android-armv7a-eabi-pciutils

maintainer hipersayan_x · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The source is a tarball from the project's official domain (mj.ucw.cz), which is not on the standard whitelist but is the legitimate upstream host for pciutils; the package builds from source, and the download is non-executable build material, so the risk is low despite the non-standard host.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official domain (mj.ucw.cz), which is not on the standard whitelist but is the legitimate upstream host for pciutils; the package builds from source, and the download is non-executable build material, so the risk is low despite the non-standard host.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:18 source=("https://mj.ucw.cz/download/linux/pci/pciutils-${pkgver}.tar.gz"{,.sign}

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Gonzalo Exequiel Pedone <hipersayan DOT x AT gmail DOT com>
2# Contributor: Tobias Powalowski <tpowa@archlinux.org>
3
4_android_arch=armv7a-eabi
5
6pkgname=android-${_android_arch}-pciutils
7pkgver=3.14.0
8pkgrel=1
9arch=('any')
10pkgdesc="PCI bus configuration space access library and tools (Android ${_android_arch})"
11license=('GPL2')
12url="https://mj.ucw.cz/sw/pciutils/"
13groups=('android-pciutils')
14depends=("android-${_android_arch}-hwdata"
15 "android-${_android_arch}-kmod")
16makedepends=('android-environment')
17options=(!strip !buildflags staticlibs !emptydirs)
18source=("https://mj.ucw.cz/download/linux/pci/pciutils-${pkgver}.tar.gz"{,.sign}
19 '0001-Do-not-use-lresolv.patch'
20 '0002-Disable-ecam.patch')
21md5sums=('f70cf2da9377cb484802e291ea60115d'
22 'SKIP'
23 '71920d728978bc6654864ed7d7cd9c2d'
24 '3cfc5313fd307fb054d5e1d03c374bb1')
25validpgpkeys=('C466A56CADA981F4297D20C31F3D0761D9B65F0B') # Martin Mares <mj@ucw.cz>
26
27prepare() {
28 cd "${srcdir}/pciutils-${pkgver}"
29 source android-env ${_android_arch}
30
31 patch -Np1 -i ../0001-Do-not-use-lresolv.patch
32
33 if [ "${ANDROID_MINIMUM_PLATFORM}" -lt 28 ]; then
34 patch -Np1 -i ../0002-Disable-ecam.patch
35 fi
36}
37
38build() {
39 cd "${srcdir}/pciutils-${pkgver}"
40 source android-env ${_android_arch}
41
42 # Platform specific patches
43 case "${_android_arch}" in
44 aarch64)
45 host=armv8-linux
46 ;;
47 armv7a-eabi)
48 host=armv7-linux
49 ;;
50 riscv64)
51 host=riscv64-linux
52 ;;
53 *)
54 host=intel-linux
55 ;;
56 esac
57
58 make \
59 HOST=${host} \
60 OPT="${CFLAGS} -fPIC -DPIC" \
61 ZLIB=no \
62 SHARED=no \
63 PREFIX="${ANDROID_PREFIX}" \
64 SBINDIR="${ANDROID_PREFIX_BIN}" \
65 SHAREDIR="${ANDROID_PREFIX_SHARE}/hwdata" \
66 MANDIR="${ANDROID_PREFIX_SHARE}/man" \
67 CC="${ANDROID_CC}" \
68 AR="${ANDROID_AR}" \
69 RANLIB="${ANDROID_RANLIB}" \
70 STRIP="${ANDROID_STRIP}" \
71 lib/libpci.a
72 cp -f lib/libpci.a "${srcdir}/"
73 make clean
74 make \
75 HOST=${host} \
76 OPT="${CFLAGS}" \
77 ZLIB=no \
78 SHARED=yes \
79 PREFIX="${ANDROID_PREFIX}" \
80 SBINDIR="${ANDROID_PREFIX_BIN}" \
81 SHAREDIR="${ANDROID_PREFIX_SHARE}/hwdata" \
82 MANDIR="${ANDROID_PREFIX_SHARE}/man" \
83 CC="${ANDROID_CC}" \
84 AR="${ANDROID_AR}" \
85 RANLIB="${ANDROID_RANLIB}" \
86 STRIP="${ANDROID_STRIP}" \
87 all
88}
89
90package() {
91 cd "${srcdir}/pciutils-${pkgver}"
92 source android-env ${_android_arch}
93
94 # Platform specific patches
95 case "${_android_arch}" in
96 aarch64)
97 host=armv8-linux
98 ;;
99 armv7a-eabi)
100 host=armv7-linux
101 ;;
102 riscv64)
103 host=riscv64-linux
104 ;;
105 *)
106 host=intel-linux
107 ;;
108 esac
109
110 make \
111 HOST=${host} \
112 SHARED=yes \
113 PREFIX="${ANDROID_PREFIX}" \
114 SBINDIR="${ANDROID_PREFIX_BIN}" \
115 SHAREDIR="${ANDROID_PREFIX_SHARE}/hwdata" \
116 MANDIR="${ANDROID_PREFIX_SHARE}/man" \
117 DESTDIR="${pkgdir}" \
118 CC="${ANDROID_CC}" \
119 AR="${ANDROID_AR}" \
120 RANLIB="${ANDROID_RANLIB}" \
121 STRIP="${ANDROID_STRIP}" \
122 install \
123 install-lib
124
125 rm -f "${pkgdir}/${ANDROID_PREFIX_BIN}/"{llvm-strip,lspci,pcilmr,setpci}
126 rm -rf "${pkgdir}/${ANDROID_PREFIX_SHARE}"
127 cp -f "${srcdir}/libpci.a" "${pkgdir}/${ANDROID_PREFIX_LIB}/"
128 mv -f "${pkgdir}/${ANDROID_PREFIX_LIB}/libpci.so".*.* "${pkgdir}/${ANDROID_PREFIX_LIB}/libpci.so"
129 rm -f "${pkgdir}/${ANDROID_PREFIX_LIB}/libpci.so".*
130 ${ANDROID_STRIP} -g --strip-unneeded "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.so
131 ${ANDROID_STRIP} -g "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.a
132}
133

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion