daggerfall

maintainer giniu · 15 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads game data and patches from non-whitelisted but plausible project-related hosts; all files are verified with checksums and used as static assets or applied as patches, with no execution of remote code or supply-chain risks beyond typical AUR build-from-source practices.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads game data and patches from non-whitelisted but plausible project-related hosts; all files are verified with checksums and used as static assets or applied as patches, with no execution of remote code or supply-chain risks beyond typical AUR build-from-source practices.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 source=(http://static.elderscrolls.com/elderscrolls.com/assets/files/tes/extras/DFInstall.zip
PKGBUILD:14 http://www.uesp.net/dagger/files/addquest.zip
PKGBUILD:16 http://download.narechk.net/dos32a-912-bin.zip

PKGBUILD

3 offending line(s) highlighted

      1# Maintainer: Andrzej Giniewicz <gginiu@gmail.com>
    
      2pkgname=daggerfall
    
      3pkgver=1.07.213
    
      4pkgrel=13
    
      5pkgdesc="The Elder Scrolls II: Daggerfall"
    
      6arch=('any')
    
      7url="http://www.elderscrolls.com/daggerfall/"
    
      8license=('custom:daggerfall')
    
      9depends=("dosbox")
    
      10makedepends=("python" "unzip" "bsdiff")
    
      11options=(emptydirs)
    
      12install="dagger.install"
    
      13source=(http://static.elderscrolls.com/elderscrolls.com/assets/files/tes/extras/DFInstall.zip
    
      14        http://www.uesp.net/dagger/files/addquest.zip
    
      15        http://www.uesp.net/dagger/files/fixsa175.zip
    
      16        http://download.narechk.net/dos32a-912-bin.zip
    
      17        license daggerfall-launcher.pl RUN.BAT Z.CFG HMISET.CFG unpk.py maps.patch
    
      18        dagger.conf)
    
      19noextract=(addquest.zip fixsa175.zip)
    
      20md5sums=('3cdd09a5696c2b94c58b85488be7cba2'
    
      21         '1074c3e593375542e8e45256c6f9ada4'
    
      22         'e5647c7acba32973eb6b2fba621ae536'
    
      23         'f37ae16b8eab499edb6b0de0099827ca'
    
      24         '2923e8e848462a4a05aa6b5473cd82b5'
    
      25         'daeef3539a047ab6d6bdc05252edbd47'
    
      26         'dd4b858a32c6e80aaa025c57496958fe'
    
      27         'eae2f2244cc23bc1f266438ca4d9b2ce'
    
      28         'bd94604036a62217617fd28092c9d956'
    
      29         '309788ccffa8adf3085255bb137be95c'
    
      30         '4e773bc05d54c36a53c7aec2c2d2f538'
    
      31         '36e4de3a8b1030bbf12c6badd23da2ec')
    
      32
    
      33package() {
    
      34  cd "$srcdir"
    
      35  _target="${pkgdir}"/usr/share/games/daggerfall
    
      36  install -d -m775 "$_target"
    
      37  cp -rf "$srcdir/DFCD/DAGGER" "$_target"
    
      38  chmod 775 "$_target/DAGGER"
    
      39  chmod 775 "$_target/DAGGER/ARENA2"
    
      40  cp -rf "$srcdir/DFCD/DATA" "$_target/DAGGER"
    
      41  install "$srcdir/DFCD/INSTALL.EXE" "$_target/DAGGER/INSTALL.EXE"
    
      42  install "$srcdir/DFCD/INSTALL.PIF" "$_target/DAGGER/INSTALL.PIF"
    
      43  for i in {0..5}; do install -d "$_target/DAGGER/SAVE$i"; done
    
      44  mv "$_target/DAGGER/ARENA2/faction.txt" "$_target/DAGGER/ARENA2/FACTION.TXT"
    
      45  install "$srcdir/RUN.BAT" "$_target/DAGGER/RUN.BAT"
    
      46  install "$srcdir/Z.CFG" "$_target/DAGGER/Z.CFG"
    
      47  install "$srcdir/HMISET.CFG" "$_target/DAGGER/HMISET.CFG"
    
      48  python unpk.py "$srcdir/DFCD/DAGGER/ARENA2/PACKED.DAT" "$_target/DAGGER"
    
      49  rm "$_target/DAGGER/ARENA2/PACKED.DAT"
    
      50  unzip -o "$srcdir/addquest.zip" -d "$_target/DAGGER/ARENA2"
    
      51  rm "$_target/DAGGER/ARENA2/readme.txt"
    
      52  _offset=$((`grep -Ubo --binary-files=text 'start of data' "$srcdir/DAGGER/DAG213.EXE" | head -1 | sed 's/:.*//g'`+13))
    
      53  python unpk.py "$srcdir/DAGGER/DAG213.EXE" "$_target/DAGGER" ${_offset}
    
      54  unzip -o "$srcdir/fixsa175.zip" -d "$_target/DAGGER"
    
      55  bspatch "$_target/DAGGER/ARENA2/MAPS.BSA" "$_target/MAPS.BSA" "$srcdir/maps.patch"
    
      56  mv "$_target/MAPS.BSA" "$_target/DAGGER/ARENA2/MAPS.BSA"
    
      57  install "$srcdir/binw/dos32a.exe" "$_target/DAGGER/DOS32A.EXE"
    
      58  install "$srcdir/dagger.conf" "$_target/dagger.conf"
    
      59  install -D -m644 "$srcdir/license" "$pkgdir/usr/share/licenses/daggerfall/license"
    
      60  install -D -m754 "$srcdir/daggerfall-launcher.pl" "$pkgdir/usr/bin/daggerfall"
    
      61}
    
      62
    
      63

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2