turbo-surf-v8 150.4.0
high severity environment_enumeration in build_script code: std::env::vars
48
medium
Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.
Evidence
| Points | Signal | Where | What |
|---|---|---|---|
| 30 | static:environment_enumeration static · turbo-surf-v8 | build.rs:1269 | high severity environment_enumeration in build_script code: std::env::vars |
| 10 | network_lookup network · turbo-surf-v8 | github.com | The build looked up github.com. |
| 5 | exec_downloader trace · turbo-surf-v8 | /usr/bin/curl | The build ran /usr/bin/curl. |
| 3 | exec_interpreter trace · turbo-surf-v8 | /usr/bin/python3 | The build ran /usr/bin/python3. |
5 without points
| Signal | Where | What |
|---|---|---|
| static:build_script static · turbo-surf-v8 | build.rs | low severity build_script in build_script code: build.rs |
| static:downloader_pattern static · turbo-surf-v8 | build.rs:518 | high severity downloader_pattern in build_script code: https://dl.google.com/android/repository/android-ndk-r26c-linux.zip at build.rs:518 with std::process::Command::new at build.rs:155 |
| static:process_spawn static · turbo-surf-v8 | build.rs:155 | medium severity process_spawn in build_script code (19 places): std::process::Command::new |
| static:url_literal static · turbo-surf-v8 | build.rs:518 | low severity url_literal in build_script code (17 places): https://dl.google.com/android/repository/android-ndk-r26c-linux.zip |
| static:yara:persistence_locations static · turbo-surf-v8 | README.md:74 | medium severity yara:persistence_locations in library code: Paths and keys used to persist on a developer machine |
Behavior
Profile
exec:downloader exec:interpreter net:github.com static:downloader_pattern static:environment_enumeration static:process_spawn static:yara:persistence_locations
Static findings
12 groups
high downloader_pattern build_script 1
https://dl.google.com/android/repository/android-ndk-r26c-linux.zip at build.rs:518 with std::process::Command::new at build.rs:155build.rs:518
high environment_enumeration build_script 1
std::env::varsbuild.rs:1269
medium process_spawn build_script 19
std::process::Command::newbuild.rs:155 build.rs:196 build.rs:212 build.rs:239 build.rs:515 build.rs:523 build.rs:589 build.rs:603 build.rs:619 build.rs:641 build.rs:664 build.rs:798 build.rs:825 build.rs:839 build.rs:1059 build.rs:1087 build.rs:1225 build.rs:1260std::process::Commandbuild.rs:1223
medium yara_match persistence_locations library 1
Paths and keys used to persist on a developer machineREADME.md:74
low foreign_functions library 450
extern blockgen/src_binding_debug_aarch64-apple-darwin.rs:91 gen/src_binding_debug_aarch64-apple-darwin.rs:124 gen/src_binding_debug_aarch64-apple-darwin.rs:177 gen/src_binding_debug_aarch64-apple-darwin.rs:236 gen/src_binding_debug_aarch64-apple-darwin.rs:243 gen/src_binding_debug_aarch64-apple-darwin.rs:307 gen/src_binding_debug_aarch64-apple-darwin.rs:496 gen/src_binding_debug_aarch64-apple-darwin.rs:542 gen/src_binding_debug_aarch64-apple-darwin.rs:591 gen/src_binding_debug_aarch64-apple-darwin.rs:847 gen/src_binding_debug_aarch64-apple-darwin.rs:851 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:91 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:124 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:177 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:236 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:243 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:307 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:496 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:542 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:591 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:847 gen/src_binding_debug_aarch64-unknown-linux-gnu.rs:851 gen/src_binding_debug_riscv64gc-unknown-linux-gnu.rs:91 gen/src_binding_debug_riscv64gc-unknown-linux-gnu.rs:124 gen/src_binding_debug_riscv64gc-unknown-linux-gnu.rs:177 gen/src_binding_debug_riscv64gc-unknown-linux-gnu.rs:236 gen/src_binding_debug_riscv64gc-unknown-linux-gnu.rs:243 gen/src_binding_debug_riscv64gc-unknown-linux-gnu.rs:307 gen/src_binding_debug_riscv64gc-unknown-linux-gnu.rs:496 gen/src_binding_debug_riscv64gc-unknown-linux-gnu.rs:542 gen/src_binding_debug_riscv64gc-unknown-linux-gnu.rs:591 gen/src_binding_debug_riscv64gc-unknown-linux-gnu.rs:847 gen/src_binding_debug_riscv64gc-unknown-linux-gnu.rs:851 gen/src_binding_debug_x86_64-apple-darwin.rs:91 gen/src_binding_debug_x86_64-apple-darwin.rs:124 gen/src_binding_debug_x86_64-apple-darwin.rs:177 gen/src_binding_debug_x86_64-apple-darwin.rs:236 gen/src_binding_debug_x86_64-apple-darwin.rs:243 gen/src_binding_debug_x86_64-apple-darwin.rs:307 gen/src_binding_debug_x86_64-apple-darwin.rs:496 gen/src_binding_debug_x86_64-apple-darwin.rs:542 gen/src_binding_debug_x86_64-apple-darwin.rs:591 gen/src_binding_debug_x86_64-apple-darwin.rs:847 gen/src_binding_debug_x86_64-apple-darwin.rs:851 gen/src_binding_debug_x86_64-unknown-linux-gnu.rs:91 gen/src_binding_debug_x86_64-unknown-linux-gnu.rs:124 gen/src_binding_debug_x86_64-unknown-linux-gnu.rs:177 gen/src_binding_debug_x86_64-unknown-linux-gnu.rs:236 gen/src_binding_debug_x86_64-unknown-linux-gnu.rs:243 gen/src_binding_debug_x86_64-unknown-linux-gnu.rs:307 and 400 more
low url_literal build_script 3
https://dl.google.com/android/repository/android-ndk-r26c-linux.zipbuild.rs:518https://chromium.googlesource.combuild.rs:535https://github.com/denoland/rusty_v8/releases/downloadbuild.rs:710
low build_script build_script 1
build.rsbuild.rs
info unsafe_code library 53
17 unsafe blocks, functions or implssrc/V8.rs:62 src/isolate_create_params.rs:34343 unsafe blocks, functions or implssrc/array_buffer.rs:14911 unsafe blocks, functions or implssrc/array_buffer_view.rs:4110 unsafe blocks, functions or implssrc/bigint.rs:3930 unsafe blocks, functions or implssrc/context.rs:10633 unsafe blocks, functions or implssrc/cppgc.rs:89 src/exception.rs:9652 unsafe blocks, functions or implssrc/crdtp.rs:17415 unsafe blocks, functions or implssrc/data.rs:442 unsafe blocks, functions or implssrc/date.rs:20 src/external.rs:25 src/external_references.rs:42 src/fixed_array.rs:18 src/json.rs:28 src/script_or_module.rs:254 unsafe blocks, functions or implssrc/fast_api.rs:56 src/primitive_array.rs:39 src/symbol.rs:46 src/unbound_script.rs:3364 unsafe blocks, functions or implssrc/function.rs:196 src/object.rs:32158 unsafe blocks, functions or implssrc/handle.rs:1293 unsafe blocks, functions or implssrc/icu.rs:47 src/primitives.rs:20 src/private.rs:27 src/regexp.rs:46 src/unbound_module_script.rs:2861 unsafe blocks, functions or implssrc/inspector.rs:166 src/simdutf.rs:305118 unsafe blocks, functions or implssrc/isolate.rs:2986 unsafe blocks, functions or implssrc/microtask.rs:5729 unsafe blocks, functions or implssrc/module.rs:971 unsafe blocks, functions or implssrc/name.rs:20 src/typed_array.rs:239 unsafe blocks, functions or implssrc/number.rs:31 src/shared_array_buffer.rs:5131 unsafe blocks, functions or implssrc/platform.rs:9114 unsafe blocks, functions or implssrc/promise.rs:7319 unsafe blocks, functions or implssrc/property_descriptor.rs:825 unsafe blocks, functions or implssrc/proxy.rs:27132 unsafe blocks, functions or implssrc/scope.rs:16516 unsafe blocks, functions or implssrc/scope/raw.rs:257 unsafe blocks, functions or implssrc/script.rs:6612 unsafe blocks, functions or implssrc/script_compiler.rs:98 src/support.rs:6813 unsafe blocks, functions or implssrc/snapshot.rs:7788 unsafe blocks, functions or implssrc/string.rs:1923 unsafe blocks, functions or implssrc/template.rs:64476 unsafe blocks, functions or implssrc/value.rs:15728 unsafe blocks, functions or implssrc/value_deserializer.rs:3547 unsafe blocks, functions or implssrc/value_serializer.rs:4142 unsafe blocks, functions or implssrc/wasm.rs:55
info url_literal test 14
file://exception.jstests/test_api.rs:7233{"method":"Runtime.exceptionThrown","params":{"timestamp":0,"exceptionDetails":{"exceptionId":1,"text":"test exception","lineNumber":0,"columnNumber":0,"scriptId":"1","url":"file://exception.js","exce…tests/test_api.rs:7256https://example.comtests/test_api.rs:9442\u{a} globalThis.result = null;\u{a} WebAssembly\u{a} .compileStreaming("https://example.com")\u{a} .then(result => globalThis.result = result);\u{a}tests/test_api.rs:9456https://example2.comtests/test_api.rs:9476 tests/test_api.rs:9488\u{a} globalThis.result = null;\u{a} WebAssembly\u{a} .compileStreaming("https://example.com")\u{a} .catch(result => globalThis.result = result);\u{a}tests/test_api.rs:9490https://example.com/test.wasmtests/test_api.rs:9530http://www.foo.com/foo.jstests/test_api.rs:9614 tests/test_api.rs:9666 tests/test_api.rs:9718 tests/test_api.rs:9770http://override/foo.js.maptests/test_api.rs:9663wasm://wasm/a1d4c596tests/test_api.rs:10554
info unsafe_code test 10
105 unsafe blocks, functions or implstests/test_api.rs:1601 unsafe blocks, functions or implstests/test_api_entropy_source.rs:42 tests/test_concurrent_isolate_creation_and_disposal.rs:30 tests/test_custom_platform.rs:110 tests/test_external_deserialize.rs:107 tests/test_single_threaded_default_platform.rs:20 tests/test_ui.rs:78 unsafe blocks, functions or implstests/test_cppgc.rs:24810 unsafe blocks, functions or implstests/test_simdutf.rs:764 unsafe blocks, functions or implstests/test_simple_external.rs:40
info unsafe_code binary 7
10 unsafe blocks, functions or implsbenches/function.rs:324 unsafe blocks, functions or implsexamples/cppgc-object.rs:98 unsafe blocks, functions or implsexamples/cppgc.rs:161 unsafe blocks, functions or implsexamples/hello_world.rs:65 examples/ios_jitless.rs:26 examples/process.rs:306 examples/shell.rs:216
info unsafe_code build_script 1
4 unsafe blocks, functions or implsbuild.rs:114
Run: check
failed- Ended
- agent reported the end
- Guest
- exit code 101
- Run time
- 1 min 27 s
- VM restore
- 84 ms
- Payload
- 8427 files, 251.1 MiB
- Files opened
- 11367
Processes 196
Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number.
| Process | Arguments | Start | Took | Exit |
|---|---|---|---|---|
| cargo /usr/local/bin/cargo | check --locked --offline | 5 ms | 1 min 27 s | 25856 |
| └rustc /usr/local/bin/rustc ×23 | --crate-name build_script_build --edition=2021 /cw/vendor/proc-macro2-1.0.107/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --cfg feature="default" --cfg feature="proc-macro" --cfg feature="span-locations" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "nightly", "proc-macro", "span-locations")) -C metadata=c83ce984471a4e48 -C extra-filename=-5cb179a647ef6e51 --out-dir /work/target/debug/build/proc-macro2-5cb179a647ef6e51 -L dependency=/work/target/debug/deps --cap-lints allow | 214 ms | 671 ms | 0 |
| └toolchain /usr/bin/cc | -m64 /work/target/debug/build/proc-macro2-5cb179a647ef6e51/rustciz3j9x/symbols.o /work/target/debug/build/proc-macro2-5cb179a647ef6e51/build_script_build-5cb179a647ef6e51.build_script_build.dfb9ac565abdb04-cgu.0.rcgu.o /work/target/debug/build/proc-macro2-5cb179a647ef6e51/build_script_build-5cb179a647ef6e51.7zrad1clk47dffwz5ub8n8yx5.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-0e3477fb2664a277.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-09755979c57b7e64.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-9a1fede77fbbf2f0.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-360da4ba13154744.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libr | 727 ms | 155 ms | 0 |
| └toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2 | -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cc466g5l.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/proc-macro2-5cb179a647ef6e51/build_script_build-5cb179a647ef6e51 /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-5cb179a647ef6e51/rustciz3j9x/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L | 734 ms | 148 ms | 0 |
| └toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld | -flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cc466g5l.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/proc-macro2-5cb179a647ef6e51/build_script_build-5cb179a647ef6e51 /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-5cb179a647ef6e51/rustciz3j9x/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_6 | 736 ms | 144 ms | 0 |
| └rustc /usr/local/bin/rustc ×69 | --crate-name unicode_ident --edition=2021 /cw/vendor/unicode-ident-1.0.27/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values()) -C metadata=3bb98f7b2f589c61 -C extra-filename=-86dff03eb05ec8a5 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow | 890 ms | 56 ms | 0 |
| └build_script proc-macro2 | 951 ms | 86 ms | 0 | |
| └rustc /usr/local/bin/rustc ×3 | --version | 952 ms | 8 ms | 0 |
| └rustc /usr/local/bin/rustc | --cfg=procmacro2_build_probe --edition=2021 --crate-name=proc_macro2 --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/proc-macro2-97392f29eb377993/out/probe src/probe/proc_macro_span.rs --target x86_64-unknown-linux-gnu | 961 ms | 34 ms | 256 |
| └build_script quote | 1.1 s | 10 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 1.1 s | 8 ms | 0 |
| └build_script serde_core | 9.2 s | 10 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 9.2 s | 7 ms | 0 |
| └build_script libm | 10.6 s | 2 ms | 0 | |
| └build_script libc | 15.5 s | 9 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 15.5 s | 7 ms | 0 |
| └build_script serde | 17.7 s | 9 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 17.7 s | 7 ms | 0 |
| └build_script icu_locale_fallback_data | 17.7 s | 1 ms | 0 | |
| └build_script prettyplease | 17.7 s | 2 ms | 0 | |
| └build_script clang-sys | 18.0 s | 1 ms | 0 | |
| └build_script rustix | 22.0 s | 21 ms | 0 | |
| └rustc /usr/local/bin/rustc | --crate-type=rlib --emit=metadata --target x86_64-unknown-linux-gnu -o - - | 22.0 s | 19 ms | 256 |
| └build_script crc32fast | 23.3 s | 9 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 23.3 s | 7 ms | 0 |
| └build_script serde | 23.3 s | 9 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 23.3 s | 7 ms | 0 |
| └build_script icu_calendar_data | 25.2 s | 2 ms | 0 | |
| └build_script bindgen | 33.3 s | 1 ms | 0 | |
| └build_script num-traits | 38.5 s | 44 ms | 0 | |
| └rustc /usr/local/bin/rustc ×3 | --version --verbose | 38.5 s | 7 ms | 0 |
| └build_script paste | 50.2 s | 9 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 50.2 s | 7 ms | 0 |
| └build_script turbo-surf-v8 | 52.6 s | 35.2 s | 25856 | |
| └other /usr/bin/python3 | ./tools/download_file.py --url https://github.com/denoland/rusty_v8/releases/download/v150.4.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz --filename /work/target/debug/gn_out/obj/librusty_v8.tmp | 52.6 s | 35.1 s | 256 |
| └other /usr/bin/curl | -L -f -s -o /work/target/debug/gn_out/obj/librusty_v8.tmp https://github.com/denoland/rusty_v8/releases/download/v150.4.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz | 1 min 27 s | 38 ms | 5632 |
Network 6
The VM has no internet. Every name it looks up resolves to 10.0.2.1, the fake internet, which accepts every connection and records what was sent. Below, it is shown by its port alone, such as :443. The name the build wanted is in the lookups, the HTTP host and the TLS SNI.
Looked up github.com
| Destination | Protocol | What was sent | Bytes |
|---|---|---|---|
| :443 | tls | SNI github.com | 1.5 KiB |
| :443 | tls | SNI github.com | 1.5 KiB |
| :443 | tls | SNI github.com | 1.5 KiB |
| :443 | tls | SNI github.com | 1.5 KiB |
| :443 | tls | SNI github.com, inside TLS: GET /denoland/rusty_v8/releases/download/v150.4.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz, host github.com, agent curl/8.14.1 | 1.5 KiB |
Sockets in the trace 6
| When | Program | How | Address | Type |
|---|---|---|---|---|
| 52.7 s | /usr/bin/python3 | connect | unix:/var/run/nscd/socket | stream |
| 52.7 s | /usr/bin/python3 | connect | :53 | datagram |
| 52.7 s | /usr/bin/python3 | connect | :443 | stream |
| 1 min 27 s | /usr/bin/curl | connect | unix:/var/run/nscd/socket | stream |
| 1 min 27 s | /usr/bin/curl | connect | :53 | datagram |
| 1 min 27 s | /usr/bin/curl | connect | :443 | stream |
Files 0
Secrets opened
None.
Written outside the build directories
None.
Scratch disk 0
- Files
- 723
- Directories
- 182
- Size
- 399.6 MiB
- Compiled units
- 116
- Scan
- stopped at a limit
Nothing outside the build areas.
Output
Standard error
Compiling proc-macro2 v1.0.107
Compiling unicode-ident v1.0.27
Compiling quote v1.0.47
Compiling syn v3.0.9
Compiling synstructure v0.14.0
Compiling zerofrom-derive v0.1.8
Checking zerofrom v0.1.8
Compiling yoke-derive v0.8.4
Checking stable_deref_trait v1.2.1
Checking yoke v0.8.3
Compiling zerovec-derive v0.11.6
Compiling serde_core v1.0.229
Checking zerovec v0.11.8
Compiling displaydoc v0.2.7
Checking writeable v0.6.4
Compiling libm v0.2.16
Checking tinystr v0.8.4
Compiling serde_derive v1.0.229
Checking litemap v0.8.3
Checking icu_locale_core v2.3.0
Checking potential_utf v0.1.6
Compiling glob v0.3.4
Compiling libc v0.2.191
Compiling cfg-if v1.0.5
Compiling clang-sys v1.9.1
Checking core_maths v0.1.1
Checking zerotrie v0.2.5
Compiling prettyplease v0.2.37
Compiling icu_locale_fallback_data v2.3.0
Compiling serde v1.0.229
Checking calendrical_calculations v0.2.4
Compiling icu_calendar_data v2.3.0
Compiling memchr v2.8.3
Compiling regex-syntax v0.8.11
Compiling autocfg v1.5.1
Compiling either v1.19.0
Compiling bitflags v2.13.2
Compiling crc32fast v1.5.3
Compiling minimal-lexical v0.2.1
Compiling rustix v0.38.44
Compiling nom v7.1.3
Compiling num-traits v0.2.19
Compiling regex-automata v0.4.18
Checking resb v0.1.2
Checking icu_provider v2.3.1
Compiling libloading v0.8.9
Compiling syn v2.0.119
Compiling bindgen v0.72.1
Compiling linux-raw-sys v0.4.15
Checking icu_locale_fallback v2.3.0
Checking zoneinfo64 v0.3.0
Compiling regex v1.13.1
Compiling cexpr v0.6.0
Compiling itertools v0.13.0
Compiling strck v1.0.0
Compiling smallvec v1.16.3
Compiling log v0.4.34
Compiling home v0.5.12
Compiling rustc-hash v2.1.3
Compiling shlex v1.3.0
Compiling adler2 v2.0.1
Compiling miniz_oxide v0.8.9
Compiling which v6.0.3
Compiling diplomat_core v0.16.1
Compiling gzip-header v1.1.0
Checking icu_calendar v2.3.0
Checking timezone_provider v0.2.6
Compiling fslock v0.2.1
Checking ixdtf v0.6.6
Compiling paste v1.0.15
Checking temporal_rs v0.2.6
Compiling turbo-surf-v8 v150.4.0
Compiling diplomat v0.16.1
Checking diplomat-runtime v0.16.1
Checking temporal_capi v0.2.6
error: failed to run custom build command for `turbo-surf-v8 v150.4.0`
Caused by:
process didn't exit successfully: `/work/target/debug/build/turbo-surf-v8-630d02fa3f779032/build-script-build` (exit status: 101)
--- stdout
cargo:rerun-if-changed=.gn
cargo:rerun-if-changed=BUILD.gn
cargo:rerun-if-changed=src/binding.cc
cargo:rerun-if-env-changed=CCACHE
cargo:rerun-if-env-changed=CLANG_BASE_PATH
cargo:rerun-if-env-changed=CXXSTDLIB
cargo:rerun-if-env-changed=DENO_TRYBUILD
cargo:rerun-if-env-changed=DOCS_RS
cargo:rerun-if-env-changed=GN
cargo:rerun-if-env-changed=GN_ARGS
cargo:rerun-if-env-changed=HOST
cargo:rerun-if-env-changed=NINJA
cargo:rerun-if-env-changed=OUT_DIR
cargo:rerun-if-env-changed=RUSTY_V8_ARCHIVE
cargo:rerun-if-env-changed=RUSTY_V8_MIRROR
cargo:rerun-if-env-changed=RUSTY_V8_SRC_BINDING_PATH
cargo:rerun-if-env-changed=SCCACHE
cargo:rerun-if-env-changed=V8_FORCE_DEBUG
cargo:rerun-if-env-changed=V8_FROM_SOURCE
cargo:rerun-if-env-changed=PYTHON
cargo:rerun-if-env-changed=DISABLE_CLANG
cargo:rerun-if-env-changed=EXTRA_GN_ARGS
cargo:rerun-if-env-changed=PRINT_GN_ARGS
cargo:rerun-if-env-changed=CARGO_ENCODED_RUSTFLAGS
cargo:rustc-link-lib=static=rusty_v8
lockfile: "/work/target/debug/build/v8.fslock"
cargo:rustc-env=RUSTY_V8_SRC_BINDING_PATH=/cw/vendor/turbo-surf-v8-150.4.0/gen/src_binding_release_x86_64-unknown-linux-gnu.rs
static lib URL: https://github.com/denoland/rusty_v8/releases/download/v150.4.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz
cargo:rustc-link-search=/work/target/debug/gn_out/obj
Looking for download in '"/work/home/.cargo/.rusty_v8/https___github_com_denoland_rusty_v8_releases_download_v150_4_0_librusty_v8_release_x86_64_unknown_linux_gnu_a_gz"'
Downloading https://github.com/denoland/rusty_v8/releases/download/v150.4.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz
Trying with Python...
Downloading https://github.com/denoland/rusty_v8/releases/download/v150.4.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz...
<urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)>
Retrying in 5 s ...
Downloading https://github.com/denoland/rusty_v8/releases/download/v150.4.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz...
<urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)>
Retrying in 10 s ...
Downloading https://github.com/denoland/rusty_v8/releases/download/v150.4.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz...
<urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)>
Retrying in 20 s ...
Downloading https://github.com/denoland/rusty_v8/releases/download/v150.4.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz...
<urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)>
Python downloader failed, trying with curl.
--- stderr
Traceback (most recent call last):
File "/usr/lib/python3.13/urllib/request.py", line 1319, in do_open
h.request(req.get_method(), req.selector, req.data, headers,
~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
encode_chunked=req.has_header('Transfer-encoding'))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/http/client.py", line 1367, in request
self._send_request(method, url, body, headers, encode_chunked)
~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/http/client.py", line 1413, in _send_request
self.endheaders(body, encode_chunked=encode_chunked)
~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/http/client.py", line 1362, in endheaders
self._send_output(message_body, encode_chunked=encode_chunked)
~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/http/client.py", line 1122, in _send_output
self.send(msg)
~~~~~~~~~^^^^^
File "/usr/lib/python3.13/http/client.py", line 1066, in send
self.connect()
~~~~~~~~~~~~^^
File "/usr/lib/python3.13/http/client.py", line 1508, in connect
self.sock = self._context.wrap_socket(self.sock,
~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^
server_hostname=server_hostname)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/ssl.py", line 455, in wrap_socket
return self.sslsocket_class._create(
~~~~~~~~~~~~~~~~~~~~~~~~~~~~^
sock=sock,
^^^^^^^^^^
...<5 lines>...
session=session
^^^^^^^^^^^^^^^
)
^
File "/usr/lib/python3.13/ssl.py", line 1076, in _create
self.do_handshake()
~~~~~~~~~~~~~~~~~^^
File "/usr/lib/python3.13/ssl.py", line 1372, in do_handshake
self._sslobj.do_handshake()
~~~~~~~~~~~~~~~~~~~~~~~~~^^
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/cw/vendor/turbo-surf-v8-150.4.0/./tools/download_file.py", line 63, in <module>
sys.exit(main())
~~~~^^
File "/cw/vendor/turbo-surf-v8-150.4.0/./tools/download_file.py", line 58, in main
DownloadUrl(args.url, f)
~~~~~~~~~~~^^^^^^^^^^^^^
File "/cw/vendor/turbo-surf-v8-150.4.0/./tools/download_file.py", line 44, in DownloadUrl
raise e
File "/cw/vendor/turbo-surf-v8-150.4.0/./tools/download_file.py", line 28, in DownloadUrl
response = urlopen(url)
File "/usr/lib/python3.13/urllib/request.py", line 189, in urlopen
return opener.open(url, data, timeout)
~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/urllib/request.py", line 489, in open
response = self._open(req, data)
File "/usr/lib/python3.13/urllib/request.py", line 506, in _open
result = self._call_chain(self.handle_open, protocol, protocol +
'_open', req)
File "/usr/lib/python3.13/urllib/request.py", line 466, in _call_chain
result = func(*args)
File "/usr/lib/python3.13/urllib/request.py", line 1367, in https_open
return self.do_open(http.client.HTTPSConnection, req,
~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
context=self._context)
^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.13/urllib/request.py", line 1322, in do_open
raise URLError(err)
urllib.error.URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Missing Authority Key Identifier (_ssl.c:1029)>
thread 'main' (1602) panicked at /cw/vendor/turbo-surf-v8-150.4.0/build.rs:855:5:
Failed to download V8 prebuilt archive from https://github.com/denoland/rusty_v8/releases/download/v150.4.0/librusty_v8_release_x86_64-unknown-linux-gnu.a.gz
This is usually because no prebuilt archive is published for your target, in which case you should compile V8 from source by setting V8_FROM_SOURCE=1. It can also indicate a network connectivity problem.
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
Timeline
6
| When | From | To | Event | Worker |
|---|---|---|---|---|
| 2026-10-21 11:26 UTC | Discovered | Fetched | fetched | fetcher-12688 |
| 2026-10-21 11:26 UTC | Fetched | ReadyForSandbox | static_analysis_completed | static-12726 |
| 2026-10-21 11:26 UTC | ReadyForSandbox | Running | sandbox_started | orchestrator-12760-slot0 |
| 2026-10-21 11:28 UTC | Running | DynamicallyAnalyzed | sandbox_completed | orchestrator-12760-slot0 |
| 2026-10-21 11:28 UTC | DynamicallyAnalyzed | Scored | scored | analyzer-12816 |
| 2026-10-21 11:28 UTC | Scored | Done | finalized | analyzer-12816 |