1 #
   2 # Copyright (c) 2011, 2025, Oracle and/or its affiliates. All rights reserved.
   3 # DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
   4 #
   5 # This code is free software; you can redistribute it and/or modify it
   6 # under the terms of the GNU General Public License version 2 only, as
   7 # published by the Free Software Foundation.  Oracle designates this
   8 # particular file as subject to the "Classpath" exception as provided
   9 # by Oracle in the LICENSE file that accompanied this code.
  10 #
  11 # This code is distributed in the hope that it will be useful, but WITHOUT
  12 # ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  13 # FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
  14 # version 2 for more details (a copy is included in the LICENSE file that
  15 # accompanied this code).
  16 #
  17 # You should have received a copy of the GNU General Public License version
  18 # 2 along with this work; if not, write to the Free Software Foundation,
  19 # Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
  20 #
  21 # Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
  22 # or visit www.oracle.com if you need additional information or have any
  23 # questions.
  24 #
  25 
  26 ################################################################################
  27 # Set the debug level
  28 #    release: no debug information, all optimizations, no asserts.
  29 #    optimized: no debug information, all optimizations, no asserts, HotSpot target is 'optimized'.
  30 #    fastdebug: debug information (-g), all optimizations, all asserts
  31 #    slowdebug: debug information (-g), no optimizations, all asserts
  32 AC_DEFUN_ONCE([JDKOPT_SETUP_DEBUG_LEVEL],
  33 [
  34   DEBUG_LEVEL="release"
  35 
  36   UTIL_ARG_ENABLE(NAME: debug, DEFAULT: false, RESULT: ENABLE_DEBUG,
  37       DESC: [enable debugging (shorthand for --with-debug-level=fastdebug)],
  38       IF_ENABLED: [ DEBUG_LEVEL="fastdebug" ])
  39 
  40   AC_MSG_CHECKING([which debug level to use])
  41   AC_ARG_WITH([debug-level], [AS_HELP_STRING([--with-debug-level],
  42       [set the debug level (release, fastdebug, slowdebug, optimized) @<:@release@:>@])],
  43       [
  44         DEBUG_LEVEL="${withval}"
  45         if test "x$ENABLE_DEBUG" = xtrue; then
  46           AC_MSG_ERROR([You cannot use both --enable-debug and --with-debug-level at the same time.])
  47         fi
  48       ])
  49   AC_MSG_RESULT([$DEBUG_LEVEL])
  50 
  51   if test "x$DEBUG_LEVEL" != xrelease && \
  52       test "x$DEBUG_LEVEL" != xoptimized && \
  53       test "x$DEBUG_LEVEL" != xfastdebug && \
  54       test "x$DEBUG_LEVEL" != xslowdebug; then
  55     AC_MSG_ERROR([Allowed debug levels are: release, fastdebug, slowdebug and optimized])
  56   fi
  57 
  58   # Translate DEBUG_LEVEL to debug level used by Hotspot
  59   HOTSPOT_DEBUG_LEVEL="$DEBUG_LEVEL"
  60   if test "x$DEBUG_LEVEL" = xrelease; then
  61     HOTSPOT_DEBUG_LEVEL="product"
  62   elif test "x$DEBUG_LEVEL" = xslowdebug; then
  63     HOTSPOT_DEBUG_LEVEL="debug"
  64   fi
  65 
  66   if test "x$DEBUG_LEVEL" = xoptimized; then
  67     # The debug level 'optimized' is a little special because it is currently only
  68     # applicable to the HotSpot build where it means to build a completely
  69     # optimized version of the VM without any debugging code (like for the
  70     # 'release' debug level which is called 'product' in the HotSpot build) but
  71     # with the exception that it can contain additional code which is otherwise
  72     # protected by '#ifndef PRODUCT' macros. These 'optimized' builds are used to
  73     # test new and/or experimental features which are not intended for customer
  74     # shipment. Because these new features need to be tested and benchmarked in
  75     # real world scenarios, we want to build the containing JDK at the 'release'
  76     # debug level.
  77     DEBUG_LEVEL="release"
  78   fi
  79 
  80   AC_SUBST(HOTSPOT_DEBUG_LEVEL)
  81   AC_SUBST(DEBUG_LEVEL)
  82 ])
  83 
  84 ################################################################################
  85 #
  86 # Should we build only OpenJDK even if closed sources are present?
  87 #
  88 AC_DEFUN_ONCE([JDKOPT_SETUP_OPEN_OR_CUSTOM],
  89 [
  90   UTIL_ARG_ENABLE(NAME: openjdk-only, DEFAULT: false,
  91       RESULT: SUPPRESS_CUSTOM_EXTENSIONS,
  92       DESC: [suppress building custom source even if present],
  93       CHECKING_MSG: [if custom source is suppressed (openjdk-only)])
  94 ])
  95 
  96 AC_DEFUN_ONCE([JDKOPT_SETUP_JDK_OPTIONS],
  97 [
  98   # Should we build a JDK without a graphical UI?
  99   UTIL_ARG_ENABLE(NAME: headless-only, DEFAULT: false,
 100       RESULT: ENABLE_HEADLESS_ONLY,
 101       DESC: [only build headless (no GUI) support],
 102       CHECKING_MSG: [if we should build headless-only (no GUI)])
 103   AC_SUBST(ENABLE_HEADLESS_ONLY)
 104 
 105   # should we linktime gc unused code sections in the JDK build ?
 106   if test "x$OPENJDK_TARGET_OS" = "xlinux" && test "x$OPENJDK_TARGET_CPU" = xs390x; then
 107     LINKTIME_GC_DEFAULT=true
 108   else
 109     LINKTIME_GC_DEFAULT=false
 110   fi
 111 
 112   UTIL_ARG_ENABLE(NAME: linktime-gc, DEFAULT: $LINKTIME_GC_DEFAULT,
 113       DEFAULT_DESC: [auto], RESULT: ENABLE_LINKTIME_GC,
 114       DESC: [use link time gc on unused code sections in the JDK build],
 115       CHECKING_MSG: [if linker should clean out unused code (linktime-gc)])
 116   AC_SUBST(ENABLE_LINKTIME_GC)
 117 
 118   # Check for full doc dependencies
 119   FULL_DOCS_AVAILABLE=true
 120   AC_MSG_CHECKING([for graphviz dot])
 121   if test "x$DOT" != "x"; then
 122     AC_MSG_RESULT([yes])
 123   else
 124     AC_MSG_RESULT([no, cannot generate full docs or man pages])
 125     FULL_DOCS_AVAILABLE=false
 126   fi
 127 
 128   AC_MSG_CHECKING([for pandoc])
 129   if test "x$ENABLE_PANDOC" = "xtrue"; then
 130     AC_MSG_RESULT([yes])
 131   else
 132     AC_MSG_RESULT([no, cannot generate full docs or man pages])
 133     FULL_DOCS_AVAILABLE=false
 134   fi
 135 
 136   # Should we build the complete docs, or just a lightweight version?
 137   UTIL_ARG_ENABLE(NAME: full-docs, DEFAULT: auto, RESULT: ENABLE_FULL_DOCS,
 138       AVAILABLE: $FULL_DOCS_AVAILABLE, DESC: [build complete documentation],
 139       DEFAULT_DESC: [enabled if all tools found])
 140   AC_SUBST(ENABLE_FULL_DOCS)
 141 
 142   # Choose cacerts source file
 143   AC_ARG_WITH(cacerts-file, [AS_HELP_STRING([--with-cacerts-file],
 144       [specify alternative cacerts file])])
 145   AC_MSG_CHECKING([for cacerts file])
 146   if test "x$with_cacerts_file" == x; then
 147     AC_MSG_RESULT([default])
 148   else
 149     CACERTS_FILE=$with_cacerts_file
 150     if test ! -f "$CACERTS_FILE"; then
 151       AC_MSG_RESULT([fail])
 152       AC_MSG_ERROR([Specified cacerts file "$CACERTS_FILE" does not exist])
 153     fi
 154     AC_MSG_RESULT([$CACERTS_FILE])
 155   fi
 156   AC_SUBST(CACERTS_FILE)
 157 
 158   # Choose cacerts source folder for user provided PEM files
 159   AC_ARG_WITH(cacerts-src, [AS_HELP_STRING([--with-cacerts-src],
 160       [specify alternative cacerts source folder containing certificates])])
 161   CACERTS_SRC=""
 162   AC_MSG_CHECKING([for cacerts source])
 163   if test "x$with_cacerts_src" == x; then
 164     AC_MSG_RESULT([default])
 165   else
 166     CACERTS_SRC=$with_cacerts_src
 167     if test ! -d "$CACERTS_SRC"; then
 168       AC_MSG_RESULT([fail])
 169       AC_MSG_ERROR([Specified cacerts source folder "$CACERTS_SRC" does not exist])
 170     fi
 171     AC_MSG_RESULT([$CACERTS_SRC])
 172   fi
 173   AC_SUBST(CACERTS_SRC)
 174 
 175   # Enable or disable unlimited crypto
 176   UTIL_ARG_ENABLE(NAME: unlimited-crypto, DEFAULT: true, RESULT: UNLIMITED_CRYPTO,
 177       DESC: [enable unlimited crypto policy])
 178   AC_SUBST(UNLIMITED_CRYPTO)
 179 
 180   # Should we build the serviceability agent (SA)?
 181   INCLUDE_SA=true
 182   if HOTSPOT_CHECK_JVM_VARIANT(zero); then
 183     INCLUDE_SA=false
 184   fi
 185   if test "x$OPENJDK_TARGET_OS" = xaix ; then
 186     INCLUDE_SA=false
 187   fi
 188   if test "x$OPENJDK_TARGET_CPU" = xs390x ; then
 189     INCLUDE_SA=false
 190   fi
 191   AC_SUBST(INCLUDE_SA)
 192 
 193   # Setup default CDS alignment. On platforms where one build may run on machines with different
 194   # page sizes, the JVM choses a compatible alignment to fit all possible page sizes. This slightly
 195   # increases archive size.
 196   # The only platform having this problem at the moment is Linux on aarch64, which may encounter
 197   # three different page sizes: 4K, 64K, and if run on Mac m1 hardware, 16K.
 198   COMPATIBLE_CDS_ALIGNMENT_DEFAULT=false
 199   if test "x$OPENJDK_TARGET_OS" = "xlinux" && test "x$OPENJDK_TARGET_CPU" = "xaarch64"; then
 200     COMPATIBLE_CDS_ALIGNMENT_DEFAULT=auto
 201   fi
 202 
 203   # Compress jars
 204   COMPRESS_JARS=false
 205 
 206   AC_SUBST(COMPRESS_JARS)
 207 
 208   # Setup default copyright year. Mostly overridden when building close to a new year.
 209   AC_ARG_WITH(copyright-year, [AS_HELP_STRING([--with-copyright-year],
 210       [Set copyright year value for build @<:@current year/source-date@:>@])])
 211   if test "x$with_copyright_year" = xyes; then
 212     AC_MSG_ERROR([Copyright year must have a value])
 213   elif test "x$with_copyright_year" != x; then
 214     COPYRIGHT_YEAR="$with_copyright_year"
 215   elif test "x$SOURCE_DATE" != xupdated; then
 216     if test "x$IS_GNU_DATE" = xyes; then
 217       COPYRIGHT_YEAR=`$DATE --date=@$SOURCE_DATE +%Y`
 218     else
 219       COPYRIGHT_YEAR=`$DATE -j -f %s $SOURCE_DATE +%Y`
 220     fi
 221   else
 222     COPYRIGHT_YEAR=`$DATE +'%Y'`
 223   fi
 224   AC_SUBST(COPYRIGHT_YEAR)
 225 
 226   # Override default library path
 227   AC_ARG_WITH([jni-libpath], [AS_HELP_STRING([--with-jni-libpath],
 228       [override default JNI library search path])])
 229   AC_MSG_CHECKING([for jni library path])
 230   if test "x${with_jni_libpath}" = "x" || test "x${with_jni_libpath}" = "xno"; then
 231     AC_MSG_RESULT([default])
 232   elif test "x${with_jni_libpath}" = "xyes"; then
 233     AC_MSG_RESULT([invalid])
 234     AC_MSG_ERROR([The --with-jni-libpath option requires an argument.])
 235   else
 236     HOTSPOT_OVERRIDE_LIBPATH=${with_jni_libpath}
 237     if test "x$OPENJDK_TARGET_OS" != "xlinux" &&
 238         test "x$OPENJDK_TARGET_OS" != "xbsd" &&
 239         test "x$OPENJDK_TARGET_OS" != "xaix"; then
 240       AC_MSG_RESULT([fail])
 241       AC_MSG_ERROR([Overriding JNI library path is supported only on Linux, BSD and AIX.])
 242     fi
 243     AC_MSG_RESULT(${HOTSPOT_OVERRIDE_LIBPATH})
 244   fi
 245   AC_SUBST(HOTSPOT_OVERRIDE_LIBPATH)
 246 
 247 ])
 248 
 249 ################################################################################
 250 
 251 AC_DEFUN_ONCE([JDKOPT_SETUP_DEBUG_SYMBOLS],
 252 [
 253   #
 254   # Native debug symbols.
 255   # This must be done after the toolchain is setup, since we're looking at objcopy.
 256   #
 257   AC_MSG_CHECKING([what type of native debug symbols to use])
 258   AC_ARG_WITH([native-debug-symbols],
 259       [AS_HELP_STRING([--with-native-debug-symbols],
 260       [set the native debug symbol configuration (none, internal, external, zipped) @<:@varying@:>@])],
 261       [
 262         if test "x$OPENJDK_TARGET_OS" = xwindows; then
 263           if test "x$withval" = xinternal; then
 264             AC_MSG_ERROR([Windows does not support the parameter 'internal' for --with-native-debug-symbols])
 265           fi
 266         fi
 267       ],
 268       [
 269         with_native_debug_symbols="external"
 270       ])
 271   AC_MSG_RESULT([$with_native_debug_symbols])
 272 
 273   if test "x$with_native_debug_symbols" = xnone; then
 274     COMPILE_WITH_DEBUG_SYMBOLS=false
 275     COPY_DEBUG_SYMBOLS=false
 276     ZIP_EXTERNAL_DEBUG_SYMBOLS=false
 277   elif test "x$with_native_debug_symbols" = xinternal; then
 278     COMPILE_WITH_DEBUG_SYMBOLS=true
 279     COPY_DEBUG_SYMBOLS=false
 280     ZIP_EXTERNAL_DEBUG_SYMBOLS=false
 281   elif test "x$with_native_debug_symbols" = xexternal; then
 282 
 283     if test "x$OPENJDK_TARGET_OS" = xlinux; then
 284       if test "x$OBJCOPY" = x; then
 285         # enabling of enable-debug-symbols and can't find objcopy
 286         # this is an error
 287         AC_MSG_ERROR([Unable to find objcopy, cannot enable native debug symbols])
 288       fi
 289     fi
 290 
 291     COMPILE_WITH_DEBUG_SYMBOLS=true
 292     COPY_DEBUG_SYMBOLS=true
 293     ZIP_EXTERNAL_DEBUG_SYMBOLS=false
 294   elif test "x$with_native_debug_symbols" = xzipped; then
 295 
 296     if test "x$OPENJDK_TARGET_OS" = xlinux; then
 297       if test "x$OBJCOPY" = x; then
 298         # enabling of enable-debug-symbols and can't find objcopy
 299         # this is an error
 300         AC_MSG_ERROR([Unable to find objcopy, cannot enable native debug symbols])
 301       fi
 302     fi
 303 
 304     COMPILE_WITH_DEBUG_SYMBOLS=true
 305     COPY_DEBUG_SYMBOLS=true
 306     ZIP_EXTERNAL_DEBUG_SYMBOLS=true
 307   else
 308     AC_MSG_ERROR([Allowed native debug symbols are: none, internal, external, zipped])
 309   fi
 310 
 311   AC_SUBST(COMPILE_WITH_DEBUG_SYMBOLS)
 312   AC_SUBST(COPY_DEBUG_SYMBOLS)
 313   AC_SUBST(ZIP_EXTERNAL_DEBUG_SYMBOLS)
 314 
 315   # Should we add external native debug symbols to the shipped bundles?
 316   AC_MSG_CHECKING([if we should add external native debug symbols to the shipped bundles])
 317   AC_ARG_WITH([external-symbols-in-bundles],
 318       [AS_HELP_STRING([--with-external-symbols-in-bundles],
 319       [which type of external native debug symbol information shall be shipped in product bundles (none, public, full)
 320       (e.g. ship full/stripped pdbs on Windows) @<:@none@:>@])])
 321 
 322   if test "x$with_external_symbols_in_bundles" = x || test "x$with_external_symbols_in_bundles" = xnone ; then
 323     AC_MSG_RESULT([no])
 324   elif test "x$with_external_symbols_in_bundles" = xfull || test "x$with_external_symbols_in_bundles" = xpublic ; then
 325     if test "x$OPENJDK_TARGET_OS" != xwindows ; then
 326       AC_MSG_ERROR([--with-external-symbols-in-bundles currently only works on windows!])
 327     elif test "x$COPY_DEBUG_SYMBOLS" != xtrue ; then
 328       AC_MSG_ERROR([--with-external-symbols-in-bundles only works when --with-native-debug-symbols=external is used!])
 329     elif test "x$with_external_symbols_in_bundles" = xfull ; then
 330       AC_MSG_RESULT([full])
 331       SHIP_DEBUG_SYMBOLS=full
 332     else
 333       AC_MSG_RESULT([public])
 334       SHIP_DEBUG_SYMBOLS=public
 335     fi
 336   else
 337     AC_MSG_ERROR([$with_external_symbols_in_bundles is an unknown value for --with-external-symbols-in-bundles])
 338   fi
 339 
 340   AC_SUBST(SHIP_DEBUG_SYMBOLS)
 341 ])
 342 
 343 ################################################################################
 344 #
 345 # Native and Java code coverage
 346 #
 347 AC_DEFUN_ONCE([JDKOPT_SETUP_CODE_COVERAGE],
 348 [
 349   UTIL_ARG_ENABLE(NAME: native-coverage, DEFAULT: false, RESULT: GCOV_ENABLED,
 350       DESC: [enable native compilation with code coverage data],
 351       CHECK_AVAILABLE: [
 352         AC_MSG_CHECKING([if native coverage is available])
 353         if test "x$TOOLCHAIN_TYPE" = "xgcc" ||
 354             test "x$TOOLCHAIN_TYPE" = "xclang"; then
 355           AC_MSG_RESULT([yes])
 356         else
 357           AC_MSG_RESULT([no])
 358           AVAILABLE=false
 359         fi
 360       ],
 361       IF_ENABLED: [
 362         GCOV_CFLAGS="-fprofile-arcs -ftest-coverage -fno-inline"
 363         GCOV_LDFLAGS="-fprofile-arcs"
 364         JVM_CFLAGS="$JVM_CFLAGS $GCOV_CFLAGS"
 365         JVM_LDFLAGS="$JVM_LDFLAGS $GCOV_LDFLAGS"
 366         CFLAGS_JDKLIB="$CFLAGS_JDKLIB $GCOV_CFLAGS"
 367         CFLAGS_JDKEXE="$CFLAGS_JDKEXE $GCOV_CFLAGS"
 368         CXXFLAGS_JDKLIB="$CXXFLAGS_JDKLIB $GCOV_CFLAGS"
 369         CXXFLAGS_JDKEXE="$CXXFLAGS_JDKEXE $GCOV_CFLAGS"
 370         LDFLAGS_JDKLIB="$LDFLAGS_JDKLIB $GCOV_LDFLAGS"
 371         LDFLAGS_JDKEXE="$LDFLAGS_JDKEXE $GCOV_LDFLAGS"
 372         LDFLAGS_STATIC_JDK="$LDFLAGS_STATIC_JDK $GCOV_LDFLAGS"
 373       ])
 374   AC_SUBST(GCOV_ENABLED)
 375 
 376   AC_ARG_WITH(jcov, [AS_HELP_STRING([--with-jcov],
 377       [jcov library location])])
 378   AC_ARG_WITH(jcov-input-jdk, [AS_HELP_STRING([--with-jcov-input-jdk],
 379       [jdk image to instrument])])
 380   AC_ARG_WITH(jcov-filters, [AS_HELP_STRING([--with-jcov-filters],
 381       [filters to limit code for jcov instrumentation and report generation])])
 382   JCOV_HOME=
 383   JCOV_INPUT_JDK=
 384   JCOV_ENABLED=
 385   JCOV_FILTERS=
 386   if test "x$with_jcov" = "x" ; then
 387     JCOV_ENABLED="false"
 388   else
 389     JCOV_HOME="$with_jcov"
 390     if test ! -f "$JCOV_HOME/lib/jcov.jar"; then
 391       AC_MSG_RESULT([fail])
 392       AC_MSG_ERROR([Invalid JCov bundle: "$JCOV_HOME/lib/jcov.jar" does not exist])
 393     fi
 394     JCOV_ENABLED="true"
 395     UTIL_FIXUP_PATH(JCOV_HOME)
 396     if test "x$with_jcov_input_jdk" != "x" ; then
 397       JCOV_INPUT_JDK="$with_jcov_input_jdk"
 398       if test ! -f "$JCOV_INPUT_JDK/bin/java" && test ! -f "$JCOV_INPUT_JDK/bin/java.exe"; then
 399         AC_MSG_RESULT([fail])
 400         AC_MSG_ERROR([Invalid JDK bundle: "$JCOV_INPUT_JDK/bin/java" does not exist])
 401       fi
 402       UTIL_FIXUP_PATH(JCOV_INPUT_JDK)
 403     fi
 404     if test "x$with_jcov_filters" != "x" ; then
 405       JCOV_FILTERS="$with_jcov_filters"
 406     fi
 407   fi
 408   AC_SUBST(JCOV_ENABLED)
 409   AC_SUBST(JCOV_HOME)
 410   AC_SUBST(JCOV_INPUT_JDK)
 411   AC_SUBST(JCOV_FILTERS)
 412 ])
 413 
 414 ################################################################################
 415 #
 416 # AddressSanitizer
 417 #
 418 AC_DEFUN_ONCE([JDKOPT_SETUP_ADDRESS_SANITIZER],
 419 [
 420   UTIL_ARG_ENABLE(NAME: asan, DEFAULT: false, RESULT: ASAN_ENABLED,
 421       DESC: [enable AddressSanitizer],
 422       CHECK_AVAILABLE: [
 423         AC_MSG_CHECKING([if AddressSanitizer (asan) is available])
 424         if test "x$TOOLCHAIN_TYPE" = "xgcc" ||
 425             test "x$TOOLCHAIN_TYPE" = "xclang" ||
 426             test "x$TOOLCHAIN_TYPE" = "xmicrosoft"; then
 427           AC_MSG_RESULT([yes])
 428         else
 429           AC_MSG_RESULT([no])
 430           AVAILABLE=false
 431         fi
 432       ],
 433       IF_ENABLED: [
 434         if test "x$TOOLCHAIN_TYPE" = "xgcc" ||
 435             test "x$TOOLCHAIN_TYPE" = "xclang"; then
 436           # ASan is simply incompatible with gcc -Wstringop-truncation. See
 437           # https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85650
 438           # It's harmless to be suppressed in clang as well.
 439           ASAN_CFLAGS="-fsanitize=address -Wno-stringop-truncation -fno-omit-frame-pointer -fno-common -DADDRESS_SANITIZER"
 440           ASAN_LDFLAGS="-fsanitize=address"
 441           # detect_stack_use_after_return causes ASAN to offload stack-local
 442           # variables to c-heap and therefore breaks assumptions in hotspot
 443           # that rely on data (e.g. Marks) living in thread stacks.
 444           if test "x$TOOLCHAIN_TYPE" = "xgcc"; then
 445             ASAN_CFLAGS="$ASAN_CFLAGS --param asan-use-after-return=0"
 446           fi
 447           if test "x$TOOLCHAIN_TYPE" = "xclang"; then
 448             ASAN_CFLAGS="$ASAN_CFLAGS -fsanitize-address-use-after-return=never"
 449             ASAN_LDFLAGS="$ASAN_LDFLAGS -shared-libasan"
 450           fi
 451         elif test "x$TOOLCHAIN_TYPE" = "xmicrosoft"; then
 452           # -Oy- is equivalent to -fno-omit-frame-pointer in GCC/Clang.
 453           ASAN_CFLAGS="-fsanitize=address -Oy- -DADDRESS_SANITIZER"
 454           # MSVC produces a warning if you pass -fsanitize=address to the linker. It also complains
 455           $ if -DEBUG is not passed to the linker when building with ASan.
 456           ASAN_LDFLAGS="-debug"
 457           # -fsanitize-address-use-after-return is off by default in MS Visual Studio 22 (19.37.32824).
 458           # cl : Command line warning D9002 : ignoring unknown option '-fno-sanitize-address-use-after-return'
 459         fi
 460         JVM_CFLAGS="$JVM_CFLAGS $ASAN_CFLAGS"
 461         JVM_LDFLAGS="$JVM_LDFLAGS $ASAN_LDFLAGS"
 462         CFLAGS_JDKLIB="$CFLAGS_JDKLIB $ASAN_CFLAGS"
 463         CFLAGS_JDKEXE="$CFLAGS_JDKEXE $ASAN_CFLAGS"
 464         CXXFLAGS_JDKLIB="$CXXFLAGS_JDKLIB $ASAN_CFLAGS"
 465         CXXFLAGS_JDKEXE="$CXXFLAGS_JDKEXE $ASAN_CFLAGS"
 466         LDFLAGS_JDKLIB="$LDFLAGS_JDKLIB $ASAN_LDFLAGS"
 467         LDFLAGS_JDKEXE="$LDFLAGS_JDKEXE $ASAN_LDFLAGS"
 468         LDFLAGS_STATIC_JDK="$LDFLAGS_STATIC_JDK $ASAN_LDFLAGS"
 469       ])
 470   AC_SUBST(ASAN_ENABLED)
 471 ])
 472 
 473 ################################################################################
 474 #
 475 # LeakSanitizer
 476 #
 477 AC_DEFUN_ONCE([JDKOPT_SETUP_LEAK_SANITIZER],
 478 [
 479   UTIL_ARG_ENABLE(NAME: lsan, DEFAULT: false, RESULT: LSAN_ENABLED,
 480       DESC: [enable LeakSanitizer],
 481       CHECK_AVAILABLE: [
 482         AC_MSG_CHECKING([if LeakSanitizer (lsan) is available])
 483         if test "x$TOOLCHAIN_TYPE" = "xgcc" ||
 484             test "x$TOOLCHAIN_TYPE" = "xclang"; then
 485           AC_MSG_RESULT([yes])
 486         else
 487           AC_MSG_RESULT([no])
 488           AVAILABLE=false
 489         fi
 490       ],
 491       IF_ENABLED: [
 492         LSAN_CFLAGS="-fsanitize=leak -fno-omit-frame-pointer -DLEAK_SANITIZER"
 493         LSAN_LDFLAGS="-fsanitize=leak"
 494         JVM_CFLAGS="$JVM_CFLAGS $LSAN_CFLAGS"
 495         JVM_LDFLAGS="$JVM_LDFLAGS $LSAN_LDFLAGS"
 496         CFLAGS_JDKLIB="$CFLAGS_JDKLIB $LSAN_CFLAGS"
 497         CFLAGS_JDKEXE="$CFLAGS_JDKEXE $LSAN_CFLAGS"
 498         CXXFLAGS_JDKLIB="$CXXFLAGS_JDKLIB $LSAN_CFLAGS"
 499         CXXFLAGS_JDKEXE="$CXXFLAGS_JDKEXE $LSAN_CFLAGS"
 500         LDFLAGS_JDKLIB="$LDFLAGS_JDKLIB $LSAN_LDFLAGS"
 501         LDFLAGS_JDKEXE="$LDFLAGS_JDKEXE $LSAN_LDFLAGS"
 502         LDFLAGS_STATIC_JDK="$LDFLAGS_STATIC_JDK $LSAN_LDFLAGS"
 503       ])
 504   AC_SUBST(LSAN_ENABLED)
 505 ])
 506 
 507 ################################################################################
 508 #
 509 # UndefinedBehaviorSanitizer
 510 #
 511 AC_DEFUN_ONCE([JDKOPT_SETUP_UNDEFINED_BEHAVIOR_SANITIZER],
 512 [
 513   UTIL_ARG_WITH(NAME: additional-ubsan-checks, TYPE: string,
 514       DEFAULT: [],
 515       DESC: [Customizes the ubsan checks],
 516       OPTIONAL: true)
 517 
 518   # GCC reports lots of likely false positives for stringop-truncation and format-overflow.
 519   # GCC 13 also for array-bounds and stringop-overflow
 520   # Silence them for now.
 521   UBSAN_CHECKS="-fsanitize=undefined -fsanitize=float-divide-by-zero -fno-sanitize=shift-base -fno-sanitize=alignment \
 522       $ADDITIONAL_UBSAN_CHECKS"
 523   UBSAN_CFLAGS="$UBSAN_CHECKS -Wno-stringop-truncation -Wno-format-overflow -Wno-array-bounds -Wno-stringop-overflow -fno-omit-frame-pointer -DUNDEFINED_BEHAVIOR_SANITIZER"
 524   UBSAN_LDFLAGS="$UBSAN_CHECKS"
 525   UTIL_ARG_ENABLE(NAME: ubsan, DEFAULT: false, RESULT: UBSAN_ENABLED,
 526       DESC: [enable UndefinedBehaviorSanitizer],
 527       CHECK_AVAILABLE: [
 528         AC_MSG_CHECKING([if UndefinedBehaviorSanitizer (ubsan) is available])
 529         if test "x$TOOLCHAIN_TYPE" = "xgcc" ||
 530             test "x$TOOLCHAIN_TYPE" = "xclang"; then
 531           AC_MSG_RESULT([yes])
 532         else
 533           AC_MSG_RESULT([no])
 534           AVAILABLE=false
 535         fi
 536       ],
 537       IF_ENABLED: [
 538         JVM_CFLAGS="$JVM_CFLAGS $UBSAN_CFLAGS"
 539         JVM_LDFLAGS="$JVM_LDFLAGS $UBSAN_LDFLAGS"
 540         CFLAGS_JDKLIB="$CFLAGS_JDKLIB $UBSAN_CFLAGS"
 541         CFLAGS_JDKEXE="$CFLAGS_JDKEXE $UBSAN_CFLAGS"
 542         CXXFLAGS_JDKLIB="$CXXFLAGS_JDKLIB $UBSAN_CFLAGS"
 543         CXXFLAGS_JDKEXE="$CXXFLAGS_JDKEXE $UBSAN_CFLAGS"
 544         LDFLAGS_JDKLIB="$LDFLAGS_JDKLIB $UBSAN_LDFLAGS"
 545         LDFLAGS_JDKEXE="$LDFLAGS_JDKEXE $UBSAN_LDFLAGS"
 546         LDFLAGS_STATIC_JDK="$LDFLAGS_STATIC_JDK $UBSAN_LDFLAGS"
 547       ])
 548   if test "x$UBSAN_ENABLED" = xfalse; then
 549     UBSAN_CFLAGS=""
 550     UBSAN_LDFLAGS=""
 551   fi
 552   AC_SUBST(UBSAN_CFLAGS)
 553   AC_SUBST(UBSAN_LDFLAGS)
 554   AC_SUBST(UBSAN_ENABLED)
 555 ])
 556 
 557 ################################################################################
 558 #
 559 # jmod options.
 560 #
 561 AC_DEFUN_ONCE([JDKOPT_SETUP_JMOD_OPTIONS],
 562 [
 563   # Final JMODs are recompiled often during development, and java.base JMOD
 564   # includes the JVM libraries. In release mode, prefer to compress JMODs fully.
 565   # In debug mode, pay with a little extra space, but win a lot of CPU time back
 566   # with the lightest (but still some) compression.
 567   if test "x$DEBUG_LEVEL" = xrelease; then
 568     DEFAULT_JMOD_COMPRESS="zip-6"
 569   else
 570     DEFAULT_JMOD_COMPRESS="zip-1"
 571   fi
 572 
 573   UTIL_ARG_WITH(NAME: jmod-compress, TYPE: literal,
 574     VALID_VALUES: [zip-0 zip-1 zip-2 zip-3 zip-4 zip-5 zip-6 zip-7 zip-8 zip-9],
 575     DEFAULT: $DEFAULT_JMOD_COMPRESS,
 576     CHECKING_MSG: [for JMOD compression type],
 577     DESC: [specify JMOD compression type (zip-[0-9])]
 578   )
 579   AC_SUBST(JMOD_COMPRESS)
 580 ])
 581 
 582 ################################################################################
 583 #
 584 # jlink options.
 585 #
 586 AC_DEFUN_ONCE([JDKOPT_SETUP_JLINK_OPTIONS],
 587 [
 588 
 589   ################################################################################
 590   #
 591   # Configure option for building a JDK that is suitable for linking from the
 592   # run-time image without JMODs.
 593   #
 594   # Determines whether or not a suitable run-time image is being produced from
 595   # packaged modules. If set to 'true, changes the *default* of packaged
 596   # modules to 'false'.
 597   #
 598   UTIL_ARG_ENABLE(NAME: linkable-runtime, DEFAULT: false,
 599       RESULT: JLINK_PRODUCE_LINKABLE_RUNTIME,
 600       DESC: [enable a JDK build suitable for linking from the run-time image],
 601       CHECKING_MSG: [whether or not a JDK suitable for linking from the run-time image should be produced])
 602   AC_SUBST(JLINK_PRODUCE_LINKABLE_RUNTIME)
 603 
 604   if test "x$JLINK_PRODUCE_LINKABLE_RUNTIME" = xtrue; then
 605     DEFAULT_PACKAGED_MODULES=false
 606   else
 607     DEFAULT_PACKAGED_MODULES=true
 608   fi
 609 
 610   ################################################################################
 611   #
 612   # Configure option for packaged modules
 613   #
 614   # We keep packaged modules in the JDK image unless --enable-linkable-runtime is
 615   # requested.
 616   #
 617   UTIL_ARG_ENABLE(NAME: keep-packaged-modules, DEFAULT: $DEFAULT_PACKAGED_MODULES,
 618       RESULT: JLINK_KEEP_PACKAGED_MODULES,
 619       DESC: [enable keeping of packaged modules in jdk image],
 620       DEFAULT_DESC: [enabled by default unless --enable-linkable-runtime is set],
 621       CHECKING_MSG: [if packaged modules are kept])
 622   AC_SUBST(JLINK_KEEP_PACKAGED_MODULES)
 623 
 624   ################################################################################
 625   #
 626   # Extra jlink options to be (optionally) passed to the JDK build
 627   #
 628   UTIL_ARG_WITH(NAME: extra-jlink-flags, TYPE: string,
 629       DEFAULT: [],
 630       DESC: [extra flags to be passed to jlink during the build],
 631       OPTIONAL: true)
 632 
 633   JLINK_USER_EXTRA_FLAGS="$EXTRA_JLINK_FLAGS"
 634   AC_SUBST(JLINK_USER_EXTRA_FLAGS)
 635 ])
 636 
 637 ################################################################################
 638 #
 639 # Enable or disable generation of the classlist at build time
 640 #
 641 AC_DEFUN_ONCE([JDKOPT_ENABLE_DISABLE_GENERATE_CLASSLIST],
 642 [
 643   # In GenerateLinkOptData.gmk, DumpLoadedClassList is used to generate the
 644   # classlist file. It never will work if CDS is disabled, since the VM will report
 645   # an error for DumpLoadedClassList.
 646   UTIL_ARG_ENABLE(NAME: generate-classlist, DEFAULT: auto,
 647       RESULT: ENABLE_GENERATE_CLASSLIST, AVAILABLE: $ENABLE_CDS,
 648       DESC: [enable generation of a CDS classlist at build time],
 649       DEFAULT_DESC: [enabled if the JVM feature 'cds' is enabled for all JVM variants],
 650       CHECKING_MSG: [if the CDS classlist generation should be enabled])
 651   AC_SUBST(ENABLE_GENERATE_CLASSLIST)
 652 ])
 653 
 654 ################################################################################
 655 #
 656 # Optionally filter resource translations
 657 #
 658 AC_DEFUN([JDKOPT_EXCLUDE_TRANSLATIONS],
 659 [
 660   AC_ARG_WITH([exclude-translations], [AS_HELP_STRING([--with-exclude-translations],
 661       [a comma separated list of locales to exclude translations for. Default is
 662       to include all translations present in the source.])])
 663 
 664   EXCLUDE_TRANSLATIONS=""
 665   AC_MSG_CHECKING([if any translations should be excluded])
 666   if test "x$with_exclude_translations" != "x"; then
 667     EXCLUDE_TRANSLATIONS="${with_exclude_translations//,/ }"
 668     AC_MSG_RESULT([yes: $EXCLUDE_TRANSLATIONS])
 669   else
 670     AC_MSG_RESULT([no])
 671   fi
 672 
 673   AC_SUBST(EXCLUDE_TRANSLATIONS)
 674 ])
 675 
 676 ################################################################################
 677 #
 678 # Disable the default CDS archive generation
 679 #
 680 AC_DEFUN([JDKOPT_ENABLE_DISABLE_CDS_ARCHIVE],
 681 [
 682   UTIL_ARG_ENABLE(NAME: cds-archive, DEFAULT: auto, RESULT: BUILD_CDS_ARCHIVE,
 683       DESC: [enable generation of a default CDS archive in the product image],
 684       DEFAULT_DESC: [enabled if possible],
 685       CHECKING_MSG: [if a default CDS archive should be generated],
 686       CHECK_AVAILABLE: [
 687         AC_MSG_CHECKING([if CDS archive is available])
 688         if test "x$ENABLE_CDS" = "xfalse"; then
 689           AC_MSG_RESULT([no (CDS is disabled)])
 690           AVAILABLE=false
 691         elif test "x$COMPILE_TYPE" = "xcross"; then
 692           AC_MSG_RESULT([no (not possible with cross compilation)])
 693           AVAILABLE=false
 694         else
 695           AC_MSG_RESULT([yes])
 696         fi
 697       ])
 698   AC_SUBST(BUILD_CDS_ARCHIVE)
 699 ])
 700 
 701 ################################################################################
 702 #
 703 # Enable or disable the default CDS archive generation for Compact Object Headers
 704 #
 705 AC_DEFUN([JDKOPT_ENABLE_DISABLE_CDS_ARCHIVE_COH],
 706 [
 707   UTIL_ARG_ENABLE(NAME: cds-archive-coh, DEFAULT: auto, RESULT: BUILD_CDS_ARCHIVE_COH,
 708       DESC: [enable generation of default CDS archives for compact object headers (requires --enable-cds-archive)],
 709       DEFAULT_DESC: [auto],
 710       CHECKING_MSG: [if default CDS archives for compact object headers should be generated],
 711       CHECK_AVAILABLE: [
 712         AC_MSG_CHECKING([if CDS archive with compact object headers is available])
 713         if test "x$BUILD_CDS_ARCHIVE" = "xfalse"; then
 714           AC_MSG_RESULT([no (CDS default archive generation is disabled)])
 715           AVAILABLE=false
 716         elif test "x$OPENJDK_TARGET_CPU" != "xx86_64" &&
 717              test "x$OPENJDK_TARGET_CPU" != "xaarch64" &&
 718              test "x$OPENJDK_TARGET_CPU" != "xppc64" &&
 719              test "x$OPENJDK_TARGET_CPU" != "xppc64le" &&
 720              test "x$OPENJDK_TARGET_CPU" != "xriscv64" &&
 721              test "x$OPENJDK_TARGET_CPU" != "xs390x"; then
 722           AC_MSG_RESULT([no (compact object headers not supported for this platform)])
 723           AVAILABLE=false
 724         else
 725           AC_MSG_RESULT([yes])
 726           AVAILABLE=true
 727         fi
 728       ])
 729   AC_SUBST(BUILD_CDS_ARCHIVE_COH)
 730 ])
 731 
 732 ################################################################################
 733 #
 734 # Enable the alternative CDS core region alignment
 735 #
 736 AC_DEFUN([JDKOPT_ENABLE_DISABLE_COMPATIBLE_CDS_ALIGNMENT],
 737 [
 738   UTIL_ARG_ENABLE(NAME: compatible-cds-alignment, DEFAULT: $COMPATIBLE_CDS_ALIGNMENT_DEFAULT,
 739       RESULT: ENABLE_COMPATIBLE_CDS_ALIGNMENT,
 740       DESC: [enable use alternative compatible cds core region alignment],
 741       DEFAULT_DESC: [disabled except on linux-aarch64],
 742       CHECKING_MSG: [if compatible cds region alignment enabled],
 743       CHECK_AVAILABLE: [
 744         AC_MSG_CHECKING([if CDS archive is available])
 745         if test "x$ENABLE_CDS" = "xfalse"; then
 746           AVAILABLE=false
 747           AC_MSG_RESULT([no (CDS is disabled)])
 748         else
 749           AVAILABLE=true
 750           AC_MSG_RESULT([yes])
 751         fi
 752       ])
 753   AC_SUBST(ENABLE_COMPATIBLE_CDS_ALIGNMENT)
 754 ])
 755 
 756 ################################################################################
 757 #
 758 # Disallow any output from containing absolute paths from the build system.
 759 # This setting defaults to allowed on debug builds and not allowed on release
 760 # builds.
 761 #
 762 AC_DEFUN([JDKOPT_ALLOW_ABSOLUTE_PATHS_IN_OUTPUT],
 763 [
 764   AC_ARG_ENABLE([absolute-paths-in-output],
 765       [AS_HELP_STRING([--disable-absolute-paths-in-output],
 766       [Set to disable to prevent any absolute paths from the build to end up in
 767       any of the build output. @<:@disabled in release builds, otherwise enabled@:>@])])
 768 
 769   AC_MSG_CHECKING([if absolute paths should be allowed in the build output])
 770   if test "x$enable_absolute_paths_in_output" = "xno"; then
 771     AC_MSG_RESULT([no, forced])
 772     ALLOW_ABSOLUTE_PATHS_IN_OUTPUT="false"
 773   elif test "x$enable_absolute_paths_in_output" = "xyes"; then
 774     AC_MSG_RESULT([yes, forced])
 775     ALLOW_ABSOLUTE_PATHS_IN_OUTPUT="true"
 776   elif test "x$DEBUG_LEVEL" = "xrelease"; then
 777     AC_MSG_RESULT([no, release build])
 778     ALLOW_ABSOLUTE_PATHS_IN_OUTPUT="false"
 779   else
 780     AC_MSG_RESULT([yes, debug build])
 781     ALLOW_ABSOLUTE_PATHS_IN_OUTPUT="true"
 782   fi
 783 
 784   AC_SUBST(ALLOW_ABSOLUTE_PATHS_IN_OUTPUT)
 785 ])
 786 
 787 ################################################################################
 788 #
 789 # Check and set options related to reproducible builds.
 790 #
 791 AC_DEFUN_ONCE([JDKOPT_SETUP_REPRODUCIBLE_BUILD],
 792 [
 793   AC_ARG_WITH([source-date], [AS_HELP_STRING([--with-source-date],
 794       [how to set SOURCE_DATE_EPOCH ('updated', 'current', 'version' a timestamp or an ISO-8601 date) @<:@current/value of SOURCE_DATE_EPOCH@:>@])],
 795       [with_source_date_present=true], [with_source_date_present=false])
 796 
 797   if test "x$SOURCE_DATE_EPOCH" != x && test "x$with_source_date" != x; then
 798     AC_MSG_WARN([--with-source-date will override SOURCE_DATE_EPOCH])
 799   fi
 800 
 801   AC_MSG_CHECKING([what source date to use])
 802 
 803   if test "x$with_source_date" = xyes; then
 804     AC_MSG_ERROR([--with-source-date must have a value])
 805   elif test "x$with_source_date" = x; then
 806     if test "x$SOURCE_DATE_EPOCH" != x; then
 807       SOURCE_DATE=$SOURCE_DATE_EPOCH
 808       with_source_date_present=true
 809       AC_MSG_RESULT([$SOURCE_DATE, from SOURCE_DATE_EPOCH])
 810     else
 811       # Tell makefiles to take the time from configure
 812       SOURCE_DATE=$($DATE +"%s")
 813       AC_MSG_RESULT([$SOURCE_DATE, from 'current' (default)])
 814     fi
 815   elif test "x$with_source_date" = xupdated; then
 816     SOURCE_DATE=updated
 817     AC_MSG_RESULT([determined at build time, from 'updated'])
 818   elif test "x$with_source_date" = xcurrent; then
 819     # Set the current time
 820     SOURCE_DATE=$($DATE +"%s")
 821     AC_MSG_RESULT([$SOURCE_DATE, from 'current'])
 822   elif test "x$with_source_date" = xversion; then
 823     # Use the date from version-numbers.conf
 824     UTIL_GET_EPOCH_TIMESTAMP(SOURCE_DATE, $DEFAULT_VERSION_DATE)
 825     if test "x$SOURCE_DATE" = x; then
 826       AC_MSG_RESULT([unavailable])
 827       AC_MSG_ERROR([Cannot convert DEFAULT_VERSION_DATE to timestamp])
 828     fi
 829     AC_MSG_RESULT([$SOURCE_DATE, from 'version'])
 830   else
 831     # It's a timestamp, an ISO-8601 date, or an invalid string
 832     # Additional [] needed to keep m4 from mangling shell constructs.
 833     if [ [[ "$with_source_date" =~ ^[0-9][0-9]*$ ]] ] ; then
 834       SOURCE_DATE=$with_source_date
 835       AC_MSG_RESULT([$SOURCE_DATE, from timestamp on command line])
 836     else
 837       UTIL_GET_EPOCH_TIMESTAMP(SOURCE_DATE, $with_source_date)
 838       if test "x$SOURCE_DATE" != x; then
 839         AC_MSG_RESULT([$SOURCE_DATE, from ISO-8601 date on command line])
 840       else
 841         AC_MSG_RESULT([unavailable])
 842         AC_MSG_ERROR([Cannot parse date string "$with_source_date"])
 843       fi
 844     fi
 845   fi
 846 
 847   ISO_8601_FORMAT_STRING="%Y-%m-%dT%H:%M:%SZ"
 848   if test "x$SOURCE_DATE" != xupdated; then
 849     # If we have a fixed value for SOURCE_DATE, we need to set SOURCE_DATE_EPOCH
 850     # for the rest of configure.
 851     SOURCE_DATE_EPOCH="$SOURCE_DATE"
 852     if test "x$IS_GNU_DATE" = xyes; then
 853       SOURCE_DATE_ISO_8601=`$DATE --utc --date="@$SOURCE_DATE" +"$ISO_8601_FORMAT_STRING" 2> /dev/null`
 854     else
 855       SOURCE_DATE_ISO_8601=`$DATE -u -j -f "%s" "$SOURCE_DATE" +"$ISO_8601_FORMAT_STRING" 2> /dev/null`
 856     fi
 857   fi
 858 
 859   AC_SUBST(SOURCE_DATE)
 860   AC_SUBST(ISO_8601_FORMAT_STRING)
 861   AC_SUBST(SOURCE_DATE_ISO_8601)
 862 ])
 863 
 864 ################################################################################
 865 #
 866 # Setup signing on macOS. This can either be setup to sign with a real identity
 867 # and enabling the hardened runtime, or it can simply add the debug entitlement
 868 # com.apple.security.get-task-allow without actually signing any binaries. The
 869 # latter is needed to be able to debug processes and dump core files on modern
 870 # versions of macOS. It can also be skipped completely.
 871 #
 872 # Check if codesign will run with the given parameters
 873 # $1: Parameters to run with
 874 # $2: Checking message
 875 # Sets CODESIGN_SUCCESS=true/false
 876 AC_DEFUN([JDKOPT_CHECK_CODESIGN_PARAMS],
 877 [
 878   PARAMS="$1"
 879   MESSAGE="$2"
 880   CODESIGN_TESTFILE="$CONFIGURESUPPORT_OUTPUTDIR/codesign-testfile"
 881   $RM "$CODESIGN_TESTFILE"
 882   $TOUCH "$CODESIGN_TESTFILE"
 883   CODESIGN_SUCCESS=false
 884 
 885   $ECHO "check codesign, calling $CODESIGN $PARAMS $CODESIGN_TESTFILE" >&AS_MESSAGE_LOG_FD
 886 
 887   eval \"$CODESIGN\" $PARAMS \"$CODESIGN_TESTFILE\" 2>&AS_MESSAGE_LOG_FD \
 888       >&AS_MESSAGE_LOG_FD && CODESIGN_SUCCESS=true
 889   $RM "$CODESIGN_TESTFILE"
 890   AC_MSG_CHECKING([$MESSAGE])
 891   if test "x$CODESIGN_SUCCESS" = "xtrue"; then
 892     AC_MSG_RESULT([yes])
 893   else
 894     AC_MSG_RESULT([no])
 895   fi
 896 ])
 897 
 898 AC_DEFUN([JDKOPT_CHECK_CODESIGN_HARDENED],
 899 [
 900   JDKOPT_CHECK_CODESIGN_PARAMS([-s \"$MACOSX_CODESIGN_IDENTITY\" --option runtime],
 901       [if codesign with hardened runtime is possible])
 902 ])
 903 
 904 AC_DEFUN([JDKOPT_CHECK_CODESIGN_DEBUG],
 905 [
 906   JDKOPT_CHECK_CODESIGN_PARAMS([-s -], [if debug mode codesign is possible])
 907 ])
 908 
 909 AC_DEFUN([JDKOPT_SETUP_MACOSX_SIGNING],
 910 [
 911   MACOSX_CODESIGN_MODE=disabled
 912   if test "x$OPENJDK_TARGET_OS" = "xmacosx" && test "x$CODESIGN" != "x"; then
 913 
 914     UTIL_ARG_WITH(NAME: macosx-codesign, TYPE: literal, OPTIONAL: true,
 915         VALID_VALUES: [hardened debug auto], DEFAULT: auto,
 916         ENABLED_DEFAULT: true,
 917         CHECKING_MSG: [for macosx code signing mode],
 918         DESC: [set the macosx code signing mode (hardened, debug, auto)]
 919     )
 920 
 921     if test "x$MACOSX_CODESIGN_ENABLED" = "xtrue"; then
 922 
 923       # Check for user provided code signing identity.
 924       UTIL_ARG_WITH(NAME: macosx-codesign-identity, TYPE: string,
 925           DEFAULT: openjdk_codesign, CHECK_VALUE: [UTIL_CHECK_STRING_NON_EMPTY],
 926           DESC: [specify the macosx code signing identity],
 927           CHECKING_MSG: [for macosx code signing identity]
 928       )
 929       AC_SUBST(MACOSX_CODESIGN_IDENTITY)
 930 
 931       if test "x$MACOSX_CODESIGN" = "xauto"; then
 932         # Only try to default to hardened signing on release builds
 933         if test "x$DEBUG_LEVEL" = "xrelease"; then
 934           JDKOPT_CHECK_CODESIGN_HARDENED
 935           if test "x$CODESIGN_SUCCESS" = "xtrue"; then
 936             MACOSX_CODESIGN_MODE=hardened
 937           fi
 938         fi
 939         if test "x$MACOSX_CODESIGN_MODE" = "xdisabled"; then
 940           JDKOPT_CHECK_CODESIGN_DEBUG
 941           if test "x$CODESIGN_SUCCESS" = "xtrue"; then
 942             MACOSX_CODESIGN_MODE=debug
 943           fi
 944         fi
 945         AC_MSG_CHECKING([for macosx code signing mode])
 946         AC_MSG_RESULT([$MACOSX_CODESIGN_MODE])
 947       elif test "x$MACOSX_CODESIGN" = "xhardened"; then
 948         JDKOPT_CHECK_CODESIGN_HARDENED
 949         if test "x$CODESIGN_SUCCESS" = "xfalse"; then
 950           AC_MSG_ERROR([Signing with hardened runtime is not possible])
 951         fi
 952         MACOSX_CODESIGN_MODE=hardened
 953       elif test "x$MACOSX_CODESIGN" = "xdebug"; then
 954         JDKOPT_CHECK_CODESIGN_DEBUG
 955         if test "x$CODESIGN_SUCCESS" = "xfalse"; then
 956           AC_MSG_ERROR([Signing in debug mode is not possible])
 957         fi
 958         MACOSX_CODESIGN_MODE=debug
 959       else
 960         AC_MSG_ERROR([unknown value for --with-macosx-codesign: $MACOSX_CODESIGN])
 961       fi
 962     fi
 963   fi
 964   AC_SUBST(MACOSX_CODESIGN_IDENTITY)
 965   AC_SUBST(MACOSX_CODESIGN_MODE)
 966 ])
 967 
 968 ################################################################################
 969 #
 970 # Setup a hook to invoke a script that runs for file produced by the native
 971 # compilation steps, after linking.
 972 # Parameter is the path to the script to be called.
 973 #
 974 AC_DEFUN([JDKOPT_SETUP_SIGNING_HOOK],
 975 [
 976   UTIL_ARG_WITH(NAME: signing-hook, TYPE: executable,
 977       OPTIONAL: true, DEFAULT: "",
 978       DESC: [specify path to script used to code sign native binaries]
 979   )
 980 
 981   AC_MSG_CHECKING([for signing hook])
 982   if test "x$SIGNING_HOOK" != x; then
 983     UTIL_FIXUP_EXECUTABLE(SIGNING_HOOK)
 984     AC_MSG_RESULT([$SIGNING_HOOK])
 985   else
 986     AC_MSG_RESULT([none])
 987   fi
 988   AC_SUBST(SIGNING_HOOK)
 989 ])
 990 
 991 ################################################################################
 992 #
 993 # fallback linker
 994 #
 995 AC_DEFUN_ONCE([JDKOPT_SETUP_FALLBACK_LINKER],
 996 [
 997   FALLBACK_LINKER_DEFAULT=false
 998 
 999   if HOTSPOT_CHECK_JVM_VARIANT(zero); then
1000     FALLBACK_LINKER_DEFAULT=true
1001   fi
1002 
1003   UTIL_ARG_ENABLE(NAME: fallback-linker, DEFAULT: $FALLBACK_LINKER_DEFAULT,
1004       RESULT: ENABLE_FALLBACK_LINKER,
1005       DESC: [enable libffi-based fallback implementation of java.lang.foreign.Linker],
1006       CHECKING_MSG: [if fallback linker enabled])
1007   AC_SUBST(ENABLE_FALLBACK_LINKER)
1008 ])