barretenberg-rs 6.0.0-nightly.20261016.a
The build looked up github.com.
47
medium
Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.
Evidence
| Points | Signal | Where | What |
|---|---|---|---|
| 10 | network_lookup network · barretenberg-rs | github.com | The build looked up github.com. |
| 10 | static:downloader_pattern static · barretenberg-rs | build.rs:88 | high severity downloader_pattern in build_script code: https://github.com/AztecProtocol/barretenberg/releases/download/v{}/barretenberg-static-{}.tar.gz at build.rs:88 with std::process::Command::new at build.rs:97 |
| 10 | static:process_spawn static · barretenberg-rs | build.rs:97 | medium severity process_spawn in build_script code (3 places): std::process::Command::new |
| 5 | exec_downloader trace · barretenberg-rs | /usr/bin/curl | The build ran /usr/bin/curl. |
| 5 | new_behavior diff · barretenberg-rs | exec:downloader | New since the previous version: exec:downloader. |
| 5 | new_behavior diff · barretenberg-rs | net:github.com | New since the previous version: net:github.com. |
| 1 | static:build_script static · barretenberg-rs | build.rs | low severity build_script in build_script code: build.rs |
| 1 | static:url_literal static · barretenberg-rs | build.rs:88 | low severity url_literal in build_script code: https://github.com/AztecProtocol/barretenberg/releases/download/v{}/barretenberg-static-{}.tar.gz |
Behavior
New since the previous version
exec:downloader net:github.com
Profile
exec:downloader net:github.com static:downloader_pattern static:process_spawn
Static findings
7 groups
high downloader_pattern build_script 1
https://github.com/AztecProtocol/barretenberg/releases/download/v{}/barretenberg-static-{}.tar.gz at build.rs:88 with std::process::Command::new at build.rs:97build.rs:88
medium process_spawn build_script 2
std::process::Command::newbuild.rs:97 build.rs:112
low build_script build_script 1
build.rsbuild.rs
low foreign_functions library 1
extern blocksrc/backends/ffi.rs:33
low process_spawn library 1
std::process::Command::newsrc/backends/pipe.rs:27
low url_literal build_script 1
https://github.com/AztecProtocol/barretenberg/releases/download/v{}/barretenberg-static-{}.tar.gzbuild.rs:88
info unsafe_code library 1
4 unsafe blocks, functions or implssrc/backends/ffi.rs:83
Run: check
failed- Ended
- agent reported the end
- Guest
- exit code 101
- Run time
- 17.7 s
- VM restore
- 63 ms
- Payload
- 2766 files, 48.1 MiB
- Files opened
- 5327
Processes 108
Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number.
| Process | Arguments | Start | Took | Exit |
|---|---|---|---|---|
| cargo /usr/local/bin/cargo | check --locked --offline | 5 ms | 17.6 s | 25856 |
| └rustc /usr/local/bin/rustc ×14 | --crate-name build_script_build --edition=2021 /cw/vendor/proc-macro2-1.0.107/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --cfg feature="default" --cfg feature="proc-macro" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "nightly", "proc-macro", "span-locations")) -C metadata=a3dc8fb24392fcd4 -C extra-filename=-a411f7480bd0f42c --out-dir /work/target/debug/build/proc-macro2-a411f7480bd0f42c -L dependency=/work/target/debug/deps --cap-lints allow | 154 ms | 703 ms | 0 |
| └toolchain /usr/bin/cc | -m64 /work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcIfgvSs/symbols.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.build_script_build.dd8d7f624ad1d48e-cgu.0.rcgu.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.cnca5igddme2fkrf01fktrtaw.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-0e3477fb2664a277.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-09755979c57b7e64.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-9a1fede77fbbf2f0.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-360da4ba13154744.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/lib | 697 ms | 157 ms | 0 |
| └toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2 | -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccEpBwog.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcIfgvSs/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L | 703 ms | 151 ms | 0 |
| └toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld | -flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccEpBwog.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcIfgvSs/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_6 | 706 ms | 147 ms | 0 |
| └build_script proc-macro2 | 862 ms | 75 ms | 0 | |
| └rustc /usr/local/bin/rustc ×3 | --version | 863 ms | 6 ms | 0 |
| └rustc /usr/local/bin/rustc | --cfg=procmacro2_build_probe --edition=2021 --crate-name=proc_macro2 --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/proc-macro2-4f3f927bd5485a92/out/probe src/probe/proc_macro_span.rs --target x86_64-unknown-linux-gnu | 870 ms | 31 ms | 256 |
| └rustc /usr/local/bin/rustc ×26 | --crate-name unicode_ident --edition=2021 /cw/vendor/unicode-ident-1.0.27/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=3bb98f7b2f589c61 -C extra-filename=-86dff03eb05ec8a5 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow | 938 ms | 49 ms | 0 |
| └build_script quote | 1.0 s | 9 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 1.0 s | 7 ms | 0 |
| └build_script libc | 2.1 s | 9 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 2.1 s | 7 ms | 0 |
| └build_script num-traits | 5.9 s | 40 ms | 0 | |
| └rustc /usr/local/bin/rustc ×3 | --version --verbose | 5.9 s | 7 ms | 0 |
| └build_script serde_core | 9.4 s | 8 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 9.4 s | 6 ms | 0 |
| └build_script parking_lot_core | 9.4 s | 1 ms | 0 | |
| └build_script serde | 10.2 s | 8 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 10.2 s | 6 ms | 0 |
| └build_script memoffset | 10.3 s | 22 ms | 0 | |
| └rustc /usr/local/bin/rustc ×2 | --version --verbose | 10.3 s | 6 ms | 0 |
| └build_script thiserror | 14.0 s | 23 ms | 0 | |
| └rustc /usr/local/bin/rustc | --edition=2018 --crate-name=thiserror --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/thiserror-bf0fafdea055103f/out/probe build/probe.rs --target x86_64-unknown-linux-gnu | 14.0 s | 20 ms | 256 |
| └build_script barretenberg-rs | 17.5 s | 57 ms | 25856 | |
| └other /usr/bin/curl | -L -f -o /work/target/debug/build/barretenberg-rs-878ef032e6bb5b02/out/barretenberg-static.tar.gz https://github.com/AztecProtocol/barretenberg/releases/download/v6.0.0-nightly.20261016.a/barretenberg-static-amd64-linux.tar.gz | 17.5 s | 55 ms | 5632 |
Network 2
The VM has no internet. Every name it looks up resolves to 10.0.2.1, the fake internet, which accepts every connection and records what was sent. Below, it is shown by its port alone, such as :443. The name the build wanted is in the lookups, the HTTP host and the TLS SNI.
Looked up github.com
| Destination | Protocol | What was sent | Bytes |
|---|---|---|---|
| :443 | tls | SNI github.com, inside TLS: GET /AztecProtocol/barretenberg/releases/download/v6.0.0-nightly.20261016.a/barretenberg-static-amd64-linux.tar.gz, host github.com, agent curl/8.14.1 | 1.5 KiB |
Sockets in the trace 3
| When | Program | How | Address | Type |
|---|---|---|---|---|
| 17.6 s | /usr/bin/curl | connect | unix:/var/run/nscd/socket | stream |
| 17.6 s | /usr/bin/curl | connect | :53 | datagram |
| 17.6 s | /usr/bin/curl | connect | :443 | stream |
Files 0
Secrets opened
None.
Written outside the build directories
None.
Scratch disk 0
- Files
- 323
- Directories
- 104
- Size
- 168.4 MiB
- Compiled units
- 36
Nothing outside the build areas.
Output
Standard error
Compiling proc-macro2 v1.0.107
Compiling unicode-ident v1.0.27
Compiling quote v1.0.47
Compiling autocfg v1.5.1
Compiling libc v0.2.190
Compiling num-traits v0.2.19
Compiling syn v3.0.9
Compiling syn v2.0.119
Compiling parking_lot_core v0.9.12
Compiling serde_core v1.0.229
Compiling memoffset v0.9.1
Checking smallvec v1.16.3
Compiling serde v1.0.229
Checking scopeguard v1.2.0
Checking lock_api v0.4.14
Checking rmp v0.8.15
Compiling serde_derive v1.0.229
Checking errno v0.3.14
Compiling thiserror v1.0.69
Checking once_cell v1.21.4
Checking tracing-core v0.1.36
Checking signal-hook-registry v1.4.8
Checking parking_lot v0.12.5
Compiling thiserror-impl v1.0.69
Compiling tracing-attributes v0.1.31
Compiling tokio-macros v2.7.2
Checking socket2 v0.6.5
Checking mio v1.2.4
Checking bytes v1.12.1
Compiling barretenberg-rs v6.0.0-nightly.20261016.a
Checking bitflags v2.13.2
Checking nix v0.27.1
warning: barretenberg-rs@6.0.0-nightly.20261016.a: Downloading barretenberg static library from https://github.com/AztecProtocol/barretenberg/releases/download/v6.0.0-nightly.20261016.a/barretenberg-static-amd64-linux.tar.gz
error: failed to run custom build command for `barretenberg-rs v6.0.0-nightly.20261016.a`
Caused by:
process didn't exit successfully: `/work/target/debug/build/barretenberg-rs-1a83aed420598e44/build-script-build` (exit status: 101)
--- stdout
cargo:warning=Downloading barretenberg static library from https://github.com/AztecProtocol/barretenberg/releases/download/v6.0.0-nightly.20261016.a/barretenberg-static-amd64-linux.tar.gz
--- stderr
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
curl: (22) The requested URL returned error: 404
thread 'main' (1040) panicked at /cw/vendor/barretenberg-rs-6.0.0-nightly.20261016.a/build.rs:105:9:
Failed to download barretenberg static library from https://github.com/AztecProtocol/barretenberg/releases/download/v6.0.0-nightly.20261016.a/barretenberg-static-amd64-linux.tar.gz. Make sure version v6.0.0-nightly.20261016.a exists as a GitHub release.
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
Timeline
6
| When | From | To | Event | Worker |
|---|---|---|---|---|
| 2026-10-16 12:30 UTC | Discovered | Fetched | fetched | fetcher-286769 |
| 2026-10-16 12:30 UTC | Fetched | ReadyForSandbox | static_analysis_completed | static-286807 |
| 2026-10-16 12:30 UTC | ReadyForSandbox | Running | sandbox_started | orchestrator-289279-slot2 |
| 2026-10-16 12:30 UTC | Running | DynamicallyAnalyzed | sandbox_completed | orchestrator-289279-slot2 |
| 2026-10-16 12:30 UTC | DynamicallyAnalyzed | Scored | scored | analyzer-289309 |
| 2026-10-16 12:30 UTC | Scored | Done | finalized | analyzer-289309 |