ramp-ffmpeg 9.0.2

Done dynamic on Linux job 220745 crates.io SBOM Findings (VEX)

high severity environment_enumeration in build_script code: std::env::vars

high

False positive. A person reviewed this verdict and found the crate benign. The evidence below is what the analysis saw.

Evidence

Points	Signal	Where	What
30	static:environment_enumeration static · ramp-ffmpeg	build.rs:4	high severity environment_enumeration in build_script code: std::env::vars
15	exec_privilege trace · ramp-nasm	/usr/bin/chmod	The build ran /usr/bin/chmod.
5	new_behavior diff · ramp-ffmpeg	exec:privilege	New since the previous version: exec:privilege.
5	new_behavior diff · ramp-ffmpeg	exec:shell	New since the previous version: exec:shell.
3	exec_shell trace · ramp-nasm	/bin/bash	The build ran /bin/bash.

1 without points

Signal	Where	What
static:build_script static · ramp-ffmpeg	build.rs	low severity build_script in build_script code: build.rs

Behavior

New since the previous version

exec:privilege exec:shell

Profile

exec:privilege exec:shell static:environment_enumeration

Static findings

All 91 high 1 low 1 info 89 5 groups

high environment_enumeration build_script 1

std::env::vars build.rs:4

low build_script build_script 1

build.rs build.rs

info unsafe_code library 84

6 unsafe blocks, functions or impls src/codec/audio.rs:20 src/codec/subtitle/mod.rs:64 src/device/extensions.rs:12 src/device/mod.rs:36 src/filter/filter.rs:28 src/filter/mod.rs:25 src/format/format/output.rs:31 src/util/interrupt.rs:17
14 unsafe blocks, functions or impls src/codec/codec.rs:13 src/software/scaling/vector.rs:34
19 unsafe blocks, functions or impls src/codec/context.rs:20 src/codec/decoder/video.rs:32 src/util/frame/mod.rs:39
16 unsafe blocks, functions or impls src/codec/decoder/audio.rs:31
11 unsafe blocks, functions or impls src/codec/decoder/decoder.rs:13 src/codec/encoder/encoder.rs:17 src/codec/parameters.rs:15 src/codec/subtitle/rect.rs:19 src/filter/graph.rs:14 src/util/format/sample.rs:32 src/util/rational.rs:37
2 unsafe blocks, functions or impls src/codec/decoder/mod.rs:36 src/codec/encoder/mod.rs:39 src/codec/id.rs:731 src/codec/packet/borrow.rs:15 src/codec/packet/side_data.rs:272 src/device/input.rs:13 src/device/output.rs:13 src/filter/pad.rs:35 src/format/network.rs:4 src/util/dictionary/immutable.rs:31 src/util/dictionary/mutable.rs:18 src/util/error.rs:160 src/util/legacy_channel_layout.rs:80 src/util/mathematics/rescale.rs:24
9 unsafe blocks, functions or impls src/codec/decoder/opened.rs:37 src/codec/picture.rs:51 src/util/format/pixel.rs:536 src/util/option/traits.rs:27
1 unsafe blocks, functions or impls src/codec/decoder/subtitle.rs:18 src/format/context/mod.rs:21 src/format/format/iter.rs:38 src/software/resampling/delay.rs:14 src/software/resampling/extensions.rs:16 src/util/color/primaries.rs:38 src/util/color/range.rs:19 src/util/color/space.rs:41 src/util/color/transfer_characteristic.rs:35 src/util/dictionary/iter.rs:30
15 unsafe blocks, functions or impls src/codec/encoder/audio.rs:19
5 unsafe blocks, functions or impls src/codec/encoder/subtitle.rs:15 src/codec/mod.rs:56 src/software/scaling/context.rs:45 src/util/dictionary/owned.rs:21
55 unsafe blocks, functions or impls src/codec/encoder/video.rs:21
20 unsafe blocks, functions or impls src/codec/packet/packet.rs:12
17 unsafe blocks, functions or impls src/codec/subtitle/rect_mut.rs:17
4 unsafe blocks, functions or impls src/codec/video.rs:20 src/filter/context/context.rs:26 src/filter/context/sink.rs:18 src/filter/context/source.rs:19 src/format/format/input.rs:26 src/util/channel_layout.rs:10 src/util/frame/side_data.rs:94 src/util/log/mod.rs:11 src/util/time.rs:6
7 unsafe blocks, functions or impls src/format/chapter/chapter.rs:19 src/format/stream/stream_mut.rs:18 src/software/resampling/context.rs:25
8 unsafe blocks, functions or impls src/format/chapter/chapter_mut.rs:20
22 unsafe blocks, functions or impls src/format/context/common.rs:18
3 unsafe blocks, functions or impls src/format/context/destructor.rs:53 src/software/resampling/mod.rs:27 src/software/scaling/mod.rs:26 src/software/scaling/support.rs:5 src/util/mod.rs:29
21 unsafe blocks, functions or impls src/format/context/input.rs:18
12 unsafe blocks, functions or impls src/format/context/output.rs:26
24 unsafe blocks, functions or impls src/format/context/stream_io.rs:70
18 unsafe blocks, functions or impls src/format/mod.rs:30 src/format/stream/stream.rs:20
10 unsafe blocks, functions or impls src/software/scaling/filter.rs:27
60 unsafe blocks, functions or impls src/util/frame/audio.rs:17
44 unsafe blocks, functions or impls src/util/frame/video.rs:20

info unsafe_code test 3

1 unsafe blocks, functions or impls tests/buffersink_reuse.rs:83 tests/send_rc_race.rs:65
5 unsafe blocks, functions or impls tests/stream_io.rs:81

info unsafe_code binary 2

1 unsafe blocks, functions or impls examples/remux.rs:37 examples/transcode-x264.rs:229

Run: full

failed

The full build covers everything the earlier cargo check run did, so only the full run is shown.

Ended: agent reported the end
Guest: exit code 101
Run time: 37.2 s
VM restore: 73 ms
Payload: 2050 files, 23.5 MiB
Files opened: 44754

Processes 2000

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number. Hide the 656 compiler processes (rustc, C toolchain)

Process	Arguments	Start	Took	Exit
cargo /usr/local/bin/cargo	build --locked --offline	5 ms	37.2 s	25856
└rustc /usr/local/bin/rustc ×16	--crate-name typenum --edition=2018 /cw/vendor/typenum-1.20.1/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --cfg feature="const-generics" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("const-generics", "i128", "scale-info", "scale_info", "strict")) -C metadata=98665f2e9774125c -C extra-filename=-f1c3ee9134ede149 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow	143 ms	1.2 s	0
└rustc /usr/local/bin/rustc ×2	--crate-name build_script_build --edition=2021 /cw/vendor/libc-0.2.191/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --allow=unused_qualifications --warn=clippy::unnecessary_semicolon --allow=clippy::unnecessary_cast --warn=clippy::ptr_as_ptr --allow=clippy::non_minimal_cfg --allow=clippy::missing_safety_doc --warn=clippy::map_unwrap_or --warn=clippy::manual_assert --allow=clippy::identity_op --warn=clippy::explicit_iter_loop --cfg feature="default" --cfg feature="std" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("align", "const-extern-fn", "default", "extra_traits", "rustc-dep-of-std", "rustc-std-workspace-core", "std", "use_std")) -C metadata=f2b3c09777387306	1.8 s	402 ms	0
└toolchain /usr/bin/cc	-m64 /work/target/debug/build/libc-24a0c765ebd7d3cb/rustc5gRF7k/symbols.o /work/target/debug/build/libc-24a0c765ebd7d3cb/build_script_build-24a0c765ebd7d3cb.build_script_build.2cf7c5ec755a4f39-cgu.0.rcgu.o /work/target/debug/build/libc-24a0c765ebd7d3cb/build_script_build-24a0c765ebd7d3cb.build_script_build.2cf7c5ec755a4f39-cgu.1.rcgu.o /work/target/debug/build/libc-24a0c765ebd7d3cb/build_script_build-24a0c765ebd7d3cb.build_script_build.2cf7c5ec755a4f39-cgu.2.rcgu.o /work/target/debug/build/libc-24a0c765ebd7d3cb/build_script_build-24a0c765ebd7d3cb.build_script_build.2cf7c5ec755a4f39-cgu.3.rcgu.o /work/target/debug/build/libc-24a0c765ebd7d3cb/build_script_build-24a0c765ebd7d3cb.9x3fp7esgkeb4azbnju054438.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rus	2.0 s	138 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2	-plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccRSVU8k.