1 #
   2 # Copyright (c) 2011, 2025, Oracle and/or its affiliates. All rights reserved.
   3 # DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
   4 #
   5 # This code is free software; you can redistribute it and/or modify it
   6 # under the terms of the GNU General Public License version 2 only, as
   7 # published by the Free Software Foundation.  Oracle designates this
   8 # particular file as subject to the "Classpath" exception as provided
   9 # by Oracle in the LICENSE file that accompanied this code.
  10 #
  11 # This code is distributed in the hope that it will be useful, but WITHOUT
  12 # ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  13 # FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
  14 # version 2 for more details (a copy is included in the LICENSE file that
  15 # accompanied this code).
  16 #
  17 # You should have received a copy of the GNU General Public License version
  18 # 2 along with this work; if not, write to the Free Software Foundation,
  19 # Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
  20 #
  21 # Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
  22 # or visit www.oracle.com if you need additional information or have any
  23 # questions.
  24 #
  25 
  26 ################################################################################
  27 # Set the debug level
  28 #    release: no debug information, all optimizations, no asserts.
  29 #    optimized: no debug information, all optimizations, no asserts, HotSpot target is 'optimized'.
  30 #    fastdebug: debug information (-g), all optimizations, all asserts
  31 #    slowdebug: debug information (-g), no optimizations, all asserts
  32 AC_DEFUN_ONCE([JDKOPT_SETUP_DEBUG_LEVEL],
  33 [
  34   DEBUG_LEVEL="release"
  35 
  36   UTIL_ARG_ENABLE(NAME: debug, DEFAULT: false, RESULT: ENABLE_DEBUG,
  37       DESC: [enable debugging (shorthand for --with-debug-level=fastdebug)],
  38       IF_ENABLED: [ DEBUG_LEVEL="fastdebug" ])
  39 
  40   AC_MSG_CHECKING([which debug level to use])
  41   AC_ARG_WITH([debug-level], [AS_HELP_STRING([--with-debug-level],
  42       [set the debug level (release, fastdebug, slowdebug, optimized) @<:@release@:>@])],
  43       [
  44         DEBUG_LEVEL="${withval}"
  45         if test "x$ENABLE_DEBUG" = xtrue; then
  46           AC_MSG_ERROR([You cannot use both --enable-debug and --with-debug-level at the same time.])
  47         fi
  48       ])
  49   AC_MSG_RESULT([$DEBUG_LEVEL])
  50 
  51   if test "x$DEBUG_LEVEL" != xrelease && \
  52       test "x$DEBUG_LEVEL" != xoptimized && \
  53       test "x$DEBUG_LEVEL" != xfastdebug && \
  54       test "x$DEBUG_LEVEL" != xslowdebug; then
  55     AC_MSG_ERROR([Allowed debug levels are: release, fastdebug, slowdebug and optimized])
  56   fi
  57 
  58   # Translate DEBUG_LEVEL to debug level used by Hotspot
  59   HOTSPOT_DEBUG_LEVEL="$DEBUG_LEVEL"
  60   if test "x$DEBUG_LEVEL" = xrelease; then
  61     HOTSPOT_DEBUG_LEVEL="product"
  62   elif test "x$DEBUG_LEVEL" = xslowdebug; then
  63     HOTSPOT_DEBUG_LEVEL="debug"
  64   fi
  65 
  66   if test "x$DEBUG_LEVEL" = xoptimized; then
  67     # The debug level 'optimized' is a little special because it is currently only
  68     # applicable to the HotSpot build where it means to build a completely
  69     # optimized version of the VM without any debugging code (like for the
  70     # 'release' debug level which is called 'product' in the HotSpot build) but
  71     # with the exception that it can contain additional code which is otherwise
  72     # protected by '#ifndef PRODUCT' macros. These 'optimized' builds are used to
  73     # test new and/or experimental features which are not intended for customer
  74     # shipment. Because these new features need to be tested and benchmarked in
  75     # real world scenarios, we want to build the containing JDK at the 'release'
  76     # debug level.
  77     DEBUG_LEVEL="release"
  78   fi
  79 
  80   AC_SUBST(HOTSPOT_DEBUG_LEVEL)
  81   AC_SUBST(DEBUG_LEVEL)
  82 ])
  83 
  84 ################################################################################
  85 #
  86 # Should we build only OpenJDK even if closed sources are present?
  87 #
  88 AC_DEFUN_ONCE([JDKOPT_SETUP_OPEN_OR_CUSTOM],
  89 [
  90   UTIL_ARG_ENABLE(NAME: openjdk-only, DEFAULT: false,
  91       RESULT: SUPPRESS_CUSTOM_EXTENSIONS,
  92       DESC: [suppress building custom source even if present],
  93       CHECKING_MSG: [if custom source is suppressed (openjdk-only)])
  94 ])
  95 
  96 AC_DEFUN_ONCE([JDKOPT_SETUP_JDK_OPTIONS],
  97 [
  98   # Should we build a JDK without a graphical UI?
  99   UTIL_ARG_ENABLE(NAME: headless-only, DEFAULT: false,
 100       RESULT: ENABLE_HEADLESS_ONLY,
 101       DESC: [only build headless (no GUI) support],
 102       CHECKING_MSG: [if we should build headless-only (no GUI)])
 103   AC_SUBST(ENABLE_HEADLESS_ONLY)
 104 
 105   # should we linktime gc unused code sections in the JDK build ?
 106   if test "x$OPENJDK_TARGET_OS" = "xlinux" && test "x$OPENJDK_TARGET_CPU" = xs390x; then
 107     LINKTIME_GC_DEFAULT=true
 108   else
 109     LINKTIME_GC_DEFAULT=false
 110   fi
 111 
 112   UTIL_ARG_ENABLE(NAME: linktime-gc, DEFAULT: $LINKTIME_GC_DEFAULT,
 113       DEFAULT_DESC: [auto], RESULT: ENABLE_LINKTIME_GC,
 114       DESC: [use link time gc on unused code sections in the JDK build],
 115       CHECKING_MSG: [if linker should clean out unused code (linktime-gc)])
 116   AC_SUBST(ENABLE_LINKTIME_GC)
 117 
 118   # Check for full doc dependencies
 119   FULL_DOCS_AVAILABLE=true
 120   AC_MSG_CHECKING([for graphviz dot])
 121   if test "x$DOT" != "x"; then
 122     AC_MSG_RESULT([yes])
 123   else
 124     AC_MSG_RESULT([no, cannot generate full docs or man pages])
 125     FULL_DOCS_AVAILABLE=false
 126   fi
 127 
 128   AC_MSG_CHECKING([for pandoc])
 129   if test "x$ENABLE_PANDOC" = "xtrue"; then
 130     AC_MSG_RESULT([yes])
 131   else
 132     AC_MSG_RESULT([no, cannot generate full docs or man pages])
 133     FULL_DOCS_AVAILABLE=false
 134   fi
 135 
 136   # Should we build the complete docs, or just a lightweight version?
 137   UTIL_ARG_ENABLE(NAME: full-docs, DEFAULT: auto, RESULT: ENABLE_FULL_DOCS,
 138       AVAILABLE: $FULL_DOCS_AVAILABLE, DESC: [build complete documentation],
 139       DEFAULT_DESC: [enabled if all tools found])
 140   AC_SUBST(ENABLE_FULL_DOCS)
 141 
 142   # Choose cacerts source file
 143   AC_ARG_WITH(cacerts-file, [AS_HELP_STRING([--with-cacerts-file],
 144       [specify alternative cacerts file])])
 145   AC_MSG_CHECKING([for cacerts file])
 146   if test "x$with_cacerts_file" == x; then
 147     AC_MSG_RESULT([default])
 148   else
 149     CACERTS_FILE=$with_cacerts_file
 150     if test ! -f "$CACERTS_FILE"; then
 151       AC_MSG_RESULT([fail])
 152       AC_MSG_ERROR([Specified cacerts file "$CACERTS_FILE" does not exist])
 153     fi
 154     AC_MSG_RESULT([$CACERTS_FILE])
 155   fi
 156   AC_SUBST(CACERTS_FILE)
 157 
 158   # Choose cacerts source folder for user provided PEM files
 159   AC_ARG_WITH(cacerts-src, [AS_HELP_STRING([--with-cacerts-src],
 160       [specify alternative cacerts source folder containing certificates])])
 161   CACERTS_SRC=""
 162   AC_MSG_CHECKING([for cacerts source])
 163   if test "x$with_cacerts_src" == x; then
 164     AC_MSG_RESULT([default])
 165   else
 166     CACERTS_SRC=$with_cacerts_src
 167     if test ! -d "$CACERTS_SRC"; then
 168       AC_MSG_RESULT([fail])
 169       AC_MSG_ERROR([Specified cacerts source folder "$CACERTS_SRC" does not exist])
 170     fi
 171     AC_MSG_RESULT([$CACERTS_SRC])
 172   fi
 173   AC_SUBST(CACERTS_SRC)
 174 
 175   # Enable or disable unlimited crypto
 176   UTIL_ARG_ENABLE(NAME: unlimited-crypto, DEFAULT: true, RESULT: UNLIMITED_CRYPTO,
 177       DESC: [enable unlimited crypto policy])
 178   AC_SUBST(UNLIMITED_CRYPTO)
 179 
 180   # Should we build the serviceability agent (SA)?
 181   INCLUDE_SA=true
 182   if HOTSPOT_CHECK_JVM_VARIANT(zero); then
 183     INCLUDE_SA=false
 184   fi
 185   if test "x$OPENJDK_TARGET_OS" = xaix ; then
 186     INCLUDE_SA=false
 187   fi
 188   if test "x$OPENJDK_TARGET_CPU" = xs390x ; then
 189     INCLUDE_SA=false
 190   fi
 191   AC_SUBST(INCLUDE_SA)
 192 
 193   # Setup default CDS alignment. On platforms where one build may run on machines with different
 194   # page sizes, the JVM choses a compatible alignment to fit all possible page sizes. This slightly
 195   # increases archive size.
 196   # The only platform having this problem at the moment is Linux on aarch64, which may encounter
 197   # three different page sizes: 4K, 64K, and if run on Mac m1 hardware, 16K.
 198   COMPATIBLE_CDS_ALIGNMENT_DEFAULT=false
 199   if test "x$OPENJDK_TARGET_OS" = "xlinux" && test "x$OPENJDK_TARGET_CPU" = "xaarch64"; then
 200     COMPATIBLE_CDS_ALIGNMENT_DEFAULT=auto
 201   fi
 202 
 203   # Compress jars
 204   COMPRESS_JARS=false
 205 
 206   AC_SUBST(COMPRESS_JARS)
 207 
 208   # Setup default copyright year. Mostly overridden when building close to a new year.
 209   AC_ARG_WITH(copyright-year, [AS_HELP_STRING([--with-copyright-year],
 210       [Set copyright year value for build @<:@current year/source-date@:>@])])
 211   if test "x$with_copyright_year" = xyes; then
 212     AC_MSG_ERROR([Copyright year must have a value])
 213   elif test "x$with_copyright_year" != x; then
 214     COPYRIGHT_YEAR="$with_copyright_year"
 215   elif test "x$SOURCE_DATE" != xupdated; then
 216     if test "x$IS_GNU_DATE" = xyes; then
 217       COPYRIGHT_YEAR=`$DATE --date=@$SOURCE_DATE +%Y`
 218     else
 219       COPYRIGHT_YEAR=`$DATE -j -f %s $SOURCE_DATE +%Y`
 220     fi
 221   else
 222     COPYRIGHT_YEAR=`$DATE +'%Y'`
 223   fi
 224   AC_SUBST(COPYRIGHT_YEAR)
 225 
 226   # Override default library path
 227   AC_ARG_WITH([jni-libpath], [AS_HELP_STRING([--with-jni-libpath],
 228       [override default JNI library search path])])
 229   AC_MSG_CHECKING([for jni library path])
 230   if test "x${with_jni_libpath}" = "x" || test "x${with_jni_libpath}" = "xno"; then
 231     AC_MSG_RESULT([default])
 232   elif test "x${with_jni_libpath}" = "xyes"; then
 233     AC_MSG_RESULT([invalid])
 234     AC_MSG_ERROR([The --with-jni-libpath option requires an argument.])
 235   else
 236     HOTSPOT_OVERRIDE_LIBPATH=${with_jni_libpath}
 237     if test "x$OPENJDK_TARGET_OS" != "xlinux" &&
 238         test "x$OPENJDK_TARGET_OS" != "xbsd" &&
 239         test "x$OPENJDK_TARGET_OS" != "xaix"; then
 240       AC_MSG_RESULT([fail])
 241       AC_MSG_ERROR([Overriding JNI library path is supported only on Linux, BSD and AIX.])
 242     fi
 243     AC_MSG_RESULT(${HOTSPOT_OVERRIDE_LIBPATH})
 244   fi
 245   AC_SUBST(HOTSPOT_OVERRIDE_LIBPATH)
 246 
 247 ])
 248 
 249 ################################################################################
 250 
 251 AC_DEFUN_ONCE([JDKOPT_SETUP_DEBUG_SYMBOLS],
 252 [
 253   #
 254   # Native debug symbols.
 255   # This must be done after the toolchain is setup, since we're looking at objcopy.
 256   #
 257   AC_MSG_CHECKING([what type of native debug symbols to use])
 258   AC_ARG_WITH([native-debug-symbols],
 259       [AS_HELP_STRING([--with-native-debug-symbols],
 260       [set the native debug symbol configuration (none, internal, external, zipped) @<:@varying@:>@])],
 261       [
 262         if test "x$OPENJDK_TARGET_OS" = xwindows; then
 263           if test "x$withval" = xinternal; then
 264             AC_MSG_ERROR([Windows does not support the parameter 'internal' for --with-native-debug-symbols])
 265           fi
 266         fi
 267       ],
 268       [
 269         with_native_debug_symbols="external"
 270       ])
 271   AC_MSG_RESULT([$with_native_debug_symbols])
 272 
 273   if test "x$with_native_debug_symbols" = xnone; then
 274     COMPILE_WITH_DEBUG_SYMBOLS=false
 275     COPY_DEBUG_SYMBOLS=false
 276     ZIP_EXTERNAL_DEBUG_SYMBOLS=false
 277   elif test "x$with_native_debug_symbols" = xinternal; then
 278     COMPILE_WITH_DEBUG_SYMBOLS=true
 279     COPY_DEBUG_SYMBOLS=false
 280     ZIP_EXTERNAL_DEBUG_SYMBOLS=false
 281   elif test "x$with_native_debug_symbols" = xexternal; then
 282 
 283     if test "x$OPENJDK_TARGET_OS" = xlinux; then
 284       if test "x$OBJCOPY" = x; then
 285         # enabling of enable-debug-symbols and can't find objcopy
 286         # this is an error
 287         AC_MSG_ERROR([Unable to find objcopy, cannot enable native debug symbols])
 288       fi
 289     fi
 290 
 291     COMPILE_WITH_DEBUG_SYMBOLS=true
 292     COPY_DEBUG_SYMBOLS=true
 293     ZIP_EXTERNAL_DEBUG_SYMBOLS=false
 294   elif test "x$with_native_debug_symbols" = xzipped; then
 295 
 296     if test "x$OPENJDK_TARGET_OS" = xlinux; then
 297       if test "x$OBJCOPY" = x; then
 298         # enabling of enable-debug-symbols and can't find objcopy
 299         # this is an error
 300         AC_MSG_ERROR([Unable to find objcopy, cannot enable native debug symbols])
 301       fi
 302     fi
 303 
 304     COMPILE_WITH_DEBUG_SYMBOLS=true
 305     COPY_DEBUG_SYMBOLS=true
 306     ZIP_EXTERNAL_DEBUG_SYMBOLS=true
 307   else
 308     AC_MSG_ERROR([Allowed native debug symbols are: none, internal, external, zipped])
 309   fi
 310 
 311   AC_SUBST(COMPILE_WITH_DEBUG_SYMBOLS)
 312   AC_SUBST(COPY_DEBUG_SYMBOLS)
 313   AC_SUBST(ZIP_EXTERNAL_DEBUG_SYMBOLS)
 314 
 315   # Should we add external native debug symbols to the shipped bundles?
 316   AC_MSG_CHECKING([if we should add external native debug symbols to the shipped bundles])
 317   AC_ARG_WITH([external-symbols-in-bundles],
 318       [AS_HELP_STRING([--with-external-symbols-in-bundles],
 319       [which type of external native debug symbol information shall be shipped in product bundles (none, public, full)
 320       (e.g. ship full/stripped pdbs on Windows) @<:@none@:>@])])
 321 
 322   if test "x$with_external_symbols_in_bundles" = x || test "x$with_external_symbols_in_bundles" = xnone ; then
 323     AC_MSG_RESULT([no])
 324   elif test "x$with_external_symbols_in_bundles" = xfull || test "x$with_external_symbols_in_bundles" = xpublic ; then
 325     if test "x$OPENJDK_TARGET_OS" != xwindows ; then
 326       AC_MSG_ERROR([--with-external-symbols-in-bundles currently only works on windows!])
 327     elif test "x$COPY_DEBUG_SYMBOLS" != xtrue ; then
 328       AC_MSG_ERROR([--with-external-symbols-in-bundles only works when --with-native-debug-symbols=external is used!])
 329     elif test "x$with_external_symbols_in_bundles" = xfull ; then
 330       AC_MSG_RESULT([full])
 331       SHIP_DEBUG_SYMBOLS=full
 332     else
 333       AC_MSG_RESULT([public])
 334       SHIP_DEBUG_SYMBOLS=public
 335     fi
 336   else
 337     AC_MSG_ERROR([$with_external_symbols_in_bundles is an unknown value for --with-external-symbols-in-bundles])
 338   fi
 339 
 340   AC_SUBST(SHIP_DEBUG_SYMBOLS)
 341 ])
 342 
 343 ################################################################################
 344 #
 345 # Native and Java code coverage
 346 #
 347 AC_DEFUN_ONCE([JDKOPT_SETUP_CODE_COVERAGE],
 348 [
 349   UTIL_ARG_ENABLE(NAME: native-coverage, DEFAULT: false, RESULT: GCOV_ENABLED,
 350       DESC: [enable native compilation with code coverage data],
 351       CHECK_AVAILABLE: [
 352         AC_MSG_CHECKING([if native coverage is available])
 353         if test "x$TOOLCHAIN_TYPE" = "xgcc" ||
 354             test "x$TOOLCHAIN_TYPE" = "xclang"; then
 355           AC_MSG_RESULT([yes])
 356         else
 357           AC_MSG_RESULT([no])
 358           AVAILABLE=false
 359         fi
 360       ],
 361       IF_ENABLED: [
 362         GCOV_CFLAGS="-fprofile-arcs -ftest-coverage -fno-inline"
 363         GCOV_LDFLAGS="-fprofile-arcs"
 364         JVM_CFLAGS="$JVM_CFLAGS $GCOV_CFLAGS"
 365         JVM_LDFLAGS="$JVM_LDFLAGS $GCOV_LDFLAGS"
 366         CFLAGS_JDKLIB="$CFLAGS_JDKLIB $GCOV_CFLAGS"
 367         CFLAGS_JDKEXE="$CFLAGS_JDKEXE $GCOV_CFLAGS"
 368         CXXFLAGS_JDKLIB="$CXXFLAGS_JDKLIB $GCOV_CFLAGS"
 369         CXXFLAGS_JDKEXE="$CXXFLAGS_JDKEXE $GCOV_CFLAGS"
 370         LDFLAGS_JDKLIB="$LDFLAGS_JDKLIB $GCOV_LDFLAGS"
 371         LDFLAGS_JDKEXE="$LDFLAGS_JDKEXE $GCOV_LDFLAGS"
 372         LDFLAGS_STATIC_JDK="$LDFLAGS_STATIC_JDK $GCOV_LDFLAGS"
 373       ])
 374   AC_SUBST(GCOV_ENABLED)
 375 
 376   AC_ARG_WITH(jcov, [AS_HELP_STRING([--with-jcov],
 377       [jcov library location])])
 378   AC_ARG_WITH(jcov-input-jdk, [AS_HELP_STRING([--with-jcov-input-jdk],
 379       [jdk image to instrument])])
 380   AC_ARG_WITH(jcov-filters, [AS_HELP_STRING([--with-jcov-filters],
 381       [filters to limit code for jcov instrumentation and report generation])])
 382   JCOV_HOME=
 383   JCOV_INPUT_JDK=
 384   JCOV_ENABLED=
 385   JCOV_FILTERS=
 386   if test "x$with_jcov" = "x" ; then
 387     JCOV_ENABLED="false"
 388   else
 389     JCOV_HOME="$with_jcov"
 390     if test ! -f "$JCOV_HOME/lib/jcov.jar"; then
 391       AC_MSG_RESULT([fail])
 392       AC_MSG_ERROR([Invalid JCov bundle: "$JCOV_HOME/lib/jcov.jar" does not exist])
 393     fi
 394     JCOV_ENABLED="true"
 395     UTIL_FIXUP_PATH(JCOV_HOME)
 396     if test "x$with_jcov_input_jdk" != "x" ; then
 397       JCOV_INPUT_JDK="$with_jcov_input_jdk"
 398       if test ! -f "$JCOV_INPUT_JDK/bin/java" && test ! -f "$JCOV_INPUT_JDK/bin/java.exe"; then
 399         AC_MSG_RESULT([fail])
 400         AC_MSG_ERROR([Invalid JDK bundle: "$JCOV_INPUT_JDK/bin/java" does not exist])
 401       fi
 402       UTIL_FIXUP_PATH(JCOV_INPUT_JDK)
 403     fi
 404     if test "x$with_jcov_filters" != "x" ; then
 405       JCOV_FILTERS="$with_jcov_filters"
 406     fi
 407   fi
 408   AC_SUBST(JCOV_ENABLED)
 409   AC_SUBST(JCOV_HOME)
 410   AC_SUBST(JCOV_INPUT_JDK)
 411   AC_SUBST(JCOV_FILTERS)
 412 ])
 413 
 414 ################################################################################
 415 #
 416 # AddressSanitizer
 417 #
 418 AC_DEFUN_ONCE([JDKOPT_SETUP_ADDRESS_SANITIZER],
 419 [
 420   UTIL_ARG_ENABLE(NAME: asan, DEFAULT: false, RESULT: ASAN_ENABLED,
 421       DESC: [enable AddressSanitizer],
 422       CHECK_AVAILABLE: [
 423         AC_MSG_CHECKING([if AddressSanitizer (asan) is available])
 424         if test "x$TOOLCHAIN_TYPE" = "xgcc" ||
 425             test "x$TOOLCHAIN_TYPE" = "xclang" ||
 426             test "x$TOOLCHAIN_TYPE" = "xmicrosoft"; then
 427           AC_MSG_RESULT([yes])
 428         else
 429           AC_MSG_RESULT([no])
 430           AVAILABLE=false
 431         fi
 432       ],
 433       IF_ENABLED: [
 434         if test "x$TOOLCHAIN_TYPE" = "xgcc" ||
 435             test "x$TOOLCHAIN_TYPE" = "xclang"; then
 436           # ASan is simply incompatible with gcc -Wstringop-truncation. See
 437           # https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85650
 438           # It's harmless to be suppressed in clang as well.
 439           ASAN_CFLAGS="-fsanitize=address -Wno-stringop-truncation -fno-omit-frame-pointer -fno-common -DADDRESS_SANITIZER"
 440           ASAN_LDFLAGS="-fsanitize=address"
 441           # detect_stack_use_after_return causes ASAN to offload stack-local
 442           # variables to c-heap and therefore breaks assumptions in hotspot
 443           # that rely on data (e.g. Marks) living in thread stacks.
 444           if test "x$TOOLCHAIN_TYPE" = "xgcc"; then
 445             ASAN_CFLAGS="$ASAN_CFLAGS --param asan-use-after-return=0"
 446           fi
 447           if test "x$TOOLCHAIN_TYPE" = "xclang"; then
 448             ASAN_CFLAGS="$ASAN_CFLAGS -fsanitize-address-use-after-return=never"
 449             ASAN_LDFLAGS="$ASAN_LDFLAGS -shared-libasan"
 450           fi
 451         elif test "x$TOOLCHAIN_TYPE" = "xmicrosoft"; then
 452           # -Oy- is equivalent to -fno-omit-frame-pointer in GCC/Clang.
 453           ASAN_CFLAGS="-fsanitize=address -Oy- -DADDRESS_SANITIZER"
 454           # MSVC produces a warning if you pass -fsanitize=address to the linker. It also complains
 455           $ if -DEBUG is not passed to the linker when building with ASan.
 456           ASAN_LDFLAGS="-debug"
 457           # -fsanitize-address-use-after-return is off by default in MS Visual Studio 22 (19.37.32824).
 458           # cl : Command line warning D9002 : ignoring unknown option '-fno-sanitize-address-use-after-return'
 459         fi
 460         JVM_CFLAGS="$JVM_CFLAGS $ASAN_CFLAGS"
 461         JVM_LDFLAGS="$JVM_LDFLAGS $ASAN_LDFLAGS"
 462         CFLAGS_JDKLIB="$CFLAGS_JDKLIB $ASAN_CFLAGS"
 463         CFLAGS_JDKEXE="$CFLAGS_JDKEXE $ASAN_CFLAGS"
 464         CXXFLAGS_JDKLIB="$CXXFLAGS_JDKLIB $ASAN_CFLAGS"
 465         CXXFLAGS_JDKEXE="$CXXFLAGS_JDKEXE $ASAN_CFLAGS"
 466         LDFLAGS_JDKLIB="$LDFLAGS_JDKLIB $ASAN_LDFLAGS"
 467         LDFLAGS_JDKEXE="$LDFLAGS_JDKEXE $ASAN_LDFLAGS"
 468         LDFLAGS_STATIC_JDK="$LDFLAGS_STATIC_JDK $ASAN_LDFLAGS"
 469       ])
 470   AC_SUBST(ASAN_ENABLED)
 471 ])
 472 
 473 ################################################################################
 474 #
 475 # LeakSanitizer
 476 #
 477 AC_DEFUN_ONCE([JDKOPT_SETUP_LEAK_SANITIZER],
 478 [
 479   UTIL_ARG_ENABLE(NAME: lsan, DEFAULT: false, RESULT: LSAN_ENABLED,
 480       DESC: [enable LeakSanitizer],
 481       CHECK_AVAILABLE: [
 482         AC_MSG_CHECKING([if LeakSanitizer (lsan) is available])
 483         if test "x$TOOLCHAIN_TYPE" = "xgcc" ||
 484             test "x$TOOLCHAIN_TYPE" = "xclang"; then
 485           AC_MSG_RESULT([yes])
 486         else
 487           AC_MSG_RESULT([no])
 488           AVAILABLE=false
 489         fi
 490       ],
 491       IF_ENABLED: [
 492         LSAN_CFLAGS="-fsanitize=leak -fno-omit-frame-pointer -DLEAK_SANITIZER"
 493         LSAN_LDFLAGS="-fsanitize=leak"
 494         JVM_CFLAGS="$JVM_CFLAGS $LSAN_CFLAGS"
 495         JVM_LDFLAGS="$JVM_LDFLAGS $LSAN_LDFLAGS"
 496         CFLAGS_JDKLIB="$CFLAGS_JDKLIB $LSAN_CFLAGS"
 497         CFLAGS_JDKEXE="$CFLAGS_JDKEXE $LSAN_CFLAGS"
 498         CXXFLAGS_JDKLIB="$CXXFLAGS_JDKLIB $LSAN_CFLAGS"
 499         CXXFLAGS_JDKEXE="$CXXFLAGS_JDKEXE $LSAN_CFLAGS"
 500         LDFLAGS_JDKLIB="$LDFLAGS_JDKLIB $LSAN_LDFLAGS"
 501         LDFLAGS_JDKEXE="$LDFLAGS_JDKEXE $LSAN_LDFLAGS"
 502         LDFLAGS_STATIC_JDK="$LDFLAGS_STATIC_JDK $LSAN_LDFLAGS"
 503       ])
 504   AC_SUBST(LSAN_ENABLED)
 505 ])
 506 
 507 ################################################################################
 508 #
 509 # UndefinedBehaviorSanitizer
 510 #
 511 AC_DEFUN_ONCE([JDKOPT_SETUP_UNDEFINED_BEHAVIOR_SANITIZER],
 512 [
 513   UTIL_ARG_WITH(NAME: additional-ubsan-checks, TYPE: string,
 514       DEFAULT: [],
 515       DESC: [Customizes the ubsan checks],
 516       OPTIONAL: true)
 517 
 518   # GCC reports lots of likely false positives for stringop-truncation and format-overflow.
 519   # GCC 13 also for array-bounds and stringop-overflow
 520   # Silence them for now.
 521   UBSAN_CHECKS="-fsanitize=undefined -fsanitize=float-divide-by-zero -fno-sanitize=shift-base -fno-sanitize=alignment \
 522       $ADDITIONAL_UBSAN_CHECKS"
 523   UBSAN_CFLAGS="$UBSAN_CHECKS -Wno-stringop-truncation -Wno-format-overflow -Wno-array-bounds -Wno-stringop-overflow -fno-omit-frame-pointer -DUNDEFINED_BEHAVIOR_SANITIZER"
 524   UBSAN_LDFLAGS="$UBSAN_CHECKS"
 525   UTIL_ARG_ENABLE(NAME: ubsan, DEFAULT: false, RESULT: UBSAN_ENABLED,
 526       DESC: [enable UndefinedBehaviorSanitizer],
 527       CHECK_AVAILABLE: [
 528         AC_MSG_CHECKING([if UndefinedBehaviorSanitizer (ubsan) is available])
 529         if test "x$TOOLCHAIN_TYPE" = "xgcc" ||
 530             test "x$TOOLCHAIN_TYPE" = "xclang"; then
 531           AC_MSG_RESULT([yes])
 532         else
 533           AC_MSG_RESULT([no])
 534           AVAILABLE=false
 535         fi
 536       ],
 537       IF_ENABLED: [
 538         JVM_CFLAGS="$JVM_CFLAGS $UBSAN_CFLAGS"
 539         JVM_LDFLAGS="$JVM_LDFLAGS $UBSAN_LDFLAGS"
 540         CFLAGS_JDKLIB="$CFLAGS_JDKLIB $UBSAN_CFLAGS"
 541         CFLAGS_JDKEXE="$CFLAGS_JDKEXE $UBSAN_CFLAGS"
 542         CXXFLAGS_JDKLIB="$CXXFLAGS_JDKLIB $UBSAN_CFLAGS"
 543         CXXFLAGS_JDKEXE="$CXXFLAGS_JDKEXE $UBSAN_CFLAGS"
 544         LDFLAGS_JDKLIB="$LDFLAGS_JDKLIB $UBSAN_LDFLAGS"
 545         LDFLAGS_JDKEXE="$LDFLAGS_JDKEXE $UBSAN_LDFLAGS"
 546         LDFLAGS_STATIC_JDK="$LDFLAGS_STATIC_JDK $UBSAN_LDFLAGS"
 547       ])
 548   if test "x$UBSAN_ENABLED" = xfalse; then
 549     UBSAN_CFLAGS=""
 550     UBSAN_LDFLAGS=""
 551   fi
 552   AC_SUBST(UBSAN_CFLAGS)
 553   AC_SUBST(UBSAN_LDFLAGS)
 554   AC_SUBST(UBSAN_ENABLED)
 555 ])
 556 
 557 ################################################################################
 558 #
 559 # jmod options.
 560 #
 561 AC_DEFUN_ONCE([JDKOPT_SETUP_JMOD_OPTIONS],
 562 [
 563   # Final JMODs are recompiled often during development, and java.base JMOD
 564   # includes the JVM libraries. In release mode, prefer to compress JMODs fully.
 565   # In debug mode, pay with a little extra space, but win a lot of CPU time back
 566   # with the lightest (but still some) compression.
 567   if test "x$DEBUG_LEVEL" = xrelease; then
 568     DEFAULT_JMOD_COMPRESS="zip-6"
 569   else
 570     DEFAULT_JMOD_COMPRESS="zip-1"
 571   fi
 572 
 573   UTIL_ARG_WITH(NAME: jmod-compress, TYPE: literal,
 574     VALID_VALUES: [zip-0 zip-1 zip-2 zip-3 zip-4 zip-5 zip-6 zip-7 zip-8 zip-9],
 575     DEFAULT: $DEFAULT_JMOD_COMPRESS,
 576     CHECKING_MSG: [for JMOD compression type],
 577     DESC: [specify JMOD compression type (zip-[0-9])]
 578   )
 579   AC_SUBST(JMOD_COMPRESS)
 580 ])
 581 
 582 ################################################################################
 583 #
 584 # jlink options.
 585 #
 586 AC_DEFUN_ONCE([JDKOPT_SETUP_JLINK_OPTIONS],
 587 [
 588 
 589   ################################################################################
 590   #
 591   # Configure option for building a JDK that is suitable for linking from the
 592   # run-time image without JMODs.
 593   #
 594   # Determines whether or not a suitable run-time image is being produced from
 595   # packaged modules. If set to 'true, changes the *default* of packaged
 596   # modules to 'false'.
 597   #
 598   UTIL_ARG_ENABLE(NAME: linkable-runtime, DEFAULT: false,
 599       RESULT: JLINK_PRODUCE_LINKABLE_RUNTIME,
 600       DESC: [enable a JDK build suitable for linking from the run-time image],
 601       CHECKING_MSG: [whether or not a JDK suitable for linking from the run-time image should be produced])
 602   AC_SUBST(JLINK_PRODUCE_LINKABLE_RUNTIME)
 603 
 604   if test "x$JLINK_PRODUCE_LINKABLE_RUNTIME" = xtrue; then
 605     DEFAULT_PACKAGED_MODULES=false
 606   else
 607     DEFAULT_PACKAGED_MODULES=true
 608   fi
 609 
 610   ################################################################################
 611   #
 612   # Configure option for packaged modules
 613   #
 614   # We keep packaged modules in the JDK image unless --enable-linkable-runtime is
 615   # requested.
 616   #
 617   UTIL_ARG_ENABLE(NAME: keep-packaged-modules, DEFAULT: $DEFAULT_PACKAGED_MODULES,
 618       RESULT: JLINK_KEEP_PACKAGED_MODULES,
 619       DESC: [enable keeping of packaged modules in jdk image],
 620       DEFAULT_DESC: [enabled by default unless --enable-linkable-runtime is set],
 621       CHECKING_MSG: [if packaged modules are kept])
 622   AC_SUBST(JLINK_KEEP_PACKAGED_MODULES)
 623 
 624   ################################################################################
 625   #
 626   # Extra jlink options to be (optionally) passed to the JDK build
 627   #
 628   UTIL_ARG_WITH(NAME: extra-jlink-flags, TYPE: string,
 629       DEFAULT: [],
 630       DESC: [extra flags to be passed to jlink during the build],
 631       OPTIONAL: true)
 632 
 633   JLINK_USER_EXTRA_FLAGS="$EXTRA_JLINK_FLAGS"
 634   AC_SUBST(JLINK_USER_EXTRA_FLAGS)
 635 ])
 636 
 637 ################################################################################
 638 #
 639 # Enable or disable generation of the classlist at build time
 640 #
 641 AC_DEFUN_ONCE([JDKOPT_ENABLE_DISABLE_GENERATE_CLASSLIST],
 642 [
 643   # In GenerateLinkOptData.gmk, DumpLoadedClassList is used to generate the
 644   # classlist file. It never will work if CDS is disabled, since the VM will report
 645   # an error for DumpLoadedClassList.
 646   UTIL_ARG_ENABLE(NAME: generate-classlist, DEFAULT: auto,
 647       RESULT: ENABLE_GENERATE_CLASSLIST, AVAILABLE: $ENABLE_CDS,
 648       DESC: [enable generation of a CDS classlist at build time],
 649       DEFAULT_DESC: [enabled if the JVM feature 'cds' is enabled for all JVM variants],
 650       CHECKING_MSG: [if the CDS classlist generation should be enabled])
 651   AC_SUBST(ENABLE_GENERATE_CLASSLIST)
 652 ])
 653 
 654 ################################################################################
 655 #
 656 # Optionally filter resource translations
 657 #
 658 AC_DEFUN([JDKOPT_EXCLUDE_TRANSLATIONS],
 659 [
 660   AC_ARG_WITH([exclude-translations], [AS_HELP_STRING([--with-exclude-translations],
 661       [a comma separated list of locales to exclude translations for. Default is
 662       to include all translations present in the source.])])
 663 
 664   EXCLUDE_TRANSLATIONS=""
 665   AC_MSG_CHECKING([if any translations should be excluded])
 666   if test "x$with_exclude_translations" != "x"; then
 667     EXCLUDE_TRANSLATIONS="${with_exclude_translations//,/ }"
 668     AC_MSG_RESULT([yes: $EXCLUDE_TRANSLATIONS])
 669   else
 670     AC_MSG_RESULT([no])
 671   fi
 672 
 673   AC_SUBST(EXCLUDE_TRANSLATIONS)
 674 ])
 675 
 676 ################################################################################
 677 #
 678 # Disable the default CDS archive generation
 679 #
 680 AC_DEFUN([JDKOPT_ENABLE_DISABLE_CDS_ARCHIVE],
 681 [
 682   UTIL_ARG_ENABLE(NAME: cds-archive, DEFAULT: auto, RESULT: BUILD_CDS_ARCHIVE,
 683       DESC: [enable generation of a default CDS archive in the product image],
 684       DEFAULT_DESC: [enabled if possible],
 685       CHECKING_MSG: [if a default CDS archive should be generated],
 686       CHECK_AVAILABLE: [
 687         AC_MSG_CHECKING([if CDS archive is available])
 688         if test "x$ENABLE_CDS" = "xfalse"; then
 689           AC_MSG_RESULT([no (CDS is disabled)])
 690           AVAILABLE=false
 691         elif test "x$COMPILE_TYPE" = "xcross"; then
 692           AC_MSG_RESULT([no (not possible with cross compilation)])
 693           AVAILABLE=false
 694         else
 695           AC_MSG_RESULT([yes])
 696         fi
 697       ])
 698   AC_SUBST(BUILD_CDS_ARCHIVE)
 699 ])
 700 
 701 ################################################################################
 702 #
 703 # Enable or disable the default CDS archive generation for Compact Object Headers
 704 #
 705 # Default disabled within Valhalla until support added (JDK-8348568)
 706 #
 707 AC_DEFUN([JDKOPT_ENABLE_DISABLE_CDS_ARCHIVE_COH],
 708 [
 709   UTIL_ARG_ENABLE(NAME: cds-archive-coh, DEFAULT: false, RESULT: BUILD_CDS_ARCHIVE_COH,
 710       DESC: [enable generation of default CDS archives for compact object headers (requires --enable-cds-archive)],
 711       DEFAULT_DESC: [auto],
 712       CHECKING_MSG: [if default CDS archives for compact object headers should be generated],
 713       CHECK_AVAILABLE: [
 714         AC_MSG_CHECKING([if CDS archive with compact object headers is available])
 715         if test "x$BUILD_CDS_ARCHIVE" = "xfalse"; then
 716           AC_MSG_RESULT([no (CDS default archive generation is disabled)])
 717           AVAILABLE=false
 718         elif test "x$OPENJDK_TARGET_CPU" != "xx86_64" &&
 719              test "x$OPENJDK_TARGET_CPU" != "xaarch64" &&
 720              test "x$OPENJDK_TARGET_CPU" != "xppc64" &&
 721              test "x$OPENJDK_TARGET_CPU" != "xppc64le" &&
 722              test "x$OPENJDK_TARGET_CPU" != "xriscv64" &&
 723              test "x$OPENJDK_TARGET_CPU" != "xs390x"; then
 724           AC_MSG_RESULT([no (compact object headers not supported for this platform)])
 725           AVAILABLE=false
 726         else
 727           AC_MSG_RESULT([yes])
 728           AVAILABLE=true
 729         fi
 730       ])
 731   AC_SUBST(BUILD_CDS_ARCHIVE_COH)
 732 ])
 733 
 734 ################################################################################
 735 #
 736 # Enable the alternative CDS core region alignment
 737 #
 738 AC_DEFUN([JDKOPT_ENABLE_DISABLE_COMPATIBLE_CDS_ALIGNMENT],
 739 [
 740   UTIL_ARG_ENABLE(NAME: compatible-cds-alignment, DEFAULT: $COMPATIBLE_CDS_ALIGNMENT_DEFAULT,
 741       RESULT: ENABLE_COMPATIBLE_CDS_ALIGNMENT,
 742       DESC: [enable use alternative compatible cds core region alignment],
 743       DEFAULT_DESC: [disabled except on linux-aarch64],
 744       CHECKING_MSG: [if compatible cds region alignment enabled],
 745       CHECK_AVAILABLE: [
 746         AC_MSG_CHECKING([if CDS archive is available])
 747         if test "x$ENABLE_CDS" = "xfalse"; then
 748           AVAILABLE=false
 749           AC_MSG_RESULT([no (CDS is disabled)])
 750         else
 751           AVAILABLE=true
 752           AC_MSG_RESULT([yes])
 753         fi
 754       ])
 755   AC_SUBST(ENABLE_COMPATIBLE_CDS_ALIGNMENT)
 756 ])
 757 
 758 ################################################################################
 759 #
 760 # Disallow any output from containing absolute paths from the build system.
 761 # This setting defaults to allowed on debug builds and not allowed on release
 762 # builds.
 763 #
 764 AC_DEFUN([JDKOPT_ALLOW_ABSOLUTE_PATHS_IN_OUTPUT],
 765 [
 766   AC_ARG_ENABLE([absolute-paths-in-output],
 767       [AS_HELP_STRING([--disable-absolute-paths-in-output],
 768       [Set to disable to prevent any absolute paths from the build to end up in
 769       any of the build output. @<:@disabled in release builds, otherwise enabled@:>@])])
 770 
 771   AC_MSG_CHECKING([if absolute paths should be allowed in the build output])
 772   if test "x$enable_absolute_paths_in_output" = "xno"; then
 773     AC_MSG_RESULT([no, forced])
 774     ALLOW_ABSOLUTE_PATHS_IN_OUTPUT="false"
 775   elif test "x$enable_absolute_paths_in_output" = "xyes"; then
 776     AC_MSG_RESULT([yes, forced])
 777     ALLOW_ABSOLUTE_PATHS_IN_OUTPUT="true"
 778   elif test "x$DEBUG_LEVEL" = "xrelease"; then
 779     AC_MSG_RESULT([no, release build])
 780     ALLOW_ABSOLUTE_PATHS_IN_OUTPUT="false"
 781   else
 782     AC_MSG_RESULT([yes, debug build])
 783     ALLOW_ABSOLUTE_PATHS_IN_OUTPUT="true"
 784   fi
 785 
 786   AC_SUBST(ALLOW_ABSOLUTE_PATHS_IN_OUTPUT)
 787 ])
 788 
 789 ################################################################################
 790 #
 791 # Check and set options related to reproducible builds.
 792 #
 793 AC_DEFUN_ONCE([JDKOPT_SETUP_REPRODUCIBLE_BUILD],
 794 [
 795   AC_ARG_WITH([source-date], [AS_HELP_STRING([--with-source-date],
 796       [how to set SOURCE_DATE_EPOCH ('updated', 'current', 'version' a timestamp or an ISO-8601 date) @<:@current/value of SOURCE_DATE_EPOCH@:>@])],
 797       [with_source_date_present=true], [with_source_date_present=false])
 798 
 799   if test "x$SOURCE_DATE_EPOCH" != x && test "x$with_source_date" != x; then
 800     AC_MSG_WARN([--with-source-date will override SOURCE_DATE_EPOCH])
 801   fi
 802 
 803   AC_MSG_CHECKING([what source date to use])
 804 
 805   if test "x$with_source_date" = xyes; then
 806     AC_MSG_ERROR([--with-source-date must have a value])
 807   elif test "x$with_source_date" = x; then
 808     if test "x$SOURCE_DATE_EPOCH" != x; then
 809       SOURCE_DATE=$SOURCE_DATE_EPOCH
 810       with_source_date_present=true
 811       AC_MSG_RESULT([$SOURCE_DATE, from SOURCE_DATE_EPOCH])
 812     else
 813       # Tell makefiles to take the time from configure
 814       SOURCE_DATE=$($DATE +"%s")
 815       AC_MSG_RESULT([$SOURCE_DATE, from 'current' (default)])
 816     fi
 817   elif test "x$with_source_date" = xupdated; then
 818     SOURCE_DATE=updated
 819     AC_MSG_RESULT([determined at build time, from 'updated'])
 820   elif test "x$with_source_date" = xcurrent; then
 821     # Set the current time
 822     SOURCE_DATE=$($DATE +"%s")
 823     AC_MSG_RESULT([$SOURCE_DATE, from 'current'])
 824   elif test "x$with_source_date" = xversion; then
 825     # Use the date from version-numbers.conf
 826     UTIL_GET_EPOCH_TIMESTAMP(SOURCE_DATE, $DEFAULT_VERSION_DATE)
 827     if test "x$SOURCE_DATE" = x; then
 828       AC_MSG_RESULT([unavailable])
 829       AC_MSG_ERROR([Cannot convert DEFAULT_VERSION_DATE to timestamp])
 830     fi
 831     AC_MSG_RESULT([$SOURCE_DATE, from 'version'])
 832   else
 833     # It's a timestamp, an ISO-8601 date, or an invalid string
 834     # Additional [] needed to keep m4 from mangling shell constructs.
 835     if [ [[ "$with_source_date" =~ ^[0-9][0-9]*$ ]] ] ; then
 836       SOURCE_DATE=$with_source_date
 837       AC_MSG_RESULT([$SOURCE_DATE, from timestamp on command line])
 838     else
 839       UTIL_GET_EPOCH_TIMESTAMP(SOURCE_DATE, $with_source_date)
 840       if test "x$SOURCE_DATE" != x; then
 841         AC_MSG_RESULT([$SOURCE_DATE, from ISO-8601 date on command line])
 842       else
 843         AC_MSG_RESULT([unavailable])
 844         AC_MSG_ERROR([Cannot parse date string "$with_source_date"])
 845       fi
 846     fi
 847   fi
 848 
 849   ISO_8601_FORMAT_STRING="%Y-%m-%dT%H:%M:%SZ"
 850   if test "x$SOURCE_DATE" != xupdated; then
 851     # If we have a fixed value for SOURCE_DATE, we need to set SOURCE_DATE_EPOCH
 852     # for the rest of configure.
 853     SOURCE_DATE_EPOCH="$SOURCE_DATE"
 854     if test "x$IS_GNU_DATE" = xyes; then
 855       SOURCE_DATE_ISO_8601=`$DATE --utc --date="@$SOURCE_DATE" +"$ISO_8601_FORMAT_STRING" 2> /dev/null`
 856     else
 857       SOURCE_DATE_ISO_8601=`$DATE -u -j -f "%s" "$SOURCE_DATE" +"$ISO_8601_FORMAT_STRING" 2> /dev/null`
 858     fi
 859   fi
 860 
 861   AC_SUBST(SOURCE_DATE)
 862   AC_SUBST(ISO_8601_FORMAT_STRING)
 863   AC_SUBST(SOURCE_DATE_ISO_8601)
 864 ])
 865 
 866 ################################################################################
 867 #
 868 # Setup signing on macOS. This can either be setup to sign with a real identity
 869 # and enabling the hardened runtime, or it can simply add the debug entitlement
 870 # com.apple.security.get-task-allow without actually signing any binaries. The
 871 # latter is needed to be able to debug processes and dump core files on modern
 872 # versions of macOS. It can also be skipped completely.
 873 #
 874 # Check if codesign will run with the given parameters
 875 # $1: Parameters to run with
 876 # $2: Checking message
 877 # Sets CODESIGN_SUCCESS=true/false
 878 AC_DEFUN([JDKOPT_CHECK_CODESIGN_PARAMS],
 879 [
 880   PARAMS="$1"
 881   MESSAGE="$2"
 882   CODESIGN_TESTFILE="$CONFIGURESUPPORT_OUTPUTDIR/codesign-testfile"
 883   $RM "$CODESIGN_TESTFILE"
 884   $TOUCH "$CODESIGN_TESTFILE"
 885   CODESIGN_SUCCESS=false
 886 
 887   $ECHO "check codesign, calling $CODESIGN $PARAMS $CODESIGN_TESTFILE" >&AS_MESSAGE_LOG_FD
 888 
 889   eval \"$CODESIGN\" $PARAMS \"$CODESIGN_TESTFILE\" 2>&AS_MESSAGE_LOG_FD \
 890       >&AS_MESSAGE_LOG_FD && CODESIGN_SUCCESS=true
 891   $RM "$CODESIGN_TESTFILE"
 892   AC_MSG_CHECKING([$MESSAGE])
 893   if test "x$CODESIGN_SUCCESS" = "xtrue"; then
 894     AC_MSG_RESULT([yes])
 895   else
 896     AC_MSG_RESULT([no])
 897   fi
 898 ])
 899 
 900 AC_DEFUN([JDKOPT_CHECK_CODESIGN_HARDENED],
 901 [
 902   JDKOPT_CHECK_CODESIGN_PARAMS([-s \"$MACOSX_CODESIGN_IDENTITY\" --option runtime],
 903       [if codesign with hardened runtime is possible])
 904 ])
 905 
 906 AC_DEFUN([JDKOPT_CHECK_CODESIGN_DEBUG],
 907 [
 908   JDKOPT_CHECK_CODESIGN_PARAMS([-s -], [if debug mode codesign is possible])
 909 ])
 910 
 911 AC_DEFUN([JDKOPT_SETUP_MACOSX_SIGNING],
 912 [
 913   MACOSX_CODESIGN_MODE=disabled
 914   if test "x$OPENJDK_TARGET_OS" = "xmacosx" && test "x$CODESIGN" != "x"; then
 915 
 916     UTIL_ARG_WITH(NAME: macosx-codesign, TYPE: literal, OPTIONAL: true,
 917         VALID_VALUES: [hardened debug auto], DEFAULT: auto,
 918         ENABLED_DEFAULT: true,
 919         CHECKING_MSG: [for macosx code signing mode],
 920         DESC: [set the macosx code signing mode (hardened, debug, auto)]
 921     )
 922 
 923     if test "x$MACOSX_CODESIGN_ENABLED" = "xtrue"; then
 924 
 925       # Check for user provided code signing identity.
 926       UTIL_ARG_WITH(NAME: macosx-codesign-identity, TYPE: string,
 927           DEFAULT: openjdk_codesign, CHECK_VALUE: [UTIL_CHECK_STRING_NON_EMPTY],
 928           DESC: [specify the macosx code signing identity],
 929           CHECKING_MSG: [for macosx code signing identity]
 930       )
 931       AC_SUBST(MACOSX_CODESIGN_IDENTITY)
 932 
 933       if test "x$MACOSX_CODESIGN" = "xauto"; then
 934         # Only try to default to hardened signing on release builds
 935         if test "x$DEBUG_LEVEL" = "xrelease"; then
 936           JDKOPT_CHECK_CODESIGN_HARDENED
 937           if test "x$CODESIGN_SUCCESS" = "xtrue"; then
 938             MACOSX_CODESIGN_MODE=hardened
 939           fi
 940         fi
 941         if test "x$MACOSX_CODESIGN_MODE" = "xdisabled"; then
 942           JDKOPT_CHECK_CODESIGN_DEBUG
 943           if test "x$CODESIGN_SUCCESS" = "xtrue"; then
 944             MACOSX_CODESIGN_MODE=debug
 945           fi
 946         fi
 947         AC_MSG_CHECKING([for macosx code signing mode])
 948         AC_MSG_RESULT([$MACOSX_CODESIGN_MODE])
 949       elif test "x$MACOSX_CODESIGN" = "xhardened"; then
 950         JDKOPT_CHECK_CODESIGN_HARDENED
 951         if test "x$CODESIGN_SUCCESS" = "xfalse"; then
 952           AC_MSG_ERROR([Signing with hardened runtime is not possible])
 953         fi
 954         MACOSX_CODESIGN_MODE=hardened
 955       elif test "x$MACOSX_CODESIGN" = "xdebug"; then
 956         JDKOPT_CHECK_CODESIGN_DEBUG
 957         if test "x$CODESIGN_SUCCESS" = "xfalse"; then
 958           AC_MSG_ERROR([Signing in debug mode is not possible])
 959         fi
 960         MACOSX_CODESIGN_MODE=debug
 961       else
 962         AC_MSG_ERROR([unknown value for --with-macosx-codesign: $MACOSX_CODESIGN])
 963       fi
 964     fi
 965   fi
 966   AC_SUBST(MACOSX_CODESIGN_IDENTITY)
 967   AC_SUBST(MACOSX_CODESIGN_MODE)
 968 ])
 969 
 970 ################################################################################
 971 #
 972 # Setup a hook to invoke a script that runs for file produced by the native
 973 # compilation steps, after linking.
 974 # Parameter is the path to the script to be called.
 975 #
 976 AC_DEFUN([JDKOPT_SETUP_SIGNING_HOOK],
 977 [
 978   UTIL_ARG_WITH(NAME: signing-hook, TYPE: executable,
 979       OPTIONAL: true, DEFAULT: "",
 980       DESC: [specify path to script used to code sign native binaries]
 981   )
 982 
 983   AC_MSG_CHECKING([for signing hook])
 984   if test "x$SIGNING_HOOK" != x; then
 985     UTIL_FIXUP_EXECUTABLE(SIGNING_HOOK)
 986     AC_MSG_RESULT([$SIGNING_HOOK])
 987   else
 988     AC_MSG_RESULT([none])
 989   fi
 990   AC_SUBST(SIGNING_HOOK)
 991 ])
 992 
 993 ################################################################################
 994 #
 995 # fallback linker
 996 #
 997 AC_DEFUN_ONCE([JDKOPT_SETUP_FALLBACK_LINKER],
 998 [
 999   FALLBACK_LINKER_DEFAULT=false
1000 
1001   if HOTSPOT_CHECK_JVM_VARIANT(zero); then
1002     FALLBACK_LINKER_DEFAULT=true
1003   fi
1004 
1005   UTIL_ARG_ENABLE(NAME: fallback-linker, DEFAULT: $FALLBACK_LINKER_DEFAULT,
1006       RESULT: ENABLE_FALLBACK_LINKER,
1007       DESC: [enable libffi-based fallback implementation of java.lang.foreign.Linker],
1008       CHECKING_MSG: [if fallback linker enabled])
1009   AC_SUBST(ENABLE_FALLBACK_LINKER)
1010 ])