Crateward

boxlite 0.10.7

Done dynamic on Linux job 192765 crates.io SBOM Findings (VEX) Compare with 0.10.6

high severity environment_enumeration in build_script code: std::env::vars

45
medium
Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.

Evidence

PointsSignalWhereWhat
30static:environment_enumeration
static · boxlite
build.rs:227high severity environment_enumeration in build_script code: std::env::vars
10network_lookup
network · boxlite
github.comThe build looked up github.com.
5exec_downloader
trace · boxlite
/usr/bin/curlThe build ran /usr/bin/curl.
6 without points
SignalWhereWhat
static:build_script
static · boxlite
build.rslow severity build_script in build_script code: build.rs
static:downloader_pattern
static · boxlite
build.rs:606high severity downloader_pattern in build_script code: https://github.com/boxlite-ai/boxlite/releases/download/v{version}/boxlite-runtime-v{version}-{target}.tar.gz at build.rs:606 with std::process::Command::new at build.rs:501
static:process_spawn
static · boxlite
build.rs:501medium severity process_spawn in build_script code (77 places): std::process::Command::new
static:shell_command
static · boxlite
build.rs:507high severity shell_command in build_script code (3 places): curl failed: {}
static:url_literal
static · boxlite
build.rs:606low severity url_literal in build_script code (104 places): https://github.com/boxlite-ai/boxlite/releases/download/v{version}/boxlite-runtime-v{version}-{target}.tar.gz
static:yara:sandbox_evasion
static · boxlite
resources/seccomp/aarch64-unknown-linux-gnu.json:436medium severity yara:sandbox_evasion in library code (17 places): Checks for virtual machines, sandboxes or debuggers

Behavior

Profile

exec:downloader net:github.com static:downloader_pattern static:environment_enumeration static:process_spawn static:shell_command static:yara:sandbox_evasion

Static findings

19 groups
high downloader_pattern build_script 1
  • https://github.com/boxlite-ai/boxlite/releases/download/v{version}/boxlite-runtime-v{version}-{target}.tar.gz at build.rs:606 with std::process::Command::new at build.rs:501 build.rs:606
high environment_enumeration build_script 1
high shell_command build_script 1
medium yara_match sandbox_evasion library 17
medium process_spawn build_script 3
medium shell_command test 2
low network_access library 139
low process_spawn library 66
low network_access test 9
low process_spawn test 8
low foreign_functions library 3
low url_literal build_script 2
  • https://github.com/boxlite-ai/boxlite/releases/download/v{version}/boxlite-runtime-v{version}-{target}.tar.gz build.rs:606
  • <?xml version="1.0" encoding="UTF-8"?>\u{a}<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">\u{a}<plist version="1.0">\u{a}<dict>\u{a} <key>com.… build.rs:1077
low build_script build_script 1
info url_literal library 86
info unsafe_code library 35
info url_literal test 16
info unsafe_code test 4
info native_link build_script 1
info unsafe_code build_script 1

Run: check

failed
Ended
agent reported the end
Guest
exit code 101
Run time
2 min 50 s
VM restore
70 ms
Payload
24309 files, 751.7 MiB
Files opened
52045

Processes 967

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number.

ProcessArgumentsStartTookExit
cargo /usr/local/bin/cargo check --locked --offline 5 ms 2 min 50 s 25856
└rustc /usr/local/bin/rustc ×72 --crate-name build_script_build --edition=2021 /cw/vendor/proc-macro2-1.0.107/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --cfg feature="default" --cfg feature="proc-macro" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "nightly", "proc-macro", "span-locations")) -C metadata=a3dc8fb24392fcd4 -C extra-filename=-a411f7480bd0f42c --out-dir /work/target/debug/build/proc-macro2-a411f7480bd0f42c -L dependency=/work/target/debug/deps --cap-lints allow 527 ms 738 ms 0
└toolchain /usr/bin/cc -m64 /work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcdcW85H/symbols.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.build_script_build.dd8d7f624ad1d48e-cgu.0.rcgu.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.cnca5igddme2fkrf01fktrtaw.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-0e3477fb2664a277.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-09755979c57b7e64.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-9a1fede77fbbf2f0.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-360da4ba13154744.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/lib 1.0 s 163 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2 -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cc9ZFi1j.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcdcW85H/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L 1.1 s 156 ms 0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld -flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cc9ZFi1j.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcdcW85H/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_6 1.1 s 153 ms 0
└build_script proc-macro2 1.2 s 83 ms 0
└rustc /usr/local/bin/rustc ×3 --version 1.2 s 7 ms 0
└rustc /usr/local/bin/rustc --cfg=procmacro2_build_probe --edition=2021 --crate-name=proc_macro2 --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/proc-macro2-4f3f927bd5485a92/out/probe src/probe/proc_macro_span.rs --target x86_64-unknown-linux-gnu 1.2 s 33 ms 256
└rustc /usr/local/bin/rustc ×337 --crate-name unicode_ident --edition=2021 /cw/vendor/unicode-ident-1.0.27/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=3bb98f7b2f589c61 -C extra-filename=-86dff03eb05ec8a5 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow 1.4 s 53 ms 0
└build_script quote 2.0 s 10 ms 0
└rustc /usr/local/bin/rustc --version 2.0 s 7 ms 0
└build_script libc 2.4 s 9 ms 0
└rustc /usr/local/bin/rustc --version 2.4 s 7 ms 0
└build_script libc 11.5 s 10 ms 0
└rustc /usr/local/bin/rustc --version 11.5 s 8 ms 0
└build_script serde_core 15.1 s 10 ms 0
└rustc /usr/local/bin/rustc --version 15.1 s 8 ms 0
└build_script parking_lot_core 15.1 s 1 ms 0
└build_script serde 20.8 s 11 ms 0
└rustc /usr/local/bin/rustc --version 20.8 s 7 ms 0
└build_script zmij 29.8 s 10 ms 0
└rustc /usr/local/bin/rustc --version 29.8 s 7 ms 0
└build_script getrandom 29.8 s 2 ms 0
└build_script serde_json 34.5 s 2 ms 0
└build_script anyhow 34.5 s 37 ms 0
└rustc /usr/local/bin/rustc --cfg=anyhow_build_probe --edition=2018 --crate-name=anyhow --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/anyhow-16c5e2ddec703063/out/probe src/nightly.rs --target x86_64-unknown-linux-gnu 34.5 s 25 ms 256
└rustc /usr/local/bin/rustc --version 34.5 s 7 ms 0
└build_script zerocopy 35.8 s 11 ms 0
└rustc /usr/local/bin/rustc --version 35.8 s 7 ms 0
└build_script rustix 36.1 s 37 ms 0
└rustc /usr/local/bin/rustc ×2 --crate-type=rlib --emit=metadata --target x86_64-unknown-linux-gnu -o /work/target/debug/build/rustix-0f4e2900de2476d1/out/rustix_test_can_compile - 36.1 s 17 ms 0
└build_script httparse 46.9 s 11 ms 0
└rustc /usr/local/bin/rustc --version 46.9 s 8 ms 0
└build_script rustversion 47.5 s 10 ms 0
└rustc /usr/local/bin/rustc --version 47.5 s 7 ms 0
└build_script ring 49.2 s 1.6 s 0
└toolchain /usr/bin/cc ×2 -E /work/target/debug/build/ring-8cf52f94d9243c85/out/13212267950792843642detect_compiler_family.c 49.2 s 24 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/ring-8cf52f94d9243c85/out/13212267950792843642detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 13212267950792843642detect_compiler_family.c -dumpbase-ext .c 49.2 s 21 ms 0
└toolchain /usr/bin/cc ×2 -? 49.2 s 3 ms 256
└toolchain /usr/bin/cc ×32 -O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/ring-8cf52f94d9243c85/out/flag_check -c /work/target/debug/build/ring-8cf52f94d9243c85/out/flag_check.c 49.2 s 32 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/ring-8cf52f94d9243c85/out/flag_check.c -quiet -dumpdir /work/target/debug/build/ring-8cf52f94d9243c85/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/cc2vrr6N.s 49.2 s 24 ms 0
└toolchain /usr/bin/as --64 -o /work/target/debug/build/ring-8cf52f94d9243c85/out/flag_check /tmp/cc2vrr6N.s 49.3 s 6 ms 0
└toolchain /usr/bin/ar ×4 cqD /work/target/debug/build/ring-8cf52f94d9243c85/out/libring_core_0_17_14_.a /work/target/debug/build/ring-8cf52f94d9243c85/out/25ac62e5b3c53843-curve25519.o /work/target/debug/build/ring-8cf52f94d9243c85/out/0bbbd18bda93c05b-aes_nohw.o /work/target/debug/build/ring-8cf52f94d9243c85/out/00c879ee3285a50d-montgomery.o /work/target/debug/build/ring-8cf52f94d9243c85/out/00c879ee3285a50d-montgomery_inv.o /work/target/debug/build/ring-8cf52f94d9243c85/out/a0330e891e733f4e-ecp_nistz.o /work/target/debug/build/ring-8cf52f94d9243c85/out/a0330e891e733f4e-gfp_p256.o /work/target/debug/build/ring-8cf52f94d9243c85/out/a0330e891e733f4e-gfp_p384.o /work/target/debug/build/ring-8cf52f94d9243c85/out/a0330e891e733f4e-p256.o /work/target/debug/build/ring-8cf52f94d9243c85/out/aaa1ba3e455ee2e1-limbs.o /work/target/debug/build/ring-8cf52f94d9243c85/out/a4019cc0736b0423-mem.o /work/target/debug/build/ring-8cf52f94d9243c85/out/d5a9841f3dc6e253-poly1305.o /work/target/debug/build/ring-8cf52f94d9243c85/out/a4019cc0736b0423-crypt 50.7 s 19 ms 0
└build_script icu_properties_data 57.4 s 2 ms 0
└build_script rustix 57.4 s 35 ms 0
└rustc /usr/local/bin/rustc ×2 --crate-type=rlib --emit=metadata --target x86_64-unknown-linux-gnu -o /work/target/debug/build/rustix-8b19f1bf8cc92196/out/rustix_test_can_compile - 57.4 s 16 ms 0
└build_script thiserror 57.4 s 30 ms 0
└rustc /usr/local/bin/rustc --edition=2018 --crate-name=thiserror --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/thiserror-2a2ace9117c7add0/out/probe build/probe.rs --target x86_64-unknown-linux-gnu 57.4 s 18 ms 256
└rustc /usr/local/bin/rustc --version 57.5 s 7 ms 0
└build_script icu_normalizer_data 1 min 1 s 2 ms 0
└build_script crossbeam-utils 1 min 4 s 2 ms 0
└build_script generic-array 1 min 5 s 11 ms 0
└rustc /usr/local/bin/rustc --verbose --version 1 min 5 s 8 ms 0
└build_script prettyplease 1 min 16 s 2 ms 0
└build_script crossbeam-epoch 1 min 19 s 2 ms 0
└build_script rustls 1 min 19 s 2 ms 0
└build_script getrandom 1 min 19 s 2 ms 0
└build_script num-traits 1 min 21 s 49 ms 0
└rustc /usr/local/bin/rustc ×3 --version --verbose 1 min 21 s 8 ms 0
└build_script crossbeam-deque 1 min 29 s 1 ms 0
└build_script indexmap 1 min 29 s 44 ms 0
└rustc /usr/local/bin/rustc ×3 --version --verbose 1 min 29 s 7 ms 0
└build_script zstd-sys 1 min 29 s 7.8 s 0
└toolchain /usr/bin/cc -E /work/target/debug/build/zstd-sys-9901264fbc2a20b5/out/861727025147871448detect_compiler_family.c 1 min 29 s 7 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/zstd-sys-9901264fbc2a20b5/out/861727025147871448detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 861727025147871448detect_compiler_family.c -dumpbase-ext .c 1 min 29 s 5 ms 0
└toolchain /usr/bin/cc -? 1 min 29 s 2 ms 256
└toolchain /usr/bin/cc ×41 -O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/zstd-sys-9901264fbc2a20b5/out/flag_check -c /work/target/debug/build/zstd-sys-9901264fbc2a20b5/out/flag_check.c 1 min 29 s 14 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/zstd-sys-9901264fbc2a20b5/out/flag_check.c -quiet -dumpdir /work/target/debug/build/zstd-sys-9901264fbc2a20b5/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/cctpWLLQ.s 1 min 29 s 10 ms 0
└toolchain /usr/bin/as --64 -o /work/target/debug/build/zstd-sys-9901264fbc2a20b5/out/flag_check /tmp/cctpWLLQ.s 1 min 29 s 2 ms 0
└toolchain /usr/bin/ar ×2 cqD /work/target/debug/build/zstd-sys-9901264fbc2a20b5/out/libzstd.a /work/target/debug/build/zstd-sys-9901264fbc2a20b5/out/44ff4c55aa9e5133-debug.o /work/target/debug/build/zstd-sys-9901264fbc2a20b5/out/44ff4c55aa9e5133-entropy_common.o /work/target/debug/build/zstd-sys-9901264fbc2a20b5/out/44ff4c55aa9e5133-error_private.o /work/target/debug/build/zstd-sys-9901264fbc2a20b5/out/44ff4c55aa9e5133-fse_decompress.o /work/target/debug/build/zstd-sys-9901264fbc2a20b5/out/44ff4c55aa9e5133-pool.o /work/target/debug/build/zstd-sys-9901264fbc2a20b5/out/44ff4c55aa9e5133-threading.o /work/target/debug/build/zstd-sys-9901264fbc2a20b5/out/44ff4c55aa9e5133-zstd_common.o /work/target/debug/build/zstd-sys-9901264fbc2a20b5/out/fb80479a5fb81f6a-fse_compress.o /work/target/debug/build/zstd-sys-9901264fbc2a20b5/out/fb80479a5fb81f6a-hist.o /work/target/debug/build/zstd-sys-9901264fbc2a20b5/out/fb80479a5fb81f6a-huf_compress.o /work/target/debug/build/zstd-sys-9901264fbc2a20b5/out/fb80479a5fb81f6a-zstd_compress.o /work/target/de 1 min 37 s 29 ms 0
└build_script io-uring 1 min 46 s 2 ms 0
└build_script rayon-core 1 min 48 s 2 ms 0
└build_script thiserror 1 min 49 s 27 ms 0
└rustc /usr/local/bin/rustc --edition=2018 --crate-name=thiserror --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/thiserror-bf0fafdea055103f/out/probe build/probe.rs --target x86_64-unknown-linux-gnu 1 min 49 s 23 ms 256
└build_script memoffset 1 min 50 s 25 ms 0
└rustc /usr/local/bin/rustc ×2 --version --verbose 1 min 50 s 8 ms 0
└build_script memoffset 1 min 50 s 26 ms 0
└rustc /usr/local/bin/rustc ×2 --version --verbose 1 min 50 s 7 ms 0
└build_script crc32fast 1 min 59 s 10 ms 0
└rustc /usr/local/bin/rustc --version 1 min 59 s 7 ms 0
└build_script zstd-safe 2 min 5 s 2 ms 0
└build_script bubblewrap-sys 2 min 6 s 2 ms 0
└build_script e2fsprogs-sys 2 min 6 s 2 ms 0
└build_script libkrun-sys 2 min 6 s 2 ms 0
└build_script libsqlite3-sys 2 min 8 s 7.0 s 0
└toolchain /usr/bin/cc -E /work/target/debug/build/libsqlite3-sys-5760556686936ff8/out/4150755550111470369detect_compiler_family.c 2 min 8 s 6 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/libsqlite3-sys-5760556686936ff8/out/4150755550111470369detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 4150755550111470369detect_compiler_family.c -dumpbase-ext .c 2 min 8 s 5 ms 0
└toolchain /usr/bin/cc -? 2 min 8 s 2 ms 256
└toolchain /usr/bin/cc ×2 -O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/libsqlite3-sys-5760556686936ff8/out/flag_check -c /work/target/debug/build/libsqlite3-sys-5760556686936ff8/out/flag_check.c 2 min 8 s 15 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/libsqlite3-sys-5760556686936ff8/out/flag_check.c -quiet -dumpdir /work/target/debug/build/libsqlite3-sys-5760556686936ff8/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/ccSvt3qQ.s 2 min 8 s 11 ms 0
└toolchain /usr/bin/as --64 -o /work/target/debug/build/libsqlite3-sys-5760556686936ff8/out/flag_check /tmp/ccSvt3qQ.s 2 min 8 s 2 ms 0
└toolchain /usr/bin/ar ×2 cqD /work/target/debug/build/libsqlite3-sys-5760556686936ff8/out/libsqlite3.a /work/target/debug/build/libsqlite3-sys-5760556686936ff8/out/c877a2978823c39d-sqlite3.o 2 min 15 s 24 ms 0
└build_script fuse-backend-rs 2 min 26 s 2 ms 0
└build_script signal-hook 2 min 26 s 2 ms 0
└build_script pathrs 2 min 28 s 2 ms 0
└build_script boxlite-shared 2 min 33 s 160 ms 0
└unknown 2 min 33 s 4 ms 32512
└other /usr/bin/protoc ×2 --version 2 min 33 s 16 ms 0
└build_script nix 2 min 33 s 2 ms 0
└build_script boxlite 2 min 50 s 133 ms 25856
└toolchain /usr/bin/cc -E /work/target/debug/build/boxlite-2656872e463fdedb/out/2858543986831994737detect_compiler_family.c 2 min 50 s 7 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/boxlite-2656872e463fdedb/out/2858543986831994737detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 2858543986831994737detect_compiler_family.c -dumpbase-ext .c 2 min 50 s 5 ms 0
└toolchain /usr/bin/cc -? 2 min 50 s 2 ms 256
└toolchain /usr/bin/cc ×2 -O0 -ffunction-sections -fdata-sections -fPIC -m64 -Wall -Wextra -mno-omit-leaf-frame-pointer -o /work/target/debug/build/boxlite-2656872e463fdedb/out/flag_check -c /work/target/debug/build/boxlite-2656872e463fdedb/out/flag_check.c 2 min 50 s 16 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/boxlite-2656872e463fdedb/out/flag_check.c -quiet -dumpdir /work/target/debug/build/boxlite-2656872e463fdedb/out/ -dumpbase flag_check.c -dumpbase-ext .c -m64 -mno-omit-leaf-frame-pointer -mtune=generic -march=x86-64 -O0 -Wall -Wextra -ffunction-sections -fdata-sections -fPIC -fasynchronous-unwind-tables -o /tmp/ccKanrD8.s 2 min 50 s 11 ms 0
└toolchain /usr/bin/as --64 -o /work/target/debug/build/boxlite-2656872e463fdedb/out/flag_check /tmp/ccKanrD8.s 2 min 50 s 2 ms 0
└toolchain /usr/bin/ar ×2 cqD /work/target/debug/build/boxlite-2656872e463fdedb/out/libkvm_smoke.a /work/target/debug/build/boxlite-2656872e463fdedb/out/ea708c7824d36062-kvm_smoke.o 2 min 50 s 3 ms 0
└other /usr/bin/curl -fsSL -o /work/target/debug/build/boxlite-2656872e463fdedb/out/runtime/boxlite-runtime.tar.gz https://github.com/boxlite-ai/boxlite/releases/download/v0.10.7/boxlite-runtime-v0.10.7-linux-x64-gnu.tar.gz 2 min 50 s 58 ms 5632

Network 2

The VM has no internet. Every name it looks up resolves to 10.0.2.1, the fake internet, which accepts every connection and records what was sent. Below, it is shown by its port alone, such as :443. The name the build wanted is in the lookups, the HTTP host and the TLS SNI.

Looked up github.com

DestinationProtocolWhat was sentBytes
:443tlsSNI github.com, inside TLS: GET /boxlite-ai/boxlite/releases/download/v0.10.7/boxlite-runtime-v0.10.7-linux-x64-gnu.tar.gz, host github.com, agent curl/8.14.11.5 KiB
Sockets in the trace 3
WhenProgramHowAddressType
2 min 50 s/usr/bin/curlconnectunix:/var/run/nscd/socketstream
2 min 50 s/usr/bin/curlconnect:53datagram
2 min 50 s/usr/bin/curlconnect:443stream

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files
2952
Directories
629
Size
1.0 GiB
Compiled units
434
Scan
stopped at a limit

Nothing outside the build areas.

Output

Standard error
   Compiling proc-macro2 v1.0.107
   Compiling quote v1.0.47
   Compiling unicode-ident v1.0.27
   Compiling libc v0.2.191
   Compiling syn v3.0.9
    Checking cfg-if v1.0.5
   Compiling syn v2.0.119
    Checking smallvec v1.16.3
    Checking memchr v2.8.3
    Checking pin-project-lite v0.2.17
   Compiling jobserver v0.1.35
   Compiling shlex v2.0.1
   Compiling find-msvc-tools v0.1.14
   Compiling cc v1.8.0
   Compiling parking_lot_core v0.9.12
   Compiling serde_core v1.0.229
    Checking errno v0.3.14
    Checking scopeguard v1.2.0
   Compiling autocfg v1.5.1
    Checking lock_api v0.4.14
    Checking signal-hook-registry v1.4.8
    Checking futures-sink v0.3.34
    Checking once_cell v1.21.4
    Checking itoa v1.0.18
    Checking parking_lot v0.12.5
   Compiling tokio-macros v2.7.2
    Checking mio v1.2.4
    Checking socket2 v0.6.5
    Checking tokio v1.53.3
   Compiling synstructure v0.14.0
    Checking slab v0.4.12
   Compiling serde v1.0.229
    Checking futures-channel v0.3.34
   Compiling serde_derive v1.0.229
    Checking log v0.4.34
   Compiling zerofrom-derive v0.1.8
    Checking futures-task v0.3.34
    Checking zerofrom v0.1.8
   Compiling yoke-derive v0.8.4
   Compiling futures-macro v0.3.34
    Checking stable_deref_trait v1.2.1
    Checking futures-io v0.3.34
    Checking futures-util v0.3.34
    Checking yoke v0.8.3
    Checking getrandom v0.2.17
   Compiling getrandom v0.4.3
   Compiling zmij v1.0.23
   Compiling pkg-config v0.3.34
    Checking http v1.5.0
    Checking tracing-core v0.1.36
   Compiling zerovec-derive v0.11.6
    Checking zerovec v0.11.8
   Compiling tracing-attributes v0.1.31
   Compiling displaydoc v0.2.7
   Compiling anyhow v1.0.104
   Compiling serde_json v1.0.154
    Checking bitflags v2.13.2
    Checking typenum v1.20.1
    Checking tracing v0.1.44
    Checking http-body v1.1.0
    Checking zeroize v1.9.1
    Checking tower-service v0.3.3
    Checking percent-encoding v2.3.2
   Compiling zerocopy v0.8.63
   Compiling heck v0.5.0
   Compiling either v1.19.0
   Compiling rustix v1.1.5
   Compiling itertools v0.14.0
    Checking tinystr v0.8.4
    Checking tokio-util v0.7.20
   Compiling ring v0.17.14
    Checking aho-corasick v1.1.5
   Compiling num_cpus v1.17.0
    Checking hashbrown v0.17.1
    Checking writeable v0.6.4
    Checking regex-syntax v0.8.11
   Compiling rustversion v1.0.23
   Compiling version_check v0.9.5
    Checking equivalent v1.0.3
   Compiling httparse v1.10.1
    Checking litemap v0.8.3
   Compiling linux-raw-sys v0.12.1
    Checking icu_locale_core v2.3.0
    Checking indexmap v2.14.2
   Compiling generic-array v0.14.7
    Checking regex-automata v0.4.18
   Compiling prost-derive v0.13.5
    Checking ppv-lite86 v0.2.21
    Checking zerotrie v0.2.5
    Checking potential_utf v0.1.6
    Checking fnv v1.0.7
    Checking tower-layer v0.3.3
    Checking subtle v2.6.1
    Checking utf8_iter v1.0.4
   Compiling ident_case v1.0.1
   Compiling crossbeam-utils v0.8.23
    Checking atomic-waker v1.1.2
   Compiling strsim v0.11.1
   Compiling icu_normalizer_data v2.3.0
   Compiling thiserror v2.0.21
    Checking try-lock v0.2.5
   Compiling fastrand v2.5.0
   Compiling icu_properties_data v2.3.0
   Compiling tempfile v3.27.0
    Checking want v0.3.2
   Compiling darling_core v0.20.11
    Checking h2 v0.4.20
    Checking icu_collections v2.3.0
    Checking icu_provider v2.3.1
    Checking rustls-pki-types v1.15.1
    Checking sync_wrapper v1.0.2
   Compiling thiserror-impl v2.0.21
    Checking untrusted v0.9.0
    Checking httpdate v1.0.3
    Checking hyper v1.12.0
   Compiling darling_macro v0.20.11
   Compiling regex v1.13.1
   Compiling bytes v1.12.1
    Checking bitflags v1.3.2
    Checking ipnet v2.12.2
   Compiling prettyplease v0.2.37
    Checking base64 v0.23.1
    Checking hyper-util v0.1.21
   Compiling hybrid-array v0.4.15
   Compiling prost v0.13.5
    Checking icu_properties v2.3.0
   Compiling darling v0.20.11
    Checking icu_normalizer v2.3.0
    Checking tower v0.5.3
    Checking http-body-util v0.1.5
    Checking rand_core v0.6.4
   Compiling num-traits v0.2.19
   Compiling fixedbitset v0.5.7
    Checking base64 v0.22.1
   Compiling getrandom v0.3.4
   Compiling rustls v0.23.46
   Compiling crossbeam-epoch v0.9.21
   Compiling petgraph v0.7.1
    Checking rand_chacha v0.3.1
    Checking idna_adapter v1.2.2
   Compiling derive_builder_core v0.20.2
   Compiling prost-types v0.13.5
    Checking crypto-common v0.1.7
    Checking block-buffer v0.10.4
    Checking rustls-webpki v0.103.15
    Checking form_urlencoded v1.2.2
   Compiling zstd-sys v2.1.2+zstd.1.5.7
   Compiling indexmap v1.9.3
   Compiling async-trait v0.1.92
   Compiling unicode-xid v0.2.6
    Checking utf8parse v0.2.2
   Compiling crossbeam-deque v0.8.8
   Compiling multimap v0.10.1
    Checking konst_macro_rules v0.2.19
    Checking lazy_static v1.5.1
   Compiling virtue v0.0.18
   Compiling bincode_derive v2.0.1
    Checking konst v0.2.20
   Compiling prost-build v0.13.5
    Checking anstyle-parse v1.0.0
   Compiling const_format_proc_macros v0.2.34
    Checking digest v0.10.7
   Compiling derive_builder_macro v0.20.2
    Checking idna v1.1.0
    Checking rand v0.8.8
   Compiling crypto-common v0.2.2
   Compiling block-buffer v0.12.1
   Compiling memoffset v0.7.1
   Compiling memoffset v0.6.5
   Compiling pin-project-internal v1.1.13
    Checking mime v0.3.17
    Checking anstyle-query v1.1.5
   Compiling thiserror v1.0.69
    Checking time-core v0.1.9
    Checking powerfmt v0.2.1
    Checking is_terminal_polyfill v1.70.2
   Compiling vcpkg v0.2.15
    Checking anstyle v1.0.14
    Checking hashbrown v0.12.3
    Checking num-conv v0.2.2
   Compiling rayon-core v1.13.0
   Compiling const-oid v0.10.2
    Checking colorchoice v1.0.5
    Checking deranged v0.5.9
   Compiling io-uring v0.5.13
    Checking base64ct v1.8.3
    Checking pem-rfc7468 v0.7.0
    Checking time v0.3.55
    Checking anstream v1.0.0
   Compiling digest v0.11.3
   Compiling libsqlite3-sys v0.37.0
    Checking axum-core v0.4.5
    Checking pin-project v1.1.13
    Checking rand_core v0.9.5
    Checking url v2.5.8
    Checking derive_builder v0.20.2
    Checking tokio-rustls v0.26.6
    Checking const_format v0.2.36
   Compiling tonic-build v0.12.3
    Checking webpki-roots v1.0.9
   Compiling libkrun-sys v0.10.7
   Compiling e2fsprogs-sys v0.10.7
   Compiling bubblewrap-sys v0.10.7
   Compiling strum_macros v0.27.2
    Checking futures-executor v0.3.34
   Compiling getset v0.1.7
   Compiling thiserror-impl v1.0.69
   Compiling async-stream-impl v0.3.6
   Compiling der_derive v0.7.3
    Checking cpufeatures v0.2.17
    Checking const-oid v0.9.6
    Checking tinyvec v1.13.3
   Compiling cfg_aliases v0.2.2
   Compiling zstd-safe v7.3.0
    Checking matchit v0.7.3
    Checking foldhash v0.2.0
    Checking ryu v1.0.23
    Checking flagset v0.4.7
    Checking clap_lex v1.1.1
   Compiling cpufeatures v0.3.1
   Compiling crc32fast v1.5.2
   Compiling unty v0.0.4
    Checking strum v0.27.2
   Compiling bincode v2.0.1
   Compiling sha2 v0.11.1
    Checking clap_builder v4.6.7
    Checking der v0.7.10
    Checking serde_urlencoded v0.7.1
    Checking hashbrown v0.16.1
    Checking axum v0.7.9
   Compiling nix v0.30.1
    Checking unicode-normalization v0.1.26
    Checking sha2 v0.10.9
    Checking async-stream v0.3.6
    Checking futures v0.3.34
    Checking hyper-rustls v0.27.10
   Compiling seccompiler v0.4.0
   Compiling boxlite-shared v0.10.7
    Checking tower-http v0.6.11
    Checking rand_chacha v0.9.0
    Checking tower v0.4.13
    Checking hmac v0.12.1
    Checking sharded-slab v0.1.7
    Checking hyper-timeout v0.5.2
    Checking xattr v1.6.1
   Compiling pathrs v0.2.6
    Checking matchers v0.2.0
   Compiling clap_derive v4.6.7
    Checking tracing-log v0.2.0
    Checking tokio-stream v0.1.19
    Checking nibble_vec v0.1.0
   Compiling enumflags2_derive v0.7.12
    Checking thread_local v1.1.10
    Checking filetime v0.2.29
    Checking socket2 v0.4.10
    Checking socket2 v0.5.10
    Checking atty v0.2.14
    Checking base64 v0.13.1
    Checking simd-adler32 v0.3.10
    Checking endian-type v0.1.2
    Checking termcolor v1.4.1
   Compiling signal-hook v0.3.18
    Checking option-ext v0.2.0
   Compiling fuse-backend-rs v0.12.1
    Checking pin-utils v0.1.1
    Checking adler v1.0.2
    Checking humantime v2.4.0
    Checking scoped-tls v1.0.1
    Checking iana-time-zone v0.1.65
    Checking nu-ansi-term v0.50.3
   Compiling hex v0.4.3
    Checking adler2 v2.0.1
    Checking miniz_oxide v0.9.1
   Compiling boxlite v0.10.7
    Checking tracing-subscriber v0.3.23
    Checking chrono v0.4.45
    Checking tokio-uring v0.4.0
    Checking env_logger v0.9.3
    Checking miniz_oxide v0.7.4
    Checking nix v0.26.4
    Checking dirs-sys v0.4.1
    Checking radix_trie v0.2.1
    Checking jwt v0.16.0
    Checking tonic v0.12.3
    Checking tar v0.4.46
    Checking enumflags2 v0.7.12
    Checking clap v4.6.7
    Checking nix v0.24.3
    Checking rayon v1.12.0
    Checking rand v0.9.5
    Checking reqwest v0.12.28
    Checking vm-memory v0.14.1
    Checking olpc-cjson v0.1.4
    Checking hashlink v0.11.1
    Checking spki v0.7.3
    Checking oci-spec v0.8.4
    Checking yasna v0.5.2
    Checking itertools v0.15.0
    Checking clap-num v1.2.0
    Checking pem v3.0.6
    Checking vmm-sys-util v0.12.1
    Checking crossbeam-channel v0.5.17
    Checking arc-swap v1.9.2
    Checking bincode v1.3.3
    Checking futures-locks v0.7.1
    Checking mio v0.8.11
    Checking http-auth v0.1.10
   Compiling async-recursion v1.2.0
    Checking caps v0.5.6
    Checking unicase v2.10.0
    Checking fallible-iterator v0.3.0
    Checking same-file v1.0.6
    Checking static_assertions v1.1.0
    Checking fallible-streaming-iterator v0.1.9
    Checking symlink v0.1.0
    Checking byteorder v1.5.0
    Checking qcow2-rs v0.1.6
    Checking tracing-appender v0.2.5
    Checking rusqlite v0.39.0
    Checking walkdir v2.5.0
    Checking oci-client v0.15.0
    Checking rcgen v0.13.2
    Checking flate2 v1.1.10
    Checking x509-cert v0.2.5
    Checking ulid v1.2.1
    Checking sysinfo v0.30.13
    Checking zstd v0.13.3
    Checking landlock v0.4.7
    Checking dirs v5.0.1
warning: boxlite@0.10.7: Compiling seccomp filter: resources/seccomp/x86_64-unknown-linux-gnu.json -> /work/target/debug/build/boxlite-2656872e463fdedb/out/seccomp_filter.bpf
warning: boxlite@0.10.7: Successfully compiled seccomp filter (9386 bytes)
warning: boxlite@0.10.7: BOXLITE_DEPS_STUB=2: downloading prebuilt runtime
warning: boxlite@0.10.7: Downloading https://github.com/boxlite-ai/boxlite/releases/download/v0.10.7/boxlite-runtime-v0.10.7-linux-x64-gnu.tar.gz...
warning: boxlite@0.10.7: Failed to download prebuilt runtime from https://github.com/boxlite-ai/boxlite/releases/download/v0.10.7/boxlite-runtime-v0.10.7-linux-x64-gnu.tar.gz: curl failed: curl: (22) The requested URL returned error: 404
warning: boxlite@0.10.7: Native libraries will not be available.
error: failed to run custom build command for `boxlite v0.10.7`

Caused by:
  process didn't exit successfully: `/work/target/debug/build/boxlite-2b9ba720fc18e75c/build-script-build` (exit status: 101)
  --- stdout
  cargo:rerun-if-changed=build.rs
  cargo:rerun-if-changed=src/default_runtime_dir.rs
  cargo:rerun-if-env-changed=BOXLITE_DEPS_STUB
  cargo:rerun-if-env-changed=BOXLITE_EMBED_RUNTIME
  cargo:rerun-if-env-changed=CARGO_TARGET_DIR
  cargo:rerun-if-changed=src/kvm_smoke.c
  cargo:rerun-if-env-changed=CC_FORCE_DISABLE
  CC_FORCE_DISABLE = None
  cargo:rerun-if-env-changed=CC_x86_64-unknown-linux-gnu
  CC_x86_64-unknown-linux-gnu = None
  cargo:rerun-if-env-changed=CC_x86_64_unknown_linux_gnu
  CC_x86_64_unknown_linux_gnu = None
  cargo:rerun-if-env-changed=HOST_CC
  HOST_CC = None
  cargo:rerun-if-env-changed=CC
  CC = None
  cargo:rerun-if-env-changed=CC_ENABLE_DEBUG_OUTPUT
  cargo:rerun-if-env-changed=CRATE_CC_NO_DEFAULTS
  CRATE_CC_NO_DEFAULTS = None
  cargo:rerun-if-env-changed=CRATE_CC_NO_DEFAULTS
  CRATE_CC_NO_DEFAULTS = None
  cargo:rerun-if-env-changed=CFLAGS
  CFLAGS = None
  cargo:rerun-if-env-changed=HOST_CFLAGS
  HOST_CFLAGS = None
  cargo:rerun-if-env-changed=CFLAGS_x86_64_unknown_linux_gnu
  CFLAGS_x86_64_unknown_linux_gnu = None
  cargo:rerun-if-env-changed=CFLAGS_x86_64-unknown-linux-gnu
  CFLAGS_x86_64-unknown-linux-gnu = None
  cargo:rerun-if-env-changed=CFLAGS
  CFLAGS = None
  cargo:rerun-if-env-changed=HOST_CFLAGS
  HOST_CFLAGS = None
  cargo:rerun-if-env-changed=CFLAGS_x86_64_unknown_linux_gnu
  CFLAGS_x86_64_unknown_linux_gnu = None
  cargo:rerun-if-env-changed=CFLAGS_x86_64-unknown-linux-gnu
  CFLAGS_x86_64-unknown-linux-gnu = None
  cargo:rerun-if-env-changed=CC_FORCE_DISABLE
  CC_FORCE_DISABLE = None
  cargo:rerun-if-env-changed=AR_x86_64-unknown-linux-gnu
  AR_x86_64-unknown-linux-gnu = None
  cargo:rerun-if-env-changed=AR_x86_64_unknown_linux_gnu
  AR_x86_64_unknown_linux_gnu = None
  cargo:rerun-if-env-changed=HOST_AR
  HOST_AR = None
  cargo:rerun-if-env-changed=AR
  AR = None
  cargo:rerun-if-env-changed=ARFLAGS
  ARFLAGS = None
  cargo:rerun-if-env-changed=HOST_ARFLAGS
  HOST_ARFLAGS = None
  cargo:rerun-if-env-changed=ARFLAGS_x86_64_unknown_linux_gnu
  ARFLAGS_x86_64_unknown_linux_gnu = None
  cargo:rerun-if-env-changed=ARFLAGS_x86_64-unknown-linux-gnu
  ARFLAGS_x86_64-unknown-linux-gnu = None
  cargo:rerun-if-env-changed=AR_x86_64-unknown-linux-gnu
  AR_x86_64-unknown-linux-gnu = None
  cargo:rerun-if-env-changed=AR_x86_64_unknown_linux_gnu
  AR_x86_64_unknown_linux_gnu = None
  cargo:rerun-if-env-changed=HOST_AR
  HOST_AR = None
  cargo:rerun-if-env-changed=AR
  AR = None
  cargo:rerun-if-env-changed=ARFLAGS
  ARFLAGS = None
  cargo:rerun-if-env-changed=HOST_ARFLAGS
  HOST_ARFLAGS = None
  cargo:rerun-if-env-changed=ARFLAGS_x86_64_unknown_linux_gnu
  ARFLAGS_x86_64_unknown_linux_gnu = None
  cargo:rerun-if-env-changed=ARFLAGS_x86_64-unknown-linux-gnu
  ARFLAGS_x86_64-unknown-linux-gnu = None
  cargo:rustc-link-lib=static=kvm_smoke
  cargo:rustc-link-search=native=/work/target/debug/build/boxlite-2656872e463fdedb/out
  cargo:warning=Compiling seccomp filter: resources/seccomp/x86_64-unknown-linux-gnu.json -> /work/target/debug/build/boxlite-2656872e463fdedb/out/seccomp_filter.bpf
  cargo:warning=Successfully compiled seccomp filter (9386 bytes)
  cargo:rerun-if-changed=resources/seccomp/x86_64-unknown-linux-gnu.json
  cargo:rerun-if-changed=resources/seccomp/
  cargo:warning=BOXLITE_DEPS_STUB=2: downloading prebuilt runtime
  cargo:rerun-if-env-changed=BOXLITE_RUNTIME_URL
  cargo:warning=Downloading https://github.com/boxlite-ai/boxlite/releases/download/v0.10.7/boxlite-runtime-v0.10.7-linux-x64-gnu.tar.gz...
  cargo:warning=Failed to download prebuilt runtime from https://github.com/boxlite-ai/boxlite/releases/download/v0.10.7/boxlite-runtime-v0.10.7-linux-x64-gnu.tar.gz: curl failed: curl: (22) The requested URL returned error: 404

  cargo:warning=Native libraries will not be available.

  --- stderr

  thread 'main' (4175) panicked at /cw/vendor/boxlite-0.10.7/build.rs:1214:17:
  Failed to prepare complete prebuilt BoxLite runtime in /work/target/debug/build/boxlite-2656872e463fdedb/out/runtime
  note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

Timeline

6
WhenFromToEventWorker
2026-10-18 01:02 UTCDiscoveredFetchedfetchedfetcher-12688
2026-10-18 01:02 UTCFetchedReadyForSandboxstatic_analysis_completedstatic-12726
2026-10-18 01:02 UTCReadyForSandboxRunningsandbox_startedorchestrator-12760-slot1
2026-10-18 01:05 UTCRunningDynamicallyAnalyzedsandbox_completedorchestrator-12760-slot1
2026-10-18 01:05 UTCDynamicallyAnalyzedScoredscoredanalyzer-12816
2026-10-18 01:05 UTCScoredDonefinalizedanalyzer-12816