android-armv7a-eabi-libssh
LOW
maintainer hipersayan_x
0 votes
scanned 2026-11-06 00:21:40.447623
Why flagged
The source is a standard upstream tarball from the project's official domain (libssh.org), which is not on the whitelist but is plausibly legitimate; building from official project sources is normal AUR packaging behavior.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a standard upstream tarball from the project's official domain (libssh.org), which is not on the whitelist but is plausibly legitimate; building from official project sources is normal AUR packaging behavior.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:25
source=("https://www.libssh.org/files/${pkgver%.*}/libssh-${pkgver}.tar.xz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Gonzalo Exequiel Pedone <hipersayan DOT x AT gmail DOT com>
2
# Contributor: Karl-Felix Glatzer <karl.glatzer@gmx.de>
3
# Contributor: Antonio Rojas <arojas@archlinux.org>
4
# Contributor: Tom Gundersen <teg@jklm.no>
5
# Contributor: Andrea Scarpino <andrea@archlinux.org>
6
# Contributor: ice-man <icemanf@gmail.com>
7
# Contributor: sergeantspoon <sergeantspoon@archlinux.us>
8
# Contributor: Alexey Pavlov <alexpux@gmail.com>
9
10
_android_arch=armv7a-eabi
11
12
pkgname=android-${_android_arch}-libssh
13
pkgver=0.12.2
14
pkgrel=1
15
arch=('any')
16
pkgdesc="Library for accessing ssh client services through C libraries (Android ${_android_arch})"
17
license=('LGPL')
18
url="https://www.libssh.org/"
19
groups=('android-libssh')
20
depends=("android-${_android_arch}-zlib"
21
"android-${_android_arch}-openssl")
22
makedepends=('android-cmake'
23
'python')
24
options=(!strip !buildflags staticlibs !emptydirs)
25
source=("https://www.libssh.org/files/${pkgver%.*}/libssh-${pkgver}.tar.xz"
26
'0001-Fix-static-lib.patch'
27
'0002-Disable-getifaddrs.patch')
28
md5sums=('d8a7ab5a0b337353494eac1f343db365'
29
'66588a420aac9c580c31018a5b1c78cf'
30
'063230102f24f4bcb8aea86575e00def')
31
32
prepare() {
33
cd "${srcdir}/libssh-${pkgver}"
34
source android-env ${_android_arch}
35
36
# Disable automatic detection of openssl since it picks up openssl-1.0
37
sed 's/find_package(OpenSSL)/#find_package(OpenSSL)/' -i CMakeLists.txt
38
39
patch -Np1 -i ../0001-Fix-static-lib.patch
40
41
if [ "${ANDROID_MINIMUM_PLATFORM}" -lt 24 ]; then
42
patch -Np1 -i ../0002-Disable-getifaddrs.patch
43
fi
44
}
45
46
build() {
47
cd "${srcdir}/libssh-${pkgver}"
48
source android-env ${_android_arch}
49
50
export CFLAGS="${CFLAGS} -D__USE_BSD"
51
export CXXFLAGS="${CXXFLAGS} -D__USE_BSD"
52
53
version=$(cat "${ANDROID_PREFIX_INCLUDE}/openssl/opensslv.h" | grep "OPENSSL_VERSION_TEXT" | sed 's/^[^\"]*"OpenSSL //' | sed 's/ .*$//')
54
55
android-${_android_arch}-cmake \
56
-S . \
57
-B build-shared \
58
-DWITH_GSSAPI=OFF \
59
-DBUILD_SHARED_LIBS=ON \
60
-DOPENSSL_FOUND=ON \
61
-DOPENSSL_INCLUDE_DIR="${ANDROID_PREFIX_INCLUDE}" \
62
-DOPENSSL_SSL_LIBRARY="${ANDROID_PREFIX_LIB}/libssl.so" \
63
-DOPENSSL_CRYPTO_LIBRARY="${ANDROID_PREFIX_LIB}/libcrypto.so" \
64
-DOPENSSL_VERSION="${version}" \
65
-DUNIT_TESTING=OFF \
66
-DWITH_EXAMPLES=OFF
67
make -C build-shared $MAKEFLAGS
68
69
android-${_android_arch}-cmake \
70
-S . \
71
-B build-static \
72
-DWITH_GSSAPI=OFF \
73
-DBUILD_SHARED_LIBS=OFF \
74
-DOPENSSL_FOUND=ON \
75
-DOPENSSL_INCLUDE_DIR="${ANDROID_PREFIX_INCLUDE}" \
76
-DOPENSSL_SSL_LIBRARY="${ANDROID_PREFIX_LIB}/libssl.a" \
77
-DOPENSSL_CRYPTO_LIBRARY="${ANDROID_PREFIX_LIB}/libcrypto.a" \
78
-DOPENSSL_VERSION="${version}" \
79
-DUNIT_TESTING=OFF \
80
-DWITH_EXAMPLES=OFF
81
make -C build-static $MAKEFLAGS
82
}
83
84
package(){
85
cd "${srcdir}/libssh-${pkgver}"
86
source android-env ${_android_arch}
87
88
make -C build-shared DESTDIR="${pkgdir}" install
89
make -C build-static DESTDIR="${pkgdir}" install
90
${ANDROID_STRIP} -g --strip-unneeded "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.so
91
${ANDROID_STRIP} -g "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.a
92
93
install -vDm 644 COPYING -t "${pkgdir}/usr/share/licenses/${pkgname}/"
94
}
95
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-06 00:21:40 | Low | 2 |
| 2026-11-05 00:01:40 | Low | 2 |
| 2026-11-04 00:25:23 | Low | 2 |
| 2026-11-03 00:01:00 | Low | 2 |
| 2026-11-02 00:26:00 | Low | 2 |
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |