loderunner
LOW
maintainer mischka
7 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a game installer from a non-whitelisted but plausibly project-related personal website; it extracts and installs static game data files, which are then run via Wine—this is normal for abandonware packaging and poses no inherent code execution risk beyond standard AUR package behavior.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a game installer from a non-whitelisted but plausibly project-related personal website; it extracts and installs static game data files, which are then run via Wine—this is normal for abandonware packaging and poses no inherent code execution risk beyond standard AUR package behavior.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:16
source=(http://www.daggert.net/Folio/Programming/Presage/LodeRunner/Downloads/lro_install.zip)
PKGBUILD
1 offending line(s) highlighted
1
#Maintainer: jacobmischka <jacobmischka@gmail.com>
2
#Contributor: float <flo.at at gmx dot de>
3
4
pkgname=loderunner
5
pkgver=1.50
6
pkgrel=5
7
pkgdesc="Lode Runner Online: Mad Monks' Revenge. A puzzle video game from 1995"
8
arch=('any')
9
url=http://www.daggert.net/Folio/Programming/Presage/LodeRunner/Loderunner1.htm
10
license=('custom-freeware Abandonware')
11
depends=(wine winetricks unionfs-fuse xorg-xrefresh)
12
makedepends=(imagemagick)
13
options=(!strip)
14
install=$pkgname.install
15
_install_dir=${XDG_DATA_HOME:-${HOME}/.local/share}/${pkgname}
16
source=(http://www.daggert.net/Folio/Programming/Presage/LodeRunner/Downloads/lro_install.zip)
17
md5sums=('ea39770395db0998b3dc3cad052a1977')
18
19
package() {
20
#copy game files
21
install -d -m755 "$pkgdir"/usr/share/"$pkgname"/
22
cp -ra -t "$pkgdir"/usr/share/"$pkgname"/ "$srcdir"/MMRInstall/DATA \
23
"$srcdir"/MMRInstall/PUZZLES "$srcdir"/MMRInstall/SAVEGAME \
24
"$srcdir"/MMRInstall/SIERRA.INF "$srcdir"/MMRInstall/LODER1_5.TXT
25
cp -ra "$srcdir"/MMRInstall/ENGLISH/LANGUAGE.INF "$pkgdir"/usr/share/"$pkgname"/
26
cp -ra "$srcdir"/MMRInstall/FILES/BALLOONH.DLL "$pkgdir"/usr/share/"$pkgname"/
27
cp -ra "$srcdir"/MMRInstall/FILES/LODERUNN.EXE "$pkgdir"/usr/share/"$pkgname"/
28
29
#create support file
30
cat << EOF > "$pkgdir"/usr/share/"$pkgname"/SIERRA.INI
31
[LodeRunner_Online]
32
InstallPath=C:\lro
33
CDPath=C:\lro
34
Type=FULL
35
36
EOF
37
38
install -d -m755 "$pkgdir"/usr/share/applications/
39
cat << EOF > "$pkgdir"/usr/share/applications/"$pkgname".desktop
40
[Desktop Entry]
41
Exec=$pkgname
42
Icon=$pkgname
43
Type=Application
44
Categories=Game;LogicGame;
45
Name=Lode Runner Online
46
Comment=Mad Monks' Revenge
47
StartupNotify=false
48
Terminal=false
49
50
EOF
51
52
install -d -m755 "$pkgdir"/usr/bin/
53
cat << EOF > "$pkgdir"/usr/bin/"$pkgname"
54
#!/bin/bash
55
set -e
56
57
function atexit {
58
fusermount -zu $_install_dir/lro/
59
xrefresh
60
echo "Goodbye from Lode Runner!"
61
exit 0
62
}
63
64
export WINEARCH=win32
65
export WINEDLLOVERRIDES="mscoree,mshtml="
66
export WINEPREFIX=$_install_dir/winefs
67
export WINEDEBUG=-all
68
69
echo "Starting..."
70
71
if [ ! -d $_install_dir/ ] ;then
72
echo "Initializing the wine prefix."
73
mkdir -p $_install_dir/lro
74
cd $_install_dir
75
#setup wine prefix
76
mkdir lro_diff
77
wineboot -u
78
echo "Using winetricks to configure the prefix."
79
[ -x /usr/bin/winetricks ] && winetricks sandbox && winetricks win98 && winetricks vd=640x480
80
#setup symlinks
81
cd winefs/dosdevices
82
ln -s ../../ x:
83
#copy support file
84
cp /usr/share/$pkgname/SIERRA.INI $_install_dir/winefs/drive_c/windows/
85
sleep 5
86
fi
87
88
#mount lro at drive x:
89
unionfs -o relaxed_permissions -o cow $_install_dir/lro_diff/=RW:/usr/share/$pkgname=RO $_install_dir/lro/
90
trap atexit SIGHUP SIGINT SIGTERM EXIT
91
92
cd $_install_dir/winefs/dosdevices/x:/lro/
93
wine 'x:\lro\LODERUNN.EXE' "\$@" &>/dev/null
94
95
EOF
96
97
#create icon
98
install -d -m755 "$pkgdir"/usr/share/pixmaps/
99
convert "$srcdir"/MMRInstall/FILES/LODEGUY.ICO "$pkgdir"/usr/share/pixmaps/"$pkgname".xpm
100
101
#set permissions
102
find "$pkgdir"/usr/ -type d -exec chmod 755 "{}" \;
103
find "$pkgdir"/usr/ -type f -exec chmod 644 "{}" \;
104
105
chmod 755 "$pkgdir"/usr/bin/"$pkgname"
106
107
return 0
108
}
109
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |