powerpc64-linux-gnu-gcc-stage2
maintainer orphaned
· 1 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The non-standard host is sourceforge.net for the isl library, which is a standard upstream source; the package builds GCC and includes isl as a bundled dependency, a common practice, with no evidence of malicious intent or supply-chain risk.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The non-standard host is sourceforge.net for the isl library, which is a standard upstream source; the package builds GCC and includes isl as a bundled dependency, a common practice, with no evidence of malicious intent or supply-chain risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:25
https://libisl.sourceforge.io/isl-$_islver.tar.xz)
PKGBUILD
1 offending line(s) highlighted
1
# Contributor: Alexander 'hatred' Drozdov <adrozdoff@gmail.com>
2
# Contributor: toha257 <toha257@gmail.com>
3
# Contributor: Allan McRae <allan@archlinux.org>
4
# Contributor: Kevin Mihelich <kevin@archlinuxarm.org>
5
# Contributor: Tavian Barnes <tavianator@tavianator.com>
6
# Maintainer: Tavian Barnes <tavianator@tavianator.com>
7
8
_target="powerpc64-linux-gnu"
9
pkgname=${_target}-gcc-stage2
10
pkgver=15.1.0
11
_majorver=${pkgver}
12
_islver=0.27
13
pkgrel=1
14
pkgdesc="The GNU Compiler Collection. Stage 2 for toolchain building (${_target})"
15
arch=(i686 x86_64)
16
license=(GPL LGPL FDL custom)
17
url='http://gcc.gnu.org'
18
depends=("${_target}-binutils>=2.30-1" "${_target}-glibc-headers" libmpc zlib)
19
makedepends=(gmp mpfr)
20
options=(!emptydirs !distcc !strip)
21
conflicts=("${_target}-gcc-stage1")
22
replaces=("${_target}-gcc-stage1")
23
provides=("${_target}-gcc-stage1=${pkgver}" $_target-gcc)
24
source=(https://gcc.gnu.org/pub/gcc/releases/gcc-$pkgver/gcc-$pkgver.tar.xz{,.sig}
25
https://libisl.sourceforge.io/isl-$_islver.tar.xz)
26
sha256sums=('e2b09ec21660f01fecffb715e0120265216943f038d0e48a9868713e54f06cea'
27
'SKIP'
28
'6d8babb59e7b672e8cb7870e874f3f7b813b6e00e6af3f8b04f7579965643d5c')
29
validpgpkeys=(F3691687D867B81B51CE07D9BBE43771487328A9 # bpiotrowski@archlinux.org
30
86CFFCA918CF3AF47147588051E8B148A9999C34 # evangelos@foutrelis.com
31
13975A70E63C361C73AE69EF6EEB81F8981C74C7 # richard.guenther@gmail.com
32
D3A93CAD751C2AF4F8C7AD516C35B99309B5FA62) # Jakub Jelinek <jakub@redhat.com>
33
34
35
prepare() {
36
cd gcc-${pkgver}
37
38
# link isl for in-tree builds
39
ln -s ../isl-$_islver isl
40
41
# Do not run fixincludes
42
sed -i 's@\./fixinc\.sh@-c true@' gcc/Makefile.in
43
44
# hack! - some configure tests for header files using "$CPP $CPPFLAGS"
45
sed -i "/ac_cpp=/s/\$CPPFLAGS/\$CPPFLAGS -O2/" {libiberty,gcc}/configure
46
47
mkdir -p "$srcdir/gcc-build"
48
}
49
50
build() {
51
cd gcc-build
52
53
# using -pipe causes spurious test-suite failures
54
# http://gcc.gnu.org/bugzilla/show_bug.cgi?id=48565
55
CFLAGS=${CFLAGS/-pipe/}
56
CXXFLAGS=${CXXFLAGS/-pipe/}
57
# using -Werror=format-security causes libcpp buildig failures
58
# https://gcc.gnu.org/bugzilla/show_bug.cgi?id=100207
59
CFLAGS=${CFLAGS/-Werror=format-security/}
60
CXXFLAGS=${CXXFLAGS/-Werror=format-security/}
61
62
"$srcdir"/gcc-${pkgver}/configure --prefix=/usr \
63
--program-prefix=${_target}- \
64
--with-local-prefix=/usr/${_target} \
65
--with-sysroot=/usr/${_target} \
66
--with-build-sysroot=/usr/${_target} \
67
--with-as=/usr/bin/${_target}-as \
68
--with-ld=/usr/bin/${_target}-ld \
69
--libdir=/usr/lib \
70
--libexecdir=/usr/lib \
71
--disable-nls \
72
--enable-languages=c,c++ \
73
--with-isl \
74
--with-linker-hash-style=gnu \
75
--with-system-zlib \
76
--enable-__cxa_atexit \
77
--enable-checking=release \
78
--enable-clocale=gnu \
79
--enable-default-pie \
80
--enable-default-ssp \
81
--enable-gnu-indirect-function \
82
--enable-gnu-unique-object \
83
--enable-install-libiberty \
84
--enable-linker-build-id \
85
--disable-lto \
86
--disable-plugin \
87
--disable-shared \
88
--disable-threads \
89
--disable-libssp \
90
--disable-libstdcxx-pch \
91
--disable-libunwind-exceptions \
92
--disable-multilib \
93
--disable-werror \
94
--target=${_target} \
95
--host=${CHOST} \
96
--build=${CHOST}
97
98
make all-gcc all-target-libgcc
99
}
100
101
package() {
102
cd gcc-build
103
104
make DESTDIR="$pkgdir" install-gcc install-target-libgcc
105
106
rm -rf "$pkgdir/usr/share"
107
108
# strip it manually
109
strip "$pkgdir/usr/bin/"* 2>/dev/null || true
110
find "$pkgdir/usr/lib" -type f -exec /usr/bin/${_target}-strip \
111
--strip-unneeded {} \; 2>/dev/null || true
112
}
113
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |