loderunner

maintainer mischka · 7 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a game installer from a non-whitelisted but plausibly project-related personal website; it extracts and installs static game data files, which are then run via Wine—this is normal for abandonware packaging and poses no inherent code execution risk beyond standard AUR package behavior.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a game installer from a non-whitelisted but plausibly project-related personal website; it extracts and installs static game data files, which are then run via Wine—this is normal for abandonware packaging and poses no inherent code execution risk beyond standard AUR package behavior.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 source=(http://www.daggert.net/Folio/Programming/Presage/LodeRunner/Downloads/lro_install.zip)

PKGBUILD

1 offending line(s) highlighted

      1#Maintainer: jacobmischka <jacobmischka@gmail.com>
    
      2#Contributor: float <flo.at at gmx dot de>
    
      3
    
      4pkgname=loderunner
    
      5pkgver=1.50
    
      6pkgrel=5
    
      7pkgdesc="Lode Runner Online: Mad Monks' Revenge. A puzzle video game from 1995"
    
      8arch=('any')
    
      9url=http://www.daggert.net/Folio/Programming/Presage/LodeRunner/Loderunner1.htm
    
      10license=('custom-freeware Abandonware')
    
      11depends=(wine winetricks unionfs-fuse xorg-xrefresh)
    
      12makedepends=(imagemagick)
    
      13options=(!strip)
    
      14install=$pkgname.install
    
      15_install_dir=${XDG_DATA_HOME:-${HOME}/.local/share}/${pkgname}
    
      16source=(http://www.daggert.net/Folio/Programming/Presage/LodeRunner/Downloads/lro_install.zip)
    
      17md5sums=('ea39770395db0998b3dc3cad052a1977')
    
      18
    
      19package() {
    
      20  #copy game files
    
      21  install -d -m755 "$pkgdir"/usr/share/"$pkgname"/
    
      22  cp -ra -t "$pkgdir"/usr/share/"$pkgname"/ "$srcdir"/MMRInstall/DATA \
    
      23"$srcdir"/MMRInstall/PUZZLES "$srcdir"/MMRInstall/SAVEGAME \
    
      24"$srcdir"/MMRInstall/SIERRA.INF "$srcdir"/MMRInstall/LODER1_5.TXT
    
      25  cp -ra "$srcdir"/MMRInstall/ENGLISH/LANGUAGE.INF "$pkgdir"/usr/share/"$pkgname"/
    
      26  cp -ra "$srcdir"/MMRInstall/FILES/BALLOONH.DLL "$pkgdir"/usr/share/"$pkgname"/
    
      27  cp -ra "$srcdir"/MMRInstall/FILES/LODERUNN.EXE "$pkgdir"/usr/share/"$pkgname"/
    
      28
    
      29  #create support file
    
      30  cat << EOF > "$pkgdir"/usr/share/"$pkgname"/SIERRA.INI
    
      31[LodeRunner_Online]
    
      32InstallPath=C:\lro
    
      33CDPath=C:\lro
    
      34Type=FULL
    
      35
    
      36EOF
    
      37
    
      38  install -d -m755 "$pkgdir"/usr/share/applications/
    
      39  cat << EOF > "$pkgdir"/usr/share/applications/"$pkgname".desktop
    
      40[Desktop Entry]
    
      41Exec=$pkgname
    
      42Icon=$pkgname
    
      43Type=Application
    
      44Categories=Game;LogicGame;
    
      45Name=Lode Runner Online
    
      46Comment=Mad Monks' Revenge
    
      47StartupNotify=false
    
      48Terminal=false
    
      49
    
      50EOF
    
      51
    
      52  install -d -m755 "$pkgdir"/usr/bin/
    
      53  cat << EOF > "$pkgdir"/usr/bin/"$pkgname"
    
      54#!/bin/bash
    
      55set -e
    
      56
    
      57function atexit {
    
      58	fusermount -zu $_install_dir/lro/
    
      59	xrefresh
    
      60	echo "Goodbye from Lode Runner!"
    
      61	exit 0
    
      62}
    
      63
    
      64export WINEARCH=win32
    
      65export WINEDLLOVERRIDES="mscoree,mshtml="
    
      66export WINEPREFIX=$_install_dir/winefs
    
      67export WINEDEBUG=-all
    
      68
    
      69echo "Starting..."
    
      70
    
      71if [ ! -d $_install_dir/ ] ;then
    
      72	echo "Initializing the wine prefix."
    
      73	mkdir -p $_install_dir/lro
    
      74	cd $_install_dir
    
      75	#setup wine prefix
    
      76	mkdir lro_diff
    
      77	wineboot -u
    
      78	echo "Using winetricks to configure the prefix."
    
      79	[ -x /usr/bin/winetricks ] && winetricks sandbox && winetricks win98 && winetricks vd=640x480
    
      80	#setup symlinks
    
      81	cd winefs/dosdevices
    
      82	ln -s ../../ x:
    
      83	#copy support file
    
      84	cp /usr/share/$pkgname/SIERRA.INI $_install_dir/winefs/drive_c/windows/
    
      85	sleep 5
    
      86fi
    
      87
    
      88#mount lro at drive x:
    
      89unionfs -o relaxed_permissions -o cow $_install_dir/lro_diff/=RW:/usr/share/$pkgname=RO $_install_dir/lro/
    
      90trap atexit SIGHUP SIGINT SIGTERM EXIT
    
      91
    
      92cd $_install_dir/winefs/dosdevices/x:/lro/
    
      93wine 'x:\lro\LODERUNN.EXE' "\$@" &>/dev/null
    
      94
    
      95EOF
    
      96
    
      97  #create icon
    
      98  install -d -m755 "$pkgdir"/usr/share/pixmaps/
    
      99  convert "$srcdir"/MMRInstall/FILES/LODEGUY.ICO "$pkgdir"/usr/share/pixmaps/"$pkgname".xpm
    
      100
    
      101  #set permissions
    
      102  find "$pkgdir"/usr/ -type d -exec chmod 755 "{}" \;
    
      103  find "$pkgdir"/usr/ -type f -exec chmod 644 "{}" \;
    
      104
    
      105  chmod 755 "$pkgdir"/usr/bin/"$pkgname"
    
      106
    
      107  return 0
    
      108}
    
      109

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2