android-aarch64-libtiff
LOW
maintainer hipersayan_x
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a standard upstream tarball from a project-maintained domain (osgeo.org), hosting the official libtiff release; building from this source is normal packaging behavior despite the non-whitelisted host.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a standard upstream tarball from a project-maintained domain (osgeo.org), hosting the official libtiff release; building from this source is normal packaging behavior despite the non-whitelisted host.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:22
source=("http://download.osgeo.org/libtiff/tiff-${pkgver}.tar.gz")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Gonzalo Exequiel Pedone <hipersayan DOT x AT gmail DOT com>
2
# Contributor: pingplug < aur at pingplug dot me >
3
# Contributor: Schala Zeal < schalaalexiazeal at gmail dot com >
4
# Contributor: bubla < matej dot tyc at gmail dot com >
5
6
_android_arch=aarch64
7
8
pkgname=android-${_android_arch}-libtiff
9
pkgver=4.7.1
10
pkgrel=1
11
arch=('any')
12
pkgdesc="Library for manipulation of TIFF images (Android ${_android_arch})"
13
url="http://www.simplesystems.org/libtiff/"
14
license=('custom')
15
depends=("android-${_android_arch}-jbigkit"
16
"android-${_android_arch}-libjpeg-turbo"
17
"android-${_android_arch}-zlib"
18
"android-${_android_arch}-xz"
19
"android-${_android_arch}-zstd")
20
makedepends=('android-configure')
21
options=(!strip !buildflags staticlibs !emptydirs)
22
source=("http://download.osgeo.org/libtiff/tiff-${pkgver}.tar.gz")
23
md5sums=('f1044dd3b4466cc53464210148e08146')
24
25
build() {
26
cd "${srcdir}/tiff-${pkgver}"
27
source android-env ${_android_arch}
28
29
export CFLAGS="${CFLAGS} -fPIC -fno-strict-aliasing"
30
export CXXFLAGS="${CXXFLAGS} -fPIC -fno-strict-aliasing"
31
32
android-${_android_arch}-configure \
33
--sysconfdir="${ANDROID_PREFIX_ETC}" \
34
--enable-cxx \
35
--disable-tools \
36
--disable-tests \
37
--disable-docs
38
make $MAKEFLAGS
39
}
40
41
package() {
42
cd "${srcdir}/tiff-${pkgver}"
43
source android-env ${_android_arch}
44
45
make DESTDIR="${pkgdir}" install
46
cp libtiff/{tiffiop,tif_dir}.h "${pkgdir}/${ANDROID_PREFIX_INCLUDE}/"
47
cp libtiff/tif_config.h "${pkgdir}/${ANDROID_PREFIX_INCLUDE}/"
48
${ANDROID_STRIP} -g --strip-unneeded "${pkgdir}"/${ANDROID_PREFIX_LIB}/*.so
49
${ANDROID_STRIP} -g "${pkgdir}"/${ANDROID_PREFIX_LIB}/*.a
50
51
install -vDm 644 LICENSE.md -t "${pkgdir}/usr/share/licenses/${pkgname}/"
52
}
53
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |