aic8800d80-pcie-dkms
MEDIUM
maintainer lulitao1997
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a vendor-provided zip from a non-whitelisted, personal-looking host (download.lulian.cn) which contains prebuilt driver sources; while the checksum is verified, the source is not the official project domain and could be silently swapped with a malicious version, posing a supply-chain risk.
Triggered rules
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:20
"UGREEN-CM958-75615_Linux_Drive_V1.0.zip::https://download.lulian.cn/2026-drive/UGREEN-CM958-75615_Linux_Drive_V1.0.zip"
Medium
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is MEDIUM (confidence 85%): The package downloads a vendor-provided zip from a non-whitelisted, personal-looking host (download.lulian.cn) which contains prebuilt driver sources; while the checksum is verified, the source is not the official project domain and could be silently swapped with a malicious version, posing a supply-chain risk.
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Litao Lu <lulitao1997@gmail.com>
2
# From this directory: makepkg -sf
3
# Driver + firmware come from the vendor zip (not stored in git); Linux 6.13+ fixes are applied via patch.
4
5
pkgname=aic8800d80-pcie-dkms
6
pkgver=6.4.3.0
7
pkgrel=5
8
9
pkgdesc="DKMS modules for AIC8800D80 PCIe Wi-Fi and companion USB Bluetooth adapters (Ugreen CM958 and similar)"
10
arch=('x86_64')
11
url="https://www.aicsemi.com/"
12
license=('GPL-2.0-or-later')
13
depends=('dkms')
14
conflicts=('aic8800d80-dkms')
15
optdepends=('LINUX-HEADERS: kernel headers for building the module')
16
17
# No install= script: pacman hook from package "dkms" registers modules under /usr/src/*/dkms.conf
18
19
source=(
20
"UGREEN-CM958-75615_Linux_Drive_V1.0.zip::https://download.lulian.cn/2026-drive/UGREEN-CM958-75615_Linux_Drive_V1.0.zip"
21
"0001-linux-6.13-plus-compat.patch"
22
"0002-export-pci-modalias.patch"
23
"0003-normalize-driver-logging.patch"
24
"0004-aic-btusb-bluez.patch"
25
"0005-linux-7.1-compat.patch"
26
"0006-linux-7.2-compat.patch"
27
"aic8800d80-sleep-hook"
28
"aic8800d80-btusb.conf"
29
"dkms.conf"
30
"aic.rules"
31
)
32
sha256sums=(
33
'c929c2ff22ba0b55e26ecaccb57f04edc11bb84767d31ac068b8087dd4a8c53a'
34
'6e8562dcb93f114bdbf759506967f9504ffc5fc9043b94b616449ba43d1d34ef'
35
'98699379ab9b302c0e5059d6a16e1598ad3ace7cfb15570c988c994c12a0333f'
36
'60744f321ef8f069e10efeb579a20a6114aeefa5796c0da2d9e0e0c91965ff8e'
37
'cf5532c0254f9f0f6ce80b6f0eda15f3103cebfdb6af500c9d38cd04cda0295b'
38
'b78fb00a2afab38213fd705d6500c3a9dd6456fd394c548829d831f28392f88f'
39
'd955a5ab2c34ba71272b704f61db7ecc5fa54e636e5dbc783ccdd69604a5be9f'
40
'1d34e929c3570cfae9aea2b79d3e143ca89c41ad165457e10c143c2bb74489da'
41
'17abd63c992a6929015475561fb183e955ad1402d25c64cfd1e63a40290fa21b'
42
'88d8e7274bc799eada757fabc87ec90dade6f3e6757075f4ba5fc7537f2acee8'
43
'8f35c85a2fa9435bb9b393c6f51eee990c588b42c6ff0c8cbc0c97f6294e19be'
44
)
45
46
prepare() {
47
bsdtar -C "$srcdir" -xf "$srcdir/UGREEN-CM958-75615_Linux_Drive_V1.0.zip"
48
bsdtar -C "$srcdir" -xf "$srcdir/Linux/aic8800_linux_drvier.zip"
49
bsdtar -C "$srcdir/aic8800_linux_drvier" -xf "$srcdir/aic8800_linux_drvier/aic_btusb.zip"
50
sed -i 's/\r$//' "$srcdir/aic8800_linux_drvier/aic_btusb/aic_btusb.h"
51
patch -d "$srcdir/aic8800_linux_drvier" -p1 -i "$srcdir/0001-linux-6.13-plus-compat.patch"
52
patch -d "$srcdir/aic8800_linux_drvier" -p1 -i "$srcdir/0002-export-pci-modalias.patch"
53
patch -d "$srcdir/aic8800_linux_drvier" -p1 -i "$srcdir/0003-normalize-driver-logging.patch"
54
patch -d "$srcdir/aic8800_linux_drvier" -p1 -i "$srcdir/0004-aic-btusb-bluez.patch"
55
patch -d "$srcdir/aic8800_linux_drvier" -p1 -i "$srcdir/0005-linux-7.1-compat.patch"
56
patch -d "$srcdir/aic8800_linux_drvier" -p1 -i "$srcdir/0006-linux-7.2-compat.patch"
57
}
58
59
package() {
60
local _drv="${srcdir}/aic8800_linux_drvier/drivers/aic8800/aic8800_fdrv"
61
local _bt="${srcdir}/aic8800_linux_drvier/aic_btusb"
62
local _dst="${pkgdir}/usr/src/aic8800-${pkgver}"
63
64
install -dm755 "${_dst}"
65
66
while IFS= read -r -d '' f; do
67
local bn
68
bn=$(basename "$f")
69
case "$bn" in
70
*.o|*.ko|*.mod|*.mod.c|*.cmd|*.orig|*.rej|modules.order|Module.symvers|build.log) continue ;;
71
esac
72
install -Dm644 "$f" "${_dst}/${bn}"
73
done < <(find "${_drv}" -maxdepth 1 -type f -print0)
74
75
install -dm755 "${_dst}/aic_btusb"
76
while IFS= read -r -d '' f; do
77
local rel
78
rel="${f#${_bt}/}"
79
case "$rel" in
80
*.o|*.ko|*.mod|*.mod.c|*.cmd|*.orig|*.rej|modules.order|Module.symvers|build.log) continue ;;
81
esac
82
install -Dm644 "$f" "${_dst}/aic_btusb/${rel}"
83
done < <(find "${_bt}" -maxdepth 1 -type f -print0)
84
85
sed "s/^PACKAGE_VERSION=.*/PACKAGE_VERSION=\"${pkgver}\"/" "${srcdir}/dkms.conf" \
86
> "${_dst}/dkms.conf"
87
chmod 644 "${_dst}/dkms.conf"
88
89
install -dm755 "${pkgdir}/usr/lib/udev/rules.d"
90
install -Dm644 "${srcdir}/aic.rules" \
91
"${pkgdir}/usr/lib/udev/rules.d/70-aic8800d80.rules"
92
install -dm755 "${pkgdir}/usr/lib/modprobe.d"
93
install -Dm644 "${srcdir}/aic8800d80-btusb.conf" \
94
"${pkgdir}/usr/lib/modprobe.d/aic8800d80-btusb.conf"
95
install -dm755 "${pkgdir}/usr/lib/systemd/system-sleep"
96
install -Dm755 "${srcdir}/aic8800d80-sleep-hook" \
97
"${pkgdir}/usr/lib/systemd/system-sleep/aic8800d80"
98
99
local _fw="${srcdir}/aic8800_linux_drvier/fw/aic8800D80"
100
if [[ -d "${_fw}" ]]; then
101
install -dm755 "${pkgdir}/usr/lib/firmware/aic8800D80"
102
install -Dm644 "${_fw}/"* -t "${pkgdir}/usr/lib/firmware/aic8800D80/"
103
fi
104
}
105
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Medium | 2 |
| 2026-09-16 00:03:17 | Medium | 2 |
| 2026-09-15 00:25:31 | Medium | 2 |
| 2026-09-14 00:27:57 | Medium | 2 |
| 2026-09-13 00:19:54 | Medium | 2 |
| 2026-09-12 00:25:17 | Medium | 2 |
| 2026-09-11 00:19:22 | Medium | 2 |
| 2026-09-10 00:22:44 | Medium | 2 |
| 2026-09-09 00:04:09 | Medium | 2 |
| 2026-09-08 00:18:08 | Medium | 2 |
| 2026-09-07 00:30:15 | Medium | 2 |
| 2026-09-06 00:17:06 | Medium | 2 |
| 2026-09-05 00:16:27 | Medium | 2 |
| 2026-09-04 00:03:13 | Medium | 2 |
| 2026-09-03 00:15:47 | Medium | 2 |
| 2026-09-02 00:02:31 | Medium | 2 |
| 2026-09-01 00:11:19 | Medium | 2 |
| 2026-08-31 00:19:57 | Medium | 2 |
| 2026-08-30 00:04:14 | Medium | 2 |
| 2026-08-29 00:29:17 | Medium | 2 |