         $deprecated_options{$_} = 1;
 844                         }
 845                 else
 846                         {
 847                         $disabled{$1} = "option";
 848                         }
 849                 # No longer an automatic choice
 850                 $auto_threads = 0 if ($1 eq "threads");
 851                 }
 852         elsif (/^enable-(.+)$/)
 853                 {
 854                 if ($1 eq "static-engine")
 855                         {
 856                         $disabled{"dynamic-engine"} = "option";
 857                         }
 858                 elsif ($1 eq "dynamic-engine")
 859                         {
 860                         delete $disabled{"dynamic-engine"};
 861                         }
 862                 elsif ($1 eq "zlib-dynamic")
 863                         {
 864                         delete $disabled{"zlib"};
 865                         }
 866                 my $algo = $1;
 867                 delete $disabled{$algo};
 868
 869                 # No longer an automatic choice
 870                 $auto_threads = 0 if ($1 eq "threads");
 871                 }
 872         elsif (/^-d$/)          # From older 'config'
 873                 {
 874                 $config{build_type} = "debug";
 875                 }
 876         elsif (/^-v$/)          # From older 'config'
 877                 {
 878                 $guess_opts{verbose} = 1;
 879                 }
 880         elsif (/^-w$/)          # From older 'config'
 881                 {
 882                 $guess_opts{nowait} = 1;
 883                 }
 884         elsif (/^-t$/)          # From older 'config'
 885                 {
 886                 $dryrun = 1;
 887                 }
 888         elsif (/^--strict-warnings$/)
 889                 {
 890                 # Pretend that our strict flags is a C flag, and replace it
 891                 # with the proper flags later on
 892                 push @{$useradd{CFLAGS}}, '--ossl-strict-warnings';
 893                 $strict_warnings=1;
 894                 }
 895         elsif (/^--debug$/)
 896                 {
 897                 $config{build_type} = "debug";
 898                 }
 899         elsif (/^--release$/)
 900                 {
 901                 $config{build_type} = "release";
 902                 }
 903         elsif (/^386$/)
 904                 { $config{processor}=386; }
 905         elsif (/^fips$/)
 906                 {
 907                 die "FIPS mode not supported\n";
 908                 }
 909         elsif (/^rsaref$/)
 910                 {
 911                 # No RSAref support any more since it's not needed.
 912                 # The check for the option is there so scripts aren't
 913                 # broken
 914                 }
 915         elsif (/^nofipscanistercheck$/)
 916                 {
 917                 die "FIPS mode not supported\n";
 918                 }
 919         elsif (m|^[-+/]|)
 920                 {
 921                 if (/^--prefix=(.*)$/)
 922                         {
 923                         $config{prefix}=$1;
 924                         die "Directory given with --prefix MUST be absolute\n"
 925                                 unless file_name_is_absolute($config{prefix});
 926                         }
 927                 elsif (/^--api=(.*)$/)
 928                         {
 929                         my $api = $1;
 930                         die "Unknown API compatibility level $api"
 931                                 unless defined $apitable->{$api};
 932                         $config{api}=$apitable->{$api};
 933                         }
 934                 elsif (/^--libdir=(.*)$/)
 935                         {
 936                         $config{libdir}=$1;
 937                         }
 938                 elsif (/^--openssldir=(.*)$/)
 939                         {
 940                         $config{openssldir}=$1;
 941                         }
 942                 elsif (/^--with-zlib-lib=(.*)$/)
 943                         {
 944                         $withargs{zlib_lib}=$1;
 945                         }
 946                 elsif (/^--with-zlib-include=(.*)$/)
 947                         {
 948                         $withargs{zlib_include}=$1;
 949                         }
 950                 elsif (/^--with-fuzzer-lib=(.*)$/)
 951                         {
 952                         $withargs{fuzzer_lib}=$1;
 953                         }
 954                 elsif (/^--with-fuzzer-include=(.*)$/)
 955                         {
 956                         $withargs{fuzzer_include}=$1;
 957                         }
 958                 elsif (/^--with-rand-seed=(.*)$/)
 959                         {
 960                         foreach my $x (split(m|,|, $1))
 961                             {
 962                             die "Unknown --with-rand-seed choice $x\n"
 963                                 if ! grep { $x eq $_ } @known_seed_sources;
 964                             push @seed_sources, $x;
 965                             }
 966                         }
 967                 elsif (/^--fips-key=(.*)$/)
 968                         {
 969                         $user{FIPSKEY}=lc($1);
 970                         die "Non-hex character in FIPS key\n"
 971                            if $user{FIPSKEY} =~ /[^a-f0-9]/;
 972                         die "FIPS key must have even number of characters\n"
 973                            if length $1 & 1;
 974                         die "FIPS key too long (64 bytes max)\n"
 975                            if length $1 > 64;
 976                         }
 977                 elsif (/^--cross-compile-prefix=(.*)$/)
 978                         {
 979                         $user{CROSS_COMPILE}=$1;
 980                         }
 981                 elsif (/^--config=(.*)$/)
 982                         {
 983                         read_config $1;
 984                         }
 985                 elsif (/^-l(.*)$/)
 986                         {
 987                         push @{$useradd{LDLIBS}}, $_;
 988                         }
 989                 elsif (/^-framework$/)
 990                         {
 991                         push @{$useradd{LDLIBS}}, $_, shift(@argvcopy);
 992                         }
 993                 elsif (/^-L(.*)$/ or /^-Wl,/)
 994                         {
 995                         push @{$useradd{LDFLAGS}}, $_;
 996                         }
 997                 elsif (/^-rpath$/ or /^-R$/)
 998                         # -rpath is the OSF1 rpath flag
 999                         # -R is the old Solaris rpath flag
1000                         {
1001                         my $rpath = shift(@argvcopy) || "";
1002                         $rpath .= " " if $rpath ne "";
1003                         push @{$useradd{LDFLAGS}}, $_, $rpath;
1004                         }
1005                 elsif (/^-static$/)
1006                         {
1007                         push @{$useradd{LDFLAGS}}, $_;
1008                         }
1009                 elsif (m|^[-/]D(.*)$|)
1010                         {
1011                         push @{$useradd{CPPDEFINES}}, $1;
1012                         }
1013                 elsif (m|^[-/]I(.*)$|)
1014                         {
1015                         push @{$useradd{CPPINCLUDES}}, $1;
1016                         }
1017                 elsif (/^-Wp,$/)
1018                         {
1019                         push @{$useradd{CPPFLAGS}}, $1;
1020                         }
1021                 else    # common if (/^[-+]/), just pass down...
1022                         {
1023                         # Treat %xx as an ASCII code (e.g. replace %20 by a space character).
1024                         # This provides a simple way to pass options with arguments separated
1025                         # by spaces without quoting (e.g. -opt%20arg translates to -opt arg).
1026                         $_ =~ s/%([0-9a-f]{1,2})/chr(hex($1))/gei;
1027                         push @{$useradd{CFLAGS}}, $_;
1028                         push @{$useradd{CXXFLAGS}}, $_;
1029                         }
1030                 }
1031         elsif (m|^/|)
1032                 {
1033                 # Treat %xx as an ASCII code (e.g. replace %20 by a space character).
1034                 # This provides a simple way to pass options with arguments separated
1035                 # by spaces without quoting (e.g. /opt%20arg translates to /opt arg).
1036                 $_ =~ s/%([0-9a-f]{1,2})/chr(hex($1))/gei;
1037                 push @{$useradd{CFLAGS}}, $_;
1038                 push @{$useradd{CXXFLAGS}}, $_;
1039                 }
1040         else
1041                 {
1042                 die "target already defined - $target (offending arg: $_)\n" if ($target ne "");
1043                 $target=$_;
1044                 }
1045         unless ($_ eq $target || /^no-/ || /^disable-/)
1046                 {
1047                 # "no-..." follows later after implied deactivations
1048                 # have been derived.  (Don't take this too seriously,
1049                 # we really only write OPTIONS to the Makefile out of
1050                 # nostalgia.)
1051
1052                 if ($config{options} eq "")
1053                         { $config{options} = $_; }
1054                 else
1055                         { $config{options} .= " ".$_; }
1056                 }
1057         }
1058
1059 if (keys %deprecated_options)
1060         {
1061         warn "***** Deprecated options: ",
1062                 join(", ", keys %deprecated_options), "\n";
1063         }
1064 if (keys %unsupported_options)
1065         {
1066         die "***** Unsupported options: ",
1067                 join(", ", keys %unsupported_options), "\n";
1068         }
1069
1070 # If any %useradd entry has been set, we must check that the "make
1071 # variables" haven't been set.  We start by checking of any %useradd entry
1072 # is set.
1073 if (grep { scalar @$_ > 0 } values %useradd) {
1074     # Hash of env / make variables names.  The possible values are:
1075     # 1 - "make vars"
1076     # 2 - %useradd entry set
1077     # 3 - both set
1078     my %detected_vars =
1079         map { my $v = 0;
1080               $v += 1 if $cmdvars{$_};
1081               $v += 2 if @{$useradd{$_}};
1082               $_ => $v }
1083         keys %useradd;
1084
1085     # If any of the corresponding "make variables" is set, we error
1086     if (grep { $_ & 1 } values %detected_vars) {
1087         my $names = join(', ', grep { $detected_vars{$_} > 0 }
1088                                sort keys %detected_vars);
1089         die <<"_____";
1090 ***** Mixing make variables and additional compiler/linker flags as
1091 ***** configure command line option is not permitted.
1092 ***** Affected make variables: $names
1093 _____
1094     }
1095 }
1096
1097 # Check through all supported command line variables to see if any of them
1098 # were set, and canonicalise the values we got.  If no compiler or linker
1099 # flag or anything else that affects %useradd was set, we also check the
1100 # environment for values.
1101 my $anyuseradd =
1102     grep { defined $_ && (ref $_ ne 'ARRAY' || @$_) } values %useradd;
1103 foreach (keys %user) {
1104     my $value = $cmdvars{$_};
1105     $value //= env($_) unless $anyuseradd;
1106     $value //=
1107         defined $user_synonyms{$_} ? $cmdvars{$user_synonyms{$_}} : undef;
1108     $value //= defined $user_synonyms{$_} ? env($user_synonyms{$_}) : undef
1109         unless $anyuseradd;
1110
1111     if (defined $value) {
1112         if (ref $user{$_} eq 'ARRAY') {
1113             if ($_ eq 'CPPDEFINES' || $_ eq 'CPPINCLUDES') {
1114                 $user{$_} = [ split /$list_separator_re/, $value ];
1115             } else {
1116                 $user{$_} = [ $value ];
1117             }
1118         } elsif (!defined $user{$_}) {
1119             $user{$_} = $value;
1120         }
1121     }
1122 }
1123
1124 if (grep { /-rpath\b/ } ($user{LDFLAGS} ? @{$user{LDFLAGS}} : ())
1125     && !$disabled{shared}
1126     && !($disabled{asan} && $disabled{msan} && $disabled{ubsan})) {
1127     die "***** Cannot simultaneously use -rpath, shared libraries, and\n",
1128         "***** any of asan, msan or ubsan\n";
1129 }
1130
1131 # If no target was given, try guessing.
1132 unless ($target) {
1133     my %system_config = OpenSSL::config::get_platform(%guess_opts, %user);
1134
1135     # The $system_config{disable} is used to populate %disabled with
1136     # entries that aren't already there.
1137     foreach ( @{$system_config{disable} // []} ) {
1138         $disabled{$_} = 'system' unless defined $disabled{$_};
1139     }
1140     delete $system_config{disable};
1141
1142     # Override config entries with stuff from the guesser.
1143     # It's assumed that this really is nothing new.
1144     %config = ( %config, %system_config );
1145     $target = $system_config{target};
1146 }
1147
1148 sub disable {
1149     my $disable_type = shift;
1150
1151     for (@_) {
1152         $disabled{$_} = $disable_type;
1153     }
1154
1155     my @tocheckfor = (@_ ? @_ : keys %disabled);
1156     while (@tocheckfor) {
1157         my %new_tocheckfor = ();
1158         my @cascade_copy = (@disable_cascades);
1159         while (@cascade_copy) {
1160             my ($test, $descendents) =
1161                 (shift @cascade_copy, shift @cascade_copy);
1162             if (ref($test) eq "CODE" ? $test->() : defined($disabled{$test})) {
1163                 foreach (grep { !defined($disabled{$_}) } @$descendents) {
1164                     $new_tocheckfor{$_} = 1; $disabled{$_} = "cascade";
1165                 }
1166             }
1167         }
1168         @tocheckfor = (keys %new_tocheckfor);
1169     }
1170 }
1171 disable();                     # First cascade run
1172
1173 our $die = sub { die @_; };
1174 if ($target eq "TABLE") {
1175     local $die = sub { warn @_; };
1176     foreach (sort keys %table) {
1177         print_table_entry($_, "TABLE");
1178     }
1179     exit 0;
1180 }
1181
1182 if ($target eq "LIST") {
1183     foreach (sort keys %table) {
1184         print $_,"\n" unless $table{$_}->{template};
1185     }
1186     exit 0;
1187 }
1188
1189 if ($target eq "HASH") {
1190     local $die = sub { warn @_; };
1191     print "%table = (\n";
1192     foreach (sort keys %table) {
1193         print_table_entry($_, "HASH");
1194     }
1195     exit 0;
1196 }
1197
1198 print "Configuring OpenSSL version $config{full_version} ";
1199 print "for target $target\n";
1200
1201 if (scalar(@seed_sources) == 0) {
1202     print "Using os-specific seed configuration\n";
1203     push @seed_sources, 'os';
1204 }
1205 if (scalar(grep { $_ eq 'egd' } @seed_sources) > 0) {
1206     delete $disabled{'egd'};
1207 }
1208 if (scalar(grep { $_ eq 'none' } @seed_sources) > 0) {
1209     die "Cannot seed with none and anything else" if scalar(@seed_sources) > 1;
1210     warn <<_____ if scalar(@seed_sources) == 1;
1211
1212 ============================== WARNING ===============================
1213 You have selected the --with-rand-seed=none option, which effectively
1214 disables automatic reseeding of the OpenSSL random generator.
1215 All operations depending on the random generator such as creating keys
1216 will not work unless the random generator is seeded manually by the
1217 application.
1218
1219 Please read the 'Note on random number generation' section in the
1220 INSTALL.md instructions and the RAND_DRBG(7) manual page for more
1221 details.
1222 ============================== WARNING ===============================
1223
1224 _____
1225 }
1226 push @{$config{openssl_feature_defines}},
1227      map { (my $x = $_) =~ tr|[\-a-z]|[_A-Z]|; "OPENSSL_RAND_SEED_$x" }
1228         @seed_sources;
1229
1230 # Backward compatibility?
1231 if ($target =~ m/^CygWin32(-.*)$/) {
1232     $target = "Cygwin".$1;
1233 }
1234
1235 # Support for legacy targets having a name starting with 'debug-'
1236 my ($d, $t) = $target =~ m/^(debug-)?(.*)$/;
1237 if ($d) {
1238     $config{build_type} = "debug";
1239
1240     # If we do not find debug-foo in the table, the target is set to foo.
1241     if (!$table{$target}) {
1242         $target = $t;
1243     }
1244 }
1245
1246 if ($target) {
1247     # It's possible that we have different config targets for specific
1248     # toolchains, so we try to detect them, and go for the plain config
1249     # target if not.
1250     my $found;
1251     foreach ( ( "$target-$user{CC}", "$target", undef ) ) {
1252         $found=$_ if $table{$_} && !$table{$_}->{template};
1253         last if $found;
1254     }
1255     $target = $found;
1256 } else {
1257     # If we don't have a config target now, we try the C compiler as we
1258     # fallback
1259     my $cc = $user{CC} // 'cc';
1260     $target = $cc if $table{$cc} && !$table{$cc}->{template};
1261 }
1262
1263 &usage unless $target;
1264
1265 exit 0 if $dryrun;              # From older 'config'
1266
1267 $config{target} = $target;
1268 my %target = resolve_config($target);
1269
1270 foreach (keys %target_attr_translate) {
1271     $target{$target_attr_translate{$_}} = $target{$_}
1272         if $target{$_};
1273     delete $target{$_};
1274 }
1275
1276 %target = ( %{$table{DEFAULTS}}, %target );
1277
1278 my %conf_files = map { $_ => 1 } (@{$target{_conf_fname_int}});
1279 $config{conf_files} = [ sort keys %conf_files ];
1280
1281 # Using sub disable within these loops may prove fragile, so we run
1282 # a cascade afterwards
1283 foreach my $feature (@{$target{disable}}) {
1284     if (exists $deprecated_disablables{$feature}) {
1285         warn "***** config $target disables deprecated feature $feature\n";
1286     } elsif (!grep { $feature eq $_ } @disablables) {
1287         die "***** config $target disables unknown feature $feature\n";
1288     }
1289     $disabled{$feature} = 'config';
1290 }
1291 foreach my $feature (@{$target{enable}}) {
1292     if ("default" eq ($disabled{$feature} // "")) {
1293         if (exists $deprecated_disablables{$feature}) {
1294             warn "***** config $target enables deprecated feature $feature\n";
1295         } elsif (!grep { $feature eq $_ } @disablables) {
1296             die "***** config $target enables unknown feature $feature\n";
1297         }
1298         delete $disabled{$feature};
1299     }
1300 }
1301
1302 # If uplink_arch isn't defined, disable uplink
1303 $disabled{uplink} = 'no uplink_arch' unless (defined $target{uplink_arch});
1304 # If asm_arch isn't defined, disable asm
1305 $disabled{asm} = 'no asm_arch' unless (defined $target{asm_arch});
1306
1307 disable();                      # Run a cascade now
1308
1309 $target{CXXFLAGS}//=$target{CFLAGS} if $target{CXX};
1310 $target{cxxflags}//=$target{cflags} if $target{CXX};
1311 $target{exe_extension}=".exe" if ($config{target} eq "DJGPP");
1312 $target{exe_extension}=".pm"  if ($config{target} =~ /vos/);
1313
1314 # Fill %config with values from %user, and in case those are undefined or
1315 # empty, use values from %target (acting as a default).
1316 foreach (keys %user) {
1317     my $ref_type = ref $user{$_};
1318
1319     # Temporary function.  Takes an intended ref type (empty string or "ARRAY")
1320     # and a value that's to be coerced into that type.
1321     my $mkvalue = sub {
1322         my $type = shift;
1323         my $value = shift;
1324         my $undef_p = shift;
1325
1326         die "Too many arguments for \$mkvalue" if @_;
1327
1328         while (ref $value eq 'CODE') {
1329             $value = $value->();
1330         }
1331
1332         if ($type eq 'ARRAY') {
1333             return undef unless defined $value;
1334             return undef if ref $value ne 'ARRAY' && !$value;
1335             return undef if ref $value eq 'ARRAY' && !@$value;
1336             return [ $value ] unless ref $value eq 'ARRAY';
1337         }
1338         return undef unless $value;
1339         return $value;
1340     };
1341
1342     $config{$_} =
1343         $mkvalue->($ref_type, $user{$_})
1344         || $mkvalue->($ref_type, $target{$_});
1345     delete $config{$_} unless defined $config{$_};
1346 }
1347
1348 # Finish up %config by appending things the user gave us on the command line
1349 # apart from "make variables"
1350 foreach (keys %useradd) {
1351     # The must all be lists, so we assert that here
1352     die "internal error: \$useradd{$_} isn't an ARRAY\n"
1353         unless ref $useradd{$_} eq 'ARRAY';
1354
1355     if (defined $config{$_}) {
1356         push @{$config{$_}}, @{$useradd{$_}};
1357     } else {
1358         $config{$_} = [ @{$useradd{$_}} ];
1359     }
1360 }
1361 # At this point, we can forget everything about %user and %useradd,
1362 # because it's now all been merged into the corresponding $config entry
1363
1364 # Allow overriding the build file name
1365 $config{build_file} = env('BUILDFILE') || $target{build_file} || "Makefile";
1366
1367 # Make sure build_scheme is consistent.
1368 $target{build_scheme} = [ $target{build_scheme} ]
1369     if ref($target{build_scheme}) ne "ARRAY";
1370
1371 my ($builder, $builder_platform, @builder_opts) =
1372     @{$target{build_scheme}};
1373
1374 foreach my $checker (($builder_platform."-".$target{build_file}."-checker.pm",
1375                       $builder_platform."-checker.pm")) {
1376     my $checker_path = catfile($srcdir, "Configurations", $checker);
1377     if (-f $checker_path) {
1378         my $fn = $ENV{CONFIGURE_CHECKER_WARN}
1379             ? sub { warn $@; } : sub { die $@; };
1380         if (! do $checker_path) {
1381             if ($@) {
1382                 $fn->($@);
1383             } elsif ($!) {
1384                 $fn->($!);
1385             } else {
1386                 $fn->("The detected tools didn't match the platform\n");
1387             }
1388         }
1389         last;
1390     }
1391 }
1392
1393 push @{$config{defines}}, "NDEBUG"    if $config{build_type} eq "release";
1394
1395 if ($target =~ /^mingw/ && `$config{CC} --target-help 2>&1` =~ m/-mno-cygwin/m)
1396         {
1397         push @{$config{cflags}}, "-mno-cygwin";
1398         push @{$config{cxxflags}}, "-mno-cygwin" if $config{CXX};
1399         push @{$config{shared_ldflag}}, "-mno-cygwin";
1400         }
1401
1402 if ($target =~ /linux.*-mips/ && !$disabled{asm}
1403         && !grep { $_ !~ /-m(ips|arch=)/ } (@{$config{CFLAGS}})) {
1404         # minimally required architecture flags for assembly modules
1405         my $value;
1406         $value = '-mips2' if ($target =~ /mips32/);
1407         $value = '-mips3' if ($target =~ /mips64/);
1408         unshift @{$config{cflags}}, $value;
1409         unshift @{$config{cxxflags}}, $value if $config{CXX};
1410 }
1411
1412 # If threads aren't disabled, check how possible they are
1413 unless ($disabled{threads}) {
1414     if ($auto_threads) {
1415         # Enabled by default, disable it forcibly if unavailable
1416         if ($target{thread_scheme} eq "(unknown)") {
1417             disable("unavailable", 'threads');
1418         }
1419     } else {
1420         # The user chose to enable threads explicitly, let's see
1421         # if there's a chance that's possible
1422         if ($target{thread_scheme} eq "(unknown)") {
1423             # If the user asked for "threads" and we don't have internal
1424             # knowledge how to do it, [s]he is expected to provide any
1425             # system-dependent compiler options that are necessary.  We
1426             # can't truly check that the given options are correct, but
1427             # we expect the user to know what [s]He is doing.
1428             if (!@{$config{CFLAGS}} && !@{$config{CPPDEFINES}}) {
1429                 die "You asked for multi-threading support, but didn't\n"
1430                     ,"provide any system-specific compiler options\n";
1431             }
1432         }
1433     }
1434 }
1435
1436 # Find out if clang's sanitizers have been enabled with -fsanitize
1437 # flags and ensure that the corresponding %disabled elements area
1438 # removed to reflect that the sanitizers are indeed enabled.
1439 my %detected_sanitizers = ();
1440 foreach (grep /^-fsanitize=/, @{$config{CFLAGS} || []}) {
1441     (my $checks = $_) =~ s/^-fsanitize=//;
1442     foreach (split /,/, $checks) {
1443         my $d = { address       => 'asan',
1444                   undefined     => 'ubsan',
1445                   memory        => 'msan' } -> {$_};
1446         next unless defined $d;
1447
1448         $detected_sanitizers{$d} = 1;
1449         if (defined $disabled{$d}) {
1450             die "***** Conflict between disabling $d and enabling $_ sanitizer"
1451                 if $disabled{$d} ne "default";
1452             delete $disabled{$d};
1453         }
1454     }
1455 }
1456
1457 # If threads still aren't disabled, add a C macro to ensure the source
1458 # code knows about it.  Any other flag is taken care of by the configs.
1459 unless($disabled{threads}) {
1460     push @{$config{openssl_feature_defines}}, "OPENSSL_THREADS";
1461 }
1462
1463 my $no_shared_warn=0;
1464 if (($target{shared_target} // '') eq "")
1465         {
1466         $no_shared_warn = 1
1467             if (!$disabled{shared} || !$disabled{"dynamic-engine"});
1468         disable('no-shared-target', 'pic');
1469         }
1470
1471 if ($disabled{"dynamic-engine"}) {
1472         $config{dynamic_engines} = 0;
1473 } else {
1474         $config{dynamic_engines} = 1;
1475 }
1476
1477 unless ($disabled{asan} || defined $detected_sanitizers{asan}) {
1478     push @{$config{cflags}}, "-fsanitize=address";
1479 }
1480
1481 unless ($disabled{ubsan} || defined $detected_sanitizers{ubsan}) {
1482     # -DPEDANTIC or -fnosanitize=alignment may also be required on some
1483     # platforms.
1484     push @{$config{cflags}}, "-fsanitize=undefined", "-fno-sanitize-recover=all";
1485 }
1486
1487 unless ($disabled{msan} || defined $detected_sanitizers{msan}) {
1488   push @{$config{cflags}}, "-fsanitize=memory";
1489 }
1490
1491 unless ($disabled{"fuzz-libfuzzer"} && $disabled{"fuzz-afl"}
1492         && $disabled{asan} && $disabled{ubsan} && $disabled{msan}) {
1493     push @{$config{cflags}}, "-fno-omit-frame-pointer", "-g";
1494     push @{$config{cxxflags}}, "-fno-omit-frame-pointer", "-g" if $config{CXX};
1495 }
1496 #
1497 # Platform fix-ups
1498 #
1499
1500 # This saves the build files from having to check
1501 if ($disabled{pic})
1502         {
1503         foreach (qw(shared_cflag shared_cxxflag shared_cppflag
1504                     shared_defines shared_includes shared_ldflag
1505                     module_cflags module_cxxflags module_cppflags
1506                     module_defines module_includes module_lflags))
1507                 {
1508                 delete $config{$_};
1509                 $target{$_} = "";
1510                 }
1511         }
1512 else
1513         {
1514         push @{$config{lib_defines}}, "OPENSSL_PIC";
1515         }
1516
1517 if ($target{sys_id} ne "")
1518         {
1519         push @{$config{openssl_sys_defines}}, "OPENSSL_SYS_$target{sys_id}";
1520         }
1521
1522 my %predefined_C = compiler_predefined($config{CROSS_COMPILE}.$config{CC});
1523 my %predefined_CXX = $config{CXX}
1524     ? compiler_predefined($config{CROSS_COMPILE}.$config{CXX})
1525     : ();
1526
1527 unless ($disabled{asm}) {
1528     # big endian systems can use ELFv2 ABI
1529     if ($target eq "linux-ppc64") {
1530         $target{perlasm_scheme} = "linux64v2" if ($predefined_C{_CALL_ELF} == 2);
1531     }
1532 }
1533
1534 # Check for makedepend capabilities.
1535 if (!$disabled{makedepend}) {
1536     if ($config{target} =~ /^(VC|vms)-/) {
1537         # For VC- and vms- targets, there's nothing more to do here.  The
1538         # functionality is hard coded in the corresponding build files for
1539         # cl (Windows) and CC/DECC (VMS).
1540     } elsif (($predefined_C{__GNUC__} // -1) >= 3
1541              && !($predefined_C{__APPLE_CC__} && !$predefined_C{__clang__})) {
1542         # We know that GNU C version 3 and up as well as all clang
1543         # versions support dependency generation, but Xcode did not
1544         # handle $cc -M before clang support (but claims __GNUC__ = 3)
1545         $config{makedepprog} = "\$(CROSS_COMPILE)$config{CC}";
1546     } else {
1547         # In all other cases, we look for 'makedepend', and disable the
1548         # capability if not found.
1549         $config{makedepprog} = which('makedepend');
1550         disable('unavailable', 'makedepend') unless $config{makedepprog};
1551     }
1552 }
1553
1554 if (!$disabled{asm} && !$predefined_C{__MACH__} && $^O ne 'VMS') {
1555     # probe for -Wa,--noexecstack option...
1556     if ($predefined_C{__clang__}) {
1557         # clang has builtin assembler, which doesn't recognize --help,
1558         # but it apparently recognizes the option in question on all
1559         # supported platforms even when it's meaningless. In other words
1560         # probe would fail, but probed option always accepted...
1561         push @{$config{cflags}}, "-Wa,--noexecstack", "-Qunused-arguments";
1562     } else {
1563         my $cc = $config{CROSS_COMPILE}.$config{CC};
1564         open(PIPE, "$cc -Wa,--help -c -o null.$$.o -x assembler /dev/null 2>&1 |");
1565         while(<PIPE>) {
1566             if (m/--noexecstack/) {
1567                 push @{$config{cflags}}, "-Wa,--noexecstack";
1568                 last;
1569             }
1570         }
1571         close(PIPE);
1572         unlink("null.$$.o");
1573     }
1574 }
1575
1576 # Deal with bn_ops ###################################################
1577
1578 $config{bn_ll}                  =0;
1579 my $def_int="unsigned int";
1580 $config{rc4_int}                =$def_int;
1581 ($config{b64l},$config{b64},$config{b32})=(0,0,1);
1582
1583 my $count = 0;
1584 foreach (sort split(/\s+/,$target{bn_ops})) {
1585     $count++ if /SIXTY_FOUR_BIT|SIXTY_FOUR_BIT_LONG|THIRTY_TWO_BIT/;
1586     $config{bn_ll}=1                            if $_ eq 'BN_LLONG';
1587     $config{rc4_int}="unsigned char"            if $_ eq 'RC4_CHAR';
1588     ($config{b64l},$config{b64},$config{b32})
1589         =(0,1,0)                                if $_ eq 'SIXTY_FOUR_BIT';
1590     ($config{b64l},$config{b64},$config{b32})
1591         =(1,0,0)                                if $_ eq 'SIXTY_FOUR_BIT_LONG';
1592     ($config{b64l},$config{b64},$config{b32})
1593         =(0,0,1)                                if $_ eq 'THIRTY_TWO_BIT';
1594 }
1595 die "Exactly one of SIXTY_FOUR_BIT|SIXTY_FOUR_BIT_LONG|THIRTY_TWO_BIT can be set in bn_ops\n"
1596     if $count > 1;
1597
1598 $config{api} = $config{major} * 10000 + $config{minor} * 100
1599     unless $config{api};
1600 foreach (keys %$apitable) {
1601     $disabled{"deprecated-$_"} = "deprecation"
1602         if $disabled{deprecated} && $config{api} >= $apitable->{$_};
1603 }
1604
1605 disable();                      # Run a cascade now
1606
1607 # Hack cflags for better warnings (dev option) #######################
1608
1609 # "Stringify" the C and C++ flags string.  This permits it to be made part of
1610 # a string and works as well on command lines.
1611 $config{cflags} = [ map { (my $x = $_) =~ s/([\\\"])/\\$1/g; $x }
1612                         @{$config{cflags}} ];
1613 $config{cxxflags} = [ map { (my $x = $_) =~ s/([\\\"])/\\$1/g; $x }
1614                           @{$config{cxxflags}} ] if $config{CXX};
1615
1616 $config{openssl_api_defines} = [
1617     "OPENSSL_CONFIGURED_API=".$config{api},
1618 ];
1619
1620 my @strict_warnings_collection=();
1621 if ($strict_warnings)
1622         {
1623         my $wopt;
1624         my $gccver = $predefined_C{__GNUC__} // -1;
1625
1626         if ($gccver >= 4)
1627                 {
1628                 push @strict_warnings_collection, @gcc_devteam_warn;
1629                 push @strict_warnings_collection, @clang_devteam_warn
1630                     if (defined($predefined_C{__clang__}));
1631                 }
1632         elsif ($config{target} =~ /^VC-/)
1633                 {
1634                 push @strict_warnings_collection, @cl_devteam_warn;
1635                 }
1636         else
1637                 {
1638                 warn "WARNING --strict-warnings requires gcc[>=4] or gcc-alike, or MSVC"
1639                 }
1640         }
1641
1642 if (grep { $_ =~ /(?:^|\s)-static(?:\s|$)/ } @{$config{LDFLAGS}}) {
1643     disable('static', 'pic', 'threads');
1644 }
1645
1646 $config{CFLAGS} = [ map { $_ eq '--ossl-strict-warnings'
1647                               ? @strict_warnings_collection
1648                               : ( $_ ) }
1649                     @{$config{CFLAGS}} ];
1650
1651 unless ($disabled{afalgeng}) {
1652     $config{afalgeng}="";
1653     if (grep { $_ eq 'afalgeng' } @{$target{enable}}) {
1654         my $minver = 4*10000 + 1*100 + 0;
1655         if ($config{CROSS_COMPILE} eq "") {
1656             my $verstr = `uname -r`;
1657             my ($ma, $mi1, $mi2) = split("\\.", $verstr);
1658             ($mi2) = $mi2 =~ /(\d+)/;
1659             my $ver = $ma*10000 + $mi1*100 + $mi2;
1660             if ($ver < $minver) {
1661                 disable('too-old-kernel', 'afalgeng');
1662             } else {
1663                 push @{$config{engdirs}}, "afalg";
1664             }
1665         } else {
1666             disable('cross-compiling', 'afalgeng');
1667         }
1668     } else {
1669         disable('not-linux', 'afalgeng');
1670     }
1671 }
1672
1673 unless ($disabled{devcryptoeng}) {
1674     if ($target =~ m/^BSD/) {
1675         my $maxver = 5*100 + 7;
1676         my $sysstr = `uname -s`;
1677         my $verstr = `uname -r`;
1678         $sysstr =~ s|\R$||;
1679         $verstr =~ s|\R$||;
1680         my ($ma, $mi, @rest) = split m|\.|, $verstr;
1681         my $ver = $ma*100 + $mi;
1682         if ($sysstr eq 'OpenBSD' && $ver >= $maxver) {
1683             disable('too-new-kernel', 'devcryptoeng');
1684         }
1685     }
1686 }
1687
1688 unless ($disabled{ktls}) {
1689     $config{ktls}="";
1690     if ($target =~ m/^linux/) {
1691         my $usr = "/usr/$config{cross_compile_prefix}";
1692         chop($usr);
1693         if ($config{cross_compile_prefix} eq "") {
1694             $usr = "/usr";
1695         }
1696         my $minver = (4 << 16) + (13 << 8) + 0;
1697         my @verstr = split(" ",`cat $usr/include/linux/version.h | grep LINUX_VERSION_CODE`);
1698
1699         if ($verstr[2] < $minver) {
1700             disable('too-old-kernel', 'ktls');
1701         }
1702     } elsif ($target =~ m/^BSD/) {
1703         my $cc = $config{CROSS_COMPILE}.$config{CC};
1704         system("printf '#include <sys/types.h>\n#include <sys/ktls.h>' | $cc -E - >/dev/null 2>&1");
1705         if ($? != 0) {
1706             disable('too-old-freebsd', 'ktls');
1707         }
1708     } else {
1709         disable('not-linux-or-freebsd', 'ktls');
1710     }
1711 }
1712
1713 push @{$config{openssl_other_defines}}, "OPENSSL_NO_KTLS" if ($disabled{ktls});
1714
1715 # Get the extra flags used when building shared libraries and modules.  We
1716 # do this late because some of them depend on %disabled.
1717
1718 # Make the flags to build DSOs the same as for shared libraries unless they
1719 # are already defined
1720 $target{module_cflags} = $target{shared_cflag} unless defined $target{module_cflags};
1721 $target{module_cxxflags} = $target{shared_cxxflag} unless defined $target{module_cxxflags};
1722 $target{module_ldflags} = $target{shared_ldflag} unless defined $target{module_ldflags};
1723 {
1724     my $shared_info_pl =
1725         catfile(dirname($0), "Configurations", "shared-info.pl");
1726     my %shared_info = read_eval_file($shared_info_pl);
1727     push @{$target{_conf_fname_int}}, $shared_info_pl;
1728     my $si = $target{shared_target};
1729     while (ref $si ne "HASH") {
1730         last if ! defined $si;
1731         if (ref $si eq "CODE") {
1732             $si = $si->();
1733         } else {
1734             $si = $shared_info{$si};
1735         }
1736     }
1737
1738     # Some of the 'shared_target' values don't have any entries in
1739     # %shared_info.  That's perfectly fine, AS LONG AS the build file
1740     # template knows how to handle this.  That is currently the case for
1741     # Windows and VMS.
1742     if (defined $si) {
1743         # Just as above, copy certain shared_* attributes to the corresponding
1744         # module_ attribute unless the latter is already defined
1745         $si->{module_cflags} = $si->{shared_cflag} unless defined $si->{module_cflags};
1746         $si->{module_cxxflags} = $si->{shared_cxxflag} unless defined $si->{module_cxxflags};
1747         $si->{module_ldflags} = $si->{shared_ldflag} unless defined $si->{module_ldflags};
1748         foreach (sort keys %$si) {
1749             $target{$_} = defined $target{$_}
1750                 ? add($si->{$_})->($target{$_})
1751                 : $si->{$_};
1752         }
1753     }
1754 }
1755
1756 # ALL MODIFICATIONS TO %disabled, %config and %target MUST BE DONE FROM HERE ON
1757
1758 ######################################################################
1759 # Build up information for skipping certain directories depending on disabled
1760 # features, as well as setting up macros for disabled features.
1761
1762 # This is a tentative database of directories to skip.  Some entries may not
1763 # correspond to anything real, but that's ok, they will simply be ignored.
1764 # The actual processing of these entries is done in the build.info lookup
1765 # loop further down.
1766 #
1767 # The key is a Unix formatted path in the source tree, the value is an index
1768 # into %disabled_info, so any existing path gets added to a corresponding
1769 # 'skipped' entry in there with the list of skipped directories.
1770 my %skipdir = ();
1771 my %disabled_info = ();         # For configdata.pm
1772 foreach my $what (sort keys %disabled) {
1773     # There are deprecated disablables that translate to themselves.
1774     # They cause disabling cascades, but should otherwise not regiter.
1775     next if $deprecated_disablables{$what};
1776     # The generated $disabled{"deprecated-x.y"} entries are special
1777     # and treated properly elsewhere
1778     next if $what =~ m|^deprecated-|;
1779
1780     $config{options} .= " no-$what";
1781
1782     if (!grep { $what eq $_ } ( 'buildtest-c++', 'fips', 'threads', 'shared',
1783                                 'module', 'pic', 'dynamic-engine', 'makedepend',
1784                                 'zlib-dynamic', 'zlib', 'sse2', 'legacy' )) {
1785         (my $WHAT = uc $what) =~ s|-|_|g;
1786         my $skipdir = $what;
1787
1788         # fix-up crypto/directory name(s)
1789         $skipdir = "ripemd" if $what eq "rmd160";
1790         $skipdir = "whrlpool" if $what eq "whirlpool";
1791
1792         my $macro = $disabled_info{$what}->{macro} = "OPENSSL_NO_$WHAT";
1793         push @{$config{openssl_feature_defines}}, $macro;
1794
1795         $skipdir{engines} = $what if $what eq 'engine';
1796         $skipdir{"crypto/$skipdir"} = $what
1797             unless $what eq 'async' || $what eq 'err' || $what eq 'dso';
1798     }
1799 }
1800
1801 if ($disabled{"dynamic-engine"}) {
1802     push @{$config{openssl_feature_defines}}, "OPENSSL_NO_DYNAMIC_ENGINE";
1803 } else {
1804     push @{$config{openssl_feature_defines}}, "OPENSSL_NO_STATIC_ENGINE";
1805 }
1806
1807 # If we use the unified build, collect information from build.info files
1808 my %unified_info = ();
1809
1810 my $buildinfo_debug = defined($ENV{CONFIGURE_DEBUG_BUILDINFO});
1811 if ($builder eq "unified") {
1812     use Text::Template 1.46;
1813
1814     sub cleandir {
1815         my $base = shift;
1816         my $dir = shift;
1817         my $relativeto = shift || ".";
1818
1819         $dir = catdir($base,$dir) unless isabsolute($dir);
1820
1821         # Make sure the directories we're building in exists
1822         mkpath($dir);
1823
1824         my $res = abs2rel(absolutedir($dir), rel2abs($relativeto));
1825         #print STDERR "DEBUG[cleandir]: $dir , $base => $res\n";
1826         return $res;
1827     }
1828
1829     sub cleanfile {
1830         my $base = shift;
1831         my $file = shift;
1832         my $relativeto = shift || ".";
1833
1834         $file = catfile($base,$file) unless isabsolute($file);
1835
1836         my $d = dirname($file);
1837         my $f = basename($file);
1838
1839         # Make sure the directories we're building in exists
1840         mkpath($d);
1841
1842         my $res = abs2rel(catfile(absolutedir($d), $f), rel2abs($relativeto));
1843         #print STDERR "DEBUG[cleanfile]: $d , $f => $res\n";
1844         return $res;
1845     }
1846
1847     # Store the name of the template file we will build the build file from
1848     # in %config.  This may be useful for the build file itself.
1849     my @build_file_template_names =
1850         ( $builder_platform."-".$target{build_file}.".tmpl",
1851           $target{build_file}.".tmpl" );
1852     my @build_file_templates = ();
1853
1854     # First, look in the user provided directory, if given
1855     if (defined env($local_config_envname)) {
1856         @build_file_templates =
1857             map {
1858                 if ($^O eq 'VMS') {
1859                     # VMS environment variables are logical names,
1860                     # which can be used as is
1861                     $local_config_envname . ':' . $_;
1862                 } else {
1863                     catfile(env($local_config_envname), $_);
1864                 }
1865             }
1866             @build_file_template_names;
1867     }
1868     # Then, look in our standard directory
1869     push @build_file_templates,
1870         ( map { cleanfile($srcdir, catfile("Configurations", $_), $blddir) }
1871           @build_file_template_names );
1872
1873     my $build_file_template;
1874     for $_ (@build_file_templates) {
1875         $build_file_template = $_;
1876         last if -f $build_file_template;
1877
1878         $build_file_template = undef;
1879     }
1880     if (!defined $build_file_template) {
1881         die "*** Couldn't find any of:\n", join("\n", @build_file_templates), "\n";
1882     }
1883     $config{build_file_templates}
1884       = [ cleanfile($srcdir, catfile("Configurations", "common0.tmpl"),
1885                     $blddir),
1886           $build_file_template,
1887           cleanfile($srcdir, catfile("Configurations", "common.tmpl"),
1888                     $blddir) ];
1889
1890     my @build_dirs = ( [ ] );   # current directory
1891
1892     $config{build_infos} = [ ];
1893
1894     my %ordinals = ();
1895     while (@build_dirs) {
1896         my @curd = @{shift @build_dirs};
1897         my $sourced = catdir($srcdir, @curd);
1898         my $buildd = catdir($blddir, @curd);
1899
1900         my $unixdir = join('/', @curd);
1901         if (exists $skipdir{$unixdir}) {
1902             my $what = $skipdir{$unixdir};
1903             push @{$disabled_info{$what}->{skipped}}, catdir(@curd);
1904             next;
1905         }
1906
1907         mkpath($buildd);
1908
1909         my $f = 'build.info';
1910         # The basic things we're trying to build
1911         my @programs = ();
1912         my @libraries = ();
1913         my @modules = ();
1914         my @scripts = ();
1915
1916         my %sources = ();
1917         my %shared_sources = ();
1918         my %includes = ();
1919         my %defines = ();
1920         my %depends = ();
1921         my %generate = ();
1922         my %htmldocs = ();
1923         my %mandocs = ();
1924
1925         # Support for $variablename in build.info files.
1926         # Embedded perl code is the ultimate master, still.  If its output
1927         # contains a dollar sign, it had better be escaped, or it will be
1928         # taken for a variable name prefix.
1929         my %variables = ();
1930         # Variable name syntax
1931         my $variable_name_re = qr/(?P<VARIABLE>[[:alpha:]][[:alnum:]_]*)/;
1932         # Value modifier syntaxes
1933         my $variable_subst_re = qr/\/(?P<RE>(?:\\\/|.)*?)\/(?P<SUBST>.*?)/;
1934         # Variable reference
1935         my $variable_simple_re = qr/(?<!\\)\$${variable_name_re}/;
1936         my $variable_w_mod_re =
1937             qr/(?<!\\)\$\{${variable_name_re}(?P<MOD>(?:\\\/|.)*?)\}/;
1938         # Tie it all together
1939         my $variable_re = qr/${variable_simple_re}|${variable_w_mod_re}/;
1940
1941         my $expand_variables = sub {
1942             my $value = '';
1943             my $value_rest = shift;
1944
1945             if ($ENV{CONFIGURE_DEBUG_VARIABLE_EXPAND}) {
1946                 print STDERR
1947                     "DEBUG[\$expand_variables] Parsed '$value_rest' ...\n"
1948             }
1949
1950             while ($value_rest =~ /${variable_re}/) {
1951                 # We must save important regexp values, because the next
1952                 # regexp clears them
1953                 my $mod = $+{MOD};
1954                 my $variable_value = $variables{$+{VARIABLE}};
1955
1956                 $value_rest = $';
1957                 $value .= $`;
1958
1959                 # Process modifier expressions, if present
1960                 if (defined $mod) {
1961                     if ($mod =~ /^${variable_subst_re}$/) {
1962                         my $re = $+{RE};
1963                         my $subst = $+{SUBST};
1964
1965                         $variable_value =~ s/\Q$re\E/$subst/g;
1966
1967                         if ($ENV{CONFIGURE_DEBUG_VARIABLE_EXPAND}) {
1968                             print STDERR
1969                                 "DEBUG[\$expand_variables] ... and substituted ",
1970                                 "'$re' with '$subst'\n";
1971                         }
1972                     }
1973                 }
1974
1975                 $value .= $variable_value;
1976             }
1977             if ($ENV{CONFIGURE_DEBUG_VARIABLE_EXPAND}) {
1978                 print STDERR
1979                     "DEBUG[\$expand_variables] ... into: '$value$value_rest'\n";
1980             }
1981             return $value . $value_rest;
1982         };
1983
1984         # Support for attributes in build.info files
1985         my %attributes = ();
1986         my $handle_attributes = sub {
1987             my $attr_str = shift;
1988             my $ref = shift;
1989             my @goals = @_;
1990
1991             return unless defined $attr_str;
1992
1993             my @a = tokenize($attr_str, qr|\s*,\s*|);
1994             foreach my $a (@a) {
1995                 my $ac = 1;
1996                 my $ak = $a;
1997                 my $av = 1;
1998                 if ($a =~ m|^(!)?(.*?)\s* = \s*(.*?)$|x) {
1999                     $ac = ! $1;
2000                     $ak = $2;
2001                     $av = $3;
2002                 }
2003                 foreach my $g (@goals) {
2004                     if ($ac) {
2005                         $$ref->{$g}->{$ak} = $av;
2006                     } else {
2007                         delete $$ref->{$g}->{$ak};
2008                     }
2009                 }
2010             }
2011         };
2012
2013         # Support for pushing values on multiple indexes of a given hash
2014         # array.
2015         my $push_to = sub {
2016             my $valueref = shift;
2017             my $index_str = shift; # May be undef or empty
2018             my $attrref = shift;   # May be undef
2019             my $attr_str = shift;
2020             my @values = @_;
2021
2022             if (defined $index_str) {
2023                 my @indexes = ( '' );
2024                 if ($index_str !~ m|^\s*$|) {
2025                     @indexes = tokenize($index_str);
2026                 }
2027                 foreach (@indexes) {
2028                     push @{$valueref->{$_}}, @values;
2029                     if (defined $attrref) {
2030                         $handle_attributes->($attr_str, \$$attrref->{$_},
2031                                              @values);
2032                     }
2033                 }
2034             } else {
2035                 push @$valueref, @values;
2036                 $handle_attributes->($attr_str, $attrref, @values)
2037                     if defined $attrref;
2038             }
2039         };
2040
2041         # We want to detect configdata.pm in the source tree, so we
2042         # don't use it if the build tree is different.
2043         my $src_configdata = cleanfile($srcdir, "configdata.pm", $blddir);
2044
2045
2046         if ($buildinfo_debug) {
2047             print STDERR "DEBUG: Reading ",catfile($sourced, $f),"\n";
2048         }
2049         push @{$config{build_infos}}, catfile(abs2rel($sourced, $blddir), $f);
2050         my $template =
2051             Text::Template->new(TYPE => 'FILE',
2052                                 SOURCE => catfile($sourced, $f),
2053                                 PREPEND => qq{use lib "$FindBin::Bin/util/perl";});
2054         die "Something went wrong with $sourced/$f: $!\n" unless $template;
2055         my @text =
2056             split /^/m,
2057             $template->fill_in(HASH => { config => \%config,
2058                                          target => \%target,
2059                                          disabled => \%disabled,
2060                                          withargs => \%withargs,
2061                                          builddir => abs2rel($buildd, $blddir),
2062                                          sourcedir => abs2rel($sourced, $blddir),
2063                                          buildtop => abs2rel($blddir, $blddir),
2064                                          sourcetop => abs2rel($srcdir, $blddir) },
2065                                DELIMITERS => [ "{-", "-}" ]);
2066
2067         # The top item of this stack has the following values
2068         # -2 positive already run and we found ELSE (following ELSIF should fail)
2069         # -1 positive already run (skip until ENDIF)
2070         # 0 negatives so far (if we're at a condition, check it)
2071         # 1 last was positive (don't skip lines until next ELSE, ELSIF or ENDIF)
2072         # 2 positive ELSE (following ELSIF should fail)
2073         my @skip = ();
2074
2075         # A few useful generic regexps
2076         my $index_re = qr/\[\s*(?P<INDEX>(?:\\.|.)*?)\s*\]/;
2077         my $cond_re = qr/\[\s*(?P<COND>(?:\\.|.)*?)\s*\]/;
2078         my $attribs_re = qr/(?:\{\s*(?P<ATTRIBS>(?:\\.|.)*?)\s*\})?/;
2079         my $value_re = qr/\s*(?P<VALUE>.*?)\s*/;
2080         collect_information(
2081             collect_from_array([ @text ],
2082                                qr/\\$/ => sub { my $l1 = shift; my $l2 = shift;
2083                                                 $l1 =~ s/\\$//; $l1.$l2 }),
2084             # Info we're looking for
2085             qr/^\s* IF ${cond_re} \s*$/x
2086             => sub {
2087                 if (! @skip || $skip[$#skip] > 0) {
2088                     push @skip, !! $expand_variables->($+{COND});
2089                 } else {
2090                     push @skip, -1;
2091                 }
2092             },
2093             qr/^\s* ELSIF ${cond_re} \s*$/x
2094             => sub { die "ELSIF out of scope" if ! @skip;
2095                      die "ELSIF following ELSE" if abs($skip[$#skip]) == 2;
2096                      $skip[$#skip] = -1 if $skip[$#skip] != 0;
2097                      $skip[$#skip] = !! $expand_variables->($+{COND})
2098                          if $skip[$#skip] == 0; },
2099             qr/^\s* ELSE \s*$/x
2100             => sub { die "ELSE out of scope" if ! @skip;
2101                      $skip[$#skip] = -2 if $skip[$#skip] != 0;
2102                      $skip[$#skip] = 2 if $skip[$#skip] == 0; },
2103             qr/^\s* ENDIF \s*$/x
2104             => sub { die "ENDIF out of scope" if ! @skip;
2105                      pop @skip; },
2106             qr/^\s* ${variable_re} \s* = ${value_re} $/x
2107             => sub {
2108                 if (!@skip || $skip[$#skip] > 0) {
2109                     $variables{$+{VARIABLE}} = $expand_variables->($+{VALUE});
2110                 }
2111             },
2112             qr/^\s* SUBDIRS \s* = ${value_re} $/x
2113             => sub {
2114                 if (!@skip || $skip[$#skip] > 0) {
2115                     foreach (tokenize($expand_variables->($+{VALUE}))) {
2116                         push @build_dirs, [ @curd, splitdir($_, 1) ];
2117                     }
2118                 }
2119             },
2120             qr/^\s* PROGRAMS ${attribs_re} \s* =  ${value_re} $/x
2121             => sub { $push_to->(\@programs, undef,
2122                                 \$attributes{programs}, $+{ATTRIBS},
2123                                 tokenize($expand_variables->($+{VALUE})))
2124                          if !@skip || $skip[$#skip] > 0; },
2125             qr/^\s* LIBS ${attribs_re} \s* =  ${value_re} $/x
2126             => sub { $push_to->(\@libraries, undef,
2127                                 \$attributes{libraries}, $+{ATTRIBS},
2128                                 tokenize($expand_variables->($+{VALUE})))
2129                          if !@skip || $skip[$#skip] > 0; },
2130             qr/^\s* MODULES ${attribs_re} \s* =  ${value_re} $/x
2131             => sub { $push_to->(\@modules, undef,
2132                                 \$attributes{modules}, $+{ATTRIBS},
2133                                 tokenize($expand_variables->($+{VALUE})))
2134                          if !@skip || $skip[$#skip] > 0; },
2135             qr/^\s* SCRIPTS ${attribs_re} \s* =  ${value_re} $/x
2136             => sub { $push_to->(\@scripts, undef,
2137                                 \$attributes{scripts}, $+{ATTRIBS},
2138                                 tokenize($expand_variables->($+{VALUE})))
2139                          if !@skip || $skip[$#skip] > 0; },
2140             qr/^\s* HTMLDOCS ${index_re} = ${value_re} $/x
2141             => sub { $push_to->(\%htmldocs, $expand_variables->($+{INDEX}),
2142                                 undef, undef,
2143                                 tokenize($expand_variables->($+{VALUE})))
2144                          if !@skip || $skip[$#skip] > 0; },
2145             qr/^\s* MANDOCS ${index_re} = ${value_re} $/x
2146             => sub { $push_to->(\%mandocs, $expand_variables->($+{INDEX}),
2147                                 undef, undef,
2148                                 tokenize($expand_variables->($+{VALUE})))
2149                          if !@skip || $skip[$#skip] > 0; },
2150             qr/^\s* SOURCE ${index_re} = ${value_re} $/x
2151             => sub { $push_to->(\%sources, $expand_variables->($+{INDEX}),
2152                                 undef, undef,
2153                                 tokenize($expand_variables->($+{VALUE})))
2154                          if !@skip || $skip[$#skip] > 0; },
2155             qr/^\s* SHARED_SOURCE ${index_re} = ${value_re} $/x
2156             => sub { $push_to->(\%shared_sources, $expand_variables->($+{INDEX}),
2157                                 undef, undef,
2158                                 tokenize($expand_variables->($+{VALUE})))
2159                          if !@skip || $skip[$#skip] > 0; },
2160             qr/^\s* INCLUDE ${index_re} = ${value_re} $/x
2161             => sub { $push_to->(\%includes, $expand_variables->($+{INDEX}),
2162                                 undef, undef,
2163                                 tokenize($expand_variables->($+{VALUE})))
2164                          if !@skip || $skip[$#skip] > 0; },
2165             qr/^\s* DEFINE ${index_re} = ${value_re} $/x
2166             => sub { $push_to->(\%defines, $expand_variables->($+{INDEX}),
2167                                 undef, undef,
2168                                 tokenize($expand_variables->($+{VALUE})))
2169                          if !@skip || $skip[$#skip] > 0; },
2170             qr/^\s* DEPEND ${index_re} ${attribs_re} = ${value_re} $/x
2171             => sub { $push_to->(\%depends, $expand_variables->($+{INDEX}),
2172                                 \$attributes{depends}, $+{ATTRIBS},
2173                                 tokenize($expand_variables->($+{VALUE})))
2174                          if !@skip || $skip[$#skip] > 0; },
2175             qr/^\s* GENERATE ${index_re} = ${value_re} $/x
2176             => sub { $push_to->(\%generate, $expand_variables->($+{INDEX}),
2177                                 undef, undef, $+{VALUE})
2178                          if !@skip || $skip[$#skip] > 0; },
2179             qr/^\s* (?:\#.*)? $/x => sub { },
2180             "OTHERWISE" => sub { die "Something wrong with this line:\n$_\nat $sourced/$f" },
2181             "BEFORE" => sub {
2182                 if ($buildinfo_debug) {
2183                     print STDERR "DEBUG: Parsing ",join(" ", @_),"\n";
2184                     print STDERR "DEBUG: ... before parsing, skip stack is ",join(" ", map { int($_) } @skip),"\n";
2185                 }
2186             },
2187             "AFTER" => sub {
2188                 if ($buildinfo_debug) {
2189                     print STDERR "DEBUG: .... after parsing, skip stack is ",join(" ", map { int($_) } @skip),"\n";
2190                 }
2191             },
2192             );
2193         die "runaway IF?" if (@skip);
2194
2195         if (grep { defined $attributes{modules}->{$_}->{engine} } keys %attributes
2196                 and !$config{dynamic_engines}) {
2197             die <<"EOF"
2198 ENGINES can only be used if configured with 'dynamic-engine'.
2199 This is usually a fault in a build.info file.
2200 EOF
2201         }
2202
2203         {
2204             my %infos = ( programs  => [ @programs  ],
2205                           libraries => [ @libraries ],
2206                           modules   => [ @modules   ],
2207                           scripts   => [ @scripts   ] );
2208             foreach my $k (keys %infos) {
2209                 foreach (@{$infos{$k}}) {
2210                     my $item = cleanfile($buildd, $_, $blddir);
2211                     $unified_info{$k}->{$item} = 1;
2212
2213                     # Fix up associated attributes
2214                     $unified_info{attributes}->{$k}->{$item} =
2215                         $attributes{$k}->{$_}
2216                         if defined $attributes{$k}->{$_};
2217                 }
2218             }
2219         }
2220
2221         # Check that we haven't defined any library as both shared and
2222         # explicitly static.  That is forbidden.
2223         my @doubles = ();
2224         foreach (grep /\.a$/, keys %{$unified_info{libraries}}) {
2225             (my $l = $_) =~ s/\.a$//;
2226             push @doubles, $l if defined $unified_info{libraries}->{$l};
2227         }
2228         die "these libraries are both explicitly static and shared:\n  ",
2229             join(" ", @doubles), "\n"
2230             if @doubles;
2231
2232         foreach (keys %sources) {
2233             my $dest = $_;
2234             my $ddest = cleanfile($buildd, $_, $blddir);
2235             foreach (@{$sources{$dest}}) {
2236                 my $s = cleanfile($sourced, $_, $blddir);
2237
2238                 # If it's generated or we simply don't find it in the source
2239                 # tree, we assume it's in the build tree.
2240                 if ($s eq $src_configdata || $generate{$_} || ! -f $s) {
2241                     $s = cleanfile($buildd, $_, $blddir);
2242                 }
2243                 # We recognise C++, C and asm files
2244                 if ($s =~ /\.(cc|cpp|c|s|S)$/) {
2245                     my $o = $_;
2246                     $o =~ s/\.[csS]$/.o/; # C and assembler
2247                     $o =~ s/\.(cc|cpp)$/_cc.o/; # C++
2248                     $o = cleanfile($buildd, $o, $blddir);
2249                     $unified_info{sources}->{$ddest}->{$o} = -1;
2250                     $unified_info{sources}->{$o}->{$s} = -1;
2251                 } elsif ($s =~ /\.rc$/) {
2252                     # We also recognise resource files
2253                     my $o = $_;
2254                     $o =~ s/\.rc$/.res/; # Resource configuration
2255                     my $o = cleanfile($buildd, $o, $blddir);
2256                     $unified_info{sources}->{$ddest}->{$o} = -1;
2257                     $unified_info{sources}->{$o}->{$s} = -1;
2258                 } else {
2259                     $unified_info{sources}->{$ddest}->{$s} = 1;
2260                 }
2261             }
2262         }
2263
2264         foreach (keys %shared_sources) {
2265             my $dest = $_;
2266             my $ddest = cleanfile($buildd, $_, $blddir);
2267             foreach (@{$shared_sources{$dest}}) {
2268                 my $s = cleanfile($sourced, $_, $blddir);
2269
2270                 # If it's generated or we simply don't find it in the source
2271                 # tree, we assume it's in the build tree.
2272                 if ($s eq $src_configdata || $generate{$_} || ! -f $s) {
2273                     $s = cleanfile($buildd, $_, $blddir);
2274                 }
2275
2276                 if ($s =~ /\.(cc|cpp|c|s|S)$/) {
2277                     # We recognise C++, C and asm files
2278                     my $o = $_;
2279                     $o =~ s/\.[csS]$/.o/; # C and assembler
2280                     $o =~ s/\.(cc|cpp)$/_cc.o/; # C++
2281                     $o = cleanfile($buildd, $o, $blddir);
2282                     $unified_info{shared_sources}->{$ddest}->{$o} = -1;
2283                     $unified_info{sources}->{$o}->{$s} = -1;
2284                 } elsif ($s =~ /\.rc$/) {
2285                     # We also recognise resource files
2286                     my $o = $_;
2287                     $o =~ s/\.rc$/.res/; # Resource configuration
2288                     my $o = cleanfile($buildd, $o, $blddir);
2289                     $unified_info{shared_sources}->{$ddest}->{$o} = -1;
2290                     $unified_info{sources}->{$o}->{$s} = -1;
2291                 } elsif ($s =~ /\.ld$/) {
2292                     # We also recognise linker scripts (or corresponding)
2293                     # We know they are generated files
2294                     my $ld = cleanfile($buildd, $_, $blddir);
2295                     $unified_info{shared_sources}->{$ddest}->{$ld} = 1;
2296                 } else {
2297                     die "unrecognised source file type for shared library: $s\n";
2298                 }
2299             }
2300         }
2301
2302         foreach (keys %generate) {
2303             my $dest = $_;
2304             my $ddest = cleanfile($buildd, $_, $blddir);
2305             die "more than one generator for $dest: "
2306                 ,join(" ", @{$generate{$_}}),"\n"
2307                 if scalar @{$generate{$_}} > 1;
2308             my @generator = split /\s+/, $generate{$dest}->[0];
2309             my $gen = $generator[0];
2310             $generator[0] = cleanfile($sourced, $gen, $blddir);
2311
2312             # If the generator is itself generated, it's in the build tree
2313             if ($generate{$gen}) {
2314                 $generator[0] = cleanfile($buildd, $gen, $blddir);
2315             }
2316
2317             $unified_info{generate}->{$ddest} = [ @generator ];
2318         }
2319
2320         foreach (keys %depends) {
2321             my $dest = $_;
2322             my $ddest = $dest eq "" ? "" : cleanfile($sourced, $_, $blddir);
2323
2324             # If the destination doesn't exist in source, it can only be
2325             # a generated file in the build tree.
2326             if ($ddest ne "" && ($ddest eq $src_configdata || ! -f $ddest)) {
2327                 $ddest = cleanfile($buildd, $_, $blddir);
2328             }
2329             foreach (@{$depends{$dest}}) {
2330                 my $d = cleanfile($sourced, $_, $blddir);
2331
2332                 # If we know it's generated, or assume it is because we can't
2333                 # find it in the source tree, we set file we depend on to be
2334                 # in the build tree rather than the source tree.
2335                 if ($d eq $src_configdata
2336                     || (grep { $d eq $_ }
2337                         map { cleanfile($srcdir, $_, $blddir) }
2338                         grep { /\.h$/ } keys %{$unified_info{generate}})
2339                     || ! -f $d) {
2340                     $d = cleanfile($buildd, $_, $blddir);
2341                 }
2342                 $unified_info{depends}->{$ddest}->{$d} = 1;
2343
2344                 # Fix up associated attributes
2345                 $unified_info{attributes}->{depends}->{$ddest}->{$d} =
2346                     $attributes{depends}->{$dest}->{$_}
2347                     if defined $attributes{depends}->{$dest}->{$_};
2348             }
2349         }
2350
2351         foreach (keys %includes) {
2352             my $dest = $_;
2353             my $ddest = cleanfile($sourced, $_, $blddir);
2354
2355             # If the destination doesn't exist in source, it can only be
2356             # a generated file in the build tree.
2357             if ($ddest eq $src_configdata || ! -f $ddest) {
2358                 $ddest = cleanfile($buildd, $_, $blddir);
2359             }
2360             foreach (@{$includes{$dest}}) {
2361                 my $is = cleandir($sourced, $_, $blddir);
2362                 my $ib = cleandir($buildd, $_, $blddir);
2363                 push @{$unified_info{includes}->{$ddest}->{source}}, $is
2364                     unless grep { $_ eq $is } @{$unified_info{includes}->{$ddest}->{source}};
2365                 push @{$unified_info{includes}->{$ddest}->{build}}, $ib
2366                     unless grep { $_ eq $ib } @{$unified_info{includes}->{$ddest}->{build}};
2367             }
2368         }
2369
2370         foreach my $dest (keys %defines) {
2371             my $ddest;
2372
2373             if ($dest ne "") {
2374                 $ddest = cleanfile($sourced, $dest, $blddir);
2375
2376                 # If the destination doesn't exist in source, it can only
2377                 # be a generated file in the build tree.
2378                 if (! -f $ddest) {
2379                     $ddest = cleanfile($buildd, $dest, $blddir);
2380                 }
2381             }
2382             foreach my $v (@{$defines{$dest}}) {
2383                 $v =~ m|^([^=]*)(=.*)?$|;
2384                 die "0 length macro name not permitted\n" if $1 eq "";
2385                 if ($dest ne "") {
2386                     die "$1 defined more than once\n"
2387                         if defined $unified_info{defines}->{$ddest}->{$1};
2388                     $unified_info{defines}->{$ddest}->{$1} = $2;
2389                 } else {
2390                     die "$1 defined more than once\n"
2391                         if grep { $v eq $_ } @{$config{defines}};
2392                     push @{$config{defines}}, $v;
2393                 }
2394             }
2395         }
2396
2397         foreach my $section (keys %htmldocs) {
2398             foreach (@{$htmldocs{$section}}) {
2399                 my $htmldocs = cleanfile($buildd, $_, $blddir);
2400                 $unified_info{htmldocs}->{$section}->{$htmldocs} = 1;
2401             }
2402         }
2403
2404         foreach my $section (keys %mandocs) {
2405             foreach (@{$mandocs{$section}}) {
2406                 my $mandocs = cleanfile($buildd, $_, $blddir);
2407                 $unified_info{mandocs}->{$section}->{$mandocs} = 1;
2408             }
2409         }
2410     }
2411
2412     my $ordinals_text = join(', ', sort keys %ordinals);
2413     warn <<"EOF" if $ordinals_text;
2414
2415 WARNING: ORDINALS were specified for $ordinals_text
2416 They are ignored and should be replaced with a combination of GENERATE,
2417 DEPEND and SHARED_SOURCE.
2418 EOF
2419
2420
2421     # Go through the sources of all libraries and check that the same basename
2422     # doesn't appear more than once.  Some static library archivers depend on
2423     # them being unique.
2424     {
2425         my $err = 0;
2426         foreach my $prod (keys %{$unified_info{libraries}}) {
2427             my @prod_sources =
2428                 map { keys %{$unified_info{sources}->{$_}} }
2429                 keys %{$unified_info{sources}->{$prod}};
2430             my %srccnt = ();
2431
2432             # Count how many times a given each source basename
2433             # appears for each product.
2434             foreach my $src (@prod_sources) {
2435                 $srccnt{basename $src}++;
2436             }
2437
2438             foreach my $src (keys %srccnt) {
2439                 if ((my $cnt = $srccnt{$src}) > 1) {
2440                     print STDERR "$src appears $cnt times for the product $prod\n";
2441                     $err++
2442                 }
2443             }
2444         }
2445         die if $err > 0;
2446     }
2447
2448     # Massage the result
2449
2450     # If we depend on a header file or a perl module, add an inclusion of
2451     # its directory to allow smoothe inclusion
2452     foreach my $dest (keys %{$unified_info{depends}}) {
2453         next if $dest eq "";
2454         foreach my $d (keys %{$unified_info{depends}->{$dest}}) {
2455             next unless $d =~ /\.(h|pm)$/;
2456             my $i = dirname($d);
2457             my $spot =
2458                 $d eq "configdata.pm" || defined($unified_info{generate}->{$d})
2459                 ? 'build' : 'source';
2460             push @{$unified_info{includes}->{$dest}->{$spot}}, $i
2461                 unless grep { $_ eq $i } @{$unified_info{includes}->{$dest}->{$spot}};
2462         }
2463     }
2464
2465     # Go through all intermediary files and change their names to something that
2466     # reflects what they will be built for.  Note that for some source files,
2467     # this leads to duplicate object files because they are used multiple times.
2468     # the goal is to rename all object files according to this scheme:
2469     #    {productname}-{midfix}-{origobjname}.[o|res]
2470     # the {midfix} is a keyword indicating the type of product, which is mostly
2471     # valuable for libraries since they come in two forms.
2472     #
2473     # This also reorganises the {sources} and {shared_sources} so that the
2474     # former only contains ALL object files that are supposed to end up in
2475     # static libraries and programs, while the latter contains ALL object files
2476     # that are supposed to end up in shared libraries and DSOs.
2477     # The main reason for having two different source structures is to allow
2478     # the same name to be used for the static and the shared variants of a
2479     # library.
2480     {
2481         # Take copies so we don't get interference from added stuff
2482         my %unified_copy = ();
2483         foreach (('sources', 'shared_sources')) {
2484             $unified_copy{$_} = { %{$unified_info{$_}} }
2485                 if defined($unified_info{$_});
2486             delete $unified_info{$_};
2487         }
2488         foreach my $prodtype (('programs', 'libraries', 'modules', 'scripts')) {
2489             # $intent serves multi purposes:
2490             # - give a prefix for the new object files names
2491             # - in the case of libraries, rearrange the object files so static
2492             #   libraries use the 'sources' structure exclusively, while shared
2493             #   libraries use the 'shared_sources' structure exclusively.
2494             my $intent = {
2495                 programs  => { bin    => { src => [ 'sources' ],
2496                                            dst => 'sources' } },
2497                 libraries => { lib    => { src => [ 'sources' ],
2498                                            dst => 'sources' },
2499                                shlib  => { prodselect =>
2500                                                sub { grep !/\.a$/, @_ },
2501                                            src => [ 'sources',
2502                                                     'shared_sources' ],
2503                                            dst => 'shared_sources' } },
2504                 modules   => { dso    => { src => [ 'sources' ],
2505                                            dst => 'sources' } },
2506                 scripts   => { script => { src => [ 'sources' ],
2507                                            dst => 'sources' } }
2508                } -> {$prodtype};
2509             foreach my $kind (keys %$intent) {
2510                 next if ($intent->{$kind}->{dst} eq 'shared_sources'
2511                              && $disabled{shared});
2512
2513                 my @src = @{$intent->{$kind}->{src}};
2514                 my $dst = $intent->{$kind}->{dst};
2515                 my $prodselect = $intent->{$kind}->{prodselect} // sub { @_ };
2516                 foreach my $prod ($prodselect->(keys %{$unified_info{$prodtype}})) {
2517                     # %prod_sources has all applicable objects as keys, and
2518                     # their corresponding sources as values
2519                     my %prod_sources =
2520                         map { $_ => [ keys %{$unified_copy{sources}->{$_}} ] }
2521                         map { keys %{$unified_copy{$_}->{$prod}} }
2522                         @src;
2523                     foreach (keys %prod_sources) {
2524                         # Only affect object files and resource files,
2525                         # the others simply get a new value
2526                         # (+1 instead of -1)
2527                         if ($_ =~ /\.(o|res)$/) {
2528                             (my $prodname = $prod) =~ s|\.a$||;
2529                             my $newobj =
2530                                 catfile(dirname($_),
2531                                         basename($prodname)
2532                                             . '-' . $kind
2533                                             . '-' . basename($_));
2534                             $unified_info{$dst}->{$prod}->{$newobj} = 1;
2535                             foreach my $src (@{$prod_sources{$_}}) {
2536                                 $unified_info{sources}->{$newobj}->{$src} = 1;
2537                             }
2538                             # Adjust dependencies
2539                             foreach my $deps (keys %{$unified_info{depends}->{$_}}) {
2540                                 $unified_info{depends}->{$_}->{$deps} = -1;
2541                                 $unified_info{depends}->{$newobj}->{$deps} = 1;
2542                             }
2543                             # Adjust includes
2544                             foreach my $k (('source', 'build')) {
2545                                 next unless
2546                                     defined($unified_info{includes}->{$_}->{$k});
2547                                 my @incs = @{$unified_info{includes}->{$_}->{$k}};
2548                                 $unified_info{includes}->{$newobj}->{$k} = [ @incs ];
2549                             }
2550                         } else {
2551                             $unified_info{$dst}->{$prod}->{$_} = 1;
2552                         }
2553                     }
2554                 }
2555             }
2556         }
2557     }
2558
2559     # At this point, we have a number of sources with the value -1.  They
2560     # aren't part of the local build and are probably meant for a different
2561     # platform, and can therefore be cleaned away.  That happens when making
2562     # %unified_info more efficient below.
2563
2564     ### Make unified_info a bit more efficient
2565     # One level structures
2566     foreach (("programs", "libraries", "modules", "scripts")) {
2567         $unified_info{$_} = [ sort keys %{$unified_info{$_}} ];
2568     }
2569     # Two level structures
2570     foreach my $l1 (("sources", "shared_sources", "ldadd", "depends",
2571                      "htmldocs", "mandocs")) {
2572         foreach my $l2 (sort keys %{$unified_info{$l1}}) {
2573             my @items =
2574                 sort
2575                 grep { $unified_info{$l1}->{$l2}->{$_} > 0 }
2576                 keys %{$unified_info{$l1}->{$l2}};
2577             if (@items) {
2578                 $unified_info{$l1}->{$l2} = [ @items ];
2579             } else {
2580                 delete $unified_info{$l1}->{$l2};
2581             }
2582         }
2583     }
2584     # Defines
2585     foreach my $dest (sort keys %{$unified_info{defines}}) {
2586         $unified_info{defines}->{$dest}
2587             = [ map { $_.$unified_info{defines}->{$dest}->{$_} }
2588                 sort keys %{$unified_info{defines}->{$dest}} ];
2589     }
2590     # Includes
2591     foreach my $dest (sort keys %{$unified_info{includes}}) {
2592         if (defined($unified_info{includes}->{$dest}->{build})) {
2593             my @source_includes = ();
2594             @source_includes = ( @{$unified_info{includes}->{$dest}->{source}} )
2595                 if defined($unified_info{includes}->{$dest}->{source});
2596             $unified_info{includes}->{$dest} =
2597                 [ @{$unified_info{includes}->{$dest}->{build}} ];
2598             foreach my $inc (@source_includes) {
2599                 push @{$unified_info{includes}->{$dest}}, $inc
2600                     unless grep { $_ eq $inc } @{$unified_info{includes}->{$dest}};
2601             }
2602         } elsif (defined($unified_info{includes}->{$dest}->{source})) {
2603             $unified_info{includes}->{$dest} =
2604                 [ @{$unified_info{includes}->{$dest}->{source}} ];
2605         } else {
2606             delete $unified_info{includes}->{$dest};
2607         }
2608     }
2609
2610     # For convenience collect information regarding directories where
2611     # files are generated, those generated files and the end product
2612     # they end up in where applicable.  Then, add build rules for those
2613     # directories
2614     my %loopinfo = ( "lib" => [ @{$unified_info{libraries}} ],
2615                      "dso" => [ @{$unified_info{modules}} ],
2616                      "bin" => [ @{$unified_info{programs}} ],
2617                      "script" => [ @{$unified_info{scripts}} ],
2618                      "docs" => [ (map { @{$unified_info{htmldocs}->{$_} // []} }
2619                                   keys %{$unified_info{htmldocs} // {}}),
2620                                  (map { @{$unified_info{mandocs}->{$_} // []} }
2621                                   keys %{$unified_info{mandocs} // {}}) ] );
2622     foreach my $type (keys %loopinfo) {
2623         foreach my $product (@{$loopinfo{$type}}) {
2624             my %dirs = ();
2625             my $pd = dirname($product);
2626
2627             foreach (@{$unified_info{sources}->{$product} // []},
2628                      @{$unified_info{shared_sources}->{$product} // []}) {
2629                 my $d = dirname($_);
2630
2631                 # We don't want to create targets for source directories
2632                 # when building out of source
2633                 next if ($config{sourcedir} ne $config{builddir}
2634                              && $d =~ m|^\Q$config{sourcedir}\E|);
2635                 # We already have a "test" target, and the current directory
2636                 # is just silly to make a target for
2637                 next if $d eq "test" || $d eq ".";
2638
2639                 $dirs{$d} = 1;
2640                 push @{$unified_info{dirinfo}->{$d}->{deps}}, $_
2641                     if $d ne $pd;
2642             }
2643             foreach (keys %dirs) {
2644                 push @{$unified_info{dirinfo}->{$_}->{products}->{$type}},
2645                     $product;
2646             }
2647         }
2648     }
2649 }
2650
2651 # For the schemes that need it, we provide the old *_obj configs
2652 # from the *_asm_obj ones
2653 foreach (grep /_(asm|aux)_src$/, keys %target) {
2654     my $src = $_;
2655     (my $obj = $_) =~ s/_(asm|aux)_src$/_obj/;
2656     $target{$obj} = $target{$src};
2657     $target{$obj} =~ s/\.[csS]\b/.o/g; # C and assembler
2658     $target{$obj} =~ s/\.(cc|cpp)\b/_cc.o/g; # C++
2659 }
2660
2661 # Write down our configuration where it fits #########################
2662
2663 my %template_vars = (
2664     config => \%config,
2665     target => \%target,
2666     disablables => \@disablables,
2667     disablables_int => \@disablables_int,
2668     disabled => \%disabled,
2669     withargs => \%withargs,
2670     unified_info => \%unified_info,
2671     tls => \@tls,
2672     dtls => \@dtls,
2673     makevars => [ sort keys %user ],
2674     disabled_info => \%disabled_info,
2675     user_crossable => \@user_crossable,
2676 );
2677 my $configdata_outname = 'configdata.pm';
2678 print "Creating $configdata_outname\n";
2679 open CONFIGDATA, ">$configdata_outname.new"
2680             or die "Trying to create $configdata_outname.new: $!";
2681 my $configdata_tmplname = cleanfile($srcdir, "configdata.pm.in", $blddir);
2682 my $configdata_tmpl =
2683     OpenSSL::Template->new(TYPE => 'FILE', SOURCE => $configdata_tmplname);
2684 $configdata_tmpl->fill_in(
2685     FILENAME => $configdata_tmplname,
2686     OUTPUT => \*CONFIGDATA,
2687     HASH => { %template_vars,
2688               autowarntext => [
2689                   'WARNING: do not edit!',
2690                   "Generated by Configure from $configdata_tmplname",
2691               ] }
2692 ) or die $Text::Template::ERROR;
2693 close CONFIGDATA;
2694 rename "$configdata_outname.new", $configdata_outname;
2695 if ($builder_platform eq 'unix') {
2696     my $mode = (0755 & ~umask);
2697     chmod $mode, 'configdata.pm'
2698         or warn sprintf("WARNING: Couldn't change mode for 'configdata.pm' to 0%03o: %s\n",$mode,$!);
2699 }
2700
2701 print "Running $configdata_outname\n";
2702 my $perlcmd = (quotify("maybeshell", $config{PERL}))[0];
2703 my $cmd = "$perlcmd $configdata_outname";
2704 #print STDERR "DEBUG[run_dofile]: \$cmd = $cmd\n";
2705 system($cmd);
2706 exit 1 if $? != 0;
2707
2708 $SIG{__DIE__} = $orig_death_handler;
2709
2710 print <<"EOF" if ($disabled{threads} eq "unavailable");
2711
2712 The library could not be configured for supporting multi-threaded
2713 applications as the compiler options required on this system are not known.
2714 See file INSTALL.md for details if you need multi-threading.
2715 EOF
2716
2717 print <<"EOF" if ($no_shared_warn);
2718
2719 The options 'shared', 'pic' and 'dynamic-engine' aren't supported on this
2720 platform, so we will pretend you gave the option 'no-pic', which also disables
2721 'shared' and 'dynamic-engine'.  If you know how to implement shared libraries
2722 or position independent code, please let us know (but please first make sure
2723 you have tried with a current version of OpenSSL).
2724 EOF
2725
2726 print <<"EOF";
2727
2728 **********************************************************************
2729 ***                                                                ***
2730 ***   OpenSSL has been successfully configured                     ***
2731 ***                                                                ***
2732 ***   If you encounter a problem while building, please open an    ***
2733 ***   issue on GitHub <https://github.com/openssl/openssl/issues>  ***
2734 ***   and include the output from the following command:           ***
2735 ***                                                                ***
2736 ***       perl configdata.pm --dump                                ***
2737 ***                                                                ***
2738 ***   (If you are new to OpenSSL, you might want to consult the    ***
2739 ***   'Troubleshooting' section in the INSTALL.md file first)      ***
2740 ***                                                                ***
2741 **********************************************************************
2742 EOF
2743
2744 exit(0);
2745
2746 ######################################################################
2747 #
2748 # Helpers and utility functions
2749 #
2750
2751 # Death handler, to print a helpful message in case of failure #######
2752 #
2753 sub death_handler {
2754     die @_ if $^S;              # To prevent the added message in eval blocks
2755     my $build_file = $target{build_file} // "build file";
2756     my @message = ( <<"_____", @_ );
2757
2758 Failure!  $build_file wasn't produced.
2759 Please read INSTALL.md and associated NOTES-* files.  You may also have to
2760 look over your available compiler tool chain or change your configuration.
2761
2762 _____
2763
2764     # Dying is terminal, so it's ok to reset the signal handler here.
2765     $SIG{__DIE__} = $orig_death_handler;
2766     die @message;
2767 }
2768
2769 # Configuration file reading #########################################
2770
2771 # Note: All of the helper functions are for lazy evaluation.  They all
2772 # return a CODE ref, which will return the intended value when evaluated.
2773 # Thus, whenever there's mention of a returned value, it's about that
2774 # intended value.
2775
2776 # Helper function to implement conditional value variants, with a default
2777 # plus additional values based on the value of $config{build_type}.
2778 # Arguments are given in hash table form:
2779 #
2780 #       picker(default => "Basic string: ",
2781 #              debug   => "debug",
2782 #              release => "release")
2783 #
2784 # When configuring with --debug, the resulting string will be
2785 # "Basic string: debug", and when not, it will be "Basic string: release"
2786 #
2787 # This can be used to create variants of sets of flags according to the
2788 # build type:
2789 #
2790 #       cflags => picker(default => "-Wall",
2791 #                        debug   => "-g -O0",
2792 #                        release => "-O3")
2793 #
2794 sub picker {
2795     my %opts = @_;
2796     return sub { add($opts{default} || (),
2797                      $opts{$config{build_type}} || ())->(); }
2798 }
2799
2800 # Helper function to combine several values of different types into one.
2801 # This is useful if you want to combine a string with the result of a
2802 # lazy function, such as:
2803 #
2804 #       cflags => combine("-Wall", sub { $disabled{zlib} ? () : "-DZLIB" })
2805 #
2806 sub combine {
2807     my @stuff = @_;
2808     return sub { add(@stuff)->(); }
2809 }
2810
2811 # Helper function to implement conditional values depending on the value
2812 # of $disabled{threads}.  Can be used as follows:
2813 #
2814 #       cflags => combine("-Wall", threads("-pthread"))
2815 #
2816 sub threads {
2817     my @flags = @_;
2818     return sub { add($disabled{threads} ? () : @flags)->(); }
2819 }
2820
2821 sub shared {
2822     my @flags = @_;
2823     return sub { add($disabled{shared} ? () : @flags)->(); }
2824 }
2825
2826 our $add_called = 0;
2827 # Helper function to implement adding values to already existing configuration
2828 # values.  It handles elements that are ARRAYs, CODEs and scalars
2829 sub _add {
2830     my $separator = shift;
2831
2832     # If there's any ARRAY in the collection of values OR the separator
2833     # is undef, we will return an ARRAY of combined values, otherwise a
2834     # string of joined values with $separator as the separator.
2835     my $found_array = !defined($separator);
2836
2837     my @values =
2838         map {
2839             my $res = $_;
2840             while (ref($res) eq "CODE") {
2841                 $res = $res->();
2842             }
2843             if (defined($res)) {
2844                 if (ref($res) eq "ARRAY") {
2845                     $found_array = 1;
2846                     @$res;
2847                 } else {
2848                     $res;
2849                 }
2850             } else {
2851                 ();
2852             }
2853     } (@_);
2854
2855     $add_called = 1;
2856
2857     if ($found_array) {
2858         [ @values ];
2859     } else {
2860         join($separator, grep { defined($_) && $_ ne "" } @values);
2861     }
2862 }
2863 sub add_before {
2864     my $separator = " ";
2865     if (ref($_[$#_]) eq "HASH") {
2866         my $opts = pop;
2867         $separator = $opts->{separator};
2868     }
2869     my @x = @_;
2870     sub { _add($separator, @x, @_) };
2871 }
2872 sub add {
2873     my $separator = " ";
2874     if (ref($_[$#_]) eq "HASH") {
2875         my $opts = pop;
2876         $separator = $opts->{separator};
2877     }
2878     my @x = @_;
2879     sub { _add($separator, @_, @x) };
2880 }
2881
2882 sub read_eval_file {
2883     my $fname = shift;
2884     my $content;
2885     my @result;
2886
2887     open F, "< $fname" or die "Can't open '$fname': $!\n";
2888     {
2889         undef local $/;
2890         $content = <F>;
2891     }
2892     close F;
2893     {
2894         local $@;
2895
2896         @result = ( eval $content );
2897         warn $@ if $@;
2898     }
2899     return wantarray ? @result : $result[0];
2900 }
2901
2902 # configuration reader, evaluates the input file as a perl script and expects
2903 # it to fill %targets with target configurations.  Those are then added to
2904 # %table.
2905 sub read_config {
2906     my $fname = shift;
2907     my %targets;
2908
2909     {
2910         # Protect certain tables from tampering
2911         local %table = ();
2912
2913         %targets = read_eval_file($fname);
2914     }
2915     my %preexisting = ();
2916     foreach (sort keys %targets) {
2917         $preexisting{$_} = 1 if $table{$_};
2918     }
2919     die <<"EOF",
2920 The following config targets from $fname
2921 shadow pre-existing config targets with the same name:
2922 EOF
2923         map { "  $_\n" } sort keys %preexisting
2924         if %preexisting;
2925
2926
2927     # For each target, check that it's configured with a hash table.
2928     foreach (keys %targets) {
2929         if (ref($targets{$_}) ne "HASH") {
2930             if (ref($targets{$_}) eq "") {
2931                 warn "Deprecated target configuration for $_, ignoring...\n";
2932             } else {
2933                 warn "Misconfigured target configuration for $_ (should be a hash table), ignoring...\n";
2934             }
2935             delete $targets{$_};
2936         } else {
2937             $targets{$_}->{_conf_fname_int} = add([ $fname ]);
2938         }
2939     }
2940
2941     %table = (%table, %targets);
2942
2943 }
2944
2945 # configuration resolver.  Will only resolve all the lazy evaluation
2946 # codeblocks for the chosen target and all those it inherits from,
2947 # recursively
2948 sub resolve_config {
2949     my $target = shift;
2950     my @breadcrumbs = @_;
2951
2952 #    my $extra_checks = defined($ENV{CONFIGURE_EXTRA_CHECKS});
2953
2954     if (grep { $_ eq $target } @breadcrumbs) {
2955         die "inherit_from loop!  target backtrace:\n  "
2956             ,$target,"\n  ",join("\n  ", @breadcrumbs),"\n";
2957     }
2958
2959     if (!defined($table{$target})) {
2960         warn "Warning! target $target doesn't exist!\n";
2961         return ();
2962     }
2963     # Recurse through all inheritances.  They will be resolved on the
2964     # fly, so when this operation is done, they will all just be a
2965     # bunch of attributes with string values.
2966     # What we get here, though, are keys with references to lists of
2967     # the combined values of them all.  We will deal with lists after
2968     # this stage is done.
2969     my %combined_inheritance = ();
2970     if ($table{$target}->{inherit_from}) {
2971         my @inherit_from =
2972             map { ref($_) eq "CODE" ? $_->() : $_ } @{$table{$target}->{inherit_from}};
2973         foreach (@inherit_from) {
2974             my %inherited_config = resolve_config($_, $target, @breadcrumbs);
2975
2976             # 'template' is a marker that's considered private to
2977             # the config that had it.
2978             delete $inherited_config{template};
2979
2980             foreach (keys %inherited_config) {
2981                 if (!$combined_inheritance{$_}) {
2982                     $combined_inheritance{$_} = [];
2983                 }
2984                 push @{$combined_inheritance{$_}}, $inherited_config{$_};
2985             }
2986         }
2987     }
2988
2989     # We won't need inherit_from in this target any more, since we've
2990     # resolved all the inheritances that lead to this
2991     delete $table{$target}->{inherit_from};
2992
2993     # Now is the time to deal with those lists.  Here's the place to
2994     # decide what shall be done with those lists, all based on the
2995     # values of the target we're currently dealing with.
2996     # - If a value is a coderef, it will be executed with the list of
2997     #   inherited values as arguments.
2998     # - If the corresponding key doesn't have a value at all or is the
2999     #   empty string, the inherited value list will be run through the
3000     #   default combiner (below), and the result becomes this target's
3001     #   value.
3002     # - Otherwise, this target's value is assumed to be a string that
3003     #   will simply override the inherited list of values.
3004     my $default_combiner = add();
3005
3006     my %all_keys =
3007         map { $_ => 1 } (keys %combined_inheritance,
3008                          keys %{$table{$target}});
3009
3010     sub process_values {
3011         my $object    = shift;
3012         my $inherited = shift;  # Always a [ list ]
3013         my $target    = shift;
3014         my $entry     = shift;
3015
3016         $add_called = 0;
3017
3018         while(ref($object) eq "CODE") {
3019             $object = $object->(@$inherited);
3020         }
3021         if (!defined($object)) {
3022             return ();
3023         }
3024         elsif (ref($object) eq "ARRAY") {
3025             local $add_called;  # To make sure recursive calls don't affect it
3026             return [ map { process_values($_, $inherited, $target, $entry) }
3027                      @$object ];
3028         } elsif (ref($object) eq "") {
3029             return $object;
3030         } else {
3031             die "cannot handle reference type ",ref($object)
3032                 ," found in target ",$target," -> ",$entry,"\n";
3033         }
3034     }
3035
3036     foreach (sort keys %all_keys) {
3037         my $previous = $combined_inheritance{$_};
3038
3039         # Current target doesn't have a value for the current key?
3040         # Assign it the default combiner, the rest of this loop body
3041         # will handle it just like any other coderef.
3042         if (!exists $table{$target}->{$_}) {
3043             $table{$target}->{$_} = $default_combiner;
3044         }
3045
3046         $table{$target}->{$_} = process_values($table{$target}->{$_},
3047                                                $combined_inheritance{$_},
3048                                                $target, $_);
3049         unless(defined($table{$target}->{$_})) {
3050             delete $table{$target}->{$_};
3051         }
3052 #        if ($extra_checks &&
3053 #            $previous && !($add_called ||  $previous ~~ $table{$target}->{$_})) {
3054 #            warn "$_ got replaced in $target\n";
3055 #        }
3056     }
3057
3058     # Finally done, return the result.
3059     return %{$table{$target}};
3060 }
3061
3062 sub usage
3063         {
3064         print STDERR $usage;
3065         print STDERR "\npick os/compiler from:\n";
3066         my $j=0;
3067         my $i;
3068         my $k=0;
3069         foreach $i (sort keys %table)
3070                 {
3071                 next if $table{$i}->{template};
3072                 next if $i =~ /^debug/;
3073                 $k += length($i) + 1;
3074                 if ($k > 78)
3075                         {
3076                         print STDERR "\n";
3077                         $k=length($i);
3078                         }
3079                 print STDERR $i . " ";
3080                 }
3081         foreach $i (sort keys %table)
3082                 {
3083                 next if $table{$i}->{template};
3084                 next if $i !~ /^debug/;
3085                 $k += length($i) + 1;
3086                 if ($k > 78)
3087                         {
3088                         print STDERR "\n";
3089                         $k=length($i);
3090                         }
3091                 print STDERR $i . " ";
3092                 }
3093         exit(1);
3094         }
3095
3096 sub compiler_predefined {
3097     state %predefined;
3098     my $cc = shift;
3099
3100     return () if $^O eq 'VMS';
3101
3102     die 'compiler_predefined called without a compiler command'
3103         unless $cc;
3104
3105     if (! $predefined{$cc}) {
3106
3107         $predefined{$cc} = {};
3108
3109         # collect compiler pre-defines from gcc or gcc-alike...
3110         open(PIPE, "$cc -dM -E -x c /dev/null 2>&1 |");
3111         while (my $l = <PIPE>) {
3112             $l =~ m/^#define\s+(\w+(?:\(\w+\))?)(?:\s+(.+))?/ or last;
3113             $predefined{$cc}->{$1} = $2 // '';
3114         }
3115         close(PIPE);
3116     }
3117
3118     return %{$predefined{$cc}};
3119 }
3120
3121 sub which
3122 {
3123     my ($name)=@_;
3124
3125     if (eval { require IPC::Cmd; 1; }) {
3126         IPC::Cmd->import();
3127         return scalar IPC::Cmd::can_run($name);
3128     } else {
3129         # if there is $directories component in splitpath,
3130         # then it's not something to test with $PATH...
3131         return $name if (File::Spec->splitpath($name))[1];
3132
3133         foreach (File::Spec->path()) {
3134             my $fullpath = catfile($_, "$name$target{exe_extension}");
3135             if (-f $fullpath and -x $fullpath) {
3136                 return $fullpath;
3137             }
3138         }
3139     }
3140 }
3141
3142 sub env
3143 {
3144     my $name = shift;
3145     my %opts = @_;
3146
3147     unless ($opts{cacheonly}) {
3148         # Note that if $ENV{$name} doesn't exist or is undefined,
3149         # $config{perlenv}->{$name} will be created with the value
3150         # undef.  This is intentional.
3151
3152         $config{perlenv}->{$name} = $ENV{$name}
3153             if ! exists $config{perlenv}->{$name};
3154     }
3155     return $config{perlenv}->{$name};
3156 }
3157
3158 # Configuration printer ##############################################
3159
3160 sub print_table_entry
3161 {
3162     local $now_printing = shift;
3163     my %target = resolve_config($now_printing);
3164     my $type = shift;
3165
3166     # Don't print the templates
3167     return if $target{template};
3168
3169     my @sequence = (
3170         "sys_id",
3171         "cpp",
3172         "cppflags",
3173         "defines",
3174         "includes",
3175         "cc",
3176         "cflags",
3177         "ld",
3178         "lflags",
3179         "loutflag",
3180         "ex_libs",
3181         "bn_ops",
3182         "enable",
3183         "disable",
3184         "poly1035_asm_src",
3185         "thread_scheme",
3186         "perlasm_scheme",
3187         "dso_scheme",
3188         "shared_target",
3189         "shared_cflag",
3190         "shared_defines",
3191         "shared_ldflag",
3192         "shared_rcflag",
3193         "shared_extension",
3194         "dso_extension",
3195         "obj_extension",
3196         "exe_extension",
3197         "ranlib",
3198         "ar",
3199         "arflags",
3200         "aroutflag",
3201         "rc",
3202         "rcflags",
3203         "rcoutflag",
3204         "mt",
3205         "mtflags",
3206         "mtinflag",
3207         "mtoutflag",
3208         "multilib",
3209         "build_scheme",
3210         );
3211
3212     if ($type eq "TABLE") {
3213         print "\n";
3214         print "*** $now_printing\n";
3215         foreach (@sequence) {
3216             if (ref($target{$_}) eq "ARRAY") {
3217                 printf "\$%-12s = %s\n", $_, join(" ", @{$target{$_}});
3218             } else {
3219                 printf "\$%-12s = %s\n", $_, $target{$_};
3220             }
3221         }
3222     } elsif ($type eq "HASH") {
3223         my $largest =
3224             length((sort { length($a) <=> length($b) } @sequence)[-1]);
3225         print "    '$now_printing' => {\n";
3226         foreach (@sequence) {
3227             if ($target{$_}) {
3228                 if (ref($target{$_}) eq "ARRAY") {
3229                     print "      '",$_,"'"," " x ($largest - length($_))," => [ ",join(", ", map { "'$_'" } @{$target{$_}})," ],\n";
3230                 } else {
3231                     print "      '",$_,"'"," " x ($largest - length($_))," => '",$target{$_},"',\n";
3232                 }
3233             }
3234         }
3235         print "    },\n";
3236     }
3237 }
3238
3239 # Utility routines ###################################################
3240
3241 # On VMS, if the given file is a logical name, File::Spec::Functions
3242 # will consider it an absolute path.  There are cases when we want a
3243 # purely syntactic check without checking the environment.
3244 sub isabsolute {
3245     my $file = shift;
3246
3247     # On non-platforms, we just use file_name_is_absolute().
3248     return file_name_is_absolute($file) unless $^O eq "VMS";
3249
3250     # If the file spec includes a device or a directory spec,
3251     # file_name_is_absolute() is perfectly safe.
3252     return file_name_is_absolute($file) if $file =~ m|[:\[]|;
3253
3254     # Here, we know the given file spec isn't absolute
3255     return 0;
3256 }
3257
3258 # Makes a directory absolute and cleans out /../ in paths like foo/../bar
3259 # On some platforms, this uses rel2abs(), while on others, realpath() is used.
3260 # realpath() requires that at least all path components except the last is an
3261 # existing directory.  On VMS, the last component of the directory spec must
3262 # exist.
3263 sub absolutedir {
3264     my $dir = shift;
3265
3266     # realpath() is quite buggy on VMS.  It uses LIB$FID_TO_NAME, which
3267     # will return the volume name for the device, no matter what.  Also,
3268     # it will return an incorrect directory spec if the argument is a
3269     # directory that doesn't exist.
3270     if ($^O eq "VMS") {
3271         return rel2abs($dir);
3272     }
3273
3274     # We use realpath() on Unix, since no other will properly clean out
3275     # a directory spec.
3276     use Cwd qw/realpath/;
3277
3278     return realpath($dir);
3279 }
3280
3281 # Check if all paths are one and the same, using stat.  They must both exist
3282 # We need this for the cases when File::Spec doesn't detect case insensitivity
3283 # (File::Spec::Unix assumes case sensitivity)
3284 sub samedir {
3285     die "samedir expects two arguments\n" unless scalar @_ == 2;
3286
3287     my @stat0 = stat($_[0]);    # First argument
3288     my @stat1 = stat($_[1]);    # Second argument
3289
3290     die "Couldn't stat $_[0]" unless @stat0;
3291     die "Couldn't stat $_[1]" unless @stat1;
3292
3293     # Compare device number
3294     return 0 unless ($stat0[0] == $stat1[0]);
3295     # Compare "inode".  The perl manual recommends comparing as
3296     # string rather than as number.
3297     return 0 unless ($stat0[1] eq $stat1[1]);
3298
3299     return 1;                   # All the same
3300 }
3301
3302 sub quotify {
3303     my %processors = (
3304         perl    => sub { my $x = shift;
3305                          $x =~ s/([\\\$\@"])/\\$1/g;
3306                          return '"'.$x.'"'; },
3307         maybeshell => sub { my $x = shift;
3308                             (my $y = $x) =~ s/([\\\"])/\\$1/g;
3309                             if ($x ne $y || $x =~ m|\s|) {
3310                                 return '"'.$y.'"';
3311                             } else {
3312                                 return $x;
3313                             }
3314                         },
3315         );
3316     my $for = shift;
3317     my $processor =
3318         defined($processors{$for}) ? $processors{$for} : sub { shift; };
3319
3320     return map { $processor->($_); } @_;
3321 }
3322
3323 # collect_from_file($filename, $line_concat_cond_re, $line_concat)
3324 # $filename is a file name to read from
3325 # $line_concat_cond_re is a regexp detecting a line continuation ending
3326 # $line_concat is a CODEref that takes care of concatenating two lines
3327 sub collect_from_file {
3328     my $filename = shift;
3329     my $line_concat_cond_re = shift;
3330     my $line_concat = shift;
3331
3332     open my $fh, $filename || die "unable to read $filename: $!\n";
3333     return sub {
3334         my $saved_line = "";
3335         $_ = "";
3336         while (<$fh>) {
3337             s|\R$||;
3338             if (defined $line_concat) {
3339                 $_ = $line_concat->($saved_line, $_);
3340                 $saved_line = "";
3341             }
3342             if (defined $line_concat_cond_re && /$line_concat_cond_re/) {
3343                 $saved_line = $_;
3344                 next;
3345             }
3346             return $_;
3347         }
3348         die "$filename ending with continuation line\n" if $_;
3349         close $fh;
3350         return undef;
3351     }
3352 }
3353
3354 # collect_from_array($array, $line_concat_cond_re, $line_concat)
3355 # $array is an ARRAYref of lines
3356 # $line_concat_cond_re is a regexp detecting a line continuation ending
3357 # $line_concat is a CODEref that takes care of concatenating two lines
3358 sub collect_from_array {
3359     my $array = shift;
3360     my $line_concat_cond_re = shift;
3361     my $line_concat = shift;
3362     my @array = (@$array);
3363
3364     return sub {
3365         my $saved_line = "";
3366         $_ = "";
3367         while (defined($_ = shift @array)) {
3368             s|\R$||;
3369             if (defined $line_concat) {
3370                 $_ = $line_concat->($saved_line, $_);
3371                 $saved_line = "";
3372             }
3373             if (defined $line_concat_cond_re && /$line_concat_cond_re/) {
3374                 $saved_line = $_;
3375                 next;
3376             }
3377             return $_;
3378         }
3379         die "input text ending with continuation line\n" if $_;
3380         return undef;
3381     }
3382 }
3383
3384 # collect_information($lineiterator, $line_continue, $regexp => $CODEref, ...)
3385 # $lineiterator is a CODEref that delivers one line at a time.
3386 # All following arguments are regex/CODEref pairs, where the regexp detects a
3387 # line and the CODEref does something with the result of the regexp.
3388 sub collect_information {
3389     my $lineiterator = shift;
3390     my %collectors = @_;
3391
3392     while(defined($_ = $lineiterator->())) {
3393         s|\R$||;
3394         my $found = 0;
3395         if ($collectors{"BEFORE"}) {
3396             $collectors{"BEFORE"}->($_);
3397         }
3398         foreach my $re (keys %collectors) {
3399             if ($re !~ /^OTHERWISE|BEFORE|AFTER$/ && /$re/) {
3400                 $collectors{$re}->($lineiterator);
3401                 $found = 1;
3402             };
3403         }
3404         if ($collectors{"OTHERWISE"}) {
3405             $collectors{"OTHERWISE"}->($lineiterator, $_)
3406                 unless $found || !defined $collectors{"OTHERWISE"};
3407         }
3408         if ($collectors{"AFTER"}) {
3409             $collectors{"AFTER"}->($_);
3410         }
3411     }
3412 }
3413
3414 # tokenize($line)
3415 # tokenize($line,$separator)
3416 # $line is a line of text to split up into tokens
3417 # $separator [optional] is a regular expression that separates the tokens,
3418 # the default being spaces.  Do not use quotes of any kind as separators,
3419 # that will give undefined results.
3420 # Returns a list of tokens.
3421 #
3422 # Tokens are divided by separator (spaces by default).  If the tokens include
3423 # the separators, they have to be quoted with single or double quotes.
3424 # Double quotes inside a double quoted token must be escaped.  Escaping is done
3425 # with backslash.
3426 # Basically, the same quoting rules apply for " and ' as in any
3427 # Unix shell.
3428 sub tokenize {
3429     my $line = my $debug_line = shift;
3430     my $separator = shift // qr|\s+|;
3431     my @result = ();
3432
3433     if ($ENV{CONFIGURE_DEBUG_TOKENIZE}) {
3434         print STDERR "DEBUG[tokenize]: \$separator = $separator\n";
3435     }
3436
3437     while ($line =~ s|^${separator}||, $line ne "") {
3438         my $token = "";
3439     again:
3440         $line =~ m/^(.*?)(${separator}|"|'|$)/;
3441         $token .= $1;
3442         $line = $2.$';
3443
3444         if ($line =~ m/^"((?:[^"\\]+|\\.)*)"/) {
3445             $token .= $1;
3446             $line = $';
3447             goto again;
3448         } elsif ($line =~ m/^'([^']*)'/) {
3449             $token .= $1;
3450             $line = $';
3451             goto again;
3452         }
3453         push @result, $token;
3454     }
3455
3456     if ($ENV{CONFIGURE_DEBUG_TOKENIZE}) {
3457         print STDERR "DEBUG[tokenize]: Parsed '$debug_line' into:\n";
3458         print STDERR "DEBUG[tokenize]: ('", join("', '", @result), "')\n";
3459     }
3460     return @result;
3461 }