enhanced-ctorrent
LOW
maintainer andreas_baumann
31 votes
scanned 2026-11-01 00:21:48.120785
Why flagged
The source is a tarball from the project's official upstream host (dholmes' site), which is plausibly the project's own despite not being on a whitelist; building from own-source is normal AUR packaging.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official upstream host (dholmes' site), which is plausibly the project's own despite not being on a whitelist; building from own-source is normal AUR packaging.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:34
source=("http://www.rahul.net/dholmes/ctorrent/$_pkgname-$pkgver.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
## Original CTorrent
2
## Maintainer: damir
3
## Contributor: lanrat
4
##
5
## Enhanced CTorrent
6
## Modified by: lydgate
7
## Mod to dnh3 by durbatuluk
8
#
9
## Debian Patches
10
## https://sources.debian.org/patches/ctorrent/1.3.4.dnh3.3.2-5/
11
12
# Maintainer: aksr <aksr at t-com dot me>
13
_pkgname=ctorrent
14
pkgname=enhanced-ctorrent
15
pkgver=dnh3.3.2
16
pkgrel=2
17
epoch=
18
pkgdesc="A BitTorrent client implemented in C++, with bugfixes and performance enhancements."
19
arch=('i686' 'x86_64')
20
url="http://www.rahul.net/dholmes/ctorrent/"
21
license=('GPL')
22
groups=()
23
depends=('openssl')
24
makedepends=()
25
checkdepends=()
26
optdepends=()
27
provides=()
28
conflicts=('ctorrent-dnh')
29
replaces=('ctorrent')
30
backup=()
31
options=()
32
install=
33
changelog=
34
source=("http://www.rahul.net/dholmes/ctorrent/$_pkgname-$pkgver.tar.gz"
35
"FTBFS-fix.diff"
36
"cve-security-fix.diff")
37
noextract=()
38
sha256sums=('c87366c91475931f75b924119580abd06a7b3cb3f00fef47346552cab1e24863'
39
'82099c238bf5bfa2201aa68369ad73b47c4f1b9cd10ac2d927f164eb12f3dde9'
40
'566c98b47ee3eebb6aaf79d850a8849fc7331c9995580cd5b9f1cf1bdc4f5de7')
41
42
prepare() {
43
cd "$srcdir/$_pkgname-$pkgver"
44
patch -Np1 < "$srcdir/FTBFS-fix.diff"
45
patch -Np1 < "$srcdir/cve-security-fix.diff"
46
}
47
48
build() {
49
cd "$srcdir/$_pkgname-$pkgver"
50
./configure --prefix=/usr
51
make
52
}
53
54
check() {
55
cd "$srcdir/$_pkgname-$pkgver"
56
make -k check
57
}
58
59
package() {
60
cd "$srcdir/$_pkgname-$pkgver"
61
make DESTDIR="$pkgdir/" install
62
install -Dm644 UserGuide $pkgdir/usr/share/doc/$_pkgname/UserGuide
63
install -Dm644 ChangeLog $pkgdir/usr/share/doc/$_pkgname/ChangeLog
64
install -Dm644 README-DNH.TXT $pkgdir/usr/share/doc/$_pkgname/README-DNH.TXT
65
}
66
67
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-11-01 00:21:48 | Low | 2 |
| 2026-10-31 00:07:41 | Low | 2 |
| 2026-10-30 00:29:30 | Low | 2 |
| 2026-10-29 00:13:55 | Low | 2 |
| 2026-10-28 00:06:54 | Low | 2 |
| 2026-10-27 00:23:28 | Low | 2 |
| 2026-10-26 00:12:40 | Low | 2 |
| 2026-10-25 00:20:48 | Low | 2 |
| 2026-10-24 00:14:55 | Low | 2 |
| 2026-10-23 00:02:19 | Low | 2 |
| 2026-10-22 00:13:10 | Low | 2 |
| 2026-10-21 00:12:50 | Low | 2 |
| 2026-10-20 00:10:31 | Low | 2 |
| 2026-10-19 00:03:55 | Low | 2 |
| 2026-10-18 00:06:55 | Low | 2 |
| 2026-10-17 00:21:55 | Low | 2 |
| 2026-10-16 00:12:47 | Low | 2 |
| 2026-10-15 00:28:05 | Low | 2 |
| 2026-10-14 00:06:47 | Low | 2 |
| 2026-10-13 00:23:45 | Low | 2 |