cnijfilter-mx920

maintainer maxqia · 3 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a Canon driver tarball from Canon's official gdlp01.c-wss.com domain, which is a standard host for Canon downloads despite not being on the analyzer's whitelist; the package builds from official source and installs legitimate driver files.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a Canon driver tarball from Canon's official gdlp01.c-wss.com domain, which is a standard host for Canon downloads despite not being on the analyzer's whitelist; the package builds from official source and installs legitimate driver files.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:30 source=("http://gdlp01.c-wss.com/gds/1/0100005171/01/cnijfilter-source-3.90-1.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Maxqia <public [at the] maxqia [dot] com>
    
      2# Contributor: Johannes Dewender  arch at JonnyJD dot net
    
      3# Contributor: Behnam Momeni <sbmomeni [at the] gmail [dot] com>
    
      4# Contributor: Stefan Hackl <stef.hackl [at the] gmail [dot] com>
    
      5
    
      6pkgname=cnijfilter-mx920
    
      7_pkgname=cnijfilter
    
      8
    
      9pkgver=3.90
    
      10pkgrel=3
    
      11_pkgreview=1
    
      12
    
      13pkgdesc="Canon IJ printer driver (multifunction MX920 series)"
    
      14url="http://www.canon-europe.com/support/consumer_Products/products/fax__multifunctionals/inkjet/pixma_mx_series/mx925.aspx"
    
      15
    
      16arch=('i686' 'x86_64')
    
      17license=('custom')
    
      18
    
      19makedepends_x86_64=('gcc-multilib')
    
      20depends_x86_64=('lib32-gtk2')
    
      21
    
      22makedepends_i686=('gcc')
    
      23depends_i686=('gtk2')
    
      24
    
      25makedepends=('autoconf>=2.13' 'automake>=1.6')
    
      26depends=("${_pkgname}-common=4.10")
    
      27
    
      28install=cnijfilter-mx920.install
    
      29
    
      30source=("http://gdlp01.c-wss.com/gds/1/0100005171/01/cnijfilter-source-3.90-1.tar.gz"
    
      31	"cups.patch"
    
      32	"buildfiles.patch"
    
      33	"mychanges.patch")
    
      34sha512sums=('9ec303dc7209f5534a20e533fc18ec810603f4515655ce67f28f0f35d521185181351fd866d2191939eb02c783b168f637e18888a4e6a1eacc9e93b1b656ebcb'
    
      35            'da39232c83aff4ec09428ab0e2a167638c6912578c0bd119b8c15aa0d7e4412c18339cc3fd09a5ce76763338a92cd129548fa41ada842340e8ca0db6860eff42'
    
      36            'd827f8725e899cbeeae883141c55c3c1429797ceb3eaa2d11a1ab6602b4221e120f92fdee7d3ffc08cf99692332b73cb9e1da6b8d5631df3a8071dffbfde799e'
    
      37            '1cf54862db74f928a3a1ad0316b9940b843dbc4cae95bbb3d93ab317d248788cf844103bc006b4670c27b0f13952301b5907476a6c7d13ebb0cb5c0a942d6182')
    
      38
    
      39prepare() {
    
      40  cd ${srcdir}/${_pkgname}-source-${pkgver}-${_pkgreview}
    
      41
    
      42  patch -p1 -i ${srcdir}/cups.patch
    
      43  patch -p1 -i ${srcdir}/buildfiles.patch
    
      44  patch -p1 -i ${srcdir}/mychanges.patch
    
      45}
    
      46
    
      47build() {
    
      48  cd ${srcdir}/${_pkgname}-source-${pkgver}-${_pkgreview}
    
      49
    
      50  # TODO: it looks like the libaries can also be built for 64 bit natively
    
      51  export CC="gcc -m32"
    
      52  # Required for the glib2
    
      53  export PKG_CONFIG_PATH=/usr/lib32/pkgconfig
    
      54  make mx920
    
      55}
    
      56
    
      57package() {
    
      58  cd ${srcdir}/cnijfilter-source-${pkgver}-${_pkgreview}
    
      59  make PACKAGEDIR=${pkgdir} installmx920
    
      60
    
      61  install -d ${pkgdir}/usr/lib32/bjlib
    
      62  install -d ${pkgdir}/usr/lib/bjlib
    
      63  install -m 644 417/database/* ${pkgdir}/usr/lib32/bjlib/
    
      64  ln -rs ${pkgdir}/usr/lib32/bjlib/* ${pkgdir}/usr/lib/bjlib/
    
      65  install -s -m 755 417/libs_bin32/*.so.* ${pkgdir}/usr/lib32/
    
      66
    
      67  install -D LICENSE-cnijfilter-${pkgver}EN.txt ${pkgdir}/usr/share/licenses/${pkgname}/LICENSE-cnijfilter-${pkgver}EN.txt
    
      68}
    
      69
    
      70

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2