ft32-elf-gcc

maintainer orphaned · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source URL for isl is from sourceforge.io, which is a standard open-source hosting platform; the package builds from official GCC and ISL sources and does not execute untrusted remote code.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source URL for isl is from sourceforge.io, which is a standard open-source hosting platform; the package builds from official GCC and ISL sources and does not execute untrusted remote code.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:17 "https://libisl.sourceforge.io/isl-$_islver.tar.xz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Rafael Silva (perigoso) <perigoso@riseup.net>
    
      2
    
      3_target=ft32-elf
    
      4pkgname=$_target-gcc
    
      5pkgver=11.3.0
    
      6_islver=0.24
    
      7pkgrel=2
    
      8pkgdesc='The GNU Compiler Collection - cross compiler for Bridgetek FT9xx (bare-metal) target'
    
      9arch=(x86_64)
    
      10url='https://gcc.gnu.org/'
    
      11license=(GPL LGPL FDL)
    
      12depends=($_target-binutils zlib libmpc)
    
      13makedepends=(gmp mpfr $_target-newlib)
    
      14optdepends=("$_target-newlib: Standard C library optimized for embedded systems")
    
      15options=(!emptydirs !strip)
    
      16source=("https://ftp.gnu.org/gnu/gcc/gcc-$pkgver/gcc-$pkgver.tar.xz"{,.sig}
    
      17        "https://libisl.sourceforge.io/isl-$_islver.tar.xz")
    
      18sha512sums=('f0be5ad705c73b84477128a69c047f57dd47002f375eb60e1e842e08cf2009a509e92152bca345823926d550b7395ae6d4de7db51d1ee371c2dc37313881fca7'
    
      19            'SKIP'
    
      20            'ff6bdcff839e1cd473f2a0c1e4dd4a3612ec6fee4544ccbc62b530a7248db2cf93b4b99bf493a86ddf2aba00e768927265d5d411f92061ea85fd7929073428e8')
    
      21validpgpkeys=('13975A70E63C361C73AE69EF6EEB81F8981C74C7'  # Richard Guenther <richard.guenther@gmail.com>
    
      22              'D3A93CAD751C2AF4F8C7AD516C35B99309B5FA62') # Jakub Jelinek <jakub@redhat.com>
    
      23
    
      24_basedir=gcc-$pkgver
    
      25
    
      26prepare() {
    
      27  cd $_basedir
    
      28
    
      29  # link isl for in-tree builds
    
      30  ln -sf ../isl-$_islver isl
    
      31
    
      32  echo $pkgver > gcc/BASE-VER
    
      33
    
      34  # Do not run fixincludes
    
      35  sed -i 's@\./fixinc\.sh@-c true@' gcc/Makefile.in
    
      36
    
      37  # hack! - some configure tests for header files using "$CPP $CPPFLAGS"
    
      38  sed -i "/ac_cpp=/s/\$CPPFLAGS/\$CPPFLAGS -O2/" "$srcdir"/$_basedir/{libiberty,gcc}/configure
    
      39
    
      40  rm -rf "$srcdir"/gcc-build
    
      41  mkdir -p "$srcdir"/gcc-build
    
      42}
    
      43
    
      44build() {
    
      45  cd gcc-build
    
      46
    
      47  export CFLAGS_FOR_TARGET='-g -Os -ffunction-sections -fdata-sections'
    
      48  export CXXFLAGS_FOR_TARGET='-g -Os -ffunction-sections -fdata-sections'
    
      49
    
      50  "$srcdir"/$_basedir/configure \
    
      51      --target=$_target \
    
      52      --prefix=/usr \
    
      53      --libdir=/usr/lib \
    
      54      --libexecdir=/usr/lib \
    
      55      --program-prefix=$_target- \
    
      56      --with-local-prefix=/usr/$_target \
    
      57      --with-build-sysroot=/usr/$_target \
    
      58      --with-sysroot=/usr/$_target \
    
      59      --with-newlib \
    
      60      --without-headers \
    
      61      --disable-shared \
    
      62      --disable-threads \
    
      63      --with-system-zlib \
    
      64      --enable-tls \
    
      65      --enable-languages=c \
    
      66      --disable-libatomic \
    
      67      --disable-libmudflap \
    
      68      --disable-libssp \
    
      69      --disable-libquadmath \
    
      70      --disable-libgomp \
    
      71      --disable-nls \
    
      72      --enable-multilib \
    
      73      --disable-bootstrap \
    
      74      --enable-checking=release
    
      75
    
      76  make inhibit-libc=true
    
      77}
    
      78
    
      79package() {
    
      80  cd gcc-build
    
      81
    
      82  make DESTDIR="$pkgdir" inhibit-libc=true install
    
      83
    
      84  # strip target binaries
    
      85  find "$pkgdir"/usr/lib/gcc/$_target/ \
    
      86       -type f -and \( -name \*.a -or -name \*.o \) \
    
      87       -exec $_target-objcopy -R .comment -R .note -R .debug_info -R .debug_aranges \
    
      88       -R .debug_pubnames -R .debug_pubtypes -R .debug_abbrev -R .debug_line \
    
      89       -R .debug_str -R .debug_ranges -R .debug_loc '{}' \;
    
      90
    
      91  # strip host binaries
    
      92  find "$pkgdir"/usr/bin/ "$pkgdir"/usr/lib/gcc/$_target/ -type f -and \( -executable \) -exec strip '{}' \;
    
      93
    
      94  # Remove files that conflict with host gcc package
    
      95  rm -r "$pkgdir"/usr/share/man/man7
    
      96  rm -r "$pkgdir"/usr/share/info
    
      97  rm "$pkgdir"/usr/lib/libcc1.*
    
      98}
    
      99

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2