mips64r5900el-ps2-elf-gcc

maintainer tallero · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package builds GCC for a specific platform from a GitHub-hosted git repository with a fixed commit, which is a normal and safe practice; the non-whitelisted host is the project's own official repository, and the source is not executable code but a build of the compiler itself.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds GCC for a specific platform from a GitHub-hosted git repository with a fixed commit, which is a normal and safe practice; the non-whitelisted host is the project's own official repository, and the source is not executable code but a build of the compiler itself.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:35 "https://libisl.sourceforge.io/isl-${_islver}.tar.xz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Pellegrino Prevete <pellegrinoprevete@gmail.com>
    
      2
    
      3# shellcheck disable=SC2034
    
      4_module="ee"
    
      5_platform="ps2"
    
      6target="mips64r5900el-${_platform}-elf"
    
      7_base="toolchain"
    
      8pkgname="${target}-gcc"
    
      9# pkgver="v10.2.0"
    
      10pkgver="v11.3.0"
    
      11_islver="0.21"
    
      12pkgrel=1
    
      13_pkgdesc=("The GNU Compiler Collection (${target}).")
    
      14pkgdesc="${_pkgdesc[*]}"
    
      15arch=('x86_64')
    
      16license=('BSD')
    
      17_github="https://github.com/ps2dev"
    
      18_local="ssh://git@127.0.0.1:/home/git"
    
      19url="${_github}/gcc"
    
      20depends=("${target}-binutils")
    
      21makedepends=(# "${pkgname}-stage1"
    
      22             "${target}-newlib"
    
      23             # "${target}-newlib-nano"
    
      24             "${target}-pthread-embedded"
    
      25             "libgmp-static"
    
      26             "mpfr-static"
    
      27             "libmpc-static"
    
      28             "zstd-static")
    
      29provides=("${pkgname}-stage1")
    
      30conflicts=("${pkgname}-stage1")
    
      31optdepends=()
    
      32_branch="${_module}-${pkgver}"
    
      33_commit="331453616ac96717cfef82d21c03573c8984f17d"
    
      34source=("${pkgname}::git+${url}#commit=${_commit}"
    
      35        "https://libisl.sourceforge.io/isl-${_islver}.tar.xz")
    
      36# source=("${pkgname}::git+${_local}/${_platform}-gcc#commit=${_branch}")
    
      37sha256sums=('SKIP'
    
      38            '777058852a3db9500954361e294881214f6ecd4b594c00da5eee974cd6a54960')
    
      39
    
      40_n_cpu="$(getconf _NPROCESSORS_ONLN)"
    
      41_make_opts=(-j "${_n_cpu}")
    
      42
    
      43cflags=(-static
    
      44        -O2
    
      45        # -Bstatic
    
      46        -Wno-implicit-function-declaration)
    
      47
    
      48ldflags=(${LDFLAGS}
    
      49         # -Bstatic
    
      50         # -Bdynamic
    
      51         -s)
    
      52
    
      53prepare() {
    
      54  cd "${srcdir}/${pkgname}" || exit
    
      55  rm "isl" || true
    
      56  # ln -s "../isl-${_islver}" "isl"
    
      57}
    
      58
    
      59# shellcheck disable=SC2154
    
      60build() {
    
      61  local _target
    
      62
    
      63  CFLAGS=""
    
      64  CXXFLAGS=""
    
      65  CPPFLAGS=""
    
      66  LDFLAGS=""
    
      67  export CFLAGS
    
      68  export CXXFLAGS
    
      69  export CPPFLAGS
    
      70  export LDFLAGS
    
      71  # export PATH="${PATH}:/usr/${target}/bin"
    
      72
    
      73  local _cflags=(${cflags[@]})
    
      74                 # -I/usr/include
    
      75                 # -I/usr/include/isl
    
      76                 # -L"/usr/lib"
    
      77                 # -I"/usr/${target}/include"
    
      78                 # -L"/usr/${target}/lib"
    
      79                 # -I"/usr/${target}/include/pthread-embedded"
    
      80                 # -L"/usr/${target}/lib/pthread-embedded"
    
      81                 # -include "/usr/${target}/include/pthread-embedded/pthread.h"
    
      82                 # -I"/usr/${target}/include/pthread-embedded/bits"
    
      83                 # -I"/usr/${target}/include/newlib-nano"
    
      84                 # -L"/usr/${target}/lib/newlib-nano"
    
      85                 # -std=c99
    
      86                 # -std=c++11
    
      87                 # -nostdinc)
    
      88
    
      89  local _ldflags=(${ldflags[@]})
    
      90                  # -L"/usr/${target}/lib"
    
      91                  # -L"/usr/${target}/lib/pthread-embedded"
    
      92                  # -lstdin
    
      93                  # -l:libisl.a)
    
      94                  # -ldl
    
      95                  # -lpthread)
    
      96                  # -llibisl)
    
      97                  # -L"/usr/${target}/lib/newlib-nano")
    
      98
    
      99  local _build_opts=(${_make_opts[@]}
    
      100                     CFLAGS="${_cflags[*]}"
    
      101                     CPPFLAGS="${_cflags[*]}"
    
      102                     # CXXFLAGS="${_cflags[*]}"
    
      103                     LDFLAGS="${_ldflags[*]}")
    
      104
    
      105  cd "${srcdir}/${pkgname}"
    
      106
    
      107  for _target in "${target}"; do
    
      108    rm -rf "build-${_target}"
    
      109    mkdir -p "build-${_target}"
    
      110    cd "build-${_target}"
    
      111    local _configure_opts=(--prefix="/usr"
    
      112                           --program-prefix=${_target}-
    
      113                           --with-local-prefix=/usr/${_target}
    
      114                           --with-sysroot=/usr/${_target}
    
      115                           --with-build-sysroot=/usr/${_target}
    
      116                           --target="${_target}"
    
      117                           --host=${CHOST}
    
      118                           --build=${CHOST}
    
      119                           --datarootdir="/usr/${_target}/share"
    
      120                           --enable-languages="c,c++"
    
      121                           --disable-bootstrap
    
      122                           --disable-shared
    
      123                           --enable-static
    
      124                           --with-float=hard
    
      125                           --with-sysroot="/usr/${_target}"
    
      126                           --with-newlib
    
      127                           # --disable-graphite
    
      128                           # --with-isl
    
      129                           # --with-osl
    
      130                           --disable-libssp
    
      131                           --disable-multilib
    
      132                           --enable-cxx-flags=-G0
    
      133                           --enable-threads=posix
    
      134                           FLAGS=-fPIC
    
      135                           CPPFLAGS=-fPIC
    
      136                           --disable-tls)
    
      137
    
      138  export CFLAGS="${_cflags[*]}"
    
      139  export CXXFLAGS="${_cflags[*]}"
    
      140  export CPPFLAGS="${_cflags[*]}"
    
      141  export LDFLAGS="${_ldflags[*]}"
    
      142
    
      143    # CC="/usr/bin/${target}-gcc" \
    
      144    # CPP="/usr/bin/${target}-cpp" \
    
      145    # CXX="/usr/bin/${target}-g++" \
    
      146    # CC="/usr/bin/gcc-11" \
    
      147    # CPP="/usr/bin/cpp-11" \
    
      148    # CXX="/usr/bin/g++-11" \
    
      149    # CC="/usr/bin/gcc-7" \
    
      150    # CPP="/usr/bin/cpp-7" \
    
      151    # CXX="/usr/bin/g++-7" \
    
      152
    
      153    "../configure" ${_configure_opts[@]}
    
      154
    
      155    # CC="/usr/bin/${target}-gcc" \
    
      156    # CPP="/usr/bin/${target}-cpp" \
    
      157    # CXX="/usr/bin/${target}-g++" \
    
      158    # CC="/usr/bin/gcc-11" \
    
      159    # CPP="/usr/bin/cpp-11" \
    
      160    # CXX="/usr/bin/g++-11" \
    
      161    make "${_build_opts[@]}" all
    
      162    
    
      163    cd ..
    
      164  done
    
      165}
    
      166
    
      167# shellcheck disable=SC2154
    
      168package() {
    
      169  local _target
    
      170  cd "${srcdir}/${pkgname}"
    
      171  for _target in "${target}"; do
    
      172    cd "build-${_target}"
    
      173    make DESTDIR="${pkgdir}" "${_make_opts[@]}" install-strip
    
      174    cd ..
    
      175  done
    
      176}
    
      177

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2