1a5bd697ad
this makes it a lot easier to create a modified stdenv with a different set of defaultHardeningFlags and as a bonus allows us to inject the correct defaultHardeningFlags into toolchain wrapper scripts, reducing repetition. while most hardening flags are arguably more of a compiler thing, it works better to put them in bintools-wrapper because cc-wrapper can easily refer to bintools but not vice-versa. mkDerivation can still easily refer to either when it is constructed. this also switches fortran-hook.sh to use the same defaults for NIX_HARDENING_ENABLE as for C. previously NIX_HARDENING_ENABLE defaults were apparently used to avoid passing problematic flags to a fortran compiler, but this falls apart as soon as mkDerivation sets its own NIX_HARDENING_ENABLE - cc.hardeningUnsupportedFlags is a more appropriate mechanism for this as it actively filters out flags from being used by the wrapper, so switch to using that instead. this is still an imperfect mechanism because it doesn't handle a compiler which has both langFortran *and* langC very well - applying the superset of the two's hardeningUnsupportedFlags to either compiler's invocation. however this is nothing new - cc-wrapper already poorly handles a langFortran+langC compiler, applying two setup hooks that have contradictory options.
457 lines
16 KiB
Nix
457 lines
16 KiB
Nix
{ lib, stdenv, targetPackages, fetchurl, fetchpatch, noSysDirs
|
|
, langC ? true, langCC ? true, langFortran ? false
|
|
, langAda ? false
|
|
, langObjC ? stdenv.targetPlatform.isDarwin
|
|
, langObjCpp ? stdenv.targetPlatform.isDarwin
|
|
, langD ? false
|
|
, langGo ? false
|
|
, reproducibleBuild ? true
|
|
, profiledCompiler ? false
|
|
, langJit ? false
|
|
, staticCompiler ? false
|
|
, enableShared ? stdenv.targetPlatform.hasSharedLibraries
|
|
, enableLTO ? stdenv.hostPlatform.hasSharedLibraries
|
|
, texinfo ? null
|
|
, perl ? null # optional, for texi2pod (then pod2man)
|
|
, gmp, mpfr, libmpc, gettext, which, patchelf, binutils
|
|
, isl ? null # optional, for the Graphite optimization framework.
|
|
, zlib ? null
|
|
, libucontext ? null
|
|
, gnat-bootstrap ? null
|
|
, enableMultilib ? false
|
|
, enablePlugin ? stdenv.hostPlatform == stdenv.buildPlatform # Whether to support user-supplied plug-ins
|
|
, name ? "gcc"
|
|
, libcCross ? null
|
|
, threadsCross ? null # for MinGW
|
|
, withoutTargetLibc ? false
|
|
, gnused ? null
|
|
, cloog # unused; just for compat with gcc4, as we override the parameter on some places
|
|
, buildPackages
|
|
, pkgsBuildTarget
|
|
, libxcrypt
|
|
, disableGdbPlugin ? !enablePlugin || (stdenv.targetPlatform.isAvr && stdenv.hostPlatform.isDarwin && stdenv.hostPlatform.isAarch64)
|
|
, nukeReferences
|
|
, callPackage
|
|
, majorMinorVersion
|
|
, darwin
|
|
|
|
# only for gcc<=6.x
|
|
, langJava ? false
|
|
, flex
|
|
, boehmgc ? null
|
|
, zip ? null, unzip ? null, pkg-config ? null
|
|
, gtk2 ? null, libart_lgpl ? null
|
|
, libX11 ? null, libXt ? null, libSM ? null, libICE ? null, libXtst ? null
|
|
, libXrender ? null, xorgproto ? null
|
|
, libXrandr ? null, libXi ? null
|
|
, x11Support ? langJava
|
|
}:
|
|
|
|
let
|
|
versions = import ./versions.nix;
|
|
version = versions.fromMajorMinor majorMinorVersion;
|
|
|
|
majorVersion = lib.versions.major version;
|
|
atLeast13 = lib.versionAtLeast version "13";
|
|
atLeast12 = lib.versionAtLeast version "12";
|
|
atLeast11 = lib.versionAtLeast version "11";
|
|
atLeast10 = lib.versionAtLeast version "10";
|
|
atLeast9 = lib.versionAtLeast version "9";
|
|
atLeast8 = lib.versionAtLeast version "8";
|
|
atLeast7 = lib.versionAtLeast version "7";
|
|
atLeast6 = lib.versionAtLeast version "6";
|
|
atLeast49 = lib.versionAtLeast version "4.9";
|
|
is13 = majorVersion == "13";
|
|
is12 = majorVersion == "12";
|
|
is11 = majorVersion == "11";
|
|
is10 = majorVersion == "10";
|
|
is9 = majorVersion == "9";
|
|
is8 = majorVersion == "8";
|
|
is7 = majorVersion == "7";
|
|
is6 = majorVersion == "6";
|
|
is49 = majorVersion == "4" && lib.versions.minor version == "9";
|
|
is48 = majorVersion == "4" && lib.versions.minor version == "8";
|
|
in
|
|
|
|
# We enable the isl cloog backend.
|
|
assert !atLeast6 -> (cloog != null -> isl != null);
|
|
|
|
assert langJava -> !atLeast7 && zip != null && unzip != null && zlib != null && boehmgc != null && perl != null; # for `--enable-java-home'
|
|
|
|
# Make sure we get GNU sed.
|
|
assert stdenv.buildPlatform.isDarwin -> gnused != null;
|
|
|
|
# The go frontend is written in c++
|
|
assert langGo -> langCC;
|
|
assert (atLeast6 && !is7 && !is8) -> (langAda -> gnat-bootstrap != null);
|
|
|
|
# TODO: fixup D bootstapping, probably by using gdc11 (and maybe other changes).
|
|
# error: GDC is required to build d
|
|
assert atLeast12 -> !langD;
|
|
|
|
# threadsCross is just for MinGW
|
|
assert threadsCross != {} -> stdenv.targetPlatform.isWindows;
|
|
|
|
# profiledCompiler builds inject non-determinism in one of the compilation stages.
|
|
# If turned on, we can't provide reproducible builds anymore
|
|
assert reproducibleBuild -> profiledCompiler == false;
|
|
|
|
with lib;
|
|
with builtins;
|
|
|
|
let inherit version;
|
|
disableBootstrap = atLeast11 && !stdenv.hostPlatform.isDarwin && (atLeast12 -> !profiledCompiler);
|
|
|
|
inherit (stdenv) buildPlatform hostPlatform targetPlatform;
|
|
|
|
patches = callFile ./patches {};
|
|
|
|
/* Cross-gcc settings (build == host != target) */
|
|
crossMingw = targetPlatform != hostPlatform && targetPlatform.isMinGW;
|
|
stageNameAddon = optionalString withoutTargetLibc "-nolibc";
|
|
crossNameAddon = optionalString (targetPlatform != hostPlatform) "${targetPlatform.config}${stageNameAddon}-";
|
|
|
|
javaAwtGtk = langJava && x11Support;
|
|
xlibs = [
|
|
libX11 libXt libSM libICE libXtst libXrender libXrandr libXi
|
|
xorgproto
|
|
];
|
|
callFile = lib.callPackageWith ({
|
|
# lets
|
|
inherit
|
|
majorVersion
|
|
version
|
|
buildPlatform
|
|
hostPlatform
|
|
targetPlatform
|
|
patches
|
|
crossMingw
|
|
stageNameAddon
|
|
crossNameAddon
|
|
;
|
|
# inherit generated with 'nix eval --json --impure --expr "with import ./. {}; lib.attrNames (lib.functionArgs gcc${majorVersion}.cc.override)" | jq '.[]' --raw-output'
|
|
inherit
|
|
binutils
|
|
buildPackages
|
|
cloog
|
|
withoutTargetLibc
|
|
disableBootstrap
|
|
disableGdbPlugin
|
|
enableLTO
|
|
enableMultilib
|
|
enablePlugin
|
|
enableShared
|
|
fetchpatch
|
|
fetchurl
|
|
gettext
|
|
gmp
|
|
gnat-bootstrap
|
|
gnused
|
|
isl
|
|
langAda
|
|
langC
|
|
langCC
|
|
langD
|
|
langFortran
|
|
langGo
|
|
langJit
|
|
langObjC
|
|
langObjCpp
|
|
lib
|
|
libcCross
|
|
libmpc
|
|
libucontext
|
|
libxcrypt
|
|
mpfr
|
|
name
|
|
noSysDirs
|
|
nukeReferences
|
|
patchelf
|
|
perl
|
|
pkgsBuildTarget
|
|
profiledCompiler
|
|
reproducibleBuild
|
|
staticCompiler
|
|
stdenv
|
|
targetPackages
|
|
texinfo
|
|
threadsCross
|
|
which
|
|
zip
|
|
zlib
|
|
;
|
|
} // lib.optionalAttrs (!atLeast7) {
|
|
inherit
|
|
boehmgc
|
|
flex
|
|
gnat-bootstrap
|
|
gtk2
|
|
langAda
|
|
langJava
|
|
libICE
|
|
libSM
|
|
libX11
|
|
libXi
|
|
libXrandr
|
|
libXrender
|
|
libXt
|
|
libXtst
|
|
libart_lgpl
|
|
pkg-config
|
|
unzip
|
|
x11Support
|
|
xorgproto
|
|
javaAwtGtk
|
|
xlibs
|
|
;
|
|
javaEcj = fetchurl {
|
|
# The `$(top_srcdir)/ecj.jar' file is automatically picked up at
|
|
# `configure' time.
|
|
|
|
# XXX: Eventually we might want to take it from upstream.
|
|
url = "ftp://sourceware.org/pub/java/ecj-4.3.jar";
|
|
sha256 = "0jz7hvc0s6iydmhgh5h2m15yza7p2rlss2vkif30vm9y77m97qcx";
|
|
};
|
|
|
|
# Antlr (optional) allows the Java `gjdoc' tool to be built. We want a
|
|
# binary distribution here to allow the whole chain to be bootstrapped.
|
|
javaAntlr = fetchurl {
|
|
url = "https://www.antlr.org/download/antlr-4.4-complete.jar";
|
|
sha256 = "02lda2imivsvsis8rnzmbrbp8rh1kb8vmq4i67pqhkwz7lf8y6dz";
|
|
};
|
|
});
|
|
|
|
in
|
|
|
|
# We need all these X libraries when building AWT with GTK.
|
|
assert !atLeast7 -> (x11Support -> (filter (x: x == null) ([ gtk2 libart_lgpl ] ++ xlibs)) == []);
|
|
|
|
lib.pipe ((callFile ./common/builder.nix {}) ({
|
|
pname = "${crossNameAddon}${name}";
|
|
inherit version;
|
|
|
|
src = if is6 && stdenv.targetPlatform.isVc4 then fetchFromGitHub {
|
|
owner = "itszor";
|
|
repo = "gcc-vc4";
|
|
rev = "e90ff43f9671c760cf0d1dd62f569a0fb9bf8918";
|
|
sha256 = "0gxf66hwqk26h8f853sybphqa5ca0cva2kmrw5jsiv6139g0qnp8";
|
|
} else if is6 && stdenv.targetPlatform.isRedox then fetchFromGitHub {
|
|
owner = "redox-os";
|
|
repo = "gcc";
|
|
rev = "f360ac095028d286fc6dde4d02daed48f59813fa"; # `redox` branch
|
|
sha256 = "1an96h8l58pppyh3qqv90g8hgcfd9hj7igvh2gigmkxbrx94khfl";
|
|
} else fetchurl {
|
|
url = if atLeast7
|
|
then "mirror://gcc/releases/gcc-${version}/gcc-${version}.tar.xz"
|
|
else if atLeast6
|
|
then "mirror://gnu/gcc/gcc-${version}/gcc-${version}.tar.xz"
|
|
else "mirror://gnu/gcc/gcc-${version}/gcc-${version}.tar.bz2";
|
|
${if is10 || is11 || is13 then "hash" else "sha256"} =
|
|
versions.srcHashForVersion version;
|
|
};
|
|
|
|
inherit patches;
|
|
|
|
outputs =
|
|
if atLeast7
|
|
then [ "out" "man" "info" ] ++ lib.optional (!langJit) "lib"
|
|
else if atLeast49 && (langJava || langGo || (if atLeast6 then langJit else targetPlatform.isDarwin)) then ["out" "man" "info"]
|
|
else [ "out" "lib" "man" "info" ];
|
|
|
|
setOutputFlags = false;
|
|
|
|
libc_dev = stdenv.cc.libc_dev;
|
|
|
|
hardeningDisable = [ "format" "pie" ]
|
|
++ lib.optionals (is11 && langAda) [ "fortify3" ];
|
|
|
|
postPatch = lib.optionalString atLeast7 ''
|
|
configureScripts=$(find . -name configure)
|
|
for configureScript in $configureScripts; do
|
|
patchShebangs $configureScript
|
|
done
|
|
''
|
|
# This should kill all the stdinc frameworks that gcc and friends like to
|
|
# insert into default search paths.
|
|
+ lib.optionalString (atLeast6 && hostPlatform.isDarwin) ''
|
|
substituteInPlace gcc/config/darwin-c.c${lib.optionalString atLeast12 "c"} \
|
|
--replace 'if (stdinc)' 'if (0)'
|
|
|
|
substituteInPlace libgcc/config/t-slibgcc-darwin \
|
|
--replace "-install_name @shlib_slibdir@/\$(SHLIB_INSTALL_NAME)" "-install_name ''${!outputLib}/lib/\$(SHLIB_INSTALL_NAME)"
|
|
|
|
substituteInPlace libgfortran/configure \
|
|
--replace "-install_name \\\$rpath/\\\$soname" "-install_name ''${!outputLib}/lib/\\\$soname"
|
|
''
|
|
+ (
|
|
lib.optionalString (targetPlatform != hostPlatform || stdenv.cc.libc != null)
|
|
# On NixOS, use the right path to the dynamic linker instead of
|
|
# `/lib/ld*.so'.
|
|
(let
|
|
libc = if libcCross != null then libcCross else stdenv.cc.libc;
|
|
in
|
|
(
|
|
'' echo "fixing the {GLIBC,UCLIBC,MUSL}_DYNAMIC_LINKER macros..."
|
|
for header in "gcc/config/"*-gnu.h "gcc/config/"*"/"*.h
|
|
do
|
|
grep -q ${lib.optionalString (!atLeast6) "LIBC"}_DYNAMIC_LINKER "$header" || continue
|
|
echo " fixing $header..."
|
|
sed -i "$header" \
|
|
-e 's|define[[:blank:]]*\([UCG]\+\)LIBC_DYNAMIC_LINKER\([0-9]*\)[[:blank:]]"\([^\"]\+\)"$|define \1LIBC_DYNAMIC_LINKER\2 "${libc.out}\3"|g' \
|
|
-e 's|define[[:blank:]]*MUSL_DYNAMIC_LINKER\([0-9]*\)[[:blank:]]"\([^\"]\+\)"$|define MUSL_DYNAMIC_LINKER\1 "${libc.out}\2"|g'
|
|
done
|
|
'' + lib.optionalString (atLeast6 && targetPlatform.libc == "musl") ''
|
|
sed -i gcc/config/linux.h -e '1i#undef LOCAL_INCLUDE_DIR'
|
|
''
|
|
)
|
|
))
|
|
+ lib.optionalString (atLeast7 && targetPlatform.isAvr) (''
|
|
makeFlagsArray+=(
|
|
'-s' # workaround for hitting hydra log limit
|
|
'LIMITS_H_TEST=false'
|
|
)
|
|
'');
|
|
|
|
inherit noSysDirs staticCompiler withoutTargetLibc
|
|
libcCross crossMingw;
|
|
|
|
inherit (callFile ./common/dependencies.nix { }) depsBuildBuild nativeBuildInputs depsBuildTarget buildInputs depsTargetTarget;
|
|
|
|
preConfigure = (callFile ./common/pre-configure.nix { }) + lib.optionalString atLeast10 ''
|
|
ln -sf ${libxcrypt}/include/crypt.h libsanitizer/sanitizer_common/crypt.h
|
|
'';
|
|
|
|
dontDisableStatic = true;
|
|
|
|
configurePlatforms = [ "build" "host" "target" ];
|
|
|
|
configureFlags = (callFile ./common/configure-flags.nix { })
|
|
++ optional (is7 && targetPlatform.isAarch64) "--enable-fix-cortex-a53-843419"
|
|
++ optional (is7 && targetPlatform.isNetBSD) "--disable-libcilkrts";
|
|
|
|
targetConfig = if targetPlatform != hostPlatform then targetPlatform.config else null;
|
|
|
|
buildFlags =
|
|
# we do not yet have Nix-driven profiling
|
|
assert atLeast12 -> (profiledCompiler -> !disableBootstrap);
|
|
if atLeast11
|
|
then let target =
|
|
lib.optionalString (profiledCompiler) "profiled" +
|
|
lib.optionalString (targetPlatform == hostPlatform && hostPlatform == buildPlatform && !disableBootstrap) "bootstrap";
|
|
in lib.optional (target != "") target
|
|
else
|
|
optional
|
|
(targetPlatform == hostPlatform && hostPlatform == buildPlatform)
|
|
(if profiledCompiler then "profiledbootstrap" else "bootstrap");
|
|
|
|
inherit (callFile ./common/strip-attributes.nix { })
|
|
stripDebugList
|
|
stripDebugListTarget
|
|
preFixup;
|
|
|
|
# https://gcc.gnu.org/PR109898
|
|
enableParallelInstalling = false;
|
|
|
|
env = mapAttrs (_: v: toString v) ({
|
|
|
|
NIX_NO_SELF_RPATH = true;
|
|
|
|
# https://gcc.gnu.org/install/specific.html#x86-64-x-solaris210
|
|
${if hostPlatform.system == "x86_64-solaris" then "CC" else null} = "gcc -m64";
|
|
|
|
# Setting $CPATH and $LIBRARY_PATH to make sure both `gcc' and `xgcc' find the
|
|
# library headers and binaries, regarless of the language being compiled.
|
|
#
|
|
# Note: When building the Java AWT GTK peer, the build system doesn't honor
|
|
# `--with-gmp' et al., e.g., when building
|
|
# `libjava/classpath/native/jni/java-math/gnu_java_math_GMP.c', so we just add
|
|
# them to $CPATH and $LIBRARY_PATH in this case.
|
|
#
|
|
# Likewise, the LTO code doesn't find zlib.
|
|
#
|
|
# Cross-compiling, we need gcc not to read ./specs in order to build the g++
|
|
# compiler (after the specs for the cross-gcc are created). Having
|
|
# LIBRARY_PATH= makes gcc read the specs from ., and the build breaks.
|
|
|
|
CPATH = optionals (targetPlatform == hostPlatform) (makeSearchPathOutput "dev" "include" ([]
|
|
++ optional (zlib != null) zlib
|
|
++ optional langJava boehmgc
|
|
++ optionals javaAwtGtk xlibs
|
|
++ optionals javaAwtGtk [ gmp mpfr ]
|
|
));
|
|
|
|
LIBRARY_PATH = optionals (targetPlatform == hostPlatform) (makeLibraryPath (
|
|
optional (zlib != null) zlib
|
|
++ optional langJava boehmgc
|
|
++ optionals javaAwtGtk xlibs
|
|
++ optionals javaAwtGtk [ gmp mpfr ]
|
|
));
|
|
|
|
inherit (callFile ./common/extra-target-flags.nix { })
|
|
EXTRA_FLAGS_FOR_TARGET
|
|
EXTRA_LDFLAGS_FOR_TARGET
|
|
;
|
|
} // optionalAttrs is7 {
|
|
NIX_CFLAGS_COMPILE = lib.optionalString (stdenv.cc.isClang && langFortran) "-Wno-unused-command-line-argument"
|
|
# Downgrade register storage class specifier errors to warnings when building a cross compiler from a clang stdenv.
|
|
+ lib.optionalString (stdenv.cc.isClang && targetPlatform != hostPlatform) " -Wno-register";
|
|
} // optionalAttrs (!is7 && !atLeast12 && stdenv.cc.isClang && targetPlatform != hostPlatform) {
|
|
NIX_CFLAGS_COMPILE = "-Wno-register";
|
|
} // optionalAttrs (!atLeast7) {
|
|
inherit langJava;
|
|
} // optionalAttrs atLeast6 {
|
|
NIX_LDFLAGS = lib.optionalString hostPlatform.isSunOS "-lm";
|
|
});
|
|
|
|
passthru = {
|
|
inherit langC langCC langObjC langObjCpp langAda langFortran langGo langD langJava version;
|
|
isGNU = true;
|
|
hardeningUnsupportedFlags = lib.optional is48 "stackprotector"
|
|
++ lib.optional (!atLeast12) "fortify3"
|
|
++ lib.optionals (langFortran) [ "fortify" "format" ];
|
|
};
|
|
|
|
enableParallelBuilding = true;
|
|
inherit enableShared enableMultilib;
|
|
|
|
meta = {
|
|
inherit (callFile ./common/meta.nix { })
|
|
homepage
|
|
license
|
|
description
|
|
longDescription
|
|
platforms
|
|
maintainers
|
|
;
|
|
} // lib.optionalAttrs (!atLeast11) {
|
|
badPlatforms =
|
|
# avr-gcc8 is maintained for the `qmk` package
|
|
if (is8 && targetPlatform.isAvr) then []
|
|
else if !(is48 || is49) then [ "aarch64-darwin" ]
|
|
else lib.platforms.darwin;
|
|
} // lib.optionalAttrs is11 {
|
|
badPlatforms = if targetPlatform != hostPlatform then [ "aarch64-darwin" ] else [ ];
|
|
};
|
|
} // lib.optionalAttrs (!atLeast10 && stdenv.targetPlatform.isDarwin) {
|
|
# GCC <10 requires default cctools `strip` instead of `llvm-strip` used by Darwin bintools.
|
|
preBuild = ''
|
|
makeFlagsArray+=('STRIP=${lib.getBin darwin.cctools-port}/bin/${stdenv.cc.targetPrefix}strip')
|
|
'';
|
|
} // optionalAttrs (!atLeast8) {
|
|
doCheck = false; # requires a lot of tools, causes a dependency cycle for stdenv
|
|
} // optionalAttrs enableMultilib {
|
|
dontMoveLib64 = true;
|
|
} // optionalAttrs (((is49 && !stdenv.hostPlatform.isDarwin) || is6) && langJava) {
|
|
postFixup = ''
|
|
target="$(echo "$out/libexec/gcc"/*/*/ecj*)"
|
|
patchelf --set-rpath "$(patchelf --print-rpath "$target"):$out/lib" "$target"
|
|
'';
|
|
}
|
|
))
|
|
([
|
|
(callPackage ./common/libgcc.nix { inherit version langC langCC langJit targetPlatform hostPlatform withoutTargetLibc enableShared libcCross; })
|
|
] ++ optionals atLeast11 [
|
|
(callPackage ./common/checksum.nix { inherit langC langCC; })
|
|
])
|
|
|