android-riscv64-openssl

MEDIUM

maintainer hipersayan_x 0 votes scanned 2026-09-22 17:38:46.328100

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 source=("https://www.openssl.org/source/openssl-${pkgver}.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Gonzalo Exequiel Pedone <hipersayan DOT x AT gmail DOT com>
    
      2# Contributor: Martchus <martchus@gmx.net>
    
      3
    
      4_android_arch=riscv64
    
      5
    
      6pkgname=android-${_android_arch}-openssl
    
      7pkgver=3.6.4
    
      8pkgrel=1
    
      9arch=('any')
    
      10pkgdesc="The Open Source toolkit for Secure Sockets Layer and Transport Layer Security (Android ${_android_arch})"
    
      11url='https://www.openssl.org'
    
      12license=('Apache-2.0')
    
      13groups=('android-openssl')
    
      14depends=('android-ndk')
    
      15makedepends=('android-environment')
    
      16options=(!strip !buildflags staticlibs !emptydirs)
    
      17source=("https://www.openssl.org/source/openssl-${pkgver}.tar.gz")
    
      18md5sums=('f771f53e0ce36d806d64e15f4d3a36d3')
    
      19
    
      20build() {
    
      21    cd "${srcdir}/openssl-${pkgver}"
    
      22    source android-env ${_android_arch}
    
      23
    
      24    build_arch=
    
      25
    
      26    case "${_android_arch}" in
    
      27        aarch64)
    
      28            build_arch=arm64
    
      29            ;;
    
      30        armv7a-eabi)
    
      31            build_arch=arm
    
      32            ;;
    
      33        riscv64)
    
      34            build_arch=riscv64
    
      35
    
      36            export CFLAGS="${ANDROID_CFLAGS} -O1 -pipe"
    
      37            export CXXFLAGS="${ANDROID_CXXFLAGS} -O1 -pipe -fexceptions"
    
      38            export CPPFLAGS="${ANDROID_CPPFLAGS} -D_FORTIFY_SOURCE=2 -D__USE_FORTIFY_LEVEL=2 -isystem ${ANDROID_PREFIX_INCLUDE}"
    
      39            export LDFLAGS="${ANDROID_LDFLAGS} -Wl,-O1,--sort-common,--as-needed,-z,relro,-z,now -L${ANDROID_PREFIX_LIB}"
    
      40            ;;
    
      41        x86)
    
      42            build_arch=x86
    
      43            ;;
    
      44        x86-64)
    
      45            build_arch=x86_64
    
      46            ;;
    
      47    esac
    
      48
    
      49    export PATH="${ANDROID_TOOLCHAIN}/bin:${PATH}"
    
      50
    
      51    ./Configure \
    
      52        --prefix="${ANDROID_PREFIX}" \
    
      53        --libdir="${ANDROID_PREFIX_LIB}" \
    
      54        --openssldir="${ANDROID_PREFIX}" \
    
      55        -U__ANDROID_API__ \
    
      56        -D__ANDROID_API__="${ANDROID_MINIMUM_PLATFORM}" \
    
      57        threads \
    
      58        shared \
    
      59        android-${build_arch} \
    
      60        no-stdio \
    
      61        no-ui-console \
    
      62        no-tests \
    
      63        no-docs \
    
      64        no-apps \
    
      65        no-legacy \
    
      66        no-asm
    
      67
    
      68    # get rid of debug printing so the library doesn't depend on stdio (no-stdio and no-ui are not entirely sufficient)
    
      69    sed -i -e 's/\#define TEST_ENG_OPENSSL_RC4_P_INIT//' crypto/engine/eng_openssl.c
    
      70
    
      71    # build only libraries
    
      72    # note: Setting SHLIB_EXT in accordance with qtbase/src/network/ssl/qsslsocket_openssl_symbols.cpp to avoid loading
    
      73    #       system library.
    
      74    make CALC_VERSIONS="SHLIB_COMPAT=; SHLIB_SOVER=" SHLIB_VERSION_NUMBER= SHLIB_EXT=.so build_libs $MAKEFLAGS
    
      75}
    
      76
    
      77package() {
    
      78    cd "$srcdir/openssl-${pkgver}"
    
      79    source android-env ${_android_arch}
    
      80
    
      81    # install header files, libraries and license
    
      82    for lib in libcrypto{.a,.so} libssl{.a,.so}; do
    
      83        install -Dm644 "${lib}" "${pkgdir}/${ANDROID_PREFIX_LIB}/${lib}"
    
      84    done
    
      85
    
      86    for pc in libcrypto.pc libssl.pc openssl.pc; do
    
      87        install -Dm644 "${pc}" "${pkgdir}/${ANDROID_PREFIX_LIB}/pkgconfig/${pc}"
    
      88    done
    
      89
    
      90    mkdir -p "${pkgdir}/${ANDROID_PREFIX_INCLUDE}"
    
      91    cp -r include/openssl "${pkgdir}/${ANDROID_PREFIX_INCLUDE}"
    
      92
    
      93    # strip binaries
    
      94    find "${pkgdir}" -name 'lib*.so' -type f -exec "${ANDROID_STRIP}" --strip-unneeded {} \;
    
      95    find "${pkgdir}" -name 'lib*.a' -type f -exec "${ANDROID_STRIP}" -g {} \;
    
      96
    
      97    install -vDm 644 LICENSE.txt -t "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      98}
    
      99

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-09-22 17:38
@@ -4,7 +4,7 @@
 _android_arch=riscv64
 
 pkgname=android-${_android_arch}-openssl
-pkgver=3.6.1
+pkgver=3.6.4
 pkgrel=1
 arch=('any')
 pkgdesc="The Open Source toolkit for Secure Sockets Layer and Transport Layer Security (Android ${_android_arch})"
@@ -15,7 +15,7 @@
 makedepends=('android-environment')
 options=(!strip !buildflags staticlibs !emptydirs)
 source=("https://www.openssl.org/source/openssl-${pkgver}.tar.gz")
-md5sums=('589777dc85ebbfeca70161c0c384d572')
+md5sums=('f771f53e0ce36d806d64e15f4d3a36d3')
 
 build() {
     cd "${srcdir}/openssl-${pkgver}"

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-22 17:38:46	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 16:11:54	Medium	1