enhanced-ctorrent
LOW
maintainer andreas_baumann
31 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a tarball from the project's official upstream host (dholmes' site), which is plausibly the project's own despite not being on a whitelist; building from own-source is normal AUR packaging.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the project's official upstream host (dholmes' site), which is plausibly the project's own despite not being on a whitelist; building from own-source is normal AUR packaging.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:34
source=("http://www.rahul.net/dholmes/ctorrent/$_pkgname-$pkgver.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
## Original CTorrent
2
## Maintainer: damir
3
## Contributor: lanrat
4
##
5
## Enhanced CTorrent
6
## Modified by: lydgate
7
## Mod to dnh3 by durbatuluk
8
#
9
## Debian Patches
10
## https://sources.debian.org/patches/ctorrent/1.3.4.dnh3.3.2-5/
11
12
# Maintainer: aksr <aksr at t-com dot me>
13
_pkgname=ctorrent
14
pkgname=enhanced-ctorrent
15
pkgver=dnh3.3.2
16
pkgrel=2
17
epoch=
18
pkgdesc="A BitTorrent client implemented in C++, with bugfixes and performance enhancements."
19
arch=('i686' 'x86_64')
20
url="http://www.rahul.net/dholmes/ctorrent/"
21
license=('GPL')
22
groups=()
23
depends=('openssl')
24
makedepends=()
25
checkdepends=()
26
optdepends=()
27
provides=()
28
conflicts=('ctorrent-dnh')
29
replaces=('ctorrent')
30
backup=()
31
options=()
32
install=
33
changelog=
34
source=("http://www.rahul.net/dholmes/ctorrent/$_pkgname-$pkgver.tar.gz"
35
"FTBFS-fix.diff"
36
"cve-security-fix.diff")
37
noextract=()
38
sha256sums=('c87366c91475931f75b924119580abd06a7b3cb3f00fef47346552cab1e24863'
39
'82099c238bf5bfa2201aa68369ad73b47c4f1b9cd10ac2d927f164eb12f3dde9'
40
'566c98b47ee3eebb6aaf79d850a8849fc7331c9995580cd5b9f1cf1bdc4f5de7')
41
42
prepare() {
43
cd "$srcdir/$_pkgname-$pkgver"
44
patch -Np1 < "$srcdir/FTBFS-fix.diff"
45
patch -Np1 < "$srcdir/cve-security-fix.diff"
46
}
47
48
build() {
49
cd "$srcdir/$_pkgname-$pkgver"
50
./configure --prefix=/usr
51
make
52
}
53
54
check() {
55
cd "$srcdir/$_pkgname-$pkgver"
56
make -k check
57
}
58
59
package() {
60
cd "$srcdir/$_pkgname-$pkgver"
61
make DESTDIR="$pkgdir/" install
62
install -Dm644 UserGuide $pkgdir/usr/share/doc/$_pkgname/UserGuide
63
install -Dm644 ChangeLog $pkgdir/usr/share/doc/$_pkgname/ChangeLog
64
install -Dm644 README-DNH.TXT $pkgdir/usr/share/doc/$_pkgname/README-DNH.TXT
65
}
66
67
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |