android-aarch64-libasyncns

maintainer hipersayan_x · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a standard upstream tarball from the project's official domain (0pointer.de), building a library from source; the non-whitelisted host is the actual project site, not a risky third-party host.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a standard upstream tarball from the project's official domain (0pointer.de), building a library from source; the non-whitelisted host is the actual project site, not a risky third-party host.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:21 source=("http://0pointer.de/lennart/projects/libasyncns/libasyncns-${pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Gonzalo Exequiel Pedone <hipersayan DOT x AT gmail DOT com>
    
      2# Contributor: Jan Alexander Steffens (heftig) <heftig@archlinux.org>
    
      3# Contributor: Corrado Primier <bardo@aur.archlinux.org>
    
      4# Contributor: Eric Belanger <belanger@astro.umontreal.ca>
    
      5# Contributor: William Rea <sillywilly@gmail.com>
    
      6# Contributor: Daniel J Griffiths <ghost1227@archlinux.us>
    
      7
    
      8_android_arch=aarch64
    
      9
    
      10pkgname=android-${_android_arch}-libasyncns
    
      11pkgver=0.8
    
      12pkgrel=2
    
      13arch=('any')
    
      14pkgdesc="A C library for executing name service queries asynchronously (Android ${_android_arch})"
    
      15url="https://0pointer.net/lennart/projects/libasyncns/"
    
      16license=('LGPL')
    
      17groups=('android-libasyncns')
    
      18depends=('android-ndk')
    
      19makedepends=('android-configure')
    
      20options=(!strip !buildflags staticlibs !emptydirs)
    
      21source=("http://0pointer.de/lennart/projects/libasyncns/libasyncns-${pkgver}.tar.gz"
    
      22        '0001-Use-unversioned-libs.patch')
    
      23md5sums=('1f553d6ce1ad255bc83b3d8e9384f515'
    
      24         '4c5ee80adf19451f731c10af7da61617')
    
      25
    
      26prepare() {
    
      27    cd "${srcdir}/libasyncns-${pkgver}"
    
      28    source android-env ${_android_arch}
    
      29
    
      30    patch -Np1 -i ../0001-Use-unversioned-libs.patch
    
      31
    
      32    NOCONFIGURE=1 ./bootstrap.sh
    
      33}
    
      34
    
      35build() {
    
      36    cd "${srcdir}/libasyncns-${pkgver}"
    
      37    source android-env ${_android_arch}
    
      38
    
      39    # Platform specific patches
    
      40    case "${_android_arch}" in
    
      41        aarch64)
    
      42             host=armv8-unknown-linux
    
      43            ;;
    
      44        armv7a-eabi)
    
      45             host=armv7-unknown-linux
    
      46            ;;
    
      47        riscv64)
    
      48             host=riscv64-unknown-linux
    
      49            ;;
    
      50        x86)
    
      51             host=x86-unknown-linux
    
      52            ;;
    
      53        x86-64)
    
      54             host=x86_64-unknown-linux
    
      55            ;;
    
      56        *)
    
      57            ;;
    
      58    esac
    
      59
    
      60    android-${_android_arch}-configure \
    
      61        --host=${host} \
    
      62        --sysconfdir="${ANDROID_PREFIX_ETC}" \
    
      63        --localstatedir="${ANDROID_PREFIX_VAR}"
    
      64    sed -i 's/ -shared / -Wl,-O1,--as-needed\0/g' libtool
    
      65    make $MAKEFLAGS
    
      66}
    
      67
    
      68package() {
    
      69    cd "${srcdir}/libasyncns-${pkgver}"
    
      70    source android-env ${_android_arch}
    
      71
    
      72    make DESTDIR="${pkgdir}" install
    
      73    rm -rf "${pkgdir}/${ANDROID_PREFIX_SHARE}"
    
      74    ${ANDROID_STRIP} -g --strip-unneeded "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.so
    
      75    ${ANDROID_STRIP} -g "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.a
    
      76    rm -f "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.so.*
    
      77}
    
      78

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2