android-x86-64-mariadb
LOW
maintainer hipersayan_x
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a MariaDB tarball from a legitimate mirror (rsync.osuosl.org) used for reliability; building from official project source with proper PGP verification is standard practice, despite the non-whitelisted host.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a MariaDB tarball from a legitimate mirror (rsync.osuosl.org) used for reliability; building from official project source with proper PGP verification is standard practice, despite the non-whitelisted host.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:25
source=("https://rsync.osuosl.org/pub/mariadb/mariadb-${pkgver}/source/mariadb-${pkgver}.tar.gz"{,.asc}
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Gonzalo Exequiel Pedone <hipersayan DOT x AT gmail DOT com>
2
# Contributor: Christian Hesse <eworm@archlinux.org>
3
4
_android_arch=x86-64
5
6
pkgname=android-${_android_arch}-mariadb
7
pkgdesc="MariaDB client library (Android ${_android_arch})"
8
pkgver=12.1.2
9
pkgrel=2
10
arch=('any')
11
license=('LGPL2.1')
12
url='https://mariadb.org/'
13
groups=('android-mariadb')
14
depends=("android-${_android_arch}-curl"
15
"android-${_android_arch}-openssl"
16
"android-${_android_arch}-zlib"
17
"android-${_android_arch}-zstd")
18
makedepends=('android-cmake')
19
optdepends=("android-${_android_arch}-curl: for ha_s3 plugin")
20
options=(!strip !buildflags staticlibs !emptydirs)
21
# The default links with mirror redirection fail for signatures, specific
22
# mirrors may be out of date every now and then. Let's use the upstream
23
# rsync source via https and hope it does not hurt them too much.
24
# https://mariadb.com/kb/en/library/mirror-sites-for-mariadb/
25
source=("https://rsync.osuosl.org/pub/mariadb/mariadb-${pkgver}/source/mariadb-${pkgver}.tar.gz"{,.asc}
26
'0004-Dont-read-PEM-keys.patch')
27
md5sums=('ccddcc219867b833521c279eb739191d'
28
'SKIP'
29
'05ce29a22db5d51618eb62fd01cf77ed')
30
validpgpkeys=('177F4010FE56CA3336300305F1656F24C74CD1D8') # MariaDB Signing Key <signing-key@mariadb.org>
31
32
prepare() {
33
cd "${srcdir}/mariadb-${pkgver}"
34
source android-env ${_android_arch}
35
36
patch -Np1 -i ../0004-Dont-read-PEM-keys.patch
37
sed -i 's|"lib/mariadb"|"lib"|g' libmariadb/cmake/install.cmake
38
}
39
40
build() {
41
cd "${srcdir}/mariadb-${pkgver}/libmariadb"
42
source android-env ${_android_arch}
43
44
android-${_android_arch}-cmake \
45
-B build \
46
-DCMAKE_BUILD_TYPE=Release \
47
-DWITH_EXTERNAL_ZLIB=ON \
48
-DWITH_ZSTD=system \
49
-DWITH_UNIT_TESTS=OFF \
50
-DZLIB_BUILD_EXAMPLES=OFF \
51
-DINSTALL_MANDIR=share/man \
52
-DOPENSSL_ROOT_DIR="${ANDROID_PREFIX}" \
53
-DOPENSSL_INCLUDE_DIR="${ANDROID_PREFIX_INCLUDE}" \
54
-DOPENSSL_CRYPTO_LIBRARY="${ANDROID_PREFIX_LIB}/libcrypto.so" \
55
-DOPENSSL_SSL_LIBRARY="${ANDROID_PREFIX_LIB}/libssl.so" \
56
-DZSTD_LIBRARIES="${ANDROID_PREFIX_LIB}/libzstd.so" \
57
-DZSTD_INCLUDE_DIRS="${ANDROID_PREFIX_INCLUDE}" \
58
-DCURL_INCLUDE_DIR="${ANDROID_PREFIX_INCLUDE}" \
59
-DCURL_LIBRARY="${ANDROID_PREFIX_LIB}/libcurl.so" \
60
-Dpkgcfg_lib_PC_CURL_curl="${ANDROID_PREFIX_LIB}/pkgconfig/libcurl.pc"
61
make -C build $MAKEFLAGS
62
}
63
64
package() {
65
cd "${srcdir}/mariadb-${pkgver}/libmariadb"
66
source android-env ${_android_arch}
67
68
make -C build DESTDIR="${pkgdir}" install
69
rm -rf "${pkgdir}/${ANDROID_PREFIX_SHARE}"
70
${ANDROID_STRIP} -g --strip-unneeded "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.so
71
${ANDROID_STRIP} -g "${pkgdir}/${ANDROID_PREFIX_LIB}"/*.a
72
73
install -vDm 644 COPYING.LIB -t "${pkgdir}/usr/share/licenses/${pkgname}/"
74
}
75
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |