mingw-w64-libtheora

maintainer dinavanengeland · 5 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a legitimate project release from the official xiph.org domain, which is plausibly the project's own infrastructure, and the package builds from source without executing untrusted binaries.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a legitimate project release from the official xiph.org domain, which is plausibly the project's own infrastructure, and the package builds from source without executing untrusted binaries.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:11 source=("http://downloads.xiph.org/releases/theora/libtheora-${pkgver}.tar.bz2"

PKGBUILD

1 offending line(s) highlighted

      1pkgname=mingw-w64-libtheora
    
      2pkgver=1.1.1
    
      3pkgrel=9
    
      4pkgdesc="An open video codec developed by the Xiph.org (mingw-w64)"
    
      5arch=('any')
    
      6url="https://xiph.org"
    
      7license=("BSD")
    
      8makedepends=('mingw-w64-configure')
    
      9depends=('mingw-w64-crt' 'mingw-w64-libvorbis')
    
      10options=('!strip' '!buildflags' 'staticlibs')
    
      11source=("http://downloads.xiph.org/releases/theora/libtheora-${pkgver}.tar.bz2"
    
      12        libtheora-1.1.1-fix-pp_sharp_mod-calc.patch
    
      13        libtheora-1.1.1-libpng16.patch
    
      14        libtheora-1.1.1-libm.patch
    
      15        libtheora-1.1.1-libadd.patch
    
      16        mingw-libtheora-1.1.1-rint.patch)
    
      17md5sums=('292ab65cedd5021d6b7ddd117e07cd8e'
    
      18         '0ed7f7af622c2d675a9809980d8aad71'
    
      19         '08edd81c7a1be2c4edfd2cd3c112a8c6'
    
      20         'f5f96fedc1a7a23e0530298b045c7101'
    
      21         '4357cded33bc3397b4123790e4967d24'
    
      22         '54c626ca201f51ebd9d97595f57a25b4')
    
      23
    
      24_architectures="i686-w64-mingw32 x86_64-w64-mingw32"
    
      25
    
      26prepare() {
    
      27  cd "${srcdir}/libtheora-$pkgver"
    
      28
    
      29  # fedora patches
    
      30  patch -p1 -i "${srcdir}"/libtheora-1.1.1-fix-pp_sharp_mod-calc.patch
    
      31  patch -p0 -i "${srcdir}"/libtheora-1.1.1-libpng16.patch
    
      32  patch -p1 -i "${srcdir}"/libtheora-1.1.1-libm.patch
    
      33  patch -p1 -i "${srcdir}"/libtheora-1.1.1-libadd.patch
    
      34  patch -p1 -i "${srcdir}"/mingw-libtheora-1.1.1-rint.patch
    
      35
    
      36  # no custom CFLAGS please
    
      37  sed -i 's/CFLAGS="$CFLAGS $cflags_save"/CFLAGS="$cflags_save"/g' configure.ac
    
      38
    
      39  # fix syntax of export symbols files
    
      40  sed -i 's/^EXPORTS//' win32/xmingw32/*.def
    
      41
    
      42  autoreconf -fi -I m4
    
      43}
    
      44
    
      45build() {
    
      46  cd "${srcdir}/libtheora-$pkgver"
    
      47  for _arch in ${_architectures}; do
    
      48    mkdir -p build-${_arch} && pushd build-${_arch}
    
      49    CFLAGS="-fpermissive" ${_arch}-configure
    
      50    make
    
      51    popd
    
      52  done
    
      53}
    
      54
    
      55package() {
    
      56  for _arch in ${_architectures}; do
    
      57    cd "${srcdir}/libtheora-${pkgver}/build-${_arch}"
    
      58    make DESTDIR="$pkgdir" install
    
      59    rm -r "$pkgdir/usr/${_arch}/share"
    
      60    ${_arch}-strip --strip-unneeded "$pkgdir"/usr/${_arch}/bin/*.dll
    
      61    ${_arch}-strip -g "$pkgdir"/usr/${_arch}/lib/*.a
    
      62  done
    
      63}
    
      64

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2