xerox-spl-driver-common

maintainer asmeron · 1 votes · base xerox-spl-driver · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a Xerox driver tarball from support.xerox.com, which is the official vendor domain; despite the static analyzer flag for a non-standard host path, the domain is legitimate and the package builds from official vendor-provided source, posing no significant supply chain risk.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a Xerox driver tarball from support.xerox.com, which is the official vendor domain; despite the static analyzer flag for a non-standard host path, the domain is legitimate and the package builds from official vendor-provided source, posing no significant supply chain risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:19 "http://download.support.xerox.com/pub/drivers/B215/drivers/linux/ar/Xerox_B215_Linux_PrintDriver_Utilities.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Dmitry Razumov <asmeron@ublinux.com>
    
      2
    
      3pkgbase='xerox-spl-driver'
    
      4pkgname=(
    
      5    'xerox-spl-driver-common'
    
      6    'xerox-spl-driver-printer'
    
      7    'xerox-spl-driver-scanner'
    
      8    'xerox-spl-driver'
    
      9)
    
      10pkgver=1.00.39.3
    
      11pkgrel=1
    
      12
    
      13pkgdesc='Xerox SPL Linux Driver for printers and scanners. Also supports B205 B210 B215, Phaser 3020 3052 3117 3140 3155 3160 3200MFP 3250 3260 3300MFP 3320 3435 3600 6110MFP, WorkCentre 3025 3210 3215 3220 3225 3315 3325 3550 4118 PE120 PE220, FaxCentre 2218'
    
      14url='https://www.support.xerox.com'
    
      15arch=('x86_64' 'i686')
    
      16license=('custom:xerox')
    
      17options=(!strip)
    
      18source=(
    
      19    "http://download.support.xerox.com/pub/drivers/B215/drivers/linux/ar/Xerox_B215_Linux_PrintDriver_Utilities.tar.gz"
    
      20    "xerox_mfp-smfp.conf")
    
      21makedepends=('binutils' 'tar')
    
      22sha256sums=('ba510467069bf2b0bb13b0cee6f25516da490b0d2d5940846273dfe31a93eb3a'
    
      23            '2b64b114c290e9f122d9dd8b553352d32c4317d1de1cabc46cd59dc4f30974a1')
    
      24
    
      25_arch=${CARCH/i686/i386}
    
      26
    
      27pkgver() {
    
      28    FILE_VERSION="${srcdir}/uld/noarch/.version-printer"
    
      29    [[ -f ${FILE_VERSION} ]] && printf "%s" "$(cat ${FILE_VERSION})" || echo ${pkgver}
    
      30}
    
      31
    
      32prepare(){
    
      33    chmod -R u+w "${srcdir}"/*
    
      34}
    
      35
    
      36build() {
    
      37    cd "uld"
    
      38    find -type f -name '*.ppd' -execdir gzip -f {} \;
    
      39}
    
      40
    
      41package_xerox-spl-driver()
    
      42{
    
      43    depends=('xerox-spl-driver-printer'
    
      44             'xerox-spl-driver-scanner')
    
      45}
    
      46
    
      47package_xerox-spl-driver-common()
    
      48{
    
      49    pkgdesc='License Xerox SPL Linux Driver for printers and scanners.'
    
      50    find "${srcdir}"/uld/noarch/license -type f -name '*.txt' -execdir install -Dm0644 {} "${pkgdir}/usr/share/licenses/${pkgbase}/{}" \; -print
    
      51}
    
      52
    
      53package_xerox-spl-driver-printer()
    
      54{
    
      55    depends=('xerox-spl-driver-common' 'cups' 'ghostscript')
    
      56    pkgdesc='Xerox SPL driver for printers. Also supports B205 B210 B215, Phaser 3020 3052 3117 3140 3155 3160 3200MFP 3250 3260 3300MFP 3320 3435 3600 6110MFP, WorkCentre 3025 3210 3215 3220 3225 3315 3325 3550 4118 PE120 PE220, FaxCentre 2218'
    
      57
    
      58    find "${srcdir}/uld/noarch/share/ppd" -type f \( -name '*.ppd' -o -name '*.ppd.gz' \) -execdir install -Dm0644 {} "${pkgdir}/usr/share/ppd/xerox/{}" \;
    
      59    find "${srcdir}/uld/noarch/share/ppd/cms" -type f -name '*.cts' -execdir install -Dm644 {} "${pkgdir}/usr/share/ppd/xerox/cms/{}" \;
    
      60    install -Dm0755 "${srcdir}/uld/${_arch}/libscmssc.so" "${pkgdir}/usr/lib/libscmssc.so"
    
      61    install -Dm0755 "${srcdir}/uld/${_arch}/smfpnetdiscovery" "${pkgdir}/usr/lib/cups/backend/smfpnetdiscovery"
    
      62    install -Dm0755 "${srcdir}/uld/${_arch}/pstosecps" "${pkgdir}/usr/lib/cups/filter/pstosecps"
    
      63    install -Dm0755 "${srcdir}/uld/${_arch}/rastertospl" "${pkgdir}/usr/lib/cups/filter/rastertospl"
    
      64    ln -s rastertospl "${pkgdir}/usr/lib/cups/filter/rastertosplc"
    
      65}
    
      66
    
      67package_xerox-spl-driver-scanner()
    
      68{
    
      69    depends=('xerox-spl-driver-common' 'libxml2' 'libusb-compat' 'sane')
    
      70    pkgdesc='Xerox driver for scanners. Also supports Phaser 6110MFP, WorkCentre 3210 3220 4118 PE120 PE220'
    
      71
    
      72    while read LOCALE_I; do
    
      73	find "${srcdir}/uld/noarch/share/locale/${LOCALE_I}/LC_MESSAGES/" -type f -name 'sane-smfp.mo' -execdir install -Dm0644 {} "${pkgdir}/usr/share/locale/${LOCALE_I}/LC_MESSAGES/{}" \;
    
      74    done < <(ls "${srcdir}/uld/noarch/share/locale" 2>/dev/null)
    
      75    install -Dm0644 "${srcdir}/uld/${_arch}/libsane-smfp.so.1.0.1" "${pkgdir}/usr/lib/sane/libsane-smfp.so.1.0.1"
    
      76    ln -s libsane-smfp.so.1.0.1 "${pkgdir}/usr/lib/sane/libsane-smfp.so.1"
    
      77    ln -s libsane-smfp.so.1.0.1 "${pkgdir}/usr/lib/sane/libsane-smfp.so"
    
      78    # Игнорируем: pagesize.xml
    
      79    # Игнорируем: libsane-smfp.cfg
    
      80
    
      81    find "${srcdir}/uld/noarch/etc" -type f -name 'smfp.conf' -execdir install -Dm0644 {} "${pkgdir}/etc/sane.d/{}" \;
    
      82    find "${srcdir}" -type l -name 'xerox_mfp-smfp.conf' -execdir install -Dm0644 {} "${pkgdir}/etc/sane.d/{}" \;
    
      83
    
      84    install -dm0755 "${pkgdir}/etc/sane.d/dll.d"
    
      85    echo smfp > "${pkgdir}/etc/sane.d/dll.d/smfp-scanner"
    
      86    echo xerox_mfp-smfp > "${pkgdir}/etc/sane.d/dll.d/smfp-scanner-fix"
    
      87
    
      88    install -dm0755 "${pkgdir}/usr/lib/udev/rules.d"
    
      89    (
    
      90        OEM_FILE="${srcdir}/uld/noarch/oem.conf"
    
      91        INSTALL_LOG_FILE=/dev/null
    
      92        source "${srcdir}/uld/noarch/scripting_utils"
    
      93        source "${srcdir}/uld/noarch/package_utils"
    
      94        source "${srcdir}/uld/noarch/scanner-script.pkg"
    
      95        fill_full_template "${srcdir}/uld/noarch/etc/smfp.rules.in" "${pkgdir}/usr/lib/udev/rules.d/60-smfp-xerox.rules"
    
      96        # Так как hal устарел и более не используется, то игнорируем: smfp.fdi.in
    
      97        chmod 644 "${pkgdir}/usr/lib/udev/rules.d/60-smfp-xerox.rules"
    
      98    )
    
      99    install -Dm0644 "${srcdir}/uld/noarch/oem.conf" "${pkgdir}/opt/xerox/scanner/share/oem.conf"
    
      100}
    
      101

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2