etqw

maintainer Slash · 29 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a legitimate installer from the game developer's official CDN; while the host is not on a standard whitelist, it is plausibly owned by the project, and the file is a self-contained game client, not a remote code execution risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a legitimate installer from the game developer's official CDN; while the host is not on a standard whitelist, it is plausibly owned by the project, and the file is a self-contained game client, not a remote code execution risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 "https://cdn.splashdamage.com/downloads/games/etqw/ETQW-client-${pkgver}-full.x86.run")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Slash <demodevil5 [at] yahoo [dot] com>
    
      2
    
      3pkgname=etqw
    
      4pkgver=1.5
    
      5pkgrel=5
    
      6pkgdesc="Enemy Territory: Quake Wars is a commercial team and class-based multiplayer game. You need the retail DVD to play."
    
      7arch=('i686' 'x86_64')
    
      8url="https://www.splashdamage.com/games/enemy-territory-quake-wars/"
    
      9license=('custom')
    
      10depends_x86_64=('lib32-alsa-lib' 'lib32-libgl' 'lib32-sdl' 'lib32-gcc-libs' 'lib32-zlib' 'lib32-libjpeg-turbo')
    
      11depends_i686=('libgl' 'sdl' 'gcc-libs' 'zlib' 'libjpeg')
    
      12makedepends=('unzip')
    
      13conflicts=('bin32-etqw')
    
      14install='etqw.install'
    
      15source=('etqw.launcher' 'etqw-rthread.launcher' 'etqwded.launcher' 'etqw.desktop' \
    
      16"https://cdn.splashdamage.com/downloads/games/etqw/ETQW-client-${pkgver}-full.x86.run")
    
      17b2sums=('b7b90b109afed76ffefed720bd9785ff5d5813add95cdcbd0d65876240f7b05fe667b98ee8baa47ef5f5a725e9348f19ff34964b8f62f2c2f1d353e1157a6626'
    
      18        '1cdcc71bf92fb3300023ba3a1c64bc234a5f46eede5479f9818022c9e5a726303850014b958ebcff78129bbf510642b7aa8b3d76d109bc94e229c5aa9eb90a8a'
    
      19        '56159047689fbb29a10e5aecd30d311035fff12f65af58b380cde57d6db10396192afeadba04bd2c7772c89ee54c26786ad11af352f8dc45c255b72bb3c455a9'
    
      20        'c60641b8c1beee8636c5a1077ccb420838e8c6a2ae60f17a604b6ea78574600bfc55693438b32fb7d2d91b11f50d8404e18d3afc612cd09159923d3555154fae'
    
      21        '8fcaa8518c7c452a4fe593a00beea0f5a6d5849c72b03d4a443fffde8540ea53b7bf0376d90b2f2ed4e3a736628f8871e009a49b938344516b2db0495cf1e826')
    
      22
    
      23package() {
    
      24    # Create Destination Directories
    
      25    install -d ${pkgdir}/opt/
    
      26
    
      27    # Unzip Linux Client Data
    
      28    sh -c "unzip -o ${srcdir}/ETQW-client-${pkgver}-full.x86.run -d ${srcdir}/ data/*; true"
    
      29
    
      30    # Move Linux Client Data to Destination Directory
    
      31    mv ${srcdir}/data ${pkgdir}/opt/etqw
    
      32
    
      33    # Make Binaries/Scripts Executable
    
      34    chmod +x ${pkgdir}/opt/etqw/{etqw,etqw-dedicated,etqw.x86,*.so,*.so.*,pb/*.so}
    
      35
    
      36    # Fix Bots Directory Permissions
    
      37    chmod 755 ${pkgdir}/opt/etqw/base/bots
    
      38
    
      39    # Install License (ETQW)
    
      40    install -D -m 644 ${pkgdir}/opt/etqw/EULA.txt \
    
      41        ${pkgdir}/usr/share/licenses/$pkgname/EULA.txt
    
      42
    
      43    # Install License (PunkBuster)
    
      44    install -D -m 644 ${pkgdir}/opt/etqw/pb/PBEULA.txt \
    
      45        ${pkgdir}/usr/share/licenses/$pkgname/PBEULA.txt
    
      46
    
      47    # Install Launcher (Client)
    
      48    install -D -m 755 ${srcdir}/etqw.launcher \
    
      49        ${pkgdir}/usr/bin/etqw
    
      50
    
      51    # Install Launcher (Client)
    
      52    install -D -m 755 ${srcdir}/etqw-rthread.launcher \
    
      53        ${pkgdir}/usr/bin/etqw-rthread
    
      54
    
      55    # Install Launcher (Server)
    
      56    install -D -m 755 ${srcdir}/etqwded.launcher \
    
      57        ${pkgdir}/usr/bin/etqw-dedicated
    
      58
    
      59    # Install Desktop File
    
      60    install -D -m 644 ${srcdir}/etqw.desktop \
    
      61        ${pkgdir}/usr/share/applications/etqw.desktop
    
      62
    
      63    # Install Icon File
    
      64    install -D -m 644 ${pkgdir}/opt/etqw/etqw_icon.png \
    
      65        ${pkgdir}/usr/share/pixmaps/etqw.png
    
      66
    
      67    # Create Directories for Retail Files
    
      68    install -d ${pkgdir}/opt/etqw/base/{megatextures,video}
    
      69
    
      70    # Remove breaking local libraries
    
      71    rm ${pkgdir}/opt/etqw/{libgcc_s.so.1,libstdc++.so.6}
    
      72}
    
      73
    
      74

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2