android-aarch64-gsm
LOW
maintainer hipersayan_x
0 votes
scanned 2026-11-04 00:25:23.536954
Why flagged
The source is a well-known, legitimate project (gsm) hosted on its official domain (quut.com), building a shared library from source; the non-whitelisted host is the project's own site, so the risk is low despite the static analyzer flag.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a well-known, legitimate project (gsm) hosted on its official domain (quut.com), building a shared library from source; the non-whitelisted host is the project's own site, so the risk is low despite the static analyzer flag.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:19
source=("https://www.quut.com/gsm/gsm-${pkgver}.tar.gz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Gonzalo Exequiel Pedone <hipersayan DOT x AT gmail DOT com>
2
# Contributor: Jan de Groot <jgc@archlinux.org>
3
# Contributor: Maxime de Roucy <maxime.deroucy@gmail.com>
4
# Contributor: Darwin Bautista <djclue917@gmail.com>
5
6
_android_arch=aarch64
7
8
pkgname=android-${_android_arch}-gsm
9
pkgver=1.0.24
10
pkgrel=1
11
arch=('any')
12
pkgdesc="Shared libraries for GSM 06.10 lossy speech compression (Android ${_android_arch})"
13
url="https://www.quut.com/gsm/"
14
license=('custom')
15
groups=('android-gsm')
16
depends=('android-ndk')
17
makedepends=('android-environment')
18
options=(!strip !buildflags staticlibs !emptydirs)
19
source=("https://www.quut.com/gsm/gsm-${pkgver}.tar.gz")
20
md5sums=('c13a7e1c5f826e9dbaa71db19e7ebfae')
21
22
prepare() {
23
cd "${srcdir}/gsm-${pkgver%.*}-pl${pkgver##*.}"
24
25
# Fix code comments
26
sed -i 's|/\*efine|//define|g' inc/config.h
27
}
28
29
build() {
30
cd "${srcdir}/gsm-${pkgver%.*}-pl${pkgver##*.}"
31
source android-env ${_android_arch}
32
33
make CC="${CC}" CCFLAGS="${CFLAGS} -c -fPIC" $MAKEFLAGS ./lib/libgsm.a
34
${CC} -shared ${LDFLAGS} -o lib/libgsm.so src/*.o
35
}
36
37
package() {
38
cd "${srcdir}/gsm-${pkgver%.*}-pl${pkgver##*.}"
39
source android-env ${_android_arch}
40
41
# Prepare directories
42
install -m755 -d "${pkgdir}/${ANDROID_PREFIX}"/{lib,include/gsm}
43
44
make -j1 \
45
INSTALL_ROOT="${pkgdir}/${ANDROID_PREFIX}" \
46
GSM_INSTALL_INC="${pkgdir}/${ANDROID_PREFIX_INCLUDE}/gsm" \
47
"${pkgdir}/${ANDROID_PREFIX_INCLUDE}/gsm/gsm.h" \
48
"${pkgdir}/${ANDROID_PREFIX_LIB}/libgsm.a"
49
install -v -m644 lib/libgsm.so "${pkgdir}/${ANDROID_PREFIX_LIB}/"
50
${ANDROID_STRIP} -g --strip-unneeded "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.so
51
${ANDROID_STRIP} -g "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.a
52
53
install -vDm 644 COPYRIGHT -t "${pkgdir}/usr/share/licenses/${pkgname}/"
54
}
55
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-04 00:25:23 | Low | 2 |
| 2026-11-03 00:01:00 | Low | 2 |
| 2026-11-02 00:26:00 | Low | 2 |
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |