scangearmp-mp280

LOW

maintainer hidayat.pcd 7 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source is a Canon official driver tarball from gdlp01.c-wss.com, a plausible Canon download host; it is built from source, not a prebuilt binary, and the checksums are provided, making it a standard AUR package with low risk despite the non-whitelisted domain.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a Canon official driver tarball from gdlp01.c-wss.com, a plausible Canon download host; it is built from source, not a prebuilt binary, and the checksums are provided, making it a standard AUR package with low risk despite the non-whitelisted domain.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:41 source=(http://gdlp01.c-wss.com/gds/3/0100003033/01/scangearmp-source-${_pkgver}.tar.gz

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Muhammad Hidayat <hidayat.pcd@gmail.com>
    
      2# Former maintainer: Jakub Klinkovský <kuba.klinkovsky@gmail.com>
    
      3#
    
      4# If you're going to adapt this package to other printer models,
    
      5# here is a list of printer names and IDs:
    
      6#
    
      7#   name - id
    
      8# -------------
    
      9#  mp250 - 356
    
      10#  mp280 - 370
    
      11#  mp495 - 369
    
      12# mg5100 - 373
    
      13# mg5200 - 374
    
      14# mg6100 - 376
    
      15# mg8100 - 377
    
      16#
    
      17# Just change the following variables accordingly:
    
      18_name=mp280
    
      19_id=370
    
      20
    
      21pkgname=scangearmp-${_name}
    
      22pkgver=1.60
    
      23pkgrel=5
    
      24_pkgver=1.60-1
    
      25pkgdesc="Canon Scanner Driver (${_name} series)"
    
      26url="http://support-my.canon-asia.com/contents/MY/EN/0100303302.html"
    
      27arch=('i686' 'x86_64')
    
      28license=('custom')
    
      29depends=(
    
      30    'sane'
    
      31    'gimp'
    
      32    'gtk2'
    
      33    'libpng>=1.5'
    
      34    'libusb-compat'
    
      35    'glibc'
    
      36)
    
      37makedepends=(
    
      38    'autoconf>=2.13'
    
      39    'automake>=1.6'
    
      40)
    
      41source=(http://gdlp01.c-wss.com/gds/3/0100003033/01/scangearmp-source-${_pkgver}.tar.gz
    
      42        fix_png15.patch
    
      43        fix_configure.patch
    
      44        fix_gimp2.9.patch
    
      45)
    
      46md5sums=('15782d670f9d5c5904e00610508114f3'
    
      47         '6609d7fe171e67451658a3665442972c'
    
      48         '8c21b22ef834b17bcdad6e97d8916ca2'
    
      49         'f90572fce7a3878438f7c93360f615e4')
    
      50
    
      51if [ "$CARCH" == "x86_64" ]; then  
    
      52    _libdir=libs_bin64
    
      53else
    
      54    _libdir=libs_bin32
    
      55fi
    
      56
    
      57build() {
    
      58    # Apply patches
    
      59    cd "$srcdir/scangearmp-source-$_pkgver"
    
      60    patch -p1 -i "$srcdir/fix_png15.patch"
    
      61    patch -p1 -i "$srcdir/fix_configure.patch"
    
      62    patch -p1 -i "$srcdir/fix_gimp2.9.patch"
    
      63    
    
      64    # Prepare build
    
      65    cd "$srcdir/scangearmp-source-$_pkgver/scangearmp"
    
      66    ./autogen.sh --prefix=/usr LDFLAGS="-L$(pwd)/../com/$_libdir" LIBS=-lm
    
      67    
    
      68    # Force the use of system's libtool
    
      69    rm libtool
    
      70    ln -s $(which libtool) .
    
      71    
    
      72    # Build package
    
      73    make clean
    
      74    make    
    
      75}
    
      76
    
      77package() {
    
      78    # Install package
    
      79    cd "$srcdir/scangearmp-source-$_pkgver/scangearmp"
    
      80    make install DESTDIR="$pkgdir"
    
      81
    
      82    # Install common libraries
    
      83    for file in libcncpcmcm.so.8.0.1 libcncpmsimg.so.1.0.2 libcncpmslld.so.1.0.1 libcncpmsui.so.1.6.0 libcncpnet.so.1.2.0; do
    
      84        install -m 755 "$srcdir/scangearmp-source-$_pkgver/com/$_libdir/$file" "$pkgdir/usr/lib/"
    
      85    done
    
      86    
    
      87    # Install model specific libraries
    
      88    for file in libcncpmsimg370.so.1.6.0 libcncpmslld370c.so.1.04.1 libcncpmslld370.so.1.6.0; do
    
      89        install -m 755 "$srcdir/scangearmp-source-$_pkgver/$_id/$_libdir/$file" "$pkgdir/usr/lib/"
    
      90    done
    
      91  
    
      92    # Create symbolic links
    
      93    cd "$pkgdir/usr/lib/"
    
      94    ln -s libcncpcmcm.so.8.0.1 libcncpcmcm.so
    
      95    ln -s libcncpmsimg.so.1.0.2 libcncpmsimg.so
    
      96    ln -s libcncpmslld.so.1.0.1 libcncpmslld.so
    
      97    ln -s libcncpmsui.so.1.6.0 libcncpmsui.so
    
      98    ln -s libcncpnet.so.1.2.0 libcncpnet.so
    
      99    
    
      100    ln -s libcncpmsimg370.so.1.6.0 libcncpmsimg370.so
    
      101    ln -s libcncpmslld370c.so.1.04.1 libcncpmslld370c.so
    
      102    ln -s libcncpmslld370.so.1.6.0 libcncpmslld370.so
    
      103    
    
      104    # Make scangearmp usable from gimp
    
      105    install -dm 755 "$pkgdir/usr/lib/gimp/2.0/plug-ins/"
    
      106    ln -s /usr/bin/scangearmp "$pkgdir/usr/lib/gimp/2.0/plug-ins/"
    
      107
    
      108    # FIXME
    
      109    mv "$pkgdir/usr/lib/bjlib" "$pkgdir/usr/lib/canon_mfp.conf"
    
      110
    
      111    # Install model specific .tbl and .dat files
    
      112    install -dm 755 "$pkgdir/usr/lib/bjlib/"
    
      113    install -m 644 "$srcdir/scangearmp-source-$_pkgver/$_id/"*.tbl "$pkgdir/usr/lib/bjlib/"
    
      114    install -m 644 "$srcdir/scangearmp-source-$_pkgver/$_id/"*.DAT "$pkgdir/usr/lib/bjlib/"
    
      115    
    
      116    # FIXME
    
      117    mv "$pkgdir/usr/lib/canon_mfp.conf" "$pkgdir/usr/lib/bjlib/"
    
      118
    
      119    # Install .ini file
    
      120    install -m 666 "$srcdir/scangearmp-source-$_pkgver/com/ini/canon_mfp_net.ini" "$pkgdir/usr/lib/bjlib/"
    
      121
    
      122    # Fix and install udev rules
    
      123    sed -i -e 's/SYSFS/ATTR/g' "$srcdir/scangearmp-source-$_pkgver/scangearmp/etc/80-canon_mfp.rules"
    
      124    install -dm 755 "$pkgdir/usr/lib/udev/rules.d/"
    
      125    install -m 644 "$srcdir/scangearmp-source-$_pkgver/scangearmp/etc/80-canon_mfp.rules" "$pkgdir/usr/lib/udev/rules.d/"
    
      126
    
      127    # Remove unneeded files
    
      128    rm "$pkgdir/usr/lib/libsane-canon_mfp.a"
    
      129    rm "$pkgdir/usr/lib/libsane-canon_mfp.la"
    
      130
    
      131    # Install license files
    
      132    cd "$srcdir/scangearmp-source-$_pkgver"
    
      133    install -d "$pkgdir/usr/share/licenses/$pkgname/"
    
      134    install -m 644 LICENSE-* "$pkgdir/usr/share/licenses/$pkgname/"
    
      135}
    
      136

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2