cnijfilter-mp280

LOW
maintainer vova7890 13 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The source is a Canon driver tarball from a plausible Canon download host (gdlp01.c-wss.com), which is not on the whitelist but is likely legitimate; the package builds from source and installs only compiled binaries and libraries, with no evidence of malicious behavior or unverifiable prebuilt payloads.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a Canon driver tarball from a plausible Canon download host (gdlp01.c-wss.com), which is not on the whitelist but is likely legitimate; the package builds from source and installs only compiled binaries and libraries, with no evidence of malicious behavior or unverifiable prebuilt payloads.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:30 'http://gdlp01.c-wss.com/gds/0/0100003020/01/cnijfilter-source-3.40-1.tar.gz'

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: zvova7890 <zvova7890.gmail.com>
2# Contributor: Alireza Savand <alireza.savand@gmail.com>
3# Special thanks to: olive, mirrr, GUiHKX, alessiofachechi, jeremy33,
4# jstitch, plv, lahwaacz
5
6pkgname=cnijfilter-mp280
7pkgver=3.40.1
8pkgrel=5
9_pkgrealver=3.40
10_pkgrealrel=1
11pkgdesc="Canon IJ Printer Driver (mp280 series)"
12url="http://support-au.canon.com.au/contents/AU/EN/0100302002.html"
13arch=('i686' 'x86_64')
14license=('custom')
15depends=(
16 'libcups'
17 'popt'
18 'glibc'
19 'libpng>=1.0.9'
20 'libtiff>=3.4'
21 'gtk2'
22)
23makedepends=(
24 'autoconf>=2.59'
25 'automake>=1.9.5'
26)
27conflicts=('cnijfilter-common')
28install=cnijfilter-mp280.install
29source=(
30 'http://gdlp01.c-wss.com/gds/0/0100003020/01/cnijfilter-source-3.40-1.tar.gz'
31 'configure-fixes.patch'
32 'cups-fixes.patch'
33 'cn-ppd-support-mp280.patch'
34 'glibc-deprecated-fix.patch'
35 'compilation-fixes-2024-11-06.diff'
36)
37md5sums=(
38 '609975a05d6050fcca88f312d3f35c6a'
39 'd1c346d063e7fc54dc74dc72bc5615ad'
40 '10e68bf7d29a6206171be05893e826e1'
41 '1b76cb2d4a46f6a10e6aced051729bb7'
42 '494a454cc2e91a3e8f14a6fb81131c10'
43 '2b44507c54f14fb6c8e08af30fdaafe7'
44)
45
46
47prepare() {
48 cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel"
49 patch -p1 < "$startdir/configure-fixes.patch"
50 patch -p1 < "$startdir/cups-fixes.patch"
51 patch -p1 < "$startdir/cn-ppd-support-mp280.patch"
52 patch -p1 < "$startdir/glibc-deprecated-fix.patch"
53 patch -p1 < "$startdir/compilation-fixes-2024-11-06.diff"
54
55 sed -i -e 's/png_p->jmpbuf/png_jmpbuf(png_p)/' cnijfilter/src/bjfimage.c
56 cp cnijfilter/src/config* lgmon/src/
57 cp cnijfilter/src/config* cngpijmon/cnijnpr/cnijnpr/
58}
59
60build() {
61 cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel/libs"
62 ./autogen.sh --prefix=/usr --program-suffix=mp280
63 make
64
65 cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel/cngpij"
66 ./autogen.sh --prefix=/usr --program-suffix=mp280 --enable-progpath=/usr/bin
67 make
68
69 cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel/cnijfilter"
70 ./autogen.sh --prefix=/usr --program-suffix=mp280 --enable-progpath=/usr/bin
71 make
72
73 cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel/pstocanonij"
74 ./autogen.sh --prefix=/usr --program-suffix=mp280 --enable-progpath=/usr/bin
75 make
76
77 cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel/lgmon"
78 ./autogen.sh --prefix=/usr --program-suffix=mp280 --enable-progpath=/usr/bin
79 make
80
81 cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel/ppd"
82 ./autogen.sh --prefix=/usr --program-suffix=mp280
83 make
84
85 cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel/cngpijmon/cnijnpr"
86 ./autogen.sh --prefix=/usr --program-suffix=mp280 --enable-progpath=/usr/bin LIBS="-ldl"
87 make
88
89 cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel/backend"
90 ./autogen.sh --prefix=/usr --program-suffix=mp280 --enable-progpath=/usr/bin
91 make
92
93 cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel/backendnet"
94 ./autogen.sh --prefix=/usr --program-suffix=mp280 --enable-progpath=/usr/bin
95 make
96}
97
98package() {
99 # install targets
100 for dir in libs cngpij cnijfilter pstocanonij lgmon ppd cngpijmon/cnijnpr backend backendnet; do
101 cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel/$dir"
102 make install DESTDIR="$pkgdir"
103 done
104
105 # install bjlib
106 cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel"
107 install -d "$pkgdir/usr/lib/bjlib"
108 install -m755 370/database/* "$pkgdir/usr/lib/bjlib"
109
110 # install shared libraries
111 if [ "$CARCH" == "x86_64" ]; then
112 libdir=libs_bin64
113 else
114 libdir=libs_bin32
115 fi
116 for file in libcnbpcmcm370.so.8.0.1 libcnbpcnclapi370.so.3.5.0 libcnbpcnclbjcmd370.so.3.3.0 \
117 libcnbpcnclui370.so.3.6.0 libcnbpess370.so.3.3.3 libcnbpess370.so.3.3.3 libcnbpo370.so.1.0.2; do
118 install -m755 "./370/$libdir/$file" "$pkgdir/usr/lib/"
119 done
120 install -m755 "./com/$libdir/libcnnet.so.1.2.0" "$pkgdir/usr/lib/"
121
122 # install license file
123 install -Dm644 "LICENSE-cnijfilter-${_pkgrealver}EN.txt" \
124 "$pkgdir/usr/share/licenses/$pkgname/LICENSE-cnijfilter-${_pkgrealver}EN.txt"
125
126 # link libraries to their basename
127 cd "$pkgdir/usr/lib/"
128 ln -s libcnbpcmcm370.so.8.0.1 libcnbpcmcm370.so
129 ln -s libcnbpcnclapi370.so.3.5.0 libcnbpcnclapi370.so
130 ln -s libcnbpcnclbjcmd370.so.3.3.0 libcnbpcnclbjcmd370.so
131 ln -s libcnbpcnclui370.so.3.6.0 libcnbpcnclui370.so
132 ln -s libcnbpess370.so.3.3.3 libcnbpess370.so
133 ln -s libcnbpo370.so.1.0.2 libcnbpo370.so
134 ln -s libcnnet.so.1.2.0 libcnnet.so
135
136 # link moved from $pkgname.install file to be included in package
137 install -dm755 "$pkgdir/usr/lib/cups/filter"
138 ln -s "pstocanonijmp280" "$pkgdir/usr/lib/cups/filter/pstocanonij"
139}
140

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion