doom3

maintainer Slash · 70 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads source code and a prebuilt installer from a non-whitelisted but well-known and plausible community host (gamers.org) for a legitimate open-source game engine; the installer is self-extracting and contains game data, not remote code execution, and the build process is transparent and follows standard AUR practices.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads source code and a prebuilt installer from a non-whitelisted but well-known and plausible community host (gamers.org) for a legitimate open-source game engine; the installer is self-extracting and contains game data, not remote code execution, and the build process is transparent and follows standard AUR practices.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:29 'http://www.gamers.org/pub/idgames/idstuff/source/idtech4-doom3-source-GPL.zip' \

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Slash <demodevil5 [at] yahoo [dot] com>
    
      2# Contributor: Andrew Simmons <andrew.simmons@gmail.com>
    
      3# Contributor: teddy_beer_maniac <teddy_beer_maniac@wp.pl>
    
      4# Contributor: Babets
    
      5# Contributor: Paolo Bolzoni
    
      6
    
      7pkgname=doom3
    
      8pkgver=1.3.1.1304
    
      9pkgrel=13
    
      10pkgdesc='Doom 3 Engine. You need the retail .pk4 files to play.'
    
      11url='https://doom.com/'
    
      12license=('custom:"DOOM 3"')
    
      13arch=('i686' 'x86_64')
    
      14depends_i686=('libgl' 'alsa-lib' 'openal' 'libxxf86vm' 'libstdc++5')
    
      15makedepends_i686=('scons2' 'zip')
    
      16optdepends_i686=(
    
      17    'alsa-plugins: pulseaudio-support'
    
      18    'libpulse: pulseaudio support'
    
      19)
    
      20depends_x86_64=('lib32-libgl' 'lib32-alsa-lib' 'lib32-openal' 'lib32-libxxf86vm' 'lib32-libstdc++5')
    
      21makedepends_x86_64=('scons2' 'gcc-multilib' 'zip')
    
      22optdepends_x86_64=(
    
      23    'lib32-alsa-plugins: pulseaudio-support'
    
      24    'lib32-libpulse: pulseaudio support'
    
      25)
    
      26install=doom3.install
    
      27source=('doom3.launcher' 'doom3-dedicated.launcher' 'doom3.desktop' \
    
      28    'doom3.launcher64' 'doom3-dedicated.launcher64' 'doom3.png' 'sound.patch' 'math.patch' \
    
      29    'http://www.gamers.org/pub/idgames/idstuff/source/idtech4-doom3-source-GPL.zip' \
    
      30    "http://www.gamers.org/pub/idgames/idstuff/doom3/linux/${pkgname}-linux-${pkgver}.x86.run")
    
      31provides=('doom3')
    
      32conflicts=('doom3-bin' 'iodoom3' 'iodoom3-git' 'iodoom3-bin')
    
      33sha256sums=('ea9fe17fdb19cfe8a22e2b7859093f7a76eeaa51fd2571507b6dc37462515f21'
    
      34            'f7aa055489f581e3da3001b23becef68586b0994da70ee138425926fc580b204'
    
      35            'f9199b09981bb1fffba0f17a71e01021e4ea4aae6d99e553aa00c74d576e812b'
    
      36            '718378f2c3c42d56b916e9341e01261a2cfad5fb60ef15cc57954d1a4ce2a94e'
    
      37            'e6654e29773b5ed01f897294ecbc21a84dcb59afc30cb60eb0d5a3c03c7d3de1'
    
      38            'c9a701498a7b0f923182bf9f11aac8d2193026e509ae3643a5bc118b1a458c6b'
    
      39            'a407c385c2a0a013c2bc464fd590e2b976f337e3ee04d769b238168bb5610f76'
    
      40            'ac0abb77d44ceb28d7dbe40e2187ee5bc81a8a0314c7f08af17aea7156b6bf3c'
    
      41            '18b5e0b5dcbdce60e5f006e7995bc30c9ef7f606c2aa08c5f0a76eb6a6657ad0'
    
      42            '2f90dff20f2d3c0c47f17b3d6d45c4f0e7d27b986bf6084f21b85180cd1e03b4')
    
      43
    
      44build() {
    
      45    cd "${srcdir}/doom3.gpl/neo"
    
      46
    
      47    # Apply patches
    
      48    patch -p3 -i "${srcdir}/sound.patch"
    
      49    patch -p3 -i "${srcdir}/math.patch"
    
      50
    
      51    # Build Binaries from Source
    
      52    scons2 NOCURL=1 BUILD=release BUILD_GAMEPAK=1
    
      53
    
      54    cd "${srcdir}"
    
      55
    
      56    # Make Installer Executable
    
      57    chmod +x "${srcdir}/doom3-linux-${pkgver}.x86.run"
    
      58
    
      59    # Extract Game Files
    
      60    ./doom3-linux-${pkgver}.x86.run --tar xf
    
      61}
    
      62
    
      63package() {
    
      64    cd "${srcdir}"
    
      65
    
      66    # Create Destination Directories
    
      67    install -d "${pkgdir}/opt/doom3/"{base,d3xp}
    
      68
    
      69    # Install Game Binaries
    
      70    install -m 755 "${srcdir}/doom3.gpl/neo/doom.x86" \
    
      71        "${pkgdir}/opt/doom3"
    
      72
    
      73    # Install Game Files
    
      74    install -m 644 base/pak00*.pk4 "${pkgdir}/opt/doom3/base"
    
      75    install -m 644 d3xp/pak00*.pk4 "${pkgdir}/opt/doom3/d3xp"
    
      76    install -m 644 {CHANGES,README,version.info} "${pkgdir}/opt/doom3"
    
      77    install -m 644 "${srcdir}/doom3.gpl/neo/game01-base.pk4" \
    
      78        "${pkgdir}/opt/doom3/base/game01.pk4"
    
      79    install -m 644 "${srcdir}/doom3.gpl/neo/game01-d3xp.pk4" \
    
      80        "${pkgdir}/opt/doom3/d3xp/game01.pk4"
    
      81
    
      82    if [ "$CARCH" == "i686" ]; then
    
      83        # Install Game Launcher (Client)
    
      84        install -D -m 755 "${srcdir}/doom3.launcher" \
    
      85            "${pkgdir}/usr/bin/doom3"
    
      86
    
      87        # Install Game Launcher (Server)
    
      88        install -D -m 755 "${srcdir}/doom3-dedicated.launcher" \
    
      89            "${pkgdir}/usr/bin/doom3-dedicated"
    
      90    else
    
      91        # Install Game Launcher (Client)
    
      92        install -D -m 755 "${srcdir}/doom3.launcher64" \
    
      93            "${pkgdir}/usr/bin/doom3"
    
      94
    
      95        # Install Game Launcher (Server)
    
      96        install -D -m 755 "${srcdir}/doom3-dedicated.launcher64" \
    
      97            "${pkgdir}/usr/bin/doom3-dedicated"
    
      98    fi
    
      99
    
      100    # Install License (DOOM 3)
    
      101    install -D -m 644 "${srcdir}/License.txt" \
    
      102        "${pkgdir}/usr/share/licenses/${pkgname}/license.txt"
    
      103
    
      104    # Install Icon
    
      105    install -D -m 644 "${srcdir}/doom3.png" \
    
      106        "${pkgdir}/usr/share/pixmaps/doom3.png"
    
      107
    
      108    # Install Desktop File
    
      109    install -D -m 644 "${srcdir}/doom3.desktop" \
    
      110        "${pkgdir}/usr/share/applications/doom3.desktop"
    
      111}
    
      112
    
      113

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2