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/libc-24a0c765ebd7d3cb/build_script_build-24a0c765ebd7d3cb /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/libc-24a0c765ebd7d3cb/rustc5gRF7k/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../li	2.0 s	131 ms	0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld	-flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccRSVU8k.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/libc-24a0c765ebd7d3cb/build_script_build-24a0c765ebd7d3cb /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/libc-24a0c765ebd7d3cb/rustc5gRF7k/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L	2.0 s	128 ms	0
└build_script libc		2.2 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	2.2 s	7 ms	0
└build_script ramp-nasm		8.7 s	27.2 s	0
└other /bin/bash	configure --without-zlib	9.9 s	7.8 s	0
└unknown ×19		9.9 s	0 ms	0
└unknown ×3		9.9 s	0 ms	32512
└unknown		9.9 s	1 ms	0
└unknown ×2		9.9 s	1 ms	0
└unknown		9.9 s	0 ms	256
└unknown		9.9 s	0 ms	0
└unknown		9.9 s	0 ms	0
└unknown		9.9 s	1 ms	256
└other /bin/sh	-c if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1\u{a}then :\u{a} emulate sh\u{a} NULLCMD=:\u{a} # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which\u{a} # is contrary to our usage. Disable this feature.\u{a} alias -g '${1+"$@"}'='"$@"'\u{a} setopt NO_GLOB_SUBST\u{a}else case e in #(\u{a} e) case `(set -o) 2>/dev/null` in #(\u{a} posix) :\u{a} set -o posix ;; #(\u{a} *) :\u{a} ;;\u{a}esac ;;\u{a}esac\u{a}fi\u{a}as_fn_return () { (exit $1); }\u{a}as_fn_success () { as_fn_return 0; }\u{a}as_fn_failure () { as_fn_return 1; }\u{a}as_fn_ret_success () {…	9.9 s	2 ms	0
└unknown ×3		9.9 s	0 ms	0
└unknown		9.9 s	0 ms	256
└unknown		9.9 s	1 ms	0
└unknown		9.9 s	0 ms	0
└other /bin/sh	-c if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1\u{a}then :\u{a} emulate sh\u{a} NULLCMD=:\u{a} # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which\u{a} # is contrary to our usage. Disable this feature.\u{a} alias -g '${1+"$@"}'='"$@"'\u{a} setopt NO_GLOB_SUBST\u{a}else case e in #(\u{a} e) case `(set -o) 2>/dev/null` in #(\u{a} posix) :\u{a} set -o posix ;; #(\u{a} *) :\u{a} ;;\u{a}esac ;;\u{a}esac\u{a}fi\u{a} as_lineno_1= as_lineno_1a=$LINENO\u{a} as_lineno_2= as_lineno_2a=$LINENO\u{a} eval 'test "x$as_lineno_1'$as_run'" != "x$as_lineno_2…	9.9 s	1 ms	256
└unknown		9.9 s	0 ms	0
└other /bin/bash	-c if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1\u{a}then :\u{a} emulate sh\u{a} NULLCMD=:\u{a} # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which\u{a} # is contrary to our usage. Disable this feature.\u{a} alias -g '${1+"$@"}'='"$@"'\u{a} setopt NO_GLOB_SUBST\u{a}else case e in #(\u{a} e) case `(set -o) 2>/dev/null` in #(\u{a} posix) :\u{a} set -o posix ;; #(\u{a} *) :\u{a} ;;\u{a}esac ;;\u{a}esac\u{a}fi\u{a}as_fn_return () { (exit $1); }\u{a}as_fn_success () { as_fn_return 0; }\u{a}as_fn_failure () { as_fn_return 1; }\u{a}as_fn_ret_success () {…	9.9 s	8 ms	0
└unknown ×2		9.9 s	1 ms	0
└unknown		9.9 s	0 ms	0
└unknown ×2		9.9 s	1 ms	0
└unknown		9.9 s	0 ms	256
└other /bin/bash	-c if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1\u{a}then :\u{a} emulate sh\u{a} NULLCMD=:\u{a} # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which\u{a} # is contrary to our usage. Disable this feature.\u{a} alias -g '${1+"$@"}'='"$@"'\u{a} setopt NO_GLOB_SUBST\u{a}else case e in #(\u{a} e) case `(set -o) 2>/dev/null` in #(\u{a} posix) :\u{a} set -o posix ;; #(\u{a} *) :\u{a} ;;\u{a}esac ;;\u{a}esac\u{a}fi\u{a} as_lineno_1= as_lineno_1a=$LINENO\u{a} as_lineno_2= as_lineno_2a=$LINENO\u{a} eval 'test "x$as_lineno_1'$as_run'" != "x$as_lineno_2…	9.9 s	5 ms	0
└unknown		9.9 s	0 ms	0
└unknown		9.9 s	0 ms	0
└other /usr/bin/expr	18 + 1	9.9 s	3 ms	0
└unknown ×3		9.9 s	0 ms	0
└unknown		9.9 s	0 ms	0
└other /usr/bin/expr ×5	a : $a$	9.9 s	1 ms	0
└other /usr/bin/basename	-- /	9.9 s	1 ms	0
└unknown ×2		9.9 s	1 ms	0
└other /usr/bin/basename	-- /	9.9 s	1 ms	0
└unknown ×2		9.9 s	1 ms	0
└other /usr/bin/dirname	-- /	9.9 s	1 ms	0
└other /usr/bin/rm ×422	-f conf775 conf775.exe conf775.file	9.9 s	1 ms	0
└other /usr/bin/mkdir ×3	conf775.dir	9.9 s	3 ms	0
└other /usr/bin/ln ×2	-s conf775.file conf775	9.9 s	1 ms	0
└other /usr/bin/rmdir	conf775.dir	9.9 s	1 ms	0
└unknown		9.9 s	4 ms	0
└unknown		9.9 s	2 ms	0
└other /usr/bin/hostname		9.9 s	2 ms	0
└other /usr/bin/sed	1q	9.9 s	3 ms	0
└other /usr/bin/expr	xzlib : .*[^-+._abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789]	9.9 s	1 ms	256
└unknown ×19		9.9 s	2 ms	0
└unknown		9.9 s	1 ms	0
└other /usr/bin/sed	s/[-+.]/_/g	9.9 s	2 ms	0
└other /usr/bin/ls ×2	-di .	9.9 s	2 ms	0
└unknown		9.9 s	2 ms	0
└other /usr/bin/sed	s/ '$[^\|&;<>()$`\\"?[ \u{9}#~][^\|&;<>()$`\\"?[ \u{9}]*$'/ \1/g	9.9 s	2 ms	0
└unknown		9.9 s	1 ms	0
└other /usr/bin/cat ×242		9.9 s	1 ms	0
└other /usr/bin/cat		9.9 s	20 ms	0
└unknown		9.9 s	2 ms	0
└other /usr/bin/sed	1q	9.9 s	2 ms	0
└unknown		9.9 s	2 ms	0
└other /usr/bin/hostname		9.9 s	1 ms	0
└unknown ×5		9.9 s	2 ms	0
└other /usr/bin/uname	-m	9.9 s	1 ms	0
└unknown		10.0 s	1 ms	0
└other /bin/uname	-X	10.0 s	1 ms	256
└unknown		10.0 s	1 ms	0
└other /bin/arch		10.0 s	1 ms	0
└unknown		10.0 s	2 ms	0
└other /usr/bin/arch	-k	10.0 s	0 ms	256
└unknown ×5		10.0 s	0 ms	0
└unknown		10.0 s	0 ms	32512
└other /bin/bash ×2	./autoconf/helpers/config.sub sun4	10.0 s	5 ms	0
└unknown		10.0 s	1 ms	0
└unknown		10.0 s	0 ms	0
└other /usr/bin/sed	-e s,.*/,,	10.0 s	1 ms	0
└other /bin/bash	./autoconf/helpers/config.guess	10.0 s	75 ms	0
└unknown		10.0 s	1 ms	0
└unknown		10.0 s	0 ms	0
└other /usr/bin/sed	-e s,.*/,,	10.0 s	1 ms	0
└unknown ×4		10.0 s	1 ms	0
└other /usr/bin/uname	-m	10.0 s	1 ms	0
└unknown		10.0 s	1 ms	0
└other /usr/bin/mktemp	-d /tmp/cgXXXXXX	10.0 s	1 ms	0
└toolchain /usr/bin/cc	-c -o /tmp/cgViFfa5/dummy.o /tmp/cgViFfa5/dummy.c	10.0 s	37 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-quiet -imultiarch x86_64-linux-gnu /tmp/cgViFfa5/dummy.c -quiet -dumpdir /tmp/cgViFfa5/ -dumpbase dummy.c -dumpbase-ext .c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -o /tmp/ccVzyUMg.s	10.0 s	24 ms	0
└toolchain /usr/bin/as	--64 -o /tmp/cgViFfa5/dummy.o /tmp/ccVzyUMg.s	10.0 s	11 ms	0
└other /usr/bin/cat		10.0 s	1 ms	0
└unknown		10.0 s	13 ms	0
└toolchain /usr/bin/cc	-E /tmp/cgViFfa5/dummy.c	10.0 s	11 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-E -quiet -imultiarch x86_64-linux-gnu /tmp/cgViFfa5/dummy.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase dummy.c -dumpbase-ext .c	10.0 s	10 ms	0
└other /usr/bin/grep	^LIBC	10.0 s	11 ms	0
└other /usr/bin/sed	s, ,,g	10.0 s	8 ms	0
└other /usr/bin/sed	s/^\u{9} //	10.0 s	1 ms	0
└unknown		10.0 s	9 ms	0
└other /usr/bin/grep	^ABI	10.0 s	9 ms	256
└toolchain /usr/bin/cc	-E /tmp/cgViFfa5/dummy.c	10.0 s	9 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-E -quiet -imultiarch x86_64-linux-gnu /tmp/cgViFfa5/dummy.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase dummy.c -dumpbase-ext .c	10.0 s	6 ms	0
└other /usr/bin/sed	s, ,,g	10.0 s	9 ms	0
└other /usr/bin/rm	-fr /tmp/cgViFfa5	10.0 s	1 ms	0
└unknown ×2		10.1 s	2 ms	0
└toolchain /usr/bin/gcc	--version	10.1 s	1 ms	0
└other /usr/bin/sed ×46	10a\\u{a}... rest of stderr output deleted ...\u{a} 10q conftest.err	10.1 s	1 ms	0
└unknown ×4		10.1 s	3 ms	256
└toolchain /usr/bin/gcc	-V	10.1 s	3 ms	256
└unknown ×47		10.1 s	68 ms	0
└toolchain /usr/bin/gcc	conftest.c	10.1 s	68 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-quiet -imultiarch x86_64-linux-gnu conftest.c -quiet -dumpdir a- -dumpbase conftest.c -dumpbase-ext .c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -o /tmp/ccdEp8ax.s	10.1 s	22 ms	0
└toolchain /usr/bin/as	--64 -o /tmp/ccv8Kguf.o /tmp/ccdEp8ax.s	10.1 s	2 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2	-plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccDK37Bv.res -plugin-opt=-pass-through=-lgcc -plugin-opt=-pass-through=-lgcc_s -plugin-opt=-pass-through=-lc -plugin-opt=-pass-through=-lgcc -plugin-opt=-pass-through=-lgcc_s --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. /tmp/ccv8Kguf.o -lgcc	10.1 s	42 ms	0
└toolchain /usr/bin/ld	-plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccDK37Bv.res -plugin-opt=-pass-through=-lgcc -plugin-opt=-pass-through=-lgcc_s -plugin-opt=-pass-through=-lc -plugin-opt=-pass-through=-lgcc -plugin-opt=-pass-through=-lgcc_s --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. /tmp/ccv8Kguf.o -lgcc	10.1 s	40 ms	0
