aicube-isp-wine
maintainer taotieren
· 0 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads a prebuilt Windows executable from a project-associated domain (stcaimcu.com) for a legitimate tool; while the host is not whitelisted, the binary is not executed at build time, and the worst case of a swapped source is a malicious executable run only by the user, which is within expected AUR risk for wine-based tools.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The package downloads a prebuilt Windows executable from a project-associated domain (stcaimcu.com) for a legitimate tool; while the host is not whitelisted, the binary is not executed at build time, and the worst case of a swapped source is a malicious executable run only by the user, which is within expected AUR risk for wine-based tools.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:33
"http://www.stcaimcu.com/data/download/Tools/${_name}-v${_tagname}.zip"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: taotieren <admin@taotieren.com>
2
3
pkgbase=aicube-isp-wine
4
pkgname=(aicube-isp-wine)
5
_name=AiCube-ISP
6
_tagname=6.96Z
7
pkgver=${_tagname//-/+}
8
pkgrel=1
9
pkgdesc="Wine AiCube 辅助开发，图形配置界面自动生成配置代码与程序框架；远程现场升级 APP 发布；单片机在线升级仿真调试平台软件；ISP 下载"
10
arch=('x86_64')
11
url="https://www.stcai.com/gjrj"
12
license=('LicenseRef-STCAI')
13
provides=('aicube-isp' 'stc-isp' 'stcai-isp' 'stc-isp-wine' 'stc-isp-bin')
14
conflicts=('aicube-isp' 'stc-isp' 'stcai-isp' 'stc-isp-wine' 'stc-isp-bin')
15
replaces=(
16
'stc-isp-bin'
17
'stc-isp-wine'
18
)
19
depends=(
20
'sh'
21
'wine'
22
'wqy-microhei'
23
'winetricks'
24
'wine-mono'
25
'wine-gecko'
26
)
27
optdepends=()
28
makedepends=('libarchive')
29
backup=()
30
options=('!strip' '!debug')
31
install=${pkgname}.install
32
source=(
33
"http://www.stcaimcu.com/data/download/Tools/${_name}-v${_tagname}.zip"
34
"${pkgname}.install"
35
"icon.svg"
36
)
37
sha256sums=('6fd752abee793662974311ac3dae20805d907e63459ca39dc1eeacf3aa3393b7'
38
'aa592f476dee3501ee22b26b5311826d6a6dd6ed03f7a94945016e058af4af24'
39
'c04d3cf704c9055e4b0bb010d946c5e90710677c459def826f762c8e9d717538')
40
# noextract=("${_name}-v${pkgver}.zip")
41
42
# prepare() {
43
# unar -e GBK "${srcdir}/${_name}-v${pkgver}.zip"
44
# bsdtar -xf "${srcdir}/${_name}-v${pkgver}.zip"
45
# }
46
47
package() {
48
export LC_CTYPE="zh_CN.UTF-8"
49
50
_stc="opt/stcai"
51
_ftname="wqy-microhei.ttc"
52
53
install -vdm0755 "${pkgdir}/${_stc}/${pkgname%-wine}"
54
install -vDm6644 "${srcdir}/icon.svg" "${pkgdir}/usr/share/pixmaps/${pkgname%-wine}.svg"
55
56
install -vDm0755 "${srcdir}/${_name}-v${_tagname}.exe" -t "${pkgdir}/${_stc}/${pkgname%-wine}"
57
58
find "${pkgdir}/${_stc}" -type f -exec chmod 644 "{}" \;
59
find "${pkgdir}/${_stc}" -type d -exec chmod 755 "{}" \;
60
61
install -vDm0644 /dev/stdin "${pkgdir}/${_stc}/${pkgname%-wine}/regpatch.reg" << EOF
62
REGEDIT4
63
64
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink]
65
"Lucida Sans Unicode"="${_ftname}"
66
"Microsoft Sans Serif"="${_ftname}"
67
"MS Sans Serif"="${_ftname}"
68
"Tahoma"="${_ftname}"
69
"Tahoma Bold"="${_ftname}"
70
"SimSun"="${_ftname}"
71
"Arial"="${_ftname}"
72
"Arial Black"="${_ftname}"
73
"Lucida Sans Unicode"=str(7):"${_ftname}"
74
"Microsoft Sans Serif"=str(7):"${_ftname}"
75
"Tahoma"=str(7):"${_ftname}"
76
"Lucida Sans Unicode"="${_ftname}"
77
"Microsoft Sans Serif"="${_ftname}"
78
"Microsoft YaHei"="${_ftname}"
79
"微软雅黑"="${_ftname}"
80
"宋体"="${_ftname}"
81
"新細明體"="${_ftname}"
82
"DFKai-SB"="${_ftname}"
83
"FangSong"="${_ftname}"
84
"KaiTi"="${_ftname}"
85
"Microsoft JhengHei"="${_ftname}"
86
"Microsoft YaHei"="${_ftname}"
87
"MingLiU"="${_ftname}"
88
"NSimSun"="${_ftname}"
89
"PMingLiU"="${_ftname}"
90
"SimHei"="${_ftname}"
91
"SimKai"="${_ftname}"
92
"SimSun"="${_ftname}"
93
94
[HKEY_CURRENT_USER\Software\Wine\X11 Driver]
95
"ClientSideAntiAliasWithCore"="N"
96
"ClientSideAntiAliasWithRender"="N"
97
"ClientSideWithRender"="N"
98
99
[HKEY_CURRENT_USER\Control Panel\Desktop]
100
"FontSmoothing"="2"
101
"FontSmoothingOrientation"=dword:00000001
102
"FontSmoothingType"=dword:00000002
103
"FontSmoothingGamma"=dword:00000578
104
105
[HKEY_LOCAL_MACHINE\Software\Wine\Ports]
106
"COM1"="/dev/ttyUSB0"
107
"COM2"="/dev/ttyUSB1"
108
"COM3"="/dev/ttyUSB2"
109
"COM4"="/dev/ttyUSB3"
110
"COM5"="/dev/ttyUSB4"
111
"COM6"="/dev/ttyUSB5"
112
"COM7"="/dev/ttyUSB6"
113
"COM8"="/dev/ttyUSB7"
114
"COM9"="/dev/ttyUSB8"
115
"COM10"="/dev/ttyACM0"
116
"COM11"="/dev/ttyACM1"
117
"COM12"="/dev/ttyACM2"
118
"COM13"="/dev/ttyACM3"
119
"COM14"="/dev/ttyACM4"
120
"COM15"="/dev/ttyACM5"
121
"COM16"="/dev/ttyACM6"
122
"COM17"="/dev/ttyACM7"
123
"COM18"="/dev/ttyACM8"
124
"COM19"="/dev/ttyACM9"
125
EOF
126
127
install -vDm0755 /dev/stdin "${pkgdir}/usr/bin/${pkgname%-wine}" << EOF
128
#!/bin/bash
129
export LC_CTYPE="zh_CN.UTF-8"
130
export WINEARCH=wow64 WINEPREFIX="\$HOME/.${pkgname%-wine}/wine"
131
export WINEDLLOVERRIDES="mscoree,mshtml="
132
133
if [ ! -d "\$HOME"/.${pkgname%-wine} ] ; then
134
mkdir -p "\$HOME"/.${pkgname%-wine}/wine || exit 1
135
136
cp -r /${_stc}/${pkgname%-wine}/regpatch.reg "\$HOME"/.${pkgname%-wine}/wine || exit 1
137
138
ln -s /${_stc}/${pkgname%-wine}/${_name}-v${_tagname}.exe "\$HOME"/.${pkgname%-wine}/${_name}.exe || exit 1
139
fi
140
141
if [ ! -f "\$HOME"/.${pkgname%-wine}/regpatchok ] ; then
142
touch "\$HOME"/.${pkgname%-wine}/regpatchok || exit 1
143
cd "\$HOME"/.${pkgname%-wine}/wine && regedit regpatch.reg && wineserver -k
144
winetricks -q mfc42
145
fi
146
147
wine "\$HOME"/.${pkgname%-wine}/${_name}.exe "\$@"
148
EOF
149
150
install -vDm0644 /dev/stdin "${pkgdir}/usr/share/applications/${pkgname%-wine}.desktop" << EOF
151
[Desktop Entry]
152
Name=${pkgname%-wine}
153
Name[zh_CN]=${pkgname%-wine}
154
Comment=${pkgdesc}
155
#MimeType=application/x-${pkgname%-wine};
156
Exec=${pkgname%-wine} %f
157
Type=Application
158
Categories=Development;Tool;
159
Terminal=false
160
Icon=${pkgname%-wine}.svg
161
Version=${pkgver}
162
EOF
163
}
164
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |