mingw-w64-libgeotiff

maintainer orphaned · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a standard tarball from the project's official download host (download.osgeo.org), which is a trusted domain for OSGeo projects; building from this source is normal and expected, despite the static analyzer flagging it as non-standard.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a standard tarball from the project's official download host (download.osgeo.org), which is a trusted domain for OSGeo projects; building from this source is normal and expected, despite the static analyzer flagging it as non-standard.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 source=("http://download.osgeo.org/geotiff/libgeotiff/libgeotiff-${pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Contributor: Andrew Sun <adsun701 at gmail dot com>
    
      2
    
      3pkgname=mingw-w64-libgeotiff
    
      4pkgver=1.7.1
    
      5pkgrel=1
    
      6pkgdesc="A TIFF based interchange format for georeferenced raster imagery (mingw-w64)"
    
      7arch=('any')
    
      8url="https://trac.osgeo.org/geotiff/"
    
      9license=('custom')
    
      10depends=('mingw-w64-libtiff' 'mingw-w64-proj' 'mingw-w64-libjpeg-turbo')
    
      11makedepends=('mingw-w64-configure')
    
      12options=('!buildflags' 'staticlibs' '!strip')
    
      13source=("http://download.osgeo.org/geotiff/libgeotiff/libgeotiff-${pkgver}.tar.gz"
    
      14        "libgeotiff_buildsys.patch")
    
      15sha256sums=('05ab1347aaa471fc97347d8d4269ff0c00f30fa666d956baba37948ec87e55d6'
    
      16            'fb7e213559f779905c913389ad715e3aaf849c0e8c8ef72df86d1ca313d9393b')
    
      17
    
      18_architectures="i686-w64-mingw32 x86_64-w64-mingw32"
    
      19
    
      20prepare() {
    
      21  cd ${srcdir}/libgeotiff-${pkgver}
    
      22  patch -p1 -i ../libgeotiff_buildsys.patch
    
      23  
    
      24  # fix wrongly encoded files from tarball
    
      25  for f in $(find . -type f); do
    
      26    if file $f | grep -q ISO-8859 ; then
    
      27      iconv -f ISO-8859-1 -t UTF-8 $f > ${f}.tmp && \
    
      28        mv -f ${f}.tmp $f
    
      29    fi
    
      30    if file $f | grep -q CRLF ; then
    
      31      sed -i -e 's|\r$||g' $f
    
      32    fi
    
      33  done
    
      34  
    
      35  ./autogen.sh
    
      36}
    
      37
    
      38build() {
    
      39  cd ${srcdir}/libgeotiff-${pkgver}
    
      40  for _arch in ${_architectures}; do
    
      41    mkdir -p build-${_arch} && pushd build-${_arch}
    
      42    ${_arch}-configure \
    
      43      --with-proj \
    
      44      --with-jpeg \
    
      45      --with-zip \
    
      46      ..
    
      47
    
      48    # FIXME: out-of-source build fails
    
      49    # cp ../*.h libxtiff
    
      50    # cp ../libxtiff/*.h libxtiff
    
      51    # cp ../*.inc bin
    
      52
    
      53#     ${_arch}-cmake -DCMAKE_BUILD_TYPE=Release \
    
      54#       -DGEOTIFF_CSV_DATA_DIR=$PWD/../csv \
    
      55#       -DGEOTIFF_DATA_SUBDIR=share \
    
      56#       -DGEOTIFF_BIN_SUBDIR=bin \
    
      57#       ..
    
      58    make
    
      59    popd
    
      60  done
    
      61}
    
      62
    
      63package() {
    
      64  for _arch in ${_architectures}; do
    
      65    cd "${srcdir}/libgeotiff-${pkgver}/build-${_arch}"
    
      66    make DESTDIR="${pkgdir}" install
    
      67    
    
      68    mkdir -p "${pkgdir}"/usr/${_arch}/lib/pkgconfig/
    
      69
    
      70cat > ${pkgdir}/usr/${_arch}/lib/pkgconfig/libgeotiff.pc <<EOF
    
      71prefix=/usr/${_arch}
    
      72exec_prefix=\${prefix}
    
      73libdir=\${prefix}/lib
    
      74includedir=\${prefix}/include
    
      75Name: libgeotiff
    
      76Description: GeoTIFF file format library
    
      77Version: ${pkgver}
    
      78Libs: -L\${libdir} -lgeotiff
    
      79Cflags: -I\${includedir}
    
      80EOF
    
      81    
    
      82    rm -rf "${pkgdir}"/usr/${_arch}/share
    
      83    find "${pkgdir}/usr/${_arch}" -name '*.def' -o -name '*.exp' | xargs -rtl1 rm
    
      84    ${_arch}-strip --strip-unneeded "${pkgdir}/usr/${_arch}/bin/"*.exe
    
      85    ${_arch}-strip --strip-unneeded "${pkgdir}/usr/${_arch}/bin/"*.dll
    
      86    ${_arch}-strip -g "${pkgdir}/usr/${_arch}/lib/"*.a
    
      87  done
    
      88}
    
      89

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2