powerpc64le-linux-gnu-gcc-stage1
maintainer orphaned
· 0 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package builds GCC from official sources; the non-whitelisted host (isl.gforge.inria.fr) hosts a dependency (isl) used in-tree, which is normal for AUR toolchain packages and poses low risk as it's part of the build process, not an executed payload.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package builds GCC from official sources; the non-whitelisted host (isl.gforge.inria.fr) hosts a dependency (isl) used in-tree, which is normal for AUR toolchain packages and poses low risk as it's part of the build process, not an executed payload.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:22
http://isl.gforge.inria.fr/isl-${_islver}.tar.bz2)
PKGBUILD
1 offending line(s) highlighted
1
# Contributor: Alexander 'hatred' Drozdov <adrozdoff@gmail.com>
2
# Contributor: toha257 <toha257@gmail.com>
3
# Contributor: Allan McRae <allan@archlinux.org>
4
# Contributor: Kevin Mihelich <kevin@archlinuxarm.org>
5
# Contributor: Tavian Barnes <tavianator@tavianator.com>
6
# Maintainer: Stefan Schmidt <thrimbor.github@gmail.com>
7
8
_target="powerpc64le-linux-gnu"
9
pkgname=${_target}-gcc-stage1
10
pkgver=9.1.0
11
_majorver=${pkgver}
12
_islver=0.21
13
pkgrel=4
14
pkgdesc="The GNU Compiler Collection. Stage 1 for toolchain building (${_target})"
15
arch=(i686 x86_64)
16
license=(GPL LGPL FDL custom)
17
url='http://gcc.gnu.org'
18
depends=("${_target}-binutils>=2.30-1" libmpc zlib)
19
makedepends=(gmp mpfr)
20
options=(!emptydirs !distcc !strip)
21
source=(https://gcc.gnu.org/pub/gcc/releases/gcc-$pkgver/gcc-$pkgver.tar.xz{,.sig}
22
http://isl.gforge.inria.fr/isl-${_islver}.tar.bz2)
23
sha256sums=('79a66834e96a6050d8fe78db2c3b32fb285b230b855d0a66288235bc04b327a0'
24
SKIP
25
'd18ca11f8ad1a39ab6d03d3dcb3365ab416720fcb65b42d69f34f51bf0a0e859')
26
validpgpkeys=(33C235A34C46AA3FFB293709A328C3A2C3C45C06) # Jakub Jelinek <jakub@redhat.com>
27
28
prepare() {
29
[[ ! -d gcc ]] && ln -s gcc-${pkgver/+/-} gcc
30
cd gcc
31
32
# link isl for in-tree build
33
ln -s ../isl-${_islver} isl
34
35
# Do not run fixincludes
36
sed -i 's@\./fixinc\.sh@-c true@' gcc/Makefile.in
37
38
# hack! - some configure tests for header files using "$CPP $CPPFLAGS"
39
sed -i "/ac_cpp=/s/\$CPPFLAGS/\$CPPFLAGS -O2/" {libiberty,gcc}/configure
40
41
mkdir -p "$srcdir/gcc-build"
42
}
43
44
build() {
45
cd gcc-build
46
47
# using -pipe causes spurious test-suite failures
48
# http://gcc.gnu.org/bugzilla/show_bug.cgi?id=48565
49
CFLAGS=${CFLAGS/-pipe/}
50
CXXFLAGS=${CXXFLAGS/-pipe/}
51
52
"$srcdir/gcc/configure" --prefix=/usr \
53
--program-prefix=${_target}- \
54
--with-local-prefix=/usr/${_target} \
55
--with-sysroot=/usr/${_target} \
56
--with-build-sysroot=/usr/${_target} \
57
--with-as=/usr/bin/${_target}-as \
58
--with-ld=/usr/bin/${_target}-ld \
59
--libdir=/usr/lib \
60
--libexecdir=/usr/lib \
61
--disable-nls \
62
--with-newlib \
63
--enable-languages=c,c++ \
64
--disable-shared \
65
--disable-threads \
66
--with-system-zlib \
67
--with-isl \
68
--enable-__cxa_atexit \
69
--disable-libunwind-exceptions \
70
--enable-clocale=gnu \
71
--disable-libstdcxx-pch \
72
--disable-libssp \
73
--enable-gnu-unique-object \
74
--enable-linker-build-id \
75
--disable-lto \
76
--disable-plugin \
77
--enable-install-libiberty \
78
--with-linker-hash-style=gnu \
79
--enable-gnu-indirect-function \
80
--disable-multilib \
81
--disable-werror \
82
--enable-checking=release \
83
--enable-default-pie \
84
--enable-default-ssp \
85
--target=${_target} \
86
--host=${CHOST} \
87
--build=${CHOST}
88
89
make all-gcc all-target-libgcc
90
}
91
92
package() {
93
cd gcc-build
94
95
make DESTDIR="$pkgdir" install-gcc install-target-libgcc
96
97
rm -rf "$pkgdir/usr/share"
98
99
# strip it manually
100
strip "$pkgdir/usr/bin/"* 2>/dev/null || true
101
find "$pkgdir/usr/lib" -type f -exec /usr/bin/${_target}-strip \
102
--strip-unneeded {} \; 2>/dev/null || true
103
}
104
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |