winecx

maintainer tiziodcaio · 3 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a tarball from the official CodeWeavers media subdomain, which hosts legitimate CrossOver Wine source code; building from project-owned infrastructure, even on a non-whitelisted host, is normal for AUR packages and poses low risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a tarball from the official CodeWeavers media subdomain, which hosts legitimate CrossOver Wine source code; building from project-owned infrastructure, even on a non-whitelisted host, is normal for AUR packages and poses low risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:87 source=("https://media.codeweavers.com/pub/crossover/source/crossover-sources-${pkgver}.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer : Vitor Veloso <vitorveloso@iid.org.br>
    
      2# Based on wine-git: 
    
      3## Contributor : Daniel Bermond <dbermond@archlinux.org>
    
      4## Contributor: Sidney Crestani <sidneycrestani@archlinux.net>
    
      5## Contributor: sxe <sxxe@gmx.de> 
    
      6
    
      7
    
      8pkgname=winecx
    
      9pkgver=25.1.1
    
      10pkgrel=1
    
      11pkgdesc='CrossOver Wine'
    
      12arch=('x86_64')
    
      13url='https://www.codeweavers.com/crossover/'
    
      14license=('LGPL')
    
      15
    
      16depends=(
    
  'desktop-file-utils'
    
  'fontconfig'      'lib32-fontconfig'
    
  'freetype2'       'lib32-freetype2'
    
  'gcc-libs'        'lib32-gcc-libs'
    
  'gettext'         'lib32-gettext'
    
  'libpcap'         'lib32-libpcap'
    
  'libunwind'       'lib32-libunwind'
    
  'libxcursor'      'lib32-libxcursor'
    
  'libxkbcommon'    'lib32-libxkbcommon'
    
  'libxi'           'lib32-libxi'
    
  'libxrandr'       'lib32-libxrandr'
    
  'wayland'         'lib32-wayland'
    
      29)
    
      30makedepends=('git' 'perl' 'mingw-w64-gcc'
    
  'alsa-lib'              'lib32-alsa-lib'
    
  'gnutls'                'lib32-gnutls'
    
  'gst-plugins-base-libs' 'lib32-gst-plugins-base-libs'
    
  'libcups'               'lib32-libcups'
    
  'libgphoto2'
    
  'libpulse'              'lib32-libpulse'
    
  'libxcomposite'         'lib32-libxcomposite'
    
  'libxcomposite'         'lib32-libxcomposite'
    
  'libxinerama'           'lib32-libxinerama'
    
  'libxxf86vm'            'lib32-libxxf86vm'
    
  'mesa'                  'lib32-mesa'
    
  'mesa-libgl'            'lib32-mesa-libgl'
    
  'opencl-headers'
    
  'opencl-icd-loader'     'lib32-opencl-icd-loader'
    
  'pcsclite'              'lib32-pcsclite'
    
  'samba'
    
  'sane'
    
  'sdl2'                  'lib32-sdl2'
    
  'unixodbc'
    
  'v4l-utils'             'lib32-v4l-utils'
    
  'vulkan-headers'
    
  'vulkan-icd-loader'     'lib32-vulkan-icd-loader'
    
      53)
    
      54optdepends=(
    
  'alsa-lib'              'lib32-alsa-lib'
    
  'alsa-plugins'          'lib32-alsa-plugins'
    
  'cups'                  'lib32-libcups'
    
  'dosbox'
    
  'gnutls'                'lib32-gnutls'
    
  'gst-plugins-bad'
    
  'gst-plugins-base'      'lib32-gst-plugins-base'
    
  'gst-plugins-base-libs' 'lib32-gst-plugins-base-libs'
    
  'gst-plugins-good'      'lib32-gst-plugins-good'
    
  'gst-plugins-ugly'
    
  'libgphoto2'
    
  'libpulse'              'lib32-libpulse'
    
  'libxcomposite'         'lib32-libxcomposite'
    
  'libxinerama'           'lib32-libxinerama'
    
  'opencl-icd-loader'     'lib32-opencl-icd-loader'
    
  'pcsclite'              'lib32-pcsclite'
    
  'samba'
    
  'sane'
    
  'sdl2'                  'lib32-sdl2'
    
  'unixodbc'
    
  'v4l-utils'             'lib32-v4l-utils'
    
  'wine-gecko'
    
  'wine-mono'
    
      78
    
      79)
    
      80options=('staticlibs' '!lto' 'pestrip')
    
      81
    
      82
    
      83provides=("winecx=${pkgver}" "bin32-winecx=${pkgver}" "winecx-wow64=${pkgver}")
    
      84conflicts=('winecx')
    
      85replaces=('winecx')
    
      86
    
      87source=("https://media.codeweavers.com/pub/crossover/source/crossover-sources-${pkgver}.tar.gz"
    
      'distversion.h'
    
      '30-win32-aliases.conf'
    
      'winecx'
    
      'winecx64')
    
      92sha256sums=('7cdcfcfaee8991f7958b5ccb2837c0facec6e8e681cd3ada8d2745bddbe27d13'
    
          '5d30dd4fa71b55ae5f3e30782a2c93ec506a6c6f65017c1a0995230ad7b39a82'
    
          '9901a5ee619f24662b241672a7358364617227937d5f6d3126f70528ee5111e7'
    
          '2f818f2033ed90c0a6400bbc0294354173ad5cbd63e01be44ea0e0371fabf0d1'
    
          '3305dea8406ce68182db06eabf8e7626065bb8c2e3aa586b4361cbef023a4e24')
    
      97
    
      98
    
      99prepare() {
    
  # Alteração: Ajuste para a nova estrutura de diretórios
    
  mkdir -p "${srcdir}/sources/wine/programs/winedbg"
    
  cp "${srcdir}/distversion.h" "${srcdir}/sources/wine/programs/winedbg/distversion.h"
    
  rm -rf build-{32,64}
    
  mkdir -p build-{32,64}
    
      105}
    
      106
    
      107build() {
    
      108
    
  export CFLAGS+=' -ffat-lto-objects -Wno-error=implicit-function-declaration -Wno-error=incompatible-pointer-types' 
    
  # apply flags for cross-compilation
    
  export CROSSCFLAGS="${CFLAGS/-Werror=format-security/} -Wno-error=implicit-function-declaration -Wno-error=incompatible-pointer-types"
    
#   export CFLAGS+=' -ffat-lto-objects'
    
  # apply flags for cross-compilation
    
#   export CROSSCFLAGS="${CFLAGS/-Werror=format-security/}"
    
  export CROSSCXXFLAGS="${CXXFLAGS/-Werror=format-security/}"
    
  export CROSSLDFLAGS="${LDFLAGS//-Wl,-z*([^[:space:]])/}"
    
  
    
  # build wine 64-bit
    
  printf '%s\n' '  -> Building wine-64...'
    
  cd build-64
    
  # Alteração: Ajuste para a nova estrutura de diretórios
    
  ../sources/wine/configure \
    
      --prefix='/opt/winecx' \
    
      --libdir='/opt/winecx/lib' \
    
      --with-x \
    
      --with-wayland \
    
      --with-gstreamer \
    
      --with-vulkan \
    
      --enable-win64
    
  make
    
  
    
  # build wine 32-bit
    
  printf '%s\n' '  -> Building wine-32...'
    
  cd "${srcdir}/build-32"
    
  export PKG_CONFIG_PATH='/opt/winecx/lib32/pkgconfig'
    
  # Alteração: Ajuste para a nova estrutura de diretórios
    
  ../sources/wine/configure \
    
      --prefix='/opt/winecx' \
    
      --libdir='/opt/winecx/lib32' \
    
      --with-x \
    
      --with-wayland \
    
      --with-gstreamer \
    
      --with-vulkan \
    
      --with-wine64="${srcdir}/build-64"
    
  make
    
      146}
    
      147
    
      148package() {
    
  # package wine 32-bit
    
  # (according to the wine wiki, this reverse 32-bit/64-bit packaging order is important)
    
  printf '%s\n' '  -> Packaging wine-32...'
    
  cd build-32
    
  make prefix="${pkgdir}/opt/winecx" \
    
       libdir="${pkgdir}/opt/winecx/lib32" \
    
       dlldir="${pkgdir}/opt/winecx/lib32/wine" \
    
       install
    
  
    
  # package wine 64-bit
    
  printf '%s\n' '  -> Packaging wine-64...'
    
  cd "${srcdir}/build-64"
    
  make prefix="${pkgdir}/opt/winecx" \
    
       libdir="${pkgdir}/opt/winecx/lib" \
    
       dlldir="${pkgdir}/opt/winecx/lib/wine" \
    
       install
    
  
    
  # font aliasing settings for win32 applications
    
  install -d -m755 "${pkgdir}/opt/winecx/share/fontconfig/conf.default"
    
  install -D -m644 "${srcdir}/30-win32-aliases.conf" -t "${pkgdir}/opt/winecx/share/fontconfig/conf.avail"
    
  ln -s ../conf.avail/30-win32-aliases.conf "${pkgdir}/opt/winecx/share/fontconfig/conf.default/30-win32-aliases.conf"
    
      170
    
  # Create symbolic links in /usr/bin
    
  install -d "${pkgdir}/usr/bin"
    
  
    
  install -D -m755 "${srcdir}/winecx" -t "${pkgdir}/usr/bin/"
    
  install -D -m755 "${srcdir}/winecx64" -t "${pkgdir}/usr/bin/"
    
      176
    
  #ln -s /opt/winecx/bin/wine "${pkgdir}/usr/bin/winecx"
    
  #ln -s /opt/winecx/bin/wine64 "${pkgdir}/usr/bin/winecx64"
    
  #ln -s /opt/winecx/bin/wineserver "${pkgdir}/usr/bin/winecxserver"
    
      180}
    
      181

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2