powerpc-linux-gnu-gcc
LOW
maintainer orphaned
0 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The source URLs are for official GCC and ISL project releases; building a cross-compiler toolchain from upstream sources is normal and expected, even if hosted on non-whitelisted domains.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source URLs are for official GCC and ISL project releases; building a cross-compiler toolchain from upstream sources is normal and expected, even if hosted on non-whitelisted domains.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:26
http://isl.gforge.inria.fr/isl-${_islver}.tar.bz2)
PKGBUILD
1 offending line(s) highlighted
1
# Contributor: Alexander 'hatred' Drozdov <adrozdoff@gmail.com>
2
# Contributor: toha257 <toha257@gmail.com>
3
# Contributor: Allan McRae <allan@archlinux.org>
4
# Contributor: Kevin Mihelich <kevin@archlinuxarm.org>
5
# Contributor: Tavian Barnes <tavianator@tavianator.com>
6
# Maintainer: Stefan Schmidt <thrimbor.github@gmail.com>
7
8
_target="powerpc-linux-gnu"
9
pkgname="${_target}-gcc"
10
pkgver=9.1.0
11
_majorver=${pkgver}
12
_islver=0.21
13
pkgrel=1
14
pkgdesc="The GNU Compiler Collection (${_target})"
15
arch=(i686 x86_64)
16
license=(GPL LGPL FDL custom)
17
url='http://gcc.gnu.org'
18
depends=("${_target}-binutils>=2.30-1" "${_target}-glibc>=2.27-1" libmpc elfutils zlib)
19
makedepends=(gmp mpfr)
20
checkdepends=(dejagnu inetutils)
21
options=(!emptydirs !distcc !strip)
22
conflicts=("${_target}-gcc-stage1" "${_target}-gcc-stage2")
23
replaces=("${_target}-gcc-stage1" "${_target}-gcc-stage2")
24
provides=("${_target}-gcc-stage1=${pkgver}" "${_target}-gcc-stage2=${pkgver}")
25
source=(https://gcc.gnu.org/pub/gcc/releases/gcc-$pkgver/gcc-$pkgver.tar.xz{,.sig}
26
http://isl.gforge.inria.fr/isl-${_islver}.tar.bz2)
27
sha256sums=('79a66834e96a6050d8fe78db2c3b32fb285b230b855d0a66288235bc04b327a0'
28
SKIP
29
'd18ca11f8ad1a39ab6d03d3dcb3365ab416720fcb65b42d69f34f51bf0a0e859')
30
validpgpkeys=(33C235A34C46AA3FFB293709A328C3A2C3C45C06) # Jakub Jelinek <jakub@redhat.com>
31
32
prepare() {
33
[[ ! -d gcc ]] && ln -s gcc-${pkgver/+/-} gcc
34
cd gcc
35
36
# link isl for in-tree build
37
ln -s ../isl-${_islver} isl
38
39
# Do not run fixincludes
40
sed -i 's@\./fixinc\.sh@-c true@' gcc/Makefile.in
41
42
# hack! - some configure tests for header files using "$CPP $CPPFLAGS"
43
sed -i "/ac_cpp=/s/\$CPPFLAGS/\$CPPFLAGS -O2/" {libiberty,gcc}/configure
44
45
mkdir -p "$srcdir/gcc-build"
46
}
47
48
build() {
49
cd gcc-build
50
51
# using -pipe causes spurious test-suite failures
52
# http://gcc.gnu.org/bugzilla/show_bug.cgi?id=48565
53
CFLAGS=${CFLAGS/-pipe/}
54
CXXFLAGS=${CXXFLAGS/-pipe/}
55
56
"$srcdir/gcc/configure" --prefix=/usr \
57
--program-prefix=${_target}- \
58
--with-local-prefix=/usr/${_target} \
59
--with-sysroot=/usr/${_target} \
60
--with-build-sysroot=/usr/${_target} \
61
--with-as=/usr/bin/${_target}-as \
62
--with-ld=/usr/bin/${_target}-ld \
63
--libdir=/usr/lib --libexecdir=/usr/lib \
64
--disable-nls \
65
--enable-languages=c,c++ \
66
--enable-shared \
67
--enable-threads=posix \
68
--with-system-zlib \
69
--with-isl \
70
--enable-__cxa_atexit \
71
--disable-libunwind-exceptions \
72
--enable-clocale=gnu \
73
--disable-libstdcxx-pch \
74
--disable-libssp \
75
--enable-gnu-unique-object \
76
--enable-linker-build-id \
77
--enable-lto \
78
--enable-plugin \
79
--enable-install-libiberty \
80
--with-linker-hash-style=gnu \
81
--enable-gnu-indirect-function \
82
--disable-multilib \
83
--disable-werror \
84
--enable-checking=release \
85
--enable-default-pie \
86
--enable-default-ssp \
87
--target=${_target} \
88
--host=${CHOST} \
89
--build=${CHOST}
90
91
make
92
}
93
94
package() {
95
cd gcc-build
96
97
make DESTDIR="$pkgdir" install-gcc install-target-libgcc \
98
install-target-libstdc++-v3
99
100
rm -rf "$pkgdir/usr/share"
101
102
# strip it manually
103
strip "$pkgdir/usr/bin/"* 2>/dev/null || true
104
find "$pkgdir/usr/lib" -type f -exec /usr/bin/${_target}-strip \
105
--strip-unneeded {} \; 2>/dev/null || true
106
}
107
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |