osmocombb-git
LOW
maintainer swiftgeek
3 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source is a git repository from the project's official domain (osmocom.org), which is a legitimate and expected source for this software; building from a non-whitelisted but project-owned host is normal for AUR packages and does not constitute a security risk.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The source is a git repository from the project's official domain (osmocom.org), which is a legitimate and expected source for this software; building from a non-whitelisted but project-owned host is normal for AUR packages and does not constitute a security risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:21
source=('git+http://cgit.osmocom.org/cgit/osmocom-bb' '8a8796802bc497f00b6a27ca14e2be0c9f9ec176.patch')
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Swift Geek
2
# Contributor: onny <onny@project-insanity.org>
3
4
#TODO: Clean legacy/ancient lines
5
#TODO: Delete *.status and *.log file and similar crap
6
#TODO: Fix "burst_ind" - has bad deps and links against weird paths and libs etc… mostly upstream issues
7
#TODO: Fix package for good - is there no make install or WTF!?. Also include includes and install in proper dirs… maybe fix this upstream?
8
#PKGEXT='.pkg.tar.gz'
9
pkgname=osmocombb-git
10
pkgver=a
11
pkgrel=4
12
pkgdesc="An Free Software / Open Source GSM Baseband software implementation."
13
arch=('i686' 'x86_64')
14
url="http://bb.osmocom.org/"
15
license=('GPL3')
16
#TODO: test if python2 is makedepend or regular dep
17
makedepends=('shtool' 'libtool' 'autoconf' 'git' 'make' 'gcc' 'pkg-config' 'patch')
18
depends=('libosmocore' 'python2')
19
optdepends=('gpsd' 'cp210x-program')
20
options=('!strip') #TODO: Not sure about !emptydirs
21
source=('git+http://cgit.osmocom.org/cgit/osmocom-bb' '8a8796802bc497f00b6a27ca14e2be0c9f9ec176.patch')
22
# Uncomment line below and comment one above for higher baudrates using the testing burst_ind with the cp210x usb-serial-adapter:
23
#source=('git+http://cgit.osmocom.org/cgit/osmocom-bb#branch=sylvain/burst_ind')
24
md5sums=('SKIP' '94bb3ff0cdff13d7a8163c7d2ee40a35')
25
26
pkgver() {
27
cd "$srcdir/osmocom-bb"
28
git describe --long | sed 's/^osmocon_//; s/\([^-]*-g\)/r\1/; s/-/./g'
29
}
30
31
prepare() {
32
cd "$srcdir/osmocom-bb"
33
msg2 "Starting to patch..."
34
# Reverse commit "improving" osmocon
35
# patch -p1 -R < "$srcdir/8a8796802bc497f00b6a27ca14e2be0c9f9ec176.patch"
36
echo "patching src/host/layer23/configure.ac ... " && sed -i 's/-D_HAVE_GPSD/-D_HAVE_GPSD -lgps/' src/host/layer23/configure.ac
37
if [[ "${source[0]}" =~ ^.*burst_ind$ ]] ; then
38
echo "applying patches for burst_ind branch ..."
39
echo "patching src/host/osmocon/osmocon.c ... " && sed -i '64i#define I_HAVE_A_CP210x' src/host/osmocon/osmocon.c
40
fi
41
msg2 "Starting to patch..."
42
find . -name "*.py" | xargs sed -i '1s"^#!.\+$"#!/usr/bin/python2"'
43
44
# Uncomment this line if you want to enable Tx (Transmit) Support.
45
#echo 'CFLAGS += -DCONFIG_TX_ENABLE' >> "${srcdir}/osmocom-bb/src/target/firmware/Makefile"
46
47
# Uncomment this line if you want to write to flash.
48
#echo 'CFLAGS += -DCONFIG_FLASH_WRITE' >> "${srcdir}/osmocom-bb/src/target/firmware/Makefile"
49
50
# Uncomment this line if you want to write to flash, including the bootloader.
51
#echo 'CFLAGS += -DCONFIG_FLASH_WRITE_LOADER' >> "${srcdir}/osmocom-bb/src/target/firmware/Makefile"
52
53
}
54
55
build() {
56
cd "$srcdir/osmocom-bb"
57
58
msg2 "Starting make..."
59
60
cd "$srcdir/osmocom-bb/src"
61
make
62
}
63
64
package () {
65
cd "$srcdir/osmocom-bb"
66
67
find . \( -name "*.log" -name "*.status" -name "*.m4" -name "configure*" -name "COPYING" -name "*.c" -o -name "*.h" -o -name "*.in" -o -name "*.am" -o -name "*.o" -o -name "Makefile*" \) -print | xargs -i rm {}
68
69
mkdir -p $pkgdir/opt/osmocombb/host/osmocon
70
mkdir -p $pkgdir/opt/osmocombb/host/layer23
71
mkdir -p $pkgdir/opt/osmocombb/host/rita_pll
72
73
cp -r $srcdir/osmocom-bb/src/* $pkgdir/opt/osmocombb/
74
cp -ar $srcdir/osmocom-bb/doc $pkgdir/opt/osmocombb/
75
cp -ar $srcdir/osmocom-bb/include $pkgdir/opt/osmocombb/
76
77
mkdir -p $pkgdir/usr/bin
78
79
ln -s /opt/osmocombb/host/osmocon/osmocon $pkgdir/usr/bin/
80
ln -s /opt/osmocombb/host/osmocon/osmoload $pkgdir/usr/bin/
81
ln -s /opt/osmocombb/host/layer23/src/mobile/mobile $pkgdir/usr/bin/
82
83
84
}
85
86
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |