powerpc64le-linux-gnu-gcc-stage2
maintainer orphaned
· 0 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The source URL for isl is from a non-whitelisted but legitimate project host (gforge.inria.fr), which is the official site for ISL; the package builds from source and does not execute untrusted binaries, limiting supply-chain risk to LOW despite the non-standard domain.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source URL for isl is from a non-whitelisted but legitimate project host (gforge.inria.fr), which is the official site for ISL; the package builds from source and does not execute untrusted binaries, limiting supply-chain risk to LOW despite the non-standard domain.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:25
http://isl.gforge.inria.fr/isl-${_islver}.tar.bz2)
PKGBUILD
1 offending line(s) highlighted
1
# Contributor: Alexander 'hatred' Drozdov <adrozdoff@gmail.com>
2
# Contributor: toha257 <toha257@gmail.com>
3
# Contributor: Allan McRae <allan@archlinux.org>
4
# Contributor: Kevin Mihelich <kevin@archlinuxarm.org>
5
# Contributor: Tavian Barnes <tavianator@tavianator.com>
6
# Maintainer: Tavian Barnes <tavianator@tavianator.com>
7
8
_target="powerpc64le-linux-gnu"
9
pkgname=${_target}-gcc-stage2
10
pkgver=9.1.0
11
_majorver=${pkgver}
12
_islver=0.21
13
pkgrel=4
14
pkgdesc="The GNU Compiler Collection. Stage 2 for toolchain building (${_target})"
15
arch=(i686 x86_64)
16
license=(GPL LGPL FDL custom)
17
url='http://gcc.gnu.org'
18
depends=("${_target}-binutils>=2.30-1" "${_target}-glibc-headers>=2.27-1" libmpc zlib)
19
makedepends=(gmp mpfr)
20
options=(!emptydirs !distcc !strip)
21
conflicts=("${_target}-gcc-stage1")
22
replaces=("${_target}-gcc-stage1")
23
provides=("${_target}-gcc-stage1=${pkgver}")
24
source=(https://gcc.gnu.org/pub/gcc/releases/gcc-$pkgver/gcc-$pkgver.tar.xz{,.sig}
25
http://isl.gforge.inria.fr/isl-${_islver}.tar.bz2)
26
sha256sums=('79a66834e96a6050d8fe78db2c3b32fb285b230b855d0a66288235bc04b327a0'
27
SKIP
28
'd18ca11f8ad1a39ab6d03d3dcb3365ab416720fcb65b42d69f34f51bf0a0e859')
29
validpgpkeys=(33C235A34C46AA3FFB293709A328C3A2C3C45C06) # Jakub Jelinek <jakub@redhat.com>
30
31
prepare() {
32
[[ ! -d gcc ]] && ln -s gcc-${pkgver/+/-} gcc
33
cd gcc
34
35
# link isl for in-tree build
36
ln -s ../isl-${_islver} isl
37
38
# Do not run fixincludes
39
sed -i 's@\./fixinc\.sh@-c true@' gcc/Makefile.in
40
41
# hack! - some configure tests for header files using "$CPP $CPPFLAGS"
42
sed -i "/ac_cpp=/s/\$CPPFLAGS/\$CPPFLAGS -O2/" {libiberty,gcc}/configure
43
44
mkdir -p "$srcdir/gcc-build"
45
}
46
47
build() {
48
cd gcc-build
49
50
# using -pipe causes spurious test-suite failures
51
# http://gcc.gnu.org/bugzilla/show_bug.cgi?id=48565
52
CFLAGS=${CFLAGS/-pipe/}
53
CXXFLAGS=${CXXFLAGS/-pipe/}
54
55
"$srcdir/gcc/configure" --prefix=/usr \
56
--program-prefix=${_target}- \
57
--with-local-prefix=/usr/${_target} \
58
--with-sysroot=/usr/${_target} \
59
--with-build-sysroot=/usr/${_target} \
60
--with-as=/usr/bin/${_target}-as \
61
--with-ld=/usr/bin/${_target}-ld \
62
--libdir=/usr/lib \
63
--libexecdir=/usr/lib \
64
--disable-nls \
65
--enable-languages=c,c++ \
66
--disable-shared \
67
--disable-threads \
68
--with-system-zlib \
69
--with-isl \
70
--enable-__cxa_atexit \
71
--disable-libunwind-exceptions \
72
--enable-clocale=gnu \
73
--disable-libstdcxx-pch \
74
--disable-libssp \
75
--enable-gnu-unique-object \
76
--enable-linker-build-id \
77
--disable-lto \
78
--disable-plugin \
79
--enable-install-libiberty \
80
--with-linker-hash-style=gnu \
81
--enable-gnu-indirect-function \
82
--disable-multilib \
83
--disable-werror \
84
--enable-checking=release \
85
--enable-default-pie \
86
--enable-default-ssp \
87
--target=${_target} \
88
--host=${CHOST} \
89
--build=${CHOST}
90
91
make all-gcc all-target-libgcc
92
}
93
94
package() {
95
cd gcc-build
96
97
make DESTDIR="$pkgdir" install-gcc install-target-libgcc
98
99
rm -rf "$pkgdir/usr/share"
100
101
# strip it manually
102
strip "$pkgdir/usr/bin/"* 2>/dev/null || true
103
find "$pkgdir/usr/lib" -type f -exec /usr/bin/${_target}-strip \
104
--strip-unneeded {} \; 2>/dev/null || true
105
}
106
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 00:25:53 | LOW | 2 |
| 2026-07-28 00:07:28 | LOW | 2 |
| 2026-07-27 00:24:32 | LOW | 2 |
| 2026-07-26 00:07:32 | LOW | 2 |
| 2026-07-25 00:13:44 | LOW | 2 |
| 2026-07-24 00:02:28 | LOW | 2 |
| 2026-07-23 00:14:47 | LOW | 2 |
| 2026-07-22 00:29:32 | LOW | 2 |
| 2026-07-21 00:24:15 | LOW | 2 |
| 2026-07-20 00:19:49 | LOW | 2 |
| 2026-07-19 00:17:08 | LOW | 2 |
| 2026-07-18 00:14:48 | LOW | 2 |
| 2026-07-17 00:06:16 | LOW | 2 |
| 2026-07-16 00:05:41 | LOW | 2 |
| 2026-07-15 00:09:25 | LOW | 2 |