mingw-w64-libtheora
LOW
maintainer dinavanengeland
5 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a legitimate project release from the official xiph.org domain, which is plausibly the project's own infrastructure, and the package builds from source without executing untrusted binaries.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a legitimate project release from the official xiph.org domain, which is plausibly the project's own infrastructure, and the package builds from source without executing untrusted binaries.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:11
source=("http://downloads.xiph.org/releases/theora/libtheora-${pkgver}.tar.bz2"
PKGBUILD
1 offending line(s) highlighted
1
pkgname=mingw-w64-libtheora
2
pkgver=1.1.1
3
pkgrel=9
4
pkgdesc="An open video codec developed by the Xiph.org (mingw-w64)"
5
arch=('any')
6
url="https://xiph.org"
7
license=("BSD")
8
makedepends=('mingw-w64-configure')
9
depends=('mingw-w64-crt' 'mingw-w64-libvorbis')
10
options=('!strip' '!buildflags' 'staticlibs')
11
source=("http://downloads.xiph.org/releases/theora/libtheora-${pkgver}.tar.bz2"
12
libtheora-1.1.1-fix-pp_sharp_mod-calc.patch
13
libtheora-1.1.1-libpng16.patch
14
libtheora-1.1.1-libm.patch
15
libtheora-1.1.1-libadd.patch
16
mingw-libtheora-1.1.1-rint.patch)
17
md5sums=('292ab65cedd5021d6b7ddd117e07cd8e'
18
'0ed7f7af622c2d675a9809980d8aad71'
19
'08edd81c7a1be2c4edfd2cd3c112a8c6'
20
'f5f96fedc1a7a23e0530298b045c7101'
21
'4357cded33bc3397b4123790e4967d24'
22
'54c626ca201f51ebd9d97595f57a25b4')
23
24
_architectures="i686-w64-mingw32 x86_64-w64-mingw32"
25
26
prepare() {
27
cd "${srcdir}/libtheora-$pkgver"
28
29
# fedora patches
30
patch -p1 -i "${srcdir}"/libtheora-1.1.1-fix-pp_sharp_mod-calc.patch
31
patch -p0 -i "${srcdir}"/libtheora-1.1.1-libpng16.patch
32
patch -p1 -i "${srcdir}"/libtheora-1.1.1-libm.patch
33
patch -p1 -i "${srcdir}"/libtheora-1.1.1-libadd.patch
34
patch -p1 -i "${srcdir}"/mingw-libtheora-1.1.1-rint.patch
35
36
# no custom CFLAGS please
37
sed -i 's/CFLAGS="$CFLAGS $cflags_save"/CFLAGS="$cflags_save"/g' configure.ac
38
39
# fix syntax of export symbols files
40
sed -i 's/^EXPORTS//' win32/xmingw32/*.def
41
42
autoreconf -fi -I m4
43
}
44
45
build() {
46
cd "${srcdir}/libtheora-$pkgver"
47
for _arch in ${_architectures}; do
48
mkdir -p build-${_arch} && pushd build-${_arch}
49
CFLAGS="-fpermissive" ${_arch}-configure
50
make
51
popd
52
done
53
}
54
55
package() {
56
for _arch in ${_architectures}; do
57
cd "${srcdir}/libtheora-${pkgver}/build-${_arch}"
58
make DESTDIR="$pkgdir" install
59
rm -r "$pkgdir/usr/${_arch}/share"
60
${_arch}-strip --strip-unneeded "$pkgdir"/usr/${_arch}/bin/*.dll
61
${_arch}-strip -g "$pkgdir"/usr/${_arch}/lib/*.a
62
done
63
}
64
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |