oki-b411-b431

maintainer severach · 2 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a driver package from Okidata's official domain (oki.com), which is plausibly the project's own release infrastructure; the downloaded tarball is a compressed data archive used to install CUPS printer drivers, not an executable payload, and the build process only extracts and modifies PPD files for packaging.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a driver package from Okidata's official domain (oki.com), which is plausibly the project's own release infrastructure; the downloaded tarball is a compressed data archive used to install CUPS printer drivers, not an executable payload, and the build process only extracts and modifies PPD files for packaging.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:25 source=('https://www.oki.com/printing/download/ok400pcl_oel.tar_30939.gz')

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer:  Chris Severance aur.severach aATt spamgourmet dott com
    
      2
    
      3# TODO: Add more _printerids to make autodetect work for more models.
    
      4#   The printer ID is found inside the ()
    
      5#   Discovered Network Printers: B411 (OKI DATA CORP B411)
    
      6
    
      7_printerids=(
    
      8  # PPDName:Friendly Name (MATCH TEXT)
    
      9  'OKB411:Oki B411 PCL (OKI DATA CORP B411)'
    
      10)
    
      11
    
      12set -u
    
      13pkgname='oki-b411-b431'
    
      14pkgver='5.0.0'
    
      15pkgrel='1'
    
      16pkgdesc='CUPS printer driver for the Okidata B410 B411 B420 B431 B4100 B4200 B4250 B4300 B4350 B4400 B4500 B4550 B4600 MB460 MB470 MB480'
    
      17arch=('i686' 'x86_64')
    
      18url='https://www.okidata.com/'
    
      19license=('GPL')
    
      20depends=('cups')
    
      21makedepends=('gzip')
    
      22#_srcdir='MB400PCL'
    
      23#source=('ftp://ftp2.okidata.com/pub/drivers/linux/SFP/monochrome/desktop/MB400PCLv5.tar')
    
      24_srcdir='.'
    
      25source=('https://www.oki.com/printing/download/ok400pcl_oel.tar_30939.gz')
    
      26md5sums=('04a9201fe847c1ae37c1c27637425953')
    
      27sha256sums=('1131976fcb53975ddcf557e827114bd58cbf5beabfec31e454d12e539d7de81e')
    
      28
    
      29prepare() {
    
      30  set -u
    
      31  cd "${_srcdir}"
    
      32  # Make the installer package compatible
    
      33  chmod 755 'install.sh'
    
      34  #cp -p 'install.sh' 'install.Arch.sh'
    
      35  sed -e '# Disable unnecessary PATH statements' \
    
      36      -e 's:^PATH=/:# &:g' \
    
      37      -e 's:^export PATH:# &:g' \
    
      38      -e '# Ownership is managed by makepkg' \
    
      39      -e 's:\${CHOWN}:# &:g' \
    
      40      -e 's:\${CHGRP}:true # &:g' \
    
      41      -e '# Root is not necessary when packaging' \
    
      42      -e 's:\[ `\${ID} -u`:[ -z "${DESTDIR}" ] \&\& &:g' \
    
      43      -e '# Disable these variables to ensure that set -u catches us if we try to use them.' \
    
      44      -e 's:^_CUPS[A-Z]*=":# &:g' \
    
      45      -e '# Install to package folder' \
    
      46      -e 's:_PATH="/usr/:_PATH="${DESTDIR}/usr/:g' \
    
      47      -e '# Terminate before changing services' \
    
      48      -e 's:^\(for i in \${_CUPS}\):if [ "${DESTDIR}" != "" ]; then\n\texit 0\nfi\n\n\1:g' \
    
      49    -i 'install.sh'
    
      50  test ! -s 'install.Arch.sh'
    
      51  set +u
    
      52}
    
      53
    
      54package() {
    
      55  set -u
    
      56  cd "${_srcdir}"
    
      57  install -d "${pkgdir}/usr/share/cups/model"
    
      58  install -d "${pkgdir}/usr/lib/cups/filter"
    
      59  DESTDIR="${pkgdir}" \
    
      60  sh -u -e 'install.sh'
    
      61  # Add alternate nicknames to make model autodetect work
    
      62  local _oldfile=(??'400'???'.ppd.gz')
    
      63  _oldfile="${_oldfile[0]}"
    
      64  local _printerid
    
      65  for _printerid in "${_printerids[@]}"; do
    
      66    local _newtag="${_printerid%%:*}"
    
      67    local _newid="${_printerid#*:}"
    
      68    local _newfile="${_oldfile//${_oldfile: 0:5}/${_newtag}}"
    
      69    test "${_oldfile}" != "${_newfile}" || echo "${}"
    
      70    gunzip < "${_oldfile}" | \
    
      71    sed -e '# Fix autodetect *NickName' \
    
      72        -e "s:OKI B4000 / B400 / MB400 PCL:${_newid}:g" \
    
      73        -e "s:OK400PCL.PPD:${_newfile%\.gz}:g" \
    
      74      | gzip > "${_newfile}"
    
      75    install -m644 "${_newfile}" -t "${pkgdir}/usr/share/cups/model/"
    
      76  done
    
      77
    
      78  set +u
    
      79}
    
      80set +u
    
      81

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2