gcc43

maintainer severach · 39 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source uses gcc.gnu.org, a standard and official host for GCC releases, despite the static analyzer flag; the download is from a legitimate project domain and the package builds from official source code, posing no real risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The source uses gcc.gnu.org, a standard and official host for GCC releases, despite the static analyzer flag; the download is from a legitimate project domain and the package builds from official source code, posing no real risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:25 '0000-gcc-c11-toplev.diff::https://www.rockbox.org/gcc/gcc-c11-toplev.diff'

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer:  Chris Severance aur.severach aATt spamgourmet dott com
    
      2# Contributor: Pedro Nariyoshi <pedro.nariyoshi@gmail.com>
    
      3# Prev-Maintainer: Carson Reynolds <carson@k2.t.u-tokyo.ac.jp>
    
      4# Contributor: kristianlm2 <kristanlein@gmail.com>
    
      5# Contributor: progtologist <arissynod@gmail.com>
    
      6
    
      7set -u
    
      8_pkgver='4.3'
    
      9pkgname="gcc${_pkgver//\./}"
    
      10pkgver="${_pkgver}.6"
    
      11pkgrel='8'
    
      12pkgdesc="The GNU Compiler Collection (${_pkgver}.x)"
    
      13arch=('i686' 'x86_64')
    
      14url='http://gcc.gnu.org'
    
      15license=('GPL-2.0-only' 'LGPL-2.1-only' 'GPL-3.0-only' 'LGPL-3.0-only')
    
      16depends=('glibc' 'gcc-libs' 'bash' 'gmp' 'binutils' 'mpfr' 'zlib')
    
      17makedepends=('flex' 'bison' 'setconf' 'cloog' 'elfutils')
    
      18#makedepends+=('gcc49')
    
      19conflicts=("gcc${_pkgver//\./}-multilib")
    
      20options=('!libtool' 'staticlibs' '!buildflags') # libiberty builds with all flags removed
    
      21source=(
    
      22  "ftp://gcc.gnu.org/pub/gcc/releases/gcc-${pkgver}"/gcc-{core,g++,fortran,objc,java}-"${pkgver}.tar.bz2"
    
      23  'gcc_pure64.patch'
    
      24  'siginfo_t_fix.patch'
    
      25  '0000-gcc-c11-toplev.diff::https://www.rockbox.org/gcc/gcc-c11-toplev.diff'
    
      26)
    
      27md5sums=('43df9ad8b4bb314a46bac12f5aefaec2'
    
      28         'ee7dc01b6e1a6a92a6e8d66adb8d2ab9'
    
      29         'c6eeee73007015c52043716fbe8ffdc7'
    
      30         '3fdb8158eabb765d1711f894bf71f7f5'
    
      31         'b5c12ad38048c354686747d640f5d621'
    
      32         '4030ee1c08dd1e843c0225b772360e76'
    
      33         'edce21b2ce295478d14d5dd988eb3287'
    
      34         'ea3bba5ee50ba043b992eaa22161e141')
    
      35sha256sums=('86af1703be5cc7f40270a66ac15ebcf6088706a789ae1bf18488dc070777f979'
    
      36            '0e765849e5ea09a662889b323b69955aac06d9a5bc1b1246ffa7ac90d2f8bd80'
    
      37            '21dee6ef25fac3df42704465865266e895955db23b8000ade4196e388adb7889'
    
      38            '0c3c552320d5e052eec8471bd3bf89b3fd10f2ed129ae89861828b24d10c21ce'
    
      39            'da1d5fa9431457d39841991465f1825fc49f09a7999ca31309bbd5972c95860f'
    
      40            '2d369cf93c6e15c3559c3560bce581e0ae5f1f34dc86bca013ac67ef1c1a9ff9'
    
      41            '24cb033fa363148952b5ed7cdff635fbee0ae55ecafe5dfa32206e97cb0c4af3'
    
      42            'aa81059bc71f335c962db6bbb8c5857a5cc76e2eb33b82ce1ccd6cb536b2bc31')
    
      43
    
      44if [ -n "${_snapshot:-}" ]; then
    
      45  _basedir="gcc-${_snapshot}"
    
      46else
    
      47  _basedir="gcc-${pkgver}"
    
      48fi
    
      49
    
      50#_libdir="usr/lib/gcc/${CHOST}/${pkgver}"
    
      51
    
      52prepare() {
    
      53  set -u
    
      54  cd "${_basedir}"
    
      55
    
      56  # Do not install libiberty
    
      57  sed -e 's/install_to_$(INSTALL_DEST) //' -i 'libiberty/Makefile.in'
    
      58
    
      59  # Disables generating documentation (new texinfo does not like the old .texi files)
    
      60  echo 'MAKEINFO = :' >> 'Makefile.in'
    
      61
    
      62  # Do not run fixincludes
    
      63  sed -e 's@\./fixinc\.sh@-c true@' -i 'gcc/Makefile.in'
    
      64
    
      65  patch -Np1 -i "${srcdir}/siginfo_t_fix.patch"
    
      66
    
      67  patch -Np1 -i "${srcdir}/0000-gcc-c11-toplev.diff"
    
      68
    
      69  case "${CARCH}" in
    
      70  'x86_64') patch -Np1 -i '../gcc_pure64.patch';;
    
      71  esac
    
      72
    
      73  # fix build with glibc 2.26
    
      74  sed -e 's:\bstruct ucontext\b:ucontext_t:g' -i $(grep --include '*.[ch]' --include '*.cc' -lre '\bstruct ucontext\b')
    
      75  sed -e 's:\bstruct sigaltstack\b:stack_t:g' -i $(grep --include '*.[ch]' --include '*.cc' -lre '\bstruct sigaltstack\b')
    
      76
    
      77  echo "${pkgver}" > 'gcc/BASE-VER'
    
      78
    
      79  rm -rf 'gcc-build'
    
      80  mkdir 'gcc-build'
    
      81
    
      82  set +u
    
      83}
    
      84
    
      85build() {
    
      86  set -u
    
      87  if [ ! -s "${_basedir}/gcc-build/Makefile" ]; then
    
      88    cd "${_basedir}"
    
      89
    
      90    cd 'gcc-build'
    
      91    # The following options are one per line, mostly sorted so they are easy to diff compare to other gcc packages.
    
      92    local _conf=(
    
      93      --build="${CHOST}"
    
      94      --disable-libmudflap
    
      95      --disable-libssp
    
      96      --disable-libstdcxx-pch
    
      97      --disable-werror
    
      98      --enable-__cxa_atexit
    
      99      #--enable-checking=release
    
      100      --enable-clocale='gnu'
    
      101      --enable-languages='c,c++'
    
      102      --enable-libgomp
    
      103      --disable-multilib
    
      104      --enable-shared
    
      105      --enable-threads='posix'
    
      106      --enable-version-specific-runtime-libs
    
      107      --infodir='/usr/share/info'
    
      108      --libdir='/usr/lib'
    
      109      --libexecdir='/usr/lib'
    
      110      --mandir='/usr/share/man'
    
      111      --program-suffix="-${_pkgver}"
    
      112      --with-cloog
    
      113      --with-ppl
    
      114      --with-system-zlib
    
      115      --with-tune='generic'
    
      116      --prefix='/usr'
    
      117      #CXX='g++-4.9' CC='gcc-4.9'
    
      118      CXX='g++ -Wno-implicit-function-declaration -Wno-incompatible-pointer-types'
    
      119      CC='gcc -Wno-implicit-function-declaration -Wno-incompatible-pointer-types'
    
      120    )
    
      121    ../configure "${_conf[@]}"
    
      122
    
      123    sed -e 's/^STAGE1_CXXFLAGS.*$/& -std=gnu++11/' -i 'Makefile'
    
      124  fi
    
      125
    
      126  cd "${srcdir}/${_basedir}/gcc-build"
    
      127  #LD_PRELOAD='/usr/lib/libstdc++.so' \\
    
      128  nice make -s
    
      129
    
      130  set +u
    
      131}
    
      132
    
      133package() {
    
      134  set -u
    
      135  cd "${_basedir}/gcc-build"
    
      136
    
      137  #LD_PRELOAD='/usr/lib/libstdc++.so' \\
    
      138  make -j1 DESTDIR="${pkgdir}" install
    
      139
    
      140  ## Lazy way of dealing with conflicting man and info pages and locales...
    
      141  rm -rf "${pkgdir}/usr/share/man/man7"
    
      142  rm -rf "${pkgdir}/usr/share/locale"
    
      143
    
      144  # Move potentially conflicting stuff to version specific subdirectory
    
      145  #case "${CARCH}" in
    
      146  #'x86_64') mv "${pkgdir}/usr/lib/gcc/${CHOST}"/lib*/ "${pkgdir}/usr/lib/gcc/${CHOST}/${pkgver}/" ;;
    
      147  #esac
    
      148  mv "${pkgdir}/usr/lib/gcc/${CHOST}"/lib* "${pkgdir}/usr/lib/gcc/${CHOST}/${pkgver}/"
    
      149
    
      150  # Create links for gcc build environment (useful for CUDA)
    
      151  mkdir -p "${pkgdir}/opt/gcc-${_pkgver}"
    
      152  ln -s "/usr/bin/gcc-${_pkgver}" "${pkgdir}/opt/gcc-${_pkgver}/gcc"
    
      153  ln -s "/usr/bin/g++-${_pkgver}" "${pkgdir}/opt/gcc-${_pkgver}/g++"
    
      154
    
      155  # Avoid file conflicts when enabling libgomp
    
      156  rm -rf "${pkgdir}/usr/share/info"
    
      157
    
      158  # Install Runtime Library Exception
    
      159  install -Dpm644 '../COPYING.RUNTIME' \
    
      160    "${pkgdir}/usr/share/licenses/${pkgname}/RUNTIME.LIBRARY.EXCEPTION" || :
    
      161  set +u
    
      162}
    
      163set +u
    
      164

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2