anr 0.2.0
A build script was added since 0.1.1.
52
high
False positive. A person reviewed this verdict and found the crate benign. The evidence below is what the analysis saw.
Evidence
| Points | Signal | Where | What |
|---|---|---|---|
| 10 | build_script_added diff · anr | A build script was added since 0.1.1. | |
| 10 | disk_outside_build disk | /work/home/.cargo/anr | The build left /work/home/.cargo/anr (dir) and 2 entries below it. |
| 10 | network_lookup network · anr | github.com | The build looked up github.com. |
| 10 | static:network_access static · anr | build.rs:107 | medium severity network_access in build_script code (5 places): ureq::Agent::new_with_config |
| 5 | new_behavior diff · anr | disk:outside | New since the previous version: disk:outside. |
| 5 | new_behavior diff · anr | net:github.com | New since the previous version: net:github.com. |
| 1 | static:build_script static · anr | build.rs | low severity build_script in build_script code: build.rs |
| 1 | static:url_literal static · anr | build.rs:71 | low severity url_literal in build_script code: https://github.com/lona-cn/anr/releases/download/model-dfn3-fe5eb64fa2e4/dfn3.onnx |
Behavior
New since the previous version
disk:outside net:github.com static:network_access
Profile
disk:outside net:github.com static:network_access
Static findings
3 groups
medium network_access build_script 5
ureq::Agent::new_with_configbuild.rs:107ureq::Agent::config_builderbuild.rs:108ureq::tls::TlsConfig::builderbuild.rs:112ureq::tls::TlsProvider::NativeTlsbuild.rs:113ureq::tls::RootCerts::PlatformVerifierbuild.rs:114
low build_script build_script 1
build.rsbuild.rs
low url_literal build_script 1
https://github.com/lona-cn/anr/releases/download/model-dfn3-fe5eb64fa2e4/dfn3.onnxbuild.rs:71
Run: full
failedThe full build covers everything the earlier cargo check run did, so only the full run is shown.
- Ended
- agent reported the end
- Guest
- exit code 101
- Run time
- 24.6 s
- VM restore
- 96 ms
- Payload
- 5109 files, 74.0 MiB
- Files opened
- 6982
Processes 125
Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number.
| Process | Arguments | Start | Took | Exit |
|---|---|---|---|---|
| cargo /usr/local/bin/cargo | build --locked --offline | 5 ms | 24.5 s | 25856 |
| └rustc /usr/local/bin/rustc ×48 | --crate-name shlex --edition=2018 /cw/vendor/shlex-2.0.1/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --warn=unexpected_cfgs --check-cfg cfg(manual_codegen_check) --cfg feature="default" --cfg feature="std" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "std")) -C metadata=7dd39689d418aa66 -C extra-filename=-69c11c7589f0c135 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints | 194 ms | 505 ms | 0 |
| └rustc /usr/local/bin/rustc ×12 | --crate-name build_script_build --edition=2021 /cw/vendor/proc-macro2-1.0.107/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --cfg feature="default" --cfg feature="proc-macro" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "nightly", "proc-macro", "span-locations")) -C metadata=a3dc8fb24392fcd4 -C extra-filename=-a411f7480bd0f42c --out-dir /work/target/debug/build/proc-macro2-a411f7480bd0f42c -L dependency=/work/target/debug/deps --cap-lints allow | 2.7 s | 227 ms | 0 |
| └toolchain /usr/bin/cc | -m64 /work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcR22oro/symbols.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.build_script_build.dd8d7f624ad1d48e-cgu.0.rcgu.o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c.cnca5igddme2fkrf01fktrtaw.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libmemchr-0e3477fb2664a277.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libaddr2line-09755979c57b7e64.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libgimli-9a1fede77fbbf2f0.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libcfg_if-360da4ba13154744.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/lib | 2.8 s | 114 ms | 0 |
| └toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2 | -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccxkIuvN.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcR22oro/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L | 2.8 s | 108 ms | 0 |
| └toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld | -flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccxkIuvN.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/proc-macro2-a411f7480bd0f42c/build_script_build-a411f7480bd0f42c /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/proc-macro2-a411f7480bd0f42c/rustcR22oro/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_6 | 2.8 s | 105 ms | 0 |
| └build_script libc | 3.6 s | 11 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 3.6 s | 8 ms | 0 |
| └build_script proc-macro2 | 3.9 s | 79 ms | 0 | |
| └rustc /usr/local/bin/rustc ×3 | --version | 3.9 s | 7 ms | 0 |
| └rustc /usr/local/bin/rustc | --cfg=procmacro2_build_probe --edition=2021 --crate-name=proc_macro2 --crate-type=lib --cap-lints=allow --emit=dep-info,metadata --out-dir /work/target/debug/build/proc-macro2-4f3f927bd5485a92/out/probe src/probe/proc_macro_span.rs --target x86_64-unknown-linux-gnu | 3.9 s | 31 ms | 256 |
| └build_script quote | 4.8 s | 10 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 4.8 s | 7 ms | 0 |
| └build_script openssl-sys | 4.9 s | 41 ms | 0 | |
| └other /usr/bin/pkg-config ×2 | --libs --cflags openssl | 4.9 s | 3 ms | 0 |
| └toolchain /usr/bin/cc ×2 | -E /work/target/debug/build/openssl-sys-4f01a56c8cfd6c12/out/15200604335624963823detect_compiler_family.c | 4.9 s | 23 ms | 0 |
| └toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 | -E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/openssl-sys-4f01a56c8cfd6c12/out/15200604335624963823detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 15200604335624963823detect_compiler_family.c -dumpbase-ext .c | 4.9 s | 21 ms | 0 |
| └toolchain /usr/bin/cc | -? | 4.9 s | 3 ms | 256 |
| └build_script generic-array | 6.1 s | 10 ms | 0 | |
| └rustc /usr/local/bin/rustc | --verbose --version | 6.1 s | 8 ms | 0 |
| └build_script httparse | 10.6 s | 9 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 10.6 s | 7 ms | 0 |
| └build_script openssl | 10.6 s | 1 ms | 0 | |
| └build_script rustix | 12.5 s | 39 ms | 0 | |
| └rustc /usr/local/bin/rustc ×2 | --crate-type=rlib --emit=metadata --target x86_64-unknown-linux-gnu -o /work/target/debug/build/rustix-0f4e2900de2476d1/out/rustix_test_can_compile - | 12.5 s | 18 ms | 0 |
| └build_script getrandom | 13.2 s | 1 ms | 0 | |
| └build_script native-tls | 13.2 s | 1 ms | 0 | |
| └build_script anr | 24.5 s | 47 ms | 256 |
Network 2
The VM has no internet. Every name it looks up resolves to 10.0.2.1, the fake internet, which accepts every connection and records what was sent. Below, it is shown by its port alone, such as :443. The name the build wanted is in the lookups, the HTTP host and the TLS SNI.
Looked up github.com
| Destination | Protocol | What was sent | Bytes |
|---|---|---|---|
| :443 | tls | SNI github.com, inside TLS: GET /lona-cn/anr/releases/download/model-dfn3-fe5eb64fa2e4/dfn3.onnx, host github.com, agent ureq/3.5.0 | 1.5 KiB |
Sockets in the trace 3
| When | Program | How | Address | Type |
|---|---|---|---|---|
| 24.5 s | /work/target/debug/build/anr-2c6c90700dc927d6/build-script-build | connect | unix:/var/run/nscd/socket | stream |
| 24.5 s | /work/target/debug/build/anr-2c6c90700dc927d6/build-script-build | connect | :53 | datagram |
| 24.5 s | /work/target/debug/build/anr-2c6c90700dc927d6/build-script-build | connect | :443 | stream |
Files 0
Secrets opened
None.
Written outside the build directories
None.
Scratch disk 3
- Files
- 491
- Directories
- 126
- Size
- 217.1 MiB
- Compiled units
- 97
| Why | Path | Kind | Size | Mode |
|---|---|---|---|---|
| outside the build areas | /work/home/.cargo/anr | dir | 4.0 KiB | 755 |
| outside the build areas | /work/home/.cargo/anr/models | dir | 4.0 KiB | 755 |
| outside the build areas | /work/home/.cargo/anr/models/dfn3-fe5eb64fa2e4 | dir | 4.0 KiB | 755 |
Output
Standard error
Compiling shlex v2.0.1 Compiling find-msvc-tools v0.1.15 Compiling cc v1.9.0 Compiling vcpkg v0.2.15 Compiling proc-macro2 v1.0.107 Compiling pkg-config v0.3.34 Compiling libc v0.2.191 Compiling openssl-sys v0.9.117 Compiling quote v1.0.47 Compiling unicode-ident v1.0.27 Compiling version_check v0.9.5 Compiling generic-array v0.14.7 Compiling cfg-if v1.0.5 Compiling bitflags v2.13.2 Compiling typenum v1.20.1 Compiling syn v2.0.119 Compiling foreign-types-shared v0.1.1 Compiling openssl v0.10.81 Compiling zeroize v1.9.1 Compiling httparse v1.10.1 Compiling foreign-types v0.3.2 Compiling openssl-macros v0.1.1 Compiling bytes v1.12.1 Compiling base64ct v1.8.3 Compiling native-tls v0.2.18 Compiling getrandom v0.4.3 Compiling itoa v1.0.18 Compiling log v0.4.34 Compiling rustix v1.1.5 Compiling http v1.5.0 Compiling pem-rfc7468 v1.0.0 Compiling rustls-pki-types v1.15.1 Compiling crypto-common v0.1.7 Compiling block-buffer v0.10.4 Compiling base64 v0.23.1 Compiling linux-raw-sys v0.12.1 Compiling openssl-probe v0.2.1 Compiling ureq-proto v0.6.5 Compiling digest v0.10.7 Compiling webpki-root-certs v1.0.10 Compiling der v0.8.2 Compiling percent-encoding v2.3.2 Compiling cpufeatures v0.2.17 Compiling utf8-zero v0.8.1 Compiling once_cell v1.21.4 Compiling fastrand v2.5.0 Compiling tempfile v3.27.0 Compiling ureq v3.5.0 Compiling sha2 v0.10.9 Compiling anr v0.2.0 warning: anr@0.2.0: Downloading DFN3 model from https://github.com/lona-cn/anr/releases/download/model-dfn3-fe5eb64fa2e4/dfn3.onnx error: failed to run custom build command for `anr v0.2.0` Caused by: process didn't exit successfully: `/work/target/debug/build/anr-2c6c90700dc927d6/build-script-build` (exit status: 1) --- stdout cargo:rerun-if-env-changed=ANR_MODEL_PATH cargo:rerun-if-env-changed=DOCS_RS cargo:rerun-if-env-changed=CARGO_HOME cargo:rerun-if-env-changed=HOME cargo:rerun-if-env-changed=USERPROFILE cargo:rerun-if-env-changed=CARGO_NET_OFFLINE cargo:warning=Downloading DFN3 model from https://github.com/lona-cn/anr/releases/download/model-dfn3-fe5eb64fa2e4/dfn3.onnx --- stderr Error: "failed to download DFN3 from https://github.com/lona-cn/anr/releases/download/model-dfn3-fe5eb64fa2e4/dfn3.onnx: http status: 404; set ANR_MODEL_PATH to use a local model"
Timeline
9
| When | From | To | Event | Worker |
|---|---|---|---|---|
| 2026-10-22 14:39 UTC | Discovered | Fetched | fetched | fetcher-12688 |
| 2026-10-22 14:39 UTC | Fetched | ReadyForSandbox | static_analysis_completed | static-12726 |
| 2026-10-22 14:40 UTC | ReadyForSandbox | Running | sandbox_started | orchestrator-12760-slot0 |
| 2026-10-22 14:40 UTC | Running | DynamicallyAnalyzed | sandbox_completed | orchestrator-12760-slot0 |
| 2026-10-22 14:40 UTC | DynamicallyAnalyzed | ReadyForSandbox | scored | analyzer-12816 |
| 2026-10-22 14:41 UTC | ReadyForSandbox | Running | sandbox_started | orchestrator-12760-slot1 |
| 2026-10-22 14:42 UTC | Running | DynamicallyAnalyzed | sandbox_completed | orchestrator-12760-slot1 |
| 2026-10-22 14:42 UTC | DynamicallyAnalyzed | Scored | scored | analyzer-12816 |
| 2026-10-22 14:42 UTC | Scored | Done | finalized | analyzer-12816 |