at-link-console-bin
LOW
maintainer taotieren
0 votes
scanned 2026-10-17 00:21:55.226236
Why flagged
The package downloads a prebuilt binary from the official vendor's domain (arterytek.com) for a legitimate MCU programming tool; the host is not whitelisted but is plausibly the project's official source, and the payload consists of executables and libraries intended for local installation, not remote code execution.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt binary from the official vendor's domain (arterytek.com) for a legitimate MCU programming tool; the host is not whitelisted but is plausibly the project's official source, and the payload consists of executables and libraries intended for local installation, not remote code execution.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:35
source=("${_pkg_file_name}::https://www.arterytek.com/download/Program%20and%20Debug/Artery_ATLINK_Console_Linux-${arch}_V${pkgver}.zip")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: taotieren <admin@taotieren.com>
2
3
pkgname=at-link-console-bin
4
pkgver=3.0.20
5
pkgrel=3
6
pkgdesc="Artery AT LINK Console 是一款基于 MCU Bootloader 的命令行应用程序。支持AT32 MCU「在电路编程」Console工具"
7
arch=('x86_64')
8
url="https://www.arterytek.com/cn/support/tools.jsp"
9
license=('LicenseRef-Commercial')
10
provides=(${pkgname%-bin} AT-LINK_Console)
11
conflicts=(${pkgname%-bin})
12
replaces=()
13
depends=(
14
sh
15
libgcc_s.so
16
libstdc++.so
17
libusb
18
qt5-base
19
)
20
makedepends=('unzip')
21
optdepends=(
22
'artery-isp-console'
23
'at32-bootloader-doc'
24
'at32-ide'
25
'at32-ide-project-generate'
26
'at32-new-clock-configuration'
27
'at32-work-bench'
28
'at32-openocd'
29
'jlink-software-and-documentation: Segger JLink software & documentation pack for Linux'
30
)
31
backup=()
32
options=('!strip' '!debug' '!lto')
33
install=${pkgname}.install
34
_pkg_file_name=Artery_ATLINK_Console_V${pkgver}.zip
35
source=("${_pkg_file_name}::https://www.arterytek.com/download/Program%20and%20Debug/Artery_ATLINK_Console_Linux-${arch}_V${pkgver}.zip")
36
sha256sums=('2dd3f319ce6aa823fbe98ef2e1019289402ba9f1ee1e077ec32d073e06fe0074')
37
noextract=(${_pkg_file_name})
38
39
package() {
40
unzip -O gbk -o "${srcdir}"/${_pkg_file_name} -d "${srcdir}"
41
42
cd "${srcdir}"
43
44
install -dm0755 "${pkgdir}/opt/artery32/${pkgname%-bin}/" \
45
"${pkgdir}/usr/lib/"
46
47
cp -rv Document "${pkgdir}/opt/artery32/${pkgname%-bin}/Document"
48
49
# cd ${_pkg_file_name%_V${pkgver}.zip}_Linux-${arch}_V${pkgver}/
50
# 上游错误，下一版更新需要删除，改用上面的
51
cd ${_pkg_file_name%_V${pkgver}.zip}_Linux-${arch}_V${pkgver/10/09}/
52
install -Dm0755 ATLink_Console "${pkgdir}/opt/artery32/${pkgname%-bin}/ATLink_Console"
53
install -Dm0644 libATLINKLIB.so.1.0.0 "${pkgdir}/usr/lib/libATLINKLIB.so.1.0.0"
54
install -Dm0644 ATLink_Console.sh "${pkgdir}/opt/artery32/${pkgname%-bin}/ATLink_Console.sh.template"
55
install -Dm0644 download.sh "${pkgdir}/opt/artery32/${pkgname%-bin}/download.sh.template"
56
57
cd "${pkgdir}/usr/lib/"
58
for lib in lib*; do
59
ln -sf /usr/lib/"$lib" "${pkgdir}/usr/lib/${lib%.0.0}"
60
ln -sf /usr/lib/"$lib" "${pkgdir}/usr/lib/${lib%.1.0.0}"
61
done
62
63
# install -Dm0644 /dev/stdin "${pkgdir}/usr/lib/udev/rules.d/49-artery32-udev.rules" << EOF
64
# # Copy this file to /etc/udev/rules.d/
65
# # If rules fail to reload automatically, you can refresh udev rules
66
# # with the command "udevadm control --reload"
67
#
68
# ACTION!="add|change", GOTO="artery32_udev_rules_end"
69
#
70
# SUBSYSTEM=="gpio", MODE="0660", TAG+="uaccess"
71
#
72
# SUBSYSTEM!="usb|tty|hidraw", GOTO="artery32_udev_rules_end"
73
#
74
# # Artery tek
75
# ATTRS{idVendor}=="2e3c", ATTRS{idProduct}=="f000", MODE="660", TAG+="uaccess"
76
# ATTRS{idVendor}=="2e3c", ATTRS{idProduct}=="df11", MODE="660", TAG+="uaccess"
77
#
78
# # If you share your linux system with other users, or just don't like the
79
# # idea of write permission for everybody, you can replace MODE:="0666" with
80
# # OWNER:="yourusername" to create the device owned by you, or with
81
# # GROUP:="somegroupname" and mange access using standard unix groups.
82
#
83
# LABEL="artery32_udev_rules_end"
84
# EOF
85
86
install -Dm0755 /dev/stdin "${pkgdir}/usr/bin/${pkgname%-bin}" <<EOF
87
#!/bin/bash
88
/opt/artery32/${pkgname%-bin}/ATLink_Console "\$@"
89
EOF
90
91
}
92
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |
| 2026-10-12 00:18:51 | Low | 2 |
| 2026-10-11 00:26:05 | Low | 2 |
| 2026-10-10 00:11:52 | Low | 2 |
| 2026-10-09 00:05:33 | Low | 2 |
| 2026-10-08 00:28:03 | Low | 2 |
| 2026-10-07 00:21:34 | Low | 2 |
| 2026-10-06 00:13:36 | Low | 2 |
| 2026-10-05 00:08:03 | Low | 2 |
| 2026-10-04 00:18:08 | Low | 2 |
| 2026-10-03 00:23:04 | Low | 2 |
| 2026-10-02 00:00:32 | Low | 2 |
| 2026-10-01 00:02:06 | Low | 2 |
| 2026-09-30 00:20:07 | Low | 2 |
| 2026-09-29 00:07:46 | Low | 2 |
| 2026-09-28 00:28:32 | Low | 2 |