efl-git-asan

MEDIUM
maintainer raster 1 votes scanned 2026-10-31 13:58:24.770326
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:30 source=("git+https://git.enlightenment.org/enlightenment/$_pkgname.git")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Carsten Haitzler <raster@rasterman.com>
2
3_pkgname=efl
4pkgname=($_pkgname-git-asan)
5pkgver=1.29.0.67480.gdc4b008677
6pkgrel=1
7pkgdesc="Enlightenment Foundation Libraries - Development version - Asan debug build"
8arch=('i686' 'x86_64' 'arm' 'armv6h' 'armv7h' 'aarch64')
9url="http://www.enlightenment.org"
10license=('BSD' 'LGPL2.1' 'GPL2' 'MIT' 'custom')
11depends=('curl' 'fontconfig' 'fribidi' 'harfbuzz'
12 'gst-plugins-base-libs' 'lua52' 'libgl' 'libinput'
13 'libpulse' 'libpipewire' 'libsndfile' 'libspectre' 'libraw' 'librsvg' 'libwebp'
14 'libxtst' 'libxpresent' 'libxcomposite' 'libxcursor' 'libxinerama' 'libxkbcommon' 'libxrandr'
15 'libxss' 'libunwind' 'mesa' 'poppler' 'openjpeg2' 'libjpeg-turbo'
16 'libpng' 'libtiff' 'giflib' 'lz4' 'zlib' 'systemd-libs' 'openssl'
17 'glibc' 'libutil-linux' 'dbus'
18 'shared-mime-info' 'mailcap' 'ttf-font' 'scim'
19 'wayland' 'libxkbcommon-x11' 'pulse-native-provider' 'libjxl' 'libheif' 'libavif')
20makedepends=('git' 'meson' 'ninja' 'pkgconf' 'gcc' 'binutils' 'fakeroot' 'procps-ng' 'ccache' 'wayland-protocols')
21optdepends=('gst-plugins-base: Video and thumbnail codecs'
22 'gst-plugins-good: Video and thumbnail codecs'
23 'gst-plugins-bad: Video and thumbnail codecs'
24 'gst-plugins-ugly: Video and thumbnail codecs'
25 'gst-libav: Video and thumbnails with ffmpeg/libav'
26 'libreoffice: Office document thumbnails')
27provides=("$_pkgname=$pkgver" $_pkgname-git=$pkgver elementary{,-git}=$pkgver "evas_generic_loaders=$pkgver")
28conflicts=("$_pkgname" $_pkgname-git elementary{,-git} elementary_test{,-git} evas_generic_loaders{,-git})
29options=('!strip' 'ccache')
30source=("git+https://git.enlightenment.org/enlightenment/$_pkgname.git")
31sha256sums=('SKIP')
32
33pkgver() {
34 cd $_pkgname
35
36 local v_ver=$(grep version meson.build | head -1 | sed s/version//g | tr ":'," " " | awk '{print $1}')
37
38 printf "%s.%s.g%s" "$v_ver" "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
39}
40
41build() {
42 cd $_pkgname
43
44 export ASAN_OPTIONS="detect_leaks=0:abort_on_error=1::new_delete_type_mismatch=0"
45
46 MEM=`free -m | head -2 | tail -1 | awk '{printf("%s", $7);}'`
47 if test "$MEM" -lt 300; then MEM=300; fi
48 J=`expr $MEM / 300`
49 CPUS=`echo /sys/devices/system/cpu/cpu[0-9]* | wc -w`
50 if test "$J" -gt $CPUS; then J=$CPUS; fi
51 if test "$J" -lt 1; then J=1; fi
52 echo "Free Mem: $MEM M, using $J threads for build"
53
54 unset CPPFLAGS
55 export CFLAGS="-O0 -g3"
56 export CXXFLAGS="-O0 -g3"
57 rm -rf build
58 meson --prefix=/usr \
59 -Db_sanitize=address \
60 -Dfb=true \
61 -Ddrm=true \
62 -Dwl=true \
63 -Dxpresent=true \
64 -Devas-loaders-disabler=json \
65 -Dnetwork-backend=connman \
66 -Dbindings= \
67 -Dbuild-examples=false \
68 -Dbuild-tests=false \
69 . build
70 ninja -j $J -C build
71}
72
73package() {
74 cd $_pkgname
75
76 export LD_PRELOAD="/usr/lib/libasan.so"
77 export ASAN_OPTIONS="detect_leaks=0:abort_on_error=1::new_delete_type_mismatch=0"
78
79 DESTDIR="$pkgdir" ninja -C build install
80
81 install -Dm644 -t "$pkgdir/usr/share/doc/$_pkgname/" README.md
82 install -Dm644 -t "$pkgdir/usr/share/licenses/$pkgname/" AUTHORS COMPLIANCE COPYING licenses/COPYING.{BSD,SMALL}
83}
84

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-10-31 13:58
@@ -2,7 +2,7 @@
_pkgname=efl
pkgname=($_pkgname-git-asan)
-pkgver=1.27.99.67082.g6860883e18
+pkgver=1.29.0.67480.gdc4b008677
pkgrel=1
pkgdesc="Enlightenment Foundation Libraries - Development version - Asan debug build"
arch=('i686' 'x86_64' 'arm' 'armv6h' 'armv7h' 'aarch64')
@@ -10,13 +10,13 @@
license=('BSD' 'LGPL2.1' 'GPL2' 'MIT' 'custom')
depends=('curl' 'fontconfig' 'fribidi' 'harfbuzz'
'gst-plugins-base-libs' 'lua52' 'libgl' 'libinput'
- 'libpulse' 'libsndfile' 'libspectre' 'libraw' 'librsvg' 'libwebp'
- 'libxcomposite' 'libxcursor' 'libxinerama' 'libxkbcommon' 'libxrandr'
+ 'libpulse' 'libpipewire' 'libsndfile' 'libspectre' 'libraw' 'librsvg' 'libwebp'
+ 'libxtst' 'libxpresent' 'libxcomposite' 'libxcursor' 'libxinerama' 'libxkbcommon' 'libxrandr'
'libxss' 'libunwind' 'mesa' 'poppler' 'openjpeg2' 'libjpeg-turbo'
'libpng' 'libtiff' 'giflib' 'lz4' 'zlib' 'systemd-libs' 'openssl'
'glibc' 'libutil-linux' 'dbus'
'shared-mime-info' 'mailcap' 'ttf-font' 'scim'
- 'wayland' 'libxkbcommon-x11' 'pulse-native-provider')
+ 'wayland' 'libxkbcommon-x11' 'pulse-native-provider' 'libjxl' 'libheif' 'libavif')
makedepends=('git' 'meson' 'ninja' 'pkgconf' 'gcc' 'binutils' 'fakeroot' 'procps-ng' 'ccache' 'wayland-protocols')
optdepends=('gst-plugins-base: Video and thumbnail codecs'
'gst-plugins-good: Video and thumbnail codecs'
@@ -60,8 +60,9 @@
-Dfb=true \
-Ddrm=true \
-Dwl=true \
+ -Dxpresent=true \
+ -Devas-loaders-disabler=json \
-Dnetwork-backend=connman \
- -Dlua-interpreter=lua \
-Dbindings= \
-Dbuild-examples=false \
-Dbuild-tests=false \

Scan history

Scanned at (UTC)SeverityRules
2026-10-31 13:58:24 Medium 1
2026-06-19 19:07:35 Clean 2
2026-06-18 16:11:54 Medium 1

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion