osmocombb-git
maintainer swiftgeek
· 3 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The source is a git repository from the project's official domain (osmocom.org), which is a legitimate and expected source for this software; building from a non-whitelisted but project-owned host is normal for AUR packages and does not constitute a security risk.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 90%): The source is a git repository from the project's official domain (osmocom.org), which is a legitimate and expected source for this software; building from a non-whitelisted but project-owned host is normal for AUR packages and does not constitute a security risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:21
source=('git+http://cgit.osmocom.org/cgit/osmocom-bb' '8a8796802bc497f00b6a27ca14e2be0c9f9ec176.patch')
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Swift Geek
2
# Contributor: onny <onny@project-insanity.org>
3
4
#TODO: Clean legacy/ancient lines
5
#TODO: Delete *.status and *.log file and similar crap
6
#TODO: Fix "burst_ind" - has bad deps and links against weird paths and libs etc… mostly upstream issues
7
#TODO: Fix package for good - is there no make install or WTF!?. Also include includes and install in proper dirs… maybe fix this upstream?
8
#PKGEXT='.pkg.tar.gz'
9
pkgname=osmocombb-git
10
pkgver=a
11
pkgrel=4
12
pkgdesc="An Free Software / Open Source GSM Baseband software implementation."
13
arch=('i686' 'x86_64')
14
url="http://bb.osmocom.org/"
15
license=('GPL3')
16
#TODO: test if python2 is makedepend or regular dep
17
makedepends=('shtool' 'libtool' 'autoconf' 'git' 'make' 'gcc' 'pkg-config' 'patch')
18
depends=('libosmocore' 'python2')
19
optdepends=('gpsd' 'cp210x-program')
20
options=('!strip') #TODO: Not sure about !emptydirs
21
source=('git+http://cgit.osmocom.org/cgit/osmocom-bb' '8a8796802bc497f00b6a27ca14e2be0c9f9ec176.patch')
22
# Uncomment line below and comment one above for higher baudrates using the testing burst_ind with the cp210x usb-serial-adapter:
23
#source=('git+http://cgit.osmocom.org/cgit/osmocom-bb#branch=sylvain/burst_ind')
24
md5sums=('SKIP' '94bb3ff0cdff13d7a8163c7d2ee40a35')
25
26
pkgver() {
27
cd "$srcdir/osmocom-bb"
28
git describe --long | sed 's/^osmocon_//; s/\([^-]*-g\)/r\1/; s/-/./g'
29
}
30
31
prepare() {
32
cd "$srcdir/osmocom-bb"
33
msg2 "Starting to patch..."
34
# Reverse commit "improving" osmocon
35
# patch -p1 -R < "$srcdir/8a8796802bc497f00b6a27ca14e2be0c9f9ec176.patch"
36
echo "patching src/host/layer23/configure.ac ... " && sed -i 's/-D_HAVE_GPSD/-D_HAVE_GPSD -lgps/' src/host/layer23/configure.ac
37
if [[ "${source[0]}" =~ ^.*burst_ind$ ]] ; then
38
echo "applying patches for burst_ind branch ..."
39
echo "patching src/host/osmocon/osmocon.c ... " && sed -i '64i#define I_HAVE_A_CP210x' src/host/osmocon/osmocon.c
40
fi
41
msg2 "Starting to patch..."
42
find . -name "*.py" | xargs sed -i '1s"^#!.\+$"#!/usr/bin/python2"'
43
44
# Uncomment this line if you want to enable Tx (Transmit) Support.
45
#echo 'CFLAGS += -DCONFIG_TX_ENABLE' >> "${srcdir}/osmocom-bb/src/target/firmware/Makefile"
46
47
# Uncomment this line if you want to write to flash.
48
#echo 'CFLAGS += -DCONFIG_FLASH_WRITE' >> "${srcdir}/osmocom-bb/src/target/firmware/Makefile"
49
50
# Uncomment this line if you want to write to flash, including the bootloader.
51
#echo 'CFLAGS += -DCONFIG_FLASH_WRITE_LOADER' >> "${srcdir}/osmocom-bb/src/target/firmware/Makefile"
52
53
}
54
55
build() {
56
cd "$srcdir/osmocom-bb"
57
58
msg2 "Starting make..."
59
60
cd "$srcdir/osmocom-bb/src"
61
make
62
}
63
64
package () {
65
cd "$srcdir/osmocom-bb"
66
67
find . \( -name "*.log" -name "*.status" -name "*.m4" -name "configure*" -name "COPYING" -name "*.c" -o -name "*.h" -o -name "*.in" -o -name "*.am" -o -name "*.o" -o -name "Makefile*" \) -print | xargs -i rm {}
68
69
mkdir -p $pkgdir/opt/osmocombb/host/osmocon
70
mkdir -p $pkgdir/opt/osmocombb/host/layer23
71
mkdir -p $pkgdir/opt/osmocombb/host/rita_pll
72
73
cp -r $srcdir/osmocom-bb/src/* $pkgdir/opt/osmocombb/
74
cp -ar $srcdir/osmocom-bb/doc $pkgdir/opt/osmocombb/
75
cp -ar $srcdir/osmocom-bb/include $pkgdir/opt/osmocombb/
76
77
mkdir -p $pkgdir/usr/bin
78
79
ln -s /opt/osmocombb/host/osmocon/osmocon $pkgdir/usr/bin/
80
ln -s /opt/osmocombb/host/osmocon/osmoload $pkgdir/usr/bin/
81
ln -s /opt/osmocombb/host/layer23/src/mobile/mobile $pkgdir/usr/bin/
82
83
84
}
85
86
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |