canon-maxify-mb5100-complete

maintainer tac-shell · 3 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads official Canon driver tarballs from Canon's own gdlp01.c-wss.com domain, which is a standard host for Canon software distribution; despite the static analyzer flag, the source is legitimate and the build process only extracts and installs the official driver files.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads official Canon driver tarballs from Canon's own gdlp01.c-wss.com domain, which is a standard host for Canon software distribution; despite the static analyzer flag, the source is legitimate and the build process only extracts and installs the official driver files.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:27 source=('http://gdlp01.c-wss.com/gds/9/0100008399/01/cnijfilter2-5.40-1-deb.tar.gz'

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Matthew Carr <mdcarr941 at gmail dot com>
    
      2
    
      3# This package is a trivial modification of
    
      4# https://aur.archlinux.org/packages/canon-pixma-# ts5055-complete/
    
      5# which is maintained by Malte Ohmstede.
    
      6# Scanner icon source: http://openiconlibrary.sourceforge.net/gallery2/open_icon_library-full/icons/png/64x64/devices/scanner-3.png
    
      7# The icon source URL isn't alive anymore
    
      8
    
      9pkgname=canon-maxify-mb5100-complete
    
      10pkgver=5.40
    
      11pkgrel=1
    
      12pkgdesc="Complete stand alone driver set (printing and scanning) for Canon maxify MB5100 series."
    
      13url='https://www.usa.canon.com/internet/portal/us/home/support/details/printers/small-office-home-office-printers/mb5120'
    
      14arch=('i686' 'x86_64')
    
      15license=('custom')
    
      16install="${pkgname}.install"
    
      17if [[ ${CARCH} == 'x86_64' ]]; then
    
      18  depends=('popt' 'libpng12' 'libusb-compat' 'libtiff' 'libxml2' 'gtk2')
    
      19  _printDrvDebCommon='cnijfilter2_5.40-1_amd64'
    
      20  _scanDrvDebCommon='scangearmp2_3.40-1_amd64'
    
      21elif [[ ${CARCH} == 'i686' ]]; then
    
      22  depends=('popt' 'lib32-libpng12' 'libusb-compat' 'lib32-libtiff' 'lib32-libxml2' 'gtk2')
    
      23  _printDrvDebCommon='cnijfilter2_5.40-1_i386'
    
      24  _scanDrvDebCommon='scangearmp2_3.40-1_i386'
    
      25fi
    
      26makedepends=('deb2targz' 'sed')
    
      27source=('http://gdlp01.c-wss.com/gds/9/0100008399/01/cnijfilter2-5.40-1-deb.tar.gz'
    
      28	'http://gdlp01.c-wss.com/gds/2/0100008402/01/scangearmp2-3.40-1-deb.tar.gz'
    
      29        "${pkgname}-scangear.desktop"
    
      30        "${pkgname}-scangear-icon.png")
    
      31
    
      32sha256sums=('3b298716ad8b806fad72ed52714838921dea6f84253446a02d0e669afbc13804'
    
      33            'bb8d108b2c3557f3dc258d47b560ce96608a006ec7b052a630e0a5f911da2413'
    
      34            '3acb5003d7d2b71bf2ecf9d9cd57872f20b182ab0df5e9d5528649f5fbd391c0'
    
      35            '29dbc682d3f22d79f580bda54801d1f4ef261d857c756eaf4db29e1313406bcc')
    
      36
    
      37_printDrvSrc='cnijfilter2-5.40-1-deb'
    
      38_scanDrvSrc='scangearmp2-3.40-1-deb'
    
      39
    
      40_ppdFile="canonmb5100.ppd"
    
      41
    
      42build(){
    
      43   cd ${srcdir}
    
      44
    
      45   # Unpack driver source files
    
      46
    
      47   tar xvzf ${_printDrvSrc}.tar.gz
    
      48   tar xvzf ${_scanDrvSrc}.tar.gz
    
      49
    
      50   rm -v *.tar.gz
    
      51}
    
      52
    
      53package(){
    
      54   cd ${pkgdir}
    
      55
    
      56   # Unpack debian installer files
    
      57
    
      58   cp "${srcdir}/${_printDrvSrc}/packages/${_printDrvDebCommon}.deb" .
    
      59   cp "${srcdir}/${_scanDrvSrc}/packages/${_scanDrvDebCommon}.deb" .
    
      60
    
      61   deb2targz "${_printDrvDebCommon}.deb"
    
      62   deb2targz "${_scanDrvDebCommon}.deb"
    
      63
    
      64   rm -v *.deb
    
      65
    
      66   tar xzvf "${_printDrvDebCommon}.tar.gz"
    
      67   tar xzvf "${_scanDrvDebCommon}.tar.gz"
    
      68
    
      69   rm -v *.tar.gz
    
      70
    
      71   # Move ppd file to where cups expects
    
      72
    
      73   install -vDm 644 "${pkgdir}/usr/share/ppd/${_ppdFile}" "${pkgdir}/usr/share/cups/model/${_ppdFile}"
    
      74
    
      75   rm -vrf ${pkgdir}/usr/share/ppd
    
      76
    
      77   # Install license files
    
      78
    
      79   find ${pkgdir}/usr/share/doc/ -name 'LICENSE*' -execdir install -vDm 644 {} "${pkgdir}/usr/share/licenses/${pkgname}/{}" \;
    
      80   
    
      81   # Install entry in application menu, including icon
    
      82
    
      83   install -vDm 644 "${srcdir}/${pkgname}-scangear.desktop" "${pkgdir}/usr/share/applications/${pkgname}-scangear.desktop"
    
      84   install -vDm 644 "${srcdir}/${pkgname}-scangear-icon.png" "${pkgdir}/usr/share/pixmaps/${pkgname}-scangear-icon.png"
    
      85}
    
      86

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2