◎ AURWatch - AUR Security Monitor
scan coverage …
Last scan …
Next scan -

gcc48-alternative-multilib

maintainer wtx · 0 votes · base gcc48-alternative · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package builds GCC 4.8 and related libraries from official and project-associated sources; the non-whitelisted hosts (isl.gforge.inria.fr, bastoul.net) host legitimate dependency source code, not executables, and the build process is transparent and standard for AUR.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds GCC 4.8 and related libraries from official and project-associated sources; the non-whitelisted hosts (isl.gforge.inria.fr, bastoul.net) host legitimate dependency source code, not executables, and the build process is transparent and standard for AUR.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:25 http://isl.gforge.inria.fr/isl-${_islver}.tar.bz2
  • PKGBUILD:26 http://www.bastoul.net/cloog/pages/download/cloog-${_cloogver}.tar.gz)

PKGBUILD

2 offending line(s) highlighted
1# Maintainer: Yurii Kolesnykov (yurikooles) <yurikoles@gmail.com>
2# Maintainer: Jan Alexander Steffens (heftig) <jan.steffens@gmail.com>
3# Contributor: Allan McRae <allan@archlinux.org>
4
5# toolchain build order: linux-api-headers->glibc->binutils->gcc->binutils->glibc
6# NOTE: libtool requires rebuilt with each new gcc version
7
8pkgname=('gcc48-alternative-multilib' 'gcc48-alternative-libs-multilib' 'lib32-gcc48-alternative-libs')
9pkgver=4.8.5
10_pkgver=4.8
11_islver=0.12.2
12_cloogver=0.18.1
13pkgrel=2
14#_snapshot=4.9-20150304
15pkgdesc="The GNU Compiler Collection 4.8 for multilib"
16arch=('x86_64')
17license=('GPL' 'LGPL' 'FDL' 'custom')
18url="http://gcc.gnu.org"
19makedepends=('binutils>=2.25' 'libmpc' 'doxygen'
20 'lib32-glibc>=2.20')
21checkdepends=('dejagnu' 'inetutils')
22options=('!emptydirs')
23source=(ftp://gcc.gnu.org/pub/gcc/releases/gcc-${pkgver}/gcc-${pkgver}.tar.bz2
24 #ftp://gcc.gnu.org/pub/gcc/snapshots/${_snapshot}/gcc-${_snapshot}.tar.bz2
25 http://isl.gforge.inria.fr/isl-${_islver}.tar.bz2
26 http://www.bastoul.net/cloog/pages/download/cloog-${_cloogver}.tar.gz)
27md5sums=('80d2c2982a3392bb0b89673ff136e223'
28 'e039bfcfb6c2ab039b8ee69bf883e824'
29 'e34fca0540d840e5d0f6427e98c92252')
30
31if [ -n "${_snapshot}" ]; then
32 _basedir=gcc-${_snapshot}
33else
34 _basedir=gcc-${pkgver}
35fi
36
37_libdir="usr/gcc48/lib/gcc/$CHOST/$pkgver"
38
39
40prepare() {
41 cd ${srcdir}/${_basedir}
42
43 # link isl/cloog for in-tree builds
44 ln -sf ../isl-${_islver} isl
45 ln -sf ../cloog-${_cloogver} cloog
46
47 # Do not run fixincludes
48 sed -i 's@\./fixinc\.sh@-c true@' gcc/Makefile.in
49
50 # Arch Linux installs x86_64 libraries /lib
51 [[ $CARCH == "x86_64" ]] && sed -i '/m64=/s/lib64/lib/' gcc/config/i386/t-linux64
52
53 echo ${pkgver} > gcc/BASE-VER
54
55 # hack! - some configure tests for header files using "$CPP $CPPFLAGS"
56 sed -i "/ac_cpp=/s/\$CPPFLAGS/\$CPPFLAGS -O2/" {libiberty,gcc}/configure
57
58 patch -p1 -i ${startdir}/cfns.h.diff
59# patch -p0 -i ${startdir}/texinfo.patch
60 patch -p0 -i ${startdir}/gcc.texi.48.patch
61
62 patch -p1 -i ${startdir}/ucontext_t.patch
63 patch -p1 -i ${startdir}/libsanitizer.patch
64
65 mkdir -p ${srcdir}/gcc-build
66}
67
68build() {
69 cd ${srcdir}/gcc-build
70
71 # using -pipe causes spurious test-suite failures
72 # http://gcc.gnu.org/bugzilla/show_bug.cgi?id=48565
73 CFLAGS=${CFLAGS/-pipe/}
74 CXXFLAGS=${CXXFLAGS/-pipe/}
75
76 CFLAGS=${CFLAGS/-fstack-protector-strong/}
77 CXXFLAGS=${CFLAGS/-fstack-protector-strong/}
78
79
80 export LD_PRELOAD=/usr/lib/libstdc++.so.6
81
82
83 ${srcdir}/${_basedir}/configure --prefix=/usr/gcc48 --exec-prefix=/usr/gcc48 \
84 --libdir=/usr/gcc48/lib --libexecdir=/usr/gcc48/lib \
85 --mandir=/usr/gcc48/share/man --infodir=/usr/gcc48/share/info \
86 --with-bugurl=https://bugs.archlinux.org/ \
87 --enable-languages=c,c++,lto \
88 --enable-shared --enable-threads=posix \
89 --with-system-zlib --enable-__cxa_atexit \
90 --disable-libunwind-exceptions --enable-clocale=gnu \
91 --disable-libstdcxx-pch --disable-libssp \
92 --enable-gnu-unique-object --enable-linker-build-id \
93 --enable-cloog-backend=isl \
94 --enable-lto --enable-plugin --enable-install-libiberty \
95 --with-linker-hash-style=gnu \
96 --enable-multilib --disable-werror \
97 --enable-checking=release
98
99
100 make
101
102 # make documentation
103 make -C $CHOST/libstdc++-v3/doc doc-man-doxygen
104}
105
106check() {
107 cd ${srcdir}/gcc-build
108
109 # increase stack size to prevent test failures
110 # http://gcc.gnu.org/bugzilla/show_bug.cgi?id=31827
111 ulimit -s 32768
112
113 # do not abort on error as some are "expected"
114 make -k check || true
115 ${srcdir}/${_basedir}/contrib/test_summary
116}
117
118package_lib32-gcc48-alternative-libs()
119{
120 pkgdesc="Runtime GCC 4.8 libraries (32-bit)"
121 depends=('lib32-glibc>=2.20')
122 options=('!emptydirs' '!strip')
123
124 cd ${srcdir}/gcc-build
125
126 make -C $CHOST/32/libgcc DESTDIR=${pkgdir} install-shared
127 rm ${pkgdir}/${_libdir}/32/libgcc_eh.a
128
129 for lib in libatomic \
130 libgomp \
131 libitm \
132 libquadmath \
133 libsanitizer/asan \
134 libstdc++-v3/src \
135 ; do
136 make -C $CHOST/32/$lib DESTDIR=${pkgdir} install-toolexeclibLTLIBRARIES
137 done
138
139 # make -C $CHOST/32/libobjc DESTDIR=${pkgdir} install-libs
140
141 # remove stuff in gcc-libs-multilib
142 rm -r ${pkgdir}/usr/gcc48/lib
143}
144
145package_gcc48-alternative-libs-multilib()
146{
147 pkgdesc="Runtime GCC 4.8 libraries for multilib"
148# depends=('glibc>=2.20' "lib32-gcc-libs=$pkgver-$pkgrel")
149 depends=('glibc>=2.20' "lib32-gcc48-alternative-libs=$pkgver-$pkgrel")
150 provides=("gcc48-alternative-libs=$pkgver-$pkgrel")
151# conflicts=('gcc-libs')
152 options=('!emptydirs' '!strip')
153 install=gcc48-alternative-libs.install
154
155 cd ${srcdir}/gcc-build
156
157 make -C $CHOST/libgcc DESTDIR=${pkgdir} install-shared
158 rm ${pkgdir}/${_libdir}/libgcc_eh.a
159
160 for lib in libatomic \
161 libgomp \
162 libitm \
163 libquadmath \
164 libsanitizer/asan \
165 libstdc++-v3/src \
166 ; do
167 make -C $CHOST/$lib DESTDIR=${pkgdir} install-toolexeclibLTLIBRARIES
168 done
169
170 [[ $CARCH == "x86_64" ]] && \
171 make -C $CHOST/libsanitizer/tsan DESTDIR=${pkgdir} install-toolexeclibLTLIBRARIES
172
173# make -C $CHOST/libobjc DESTDIR=${pkgdir} install-libs
174 make -C $CHOST/libstdc++-v3/po DESTDIR=${pkgdir} install
175
176
177
178
179# for lib in libgomp \
180# libitm \
181# libquadmath; do
182# make -C $CHOST/$lib DESTDIR=${pkgdir} install-info
183# done
184
185# rm ${pkgdir}/usr/gcc48/share/locale/de/LC_MESSAGES/libstdc++.mo
186# rm ${pkgdir}/usr/gcc48/share/locale/fr/LC_MESSAGES/libstdc++.mo
187
188 # remove stuff in lib32-gcc-libs
189 #rm -r ${pkgdir}/usr/lib32
190
191 # Install Runtime Library Exception
192 # install -Dm644 ${srcdir}/${_basedir}/COPYING.RUNTIME ${pkgdir}/usr/share/licenses/gcc-libs-multilib/RUNTIME.LIBRARY.EXCEPTION
193}
194
195package_gcc48-alternative-multilib()
196{
197 pkgdesc="The GNU Compiler Collection 4.8 - C and C++ frontends for multilib"
198 depends=("gcc48-alternative-libs-multilib=$pkgver-$pkgrel" 'binutils>=2.25' 'libmpc')
199 groups=('multilib-devel')
200 options=('staticlibs')
201 provides=("gcc48=$pkgver-$pkgrel")
202# conflicts=('gcc')
203 install=gcc48-alternative.install
204
205 cd ${srcdir}/gcc-build
206
207 make -C gcc DESTDIR=${pkgdir} install-driver install-cpp install-gcc-ar \
208 c++.install-common install-headers install-plugin install-lto-wrapper
209
210 install -m755 gcc/gcov $pkgdir/usr/gcc48/bin/
211 install -m755 -t $pkgdir/${_libdir}/ gcc/{cc1,cc1plus,collect2,lto1}
212
213 make -C $CHOST/libgcc DESTDIR=${pkgdir} install
214 make -C $CHOST/32/libgcc DESTDIR=${pkgdir} install
215 rm ${pkgdir}/usr/gcc48/lib{,32}/libgcc_s.so*
216
217 make -C $CHOST/libstdc++-v3/src DESTDIR=${pkgdir} install
218 make -C $CHOST/libstdc++-v3/include DESTDIR=${pkgdir} install
219 make -C $CHOST/libstdc++-v3/libsupc++ DESTDIR=${pkgdir} install
220 make -C $CHOST/libstdc++-v3/python DESTDIR=${pkgdir} install
221 make -C $CHOST/32/libstdc++-v3/src DESTDIR=${pkgdir} install
222 make -C $CHOST/32/libstdc++-v3/include DESTDIR=${pkgdir} install
223 make -C $CHOST/32/libstdc++-v3/libsupc++ DESTDIR=${pkgdir} install
224
225 install -d $pkgdir/usr/gcc48/share/gdb/auto-load/usr/lib
226 mv $pkgdir/usr/gcc48/lib/libstdc++.so.6.*-gdb.py $pkgdir/usr/gcc48/share/gdb/auto-load/usr/lib/
227
228 rm ${pkgdir}/usr/gcc48/lib{,32}/libstdc++.so*
229
230 make DESTDIR=${pkgdir} install-fixincludes
231 make -C gcc DESTDIR=${pkgdir} install-mkheaders
232 make -C lto-plugin DESTDIR=${pkgdir} install
233
234# make -C $CHOST/libcilkrts DESTDIR=${pkgdir} install-nodist_toolexeclibHEADERS \
235# install-nodist_cilkincludeHEADERS
236 make -C $CHOST/libgomp DESTDIR=${pkgdir} install-nodist_toolexeclibHEADERS \
237 install-nodist_libsubincludeHEADERS
238 make -C $CHOST/libitm DESTDIR=${pkgdir} install-nodist_toolexeclibHEADERS
239 make -C $CHOST/libquadmath DESTDIR=${pkgdir} install-nodist_libsubincludeHEADERS
240# make -C $CHOST/libsanitizer DESTDIR=${pkgdir} install-nodist_toolexeclibHEADERS
241 make -C $CHOST/libsanitizer/asan DESTDIR=${pkgdir} install-nodist_toolexeclibHEADERS
242# make -C $CHOST/32/libcilkrts DESTDIR=${pkgdir} install-nodist_toolexeclibHEADERS
243 make -C $CHOST/32/libgomp DESTDIR=${pkgdir} install-nodist_toolexeclibHEADERS
244 make -C $CHOST/32/libitm DESTDIR=${pkgdir} install-nodist_toolexeclibHEADERS
245# make -C $CHOST/32/libsanitizer DESTDIR=${pkgdir} install-nodist_toolexeclibHEADERS
246 make -C $CHOST/32/libsanitizer/asan DESTDIR=${pkgdir} install-nodist_toolexeclibHEADERS
247
248 make -C libiberty DESTDIR=${pkgdir} install
249 # install PIC version of libiberty
250# install -m644 ${srcdir}/gcc-build/libiberty/pic/libiberty.a ${pkgdir}/usr/lib
251 install -m644 ${srcdir}/gcc-build/libiberty/pic/libiberty.a ${pkgdir}/usr/gcc48/lib
252
253
254 make -C gcc DESTDIR=${pkgdir} install-man install-info
255# rm ${pkgdir}/usr/share/man/man1/{gccgo,gfortran}.1
256# rm ${pkgdir}/usr/share/info/{gccgo,gfortran,gnat-style,gnat_rm,gnat_ugn}.info
257
258 make -C libcpp DESTDIR=${pkgdir} install
259 make -C gcc DESTDIR=${pkgdir} install-po
260
261 # many packages expect this symlink
262 ln -s gcc ${pkgdir}/usr/gcc48/bin/cc
263
264 # POSIX conformance launcher scripts for c89 and c99
265 cat > $pkgdir/usr/gcc48/bin/c89 <<"EOF"
266#!/bin/sh
267fl="-std=c89"
268for opt; do
269 case "$opt" in
270 -ansi|-std=c89|-std=iso9899:1990) fl="";;
271 -std=*) echo "`basename $0` called with non ANSI/ISO C option $opt" >&2
272 exit 1;;
273 esac
274done
275exec gcc $fl ${1+"$@"}
276EOF
277
278 cat > $pkgdir/usr/gcc48/bin/c99 <<"EOF"
279#!/bin/sh
280fl="-std=c99"
281for opt; do
282 case "$opt" in
283 -std=c99|-std=iso9899:1999) fl="";;
284 -std=*) echo "`basename $0` called with non ISO C99 option $opt" >&2
285 exit 1;;
286 esac
287done
288exec gcc $fl ${1+"$@"}
289EOF
290
291 chmod 755 $pkgdir/usr/gcc48/bin/c{8,9}9
292
293 # install the libstdc++ man pages
294 make -C $CHOST/libstdc++-v3/doc DESTDIR=$pkgdir doc-install-man
295
296
297
298 mv ${pkgdir}/usr/gcc48/share/man/man1/gcc.1 ${pkgdir}/usr/gcc48/share/man/man1/gcc-4.8.5
299 mv ${pkgdir}/usr/gcc48/share/man/man1/g++.1 ${pkgdir}/usr/gcc48/share/man/man1/g++-4.8.5
300 mv ${pkgdir}/usr/gcc48/share/man/man1/cpp.1 ${pkgdir}/usr/gcc48/share/man/man1/cpp-4.8.5
301 mv ${pkgdir}/usr/gcc48/share/man/man1/gcov.1 ${pkgdir}/usr/gcc48/share/man/man1/gcov-4.8.5
302 mv ${pkgdir}/usr/gcc48/share/info/cpp.info ${pkgdir}/usr/gcc48/share/man/man1/cpp-4.8.info
303 mv ${pkgdir}/usr/gcc48/share/info/gcc.info ${pkgdir}/usr/gcc48/share/man/man1/gcc-4.8.info
304 mv ${pkgdir}/usr/gcc48/share/info/cppinternals.info ${pkgdir}/usr/gcc48/share/man/man1/cppinternals-4.8.info
305 mv ${pkgdir}/usr/gcc48/share/info/gccinstall.info ${pkgdir}/usr/gcc48/share/man/man1/gccinstall-4.8.info
306 mv ${pkgdir}/usr/gcc48/share/info/gccint.info ${pkgdir}/usr/gcc48/share/man/man1/gccint-4.8.info
307
308 rm -r ${pkgdir}/usr/gcc48/share/locale/
309
310 install -d ${pkgdir}/usr/bin
311
312 cd ${pkgdir}/usr/bin/
313 ln -s ../gcc48/bin/c++ c++-4.8
314 ln -s ../gcc48/bin/c89 c89-4.8
315 ln -s ../gcc48/bin/c99 c99-4.8
316 ln -s ../gcc48/bin/cc cc-4.8
317 ln -s ../gcc48/bin/cpp cpp-4.8
318 ln -s ../gcc48/bin/g++ g++-4.8
319 ln -s ../gcc48/bin/gcc gcc-4.8
320 ln -s ../gcc48/bin/gcc-ar gcc-ar-4.8
321 ln -s ../gcc48/bin/gcc-nm gcc-nm-4.8
322 ln -s ../gcc48/bin/gcc-ranlib gcc-ranlib-4.8
323 ln -s ../gcc48/bin/gcov gcov-4.8
324 cd $owd
325
326
327
328# rm -r ${pkgdir}/usr/gcc48/include/libiberty
329# rm ${pkgdir}/usr/gcc48/share/man/man3/Numeric_arrays.3
330# rm ${pkgdir}/usr/gcc48/share/man/man3/Pointer_abstractions.3
331# rm ${pkgdir}/usr/gcc48/share/man/man3/SGIextensions.3
332# rm ${pkgdir}/usr/gcc48/share/man/man3/__gnu_cxx.3
333# rm ${pkgdir}/usr/gcc48/share/man/man3/__gnu_debug.3
334# rm ${pkgdir}/usr/gcc48/share/man/man3/__gnu_internal.3
335# rm ${pkgdir}/usr/gcc48/share/man/man3/__gnu_parallel.3
336# rm ${pkgdir}/usr/gcc48/share/man/man3/__gnu_pbds.3
337# rm ${pkgdir}/usr/gcc48/share/man/man3/random.3
338# rm ${pkgdir}/usr/gcc48/share/man/man3/regex.3
339# rm ${pkgdir}/usr/gcc48/share/man/man7/fsf-funding.7
340# rm ${pkgdir}/usr/gcc48/share/man/man7/gfdl.7
341# rm ${pkgdir}/usr/gcc48/share/man/man7/gpl.7
342
343 # Install Runtime Library Exception
344 install -d ${pkgdir}/usr/gcc48/share/licenses/gcc-multilib/
345# ln -s ../gcc-libs-multilib/RUNTIME.LIBRARY.EXCEPTION ${pkgdir}/usr/gcc48/share/licenses/gcc-multilib/
346}
347
348
349
350
351

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion