dkms-git 3.1.1.r3.g8a8a9d1-1
Dynamic Kernel Modules System (upstream Git version)
config.json file.
/v1/packages/dkms-git/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Optional dependencies
Conflicts
Provides
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| 4b27ba488fd4head | verified | 2026-11-05 16:02 | 16 |
Head findings
command-substitution
in
dkms.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
if (( "$(vercmp $2 '2.2.0.3+git151023-2')" < 0 )); then
command-substitution
in
hook.shDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
local BUILD_EXCLUSIVE_KERNEL=$(source "$source_tree/$1-$2/dkms.conf"; printf '%s\n' "$BUILD_EXCLUSIVE_KERNEL")
variable-indirection
in
hook.shBash indirect variable expansion - the referenced variable is resolved at runtime and cannot be statically resolved.
for nv in "${!DKMS_MODULES[@]}"; docommand-substitution
in
hook.shDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
for kver in $(all_kver); do
variable-indirection
in
hook.shBash indirect variable expansion - the referenced variable is resolved at runtime and cannot be statically resolved.
for kver in "${!KERNEL_VERSIONS[@]}"; docommand-substitution
in
hook.shDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
for nv in $(all_nv_from_kver "$kver"); do
variable-indirection
in
hook.shBash indirect variable expansion - the referenced variable is resolved at runtime and cannot be statically resolved.
for nvk in "${!tobuild[@]}"; dovariable-indirection
in
hook.shBash indirect variable expansion - the referenced variable is resolved at runtime and cannot be statically resolved.
for kver in "${!depmods[@]}"; dovariable-indirection
in
hook.shBash indirect variable expansion - the referenced variable is resolved at runtime and cannot be statically resolved.
for nvk in "${!tobuild[@]}"; dovariable-indirection
in
hook.shBash indirect variable expansion - the referenced variable is resolved at runtime and cannot be statically resolved.
for nv in "${!DKMS_MODULES[@]}"; docommand-substitution
in
hook.shDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
for kver in $(built_kver_from_nv "$nv"); do
command-substitution
in
hook.shDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
if [[ $(dkms status "$nv") ]]; then
variable-indirection
in
hook.shBash indirect variable expansion - the referenced variable is resolved at runtime and cannot be statically resolved.
for kver in "${!KERNEL_VERSIONS[@]}"; docommand-substitution
in
hook.shDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
for nv in $(built_nv_from_kver "$kver"); do
variable-indirection
in
hook.shBash indirect variable expansion - the referenced variable is resolved at runtime and cannot be statically resolved.
for kver in "${!depmods[@]}"; docommand-substitution
in
hook.shDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
shift $((OPTIND - 1))
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.