sdrsharp
LOW
maintainer DodoGTA
11 votes
scanned 2026-09-17 00:27:14.276658
Why flagged
The package downloads a source archive from a non-whitelisted but plausibly project-maintained host (iz3mez.it) for building the official SDR# software; the build process is transparent and involves only local compilation and installation of legitimate binaries and icons, with no evidence of remote code execution or malicious behavior.
Triggered rules
Low
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source archive from a non-whitelisted but plausibly project-maintained host (iz3mez.it) for building the official SDR# software; the build process is transparent and involves only local compilation and installation of legitimate binaries and icons, with no evidence of remote code execution or malicious behavior.
1 higher static finding superseded - not the current verdict (shown for transparency)
Medium
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:15
source=("${_sdrsharp}.zip::https://www.iz3mez.it/software/SDRSharp/SDRSharp_v${pkgver:(-4)}.zip"
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Echo J. <aidas957 at gmail dot com>
2
# Contributor: Viktor Drobot (aka dviktor) linux776 [at] gmail [dot] com
3
# shellcheck shell=bash disable=SC2034,SC2164
4
5
pkgname=sdrsharp
6
pkgver=1.0.0.1457
7
pkgrel=5
8
pkgdesc="The most popular SDR program"
9
arch=(i686 x86_64)
10
url="https://airspy.com"
11
license=(LicenseRef-SDRSharp) # It's basically identical to MS-RSL (which may not be suitable for binaries)
12
depends=(alsa-lib bash hicolor-icon-theme mono portaudio rtl-sdr)
13
makedepends=(icoutils unzip)
14
_sdrsharp="${pkgname}-${pkgver}"
15
source=("${_sdrsharp}.zip::https://www.iz3mez.it/software/SDRSharp/SDRSharp_v${pkgver:(-4)}.zip"
16
"sdrsharp_wrapper"
17
"${pkgname}.desktop"
18
"adsbspy.desktop"
19
"airspycalibrate.desktop"
20
"astrospy.desktop"
21
"spectrumspy.desktop")
22
noextract=("${_sdrsharp}.zip")
23
sha256sums=('bdf853040110dbd72720cb63b7696d574e3b00d739b17839e8d93cab3e1df400'
24
'd8e93aeec307a66d1c61f4b54385a85de2f239f6cfc7f38e9b92d85e5a8a40cb'
25
'38e7208e368cb27df6bb639e650726d057739bf88638a2536a32f540721a588f'
26
'1501543afc7475bed9f790398aa9a8c3bb70da3750a6de02a946a9b744e2a668'
27
'cfb7f32fcba96f47e770c6388819d4d88c7565afae5734cbb16e85f0742843d3'
28
'886ea5ebcfef1d738a258317347cfeebc004ffa7831c91e792d4b84be8844fc8'
29
'93363a6df201bf73834ded017874485188898c11122cf8a22f30e2a8f6377b08')
30
install="${pkgname}.install"
31
32
prepare() {
33
echo "Extracting SDRSharp archive..."
34
unzip -q -o ${_sdrsharp}.zip -d ${_sdrsharp}
35
cd ${_sdrsharp}
36
37
rm httpget.exe install-rtlsdr.bat unzip.exe
38
}
39
40
build() {
41
mkdir build || true
42
43
# compile and optimize executables
44
mono --aot --optimize=all ${_sdrsharp}/*.exe
45
mv ${_sdrsharp}/*.exe.so build
46
}
47
48
package() {
49
# install stuff
50
install -Dm644 "${srcdir}"/${_sdrsharp}/* -t "${pkgdir}"/opt/${pkgname}
51
install -Dm644 "${srcdir}"/build/*.exe.so "${pkgdir}"/opt/${pkgname} || true
52
53
cd "${pkgdir}"/opt/${pkgname}
54
55
# link libraries
56
ln -s /usr/lib/librtlsdr.so librtlsdr.dll
57
ln -s /usr/lib/libportaudio.so libportaudio.so
58
59
# extract/install the icons
60
for app in AirspyCalibrate AstroSpy SDRSharp SpectrumSpy; do
61
wrestool -x -t14 ${app}.exe | icotool -x -w 64 -o - - | install -Dm644 \
62
/dev/stdin "${pkgdir}"/usr/share/icons/hicolor/64x64/apps/${app}.png
63
done
64
wrestool -x -t14 ADSBSpy.exe | icotool -x -w 48 -o - - | install -Dm644 \
65
/dev/stdin "${pkgdir}"/usr/share/icons/hicolor/48x48/apps/ADSBSpy.png
66
67
# install the config files
68
install -Dm644 *.exe.config -t "${pkgdir}"/usr/share/${pkgname}
69
70
# install wrapper stuff/desktop entries
71
install -Dm755 "${srcdir}"/sdrsharp_wrapper -t "${pkgdir}"/usr/bin
72
for app in ADSBSpy AirspyCalibrate AstroSpy SDRSharp SpectrumSpy; do
73
[ ${app} = ADSBSpy ] || ln -sf /tmp/${app}.exe.config "${pkgdir}"/opt/${pkgname}/${app}.exe.config
74
ln -s sdrsharp_wrapper "${pkgdir}"/usr/bin/${app}
75
ln -s ${app} "${pkgdir}"/usr/bin/${app,,}
76
done
77
install -Dm644 "${srcdir}"/*.desktop -t "${pkgdir}"/usr/share/applications
78
79
# install license
80
install -Dm644 LICENSE.txt "${pkgdir}"/usr/share/licenses/${pkgname}/LICENSE.txt
81
}
82
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |