1 #
  2 # Copyright (c) 2011, 2025, Oracle and/or its affiliates. All rights reserved.
  3 # DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
  4 #
  5 # This code is free software; you can redistribute it and/or modify it
  6 # under the terms of the GNU General Public License version 2 only, as
  7 # published by the Free Software Foundation.  Oracle designates this
  8 # particular file as subject to the "Classpath" exception as provided
  9 # by Oracle in the LICENSE file that accompanied this code.
 10 #
 11 # This code is distributed in the hope that it will be useful, but WITHOUT
 12 # ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 13 # FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
 14 # version 2 for more details (a copy is included in the LICENSE file that
 15 # accompanied this code).
 16 #
 17 # You should have received a copy of the GNU General Public License version
 18 # 2 along with this work; if not, write to the Free Software Foundation,
 19 # Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
 20 #
 21 # Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
 22 # or visit www.oracle.com if you need additional information or have any
 23 # questions.
 24 #
 25 
 26 ################################################################################
 27 # Set the debug level
 28 #    release: no debug information, all optimizations, no asserts.
 29 #    optimized: no debug information, all optimizations, no asserts, HotSpot target is 'optimized'.
 30 #    fastdebug: debug information (-g), all optimizations, all asserts
 31 #    slowdebug: debug information (-g), no optimizations, all asserts
 32 AC_DEFUN_ONCE([JDKOPT_SETUP_DEBUG_LEVEL],
 33 [
 34   DEBUG_LEVEL="release"
 35 
 36   UTIL_ARG_ENABLE(NAME: debug, DEFAULT: false, RESULT: ENABLE_DEBUG,
 37       DESC: [enable debugging (shorthand for --with-debug-level=fastdebug)],
 38       IF_ENABLED: [ DEBUG_LEVEL="fastdebug" ])
 39 
 40   AC_MSG_CHECKING([which debug level to use])
 41   AC_ARG_WITH([debug-level], [AS_HELP_STRING([--with-debug-level],
 42       [set the debug level (release, fastdebug, slowdebug, optimized) @<:@release@:>@])],
 43       [
 44         DEBUG_LEVEL="${withval}"
 45         if test "x$ENABLE_DEBUG" = xtrue; then
 46           AC_MSG_ERROR([You cannot use both --enable-debug and --with-debug-level at the same time.])
 47         fi
 48       ])
 49   AC_MSG_RESULT([$DEBUG_LEVEL])
 50 
 51   if test "x$DEBUG_LEVEL" != xrelease && \
 52       test "x$DEBUG_LEVEL" != xoptimized && \
 53       test "x$DEBUG_LEVEL" != xfastdebug && \
 54       test "x$DEBUG_LEVEL" != xslowdebug; then
 55     AC_MSG_ERROR([Allowed debug levels are: release, fastdebug, slowdebug and optimized])
 56   fi
 57 
 58   # Translate DEBUG_LEVEL to debug level used by Hotspot
 59   HOTSPOT_DEBUG_LEVEL="$DEBUG_LEVEL"
 60   if test "x$DEBUG_LEVEL" = xrelease; then
 61     HOTSPOT_DEBUG_LEVEL="product"
 62   elif test "x$DEBUG_LEVEL" = xslowdebug; then
 63     HOTSPOT_DEBUG_LEVEL="debug"
 64   fi
 65 
 66   if test "x$DEBUG_LEVEL" = xoptimized; then
 67     # The debug level 'optimized' is a little special because it is currently only
 68     # applicable to the HotSpot build where it means to build a completely
 69     # optimized version of the VM without any debugging code (like for the
 70     # 'release' debug level which is called 'product' in the HotSpot build) but
 71     # with the exception that it can contain additional code which is otherwise
 72     # protected by '#ifndef PRODUCT' macros. These 'optimized' builds are used to
 73     # test new and/or experimental features which are not intended for customer
 74     # shipment. Because these new features need to be tested and benchmarked in
 75     # real world scenarios, we want to build the containing JDK at the 'release'
 76     # debug level.
 77     DEBUG_LEVEL="release"
 78   fi
 79 
 80   AC_SUBST(HOTSPOT_DEBUG_LEVEL)
 81   AC_SUBST(DEBUG_LEVEL)
 82 ])
 83 
 84 ################################################################################
 85 #
 86 # Should we build only OpenJDK even if closed sources are present?
 87 #
 88 AC_DEFUN_ONCE([JDKOPT_SETUP_OPEN_OR_CUSTOM],
 89 [
 90   UTIL_ARG_ENABLE(NAME: openjdk-only, DEFAULT: false,
 91       RESULT: SUPPRESS_CUSTOM_EXTENSIONS,
 92       DESC: [suppress building custom source even if present],
 93       CHECKING_MSG: [if custom source is suppressed (openjdk-only)])
 94 ])
 95 
 96 AC_DEFUN_ONCE([JDKOPT_SETUP_JDK_OPTIONS],
 97 [
 98   # Should we build a JDK without a graphical UI?
 99   UTIL_ARG_ENABLE(NAME: headless-only, DEFAULT: false,
100       RESULT: ENABLE_HEADLESS_ONLY,
101       DESC: [only build headless (no GUI) support],
102       CHECKING_MSG: [if we should build headless-only (no GUI)])
103   AC_SUBST(ENABLE_HEADLESS_ONLY)
104 
105   # should we linktime gc unused code sections in the JDK build ?
106   if test "x$OPENJDK_TARGET_OS" = "xlinux" && test "x$OPENJDK_TARGET_CPU" = xs390x; then
107     LINKTIME_GC_DEFAULT=true
108   else
109     LINKTIME_GC_DEFAULT=false
110   fi
111 
112   UTIL_ARG_ENABLE(NAME: linktime-gc, DEFAULT: $LINKTIME_GC_DEFAULT,
113       DEFAULT_DESC: [auto], RESULT: ENABLE_LINKTIME_GC,
114       DESC: [use link time gc on unused code sections in the JDK build],
115       CHECKING_MSG: [if linker should clean out unused code (linktime-gc)])
116   AC_SUBST(ENABLE_LINKTIME_GC)
117 
118   # Check for full doc dependencies
119   FULL_DOCS_AVAILABLE=true
120   AC_MSG_CHECKING([for graphviz dot])
121   if test "x$DOT" != "x"; then
122     AC_MSG_RESULT([yes])
123   else
124     AC_MSG_RESULT([no, cannot generate full docs or man pages])
125     FULL_DOCS_AVAILABLE=false
126   fi
127 
128   AC_MSG_CHECKING([for pandoc])
129   if test "x$ENABLE_PANDOC" = "xtrue"; then
130     AC_MSG_RESULT([yes])
131   else
132     AC_MSG_RESULT([no, cannot generate full docs or man pages])
133     FULL_DOCS_AVAILABLE=false
134   fi
135 
136   # Should we build the complete docs, or just a lightweight version?
137   UTIL_ARG_ENABLE(NAME: full-docs, DEFAULT: auto, RESULT: ENABLE_FULL_DOCS,
138       AVAILABLE: $FULL_DOCS_AVAILABLE, DESC: [build complete documentation],
139       DEFAULT_DESC: [enabled if all tools found])
140   AC_SUBST(ENABLE_FULL_DOCS)
141 
142   # Choose cacerts source file
143   AC_ARG_WITH(cacerts-file, [AS_HELP_STRING([--with-cacerts-file],
144       [specify alternative cacerts file])])
145   AC_MSG_CHECKING([for cacerts file])
146   if test "x$with_cacerts_file" == x; then
147     AC_MSG_RESULT([default])
148   else
149     CACERTS_FILE=$with_cacerts_file
150     if test ! -f "$CACERTS_FILE"; then
151       AC_MSG_RESULT([fail])
152       AC_MSG_ERROR([Specified cacerts file "$CACERTS_FILE" does not exist])
153     fi
154     AC_MSG_RESULT([$CACERTS_FILE])
155   fi
156   AC_SUBST(CACERTS_FILE)
157 
158   # Choose cacerts source folder for user provided PEM files
159   AC_ARG_WITH(cacerts-src, [AS_HELP_STRING([--with-cacerts-src],
160       [specify alternative cacerts source folder containing certificates])])
161   CACERTS_SRC=""
162   AC_MSG_CHECKING([for cacerts source])
163   if test "x$with_cacerts_src" == x; then
164     AC_MSG_RESULT([default])
165   else
166     CACERTS_SRC=$with_cacerts_src
167     if test ! -d "$CACERTS_SRC"; then
168       AC_MSG_RESULT([fail])
169       AC_MSG_ERROR([Specified cacerts source folder "$CACERTS_SRC" does not exist])
170     fi
171     AC_MSG_RESULT([$CACERTS_SRC])
172   fi
173   AC_SUBST(CACERTS_SRC)
174 
175   # Enable or disable unlimited crypto
176   UTIL_ARG_ENABLE(NAME: unlimited-crypto, DEFAULT: true, RESULT: UNLIMITED_CRYPTO,
177       DESC: [enable unlimited crypto policy])
178   AC_SUBST(UNLIMITED_CRYPTO)
179 
180   # Should we build the serviceability agent (SA)?
181   INCLUDE_SA=true
182   if HOTSPOT_CHECK_JVM_VARIANT(zero); then
183     INCLUDE_SA=false
184   fi
185   if test "x$OPENJDK_TARGET_OS" = xaix ; then
186     INCLUDE_SA=false
187   fi
188   if test "x$OPENJDK_TARGET_CPU" = xs390x ; then
189     INCLUDE_SA=false
190   fi
191   AC_SUBST(INCLUDE_SA)
192 
193   # Setup default CDS alignment. On platforms where one build may run on machines with different
194   # page sizes, the JVM choses a compatible alignment to fit all possible page sizes. This slightly
195   # increases archive size.
196   # The only platform having this problem at the moment is Linux on aarch64, which may encounter
197   # three different page sizes: 4K, 64K, and if run on Mac m1 hardware, 16K.
198   COMPATIBLE_CDS_ALIGNMENT_DEFAULT=false
199   if test "x$OPENJDK_TARGET_OS" = "xlinux" && test "x$OPENJDK_TARGET_CPU" = "xaarch64"; then
200     COMPATIBLE_CDS_ALIGNMENT_DEFAULT=auto
201   fi
202 
203   # Compress jars
204   COMPRESS_JARS=false
205 
206   AC_SUBST(COMPRESS_JARS)
207 
208   # Setup default copyright year. Mostly overridden when building close to a new year.
209   AC_ARG_WITH(copyright-year, [AS_HELP_STRING([--with-copyright-year],
210       [Set copyright year value for build @<:@current year/source-date@:>@])])
211   if test "x$with_copyright_year" = xyes; then
212     AC_MSG_ERROR([Copyright year must have a value])
213   elif test "x$with_copyright_year" != x; then
214     COPYRIGHT_YEAR="$with_copyright_year"
215   elif test "x$SOURCE_DATE" != xupdated; then
216     if test "x$IS_GNU_DATE" = xyes; then
217       COPYRIGHT_YEAR=`$DATE --date=@$SOURCE_DATE +%Y`
218     else
219       COPYRIGHT_YEAR=`$DATE -j -f %s $SOURCE_DATE +%Y`
220     fi
221   else
222     COPYRIGHT_YEAR=`$DATE +'%Y'`
223   fi
224   AC_SUBST(COPYRIGHT_YEAR)
225 
226   # Override default library path
227   AC_ARG_WITH([jni-libpath], [AS_HELP_STRING([--with-jni-libpath],
228       [override default JNI library search path])])
229   AC_MSG_CHECKING([for jni library path])
230   if test "x${with_jni_libpath}" = "x" || test "x${with_jni_libpath}" = "xno"; then
231     AC_MSG_RESULT([default])
232   elif test "x${with_jni_libpath}" = "xyes"; then
233     AC_MSG_RESULT([invalid])
234     AC_MSG_ERROR([The --with-jni-libpath option requires an argument.])
235   else
236     HOTSPOT_OVERRIDE_LIBPATH=${with_jni_libpath}
237     if test "x$OPENJDK_TARGET_OS" != "xlinux" &&
238         test "x$OPENJDK_TARGET_OS" != "xbsd" &&
239         test "x$OPENJDK_TARGET_OS" != "xaix"; then
240       AC_MSG_RESULT([fail])
241       AC_MSG_ERROR([Overriding JNI library path is supported only on Linux, BSD and AIX.])
242     fi
243     AC_MSG_RESULT(${HOTSPOT_OVERRIDE_LIBPATH})
244   fi
245   AC_SUBST(HOTSPOT_OVERRIDE_LIBPATH)
246 
247 ])
248 
249 ################################################################################
250 
251 AC_DEFUN_ONCE([JDKOPT_SETUP_DEBUG_SYMBOLS],
252 [
253   #
254   # Native debug symbols.
255   # This must be done after the toolchain is setup, since we're looking at objcopy.
256   #
257   AC_MSG_CHECKING([what type of native debug symbols to use])
258   AC_ARG_WITH([native-debug-symbols],
259       [AS_HELP_STRING([--with-native-debug-symbols],
260       [set the native debug symbol configuration (none, internal, external, zipped) @<:@varying@:>@])],
261       [
262         if test "x$OPENJDK_TARGET_OS" = xwindows; then
263           if test "x$withval" = xinternal; then
264             AC_MSG_ERROR([Windows does not support the parameter 'internal' for --with-native-debug-symbols])
265           fi
266         fi
267       ],
268       [
269         with_native_debug_symbols="external"
270       ])
271   AC_MSG_RESULT([$with_native_debug_symbols])
272 
273   if test "x$with_native_debug_symbols" = xnone; then
274     COMPILE_WITH_DEBUG_SYMBOLS=false
275     COPY_DEBUG_SYMBOLS=false
276     ZIP_EXTERNAL_DEBUG_SYMBOLS=false
277   elif test "x$with_native_debug_symbols" = xinternal; then
278     COMPILE_WITH_DEBUG_SYMBOLS=true
279     COPY_DEBUG_SYMBOLS=false
280     ZIP_EXTERNAL_DEBUG_SYMBOLS=false
281   elif test "x$with_native_debug_symbols" = xexternal; then
282 
283     if test "x$OPENJDK_TARGET_OS" = xlinux; then
284       if test "x$OBJCOPY" = x; then
285         # enabling of enable-debug-symbols and can't find objcopy
286         # this is an error
287         AC_MSG_ERROR([Unable to find objcopy, cannot enable native debug symbols])
288       fi
289     fi
290 
291     COMPILE_WITH_DEBUG_SYMBOLS=true
292     COPY_DEBUG_SYMBOLS=true
293     ZIP_EXTERNAL_DEBUG_SYMBOLS=false
294   elif test "x$with_native_debug_symbols" = xzipped; then
295 
296     if test "x$OPENJDK_TARGET_OS" = xlinux; then
297       if test "x$OBJCOPY" = x; then
298         # enabling of enable-debug-symbols and can't find objcopy
299         # this is an error
300         AC_MSG_ERROR([Unable to find objcopy, cannot enable native debug symbols])
301       fi
302     fi
303 
304     COMPILE_WITH_DEBUG_SYMBOLS=true
305     COPY_DEBUG_SYMBOLS=true
306     ZIP_EXTERNAL_DEBUG_SYMBOLS=true
307   else
308     AC_MSG_ERROR([Allowed native debug symbols are: none, internal, external, zipped])
309   fi
310 
311   AC_SUBST(COMPILE_WITH_DEBUG_SYMBOLS)
312   AC_SUBST(COPY_DEBUG_SYMBOLS)
313   AC_SUBST(ZIP_EXTERNAL_DEBUG_SYMBOLS)
314 
315   # Should we add external native debug symbols to the shipped bundles?
316   AC_MSG_CHECKING([if we should add external native debug symbols to the shipped bundles])
317   AC_ARG_WITH([external-symbols-in-bundles],
318       [AS_HELP_STRING([--with-external-symbols-in-bundles],
319       [which type of external native debug symbol information shall be shipped in product bundles (none, public, full)
320       (e.g. ship full/stripped pdbs on Windows) @<:@none@:>@])])
321 
322   if test "x$with_external_symbols_in_bundles" = x || test "x$with_external_symbols_in_bundles" = xnone ; then
323     AC_MSG_RESULT([no])
324   elif test "x$with_external_symbols_in_bundles" = xfull || test "x$with_external_symbols_in_bundles" = xpublic ; then
325     if test "x$OPENJDK_TARGET_OS" != xwindows ; then
326       AC_MSG_ERROR([--with-external-symbols-in-bundles currently only works on windows!])
327     elif test "x$COPY_DEBUG_SYMBOLS" != xtrue ; then
328       AC_MSG_ERROR([--with-external-symbols-in-bundles only works when --with-native-debug-symbols=external is used!])
329     elif test "x$with_external_symbols_in_bundles" = xfull ; then
330       AC_MSG_RESULT([full])
331       SHIP_DEBUG_SYMBOLS=full
332     else
333       AC_MSG_RESULT([public])
334       SHIP_DEBUG_SYMBOLS=public
335     fi
336   else
337     AC_MSG_ERROR([$with_external_symbols_in_bundles is an unknown value for --with-external-symbols-in-bundles])
338   fi
339 
340   AC_SUBST(SHIP_DEBUG_SYMBOLS)
341 ])
342 
343 ################################################################################
344 #
345 # Native and Java code coverage
346 #
347 AC_DEFUN_ONCE([JDKOPT_SETUP_CODE_COVERAGE],
348 [
349   UTIL_ARG_ENABLE(NAME: native-coverage, DEFAULT: false, RESULT: GCOV_ENABLED,
350       DESC: [enable native compilation with code coverage data],
351       CHECK_AVAILABLE: [
352         AC_MSG_CHECKING([if native coverage is available])
353         if test "x$TOOLCHAIN_TYPE" = "xgcc" ||
354             test "x$TOOLCHAIN_TYPE" = "xclang"; then
355           AC_MSG_RESULT([yes])
356         else
357           AC_MSG_RESULT([no])
358           AVAILABLE=false
359         fi
360       ],
361       IF_ENABLED: [
362         GCOV_CFLAGS="-fprofile-arcs -ftest-coverage -fno-inline"
363         GCOV_LDFLAGS="-fprofile-arcs"
364         JVM_CFLAGS="$JVM_CFLAGS $GCOV_CFLAGS"
365         JVM_LDFLAGS="$JVM_LDFLAGS $GCOV_LDFLAGS"
366         CFLAGS_JDKLIB="$CFLAGS_JDKLIB $GCOV_CFLAGS"
367         CFLAGS_JDKEXE="$CFLAGS_JDKEXE $GCOV_CFLAGS"
368         CXXFLAGS_JDKLIB="$CXXFLAGS_JDKLIB $GCOV_CFLAGS"
369         CXXFLAGS_JDKEXE="$CXXFLAGS_JDKEXE $GCOV_CFLAGS"
370         LDFLAGS_JDKLIB="$LDFLAGS_JDKLIB $GCOV_LDFLAGS"
371         LDFLAGS_JDKEXE="$LDFLAGS_JDKEXE $GCOV_LDFLAGS"
372         LDFLAGS_STATIC_JDK="$LDFLAGS_STATIC_JDK $GCOV_LDFLAGS"
373       ])
374   AC_SUBST(GCOV_ENABLED)
375 
376   AC_ARG_WITH(jcov, [AS_HELP_STRING([--with-jcov],
377       [jcov library location])])
378   AC_ARG_WITH(jcov-input-jdk, [AS_HELP_STRING([--with-jcov-input-jdk],
379       [jdk image to instrument])])
380   AC_ARG_WITH(jcov-filters, [AS_HELP_STRING([--with-jcov-filters],
381       [filters to limit code for jcov instrumentation and report generation])])
382   JCOV_HOME=
383   JCOV_INPUT_JDK=
384   JCOV_ENABLED=
385   JCOV_FILTERS=
386   if test "x$with_jcov" = "x" ; then
387     JCOV_ENABLED="false"
388   else
389     JCOV_HOME="$with_jcov"
390     if test ! -f "$JCOV_HOME/lib/jcov.jar"; then
391       AC_MSG_RESULT([fail])
392       AC_MSG_ERROR([Invalid JCov bundle: "$JCOV_HOME/lib/jcov.jar" does not exist])
393     fi
394     JCOV_ENABLED="true"
395     UTIL_FIXUP_PATH(JCOV_HOME)
396     if test "x$with_jcov_input_jdk" != "x" ; then
397       JCOV_INPUT_JDK="$with_jcov_input_jdk"
398       if test ! -f "$JCOV_INPUT_JDK/bin/java" && test ! -f "$JCOV_INPUT_JDK/bin/java.exe"; then
399         AC_MSG_RESULT([fail])
400         AC_MSG_ERROR([Invalid JDK bundle: "$JCOV_INPUT_JDK/bin/java" does not exist])
401       fi
402       UTIL_FIXUP_PATH(JCOV_INPUT_JDK)
403     fi
404     if test "x$with_jcov_filters" != "x" ; then
405       JCOV_FILTERS="$with_jcov_filters"
406     fi
407   fi
408   AC_SUBST(JCOV_ENABLED)
409   AC_SUBST(JCOV_HOME)
410   AC_SUBST(JCOV_INPUT_JDK)
411   AC_SUBST(JCOV_FILTERS)
412 ])
413 
414 ################################################################################
415 #
416 # AddressSanitizer
417 #
418 AC_DEFUN_ONCE([JDKOPT_SETUP_ADDRESS_SANITIZER],
419 [
420   UTIL_ARG_ENABLE(NAME: asan, DEFAULT: false, RESULT: ASAN_ENABLED,
421       DESC: [enable AddressSanitizer],
422       CHECK_AVAILABLE: [
423         AC_MSG_CHECKING([if AddressSanitizer (asan) is available])
424         if test "x$TOOLCHAIN_TYPE" = "xgcc" ||
425             test "x$TOOLCHAIN_TYPE" = "xclang" ||
426             test "x$TOOLCHAIN_TYPE" = "xmicrosoft"; then
427           AC_MSG_RESULT([yes])
428         else
429           AC_MSG_RESULT([no])
430           AVAILABLE=false
431         fi
432       ],
433       IF_ENABLED: [
434         if test "x$TOOLCHAIN_TYPE" = "xgcc" ||
435             test "x$TOOLCHAIN_TYPE" = "xclang"; then
436           # ASan is simply incompatible with gcc -Wstringop-truncation. See
437           # https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85650
438           # It's harmless to be suppressed in clang as well.
439           ASAN_CFLAGS="-fsanitize=address -Wno-stringop-truncation -fno-omit-frame-pointer -fno-common -DADDRESS_SANITIZER"
440           ASAN_LDFLAGS="-fsanitize=address"
441           # detect_stack_use_after_return causes ASAN to offload stack-local
442           # variables to c-heap and therefore breaks assumptions in hotspot
443           # that rely on data (e.g. Marks) living in thread stacks.
444           if test "x$TOOLCHAIN_TYPE" = "xgcc"; then
445             ASAN_CFLAGS="$ASAN_CFLAGS --param asan-use-after-return=0"
446           fi
447           if test "x$TOOLCHAIN_TYPE" = "xclang"; then
448             ASAN_CFLAGS="$ASAN_CFLAGS -fsanitize-address-use-after-return=never"
449             ASAN_LDFLAGS="$ASAN_LDFLAGS -shared-libasan"
450           fi
451         elif test "x$TOOLCHAIN_TYPE" = "xmicrosoft"; then
452           # -Oy- is equivalent to -fno-omit-frame-pointer in GCC/Clang.
453           ASAN_CFLAGS="-fsanitize=address -Oy- -DADDRESS_SANITIZER"
454           # MSVC produces a warning if you pass -fsanitize=address to the linker. It also complains
455           $ if -DEBUG is not passed to the linker when building with ASan.
456           ASAN_LDFLAGS="-debug"
457           # -fsanitize-address-use-after-return is off by default in MS Visual Studio 22 (19.37.32824).
458           # cl : Command line warning D9002 : ignoring unknown option '-fno-sanitize-address-use-after-return'
459         fi
460         JVM_CFLAGS="$JVM_CFLAGS $ASAN_CFLAGS"
461         JVM_LDFLAGS="$JVM_LDFLAGS $ASAN_LDFLAGS"
462         CFLAGS_JDKLIB="$CFLAGS_JDKLIB $ASAN_CFLAGS"
463         CFLAGS_JDKEXE="$CFLAGS_JDKEXE $ASAN_CFLAGS"
464         CXXFLAGS_JDKLIB="$CXXFLAGS_JDKLIB $ASAN_CFLAGS"
465         CXXFLAGS_JDKEXE="$CXXFLAGS_JDKEXE $ASAN_CFLAGS"
466         LDFLAGS_JDKLIB="$LDFLAGS_JDKLIB $ASAN_LDFLAGS"
467         LDFLAGS_JDKEXE="$LDFLAGS_JDKEXE $ASAN_LDFLAGS"
468         LDFLAGS_STATIC_JDK="$LDFLAGS_STATIC_JDK $ASAN_LDFLAGS"
469       ])
470   AC_SUBST(ASAN_ENABLED)
471 ])
472 
473 ################################################################################
474 #
475 # LeakSanitizer
476 #
477 AC_DEFUN_ONCE([JDKOPT_SETUP_LEAK_SANITIZER],
478 [
479   UTIL_ARG_ENABLE(NAME: lsan, DEFAULT: false, RESULT: LSAN_ENABLED,
480       DESC: [enable LeakSanitizer],
481       CHECK_AVAILABLE: [
482         AC_MSG_CHECKING([if LeakSanitizer (lsan) is available])
483         if test "x$TOOLCHAIN_TYPE" = "xgcc" ||
484             test "x$TOOLCHAIN_TYPE" = "xclang"; then
485           AC_MSG_RESULT([yes])
486         else
487           AC_MSG_RESULT([no])
488           AVAILABLE=false
489         fi
490       ],
491       IF_ENABLED: [
492         LSAN_CFLAGS="-fsanitize=leak -fno-omit-frame-pointer -DLEAK_SANITIZER"
493         LSAN_LDFLAGS="-fsanitize=leak"
494         JVM_CFLAGS="$JVM_CFLAGS $LSAN_CFLAGS"
495         JVM_LDFLAGS="$JVM_LDFLAGS $LSAN_LDFLAGS"
496         CFLAGS_JDKLIB="$CFLAGS_JDKLIB $LSAN_CFLAGS"
497         CFLAGS_JDKEXE="$CFLAGS_JDKEXE $LSAN_CFLAGS"
498         CXXFLAGS_JDKLIB="$CXXFLAGS_JDKLIB $LSAN_CFLAGS"
499         CXXFLAGS_JDKEXE="$CXXFLAGS_JDKEXE $LSAN_CFLAGS"
500         LDFLAGS_JDKLIB="$LDFLAGS_JDKLIB $LSAN_LDFLAGS"
501         LDFLAGS_JDKEXE="$LDFLAGS_JDKEXE $LSAN_LDFLAGS"
502         LDFLAGS_STATIC_JDK="$LDFLAGS_STATIC_JDK $LSAN_LDFLAGS"
503       ])
504   AC_SUBST(LSAN_ENABLED)
505 ])
506 
507 ################################################################################
508 #
509 # UndefinedBehaviorSanitizer
510 #
511 AC_DEFUN_ONCE([JDKOPT_SETUP_UNDEFINED_BEHAVIOR_SANITIZER],
512 [
513   UTIL_ARG_WITH(NAME: additional-ubsan-checks, TYPE: string,
514       DEFAULT: [],
515       DESC: [Customizes the ubsan checks],
516       OPTIONAL: true)
517 
518   # GCC reports lots of likely false positives for stringop-truncation and format-overflow.
519   # GCC 13 also for array-bounds and stringop-overflow
520   # Silence them for now.
521   UBSAN_CHECKS="-fsanitize=undefined -fsanitize=float-divide-by-zero -fno-sanitize=shift-base -fno-sanitize=alignment \
522       $ADDITIONAL_UBSAN_CHECKS"
523   UBSAN_CFLAGS="$UBSAN_CHECKS -Wno-stringop-truncation -Wno-format-overflow -Wno-array-bounds -Wno-stringop-overflow -fno-omit-frame-pointer -DUNDEFINED_BEHAVIOR_SANITIZER"
524   UBSAN_LDFLAGS="$UBSAN_CHECKS"
525   UTIL_ARG_ENABLE(NAME: ubsan, DEFAULT: false, RESULT: UBSAN_ENABLED,
526       DESC: [enable UndefinedBehaviorSanitizer],
527       CHECK_AVAILABLE: [
528         AC_MSG_CHECKING([if UndefinedBehaviorSanitizer (ubsan) is available])
529         if test "x$TOOLCHAIN_TYPE" = "xgcc" ||
530             test "x$TOOLCHAIN_TYPE" = "xclang"; then
531           AC_MSG_RESULT([yes])
532         else
533           AC_MSG_RESULT([no])
534           AVAILABLE=false
535         fi
536       ],
537       IF_ENABLED: [
538         JVM_CFLAGS="$JVM_CFLAGS $UBSAN_CFLAGS"
539         JVM_LDFLAGS="$JVM_LDFLAGS $UBSAN_LDFLAGS"
540         CFLAGS_JDKLIB="$CFLAGS_JDKLIB $UBSAN_CFLAGS"
541         CFLAGS_JDKEXE="$CFLAGS_JDKEXE $UBSAN_CFLAGS"
542         CXXFLAGS_JDKLIB="$CXXFLAGS_JDKLIB $UBSAN_CFLAGS"
543         CXXFLAGS_JDKEXE="$CXXFLAGS_JDKEXE $UBSAN_CFLAGS"
544         LDFLAGS_JDKLIB="$LDFLAGS_JDKLIB $UBSAN_LDFLAGS"
545         LDFLAGS_JDKEXE="$LDFLAGS_JDKEXE $UBSAN_LDFLAGS"
546         LDFLAGS_STATIC_JDK="$LDFLAGS_STATIC_JDK $UBSAN_LDFLAGS"
547       ])
548   if test "x$UBSAN_ENABLED" = xfalse; then
549     UBSAN_CFLAGS=""
550     UBSAN_LDFLAGS=""
551   fi
552   AC_SUBST(UBSAN_CFLAGS)
553   AC_SUBST(UBSAN_LDFLAGS)
554   AC_SUBST(UBSAN_ENABLED)
555 ])
556 
557 ################################################################################
558 #
559 # Static build support.  When enabled will generate static
560 # libraries instead of shared libraries for all JDK libs.
561 #
562 AC_DEFUN_ONCE([JDKOPT_SETUP_STATIC_BUILD],
563 [
564   UTIL_DEPRECATED_ARG_ENABLE(static-build)
565 ])
566 
567 ################################################################################
568 #
569 # jmod options.
570 #
571 AC_DEFUN_ONCE([JDKOPT_SETUP_JMOD_OPTIONS],
572 [
573   # Final JMODs are recompiled often during development, and java.base JMOD
574   # includes the JVM libraries. In release mode, prefer to compress JMODs fully.
575   # In debug mode, pay with a little extra space, but win a lot of CPU time back
576   # with the lightest (but still some) compression.
577   if test "x$DEBUG_LEVEL" = xrelease; then
578     DEFAULT_JMOD_COMPRESS="zip-6"
579   else
580     DEFAULT_JMOD_COMPRESS="zip-1"
581   fi
582 
583   UTIL_ARG_WITH(NAME: jmod-compress, TYPE: literal,
584     VALID_VALUES: [zip-0 zip-1 zip-2 zip-3 zip-4 zip-5 zip-6 zip-7 zip-8 zip-9],
585     DEFAULT: $DEFAULT_JMOD_COMPRESS,
586     CHECKING_MSG: [for JMOD compression type],
587     DESC: [specify JMOD compression type (zip-[0-9])]
588   )
589   AC_SUBST(JMOD_COMPRESS)
590 ])
591 
592 ################################################################################
593 #
594 # jlink options.
595 #
596 AC_DEFUN_ONCE([JDKOPT_SETUP_JLINK_OPTIONS],
597 [
598 
599   ################################################################################
600   #
601   # Configure option for building a JDK that is suitable for linking from the
602   # run-time image without JMODs.
603   #
604   # Determines whether or not a suitable run-time image is being produced from
605   # packaged modules. If set to 'true, changes the *default* of packaged
606   # modules to 'false'.
607   #
608   UTIL_ARG_ENABLE(NAME: linkable-runtime, DEFAULT: false,
609       RESULT: JLINK_PRODUCE_LINKABLE_RUNTIME,
610       DESC: [enable a JDK build suitable for linking from the run-time image],
611       CHECKING_MSG: [whether or not a JDK suitable for linking from the run-time image should be produced])
612   AC_SUBST(JLINK_PRODUCE_LINKABLE_RUNTIME)
613 
614   if test "x$JLINK_PRODUCE_LINKABLE_RUNTIME" = xtrue; then
615     DEFAULT_PACKAGED_MODULES=false
616   else
617     DEFAULT_PACKAGED_MODULES=true
618   fi
619 
620   ################################################################################
621   #
622   # Configure option for packaged modules
623   #
624   # We keep packaged modules in the JDK image unless --enable-linkable-runtime is
625   # requested.
626   #
627   UTIL_ARG_ENABLE(NAME: keep-packaged-modules, DEFAULT: $DEFAULT_PACKAGED_MODULES,
628       RESULT: JLINK_KEEP_PACKAGED_MODULES,
629       DESC: [enable keeping of packaged modules in jdk image],
630       DEFAULT_DESC: [enabled by default unless --enable-linkable-runtime is set],
631       CHECKING_MSG: [if packaged modules are kept])
632   AC_SUBST(JLINK_KEEP_PACKAGED_MODULES)
633 ])
634 
635 ################################################################################
636 #
637 # Enable or disable generation of the classlist at build time
638 #
639 AC_DEFUN_ONCE([JDKOPT_ENABLE_DISABLE_GENERATE_CLASSLIST],
640 [
641   # In GenerateLinkOptData.gmk, DumpLoadedClassList is used to generate the
642   # classlist file. It never will work if CDS is disabled, since the VM will report
643   # an error for DumpLoadedClassList.
644   UTIL_ARG_ENABLE(NAME: generate-classlist, DEFAULT: auto,
645       RESULT: ENABLE_GENERATE_CLASSLIST, AVAILABLE: $ENABLE_CDS,
646       DESC: [enable generation of a CDS classlist at build time],
647       DEFAULT_DESC: [enabled if the JVM feature 'cds' is enabled for all JVM variants],
648       CHECKING_MSG: [if the CDS classlist generation should be enabled])
649   AC_SUBST(ENABLE_GENERATE_CLASSLIST)
650 ])
651 
652 ################################################################################
653 #
654 # Optionally filter resource translations
655 #
656 AC_DEFUN([JDKOPT_EXCLUDE_TRANSLATIONS],
657 [
658   AC_ARG_WITH([exclude-translations], [AS_HELP_STRING([--with-exclude-translations],
659       [a comma separated list of locales to exclude translations for. Default is
660       to include all translations present in the source.])])
661 
662   EXCLUDE_TRANSLATIONS=""
663   AC_MSG_CHECKING([if any translations should be excluded])
664   if test "x$with_exclude_translations" != "x"; then
665     EXCLUDE_TRANSLATIONS="${with_exclude_translations//,/ }"
666     AC_MSG_RESULT([yes: $EXCLUDE_TRANSLATIONS])
667   else
668     AC_MSG_RESULT([no])
669   fi
670 
671   AC_SUBST(EXCLUDE_TRANSLATIONS)
672 ])
673 
674 ################################################################################
675 #
676 # Optionally disable man pages (deprecated)
677 #
678 AC_DEFUN([JDKOPT_ENABLE_DISABLE_MANPAGES],
679 [
680   UTIL_DEPRECATED_ARG_ENABLE(manpages)
681 ])
682 
683 ################################################################################
684 #
685 # Disable the default CDS archive generation
686 #
687 AC_DEFUN([JDKOPT_ENABLE_DISABLE_CDS_ARCHIVE],
688 [
689   UTIL_ARG_ENABLE(NAME: cds-archive, DEFAULT: auto, RESULT: BUILD_CDS_ARCHIVE,
690       DESC: [enable generation of a default CDS archive in the product image],
691       DEFAULT_DESC: [enabled if possible],
692       CHECKING_MSG: [if a default CDS archive should be generated],
693       CHECK_AVAILABLE: [
694         AC_MSG_CHECKING([if CDS archive is available])
695         if test "x$ENABLE_CDS" = "xfalse"; then
696           AC_MSG_RESULT([no (CDS is disabled)])
697           AVAILABLE=false
698         elif test "x$COMPILE_TYPE" = "xcross"; then
699           AC_MSG_RESULT([no (not possible with cross compilation)])
700           AVAILABLE=false
701         else
702           AC_MSG_RESULT([yes])
703         fi
704       ])
705   AC_SUBST(BUILD_CDS_ARCHIVE)
706 ])
707 
708 ################################################################################
709 #
710 # Enable or disable the default CDS archive generation for Compact Object Headers
711 #
712 AC_DEFUN([JDKOPT_ENABLE_DISABLE_CDS_ARCHIVE_COH],
713 [
714   UTIL_ARG_ENABLE(NAME: cds-archive-coh, DEFAULT: auto, RESULT: BUILD_CDS_ARCHIVE_COH,
715       DESC: [enable generation of default CDS archives for compact object headers (requires --enable-cds-archive)],
716       DEFAULT_DESC: [auto],
717       CHECKING_MSG: [if default CDS archives for compact object headers should be generated],
718       CHECK_AVAILABLE: [
719         AC_MSG_CHECKING([if CDS archive with compact object headers is available])
720         if test "x$BUILD_CDS_ARCHIVE" = "xfalse"; then
721           AC_MSG_RESULT([no (CDS default archive generation is disabled)])
722           AVAILABLE=false
723         elif test "x$OPENJDK_TARGET_CPU" != "xx86_64" &&
724              test "x$OPENJDK_TARGET_CPU" != "xaarch64" &&
725              test "x$OPENJDK_TARGET_CPU" != "xppc64" &&
726              test "x$OPENJDK_TARGET_CPU" != "xppc64le" &&
727              test "x$OPENJDK_TARGET_CPU" != "xriscv64" &&
728              test "x$OPENJDK_TARGET_CPU" != "xs390x"; then
729           AC_MSG_RESULT([no (compact object headers not supported for this platform)])
730           AVAILABLE=false
731         else
732           AC_MSG_RESULT([yes])
733           AVAILABLE=true
734         fi
735       ])
736   AC_SUBST(BUILD_CDS_ARCHIVE_COH)
737 ])
738 
739 ################################################################################
740 #
741 # Enable the alternative CDS core region alignment
742 #
743 AC_DEFUN([JDKOPT_ENABLE_DISABLE_COMPATIBLE_CDS_ALIGNMENT],
744 [
745   UTIL_ARG_ENABLE(NAME: compatible-cds-alignment, DEFAULT: $COMPATIBLE_CDS_ALIGNMENT_DEFAULT,
746       RESULT: ENABLE_COMPATIBLE_CDS_ALIGNMENT,
747       DESC: [enable use alternative compatible cds core region alignment],
748       DEFAULT_DESC: [disabled except on linux-aarch64],
749       CHECKING_MSG: [if compatible cds region alignment enabled],
750       CHECK_AVAILABLE: [
751         AC_MSG_CHECKING([if CDS archive is available])
752         if test "x$ENABLE_CDS" = "xfalse"; then
753           AVAILABLE=false
754           AC_MSG_RESULT([no (CDS is disabled)])
755         else
756           AVAILABLE=true
757           AC_MSG_RESULT([yes])
758         fi
759       ])
760   AC_SUBST(ENABLE_COMPATIBLE_CDS_ALIGNMENT)
761 ])
762 
763 ################################################################################
764 #
765 # Disallow any output from containing absolute paths from the build system.
766 # This setting defaults to allowed on debug builds and not allowed on release
767 # builds.
768 #
769 AC_DEFUN([JDKOPT_ALLOW_ABSOLUTE_PATHS_IN_OUTPUT],
770 [
771   AC_ARG_ENABLE([absolute-paths-in-output],
772       [AS_HELP_STRING([--disable-absolute-paths-in-output],
773       [Set to disable to prevent any absolute paths from the build to end up in
774       any of the build output. @<:@disabled in release builds, otherwise enabled@:>@])])
775 
776   AC_MSG_CHECKING([if absolute paths should be allowed in the build output])
777   if test "x$enable_absolute_paths_in_output" = "xno"; then
778     AC_MSG_RESULT([no, forced])
779     ALLOW_ABSOLUTE_PATHS_IN_OUTPUT="false"
780   elif test "x$enable_absolute_paths_in_output" = "xyes"; then
781     AC_MSG_RESULT([yes, forced])
782     ALLOW_ABSOLUTE_PATHS_IN_OUTPUT="true"
783   elif test "x$DEBUG_LEVEL" = "xrelease"; then
784     AC_MSG_RESULT([no, release build])
785     ALLOW_ABSOLUTE_PATHS_IN_OUTPUT="false"
786   else
787     AC_MSG_RESULT([yes, debug build])
788     ALLOW_ABSOLUTE_PATHS_IN_OUTPUT="true"
789   fi
790 
791   AC_SUBST(ALLOW_ABSOLUTE_PATHS_IN_OUTPUT)
792 ])
793 
794 ################################################################################
795 #
796 # Check and set options related to reproducible builds.
797 #
798 AC_DEFUN_ONCE([JDKOPT_SETUP_REPRODUCIBLE_BUILD],
799 [
800   AC_ARG_WITH([source-date], [AS_HELP_STRING([--with-source-date],
801       [how to set SOURCE_DATE_EPOCH ('updated', 'current', 'version' a timestamp or an ISO-8601 date) @<:@current/value of SOURCE_DATE_EPOCH@:>@])],
802       [with_source_date_present=true], [with_source_date_present=false])
803 
804   if test "x$SOURCE_DATE_EPOCH" != x && test "x$with_source_date" != x; then
805     AC_MSG_WARN([--with-source-date will override SOURCE_DATE_EPOCH])
806   fi
807 
808   AC_MSG_CHECKING([what source date to use])
809 
810   if test "x$with_source_date" = xyes; then
811     AC_MSG_ERROR([--with-source-date must have a value])
812   elif test "x$with_source_date" = x; then
813     if test "x$SOURCE_DATE_EPOCH" != x; then
814       SOURCE_DATE=$SOURCE_DATE_EPOCH
815       with_source_date_present=true
816       AC_MSG_RESULT([$SOURCE_DATE, from SOURCE_DATE_EPOCH])
817     else
818       # Tell makefiles to take the time from configure
819       SOURCE_DATE=$($DATE +"%s")
820       AC_MSG_RESULT([$SOURCE_DATE, from 'current' (default)])
821     fi
822   elif test "x$with_source_date" = xupdated; then
823     SOURCE_DATE=updated
824     AC_MSG_RESULT([determined at build time, from 'updated'])
825   elif test "x$with_source_date" = xcurrent; then
826     # Set the current time
827     SOURCE_DATE=$($DATE +"%s")
828     AC_MSG_RESULT([$SOURCE_DATE, from 'current'])
829   elif test "x$with_source_date" = xversion; then
830     # Use the date from version-numbers.conf
831     UTIL_GET_EPOCH_TIMESTAMP(SOURCE_DATE, $DEFAULT_VERSION_DATE)
832     if test "x$SOURCE_DATE" = x; then
833       AC_MSG_RESULT([unavailable])
834       AC_MSG_ERROR([Cannot convert DEFAULT_VERSION_DATE to timestamp])
835     fi
836     AC_MSG_RESULT([$SOURCE_DATE, from 'version'])
837   else
838     # It's a timestamp, an ISO-8601 date, or an invalid string
839     # Additional [] needed to keep m4 from mangling shell constructs.
840     if [ [[ "$with_source_date" =~ ^[0-9][0-9]*$ ]] ] ; then
841       SOURCE_DATE=$with_source_date
842       AC_MSG_RESULT([$SOURCE_DATE, from timestamp on command line])
843     else
844       UTIL_GET_EPOCH_TIMESTAMP(SOURCE_DATE, $with_source_date)
845       if test "x$SOURCE_DATE" != x; then
846         AC_MSG_RESULT([$SOURCE_DATE, from ISO-8601 date on command line])
847       else
848         AC_MSG_RESULT([unavailable])
849         AC_MSG_ERROR([Cannot parse date string "$with_source_date"])
850       fi
851     fi
852   fi
853 
854   ISO_8601_FORMAT_STRING="%Y-%m-%dT%H:%M:%SZ"
855   if test "x$SOURCE_DATE" != xupdated; then
856     # If we have a fixed value for SOURCE_DATE, we need to set SOURCE_DATE_EPOCH
857     # for the rest of configure.
