dosbox-gcc
maintainer janezz55
· 1 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package builds a DJGPP cross-compiler toolchain from official and well-known project sources (GNU, delorie.com, GitHub); delorie.com is a long-standing, legitimate host for DJGPP tools, and the downloaded artifacts are used as build inputs, not executed directly, making the risk low despite non-whitelisted host and skipped checksums.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds a DJGPP cross-compiler toolchain from official and well-known project sources (GNU, delorie.com, GitHub); delorie.com is a long-standing, legitimate host for DJGPP tools, and the downloaded artifacts are used as build inputs, not executed directly, making the risk low despite non-whitelisted host and skipped checksums.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:21
"ftp://www.delorie.com/pub/djgpp/current/v2/djcrx${_djver//./}.zip"
PKGBUILD
1 offending line(s) highlighted
1
# Contributor: carstene1ns <arch carsten-teibes de>
2
# Contributor: felix <base64 -d <<< ZmVsaXgudm9uLnNAcG9zdGVvLmRlCg==>
3
# Contributor: janezz55
4
5
pkgname=dosbox-gcc
6
pkgver=14.2.0
7
libmver=0.8.2
8
_target="i586-pc-msdosdjgpp"
9
_djver=2.05
10
pkgrel=1
11
pkgdesc="djgpp cross-compiler for the dosbox environment"
12
arch=('i686' 'x86_64')
13
url="http://gcc.gnu.org"
14
license=('GPL' 'LGPL' 'FDL' 'custom')
15
groups=('djgpp')
16
depends=('sed' 'zlib' 'libisl' 'libmpc' 'dosbox-binutils')
17
makedepends=('unzip' 'tar' 'xz')
18
optdepends=('dosbox-djcrx: headers and utilities')
19
options=('!strip' 'staticlibs' '!emptydirs')
20
source=("https://ftp.gnu.org/gnu/gcc/gcc-$pkgver/gcc-$pkgver.tar.xz"
21
"ftp://www.delorie.com/pub/djgpp/current/v2/djcrx${_djver//./}.zip"
22
"https://github.com/JuliaMath/openlibm/archive/refs/tags/v${libmver}.zip"
23
"gcc-djgpp.diff"
24
"lto.patch")
25
sha256sums=('SKIP'
26
'SKIP'
27
'SKIP'
28
'SKIP'
29
'SKIP')
30
noextract=("gcc-$pkgver.tar.xz"
31
"djcrx${_djver//./}.zip"
32
"v${libmver}.zip")
33
34
prepare() {
35
tar Jxf gcc-$pkgver.tar.xz
36
37
# gcc hacks
38
cd $srcdir/gcc-$pkgver
39
40
# build the lto plugin
41
patch -Np0 < ../lto.patch
42
43
# Other DJGPP related changes
44
patch -Np1 < ../gcc-djgpp.diff
45
46
# extract bootstrap djcrx
47
mkdir -p ../gcc-build-$_target/lib/gcc/$_target/$pkgver
48
cd ../gcc-build-$_target/lib/gcc/$_target/$pkgver
49
unzip -qoW "$srcdir/djcrx${_djver//./}.zip" 'include/**' 'lib/*.[oa]'
50
mv lib/* .
51
52
# fix djcrx
53
cd include
54
unzip -jqoW "$srcdir/v${libmver}.zip" "openlibm-${libmver}/include/**"
55
rm -f math.h complex.h fenv.h libm/math.h
56
ln -s openlibm_math.h math.h
57
ln -s openlibm_math.h libm/math.h
58
ln -s openlibm_complex.h complex.h
59
ln -s openlibm_fenv.h fenv.h
60
61
sed -i 's/\/\/typedef __double_t double_t/typedef double double_t/' math.h
62
sed -i 's/\/\/typedef __float_t float_t/typedef float float_t/' math.h
63
}
64
65
build() {
66
cd gcc-build-$_target
67
CPPFLAGS="$CPPFLAGS -Ofast" \
68
../gcc-$pkgver/configure \
69
--prefix=/usr \
70
--libexecdir=/usr/lib \
71
--datarootdir=/usr/$_target/share \
72
--target="$_target" \
73
--with-arch=i586 \
74
--with-cpu=i586 \
75
--with-isl \
76
--with-system-zlib \
77
--disable-gcov \
78
--disable-install-libiberty \
79
--disable-libssp \
80
--disable-libquadmath \
81
--disable-libquadmath-support \
82
--disable-libgomp \
83
--disable-libsanitizer \
84
--disable-multilib \
85
--disable-nls \
86
--disable-plugin \
87
--enable-compressed-debug-sections=all \
88
--enable-gold=yes \
89
--enable-languages=c,c++ \
90
--enable-ld=no \
91
--enable-lto \
92
--enable-shared \
93
--enable-static \
94
--disable-threads \
95
--disable-libstdcxx-pch \
96
--disable-libstdcxx-threads \
97
--enable-cxx-flags="-O3 -fno-plt" \
98
--enable-libstdcxx-filesystem-ts \
99
--enable-checking=release
100
make all-gcc
101
102
cd $srcdir/gcc-build-$_target
103
ac_cv_func_dlopen=no \
104
ac_cv_func_shl_load=no \
105
ac_cv_lib_dld_shl_load=no \
106
ac_cv_lib_dl_dlopen=no \
107
ac_cv_lib_svld_dlopen=no \
108
ac_cv_lib_dld_dld_link=no \
109
make all
110
}
111
112
package_dosbox-gcc() {
113
echo ...installing
114
make -C gcc-build-$_target DESTDIR=$pkgdir/ install
115
116
# strip manually, djgpp libs spew errors otherwise
117
strip -s $pkgdir/usr/bin/$_target-* $pkgdir/usr/lib/gcc/$_target/$pkgver/{cc1*,collect2,lto*}
118
119
# for compatibility
120
ln -sf $_target-gcc $pkgdir/usr/bin/$_target-cc
121
122
# remove unnecessary files
123
rm -rf $pkgdir/usr/$_target/share/{man,info,locale,gcc-$pkgver/python}
124
rm -rf $pkgdir/usr/share/{man,info,locale}
125
rm -rf $pkgdir/usr/lib/gcc/$_target/$pkgver/include-fixed
126
rm -f $pkgdir/usr/lib/libcc1.*
127
}
128
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |