ps3-spu-gcc
LOW
maintainer disc-kuraudo
1 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads source code from official GNU and Sourceware project hosts to build a cross-compiling GCC toolchain; all sources are standard project infrastructure, and the build process is normal for such toolchains, despite one URL being flagged as non-standard due to domain variation.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads source code from official GNU and Sourceware project hosts to build a cross-compiling GCC toolchain; all sources are standard project infrastructure, and the build process is normal for such toolchains, despite one URL being flagged as non-standard due to domain variation.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:24
"http://sourceware.org/pub/newlib/newlib-${_newlib_pkgver}.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Darjan Krijan [https://disc-kuraudo.eu]
2
3
_target="spu"
4
_newlib_pkgver="1.20.0"
5
_gmp_pkgver="6.1.0"
6
_isl_pkgver="0.18"
7
_mpc_pkgver="1.0.3"
8
_mpfr_pkgver="3.1.4"
9
_pkgname="gcc"
10
pkgname="ps3-${_target}-${_pkgname}"
11
pkgver="9.5.0"
12
pkgrel=3
13
pkgdesc="GCC for cross-compiling to ${_target} (PS3 GameOS)"
14
arch=(x86_64 aarch64 powerpc64le powerpc64 powerpc riscv64)
15
url='https://gcc.gnu.org/'
16
license=(GPL LGPL)
17
makedepends=(patch python)
18
checkdepends=(dejagnu expect inetutils python-pytest tcl)
19
depends=(ps3-env ps3-spu-binutils)
20
options=(!emptydirs !strip staticlibs !lto)
21
source=(
22
"https://ftp.gnu.org/gnu/${_pkgname}/${_pkgname}-${pkgver}/${_pkgname}-${pkgver}.tar.xz"
23
"${_pkgname}-${pkgver}-ps3-${_target}.patch"
24
"http://sourceware.org/pub/newlib/newlib-${_newlib_pkgver}.tar.gz"
25
"newlib-${_newlib_pkgver}-ps3-${_target}.patch"
26
"http://ftp.gnu.org/gnu/gmp/gmp-${_gmp_pkgver}.tar.bz2"
27
"http://gcc.gnu.org/pub/gcc/infrastructure/isl-${_isl_pkgver}.tar.bz2"
28
"http://ftp.gnu.org/gnu/mpc/mpc-${_mpc_pkgver}.tar.gz"
29
"http://ftp.gnu.org/gnu/mpfr/mpfr-${_mpfr_pkgver}.tar.bz2"
30
)
31
sha256sums=(
32
'27769f64ef1d4cd5e2be8682c0c93f9887983e6cfd1a927ce5a0a2915a95cf8f'
33
'86d3dca49e0a8cf0d0b56619c19da2047c5b6bda939e4856f4de78e4866fd55b'
34
'c644b2847244278c57bec2ddda69d8fab5a7c767f3b9af69aa7aa3da823ff692'
35
'9ffcdfc74871b267d53b66e525162467ce248d89b77506bb8db2409f3d0b51ae'
36
'498449a994efeba527885c10405993427995d3f86b8768d8cdf8d9dd7c6b73e8'
37
'6b8b0fd7f81d0a957beb3679c81bbb34ccc7568d5682844d8924424a0dadcb1b'
38
'617decc6ea09889fb08ede330917a00b16809b8db88c29c31bfbb49cbf88ecc3'
39
'd3103a80cdad2407ed581f3618c4bed04e0c92d1cf771a65ead662cc397f7775'
40
)
41
42
source /opt/ps3dev/ps3toolchain.sh
43
44
_prefix="${PS3DEV}/${_target}"
45
46
prepare() {
47
patch -p1 -d "newlib-${_newlib_pkgver}" < "${srcdir}/newlib-${_newlib_pkgver}-ps3-${_target}.patch"
48
49
cd "${_pkgname}-${pkgver}"
50
51
patch -p1 < "${srcdir}/${_pkgname}-${pkgver}-ps3-${_target}.patch"
52
53
ln -s "${srcdir}/newlib-${_newlib_pkgver}/newlib" .
54
ln -s "${srcdir}/newlib-${_newlib_pkgver}/libgloss" .
55
56
ln -s "${srcdir}/gmp-${_gmp_pkgver}.tar.bz2" .
57
ln -s "${srcdir}/isl-${_isl_pkgver}.tar.bz2" .
58
ln -s "${srcdir}/mpc-${_mpc_pkgver}.tar.gz" .
59
ln -s "${srcdir}/mpfr-${_mpfr_pkgver}.tar.bz2" .
60
}
61
62
build() {
63
cd "${_pkgname}-${pkgver}"
64
65
# symlinked in prepare(), just unpack
66
./contrib/download_prerequisites
67
68
mkdir -p "build-${_target}"
69
cd "build-${_target}"
70
71
unset CFLAGS CXXFLAGS LDFLAGS
72
local _configure_flags=(
73
--prefix="${_prefix}"
74
--target="${_target}"
75
76
--with-newlib
77
--with-pic
78
79
#--enable-languages="c,c++"
80
--enable-languages="c"
81
--enable-lto
82
--enable-threads
83
--enable-newlib-multithread
84
--enable-newlib-hw-fp
85
--enable-obsolete
86
87
--disable-dependency-tracking
88
--disable-libcc1
89
--disable-libssp
90
--disable-multilib
91
--disable-nls
92
--disable-shared
93
--disable-win32-registry
94
)
95
../configure "${_configure_flags[@]}"
96
97
make
98
}
99
100
check() {
101
cd "${_pkgname}-${pkgver}/build-${_target}"
102
103
LDFLAGS="" make --keep-going check |& tee -a "ps3-${_target}-${_pkgname}-check.log" || true
104
}
105
106
package() {
107
cd "${_pkgname}-${pkgver}/build-${_target}"
108
109
make DESTDIR="${pkgdir}" install -j1
110
111
if [ -f "ps3-${_target}-${_pkgname}-check.log" ]; then
112
cp "ps3-${_target}-${_pkgname}-check.log" "${pkgdir}/${_prefix}/"
113
fi
114
115
rm -f "${pkgdir}/${_prefix}/share/info/dir"
116
}
117
118
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |