mips64r5900el-ps2-elf-gcc
The package builds GCC for a specific platform from a GitHub-hosted git repository with a fixed commit, which is a normal and safe practice; the non-whitelisted host is the project's own official repository, and the source is not executable code but a build of the compiler itself.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds GCC for a specific platform from a GitHub-hosted git repository with a fixed commit, which is a normal and safe practice; the non-whitelisted host is the project's own official repository, and the source is not executable code but a build of the compiler itself.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:35
"https://libisl.sourceforge.io/isl-${_islver}.tar.xz")
PKGBUILD
1 offending line(s) highlighted# Maintainer: Pellegrino Prevete <pellegrinoprevete@gmail.com>
# shellcheck disable=SC2034
_module="ee"
_platform="ps2"
target="mips64r5900el-${_platform}-elf"
_base="toolchain"
pkgname="${target}-gcc"
# pkgver="v10.2.0"
pkgver="v11.3.0"
_islver="0.21"
pkgrel=1
_pkgdesc=("The GNU Compiler Collection (${target}).")
pkgdesc="${_pkgdesc[*]}"
arch=('x86_64')
license=('BSD')
_github="https://github.com/ps2dev"
_local="ssh://git@127.0.0.1:/home/git"
url="${_github}/gcc"
depends=("${target}-binutils")
makedepends=(# "${pkgname}-stage1"
"${target}-newlib"
# "${target}-newlib-nano"
"${target}-pthread-embedded"
"libgmp-static"
"mpfr-static"
"libmpc-static"
"zstd-static")
provides=("${pkgname}-stage1")
conflicts=("${pkgname}-stage1")
optdepends=()
_branch="${_module}-${pkgver}"
_commit="331453616ac96717cfef82d21c03573c8984f17d"
source=("${pkgname}::git+${url}#commit=${_commit}"
"https://libisl.sourceforge.io/isl-${_islver}.tar.xz")
# source=("${pkgname}::git+${_local}/${_platform}-gcc#commit=${_branch}")
sha256sums=('SKIP'
'777058852a3db9500954361e294881214f6ecd4b594c00da5eee974cd6a54960')
_n_cpu="$(getconf _NPROCESSORS_ONLN)"
_make_opts=(-j "${_n_cpu}")
cflags=(-static
-O2
# -Bstatic
-Wno-implicit-function-declaration)
ldflags=(${LDFLAGS}
# -Bstatic
# -Bdynamic
-s)
prepare() {
cd "${srcdir}/${pkgname}" || exit
rm "isl" || true
# ln -s "../isl-${_islver}" "isl"
}
# shellcheck disable=SC2154
build() {
local _target
CFLAGS=""
CXXFLAGS=""
CPPFLAGS=""
LDFLAGS=""
export CFLAGS
export CXXFLAGS
export CPPFLAGS
export LDFLAGS
# export PATH="${PATH}:/usr/${target}/bin"
local _cflags=(${cflags[@]})
# -I/usr/include
# -I/usr/include/isl
# -L"/usr/lib"
# -I"/usr/${target}/include"
# -L"/usr/${target}/lib"
# -I"/usr/${target}/include/pthread-embedded"
# -L"/usr/${target}/lib/pthread-embedded"
# -include "/usr/${target}/include/pthread-embedded/pthread.h"
# -I"/usr/${target}/include/pthread-embedded/bits"
# -I"/usr/${target}/include/newlib-nano"
# -L"/usr/${target}/lib/newlib-nano"
# -std=c99
# -std=c++11
# -nostdinc)
local _ldflags=(${ldflags[@]})
# -L"/usr/${target}/lib"
# -L"/usr/${target}/lib/pthread-embedded"
# -lstdin
# -l:libisl.a)
# -ldl
# -lpthread)
# -llibisl)
# -L"/usr/${target}/lib/newlib-nano")
local _build_opts=(${_make_opts[@]}
CFLAGS="${_cflags[*]}"
CPPFLAGS="${_cflags[*]}"
# CXXFLAGS="${_cflags[*]}"
LDFLAGS="${_ldflags[*]}")
cd "${srcdir}/${pkgname}"
for _target in "${target}"; do
rm -rf "build-${_target}"
mkdir -p "build-${_target}"
cd "build-${_target}"
local _configure_opts=(--prefix="/usr"
--program-prefix=${_target}-
--with-local-prefix=/usr/${_target}
--with-sysroot=/usr/${_target}
--with-build-sysroot=/usr/${_target}
--target="${_target}"
--host=${CHOST}
--build=${CHOST}
--datarootdir="/usr/${_target}/share"
--enable-languages="c,c++"
--disable-bootstrap
--disable-shared
--enable-static
--with-float=hard
--with-sysroot="/usr/${_target}"
--with-newlib
# --disable-graphite
# --with-isl
# --with-osl
--disable-libssp
--disable-multilib
--enable-cxx-flags=-G0
--enable-threads=posix
FLAGS=-fPIC
CPPFLAGS=-fPIC
--disable-tls)
export CFLAGS="${_cflags[*]}"
export CXXFLAGS="${_cflags[*]}"
export CPPFLAGS="${_cflags[*]}"
export LDFLAGS="${_ldflags[*]}"
# CC="/usr/bin/${target}-gcc" \
# CPP="/usr/bin/${target}-cpp" \
# CXX="/usr/bin/${target}-g++" \
# CC="/usr/bin/gcc-11" \
# CPP="/usr/bin/cpp-11" \
# CXX="/usr/bin/g++-11" \
# CC="/usr/bin/gcc-7" \
# CPP="/usr/bin/cpp-7" \
# CXX="/usr/bin/g++-7" \
"../configure" ${_configure_opts[@]}
# CC="/usr/bin/${target}-gcc" \
# CPP="/usr/bin/${target}-cpp" \
# CXX="/usr/bin/${target}-g++" \
# CC="/usr/bin/gcc-11" \
# CPP="/usr/bin/cpp-11" \
# CXX="/usr/bin/g++-11" \
make "${_build_opts[@]}" all
cd ..
done
}
# shellcheck disable=SC2154
package() {
local _target
cd "${srcdir}/${pkgname}"
for _target in "${target}"; do
cd "build-${_target}"
make DESTDIR="${pkgdir}" "${_make_opts[@]}" install-strip
cd ..
done
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |