◎ AURWatch - AUR Security Monitor
scan coverage …
Last scan …
Next scan -

gcc49-alternative-multilib

maintainer wtx · 0 votes · base gcc49-alternative · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package builds GCC 4.9 and its multilib libraries from official GCC and project-hosted sources (gcc.gnu.org, isl.gforge.inria.fr, bastoul.net); these are legitimate project sites, even if not on a standard whitelist, and the sources are used to compile code rather than execute prebuilt binaries.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds GCC 4.9 and its multilib libraries from official GCC and project-hosted sources (gcc.gnu.org, isl.gforge.inria.fr, bastoul.net); these are legitimate project sites, even if not on a standard whitelist, and the sources are used to compile code rather than execute prebuilt binaries.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:25 http://isl.gforge.inria.fr/isl-${_islver}.tar.bz2
  • PKGBUILD:26 http://www.bastoul.net/cloog/pages/download/cloog-${_cloogver}.tar.gz)

PKGBUILD

2 offending line(s) highlighted
1# Maintainer: Yurii Kolesnykov (yurikooles) <yurikoles@gmail.com>
2# Maintainer: Jan Alexander Steffens (heftig) <jan.steffens@gmail.com>
3# Contributor: Allan McRae <allan@archlinux.org>
4
5# toolchain build order: linux-api-headers->glibc->binutils->gcc->binutils->glibc
6# NOTE: libtool requires rebuilt with each new gcc version
7
8pkgname=('gcc49-alternative-multilib' 'gcc49-alternative-libs-multilib' 'lib32-gcc49-alternative-libs')
9pkgver=4.9.4
10_pkgver=4.9
11_islver=0.12.2
12_cloogver=0.18.1
13pkgrel=2
14#_snapshot=4.9-20150304
15pkgdesc="The GNU Compiler Collection 4.9 for multilib"
16arch=('x86_64')
17license=('GPL' 'LGPL' 'FDL' 'custom')
18url="http://gcc.gnu.org"
19makedepends=('binutils>=2.25' 'libmpc' 'doxygen'
20 'lib32-glibc>=2.20')
21checkdepends=('dejagnu' 'inetutils')
22options=('!emptydirs')
23source=(ftp://gcc.gnu.org/pub/gcc/releases/gcc-${pkgver}/gcc-${pkgver}.tar.bz2
24 #ftp://gcc.gnu.org/pub/gcc/snapshots/${_snapshot}/gcc-${_snapshot}.tar.bz2
25 http://isl.gforge.inria.fr/isl-${_islver}.tar.bz2
26 http://www.bastoul.net/cloog/pages/download/cloog-${_cloogver}.tar.gz)
27md5sums=('87c24a4090c1577ba817ec6882602491'
28 'e039bfcfb6c2ab039b8ee69bf883e824'
29 'e34fca0540d840e5d0f6427e98c92252')
30
31if [ -n "${_snapshot}" ]; then
32 _basedir=gcc-${_snapshot}
33else
34 _basedir=gcc-${pkgver}
35fi
36
37_libdir="usr/gcc49/lib/gcc/$CHOST/$pkgver"
38
39
40prepare() {
41 cd ${srcdir}/${_basedir}
42
43 # link isl/cloog for in-tree builds
44 ln -sf ../isl-${_islver} isl
45 ln -sf ../cloog-${_cloogver} cloog
46
47 # Do not run fixincludes
48 sed -i 's@\./fixinc\.sh@-c true@' gcc/Makefile.in
49
50 # Arch Linux installs x86_64 libraries /lib
51 [[ $CARCH == "x86_64" ]] && sed -i '/m64=/s/lib64/lib/' gcc/config/i386/t-linux64
52
53 echo ${pkgver} > gcc/BASE-VER
54
55 # hack! - some configure tests for header files using "$CPP $CPPFLAGS"
56 sed -i "/ac_cpp=/s/\$CPPFLAGS/\$CPPFLAGS -O2/" {libiberty,gcc}/configure
57
58# patch -p1 -i ${startdir}/cfns.h.diff
59 patch -p1 -i ${startdir}/ucontext_t.patch
60 patch -p1 -i ${startdir}/sigaltstack.patch
61 patch -p1 -i ${startdir}/libsanitizer.patch
62 patch -p1 -i ${startdir}/ustat.patch
63
64 (cd libgcc; ln -sf gthr-posix.h gthr-default.h)
65 (cd libgcc; ln -sf config/i386/linux-unwind.h md-unwind-support.h)
66
67 mkdir -p ${srcdir}/gcc-build
68}
69
70build() {
71 cd ${srcdir}/gcc-build
72
73 # using -pipe causes spurious test-suite failures
74 # http://gcc.gnu.org/bugzilla/show_bug.cgi?id=48565
75 CFLAGS=${CFLAGS/-pipe/}
76 CXXFLAGS=${CXXFLAGS/-pipe/}
77
78 export LD_PRELOAD=/lib/libstdc++.so.6
79
80
81 ${srcdir}/${_basedir}/configure --prefix=/usr/gcc49 --exec-prefix=/usr/gcc49 \
82 --libdir=/usr/gcc49/lib --libexecdir=/usr/gcc49/lib \
83 --mandir=/usr/gcc49/share/man --infodir=/usr/gcc49/share/info \
84 --with-bugurl=https://bugs.archlinux.org/ \
85 --enable-languages=c,c++,lto \
86 --enable-shared --enable-threads=posix \
87 --with-system-zlib --enable-__cxa_atexit \
88 --disable-libunwind-exceptions --enable-clocale=gnu \
89 --disable-libstdcxx-pch --disable-libssp \
90 --enable-gnu-unique-object --enable-linker-build-id \
91 --enable-cloog-backend=isl \
92 --enable-lto --enable-plugin --enable-install-libiberty \
93 --with-linker-hash-style=gnu \
94 --enable-multilib --disable-werror \
95 --enable-checking=release
96
97 make
98
99 # make documentation
100 make -C $CHOST/libstdc++-v3/doc doc-man-doxygen
101}
102
103check() {
104 cd ${srcdir}/gcc-build
105
106 # increase stack size to prevent test failures
107 # http://gcc.gnu.org/bugzilla/show_bug.cgi?id=31827
108 ulimit -s 32768
109
110 # do not abort on error as some are "expected"
111 make -k check || true
112 ${srcdir}/${_basedir}/contrib/test_summary
113}
114
115package_lib32-gcc49-alternative-libs()
116{
117 pkgdesc="Runtime GCC 4.9 libraries (32-bit)"
118 depends=('lib32-glibc>=2.20')
119 options=('!emptydirs' '!strip')
120
121 cd ${srcdir}/gcc-build
122
123 make -C $CHOST/32/libgcc DESTDIR=${pkgdir} install-shared
124 rm ${pkgdir}/${_libdir}/32/libgcc_eh.a
125
126 for lib in libatomic \
127 libcilkrts \
128 libgomp \
129 libitm \
130 libquadmath \
131 libsanitizer/{a,l,ub}san \
132 libstdc++-v3/src \
133 libvtv; do
134 make -C $CHOST/32/$lib DESTDIR=${pkgdir} install-toolexeclibLTLIBRARIES
135 done
136
137 # make -C $CHOST/32/libobjc DESTDIR=${pkgdir} install-libs
138
139 # remove stuff in gcc-libs-multilib
140 rm -r ${pkgdir}/usr/gcc49/lib
141}
142
143package_gcc49-alternative-libs-multilib()
144{
145 pkgdesc="Runtime GCC 4.9 libraries for multilib"
146# depends=('glibc>=2.20' "lib32-gcc-libs=$pkgver-$pkgrel")
147 depends=('glibc>=2.20' "lib32-gcc49-alternative-libs=$pkgver-$pkgrel")
148 provides=("gcc49-alternative-libs=$pkgver-$pkgrel")
149# conflicts=('gcc-libs')
150 options=('!emptydirs' '!strip')
151 install=gcc49-alternative-libs.install
152
153 cd ${srcdir}/gcc-build
154
155 make -C $CHOST/libgcc DESTDIR=${pkgdir} install-shared
156 rm ${pkgdir}/${_libdir}/libgcc_eh.a
157
158 for lib in libatomic \
159 libcilkrts \
160 libgomp \
161 libitm \
162 libquadmath \
163 libsanitizer/{a,l,ub}san \
164 libstdc++-v3/src \
165 libvtv; do
166 make -C $CHOST/$lib DESTDIR=${pkgdir} install-toolexeclibLTLIBRARIES
167 done
168
169 [[ $CARCH == "x86_64" ]] && \
170 make -C $CHOST/libsanitizer/tsan DESTDIR=${pkgdir} install-toolexeclibLTLIBRARIES
171
172# make -C $CHOST/libobjc DESTDIR=${pkgdir} install-libs
173 make -C $CHOST/libstdc++-v3/po DESTDIR=${pkgdir} install
174
175
176
177
178# for lib in libgomp \
179# libitm \
180# libquadmath; do
181# make -C $CHOST/$lib DESTDIR=${pkgdir} install-info
182# done
183
184# rm ${pkgdir}/usr/gcc49/share/locale/de/LC_MESSAGES/libstdc++.mo
185# rm ${pkgdir}/usr/gcc49/share/locale/fr/LC_MESSAGES/libstdc++.mo
186
187 # remove stuff in lib32-gcc-libs
188 #rm -r ${pkgdir}/usr/lib32
189
190 # Install Runtime Library Exception
191 # install -Dm644 ${srcdir}/${_basedir}/COPYING.RUNTIME ${pkgdir}/usr/share/licenses/gcc-libs-multilib/RUNTIME.LIBRARY.EXCEPTION
192}
193
194package_gcc49-alternative-multilib()
195{
196 pkgdesc="The GNU Compiler Collection 4.9 - C and C++ frontends for multilib"
197 depends=("gcc49-alternative-libs-multilib=$pkgver-$pkgrel" 'binutils>=2.25' 'libmpc')
198 groups=('multilib-devel')
199 options=('staticlibs')
200 provides=("gcc49=$pkgver-$pkgrel")
201# conflicts=('gcc')
202 install=gcc49-alternative.install
203
204 cd ${srcdir}/gcc-build
205
206 make -C gcc DESTDIR=${pkgdir} install-driver install-cpp install-gcc-ar \
207 c++.install-common install-headers install-plugin install-lto-wrapper
208
209 install -m755 gcc/gcov $pkgdir/usr/gcc49/bin/
210 install -m755 -t $pkgdir/${_libdir}/ gcc/{cc1,cc1plus,collect2,lto1}
211
212 make -C $CHOST/libgcc DESTDIR=${pkgdir} install
213 make -C $CHOST/32/libgcc DESTDIR=${pkgdir} install
214 rm ${pkgdir}/usr/gcc49/lib{,32}/libgcc_s.so*
215
216 make -C $CHOST/libstdc++-v3/src DESTDIR=${pkgdir} install
217 make -C $CHOST/libstdc++-v3/include DESTDIR=${pkgdir} install
218 make -C $CHOST/libstdc++-v3/libsupc++ DESTDIR=${pkgdir} install
219 make -C $CHOST/libstdc++-v3/python DESTDIR=${pkgdir} install
220 make -C $CHOST/32/libstdc++-v3/src DESTDIR=${pkgdir} install
221 make -C $CHOST/32/libstdc++-v3/include DESTDIR=${pkgdir} install
222 make -C $CHOST/32/libstdc++-v3/libsupc++ DESTDIR=${pkgdir} install
223
224 install -d $pkgdir/usr/gcc49/share/gdb/auto-load/usr/lib
225 mv $pkgdir/usr/gcc49/lib/libstdc++.so.6.*-gdb.py $pkgdir/usr/gcc49/share/gdb/auto-load/usr/lib/
226
227 rm ${pkgdir}/usr/gcc49/lib{,32}/libstdc++.so*
228
229 make DESTDIR=${pkgdir} install-fixincludes
230 make -C gcc DESTDIR=${pkgdir} install-mkheaders
231 make -C lto-plugin DESTDIR=${pkgdir} install
232
233 make -C $CHOST/libcilkrts DESTDIR=${pkgdir} install-nodist_toolexeclibHEADERS \
234 install-nodist_cilkincludeHEADERS
235 make -C $CHOST/libgomp DESTDIR=${pkgdir} install-nodist_toolexeclibHEADERS \
236 install-nodist_libsubincludeHEADERS
237 make -C $CHOST/libitm DESTDIR=${pkgdir} install-nodist_toolexeclibHEADERS
238 make -C $CHOST/libquadmath DESTDIR=${pkgdir} install-nodist_libsubincludeHEADERS
239 make -C $CHOST/libsanitizer DESTDIR=${pkgdir} install-nodist_toolexeclibHEADERS
240 make -C $CHOST/libsanitizer/asan DESTDIR=${pkgdir} install-nodist_toolexeclibHEADERS
241 make -C $CHOST/32/libcilkrts DESTDIR=${pkgdir} install-nodist_toolexeclibHEADERS
242 make -C $CHOST/32/libgomp DESTDIR=${pkgdir} install-nodist_toolexeclibHEADERS
243 make -C $CHOST/32/libitm DESTDIR=${pkgdir} install-nodist_toolexeclibHEADERS
244 make -C $CHOST/32/libsanitizer DESTDIR=${pkgdir} install-nodist_toolexeclibHEADERS
245 make -C $CHOST/32/libsanitizer/asan DESTDIR=${pkgdir} install-nodist_toolexeclibHEADERS
246
247 make -C libiberty DESTDIR=${pkgdir} install
248 # install PIC version of libiberty
249# install -m644 ${srcdir}/gcc-build/libiberty/pic/libiberty.a ${pkgdir}/usr/lib
250 install -m644 ${srcdir}/gcc-build/libiberty/pic/libiberty.a ${pkgdir}/usr/gcc49/lib
251
252
253 make -C gcc DESTDIR=${pkgdir} install-man install-info
254# rm ${pkgdir}/usr/share/man/man1/{gccgo,gfortran}.1
255# rm ${pkgdir}/usr/share/info/{gccgo,gfortran,gnat-style,gnat_rm,gnat_ugn}.info
256
257 make -C libcpp DESTDIR=${pkgdir} install
258 make -C gcc DESTDIR=${pkgdir} install-po
259
260 # many packages expect this symlink
261 ln -s gcc ${pkgdir}/usr/gcc49/bin/cc
262
263 # POSIX conformance launcher scripts for c89 and c99
264 cat > $pkgdir/usr/gcc49/bin/c89 <<"EOF"
265#!/bin/sh
266fl="-std=c89"
267for opt; do
268 case "$opt" in
269 -ansi|-std=c89|-std=iso9899:1990) fl="";;
270 -std=*) echo "`basename $0` called with non ANSI/ISO C option $opt" >&2
271 exit 1;;
272 esac
273done
274exec gcc $fl ${1+"$@"}
275EOF
276
277 cat > $pkgdir/usr/gcc49/bin/c99 <<"EOF"
278#!/bin/sh
279fl="-std=c99"
280for opt; do
281 case "$opt" in
282 -std=c99|-std=iso9899:1999) fl="";;
283 -std=*) echo "`basename $0` called with non ISO C99 option $opt" >&2
284 exit 1;;
285 esac
286done
287exec gcc $fl ${1+"$@"}
288EOF
289
290 chmod 755 $pkgdir/usr/gcc49/bin/c{8,9}9
291
292 # install the libstdc++ man pages
293 make -C $CHOST/libstdc++-v3/doc DESTDIR=$pkgdir doc-install-man
294
295
296
297 mv ${pkgdir}/usr/gcc49/share/man/man1/gcc.1 ${pkgdir}/usr/gcc49/share/man/man1/gcc-4.9.1
298 mv ${pkgdir}/usr/gcc49/share/man/man1/g++.1 ${pkgdir}/usr/gcc49/share/man/man1/g++-4.9.1
299 mv ${pkgdir}/usr/gcc49/share/man/man1/cpp.1 ${pkgdir}/usr/gcc49/share/man/man1/cpp-4.9.1
300 mv ${pkgdir}/usr/gcc49/share/man/man1/gcov.1 ${pkgdir}/usr/gcc49/share/man/man1/gcov-4.9.1
301 mv ${pkgdir}/usr/gcc49/share/info/cpp.info ${pkgdir}/usr/gcc49/share/man/man1/cpp-4.9.info
302 mv ${pkgdir}/usr/gcc49/share/info/gcc.info ${pkgdir}/usr/gcc49/share/man/man1/gcc-4.9.info
303 mv ${pkgdir}/usr/gcc49/share/info/cppinternals.info ${pkgdir}/usr/gcc49/share/man/man1/cppinternals-4.9.info
304 mv ${pkgdir}/usr/gcc49/share/info/gccinstall.info ${pkgdir}/usr/gcc49/share/man/man1/gccinstall-4.9.info
305 mv ${pkgdir}/usr/gcc49/share/info/gccint.info ${pkgdir}/usr/gcc49/share/man/man1/gccint-4.9.info
306
307 rm -r ${pkgdir}/usr/gcc49/share/locale/
308
309 install -d ${pkgdir}/usr/bin
310
311 cd ${pkgdir}/usr/bin/
312 ln -s ../gcc49/bin/c++ c++-4.9
313 ln -s ../gcc49/bin/c89 c89-4.9
314 ln -s ../gcc49/bin/c99 c99-4.9
315 ln -s ../gcc49/bin/cc cc-4.9
316 ln -s ../gcc49/bin/cpp cpp-4.9
317 ln -s ../gcc49/bin/g++ g++-4.9
318 ln -s ../gcc49/bin/gcc gcc-4.9
319 ln -s ../gcc49/bin/gcc-ar gcc-ar-4.9
320 ln -s ../gcc49/bin/gcc-nm gcc-nm-4.9
321 ln -s ../gcc49/bin/gcc-ranlib gcc-ranlib-4.9
322 ln -s ../gcc49/bin/gcov gcov-4.9
323 cd $owd
324
325
326
327# rm -r ${pkgdir}/usr/gcc49/include/libiberty
328# rm ${pkgdir}/usr/gcc49/share/man/man3/Numeric_arrays.3
329# rm ${pkgdir}/usr/gcc49/share/man/man3/Pointer_abstractions.3
330# rm ${pkgdir}/usr/gcc49/share/man/man3/SGIextensions.3
331# rm ${pkgdir}/usr/gcc49/share/man/man3/__gnu_cxx.3
332# rm ${pkgdir}/usr/gcc49/share/man/man3/__gnu_debug.3
333# rm ${pkgdir}/usr/gcc49/share/man/man3/__gnu_internal.3
334# rm ${pkgdir}/usr/gcc49/share/man/man3/__gnu_parallel.3
335# rm ${pkgdir}/usr/gcc49/share/man/man3/__gnu_pbds.3
336# rm ${pkgdir}/usr/gcc49/share/man/man3/random.3
337# rm ${pkgdir}/usr/gcc49/share/man/man3/regex.3
338# rm ${pkgdir}/usr/gcc49/share/man/man7/fsf-funding.7
339# rm ${pkgdir}/usr/gcc49/share/man/man7/gfdl.7
340# rm ${pkgdir}/usr/gcc49/share/man/man7/gpl.7
341
342 # Install Runtime Library Exception
343 install -d ${pkgdir}/usr/gcc49/share/licenses/gcc-multilib/
344# ln -s ../gcc-libs-multilib/RUNTIME.LIBRARY.EXCEPTION ${pkgdir}/usr/gcc49/share/licenses/gcc-multilib/
345}
346
347
348
349
350

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion