huawei-pixlab-series

maintainer xuwd1 · 3 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a driver archive from a Huawei domain for building a printer driver; the source is from an official vendor host, and the payload consists of non-executable driver files and resources, posing minimal risk even if the host were compromised.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a driver archive from a Huawei domain for building a printer driver; the source is from an official vendor host, and the payload consists of non-executable driver files and resources, posing minimal risk even if the host were compromised.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:27 "${pkgname}-${pkgver}.zip::https://consumer-tkbdownload.huawei.com/ctkbfm/servlet/download/downloadServlet/H4sIAAAAAAAAAD2Qy2rDMBRE_0XrOFzJV7LUVR3LgmyaQlK6DFIsNwLHMX40aUr_vXIxXc4whxnmm0yD7w9fnSdPhJEVqa63dpEiyjo0_sVeZnme7M2HpAv3xrokUsEPR7qGRIrjXeD6EboFeLXjOQIKUWW1ghPnNTIUTiisraMsrYRzMLe58NhWMbrfPb8DgECQs33qvR3DtT2EuZkKUJgCAo2RFRnCR2vHqZ835UWaKwaKAxqAHDmTUgsAvlHcsAJLjao0qAsORpa5ASyZ2jDIMp1mVMvY9WmbUL39nzD2k__btZyw35GfX1-X_kwlAQAA.zip"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: david <xuwd1@hotmail.com>
    
      2pkgname=huawei-pixlab-series
    
      3pkgver=1.0_86
    
      4pkgrel=1
    
      5epoch=
    
      6pkgdesc="Driver support for HUAWEI pixlab series printers"
    
      7arch=('x86_64')
    
      8url="https://consumer.huawei.com/cn/support/printers/pixlab-x1/"
    
      9license=('custom')
    
      10groups=()
    
      11depends=(
    
      12	cups cups-filters cups-pdf dbus
    
      13)
    
      14makedepends=(
    
      15	rpm-tools
    
      16)
    
      17checkdepends=()
    
      18optdepends=()
    
      19provides=()
    
      20conflicts=()
    
      21replaces=()
    
      22backup=()
    
      23options=()
    
      24install=
    
      25changelog=
    
      26source=(
    
      27	"${pkgname}-${pkgver}.zip::https://consumer-tkbdownload.huawei.com/ctkbfm/servlet/download/downloadServlet/H4sIAAAAAAAAAD2Qy2rDMBRE_0XrOFzJV7LUVR3LgmyaQlK6DFIsNwLHMX40aUr_vXIxXc4whxnmm0yD7w9fnSdPhJEVqa63dpEiyjo0_sVeZnme7M2HpAv3xrokUsEPR7qGRIrjXeD6EboFeLXjOQIKUWW1ghPnNTIUTiisraMsrYRzMLe58NhWMbrfPb8DgECQs33qvR3DtT2EuZkKUJgCAo2RFRnCR2vHqZ835UWaKwaKAxqAHDmTUgsAvlHcsAJLjao0qAsORpa5ASyZ2jDIMp1mVMvY9WmbUL39nzD2k__btZyw35GfX1-X_kwlAQAA.zip"
    
      28)
    
      29noextract=()
    
      30sha256sums=(
    
      31	'e498bb9066d5fab236511cf6809f23abf40485e32b36d3d06967d4653dfa0776'
    
      32)
    
      33validpgpkeys=()
    
      34
    
      35prepare() {
    
      36	echo " -> Cleaning HUAWEI's mind-blowing directory structure"
    
      37	_hypen_pkgver=$(echo ${pkgver}|sed 's/_/-/g')
    
      38	unzip ${srcdir}/${pkgname}_${_hypen_pkgver}_x64/${pkgname}_${_hypen_pkgver}_x64.zip 2>&1 > /dev/null
    
      39	mv ${srcdir}/${pkgname}_${_hypen_pkgver}_x64/x86_64 ${srcdir}/${pkgname}-${pkgver}
    
      40	cd ${pkgname}-${pkgver}
    
      41	rpm2archive *.rpm 
    
      42	tar -xzf *.rpm.tgz
    
      43	cd ${srcdir}
    
      44	echo " -> Now it's much better"
    
      45}
    
      46
    
      47
    
      48package() {
    
      49	echo " -> Installing"
    
      50	# cups driver and hwthrvop gui app
    
      51	mkdir -p ${pkgdir}/usr/share
    
      52	cp -r ${srcdir}/${pkgname}-${pkgver}/usr/share/cups  ${pkgdir}/usr/share
    
      53	cp -r ${srcdir}/${pkgname}-${pkgver}/usr/share/hwthrvop  ${pkgdir}/usr/share
    
      54	# cups filter and hwthrvop lib
    
      55	mkdir -p ${pkgdir}/usr/lib
    
      56	cp -r ${srcdir}/${pkgname}-${pkgver}/usr/lib/cups  ${pkgdir}/usr/lib
    
      57	cp -r ${srcdir}/${pkgname}-${pkgver}/usr/lib/libhwthr*  ${pkgdir}/usr/lib
    
      58	# udev rules
    
      59	mkdir -p ${pkgdir}/etc/udev/rules.d
    
      60	cp ${srcdir}/${pkgname}-${pkgver}/etc/udev/rules.d/* ${pkgdir}/etc/udev/rules.d
    
      61
    
      62
    
      63
    
      64	# hwthrvop pixmaps and desktop entry
    
      65	mkdir -p ${pkgdir}/usr/share/pixmaps
    
      66	cp ${srcdir}/${pkgname}-${pkgver}/usr/share/pixmaps/* ${pkgdir}/usr/share/pixmaps
    
      67	mkdir -p ${pkgdir}/usr/share/applications
    
      68	install -Dm644 ${srcdir}/${pkgname}-${pkgver}/usr/share/applications/hwthrvop.desktop ${pkgdir}/usr/share/applications/hwthrvop.desktop
    
      69	sed -i 's|^Exec=/usr/share/hwthrvop/hwthrvop.sh|Exec=env QT_AUTO_SCREEN_SCALE_FACTOR=1 /usr/share/hwthrvop/hwthrvop.sh|' ${pkgdir}/usr/share/applications/hwthrvop.desktop
    
      70
    
      71	
    
      72	#license
    
      73	mkdir -p ${pkgdir}/usr/share/licenses/${pkgname}
    
      74	cp -r ${srcdir}/${pkgname}-${pkgver}/License/* ${pkgdir}/usr/share/licenses/${pkgname}/
    
      75
    
      76
    
      77	echo " -> Finished"
    
      78}
    
      79
    
      80
    
      81

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2