└unknown ×2		10.3 s	1 ms	0
└other ./conftest		10.3 s	1 ms	0
└unknown ×96		10.3 s	16 ms	0
└toolchain /usr/bin/gcc	-c conftest.c	10.3 s	15 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-quiet -imultiarch x86_64-linux-gnu conftest.c -quiet -dumpbase conftest.c -dumpbase-ext .c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -o /tmp/ccWxcWmg.s	10.3 s	11 ms	0
└toolchain /usr/bin/as	--64 -o conftest.o /tmp/ccWxcWmg.s	10.3 s	2 ms	0
└unknown ×25		10.6 s	21 ms	256
└toolchain /usr/bin/gcc	-c -g -O2 conftest.c	10.6 s	21 ms	256
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-quiet -imultiarch x86_64-linux-gnu conftest.c -quiet -dumpbase conftest.c -dumpbase-ext .c -mtune=generic -march=x86-64 -g -O2 -fasynchronous-unwind-tables -o /tmp/ccQS9NsY.s	10.6 s	20 ms	256
└other /usr/bin/grep ×36	-v ^ *+ conftest.err	10.7 s	1 ms	0
└other /usr/bin/mv ×36	-f conftest.er1 conftest.err	10.7 s	2 ms	0
└unknown		11.4 s	4 ms	0
└other /usr/bin/make	-f conftest.make	11.4 s	3 ms	0
└other /usr/bin/echo	@@@%%%=make=@@@%%%	11.4 s	0 ms	0
└other /usr/bin/grep ×2	dspmsg /usr/bin/install	11.4 s	2 ms	256
└other /usr/bin/install	-c conftest.one conftest.two /work/target/debug/build/ramp-nasm-4050638559f47b05/out/nasm-3.02/conftest.dir/	11.4 s	1 ms	0
└unknown		11.4 s	1 ms	0
└other /usr/bin/mkdir	--version	11.4 s	1 ms	0
└unknown ×9		12.0 s	39 ms	256
└toolchain /usr/bin/gcc	-o conftest -g -O2 -std=c23 -U__STRICT_ANSI__ -g3 -ggdb -fwrapv -ftrivial-auto-var-init=zero -fno-common conftest.c	12.0 s	37 ms	256
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1	-quiet -imultiarch x86_64-linux-gnu -dD -U __STRICT_ANSI__ conftest.c -quiet -dumpbase conftest.c -dumpbase-ext .c -mtune=generic -march=x86-64 -g -g3 -ggdb -O2 -std=c23 -fwrapv -ftrivial-auto-var-init=zero -fno-common -fasynchronous-unwind-tables -o /tmp/ccdQazgs.s	12.0 s	15 ms	0
└toolchain /usr/bin/as	--gdwarf-5 --64 -o /tmp/ccsJzILe.o /tmp/ccdQazgs.s	12.0 s	3 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2	-plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cclXvbNm.res -plugin-opt=-pass-through=-lgcc -plugin-opt=-pass-through=-lgcc_s -plugin-opt=-pass-through=-lc -plugin-opt=-pass-through=-lgcc -plugin-opt=-pass-through=-lgcc_s --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o conftest /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../..	12.0 s	16 ms	256
└toolchain /usr/bin/ld	-plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cclXvbNm.res -plugin-opt=-pass-through=-lgcc -plugin-opt=-pass-through=-lgcc_s -plugin-opt=-pass-through=-lc -plugin-opt=-pass-through=-lgcc -plugin-opt=-pass-through=-lgcc_s --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o conftest /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../..	12.0 s	16 ms	256
└unknown		17.6 s	20 ms	0
└unknown		17.6 s	7 ms	0
└unknown		17.6 s	2 ms	0
└other /usr/bin/sed	-n s/^$[a-zA-Z_][a-zA-Z0-9_]$=./\1/p	17.6 s	5 ms	0
└unknown		17.6 s	8 ms	0
└unknown		17.6 s	3 ms	0
└unknown		17.6 s	1 ms	0
└other /usr/bin/sed	-n /^[_abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789]_cv_[_abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789]=/p	17.6 s	3 ms	0
└other /usr/bin/sort		17.6 s	4 ms	0
└unknown		17.6 s	7 ms	0
└other /usr/bin/diff	/dev/null confcache	17.6 s	2 ms	256
└other /usr/bin/chmod	+x ./config.status	17.6 s	1 ms	0
└unknown		17.6 s	2 ms	0
└unknown		17.6 s	1 ms	0
└other /usr/bin/grep	-c ^	17.6 s	1 ms	0
└unknown		17.6 s	2 ms	0
└other /usr/bin/sed	-n s/.*%!_!# $/X/p conf775subs.awk	17.6 s	1 ms	0
└other /usr/bin/grep	-c X	17.6 s	2 ms	0
└other /bin/bash	./config.status	17.6 s	106 ms	0
└unknown		17.6 s	1 ms	0
└unknown		17.6 s	0 ms	0
└unknown ×7		17.6 s	0 ms	0
└unknown		17.6 s	0 ms	32512
└other /usr/bin/expr ×2	a : $a$	17.6 s	1 ms	0
└other /usr/bin/basename	-- /	17.6 s	1 ms	0
└unknown ×2		17.6 s	1 ms	0
└other /usr/bin/basename	-- /	17.6 s	1 ms	0
└unknown ×6		17.7 s	2 ms	0
└other /usr/bin/dirname	-- /	17.7 s	0 ms	0
└other /usr/bin/rm ×13	-f conf2607 conf2607.exe conf2607.file	17.7 s	1 ms	0
└other /usr/bin/mkdir ×2	conf2607.dir	17.7 s	1 ms	0
└other /usr/bin/ln ×2	-s conf2607.file conf2607	17.7 s	1 ms	0
└other /usr/bin/rmdir	conf2607.dir	17.7 s	0 ms	0
└unknown		17.7 s	2 ms	0
└unknown		17.7 s	2 ms	0
└other /usr/bin/hostname		17.7 s	2 ms	0
└other /usr/bin/sed	1q	17.7 s	2 ms	0
└other /usr/bin/sed ×4	h;s/./-/g;s/^.../## /;s/...$/ ##/;p;x;p;x	17.7 s	1 ms	0
└unknown		17.7 s	1 ms	0
└other /usr/bin/mktemp	-d ./confXXXXXX	17.7 s	1 ms	0
└unknown		17.7 s	1 ms	0
└unknown		17.7 s	0 ms	0
└other /usr/bin/tr	X \015	17.7 s	1 ms	0
└unknown		17.7 s	2 ms	0
└other /usr/bin/awk	BEGIN { print "a\rb" }	17.7 s	1 ms	0
└other /usr/bin/cat ×3		17.7 s	1 ms	0
└unknown ×12		17.7 s	2 ms	0
└unknown		17.7 s	0 ms	0
└other /usr/bin/sed	s\|^[^:]/\|\|;s\|:[^:]/\|, \|g	17.7 s	2 ms	0
└unknown ×8		17.7 s	2 ms	0
└other /usr/bin/sed	-n \u{a}/datarootdir/ {\u{a} p\u{a} q\u{a}}\u{a}/@datadir@/p\u{a}/@docdir@/p\u{a}/@infodir@/p\u{a}/@localedir@/p\u{a}/@mandir@/p Makefile.in	17.7 s	1 ms	0
└other /usr/bin/awk ×5	-f ./conf4YUgaf/subs.awk	17.7 s	4 ms	0
└other /usr/bin/mv ×5	./conf4YUgaf/out Makefile	17.7 s	1 ms	0
└unknown		17.7 s	2 ms	0
└other /usr/bin/sed	s\|^[^:]/\|\|;s\|:[^:]/\|, \|g	17.7 s	2 ms	0
└unknown		17.7 s	2 ms	0
└other /usr/bin/diff	config/config.h ./conf4YUgaf/config.h	17.7 s	0 ms	512
└unknown		17.7 s	18 ms	0
└unknown		17.7 s	6 ms	0
└unknown		17.7 s	2 ms	0
└other /usr/bin/sed	-n s/^$[a-zA-Z_][a-zA-Z0-9_]$=./\1/p	17.7 s	5 ms	0
└unknown		17.8 s	7 ms	0
└unknown		17.8 s	3 ms	0
└unknown		17.8 s	1 ms	0
└other /usr/bin/sort		17.8 s	4 ms	0

839 more processes not listed

Network 0

The VM has no internet. Every name it looks up resolves to 10.0.2.1, the fake internet, which accepts every connection and records what was sent. Below, it is shown by its port alone, such as :443. The name the build wanted is in the lookups, the HTTP host and the TLS SNI.

Sockets in the trace 3

When	Program	How	Address	Type
9.9 s	/bin/bash	connect	unix:/var/run/nscd/socket	stream
9.9 s	/bin/bash	connect	unix:/var/run/nscd/socket	stream
9.9 s	/bin/bash	connect	unix:/var/run/nscd/socket	stream

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files: 1646
Directories: 91
Size: 137.7 MiB
Compiled units: 36

Nothing outside the build areas.

Output

Standard error

   Compiling typenum v1.20.1
   Compiling hybrid-array v0.4.15
   Compiling libc v0.2.191
   Compiling cfg-if v1.0.5
   Compiling crypto-common v0.2.2
   Compiling block-buffer v0.12.1
   Compiling const-oid v0.10.2
   Compiling digest v0.11.3
   Compiling cpufeatures v0.3.1
   Compiling sha2 v0.11.1
   Compiling filetime v0.2.29
   Compiling tar v0.4.46
   Compiling lzma-rust2 v0.23.0
   Compiling ramp-nasm v0.1.0
   Compiling find-msvc-tools v0.1.15
   Compiling shlex v2.0.1
   Compiling cc v1.9.0
   Compiling num_cpus v1.17.0
   Compiling pkg-config v0.3.34
   Compiling ramp-ffmpeg-sys v9.0.3
error: failed to run custom build command for `ramp-ffmpeg-sys v9.0.3`

Caused by:
  process didn't exit successfully: `/work/target/debug/build/ramp-ffmpeg-sys-a948277f8f0e428a/build-script-build` (exit status: 101)
  --- stdout
  cargo:rerun-if-env-changed=FFMPEG_DIR
  cargo:rerun-if-changed=/cw/vendor/ramp-ffmpeg-sys-9.0.3/bindings/bindings.tar.xz

  --- stderr

  thread 'main' (3063) panicked at /cw/vendor/ramp-ffmpeg-sys-9.0.3/build.rs:1103:17:
  no bundled bindings for x86_64-unknown-linux-gnu; enable the generate-bindings feature
  note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

Timeline

When	From	To	Event	Worker
2026-10-20 20:33 UTC	Discovered	Fetched	fetched	fetcher-12688
2026-10-20 20:33 UTC	Fetched	ReadyForSandbox	static_analysis_completed	static-12726
2026-10-20 21:40 UTC	ReadyForSandbox	Running	sandbox_started	orchestrator-12760-slot1
2026-10-20 21:41 UTC	Running	DynamicallyAnalyzed	sandbox_completed	orchestrator-12760-slot1
2026-10-20 21:41 UTC	DynamicallyAnalyzed	ReadyForSandbox	scored	analyzer-12816
2026-10-20 21:41 UTC	ReadyForSandbox	Running	sandbox_started	orchestrator-12760-slot1
2026-10-20 21:42 UTC	Running	DynamicallyAnalyzed	sandbox_completed	orchestrator-12760-slot1
2026-10-20 21:42 UTC	DynamicallyAnalyzed	Scored	scored	analyzer-12816
2026-10-20 21:42 UTC	Scored	Done	finalized	analyzer-12816