hostapd-rtl871xdrv

maintainer apnkpr · 9 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds from a legitimate project source (w1.fi) and a GitHub repository for a Realtek driver patch; the non-whitelisted git source is used only for patching and is not executed directly, posing minimal risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds from a legitimate project source (w1.fi) and a GitHub repository for a Realtek driver patch; the non-whitelisted git source is used only for patching and is not executed directly, posing minimal risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source=("https://w1.fi/releases/${_pkgname}-${pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Arpan Kapoor <a at arpankapoor dot com>
    
      2
    
      3_pkgname=hostapd
    
      4pkgname="${_pkgname}-rtl871xdrv"
    
      5pkgver=2.9
    
      6pkgrel=2
    
      7pkgdesc='IEEE 802.11 AP, IEEE 802.1X/WPA/WPA2/EAP/RADIUS Authenticator'
    
      8arch=('i686' 'x86_64' 'arm' 'armv6h' 'armv7h' 'aarch64')
    
      9url='http://w1.fi/hostapd/'
    
      10license=('BSD')
    
      11depends=('glibc' 'libnl' 'openssl' 'sqlite')
    
      12backup=("etc/${_pkgname}/${_pkgname}."{accept,conf,deny,eap_user,radius_clients,vlan,wpa_psk})
    
      13makedepends=('git')
    
      14provides=("${_pkgname}")
    
      15options=(emptydirs)
    
      16source=("https://w1.fi/releases/${_pkgname}-${pkgver}.tar.gz"
    
      17        git+https://github.com/pritambaral/hostapd-rtl871xdrv.git
    
      18        config
    
      19        hostapd.service)
    
      20sha256sums=('881d7d6a90b2428479288d64233151448f8990ab4958e0ecaca7eeb3c9db2bd7'
    
      21            'SKIP'
    
      22            '87445203a518864e704b85fa970d90940e9a5d9b401ceb802d11caab6c07a495'
    
      23            '989bc6855f44c0b360e3d4cd4a146c35b7c12f8a0ced627b4b033f58edcade8e')
    
      24validpgpkeys=('EC4AA0A991A5F2464582D52D2B6EF432EFC895FA') # Jouni Malinen
    
      25
    
      26prepare() {
    
      27  cd "${_pkgname}-${pkgver}"
    
      28  # fix include locations in main configuration file
    
      29  sed -e 's|/etc/hostapd|/etc/hostapd/hostapd|g' \
    
      30      -e 's|/var/run|/run|g' \
    
      31      -e 's|radius_attr.sqlite|/var/lib/hostapd/radius_attr.sqlite|g' \
    
      32      -e 's|hostapd.cred|/var/lib/hostapd/hostapd.cred|g' \
    
      33      -e 's|hostapd.ap_settings|/var/lib/hostapd/hostapd.ap_settings|g' \
    
      34      -e 's|hostapd_wps_pin_requests|hostapd/wps_pin_requests|g' \
    
      35      -i "${_pkgname}/${_pkgname}.conf"
    
      36  # extract license
    
      37  cat "${_pkgname}/README" |head -n47 |tail -n5 > LICENSE
    
      38  # link build configuration into place:
    
      39  # an up-to-date version of the build configuration can be found in
    
      40  # hostapd/defconfig and should be diffed with the packaged one before every
    
      41  # build
    
      42  ln -sv "${srcdir}/config" "${_pkgname}/.config"
    
      43
    
      44  # Realtek patch
    
      45  patch -Np1 -i "${srcdir}/hostapd-rtl871xdrv/rtlxdrv.patch"
    
      46
    
      47  # Enable the driver
    
      48  echo 'CONFIG_DRIVER_RTW=y' >> "${srcdir}/config"
    
      49}
    
      50
    
      51build() {
    
      52  cd "${_pkgname}-${pkgver}/hostapd"
    
      53  make
    
      54}
    
      55
    
      56package() {
    
      57  cd "${_pkgname}-${pkgver}"
    
      58  make -C "${_pkgname}" install DESTDIR="${pkgdir}" BINDIR="/usr/bin"
    
      59  # systemd service
    
      60  install -vDm 644 "../${_pkgname}.service" \
    
      61    -t "$pkgdir/usr/lib/systemd/system/"
    
      62  # license
    
      63  install -vDm 644 LICENSE -t "$pkgdir/usr/share/licenses/${_pkgname}/"
    
      64  # config
    
      65  install -d "$pkgdir/etc/hostapd"
    
      66  install -vDm 640 "${_pkgname}/${_pkgname}."{accept,conf,deny,eap_user,radius_clients,vlan,wpa_psk} \
    
      67    -t "${pkgdir}/etc/${_pkgname}"
    
      68  # docs
    
      69  install -vDm 644 "${_pkgname}/"{hostapd.sim_db,wired.conf,hlr_auc_gw.{txt,milenage_db}} \
    
      70    "${_pkgname}/"{README*,ChangeLog} \
    
      71    -t "${pkgdir}/usr/share/doc/${_pkgname}"
    
      72  # man pages
    
      73  install -vDm 644 "${_pkgname}/${_pkgname}.8" -t "$pkgdir/usr/share/man/man8/"
    
      74  install -vDm 644 "${_pkgname}/${_pkgname}_cli.1" \
    
      75    -t "$pkgdir/usr/share/man/man1/"
    
      76  # state dir
    
      77  install -vdm 750 "${pkgdir}/var/lib/${_pkgname}"
    
      78}
    
      79

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2