cnijfilter-mg4100

maintainer oberon2007 · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads a source tarball from a non-whitelisted but official Canon host (gdlp01.c-wss.com) to build printer drivers; this is a standard, expected source for Canon firmware and poses no supply-chain risk as it is the vendor's own distribution system.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source tarball from a non-whitelisted but official Canon host (gdlp01.c-wss.com) to build printer drivers; this is a standard, expected source for Canon firmware and poses no supply-chain risk as it is the vendor's own distribution system.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:15 source=("http://gdlp01.c-wss.com/gds/8/0100003928/01/cnijfilter-source-${_pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Bernhard Landauer <oberon@manjaro.org>
2# Maintainer: Pavol Hluchy (Lopo) <lopo at losys dot eu>
3# Changed model to mg4100 from original package cnijfilter-mg6200
4_model=mg4100
5pkgname=cnijfilter-${_model}
6pkgver=3.60
7pkgrel=5
8_pkgver=3.60-1
9pkgdesc="Canon IJ Printer Driver (for ${_model} series)"
10url="http://support-au.canon.com.au/contents/AU/EN/0100392802.html"
11arch=('i686' 'x86_64')
12license=('custom')
13depends=('libpng>=1.2.8' 'libtiff' 'gtk2' 'popt')
14makedepends=('findutils' 'gawk')
15source=("http://gdlp01.c-wss.com/gds/8/0100003928/01/cnijfilter-source-${_pkgver}.tar.gz"
16 'cups.patch'
17 'libpng15.patch'
18 'configures.patch')
19md5sums=('70e412331a21f4b573b4e901c89cee18'
20 '438586f7386033bff8de318e56779545'
21 '448241d96048dfc76f7bb7b53f9d7621'
22 '5100f205bfbd86741679f697ebe64a4b')
23
24
25_getlibdir() {
26 if [ "$CARCH" == "x86_64" ]; then
27 echo libs_bin64
28 else
29 echo libs_bin32
30 fi
31 }
32
33prepare() {
34 cd "${srcdir}/cnijfilter-source-${_pkgver}"
35 patch -p1 < "${startdir}/cups.patch"
36 patch -p1 < "${startdir}/libpng15.patch"
37 patch -p1 < "${startdir}/configures.patch"
38 }
39
40build() {
41 _libdir=$(_getlibdir)
42
43 ## Compile and install ${_model} stuff
44 # ppd file
45 cd "${srcdir}/cnijfilter-source-${_pkgver}/ppd"
46 ./autogen.sh --prefix=/usr --enable-ppdpath=/usr/share/cups/model --program-suffix=${_model}
47 make clean || return 1
48 make || return 1
49 # cnijfilter
50 cd "${srcdir}/cnijfilter-source-${_pkgver}/cnijfilter"
51 ./autogen.sh --prefix=/usr --enable-libpath=/usr/lib/bjlib --enable-binpath=/usr/bin --program-suffix=${_model}
52 make clean || return 1
53 make || return 1
54 # printui
55 cd "${srcdir}/cnijfilter-source-${_pkgver}/printui"
56 ./autogen.sh --prefix=/usr --datadir=/usr/share --program-suffix=${_model}
57 make || true # Needed to avoid errors while building locales
58 make clean || return 1
59 make || return 1
60 # lgmon
61 cd "${srcdir}/cnijfilter-source-${_pkgver}/lgmon"
62 ./autogen.sh --prefix=/usr --enable-progpath=/usr/bin --program-suffix=${_model}
63 make clean || return 1
64 make || return 1
65 # cngpijmon
66 cd "${srcdir}/cnijfilter-source-${_pkgver}/cngpijmon"
67 ./autogen.sh --prefix=/usr --enable-progpath=/usr/bin --datadir=/usr/share --program-suffix=${_model}
68 make clean || return 1
69 make || return 1
70
71 ## Compile common stuff
72 # libs
73 cd "${srcdir}/cnijfilter-source-${_pkgver}/libs"
74 ./autogen.sh --prefix=/usr
75 make clean || return 1
76 make || return 1
77 # cngpij, pstocanonij, backend
78 for _c in cngpij pstocanonij backend; do
79 cd "${srcdir}/cnijfilter-source-${_pkgver}/${_c}"
80 ./autogen.sh --prefix=/usr --enable-progpath=/usr/bin
81 make clean || return 1
82 make || return 1
83 done
84 # backendnet
85 cd "${srcdir}/cnijfilter-source-${_pkgver}/backendnet"
86 ./autogen.sh --prefix=/usr --enable-progpath=/usr/bin LDFLAGS="-L../../com/${_libdir}"
87 make clean || return 1
88 make || return 1
89 # sm sub process
90 cd "${srcdir}/cnijfilter-source-${_pkgver}/cngpijmon/cnijnpr"
91 ./autogen.sh --prefix=/usr --enable-progpath=/usr/bin LIBS="-ldl"
92 make clean || return 1
93 make || return 1
94 }
95
96package() {
97 _modelid=`find ${srcdir}/cnijfilter-source-${_pkgver} -type f -name cif${_model}.conf -path '*[\d]*' -printf '%P' \
98 | gawk -F/ '{print $1}'`
99 [ -n "${_modelid}" ] || return 1
100 _libdir=$(_getlibdir)
101
102 for dir in ppd cnijfilter printui lgmon cngpijmon libs cngpij pstocanonij backend backendnet cngpijmon/cnijnpr; do
103 cd "${srcdir}/cnijfilter-source-${_pkgver}/${dir}"
104 make install DESTDIR="${pkgdir}" || return 1
105 done
106
107 # Install ${_model} libraries
108 install -d ${pkgdir}/usr/lib/
109 install -m 755 ${srcdir}/cnijfilter-source-${_pkgver}/${_modelid}/${_libdir}/*so.* ${pkgdir}/usr/lib/
110 install -d ${pkgdir}/usr/lib/bjlib/
111 install -m 644 ${srcdir}/cnijfilter-source-${_pkgver}/${_modelid}/database/* ${pkgdir}/usr/lib/bjlib/
112 # Install common libraries
113 install -m 755 ${srcdir}/cnijfilter-source-${_pkgver}/com/${_libdir}/*so.* ${pkgdir}/usr/lib/
114 install -m 666 ${srcdir}/cnijfilter-source-${_pkgver}/com/ini/* ${pkgdir}/usr/lib/bjlib/
115 # Make symbolic links for libraries
116 cd ${pkgdir}/usr/lib/
117 ln -s libcnnet.so.*.*.* libcnnet.so
118 for _l in cmcm cnclapi cnclbjcmd cnclui ess; do
119 ln -s libcnbp${_l}${_modelid}.so.*.*.* libcnbp${_l}${_modelid}.so
120 done
121 ln -s libcnbpess${_modelid}.so.*.*.* libcnbpo${_modelid}.so
122
123 # Install license file
124 cd ${srcdir}/cnijfilter-source-${_pkgver}
125 install -D LICENSE-cnijfilter-${pkgver}EN.txt ${pkgdir}/usr/share/licenses/${pkgname}/LICENSE-cnijfilter-${pkgver}EN.txt
126 }
127

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion