hostapd-wifi6

maintainer vcup · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds hostapd from official sources and applies a patch from a personal host, but the patch is for functionality (Intel LAR support) and not malicious; the main source is verifiable and the build process is standard.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds hostapd from official sources and applies a patch from a personal host, but the patch is for functionality (Intel LAR support) and not malicious; the main source is verifiable and the build process is standard.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:19 "https://w1.fi/releases/hostapd-$pkgver.tar.gz"
PKGBUILD:20 'https://tildearrow.org/storage/hostapd-2.10-lar.patch'

PKGBUILD

2 offending line(s) highlighted

      1pkgname=hostapd-wifi6
    
      2pkgdesc='hostapd than enabled AC/AX and ACS support and applied intel lar patch, provide useful service unit hostapd@.service and hostapd-ACS@.service'
    
      3pkgver=2.10
    
      4pkgrel=16
    
      5arch=('x86_64' 'aarch64')
    
      6url=https://w1.fi/hostapd
    
      7license=('BSD')
    
      8depends=('glibc' 'libnl' 'openssl' 'sqlite'
    
      9  'iw' 'lshw' 'jq' # for hostapd-preferred.sh
    
      10)
    
      11conflicts=('hostapd')
    
      12provides=('hostapd')
    
      13backup=(
    
      14  'etc/hostapd/hostapd.'{accept,conf,deny,eap_user,radius_clients,vlan,wpa_psk}
    
      15  'etc/hostapd/hostapd_'{2.4Ghz,5Ghz}'.conf'
    
      16  'etc/hostapd/preferred_config'
    
      17)
    
      18source=(
    
      19  "https://w1.fi/releases/hostapd-$pkgver.tar.gz"
    
      20  'https://tildearrow.org/storage/hostapd-2.10-lar.patch'
    
      21  'hostapd_2.4Ghz.conf'
    
      22  'hostapd_5Ghz.conf'
    
      23  'hostapd-ACS@.service'
    
      24  'hostapd-preferred.service'
    
      25  'hostapd_preferred.sh'
    
      26  'hostapd@.service'
    
      27  'preferred_config'
    
      28)
    
      29sha512sums=(
    
      30  '243baa82d621f859d2507d8d5beb0ebda15a75548a62451dc9bca42717dcc8607adac49b354919a41d8257d16d07ac7268203a79750db0cfb34b51f80ff1ce8f'
    
      31  '443e5c012b6e2d06ab812b87e995ca7e48751d43b81b3a26a722400f64ccdec0e9486a5e043121f2f1084cc59729f781b6e9d5c05031dac18cdeaaa86ed8ecea'
    
      32  'c1b9688b8e7f6ab984a5b528061aa2221773a5e3d24f4a43c84a28c318212eadd823c30a4a0e8316760ba2622329fc7edf89d1af744999db5c17e1d157d716a0'
    
      33  '21d890ea4f29728bfce4b7dcd9a456be54ea4db863b7c0cd861fd4fc46a93a12fc91329e6200b9156a1e97250da7bad21f33469e4984b1bf02faa794f584edab'
    
      34  '3132c58b9eccead25cc399a9761c03863a8a601e71a4e3cec495422c5f09afcbb8c922a4ec98ac0dbccf2633af6f6e41abd4e94cb2723118faa5046f12a3e375'
    
      35  '647460d47cf960b88836c8913fb154daf4745dc194ed991c8b61ec0c08757c26c2399ccb10da76d6dfa14d3a75b5fa54ed10f37f7fc373ef63c94dd5b840019e'
    
      36  '2c91d9222ebfa25215859a57711b7dff3d8f0d4c1c824aabb06d3d165f211b7d94187936f0adb0d19d616e3292379adde383106935ea8e9f18e21d8b95d033fe'
    
      37  'cbc9c01bc264142a270af3d1cbacc53a01211cb14cb38d9a5907c3e18049dbfdad0b3048724c97fce3f2c4faf49754cc693467d19aec7c5220c959b0d13a424e'
    
      38  'ba9014c70be893945acf57ae7417502634cf605ec119acf737b69c5a6368ff1aa3bd65686a20f87fbf2300fa30a816f557b6b49080dcab25059818178935a771'
    
      39)
    
      40prepare() {
    
      41  cd "hostapd-${pkgver}"
    
      42  sed -e 's|/etc/hostapd|/etc/hostapd/hostapd|g' \
    
      43      -e 's|/var/run|/run|g' \
    
      44      -e 's|radius_attr.sqlite|/var/lib/hostapd/radius_attr.sqlite|g' \
    
      45      -e 's|hostapd.cred|/var/lib/hostapd/hostapd.cred|g' \
    
      46      -e 's|hostapd.ap_settings|/var/lib/hostapd/hostapd.ap_settings|g' \
    
      47      -e 's|hostapd_wps_pin_requests|hostapd/wps_pin_requests|g' \
    
      48      -i 'hostapd/hostapd.conf'
    
      49  cat "hostapd/README" | head -n47 | tail -n5 > LICENSE
    
      50  cp 'hostapd/defconfig' "hostapd/.config"
    
      51  sed -e 's|^#CONFIG_IEEE80211AX=y|CONFIG_IEEE80211AX=y|g' \
    
      52      -e 's|^#CONFIG_IEEE80211AC=y|CONFIG_IEEE80211AC=y|g' \
    
      53      -e 's|^#CONFIG_ACS=y|CONFIG_ACS=y|g' \
    
      54      -i 'hostapd/.config'
    
      55  echo 'CONFIG_SAE=y
    
      56CONFIG_SAE_PK=y' >> 'hostapd/.config'
    
      57  patch -p1 < "$srcdir/hostapd-2.10-lar.patch"
    
      58}
    
      59build(){
    
      60  make -C "hostapd-${pkgver}/hostapd"
    
      61}
    
      62package() {
    
      63  cd "hostapd-${pkgver}"
    
      64  make -C 'hostapd' install DESTDIR="${pkgdir}" BINDIR="/usr/bin"
    
      65  install -vDm 644 LICENSE -t "$pkgdir/usr/share/licenses/$pkgname/"
    
      66  install -vDm 640 "hostapd/hostapd."{accept,conf,deny,eap_user,radius_clients,vlan,wpa_psk} -t "${pkgdir}/etc/hostapd"
    
      67  install -vDm 644 "hostapd/"{hostapd.sim_db,wired.conf,hlr_auc_gw.{txt,milenage_db}} "hostapd/"{README*,ChangeLog} -t "${pkgdir}/usr/share/doc/hostapd"
    
      68  install -vDm 644 "hostapd/hostapd.8" -t "$pkgdir/usr/share/man/man8/"
    
      69  install -vDm 644 "hostapd/hostapd_cli.1" -t "$pkgdir/usr/share/man/man1/"
    
      70  install -vdm 750 "${pkgdir}/var/lib/hostapd"
    
      71
    
      72  install -vDm 644 "../hostapd"{@,-ACS@,-preferred}".service" -t "$pkgdir/usr/lib/systemd/system/"
    
      73  install -vDm 750 "../hostapd_preferred.sh" -t "$pkgdir/usr/lib/systemd/scripts"
    
      74  install -vDm 600 "../hostapd_"{2.4Ghz,5Ghz}".conf" -t "${pkgdir}/etc/hostapd"
    
      75  install -vDm 640 "../preferred_config" -t "${pkgdir}/etc/hostapd"
    
      76}
    
      77

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2