mips64-elf-gcc
The source URL for isl is from sourceforge.io, a legitimate and widely used open-source hosting platform, not a suspicious or swappable host; the package builds from official project sources and applies minor patches, posing no real supply-chain risk.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source URL for isl is from sourceforge.io, a legitimate and widely used open-source hosting platform, not a suspicious or swappable host; the package builds from official project sources and applies minor patches, posing no real supply-chain risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:20
"https://libisl.sourceforge.io/isl-${_islver}.tar.xz"
PKGBUILD
1 offending line(s) highlighted# Maintainer: Simon Eriksson <simon.eriksson.1187+aur AT gmail.com>
# Contributor: Joey Dumont <joey.dumont@gmail.com>
_target=mips64-elf
pkgname=${_target}-gcc
pkgver=16.2.0
_islver=0.28
pkgrel=1
pkgdesc="The GNU Compiler Collection (${_target})"
arch=('x86_64')
license=('GPL' 'LGPL' 'FDL' 'custom')
url="http://www.gnu.org/software/gcc/"
depends=('libmpc' 'zstd' "${_target}-newlib")
makedepends=('gmp' 'mpfr' "${_target}-binutils")
options=('!emptydirs' '!strip')
conflicts=("${_target}-gcc-stage1")
provides=("${_target}-gcc-stage1")
replaces=("${_target}-gcc-stage1")
source=("http://gcc.gnu.org/pub/gcc/releases/gcc-${pkgver}/gcc-${pkgver}.tar.xz"
"https://libisl.sourceforge.io/isl-${_islver}.tar.xz"
"mabi32.patch")
sha256sums=('e6738e29597f733270731aa90600f37ffdc045079dfc27ec7e8192cc81085c3e'
'3dc31b8e1b18329e42d5dfbf84dd55e15c59b61569a2ab246f61497d9592f727'
'86c06dfb12295e665204441ca17440d4e597da24b6cffad052c94268ec562169')
prepare() {
cd gcc-${pkgver}
# link isl for in-tree builds
ln -sf ../isl-$_islver isl
# Do not run fixincludes
sed -i 's@\./fixinc\.sh@-c true@' gcc/Makefile.in
# hack! - some configure tests for header files using "$CPP $CPPFLAGS"
sed -i "/ac_cpp=/s/\$CPPFLAGS/\$CPPFLAGS -O2/" {libiberty,gcc}/configure
# patch multilib support for mabi=32
patch --strip=1 --input="${srcdir}"/mabi32.patch
rm -rf "$srcdir"/build-gcc
mkdir "$srcdir"/build-gcc
}
build() {
cd build-gcc
CFLAGS=${CFLAGS/-Werror=format-security/}
CXXFLAGS=${CXXFLAGS/-Werror=format-security/}
"${srcdir}"/gcc-${pkgver}/configure \
--prefix=/usr \
--target=${_target} \
--host="$CHOST" \
--build="$CHOST" \
--with-arch=from-abi \
--with-sysroot=/usr/${_target} \
--libdir=/usr/lib \
--libexecdir=/usr/lib \
--with-gnu-as \
--with-gnu-ld \
--with-python-dir=share/gcc-${_target} \
--with-newlib \
--without-included-gettext \
--enable-checking=release \
--enable-languages=c,c++ \
--enable-lto \
--enable-multilib \
--enable-plugin \
--disable-decimal-float \
--disable-gold \
--disable-libatomic \
--disable-libgcj \
--disable-libgomp \
--disable-libitm \
--disable-libquadmath \
--disable-libquadmath-support \
--disable-libsanitizer \
--disable-libssp \
--disable-libunwind-exceptions \
--disable-libvtv \
--disable-nls \
--disable-shared \
--disable-werror
make
}
package() {
cd build-gcc
make install-strip DESTDIR="${pkgdir}"
# Remove files that conflict with host gcc package
rm -r "$pkgdir"/usr/{include,lib/libcc*,share}
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |