android-aarch64-mariadb
LOW
maintainer orphaned
0 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The source is a MariaDB tarball from a legitimate mirror (osuosl.org, which hosts official MariaDB releases); building from this source is standard practice, and the package does not execute untrusted remote code or install prebuilt binaries.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a MariaDB tarball from a legitimate mirror (osuosl.org, which hosts official MariaDB releases); building from this source is standard practice, and the package does not execute untrusted remote code or install prebuilt binaries.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:25
source=("https://rsync.osuosl.org/pub/mariadb/mariadb-${pkgver}/source/mariadb-${pkgver}.tar.gz"{,.asc}
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Gonzalo Exequiel Pedone <hipersayan DOT x AT gmail DOT com>
2
# Contributor: Christian Hesse <eworm@archlinux.org>
3
4
_android_arch=aarch64
5
6
pkgname=android-${_android_arch}-mariadb
7
pkgdesc="MariaDB client library (Android ${_android_arch})"
8
pkgver=12.1.2
9
pkgrel=2
10
arch=('any')
11
license=('LGPL2.1')
12
url='https://mariadb.org/'
13
groups=('android-mariadb')
14
depends=("android-${_android_arch}-curl"
15
"android-${_android_arch}-openssl"
16
"android-${_android_arch}-zlib"
17
"android-${_android_arch}-zstd")
18
makedepends=('android-cmake')
19
optdepends=("android-${_android_arch}-curl: for ha_s3 plugin")
20
options=(!strip !buildflags staticlibs !emptydirs)
21
# The default links with mirror redirection fail for signatures, specific
22
# mirrors may be out of date every now and then. Let's use the upstream
23
# rsync source via https and hope it does not hurt them too much.
24
# https://mariadb.com/kb/en/library/mirror-sites-for-mariadb/
25
source=("https://rsync.osuosl.org/pub/mariadb/mariadb-${pkgver}/source/mariadb-${pkgver}.tar.gz"{,.asc}
26
'0004-Dont-read-PEM-keys.patch')
27
md5sums=('ccddcc219867b833521c279eb739191d'
28
'SKIP'
29
'05ce29a22db5d51618eb62fd01cf77ed')
30
validpgpkeys=('177F4010FE56CA3336300305F1656F24C74CD1D8') # MariaDB Signing Key <signing-key@mariadb.org>
31
32
prepare() {
33
cd "${srcdir}/mariadb-${pkgver}"
34
source android-env ${_android_arch}
35
36
patch -Np1 -i ../0004-Dont-read-PEM-keys.patch
37
sed -i 's|"lib/mariadb"|"lib"|g' libmariadb/cmake/install.cmake
38
}
39
40
build() {
41
cd "${srcdir}/mariadb-${pkgver}/libmariadb"
42
source android-env ${_android_arch}
43
44
android-${_android_arch}-cmake \
45
-B build \
46
-DCMAKE_BUILD_TYPE=Release \
47
-DWITH_EXTERNAL_ZLIB=ON \
48
-DWITH_ZSTD=system \
49
-DWITH_UNIT_TESTS=OFF \
50
-DZLIB_BUILD_EXAMPLES=OFF \
51
-DINSTALL_MANDIR=share/man \
52
-DOPENSSL_ROOT_DIR="${ANDROID_PREFIX}" \
53
-DOPENSSL_INCLUDE_DIR="${ANDROID_PREFIX_INCLUDE}" \
54
-DOPENSSL_CRYPTO_LIBRARY="${ANDROID_PREFIX_LIB}/libcrypto.so" \
55
-DOPENSSL_SSL_LIBRARY="${ANDROID_PREFIX_LIB}/libssl.so" \
56
-DZSTD_LIBRARIES="${ANDROID_PREFIX_LIB}/libzstd.so" \
57
-DZSTD_INCLUDE_DIRS="${ANDROID_PREFIX_INCLUDE}" \
58
-DCURL_INCLUDE_DIR="${ANDROID_PREFIX_INCLUDE}" \
59
-DCURL_LIBRARY="${ANDROID_PREFIX_LIB}/libcurl.so" \
60
-Dpkgcfg_lib_PC_CURL_curl="${ANDROID_PREFIX_LIB}/pkgconfig/libcurl.pc"
61
make -C build $MAKEFLAGS
62
}
63
64
package() {
65
cd "${srcdir}/mariadb-${pkgver}/libmariadb"
66
source android-env ${_android_arch}
67
68
make -C build DESTDIR="${pkgdir}" install
69
rm -rf "${pkgdir}/${ANDROID_PREFIX_SHARE}"
70
${ANDROID_STRIP} -g --strip-unneeded "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.so
71
${ANDROID_STRIP} -g "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.a
72
73
install -vDm 644 COPYING.LIB -t "${pkgdir}/usr/share/licenses/${pkgname}/"
74
}
75
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |