sdrsharp

maintainer DodoGTA · 11 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a source archive from a non-whitelisted but plausibly project-maintained host (iz3mez.it) for building the official SDR# software; the build process is transparent and involves only local compilation and installation of legitimate binaries and icons, with no evidence of remote code execution or malicious behavior.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source archive from a non-whitelisted but plausibly project-maintained host (iz3mez.it) for building the official SDR# software; the build process is transparent and involves only local compilation and installation of legitimate binaries and icons, with no evidence of remote code execution or malicious behavior.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:15 source=("${_sdrsharp}.zip::https://www.iz3mez.it/software/SDRSharp/SDRSharp_v${pkgver:(-4)}.zip"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Echo J. <aidas957 at gmail dot com>
    
      2# Contributor: Viktor Drobot (aka dviktor) linux776 [at] gmail [dot] com
    
      3# shellcheck shell=bash disable=SC2034,SC2164
    
      4
    
      5pkgname=sdrsharp
    
      6pkgver=1.0.0.1457
    
      7pkgrel=5
    
      8pkgdesc="The most popular SDR program"
    
      9arch=(i686 x86_64)
    
      10url="https://airspy.com"
    
      11license=(LicenseRef-SDRSharp) # It's basically identical to MS-RSL (which may not be suitable for binaries)
    
      12depends=(alsa-lib bash hicolor-icon-theme mono portaudio rtl-sdr)
    
      13makedepends=(icoutils unzip)
    
      14_sdrsharp="${pkgname}-${pkgver}"
    
      15source=("${_sdrsharp}.zip::https://www.iz3mez.it/software/SDRSharp/SDRSharp_v${pkgver:(-4)}.zip"
    
      16        "sdrsharp_wrapper"
    
      17        "${pkgname}.desktop"
    
      18        "adsbspy.desktop"
    
      19        "airspycalibrate.desktop"
    
      20        "astrospy.desktop"
    
      21        "spectrumspy.desktop")
    
      22noextract=("${_sdrsharp}.zip")
    
      23sha256sums=('bdf853040110dbd72720cb63b7696d574e3b00d739b17839e8d93cab3e1df400'
    
      24            'd8e93aeec307a66d1c61f4b54385a85de2f239f6cfc7f38e9b92d85e5a8a40cb'
    
      25            '38e7208e368cb27df6bb639e650726d057739bf88638a2536a32f540721a588f'
    
      26            '1501543afc7475bed9f790398aa9a8c3bb70da3750a6de02a946a9b744e2a668'
    
      27            'cfb7f32fcba96f47e770c6388819d4d88c7565afae5734cbb16e85f0742843d3'
    
      28            '886ea5ebcfef1d738a258317347cfeebc004ffa7831c91e792d4b84be8844fc8'
    
      29            '93363a6df201bf73834ded017874485188898c11122cf8a22f30e2a8f6377b08')
    
      30install="${pkgname}.install"
    
      31
    
      32prepare() {
    
      33  echo "Extracting SDRSharp archive..."
    
      34  unzip -q -o ${_sdrsharp}.zip -d ${_sdrsharp}
    
      35  cd ${_sdrsharp}
    
      36
    
      37  rm httpget.exe install-rtlsdr.bat unzip.exe
    
      38}
    
      39
    
      40build() {
    
      41  mkdir build || true
    
      42
    
      43  # compile and optimize executables
    
      44  mono --aot --optimize=all ${_sdrsharp}/*.exe
    
      45  mv ${_sdrsharp}/*.exe.so build
    
      46}
    
      47
    
      48package() {
    
      49  # install stuff
    
      50  install -Dm644 "${srcdir}"/${_sdrsharp}/* -t "${pkgdir}"/opt/${pkgname}
    
      51  install -Dm644 "${srcdir}"/build/*.exe.so "${pkgdir}"/opt/${pkgname} || true
    
      52
    
      53  cd "${pkgdir}"/opt/${pkgname}
    
      54
    
      55  # link libraries
    
      56  ln -s /usr/lib/librtlsdr.so librtlsdr.dll
    
      57  ln -s /usr/lib/libportaudio.so libportaudio.so
    
      58
    
      59  # extract/install the icons
    
      60  for app in AirspyCalibrate AstroSpy SDRSharp SpectrumSpy; do
    
      61    wrestool -x -t14 ${app}.exe | icotool -x -w 64 -o - - | install -Dm644 \
    
      62      /dev/stdin "${pkgdir}"/usr/share/icons/hicolor/64x64/apps/${app}.png
    
      63  done
    
      64  wrestool -x -t14 ADSBSpy.exe | icotool -x -w 48 -o - - | install -Dm644 \
    
      65    /dev/stdin "${pkgdir}"/usr/share/icons/hicolor/48x48/apps/ADSBSpy.png
    
      66
    
      67  # install the config files
    
      68  install -Dm644 *.exe.config -t "${pkgdir}"/usr/share/${pkgname}
    
      69
    
      70  # install wrapper stuff/desktop entries
    
      71  install -Dm755 "${srcdir}"/sdrsharp_wrapper -t "${pkgdir}"/usr/bin
    
      72  for app in ADSBSpy AirspyCalibrate AstroSpy SDRSharp SpectrumSpy; do
    
      73    [ ${app} = ADSBSpy ] || ln -sf /tmp/${app}.exe.config "${pkgdir}"/opt/${pkgname}/${app}.exe.config
    
      74    ln -s sdrsharp_wrapper "${pkgdir}"/usr/bin/${app}
    
      75    ln -s ${app} "${pkgdir}"/usr/bin/${app,,}
    
      76  done
    
      77  install -Dm644 "${srcdir}"/*.desktop -t "${pkgdir}"/usr/share/applications
    
      78
    
      79  # install license
    
      80  install -Dm644 LICENSE.txt "${pkgdir}"/usr/share/licenses/${pkgname}/LICENSE.txt
    
      81}
    
      82

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2