cnijfilter-mp280

maintainer vova7890 · 13 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a Canon driver tarball from a plausible Canon download host (gdlp01.c-wss.com), which is not on the whitelist but is likely legitimate; the package builds from source and installs only compiled binaries and libraries, with no evidence of malicious behavior or unverifiable prebuilt payloads.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a Canon driver tarball from a plausible Canon download host (gdlp01.c-wss.com), which is not on the whitelist but is likely legitimate; the package builds from source and installs only compiled binaries and libraries, with no evidence of malicious behavior or unverifiable prebuilt payloads.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:30 'http://gdlp01.c-wss.com/gds/0/0100003020/01/cnijfilter-source-3.40-1.tar.gz'

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: zvova7890 <zvova7890.gmail.com>
    
      2# Contributor: Alireza Savand <alireza.savand@gmail.com>
    
      3# Special thanks to: olive, mirrr, GUiHKX, alessiofachechi, jeremy33,
    
      4#		     jstitch, plv, lahwaacz
    
      5
    
      6pkgname=cnijfilter-mp280
    
      7pkgver=3.40.1
    
      8pkgrel=5
    
      9_pkgrealver=3.40
    
      10_pkgrealrel=1
    
      11pkgdesc="Canon IJ Printer Driver (mp280 series)"
    
      12url="http://support-au.canon.com.au/contents/AU/EN/0100302002.html"
    
      13arch=('i686' 'x86_64')
    
      14license=('custom')
    
      15depends=(
    
  'libcups'
    
  'popt'
    
  'glibc'
    
  'libpng>=1.0.9'
    
  'libtiff>=3.4'
    
  'gtk2'
    
      22)
    
      23makedepends=(
    
'autoconf>=2.59'
    
'automake>=1.9.5'
    
      26)
    
      27conflicts=('cnijfilter-common')
    
      28install=cnijfilter-mp280.install
    
      29source=(
    
  'http://gdlp01.c-wss.com/gds/0/0100003020/01/cnijfilter-source-3.40-1.tar.gz'
    
  'configure-fixes.patch'
    
  'cups-fixes.patch'
    
  'cn-ppd-support-mp280.patch'
    
  'glibc-deprecated-fix.patch'
    
  'compilation-fixes-2024-11-06.diff'
    
      36)
    
      37md5sums=(
    
  '609975a05d6050fcca88f312d3f35c6a'
    
  'd1c346d063e7fc54dc74dc72bc5615ad'
    
  '10e68bf7d29a6206171be05893e826e1'
    
  '1b76cb2d4a46f6a10e6aced051729bb7'
    
  '494a454cc2e91a3e8f14a6fb81131c10'
    
  '2b44507c54f14fb6c8e08af30fdaafe7'
    
      44)
    
      45
    
      46
    
      47prepare() {
    
  cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel"
    
  patch -p1 < "$startdir/configure-fixes.patch"
    
  patch -p1 < "$startdir/cups-fixes.patch"
    
  patch -p1 < "$startdir/cn-ppd-support-mp280.patch"
    
  patch -p1 < "$startdir/glibc-deprecated-fix.patch"
    
  patch -p1 < "$startdir/compilation-fixes-2024-11-06.diff"
    
  
    
  sed -i -e 's/png_p->jmpbuf/png_jmpbuf(png_p)/' cnijfilter/src/bjfimage.c
    
  cp cnijfilter/src/config* lgmon/src/
    
  cp cnijfilter/src/config* cngpijmon/cnijnpr/cnijnpr/
    
      58}
    
      59
    
      60build() {
    
  cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel/libs"
    
  ./autogen.sh --prefix=/usr --program-suffix=mp280
    
  make
    

    
  cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel/cngpij"
    
  ./autogen.sh --prefix=/usr --program-suffix=mp280 --enable-progpath=/usr/bin
    
  make
    

    
  cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel/cnijfilter"
    
  ./autogen.sh --prefix=/usr --program-suffix=mp280 --enable-progpath=/usr/bin
    
  make
    

    
  cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel/pstocanonij"
    
  ./autogen.sh --prefix=/usr --program-suffix=mp280 --enable-progpath=/usr/bin
    
  make
    

    
  cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel/lgmon"
    
  ./autogen.sh --prefix=/usr --program-suffix=mp280 --enable-progpath=/usr/bin
    
  make
    

    
  cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel/ppd"
    
  ./autogen.sh --prefix=/usr --program-suffix=mp280
    
  make
    

    
  cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel/cngpijmon/cnijnpr"
    
  ./autogen.sh --prefix=/usr --program-suffix=mp280 --enable-progpath=/usr/bin LIBS="-ldl"
    
  make
    

    
  cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel/backend"
    
  ./autogen.sh --prefix=/usr --program-suffix=mp280 --enable-progpath=/usr/bin
    
  make
    

    
  cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel/backendnet"
    
  ./autogen.sh --prefix=/usr --program-suffix=mp280 --enable-progpath=/usr/bin
    
  make
    
      96}
    
      97
    
      98package() {
    
  # install targets
    
  for dir in libs cngpij cnijfilter pstocanonij lgmon ppd cngpijmon/cnijnpr backend backendnet; do
    
      cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel/$dir"
    
      make install DESTDIR="$pkgdir"
    
  done
    
      104
    
  # install bjlib
    
  cd "$srcdir/cnijfilter-source-$_pkgrealver-$_pkgrealrel"
    
  install -d "$pkgdir/usr/lib/bjlib"
    
  install -m755 370/database/* "$pkgdir/usr/lib/bjlib"
    

    
  # install shared libraries
    
  if [ "$CARCH" == "x86_64" ]; then  
    
      libdir=libs_bin64
    
  else
    
      libdir=libs_bin32
    
  fi
    
  for file in libcnbpcmcm370.so.8.0.1 libcnbpcnclapi370.so.3.5.0 libcnbpcnclbjcmd370.so.3.3.0 \
    
              libcnbpcnclui370.so.3.6.0 libcnbpess370.so.3.3.3 libcnbpess370.so.3.3.3 libcnbpo370.so.1.0.2; do
    
      install -m755 "./370/$libdir/$file" "$pkgdir/usr/lib/"
    
  done
    
  install -m755 "./com/$libdir/libcnnet.so.1.2.0" "$pkgdir/usr/lib/"
    
    
    
  # install license file
    
  install -Dm644 "LICENSE-cnijfilter-${_pkgrealver}EN.txt" \
    
      "$pkgdir/usr/share/licenses/$pkgname/LICENSE-cnijfilter-${_pkgrealver}EN.txt"
    
      125
    
  # link libraries to their basename
    
  cd "$pkgdir/usr/lib/"
    
  ln -s libcnbpcmcm370.so.8.0.1 libcnbpcmcm370.so
    
  ln -s libcnbpcnclapi370.so.3.5.0 libcnbpcnclapi370.so
    
  ln -s libcnbpcnclbjcmd370.so.3.3.0 libcnbpcnclbjcmd370.so
    
  ln -s libcnbpcnclui370.so.3.6.0 libcnbpcnclui370.so
    
  ln -s libcnbpess370.so.3.3.3 libcnbpess370.so
    
  ln -s libcnbpo370.so.1.0.2 libcnbpo370.so
    
  ln -s libcnnet.so.1.2.0 libcnnet.so
    
  
    
  # link moved from $pkgname.install file to be included in package
    
  install -dm755 "$pkgdir/usr/lib/cups/filter"
    
  ln -s "pstocanonijmp280" "$pkgdir/usr/lib/cups/filter/pstocanonij"
    
      139}
    
      140

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2