mips64-elf-gcc

LOW
maintainer simer 4 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The source URL for isl is from sourceforge.io, a legitimate and widely used open-source hosting platform, not a suspicious or swappable host; the package builds from official project sources and applies minor patches, posing no real supply-chain risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source URL for isl is from sourceforge.io, a legitimate and widely used open-source hosting platform, not a suspicious or swappable host; the package builds from official project sources and applies minor patches, posing no real supply-chain risk.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:20 "https://libisl.sourceforge.io/isl-${_islver}.tar.xz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Simon Eriksson <simon.eriksson.1187+aur AT gmail.com>
2# Contributor: Joey Dumont <joey.dumont@gmail.com>
3
4_target=mips64-elf
5pkgname=${_target}-gcc
6pkgver=16.2.0
7_islver=0.28
8pkgrel=1
9pkgdesc="The GNU Compiler Collection (${_target})"
10arch=('x86_64')
11license=('GPL' 'LGPL' 'FDL' 'custom')
12url="http://www.gnu.org/software/gcc/"
13depends=('libmpc' 'zstd' "${_target}-newlib")
14makedepends=('gmp' 'mpfr' "${_target}-binutils")
15options=('!emptydirs' '!strip')
16conflicts=("${_target}-gcc-stage1")
17provides=("${_target}-gcc-stage1")
18replaces=("${_target}-gcc-stage1")
19source=("http://gcc.gnu.org/pub/gcc/releases/gcc-${pkgver}/gcc-${pkgver}.tar.xz"
20 "https://libisl.sourceforge.io/isl-${_islver}.tar.xz"
21 "mabi32.patch")
22sha256sums=('e6738e29597f733270731aa90600f37ffdc045079dfc27ec7e8192cc81085c3e'
23 '3dc31b8e1b18329e42d5dfbf84dd55e15c59b61569a2ab246f61497d9592f727'
24 '86c06dfb12295e665204441ca17440d4e597da24b6cffad052c94268ec562169')
25
26prepare() {
27 cd gcc-${pkgver}
28
29 # link isl for in-tree builds
30 ln -sf ../isl-$_islver isl
31
32 # Do not run fixincludes
33 sed -i 's@\./fixinc\.sh@-c true@' gcc/Makefile.in
34
35 # hack! - some configure tests for header files using "$CPP $CPPFLAGS"
36 sed -i "/ac_cpp=/s/\$CPPFLAGS/\$CPPFLAGS -O2/" {libiberty,gcc}/configure
37
38 # patch multilib support for mabi=32
39 patch --strip=1 --input="${srcdir}"/mabi32.patch
40
41 rm -rf "$srcdir"/build-gcc
42 mkdir "$srcdir"/build-gcc
43}
44
45build() {
46 cd build-gcc
47
48 CFLAGS=${CFLAGS/-Werror=format-security/}
49 CXXFLAGS=${CXXFLAGS/-Werror=format-security/}
50
51 "${srcdir}"/gcc-${pkgver}/configure \
52 --prefix=/usr \
53 --target=${_target} \
54 --host="$CHOST" \
55 --build="$CHOST" \
56 --with-arch=from-abi \
57 --with-sysroot=/usr/${_target} \
58 --libdir=/usr/lib \
59 --libexecdir=/usr/lib \
60 --with-gnu-as \
61 --with-gnu-ld \
62 --with-python-dir=share/gcc-${_target} \
63 --with-newlib \
64 --without-included-gettext \
65 --enable-checking=release \
66 --enable-languages=c,c++ \
67 --enable-lto \
68 --enable-multilib \
69 --enable-plugin \
70 --disable-decimal-float \
71 --disable-gold \
72 --disable-libatomic \
73 --disable-libgcj \
74 --disable-libgomp \
75 --disable-libitm \
76 --disable-libquadmath \
77 --disable-libquadmath-support \
78 --disable-libsanitizer \
79 --disable-libssp \
80 --disable-libunwind-exceptions \
81 --disable-libvtv \
82 --disable-nls \
83 --disable-shared \
84 --disable-werror
85
86 make
87}
88
89package() {
90 cd build-gcc
91
92 make install-strip DESTDIR="${pkgdir}"
93
94 # Remove files that conflict with host gcc package
95 rm -r "$pkgdir"/usr/{include,lib/libcc*,share}
96}
97

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion