mips-harvard-os161-gdb

maintainer gerito · 3 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The source is a tarball from the official project domain (os161.eecs.harvard.edu), which is plausibly the project's own infrastructure; building from official source is normal AUR practice, even if the host is not on a standard whitelist.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the official project domain (os161.eecs.harvard.edu), which is plausibly the project's own infrastructure; building from official source is normal AUR practice, even if the host is not on a standard whitelist.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:16 source=(http://os161.eecs.harvard.edu/download/gdb-${_pkgver}.tar.gz

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Geronimo Bareiro <gero dot bare at gmail dot com>
2
3_target="mips-harvard-os161"
4pkgname=${_target}-gdb
5_pkgver=7.8+os161-2.1
6pkgver=${_pkgver/os161-/os161_}
7pkgrel=4
8pkgdesc="The GNU Debugger modified for ${_target} arquitecture. This is part of toolset for the course os161 from Harvard."
9arch=(i686 x86_64)
10url="http://os161.eecs.harvard.edu/"
11license=('GPL' 'LGPL')
12groups=('mips-harvard-os161-toolchain')
13depends=('mips-harvard-os161-binutils>=2.24' 'gmp' 'mpfr' 'libmpc' 'guile2.0')
14makedepends=('flex' 'bison')
15options=(staticlibs !libtool !emptydirs !strip zipman docs)
16source=(http://os161.eecs.harvard.edu/download/gdb-${_pkgver}.tar.gz
17gdb.patch)
18md5sums=('26295f3f67090e534e3d488a3edce5ae'
19'SKIP')
20
21prepare() {
22 cd gdb-${_pkgver}
23
24 sed -i "/ac_cpp=/s/\$CPPFLAGS/\$CPPFLAGS -O2/" libiberty/configure
25
26 patch -p1 -i ${srcdir}/gdb.patch
27
28 mkdir ${srcdir}/gdb-build
29}
30
31build() {
32 cd gdb-build
33
34 export CFLAGS="-O2"
35 export CXXFLAGS="-O2"
36 unset CPPFLAGS
37
38 ../gdb-${_pkgver}/configure --prefix=/usr \
39 --program-prefix=${_target}- \
40 --with-local-prefix=/usr/lib/${_target} \
41 --with-guile=guile-2.0 \
42 --target=${_target} --host=${CHOST} --build=${CHOST} \
43 --disable-nls --nfp \
44 --disable-shared --disable-threads \
45 --disable-werror
46
47 make
48}
49
50package() {
51 cd ${srcdir}/gdb-build
52
53 make DESTDIR=${pkgdir} install
54
55 # Delete the things we don't need
56 rm -f ${pkgdir}/usr/lib/libiberty.a
57 rm -rf ${pkgdir}/usr/share/info
58 rm -rf ${pkgdir}/usr/share/gdb
59 rm -rf ${pkgdir}/usr/include/gdb
60 rm -rf ${pkgdir}/usr/share/man
61
62}
63
64# vim: set ts=2 sw=2 ft=sh et:
65

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion