powerpc64-linux-gnu-gcc-stage1
LOW
maintainer orphaned
1 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package builds GCC from official sources; the non-whitelisted host (sourceforge.io) is a legitimate project host for isl, and the source is used to build a compiler toolchain component, not executed directly.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds GCC from official sources; the non-whitelisted host (sourceforge.io) is a legitimate project host for isl, and the source is used to build a compiler toolchain component, not executed directly.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:22
https://libisl.sourceforge.io/isl-$_islver.tar.xz)
PKGBUILD
1 offending line(s) highlighted
1
# Contributor: Alexander 'hatred' Drozdov <adrozdoff@gmail.com>
2
# Contributor: toha257 <toha257@gmail.com>
3
# Contributor: Allan McRae <allan@archlinux.org>
4
# Contributor: Kevin Mihelich <kevin@archlinuxarm.org>
5
# Contributor: Tavian Barnes <tavianator@tavianator.com>
6
# Maintainer: Stefan Schmidt <thrimbor.github@gmail.com>
7
8
_target="powerpc64-linux-gnu"
9
pkgname=${_target}-gcc-stage1
10
pkgver=15.1.0
11
_majorver=${pkgver}
12
_islver=0.27
13
pkgrel=1
14
pkgdesc="The GNU Compiler Collection. Stage 1 for toolchain building (${_target})"
15
arch=(i686 x86_64)
16
license=(GPL LGPL FDL custom)
17
url='http://gcc.gnu.org'
18
depends=("${_target}-binutils>=2.30-1" libmpc zlib)
19
makedepends=(gmp mpfr)
20
options=(!emptydirs !distcc !strip)
21
source=(https://gcc.gnu.org/pub/gcc/releases/gcc-$pkgver/gcc-$pkgver.tar.xz{,.sig}
22
https://libisl.sourceforge.io/isl-$_islver.tar.xz)
23
sha256sums=('e2b09ec21660f01fecffb715e0120265216943f038d0e48a9868713e54f06cea'
24
'SKIP'
25
'6d8babb59e7b672e8cb7870e874f3f7b813b6e00e6af3f8b04f7579965643d5c')
26
validpgpkeys=(F3691687D867B81B51CE07D9BBE43771487328A9 # bpiotrowski@archlinux.org
27
86CFFCA918CF3AF47147588051E8B148A9999C34 # evangelos@foutrelis.com
28
13975A70E63C361C73AE69EF6EEB81F8981C74C7 # richard.guenther@gmail.com
29
D3A93CAD751C2AF4F8C7AD516C35B99309B5FA62) # Jakub Jelinek <jakub@redhat.com>
30
31
32
prepare() {
33
cd gcc-${pkgver}
34
35
# link isl for in-tree builds
36
ln -s ../isl-$_islver isl
37
38
# Do not run fixincludes
39
sed -i 's@\./fixinc\.sh@-c true@' gcc/Makefile.in
40
41
# hack! - some configure tests for header files using "$CPP $CPPFLAGS"
42
sed -i "/ac_cpp=/s/\$CPPFLAGS/\$CPPFLAGS -O2/" {libiberty,gcc}/configure
43
44
mkdir -p "$srcdir/gcc-build"
45
}
46
47
build() {
48
cd gcc-build
49
50
# using -pipe causes spurious test-suite failures
51
# http://gcc.gnu.org/bugzilla/show_bug.cgi?id=48565
52
CFLAGS=${CFLAGS/-pipe/}
53
CXXFLAGS=${CXXFLAGS/-pipe/}
54
# build failure
55
CFLAGS=${CFLAGS/-Werror=format-security/}
56
CXXFLAGS=${CXXFLAGS/-Werror=format-security/}
57
58
"$srcdir"/gcc-${pkgver}/configure --prefix=/usr \
59
--program-prefix=${_target}- \
60
--with-local-prefix=/usr/${_target} \
61
--with-sysroot=/usr/${_target} \
62
--with-build-sysroot=/usr/${_target} \
63
--with-as=/usr/bin/${_target}-as \
64
--with-ld=/usr/bin/${_target}-ld \
65
--libdir=/usr/lib \
66
--libexecdir=/usr/lib \
67
--disable-nls \
68
--with-newlib \
69
--enable-languages=c,c++ \
70
--with-isl \
71
--with-linker-hash-style=gnu \
72
--with-system-zlib \
73
--enable-__cxa_atexit \
74
--enable-checking=release \
75
--enable-clocale=gnu \
76
--enable-default-pie \
77
--enable-default-ssp \
78
--enable-gnu-indirect-function \
79
--enable-gnu-unique-object \
80
--enable-install-libiberty \
81
--enable-linker-build-id \
82
--disable-lto \
83
--disable-plugin \
84
--disable-shared \
85
--disable-threads \
86
--disable-libssp \
87
--disable-libstdcxx-pch \
88
--disable-libunwind-exceptions \
89
--disable-multilib \
90
--disable-werror \
91
--target=${_target} \
92
--host=${CHOST} \
93
--build=${CHOST}
94
95
make all-gcc all-target-libgcc
96
}
97
98
package() {
99
cd gcc-build
100
101
make DESTDIR="$pkgdir" install-gcc install-target-libgcc
102
103
rm -rf "$pkgdir/usr/share"
104
105
# strip it manually
106
strip "$pkgdir/usr/bin/"* 2>/dev/null || true
107
find "$pkgdir/usr/lib" -type f -exec /usr/bin/${_target}-strip \
108
--strip-unneeded {} \; 2>/dev/null || true
109
}
110
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |