cbmem

maintainer yochananmarqos · 4 votes · base coreboot-utils · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a tarball from coreboot.org, the project's official website, which is a legitimate and expected source for building coreboot utilities; the non-standard host flag is a false positive as coreboot.org is the canonical domain for the project.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from coreboot.org, the project's official website, which is a legitimate and expected source for building coreboot utilities; the non-standard host flag is a false positive as coreboot.org is the canonical domain for the project.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:44 source=("https://coreboot.org/releases/coreboot-$pkgver.tar.xz"{,.sig})

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Mark Wagie <mark dot wagie at proton dot me>
    
      2# Contributor: slact
    
      3pkgname=(
    
      4  'acpidump-all'
    
      5  'amdfwtool'
    
      6  'autoport'
    
      7  'cbfstool'
    
      8  'cbmem'
    
      9#  'coreboot-configurator'  # use StarLabs fork: https://github.com/StarLabsLtd/coreboot-configurator
    
      10  'ectool'
    
      11  'ifdtool'
    
      12  'intelmetool'
    
      13  'inteltool'
    
      14  'intelvbttool'
    
      15  'me_cleaner'
    
      16  'msrtool'
    
      17  'nvramtool'
    
      18  'pmh7tool'
    
      19  'superiotool'
    
      20)
    
      21pkgbase=coreboot-utils
    
      22pkgver=26.06
    
      23pkgrel=1
    
      24pkgdesc="Tools and utilities to work with coreboot firmware"
    
      25url="https://www.coreboot.org"
    
      26license=('GPL-2.0-only')
    
      27arch=('x86_64')
    
      28depends=(
    
      29  'acpica'
    
      30  'dmidecode'
    
      31  'glibc'
    
      32  'pciutils'
    
      33  'python'
    
      34#  'qt5-base'  # coreboot-configurator
    
      35#  'qt5-svg'  # coreboot-configurator
    
      36#  'yaml-cpp'  # coreboot-configurator
    
      37  'zlib'
    
      38)
    
      39makedepends=(
    
      40  'go'
    
      41#  'inkscape'  # coreboot-configurator
    
      42#  'meson'  # coreboot-configurator
    
      43)
    
      44source=("https://coreboot.org/releases/coreboot-$pkgver.tar.xz"{,.sig})
    
      45sha256sums=('c573be035061abc93ad5097f7fec7a8ebb84b4fdd3c475f301a8f2ca5d06fd0d'
    
      46            'SKIP')
    
      47validpgpkeys=('C75AAA4E5C9DB017C1DC6EDBDB1B0EC29202D874' # Matt DeVillier <matt.devillier@gmail.com>
    
      48              '574CE6F6855CFDEB7D368E9D19796C2B3E4F7DF7') # Martin Roth (coreboot developer) <martin@coreboot.org>
    
      49
    
      50prepare() {
    
      51  cd "coreboot-$pkgver"
    
      52
    
      53  # sbin > bin
    
      54  for program in cbmem ectool intelmetool inteltool nvramtool pmh7tool superiotool; do
    
      55    sed -i 's/sbin/bin/g' "util/${program}/Makefile"
    
      56  done
    
      57  sed -i 's/sbin/bin/g' util/msrtool/Makefile.in
    
      58}
    
      59
    
      60build() {
    
      61  cd "coreboot-$pkgver"
    
      62
    
      63  echo ""
    
      64  echo "Building amdfwtool..."
    
      65  echo ""
    
      66  make -C util/amdfwtool
    
      67
    
      68  echo ""
    
      69  echo "Building autoport..."
    
      70  echo ""
    
      71  pushd util/autoport
    
      72  export GOPATH="$srcdir/gopath"
    
      73  export CGO_CPPFLAGS="${CPPFLAGS}"
    
      74  export CGO_CFLAGS="${CFLAGS}"
    
      75  export CGO_CXXFLAGS="${CXXFLAGS}"
    
      76  export CGO_LDFLAGS="${LDFLAGS}"
    
      77  export GOFLAGS="-buildmode=pie -trimpath -ldflags=-linkmode=external -mod=readonly -modcacherw"
    
      78  go build -v ./...
    
      79
    
      80  # Clean module cache for makepkg -C
    
      81  go clean -modcache
    
      82  popd
    
      83
    
      84  echo ""
    
      85  echo "Building cbfstool..."
    
      86  echo ""
    
      87  make -C util/cbfstool
    
      88
    
      89  echo ""
    
      90  echo "Building cbmem..."
    
      91  echo ""
    
      92  make -C util/cbmem
    
      93
    
      94#  echo ""
    
      95#  echo "Building coreboot-configurator..."
    
      96#  echo ""
    
      97#  arch-meson util/coreboot-configurator util/coreboot-configurator/build
    
      98#  meson compile -C util/coreboot-configurator/build
    
      99
    
      100  echo ""
    
      101  echo "Building ectool..."
    
      102  echo ""
    
      103  make -C util/ectool
    
      104
    
      105  echo ""
    
      106  echo "Building ifdtool..."
    
      107  echo ""
    
      108  make -C util/ifdtool
    
      109
    
      110  echo ""
    
      111  echo "Building intelmetool..."
    
      112  echo ""
    
      113  make -C util/intelmetool CFLAGS+="-I $srcdir/coreboot-$pkgver/src/commonlib/bsd/include"
    
      114
    
      115  echo ""
    
      116  echo "Building inteltool..."
    
      117  echo ""
    
      118  make -C util/inteltool
    
      119
    
      120  echo ""
    
      121  echo "Building intelvbttool..."
    
      122  echo ""
    
      123  make -C util/intelvbttool
    
      124
    
      125  echo ""
    
      126  echo "Building msrtool..."
    
      127  echo ""
    
      128  pushd util/msrtool
    
      129  VERSION="$pkgver" ./configure
    
      130  make
    
      131  popd
    
      132
    
      133  echo ""
    
      134  echo "Building nvramtool..."
    
      135  echo ""
    
      136  make -C util/nvramtool
    
      137
    
      138  echo ""
    
      139  echo "Building pmh7tool..."
    
      140  echo ""
    
      141  make -C util/pmh7tool
    
      142
    
      143  echo ""
    
      144  echo "Building superiotool..."
    
      145  echo ""
    
      146  make -C util/superiotool
    
      147}
    
      148
    
      149package_acpidump-all() {
    
      150  pkgdesc="Walk through all ACPI tables with their addresses"
    
      151  depends=(
    
      152    'acpica'
    
      153    'bash'
    
      154  )
    
      155
    
      156  cd "coreboot-$pkgver"
    
      157  install -Dm755 "util/acpi/$pkgname" -t "$pkgdir/usr/bin/"
    
      158}
    
      159
    
      160package_amdfwtool() {
    
      161  pkgdesc="Create AMD firmware combination"
    
      162  depends=('glibc')
    
      163
    
      164  cd "coreboot-$pkgver"
    
      165  install -Dm755 "util/$pkgname"/{"$pkgname",amdfwread} -t "$pkgdir/usr/bin/"
    
      166}
    
      167
    
      168package_autoport() {
    
      169  pkgdesc="Automated porting coreboot to Sandy Bridge/Ivy Bridge platforms"
    
      170  depends=(
    
      171    'acpica'
    
      172    'dmidecode'
    
      173    'ectool'
    
      174    'glibc'
    
      175    'inteltool'
    
      176    'pciutils'
    
      177    'superiotool'
    
      178  )
    
      179
    
      180  cd "coreboot-$pkgver"
    
      181  install -Dm755 "util/$pkgname/$pkgname" -t "$pkgdir/usr/bin/"
    
      182  install -Dm644 "util/$pkgname/readme.md" -t "$pkgdir/usr/share/doc/$pkgname/"
    
      183}
    
      184
    
      185package_cbfstool() {
    
      186  pkgdesc="Management utility for CBFS formatted ROM images"
    
      187  depends=('glibc')
    
      188  optdepends=('qemu-system-x86')
    
      189
    
      190  cd "coreboot-$pkgver"
    
      191  make -C "util/$pkgname" PREFIX='/usr' DESTDIR="$pkgdir" install
    
      192  install -Dm644 "util/$pkgname/EXAMPLE" -t "$pkgdir/usr/share/doc/$pkgname/"
    
      193}
    
      194
    
      195package_cbmem() {
    
      196  pkgdesc="coreboot console log reader"
    
      197  depends=('glibc')
    
      198
    
      199  cd "coreboot-$pkgver"
    
      200  make -C "util/$pkgname" PREFIX='/usr' DESTDIR="$pkgdir" install
    
      201}
    
      202
    
      203package_coreboot-configurator() {
    
      204  pkgdesc="A simple GUI to change settings in coreboot's CBFS, via the nvramtool utility"
    
      205  depends=(
    
      206    'nvramtool'
    
      207    'qt5-base'
    
      208    'qt5-svg'
    
      209    'yaml-cpp'
    
      210  )
    
      211
    
      212  cd "coreboot-$pkgver"
    
      213  meson install -C util/coreboot-configurator/build --destdir "$pkgdir"
    
      214}
    
      215
    
      216package_ectool() {
    
      217  pkgdesc="Dump the RAM of a laptop's Embedded/Environmental Controller (EC)"
    
      218  depends=('glibc')
    
      219
    
      220  cd "coreboot-$pkgver"
    
      221  make -C "util/$pkgname" PREFIX='/usr' DESTDIR="$pkgdir" install
    
      222}
    
      223
    
      224package_ifdtool() {
    
      225  pkgdesc="Extract and dump Intel Firmware Descriptor information"
    
      226  depends=(
    
      227    'glibc'
    
      228    'pciutils'
    
      229    'zlib'
    
      230  )
    
      231
    
      232  cd "coreboot-$pkgver"
    
      233  make -C "util/$pkgname" PREFIX='/usr' DESTDIR="$pkgdir" install
    
      234}
    
      235
    
      236package_intelmetool() {
    
      237  pkgdesc="Dump interesting things about Management Engine"
    
      238  depends=(
    
      239    'glibc'
    
      240    'pciutils'
    
      241    'zlib'
    
      242  )
    
      243
    
      244  cd "coreboot-$pkgver"
    
      245  make -C "util/$pkgname" PREFIX='/usr' DESTDIR="$pkgdir" install
    
      246}
    
      247
    
      248package_inteltool() {
    
      249  pkgdesc="Provides information about Intel CPU/chipset hardware configuration"
    
      250  depends=(
    
      251    'glibc'
    
      252    'pciutils'
    
      253    'zlib'
    
      254  )
    
      255
    
      256  cd "coreboot-$pkgver"
    
      257  make -C "util/$pkgname" PREFIX='/usr' DESTDIR="$pkgdir" install
    
      258}
    
      259
    
      260package_intelvbttool() {
    
      261  pkgdesc="Parse VBT from VGA BIOS"
    
      262  depends=('glibc')
    
      263
    
      264  cd "coreboot-$pkgver"
    
      265  install -Dm755 "util/$pkgname/$pkgname" -t "$pkgdir/usr/bin/"
    
      266}
    
      267
    
      268package_me_cleaner() {
    
      269  pkgdesc="Tool for partial deblobbing of Intel ME/TXE firmware images"
    
      270  depends=('python')
    
      271
    
      272  cd "coreboot-$pkgver"
    
      273  install -Dm755 "util/$pkgname/$pkgname.py" "$pkgdir/usr/bin/$pkgname"
    
      274  install -Dm644 "util/$pkgname/man/$pkgname.1" -t "$pkgdir/usr/share/man/man1/"
    
      275  install -Dm644 "util/$pkgname/README.md" -t "$pkgdir/usr/share/doc/$pkgname/"
    
      276}
    
      277
    
      278package_msrtool() {
    
      279  pkgdesc="Dump chipset-specific MSR registers"
    
      280  depends=(
    
      281    'glibc'
    
      282    'pciutils'
    
      283    'zlib'
    
      284  )
    
      285
    
      286  cd "coreboot-$pkgver"
    
      287  make -C "util/$pkgname" PREFIX='/usr' DESTDIR="$pkgdir" install
    
      288  install -Dm644 "util/$pkgname/README" -t "$pkgdir/usr/share/doc/$pkgname/"
    
      289}
    
      290
    
      291package_nvramtool() {
    
      292  pkgdesc="Read and write coreboot parameters and display information from the coreboot table in CMOS/NVRAM"
    
      293  depends=('glibc')
    
      294
    
      295  cd "coreboot-$pkgver"
    
      296  make -C "util/$pkgname" PREFIX='/usr' DESTDIR="$pkgdir" install
    
      297}
    
      298
    
      299package_pmh7tool() {
    
      300  pkgdesc="Dumps, reads and writes PMH7 registers on Lenovo ThinkPads"
    
      301  depends=('glibc')
    
      302
    
      303  cd "coreboot-$pkgver"
    
      304  make -C "util/$pkgname" PREFIX='/usr' DESTDIR="$pkgdir" install
    
      305}
    
      306
    
      307package_superiotool() {
    
      308  pkgdesc="User-space utility to detect Super I/O of a mainboard and provide detailed information about the register contents of the Super I/O"
    
      309  depends=(
    
      310    'glibc'
    
      311    'pciutils'
    
      312    'zlib'
    
      313  )
    
      314
    
      315  cd "coreboot-$pkgver"
    
      316  make -C "util/$pkgname" PREFIX='/usr' DESTDIR="$pkgdir" install
    
      317  install -Dm644 "util/$pkgname/README" -t "$pkgdir/usr/share/doc/$pkgname/"
    
      318}
    
      319

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2