libmongocrypt-helper 1.7.4.0.1002 → 1.11.0.0.1001

data/ext/libmongocrypt/libmongocrypt/bindings/python/update-sbom.sh

@@ -0,0 +1,14 @@
+#!/bin/bash
+
+set -eux
+
+LIBMONGOCRYPT_VERSION=$(cat ./libmongocrypt-version.txt)
+if [ $(command -v podman) ]; then
+    DOCKER=podman
+else
+    DOCKER=docker
+fi
+
+echo "pkg:github/mongodb/libmongocrypt@$LIBMONGOCRYPT_VERSION" > purls.txt
+$DOCKER run --platform="linux/amd64" -it --rm -v $(pwd):$(pwd) artifactory.corp.mongodb.com/release-tools-container-registry-public-local/silkbomb:1.0 update --purls=$(pwd)/purls.txt -o $(pwd)/sbom.json
+rm purls.txt

data/ext/libmongocrypt/libmongocrypt/cmake/FetchMongoC.cmake

@@ -1,12 +1,30 @@
 include (FetchContent)
 
 # Set the tag that we will fetch.
-set (MONGOC_FETCH_TAG_FOR_LIBBSON "1.17.7" CACHE STRING "The Git tag of mongo-c-driver that will be fetched to obtain libbson")
+# When updating the version of libbson, also update the version in etc/purls.txt
+set (MONGOC_FETCH_TAG_FOR_LIBBSON "1.27.1" CACHE STRING "The Git tag of mongo-c-driver that will be fetched to obtain libbson")
+
+# Add an option to disable patching if a patch command is unavailable.
+option (LIBBSON_PATCH_ENABLED "Whether to apply patches to the libbson library" ON)
+set (patch_disabled OFF)
+if (NOT LIBBSON_PATCH_ENABLED)
+    set (patch_disabled ON)
+endif ()
+
+include (Patch)
+make_patch_command (patch_command
+    STRIP_COMPONENTS 1
+    DIRECTORY "<SOURCE_DIR>"
+    DISABLED "${patch_disabled}"
+    PATCHES
+        ${PROJECT_SOURCE_DIR}/etc/libbson-remove-GCC-diagnostic-pragma.patch
+    )
 
 # Fetch the source archive for the requested tag from GitHub
 FetchContent_Declare (
     embedded_mcd
     URL "https://github.com/mongodb/mongo-c-driver/archive/refs/tags/${MONGOC_FETCH_TAG_FOR_LIBBSON}.tar.gz"
+    PATCH_COMMAND ${patch_command} --verbose
     )
 # Populate it:
 FetchContent_GetProperties (embedded_mcd)

data/ext/libmongocrypt/libmongocrypt/cmake/ImportBSON.cmake

@@ -132,6 +132,8 @@ function (_import_bson)
       set (ENABLE_MONGODB_AWS_AUTH OFF CACHE BOOL "Disable kms-message content in mongoc for libmongocrypt" FORCE)
       # Disable install() for the libbson static library. We'll do it ourselves
       set (ENABLE_STATIC BUILD_ONLY)
+      # Disable zlib, which isn't necessary for libmongocrypt and isn't necessarily available.
+      set (ENABLE_ZLIB OFF CACHE BOOL "Toggle zlib for the mongoc subproject (not required by libmongocrypt)")
       # Disable libzstd, which isn't necessary for libmongocrypt and isn't necessarily available.
       set (ENABLE_ZSTD OFF CACHE BOOL "Toggle libzstd for the mongoc subproject (not required by libmongocrypt)")
       # Disable snappy, which isn't necessary for libmongocrypt and isn't necessarily available.
@@ -142,6 +144,21 @@ function (_import_bson)
       set (ENABLE_EXTRA_ALIGNMENT ${_extra_alignment_default} CACHE BOOL "Toggle extra alignment of bson_t")
       # We don't want the subproject to find libmongocrypt
       set (ENABLE_CLIENT_SIDE_ENCRYPTION OFF CACHE BOOL "Disable client-side encryption for the libmongoc subproject")
+      # Clear `BUILD_VERSION` so C driver does not use a `BUILD_VERSION` meant for libmongocrypt.
+      # Both libmongocrypt and C driver support setting a `BUILD_VERSION` to override the version.
+      if (DEFINED CACHE{BUILD_VERSION})
+         set (saved_cached_build_version "${BUILD_VERSION}")
+         unset (BUILD_VERSION CACHE) # Undefine cache variable.
+      endif ()
+      if (DEFINED BUILD_VERSION)
+         set (saved_build_version "${BUILD_VERSION}")
+         unset (BUILD_VERSION) # Undefine normal variable.
+      endif ()
+      # Disable building tests in C driver:
+      set (ENABLE_TESTS OFF)
+      set (BUILD_TESTING OFF)
+      # Disable counters in C driver. Counters are not supported on all platforms.
+      set (ENABLE_SHM_COUNTERS OFF)
       # Add the subdirectory as a project. EXCLUDE_FROM_ALL to inhibit building and installing of components unless requested
       # SYSTEM (on applicable CMake versions) to prevent warnings (particularly from -Wconversion/-Wsign-conversion) from the C driver code
       if (CMAKE_VERSION VERSION_GREATER 3.25)
@@ -149,12 +166,20 @@ function (_import_bson)
       else ()
          add_subdirectory ("${MONGOCRYPT_MONGOC_DIR}" _mongo-c-driver EXCLUDE_FROM_ALL)
       endif ()
-      # Workaround: Embedded mongoc_static does not set its INCLUDE_DIRECTORIES for user targets
-      target_include_directories (mongoc_static
-         PUBLIC
-            "$<BUILD_INTERFACE:${MONGOCRYPT_MONGOC_DIR}/src/libmongoc/src>"
-            "$<BUILD_INTERFACE:${CMAKE_CURRENT_BINARY_DIR}/_mongo-c-driver/src/libmongoc/src/mongoc>"
-         )
+      if (DEFINED saved_cached_build_version)
+         set (BUILD_VERSION "${saved_cached_build_version}" CACHE STRING "Library version")
+      endif ()
+      if (DEFINED saved_build_version)
+         set (BUILD_VERSION "${saved_build_version}")
+      endif ()
+      if (TARGET mongoc_static)
+         # Workaround: Embedded mongoc_static does not set its INCLUDE_DIRECTORIES for user targets
+         target_include_directories (mongoc_static
+            PUBLIC
+               "$<BUILD_INTERFACE:${MONGOCRYPT_MONGOC_DIR}/src/libmongoc/src>"
+               "$<BUILD_INTERFACE:${CMAKE_CURRENT_BINARY_DIR}/_mongo-c-driver/src/libmongoc/src/mongoc>"
+            )
+      endif ()
    endif ()
 endfunction ()
 

data/ext/libmongocrypt/libmongocrypt/cmake/IntelDFP.cmake

@@ -1,8 +1,7 @@
 
 include (FetchContent)
-find_program (GIT_EXECUTABLE git)
-find_program (PATCH_EXECUTABLE patch)
 
+# When updating the version of IntelDFP, also update the version in etc/purls.txt
 set (_default_url "${PROJECT_SOURCE_DIR}/third-party/IntelRDFPMathLib20U2.tar.xz")
 
 set (INTEL_DFP_LIBRARY_URL "${_default_url}"
@@ -11,23 +10,30 @@ set (INTEL_DFP_LIBRARY_URL_HASH
      "SHA256=ac157e69c05556f3fa468ab34caeb1114a3b88ae18241bd41cc57b85a02dd314"
      CACHE STRING "The hash of the archive that lives at INTEL_DFP_LIBRARY_URL (Spelled: <ALGO>=<digest>)")
 option (INTEL_DFP_LIBRARY_PATCH_ENABLED
-        "Whether to apply the s390x compatibility patch to the Intel DFP library" ON)
+        "Whether to apply patches to the Intel DFP library" ON)
 
 set (_hash_arg)
 if (NOT INTEL_DFP_LIBRARY_URL_SHA256 STREQUAL "no-verify")
     set (_hash_arg URL_HASH "${INTEL_DFP_LIBRARY_URL_HASH}")
 endif ()
 
-# Make the PATCH_COMMAND a no-op if it was disabled
-set (patch_command)
+set (patch_disabled OFF)
 if (NOT INTEL_DFP_LIBRARY_PATCH_ENABLED)
-    set (patch_command "${CMAKE_COMMAND}" -E true)
-elseif (GIT_EXECUTABLE)
-    set (patch_command "${GIT_EXECUTABLE}" --work-tree=<SOURCE_DIR> apply)
-else ()
-    set (patch_command "${PATCH_EXECUTABLE}" --dir=<SOURCE_DIR>)
+    set (patch_disabled ON)
 endif ()
 
+include (Patch)
+make_patch_command (patch_command
+    STRIP_COMPONENTS 4
+    DIRECTORY "<SOURCE_DIR>"
+    DISABLED "${patch_disabled}"
+    PATCHES
+        "${PROJECT_SOURCE_DIR}/etc/mongo-inteldfp-s390x.patch"
+        "${PROJECT_SOURCE_DIR}/etc/mongo-inteldfp-MONGOCRYPT-571.patch"
+        "${PROJECT_SOURCE_DIR}/etc/mongo-inteldfp-libmongocrypt-pr-625.patch"
+        "${PROJECT_SOURCE_DIR}/etc/mongo-inteldfp-alpine-arm-fix.patch"
+    )
+
 # NOTE: The applying of the patch expects the correct input directly from the
 #       expanded archive. If the patch needs to be reapplied, you may see errors
 #       about trying to update the intel_dfp component. If you are seeing such
@@ -37,12 +43,7 @@ FetchContent_Declare (
     intel_dfp
     URL "${_default_url}"
     ${_hash_arg}
-    PATCH_COMMAND
-        ${patch_command}
-            -p 4 # Strip four path components
-            "${PROJECT_SOURCE_DIR}/etc/mongo-inteldfp-s390x.patch"
-            "${PROJECT_SOURCE_DIR}/etc/mongo-inteldfp-MONGOCRYPT-571.patch"
-            --verbose
+    PATCH_COMMAND ${patch_command} --verbose
     )
 
 FetchContent_GetProperties (intel_dfp)
@@ -51,247 +52,39 @@ if (NOT intel_dfp_POPULATED)
     FetchContent_Populate (intel_dfp)
 endif ()
 
-# This list of sources matches the ones used within MongoDB server. The
-# "<library>" prefix is replaced below.
+# This list of sources was generated by copying the MongoDB server and removing any unnecessary.
+# Carefully add sources if more functionality is needed. Bundled sources are checked by static analysis, and may result in a larger binary.
+# The "<library>" prefix is replaced below.
 # Refer: https://github.com/mongodb/mongo/blob/e9be40f47a77af1931773ad671d4927c0fe6969a/src/third_party/IntelRDFPMathLib20U1/SConscript
 set (_dfp_sources
     "<library>/float128/dpml_exception.c"
-    "<library>/float128/dpml_four_over_pi.c"
-    "<library>/float128/dpml_ux_bessel.c"
     "<library>/float128/dpml_ux_bid.c"
-    "<library>/float128/dpml_ux_cbrt.c"
-    "<library>/float128/dpml_ux_erf.c"
-    "<library>/float128/dpml_ux_exp.c"
-    "<library>/float128/dpml_ux_int.c"
-    "<library>/float128/dpml_ux_inv_hyper.c"
-    "<library>/float128/dpml_ux_inv_trig.c"
-    "<library>/float128/dpml_ux_lgamma.c"
     "<library>/float128/dpml_ux_log.c"
-    "<library>/float128/dpml_ux_mod.c"
     "<library>/float128/dpml_ux_ops.c"
     "<library>/float128/dpml_ux_ops_64.c"
-    "<library>/float128/dpml_ux_pow.c"
-    "<library>/float128/dpml_ux_powi.c"
-    "<library>/float128/dpml_ux_sqrt.c"
-    "<library>/float128/dpml_ux_trig.c"
-    "<library>/float128/sqrt_tab_t.c"
     "<library>/src/bid128.c"
     "<library>/src/bid128_2_str_tables.c"
-    "<library>/src/bid128_acos.c"
-    "<library>/src/bid128_acosh.c"
     "<library>/src/bid128_add.c"
-    "<library>/src/bid128_asin.c"
-    "<library>/src/bid128_asinh.c"
-    "<library>/src/bid128_atan.c"
-    "<library>/src/bid128_atan2.c"
-    "<library>/src/bid128_atanh.c"
-    "<library>/src/bid128_cbrt.c"
     "<library>/src/bid128_compare.c"
-    "<library>/src/bid128_cos.c"
-    "<library>/src/bid128_cosh.c"
     "<library>/src/bid128_div.c"
-    "<library>/src/bid128_erf.c"
-    "<library>/src/bid128_erfc.c"
-    "<library>/src/bid128_exp.c"
-    "<library>/src/bid128_exp10.c"
-    "<library>/src/bid128_exp2.c"
-    "<library>/src/bid128_expm1.c"
-    "<library>/src/bid128_fdimd.c"
     "<library>/src/bid128_fma.c"
     "<library>/src/bid128_fmod.c"
-    "<library>/src/bid128_frexp.c"
-    "<library>/src/bid128_hypot.c"
-    "<library>/src/bid128_ldexp.c"
-    "<library>/src/bid128_lgamma.c"
-    "<library>/src/bid128_llrintd.c"
-    "<library>/src/bid128_log.c"
     "<library>/src/bid128_log10.c"
-    "<library>/src/bid128_log1p.c"
     "<library>/src/bid128_log2.c"
-    "<library>/src/bid128_logb.c"
-    "<library>/src/bid128_logbd.c"
-    "<library>/src/bid128_lrintd.c"
-    "<library>/src/bid128_lround.c"
-    "<library>/src/bid128_minmax.c"
     "<library>/src/bid128_modf.c"
     "<library>/src/bid128_mul.c"
-    "<library>/src/bid128_nearbyintd.c"
-    "<library>/src/bid128_next.c"
-    "<library>/src/bid128_nexttowardd.c"
     "<library>/src/bid128_noncomp.c"
-    "<library>/src/bid128_pow.c"
-    "<library>/src/bid128_quantexpd.c"
-    "<library>/src/bid128_quantize.c"
-    "<library>/src/bid128_rem.c"
     "<library>/src/bid128_round_integral.c"
     "<library>/src/bid128_scalb.c"
     "<library>/src/bid128_scalbl.c"
-    "<library>/src/bid128_sin.c"
-    "<library>/src/bid128_sinh.c"
-    "<library>/src/bid128_sqrt.c"
     "<library>/src/bid128_string.c"
-    "<library>/src/bid128_tan.c"
-    "<library>/src/bid128_tanh.c"
-    "<library>/src/bid128_tgamma.c"
-    "<library>/src/bid128_to_int16.c"
-    "<library>/src/bid128_to_int32.c"
     "<library>/src/bid128_to_int64.c"
-    "<library>/src/bid128_to_int8.c"
-    "<library>/src/bid128_to_uint16.c"
-    "<library>/src/bid128_to_uint32.c"
-    "<library>/src/bid128_to_uint64.c"
-    "<library>/src/bid128_to_uint8.c"
-    "<library>/src/bid32_acos.c"
-    "<library>/src/bid32_acosh.c"
-    "<library>/src/bid32_add.c"
-    "<library>/src/bid32_asin.c"
-    "<library>/src/bid32_asinh.c"
-    "<library>/src/bid32_atan.c"
-    "<library>/src/bid32_atan2.c"
-    "<library>/src/bid32_atanh.c"
-    "<library>/src/bid32_cbrt.c"
-    "<library>/src/bid32_compare.c"
-    "<library>/src/bid32_cos.c"
-    "<library>/src/bid32_cosh.c"
-    "<library>/src/bid32_div.c"
-    "<library>/src/bid32_erf.c"
-    "<library>/src/bid32_erfc.c"
-    "<library>/src/bid32_exp.c"
-    "<library>/src/bid32_exp10.c"
-    "<library>/src/bid32_exp2.c"
-    "<library>/src/bid32_expm1.c"
-    "<library>/src/bid32_fdimd.c"
-    "<library>/src/bid32_fma.c"
-    "<library>/src/bid32_fmod.c"
-    "<library>/src/bid32_frexp.c"
-    "<library>/src/bid32_hypot.c"
-    "<library>/src/bid32_ldexp.c"
-    "<library>/src/bid32_lgamma.c"
-    "<library>/src/bid32_llrintd.c"
-    "<library>/src/bid32_log.c"
-    "<library>/src/bid32_log10.c"
-    "<library>/src/bid32_log1p.c"
-    "<library>/src/bid32_log2.c"
-    "<library>/src/bid32_logb.c"
-    "<library>/src/bid32_logbd.c"
-    "<library>/src/bid32_lrintd.c"
-    "<library>/src/bid32_lround.c"
-    "<library>/src/bid32_minmax.c"
-    "<library>/src/bid32_modf.c"
-    "<library>/src/bid32_mul.c"
-    "<library>/src/bid32_nearbyintd.c"
-    "<library>/src/bid32_next.c"
-    "<library>/src/bid32_nexttowardd.c"
-    "<library>/src/bid32_noncomp.c"
-    "<library>/src/bid32_pow.c"
-    "<library>/src/bid32_quantexpd.c"
-    "<library>/src/bid32_quantize.c"
-    "<library>/src/bid32_rem.c"
-    "<library>/src/bid32_round_integral.c"
-    "<library>/src/bid32_scalb.c"
-    "<library>/src/bid32_scalbl.c"
-    "<library>/src/bid32_sin.c"
-    "<library>/src/bid32_sinh.c"
-    "<library>/src/bid32_sqrt.c"
-    "<library>/src/bid32_string.c"
-    "<library>/src/bid32_sub.c"
-    "<library>/src/bid32_tan.c"
-    "<library>/src/bid32_tanh.c"
-    "<library>/src/bid32_tgamma.c"
-    "<library>/src/bid32_to_bid128.c"
-    "<library>/src/bid32_to_bid64.c"
-    "<library>/src/bid32_to_int16.c"
-    "<library>/src/bid32_to_int32.c"
-    "<library>/src/bid32_to_int64.c"
-    "<library>/src/bid32_to_int8.c"
-    "<library>/src/bid32_to_uint16.c"
-    "<library>/src/bid32_to_uint32.c"
-    "<library>/src/bid32_to_uint64.c"
-    "<library>/src/bid32_to_uint8.c"
-    "<library>/src/bid64_acos.c"
-    "<library>/src/bid64_acosh.c"
-    "<library>/src/bid64_add.c"
-    "<library>/src/bid64_asin.c"
-    "<library>/src/bid64_asinh.c"
-    "<library>/src/bid64_atan.c"
-    "<library>/src/bid64_atan2.c"
-    "<library>/src/bid64_atanh.c"
-    "<library>/src/bid64_cbrt.c"
-    "<library>/src/bid64_compare.c"
-    "<library>/src/bid64_cos.c"
-    "<library>/src/bid64_cosh.c"
-    "<library>/src/bid64_div.c"
-    "<library>/src/bid64_erf.c"
-    "<library>/src/bid64_erfc.c"
-    "<library>/src/bid64_exp.c"
-    "<library>/src/bid64_exp10.c"
-    "<library>/src/bid64_exp2.c"
-    "<library>/src/bid64_expm1.c"
-    "<library>/src/bid64_fdimd.c"
-    "<library>/src/bid64_fma.c"
-    "<library>/src/bid64_fmod.c"
-    "<library>/src/bid64_frexp.c"
-    "<library>/src/bid64_hypot.c"
-    "<library>/src/bid64_ldexp.c"
-    "<library>/src/bid64_lgamma.c"
-    "<library>/src/bid64_llrintd.c"
-    "<library>/src/bid64_log.c"
-    "<library>/src/bid64_log10.c"
-    "<library>/src/bid64_log1p.c"
-    "<library>/src/bid64_log2.c"
-    "<library>/src/bid64_logb.c"
-    "<library>/src/bid64_logbd.c"
-    "<library>/src/bid64_lrintd.c"
-    "<library>/src/bid64_lround.c"
-    "<library>/src/bid64_minmax.c"
-    "<library>/src/bid64_modf.c"
-    "<library>/src/bid64_mul.c"
-    "<library>/src/bid64_nearbyintd.c"
-    "<library>/src/bid64_next.c"
-    "<library>/src/bid64_nexttowardd.c"
-    "<library>/src/bid64_noncomp.c"
-    "<library>/src/bid64_pow.c"
-    "<library>/src/bid64_quantexpd.c"
-    "<library>/src/bid64_quantize.c"
-    "<library>/src/bid64_rem.c"
-    "<library>/src/bid64_round_integral.c"
-    "<library>/src/bid64_scalb.c"
-    "<library>/src/bid64_scalbl.c"
-    "<library>/src/bid64_sin.c"
-    "<library>/src/bid64_sinh.c"
-    "<library>/src/bid64_sqrt.c"
-    "<library>/src/bid64_string.c"
-    "<library>/src/bid64_tan.c"
-    "<library>/src/bid64_tanh.c"
-    "<library>/src/bid64_tgamma.c"
     "<library>/src/bid64_to_bid128.c"
-    "<library>/src/bid64_to_int16.c"
-    "<library>/src/bid64_to_int32.c"
-    "<library>/src/bid64_to_int64.c"
-    "<library>/src/bid64_to_int8.c"
-    "<library>/src/bid64_to_uint16.c"
-    "<library>/src/bid64_to_uint32.c"
-    "<library>/src/bid64_to_uint64.c"
-    "<library>/src/bid64_to_uint8.c"
     "<library>/src/bid_binarydecimal.c"
     "<library>/src/bid_convert_data.c"
     "<library>/src/bid_decimal_data.c"
-    "<library>/src/bid_decimal_globals.c"
-    "<library>/src/bid_dpd.c"
-    "<library>/src/bid_feclearexcept.c"
-    "<library>/src/bid_fegetexceptflag.c"
-    "<library>/src/bid_feraiseexcept.c"
-    "<library>/src/bid_fesetexceptflag.c"
-    "<library>/src/bid_fetestexcept.c"
     "<library>/src/bid_flag_operations.c"
-    "<library>/src/bid_from_int.c"
     "<library>/src/bid_round.c"
-    "<library>/src/strtod128.c"
-    "<library>/src/strtod32.c"
-    "<library>/src/strtod64.c"
-    "<library>/src/wcstod128.c"
-    "<library>/src/wcstod32.c"
-    "<library>/src/wcstod64.c"
     )
 # Put in the actual library path:
 string (REPLACE "<library>" "${intel_dfp_SOURCE_DIR}/LIBRARY" _dfp_sources "${_dfp_sources}")

data/ext/libmongocrypt/libmongocrypt/cmake/Patch.cmake

@@ -0,0 +1,54 @@
+find_program(GIT_EXECUTABLE git)
+find_program(PATCH_EXECUTABLE patch)
+
+#[[
+    Form a new Patch-applying command for the given inputs
+
+    make_patch_command(
+        <outvar>
+        [DISABLED <bool>]
+        [DIRECTORY <dir>]
+        [STRIP_COMPONENTS <N>]
+        PATCHES [<file> ...]
+    )
+]]
+function(make_patch_command out)
+    cmake_parse_arguments(PARSE_ARGV 1 patch "" "DIRECTORY;STRIP_COMPONENTS;DISABLED" "PATCHES")
+    if(patch_DISABLED)
+        # Use a placeholder "no-op" patch command.
+        set(cmd "${CMAKE_COMMAND}" "-E" "true")
+    elseif(GIT_EXECUTABLE)
+        # git ...
+        set(cmd ${GIT_EXECUTABLE})
+
+        if(patch_DIRECTORY)
+            # git --work-tree=...
+            list(APPEND cmd --work-tree=${patch_DIRECTORY})
+        endif()
+        # git ... apply ...
+        list(APPEND cmd apply)
+        # git ... apply -pN ...
+        if(patch_STRIP_COMPONENTS)
+            list(APPEND cmd -p${patch_STRIP_COMPONENTS})
+        endif()
+        # Ignore whitespace errors to fix patch errors on Windows: The patch file may be converted to \r\n by git, but libbson fetched with \n.
+        list(APPEND cmd "--ignore-whitespace")
+        # git accepts patch filepaths as positional arguments
+        list(APPEND cmd ${patch_PATCHES})
+    else()
+        # patch ...
+        set(cmd ${PATCH_EXECUTABLE})
+        if(patch_DIRECTORY)
+            # patch --dir=...
+            list(APPEND cmd --dir=${patch_DIRECTORY})
+        endif()
+        # patch ... -pN ...
+        if(patch_STRIP_COMPONENTS)
+            list(APPEND cmd -p${patch_STRIP_COMPONENTS})
+        endif()
+        # Prepend "--input=" to each patch filepath and add them to the argv
+        list(TRANSFORM patch_PATCHES PREPEND "--input=")
+        list(APPEND cmd ${patch_PATCHES})
+    endif()
+    set("${out}" "${cmd}" PARENT_SCOPE)
+endfunction()

data/ext/libmongocrypt/libmongocrypt/cmake/Platform.cmake

@@ -0,0 +1,50 @@
+#[[
+    Defines a platform-support target _mongocrypt::platform.
+
+    This target sets certain internal-only compile definitions, and defines
+    usage requirements on certain platform features required by libmongocrypt
+    (Threads, dlopen(), math)
+]]
+
+add_library (lmc-platform INTERFACE)
+add_library (mongocrypt::platform ALIAS lmc-platform)
+install (TARGETS lmc-platform EXPORT mongocrypt_targets)
+set_property (
+    TARGET lmc-platform
+    PROPERTY EXPORT_NAME mongocrypt::platform
+    )
+
+# Threads:
+find_package (Threads REQUIRED)
+
+# Special math:
+if (NOT APPLE)
+    find_library (M_LIBRARY m)
+endif ()
+
+# Special runtime:
+find_library (RT_LIBRARY rt)
+
+# Endian detection:
+if (DEFINED CMAKE_C_BYTE_ORDER)
+    # Newer CMake knows this immediately:
+    set (MONGOCRYPT_ENDIAN_DEF "MONGOCRYPT_${CMAKE_C_BYTE_ORDER}")
+else ()
+    include (TestBigEndian)
+    test_big_endian (_is_big)
+    set (MONGOCRYPT_ENDIAN_DEF "MONGOCRYPT_$<IF:${_is_big},BIG,LITTLE>_ENDIAN")
+endif ()
+
+target_compile_definitions (lmc-platform INTERFACE
+    "$<BUILD_INTERFACE:${MONGOCRYPT_ENDIAN_DEF}>"
+    )
+target_link_libraries (lmc-platform INTERFACE
+    Threads::Threads
+    # These are build-interface libs, but still required. These will be added
+    # to the platform library in mongocrypt-config.cmake using the same
+    # find_library() calls:
+    $<BUILD_INTERFACE:${CMAKE_DL_LIBS}>
+    $<BUILD_INTERFACE:$<$<BOOL:${M_LIBRARY}>:${M_LIBRARY}>>
+    $<BUILD_INTERFACE:$<$<BOOL:${RT_LIBRARY}>:${RT_LIBRARY}>>
+    )
+

data/ext/libmongocrypt/libmongocrypt/cmake/mongocrypt-config.cmake

@@ -40,3 +40,24 @@ if (_using_system_intel_dfp)
       PROPERTY IMPORTED_LOCATION "${_MONGOCRYPT_SYSTEM_INTEL_DFP_STATIC}"
       )
 endif ()
+
+find_dependency(Threads)
+
+# Link for dlopen():
+set_property (TARGET mongo::mongocrypt::platform APPEND PROPERTY INTERFACE_LINK_LIBRARIES ${CMAKE_DL_LIBS})
+
+# Link for special math functions:
+if (NOT APPLE)
+    find_library (_MONGOCRYPT_M_LIBRARY m)
+    mark_as_advanced (_MONGOCRYPT_M_LIBRARY)
+    if (_MONGOCRYPT_M_LIBRARY)
+        set_property (TARGET mongo::mongocrypt::platform APPEND PROPERTY INTERFACE_LINK_LIBRARIES "${_MONGOCRYPT_M_LIBRARY}")
+    endif ()
+endif ()
+
+# Special runtime:
+find_library (_MONGOCRYPT_RT_LIBRARY rt)
+mark_as_advanced (_MONGOCRYPT_RT_LIBRARY)
+if (_MONGOCRYPT_RT_LIBRARY)
+    set_property (TARGET mongo::mongocrypt::platform APPEND PROPERTY INTERFACE_LINK_LIBRARIES "${_MONGOCRYPT_RT_LIBRARY}")
+endif ()