1 # Copyright (c) 2009-2010 Satoshi Nakamoto
2 # Distributed under the MIT/X11 software license, see the accompanying
3 # file license.txt or http://www.opensource.org/licenses/mit-license.php.
9 DEFS += $(addprefix -I,$(BOOST_INCLUDE_PATH) $(BDB_INCLUDE_PATH) $(OPENSSL_INCLUDE_PATH))
10 LIBS = $(addprefix -L,$(BOOST_LIB_PATH) $(BDB_LIB_PATH) $(OPENSSL_LIB_PATH))
20 TESTDEFS += -DBOOST_TEST_DYN_LINK
23 # for boost 1.37, add -mt to the boost libraries
26 -l boost_system$(BOOST_LIB_SUFFIX) \
27 -l boost_filesystem$(BOOST_LIB_SUFFIX) \
28 -l boost_program_options$(BOOST_LIB_SUFFIX) \
29 -l boost_thread$(BOOST_LIB_SUFFIX) \
30 -l db_cxx$(BDB_LIB_SUFFIX) \
37 ifneq (${USE_UPNP}, -)
39 DEFS += -DUSE_UPNP=$(USE_UPNP)
54 # Make some classes of vulnerabilities unexploitable in case one is discovered.
56 # This is a workaround for Ubuntu bug #691722, the default -fstack-protector causes
57 # -fstack-protector-all to be ignored unless -fno-stack-protector is used first.
58 # see: https://bugs.launchpad.net/ubuntu/+source/gcc-4.5/+bug/691722
59 HARDENING=-fno-stack-protector
62 # Put numbers at the beginning of each stack frame and check that they are the same.
63 # If a stack buffer if overflowed, it writes over the canary number and then on return
64 # when that number is checked, it won't be the same and the program will exit with
65 # a "Stack smashing detected" error instead of being exploited.
66 HARDENING+=-fstack-protector-all -Wstack-protector
68 # Make some important things such as the global offset table read only as soon as
69 # the dynamic linker is finished building it. This will prevent overwriting of addresses
70 # which would later be jumped to.
71 HARDENING+=-Wl,-z,relro -Wl,-z,now
73 # Build position independent code to take advantage of Address Space Layout Randomization
74 # offered by some kernels.
75 # see doc/build-unix.txt for more information.
80 # -D_FORTIFY_SOURCE=2 does some checking for potentially exploitable code patterns in
81 # the source such overflowing a statically defined buffer.
82 HARDENING+=-D_FORTIFY_SOURCE=2
88 xCXXFLAGS=-pthread -Wno-invalid-offsetof -Wformat $(DEBUGFLAGS) $(DEFS) $(HARDENING) $(CXXFLAGS)
130 # auto-generated dependencies:
131 -include obj/nogui/*.P
132 -include obj-test/*.P
135 $(CXX) -c $(xCXXFLAGS) -MMD -o $@ $<
136 @cp $(@:%.o=%.d) $(@:%.o=%.P); \
137 sed -e 's/#.*//' -e 's/^[^:]*: *//' -e 's/ *\\$$//' \
138 -e '/^$$/ d' -e 's/$$/ :/' < $(@:%.o=%.d) >> $(@:%.o=%.P); \
141 bitcoind: $(OBJS:obj/%=obj/nogui/%)
142 $(CXX) $(xCXXFLAGS) -o $@ $^ $(LDFLAGS) $(LIBS)
144 obj-test/%.o: test/%.cpp
145 $(CXX) -c $(TESTDEFS) $(xCXXFLAGS) -MMD -o $@ $<
146 @cp $(@:%.o=%.d) $(@:%.o=%.P); \
147 sed -e 's/#.*//' -e 's/^[^:]*: *//' -e 's/ *\\$$//' \
148 -e '/^$$/ d' -e 's/$$/ :/' < $(@:%.o=%.d) >> $(@:%.o=%.P); \
151 test_bitcoin: obj-test/test_bitcoin.o $(filter-out obj/nogui/init.o,$(OBJS:obj/%=obj/nogui/%))
152 $(CXX) $(xCXXFLAGS) -o $@ $(LIBPATHS) $^ -Wl,-B$(LMODE) -lboost_unit_test_framework $(LDFLAGS) $(LIBS)
155 -rm -f bitcoind test_bitcoin