858     SOURCE_DATE_EPOCH="$SOURCE_DATE"
859     if test "x$IS_GNU_DATE" = xyes; then
860       SOURCE_DATE_ISO_8601=`$DATE --utc --date="@$SOURCE_DATE" +"$ISO_8601_FORMAT_STRING" 2> /dev/null`
861     else
862       SOURCE_DATE_ISO_8601=`$DATE -u -j -f "%s" "$SOURCE_DATE" +"$ISO_8601_FORMAT_STRING" 2> /dev/null`
863     fi
864   fi
865 
866   AC_SUBST(SOURCE_DATE)
867   AC_SUBST(ISO_8601_FORMAT_STRING)
868   AC_SUBST(SOURCE_DATE_ISO_8601)
869 
870   UTIL_DEPRECATED_ARG_ENABLE(reproducible-build)
871 ])
872 
873 ################################################################################
874 #
875 # Setup signing on macOS. This can either be setup to sign with a real identity
876 # and enabling the hardened runtime, or it can simply add the debug entitlement
877 # com.apple.security.get-task-allow without actually signing any binaries. The
878 # latter is needed to be able to debug processes and dump core files on modern
879 # versions of macOS. It can also be skipped completely.
880 #
881 # Check if codesign will run with the given parameters
882 # $1: Parameters to run with
883 # $2: Checking message
884 # Sets CODESIGN_SUCCESS=true/false
885 AC_DEFUN([JDKOPT_CHECK_CODESIGN_PARAMS],
886 [
887   PARAMS="$1"
888   MESSAGE="$2"
889   CODESIGN_TESTFILE="$CONFIGURESUPPORT_OUTPUTDIR/codesign-testfile"
890   $RM "$CODESIGN_TESTFILE"
891   $TOUCH "$CODESIGN_TESTFILE"
892   CODESIGN_SUCCESS=false
893 
894   $ECHO "check codesign, calling $CODESIGN $PARAMS $CODESIGN_TESTFILE" >&AS_MESSAGE_LOG_FD
895 
896   eval \"$CODESIGN\" $PARAMS \"$CODESIGN_TESTFILE\" 2>&AS_MESSAGE_LOG_FD \
897       >&AS_MESSAGE_LOG_FD && CODESIGN_SUCCESS=true
898   $RM "$CODESIGN_TESTFILE"
899   AC_MSG_CHECKING([$MESSAGE])
900   if test "x$CODESIGN_SUCCESS" = "xtrue"; then
901     AC_MSG_RESULT([yes])
902   else
903     AC_MSG_RESULT([no])
904   fi
905 ])
906 
907 AC_DEFUN([JDKOPT_CHECK_CODESIGN_HARDENED],
908 [
909   JDKOPT_CHECK_CODESIGN_PARAMS([-s \"$MACOSX_CODESIGN_IDENTITY\" --option runtime],
910       [if codesign with hardened runtime is possible])
911 ])
912 
913 AC_DEFUN([JDKOPT_CHECK_CODESIGN_DEBUG],
914 [
915   JDKOPT_CHECK_CODESIGN_PARAMS([-s -], [if debug mode codesign is possible])
916 ])
917 
918 AC_DEFUN([JDKOPT_SETUP_MACOSX_SIGNING],
919 [
920   MACOSX_CODESIGN_MODE=disabled
921   if test "x$OPENJDK_TARGET_OS" = "xmacosx" && test "x$CODESIGN" != "x"; then
922 
923     UTIL_ARG_WITH(NAME: macosx-codesign, TYPE: literal, OPTIONAL: true,
924         VALID_VALUES: [hardened debug auto], DEFAULT: auto,
925         ENABLED_DEFAULT: true,
926         CHECKING_MSG: [for macosx code signing mode],
927         DESC: [set the macosx code signing mode (hardened, debug, auto)]
928     )
929 
930     if test "x$MACOSX_CODESIGN_ENABLED" = "xtrue"; then
931 
932       # Check for user provided code signing identity.
933       UTIL_ARG_WITH(NAME: macosx-codesign-identity, TYPE: string,
934           DEFAULT: openjdk_codesign, CHECK_VALUE: [UTIL_CHECK_STRING_NON_EMPTY],
935           DESC: [specify the macosx code signing identity],
936           CHECKING_MSG: [for macosx code signing identity]
937       )
938       AC_SUBST(MACOSX_CODESIGN_IDENTITY)
939 
940       if test "x$MACOSX_CODESIGN" = "xauto"; then
941         # Only try to default to hardened signing on release builds
942         if test "x$DEBUG_LEVEL" = "xrelease"; then
943           JDKOPT_CHECK_CODESIGN_HARDENED
944           if test "x$CODESIGN_SUCCESS" = "xtrue"; then
945             MACOSX_CODESIGN_MODE=hardened
946           fi
947         fi
948         if test "x$MACOSX_CODESIGN_MODE" = "xdisabled"; then
949           JDKOPT_CHECK_CODESIGN_DEBUG
950           if test "x$CODESIGN_SUCCESS" = "xtrue"; then
951             MACOSX_CODESIGN_MODE=debug
952           fi
953         fi
954         AC_MSG_CHECKING([for macosx code signing mode])
955         AC_MSG_RESULT([$MACOSX_CODESIGN_MODE])
956       elif test "x$MACOSX_CODESIGN" = "xhardened"; then
957         JDKOPT_CHECK_CODESIGN_HARDENED
958         if test "x$CODESIGN_SUCCESS" = "xfalse"; then
959           AC_MSG_ERROR([Signing with hardened runtime is not possible])
960         fi
961         MACOSX_CODESIGN_MODE=hardened
962       elif test "x$MACOSX_CODESIGN" = "xdebug"; then
963         JDKOPT_CHECK_CODESIGN_DEBUG
964         if test "x$CODESIGN_SUCCESS" = "xfalse"; then
965           AC_MSG_ERROR([Signing in debug mode is not possible])
966         fi
967         MACOSX_CODESIGN_MODE=debug
968       else
969         AC_MSG_ERROR([unknown value for --with-macosx-codesign: $MACOSX_CODESIGN])
970       fi
971     fi
972   fi
973   AC_SUBST(MACOSX_CODESIGN_IDENTITY)
974   AC_SUBST(MACOSX_CODESIGN_MODE)
975 ])
976 
977 ################################################################################
978 #
979 # fallback linker
980 #
981 AC_DEFUN_ONCE([JDKOPT_SETUP_FALLBACK_LINKER],
982 [
983   FALLBACK_LINKER_DEFAULT=false
984 
985   if HOTSPOT_CHECK_JVM_VARIANT(zero); then
986     FALLBACK_LINKER_DEFAULT=true
987   fi
988 
989   UTIL_ARG_ENABLE(NAME: fallback-linker, DEFAULT: $FALLBACK_LINKER_DEFAULT,
990       RESULT: ENABLE_FALLBACK_LINKER,
991       DESC: [enable libffi-based fallback implementation of java.lang.foreign.Linker],
992       CHECKING_MSG: [if fallback linker enabled])
993   AC_SUBST(ENABLE_FALLBACK_LINKER)
994 ])