libgphobos-git

LOW

maintainer FFY00 16 votes base gdc-git scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source from isl.gforge.inria.fr is a standard, reputable academic research host for the ISL library, and the rest of the build uses official GCC and GDC project repositories; this is a normal source build with no execution of untrusted remote code.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source from isl.gforge.inria.fr is a standard, reputable academic research host for the ISL library, and the rest of the build uses official GCC and GDC project repositories; this is a normal source build with no execution of untrusted remote code.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:26 "http://isl.gforge.inria.fr/isl-$_islver.tar.bz2"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Filipe Laíns (FFY-01) <lains@archlinux.org>
    
      2# Maintainer: Daniel Kozak (kozzi) <kozzi11@gmail.com>
    
      3# Contributor: Mihails Strasuns <public@dicebot.lv>
    
      4# Contributor: Moritz Maxeiner <moritz@ucworks.org>
    
      5# Contributor: Jerome Berger <jeberger@free.fr>
    
      6# Contributor: Jesus Alvarez <jeezusjr@gmail.com>
    
      7# Contributor: Allan McRae <allan@archlinux.org>
    
      8# Contributor: Elijah Stone <elronnd@elronnd.net>
    
      9
    
      10pkgbase=gdc-git
    
      11pkgname=(gdc-git libgphobos-git)
    
      12_gccver=10.0.0
    
      13pkgver=10.0.0+v2.086.0
    
      14
    
      15_branch=ibuclaw/gdc # Change here! pkgver/_gccver/_d_ver will be automatically updated.
    
      16_islver=0.21 # Change here!
    
      17_d_ver=''
    
      18pkgrel=2
    
      19arch=('x86_64' 'i686')
    
      20license=('GPL3')
    
      21url="https://gcc.gnu.org/"
    
      22pkgdesc="GCC based D compiler"
    
      23groups=('dlang')
    
      24makedepends=('git' 'gdc')
    
      25source=(
    
      26        "http://isl.gforge.inria.fr/isl-$_islver.tar.bz2"
    
      27        "gcc::git+https://github.com/gcc-mirror/gcc.git#branch=$_branch"
    
      28        'git+https://github.com/D-Programming-GDC/GDMD.git')
    
      29sha256sums=('d18ca11f8ad1a39ab6d03d3dcb3365ab416720fcb65b42d69f34f51bf0a0e859'
    
      30            'SKIP'
    
      31            'SKIP')
    
      32
    
      33pkgver() {
    
      34  if [ -f gcc/gcc/d/dmd/VERSION ]; then
    
      35    _d_ver="+$(cat gcc/gcc/d/dmd/VERSION | sed 's|\"||g')"
    
      36  fi
    
      37  echo "$(cat gcc/gcc/BASE-VER)$_d_ver"
    
      38}
    
      39
    
      40prepare() {
    
      41  [[ ! -d gcc ]] && ln -s gcc-$_gccver/+/-} gcc
    
      42  cd gcc
    
      43
    
      44  [[ ! -d isl ]] && ln -s ../isl-${_islver} isl
    
      45
    
      46  # Do not run fixincludes
    
      47  sed -i 's@\./fixinc\.sh@-c true@' gcc/Makefile.in
    
      48
    
      49  # Arch Linux installs x86_64 libraries /lib
    
      50  sed -i '/m64=/s/lib64/lib/' gcc/config/i386/t-linux64
    
      51
    
      52  # hack! - some configure tests for header files using "$CPP $CPPFLAGS"
    
      53  sed -i "/ac_cpp=/s/\$CPPFLAGS/\$CPPFLAGS -O2/" {libiberty,gcc}/configure
    
      54
    
      55  mkdir -p "$srcdir/gcc-build"
    
      56
    
      57}
    
      58
    
      59build() {
    
      60  cd gcc-build
    
      61
    
      62  # using -pipe causes spurious test-suite failures
    
      63  # http://gcc.gnu.org/bugzilla/show_bug.cgi?id=48565
    
      64  CFLAGS=${CFLAGS/-pipe/}
    
      65  CXXFLAGS=${CXXFLAGS/-pipe/}
    
      66
    
      67    "$srcdir/gcc/configure" --prefix=/usr \
    
      68      --libdir=/usr/lib \
    
      69      --libexecdir=/usr/lib \
    
      70      --mandir=/usr/share/man \
    
      71      --infodir=/usr/share/info \
    
      72      --with-bugurl=https://gcc.gnu.org/bugzilla/ \
    
      73      --with-pkgversion="GDC ${pkgver%+*} based on D ${pkgver#*+} built with ISL $_islver for Arch Linux" \
    
      74      --with-system-zlib \
    
      75      --enable-languages=d \
    
      76      --enable-static \
    
      77      --enable-threads=posix \
    
      78      --with-isl \
    
      79      --enable-__cxa_atexit \
    
      80      --disable-libunwind-exceptions \
    
      81      --enable-clocale=gnu \
    
      82      --disable-libstdcxx-pch \
    
      83      --disable-libssp \
    
      84      --enable-gnu-unique-object \
    
      85      --enable-linker-build-id \
    
      86      --enable-lto \
    
      87      --enable-plugin \
    
      88      --enable-install-libiberty \
    
      89      --with-linker-hash-style=gnu \
    
      90      --enable-gnu-indirect-function \
    
      91      --disable-multilib \
    
      92      --disable-werror \
    
      93      --disable-bootstrap \
    
      94      --enable-checking=release \
    
      95      --enable-default-pie \
    
      96      --enable-default-ssp \
    
      97      --enable-cet=auto \
    
      98      --with-target-system-zlib=yes
    
      99
    
      100  make
    
      101}
    
      102
    
      103package_gdc-git() {
    
      104  pkgdesc="Compiler for D programming language which uses gcc backend"
    
      105  depends=('gcc' 'perl' 'binutils' 'libgphobos')
    
      106  provides=("d-compiler=${pkgver#*+}" 'gdc')
    
      107  conflicts=('gdc' 'gcc-gdc')
    
      108
    
      109  # Binaries
    
      110  install -Dm 755 gcc-build/gcc/gdc "$pkgdir"/usr/bin/gdc
    
      111  install -Dm 755 gcc-build/gcc/d21 "$pkgdir"/usr/lib/gcc/$CHOST/${pkgver%+*}/d21
    
      112  install -Dm 755 GDMD/dmd-script "$pkgdir"/usr/bin/gdmd
    
      113
    
      114  cd gcc-build
    
      115  make -C lto-plugin DESTDIR="$pkgdir" install
    
      116  make -C $CHOST/libgcc DESTDIR="$pkgdir" install
    
      117  rm -f "$pkgdir"/usr/lib{,32}/libgcc_s.so*
    
      118
    
      119  # Doc
    
      120  install -Dm 644 "$srcdir"/GDMD/dmd-script.1 "$pkgdir"/usr/share/man/man1/gdmd.1
    
      121}
    
      122
    
      123
    
      124package_libgphobos-git() {
    
      125  pkgdesc="Standard library for D programming language, GDC port"
    
      126  provides=('d-runtime' 'd-stdlib' 'libgphobos')
    
      127  conflicts=('libgphobos' 'gcc-gdc')
    
      128  options=('staticlibs')
    
      129
    
      130  cd "$srcdir"/gcc-build
    
      131  make -C $CHOST/libphobos DESTDIR="$pkgdir" install
    
      132
    
      133  mkdir -p -m 755 "$pkgdir"/usr/include/dlang
    
      134
    
      135  ln -s /usr/lib/gcc/$CHOST/${pkgver%+*}/include/d "$pkgdir"/usr/include/dlang/gdc
    
      136
    
      137  if [ -d "$pkgdir"/usr/lib64 ]; then
    
      138    mv "$pkgdir"/usr/lib64/* "$pkgdir"/usr/lib
    
      139    rmdir "$pkgdir"/usr/lib64
    
      140  fi
    
      141}
    
      142

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2