ft32-elf-gcc

LOW
maintainer orphaned 0 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The source URL for isl is from sourceforge.io, which is a standard open-source hosting platform; the package builds from official GCC and ISL sources and does not execute untrusted remote code.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source URL for isl is from sourceforge.io, which is a standard open-source hosting platform; the package builds from official GCC and ISL sources and does not execute untrusted remote code.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:17 "https://libisl.sourceforge.io/isl-$_islver.tar.xz")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Rafael Silva (perigoso) <perigoso@riseup.net>
2
3_target=ft32-elf
4pkgname=$_target-gcc
5pkgver=11.3.0
6_islver=0.24
7pkgrel=2
8pkgdesc='The GNU Compiler Collection - cross compiler for Bridgetek FT9xx (bare-metal) target'
9arch=(x86_64)
10url='https://gcc.gnu.org/'
11license=(GPL LGPL FDL)
12depends=($_target-binutils zlib libmpc)
13makedepends=(gmp mpfr $_target-newlib)
14optdepends=("$_target-newlib: Standard C library optimized for embedded systems")
15options=(!emptydirs !strip)
16source=("https://ftp.gnu.org/gnu/gcc/gcc-$pkgver/gcc-$pkgver.tar.xz"{,.sig}
17 "https://libisl.sourceforge.io/isl-$_islver.tar.xz")
18sha512sums=('f0be5ad705c73b84477128a69c047f57dd47002f375eb60e1e842e08cf2009a509e92152bca345823926d550b7395ae6d4de7db51d1ee371c2dc37313881fca7'
19 'SKIP'
20 'ff6bdcff839e1cd473f2a0c1e4dd4a3612ec6fee4544ccbc62b530a7248db2cf93b4b99bf493a86ddf2aba00e768927265d5d411f92061ea85fd7929073428e8')
21validpgpkeys=('13975A70E63C361C73AE69EF6EEB81F8981C74C7' # Richard Guenther <richard.guenther@gmail.com>
22 'D3A93CAD751C2AF4F8C7AD516C35B99309B5FA62') # Jakub Jelinek <jakub@redhat.com>
23
24_basedir=gcc-$pkgver
25
26prepare() {
27 cd $_basedir
28
29 # link isl for in-tree builds
30 ln -sf ../isl-$_islver isl
31
32 echo $pkgver > gcc/BASE-VER
33
34 # Do not run fixincludes
35 sed -i 's@\./fixinc\.sh@-c true@' gcc/Makefile.in
36
37 # hack! - some configure tests for header files using "$CPP $CPPFLAGS"
38 sed -i "/ac_cpp=/s/\$CPPFLAGS/\$CPPFLAGS -O2/" "$srcdir"/$_basedir/{libiberty,gcc}/configure
39
40 rm -rf "$srcdir"/gcc-build
41 mkdir -p "$srcdir"/gcc-build
42}
43
44build() {
45 cd gcc-build
46
47 export CFLAGS_FOR_TARGET='-g -Os -ffunction-sections -fdata-sections'
48 export CXXFLAGS_FOR_TARGET='-g -Os -ffunction-sections -fdata-sections'
49
50 "$srcdir"/$_basedir/configure \
51 --target=$_target \
52 --prefix=/usr \
53 --libdir=/usr/lib \
54 --libexecdir=/usr/lib \
55 --program-prefix=$_target- \
56 --with-local-prefix=/usr/$_target \
57 --with-build-sysroot=/usr/$_target \
58 --with-sysroot=/usr/$_target \
59 --with-newlib \
60 --without-headers \
61 --disable-shared \
62 --disable-threads \
63 --with-system-zlib \
64 --enable-tls \
65 --enable-languages=c \
66 --disable-libatomic \
67 --disable-libmudflap \
68 --disable-libssp \
69 --disable-libquadmath \
70 --disable-libgomp \
71 --disable-nls \
72 --enable-multilib \
73 --disable-bootstrap \
74 --enable-checking=release
75
76 make inhibit-libc=true
77}
78
79package() {
80 cd gcc-build
81
82 make DESTDIR="$pkgdir" inhibit-libc=true install
83
84 # strip target binaries
85 find "$pkgdir"/usr/lib/gcc/$_target/ \
86 -type f -and \( -name \*.a -or -name \*.o \) \
87 -exec $_target-objcopy -R .comment -R .note -R .debug_info -R .debug_aranges \
88 -R .debug_pubnames -R .debug_pubtypes -R .debug_abbrev -R .debug_line \
89 -R .debug_str -R .debug_ranges -R .debug_loc '{}' \;
90
91 # strip host binaries
92 find "$pkgdir"/usr/bin/ "$pkgdir"/usr/lib/gcc/$_target/ -type f -and \( -executable \) -exec strip '{}' \;
93
94 # Remove files that conflict with host gcc package
95 rm -r "$pkgdir"/usr/share/man/man7
96 rm -r "$pkgdir"/usr/share/info
97 rm "$pkgdir"/usr/lib/libcc1.*
98}
99

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion