rocm-gfx950-bin
LOW
maintainer HurricanePootis
0 votes
scanned 2026-10-06 00:19:23.678998
Why flagged
The tarball is downloaded from stable.repo.amd.com, which is AMD's own official ROCm repository infrastructure, making this a legitimate vendor binary distribution; the non-standard host flag is a false positive since it is AMD's own domain, and the package simply extracts and installs the prebuilt ROCm SDK with no obfuscation or exfiltration.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 70%): The tarball is downloaded from stable.repo.amd.com, which is AMD's own official ROCm repository infrastructure, making this a legitimate vendor binary distribution; the non-standard host flag is a false positive since it is AMD's own domain, and the package simply extracts and installs the prebuilt ROCm SDK with no obfuscation or exfiltration.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:26
"https://stable.repo.amd.com/rocm/core/tarball/therock-dist-linux-gfx950-dcgpu-10.0.0.tar.gz"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: HurricanePootis <hurricanepootis@protonmail.com>
2
# Contributor: George Sofianos <george at sofianos dot dev>
3
4
# Release notes https://rocm.docs.amd.com/en/latest/about/release-notes.html
5
pkgname=rocm-gfx950-bin
6
pkgdesc="ROCm Core SDK - CDNA4"
7
pkgver=10.0.0
8
pkgrel=1
9
epoch=0
10
arch=('x86_64')
11
url='http://www.amd.com'
12
license=('custom:AMD')
13
depends=('ocl-icd' 'gcc-libs')
14
provides=('opencl-driver' 'amdrocm-amdsmi' 'amdrocm-llvm' 'amdrocm-runtime' 'amdrocm-fft' 'amdrocm-blas' 'amdrocm-sparse' 'amdrocm-solver' 'amdrocm-dnn' 'amdrocm-rand' 'amdrocm-ccl' 'amdrocm-profiler' 'amdrocm-profiler-base' 'amdrocm-base' 'amdrocm-ck'
15
'amdrocm-debugger' 'amdrocm-hipify' 'amdrocm-opencl' 'amdrocm-decode' 'amdrocm-jpeg' 'amdrocm-rccl' 'amdrocm-rocshmem' 'amdrocm-rdc' 'amdrocm-sysdeps' 'rocm' 'rocm-core' 'comgr' 'rocm-hip' 'hip' 'hsa-rocr' 'rocminfo' 'hip-runtime-amd' 'rocm-device-libs' 'rocm-language-runtime' 'rocm-hip-runtime' 'rocm-ocl-icd' 'rocm-opencl-icd-loader' 'rocm-dbgapi' 'rocm-debug-agent' 'rocm-gdb' 'rocprofiler' 'rocprofiler-plugins' 'rocprofiler-register'
16
'roctracer' 'hsa-amd-aqlprofile' 'rocm-openmp' 'openmp-extras-runtime' 'rocm-cmake' 'rocm-smi-lib' 'amdsmi' 'amd-smi-lib' 'composable-kernel' 'hipcc' 'rocm-llvm' 'rocblas' 'rocsolver' 'half' 'hipblas' 'hipblas-common' 'hipblaslt' 'hiprand' 'rocdecode' 'rocjpeg' 'rocprim' 'hipcub'
17
'rocfft' 'hipfft' 'hipify-clang' 'hipsolver' 'rocsparse' 'hipsparse' 'hipsparselt' 'hiptensor' 'openmp-extras-dev' 'rccl' 'rocalution' 'rocrand' 'rocm-hip-libraries' 'rocthrust' 'rocprofiler-compute' 'rocprofiler-debug' 'rocprofiler-systems' 'rocm-hip-sdk' 'rocm-opencl'
18
'rocm-opencl-runtime' 'rocm-opencl-sdk' 'rocwmma' 'rocprofiler-sdk' 'rocprofiler-sdk-roctx' 'rocprofiler-sdk-rocpd' 'rocm-developer-tools' 'rocshmem' 'miopen' 'miopen-hip' 'rocm-ml-libraries' 'rocm-ml-sdk')
19
conflicts=('opencl-amd' 'opencl-amd-dev' 'rocm-bin' 'rocm-gfx103x-bin' 'rocm-gfx110x-bin' 'rocm-gfx120x-bin' 'rocm-gfx1150-bin' 'rocm-gfx1151-bin' 'rocm-gfx1152-bin' 'rocm-gfx1153-bin' 'rocm-opencl-runtime' 'rocm' 'rocm-core' 'comgr' 'rocm-hip' 'hip' 'hsa-rocr' 'rocminfo' 'hip-runtime-amd' 'rocm-device-libs' 'rocm-language-runtime' 'rocm-hip-runtime' 'rocm-ocl-icd' 'rocm-opencl-icd-loader' 'rocm-dbgapi' 'rocm-debug-agent' 'rocm-gdb'
20
'rocprofiler' 'rocprofiler-plugins' 'rocprofiler-register' 'roctracer' 'hsa-amd-aqlprofile' 'rocm-openmp' 'openmp-extras-runtime' 'rocm-cmake' 'rocm-smi-lib' 'amdsmi' 'amd-smi-lib' 'composable-kernel' 'hipcc' 'rocm-llvm' 'rocblas' 'rocsolver' 'hipblas' 'hipblas-common' 'hipblaslt' 'hiprand' 'rocdecode' 'rocjpeg' 'rocprim' 'hipcub' 'rocfft' 'hipfft' 'hipify-clang' 'hipsolver' 'rocsparse' 'hipsparse' 'hipsparselt' 'hiptensor' 'rccl' 'rocalution' 'rocrand' 'rocm-hip-libraries' 'rocthrust' 'rocprofiler-compute' 'rocprofiler-debug' 'rocprofiler-systems' 'rocm-hip-sdk' 'rocm-opencl' 'rocm-opencl-runtime' 'rocm-opencl-sdk' 'rocwmma' 'rocprofiler-sdk' 'rocprofiler-sdk-roctx' 'rocprofiler-sdk-rocpd' 'rocm-developer-tools' 'rocshmem' 'miopen' 'miopen-hip'
21
'rocm-ml-libraries' 'rocm-ml-sdk')
22
optdepends=('clinfo')
23
options=('!strip')
24
25
source=(
26
"https://stable.repo.amd.com/rocm/core/tarball/therock-dist-linux-gfx950-dcgpu-10.0.0.tar.gz"
27
)
28
noextract=(therock-dist-linux-gfx950-dcgpu-10.0.0.tar.gz)
29
30
sha256sums=('3bf27df141e78dbb14e4e1af3b5f8a4238ff8bf97565ccedd965ae4dddc5e9c8')
31
32
prepare() {
33
mkdir -p "${srcdir}/opt/rocm/core"
34
bsdtar xf therock-dist-linux-gfx950-dcgpu-10.0.0.tar.gz -C ${srcdir}/opt/rocm/core
35
}
36
37
package() {
38
mv "${srcdir}/opt/" "${pkgdir}/"
39
40
mkdir -p "${pkgdir}/opt/amdgpu/share/libdrm"
41
cd "${pkgdir}/opt/amdgpu/share/libdrm"
42
ln -s /usr/share/libdrm/amdgpu.ids amdgpu.ids
43
44
mkdir -p "${pkgdir}/etc/OpenCL/vendors"
45
echo /opt/rocm/core/lib/opencl/libamdocl64.so > "${pkgdir}/etc/OpenCL/vendors/amdocl64.icd"
46
47
mkdir -p "${pkgdir}/etc/ld.so.conf.d"
48
echo /opt/rocm/core/lib >> "$pkgdir/etc/ld.so.conf.d/rocm-bin.conf"
49
50
mkdir -p "${pkgdir}/opt/rocm"
51
cd "${pkgdir}/opt/rocm"
52
ln -s /opt/rocm/core/lib lib
53
ln -s /opt/rocm/core/include include
54
ln -s /opt/rocm/core/bin bin
55
56
57
mkdir -p "${pkgdir}/etc/profile.d"
58
echo export PATH="\${PATH}:/opt/rocm/core/bin:/opt/rocm/core/lib/llvm/bin" > "$pkgdir/etc/profile.d/rocm-bin.sh"
59
}
60
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-10-06 00:19:23 | Low | 3 |
| 2026-10-06 00:13:36 | Low | 3 |
| 2026-10-05 23:40:58 | Medium | 2 |