Crateward

ramp-ffmpeg-sys 9.0.5

Done dynamic on Linux job 253056 crates.io SBOM Findings (VEX) Compare with 9.0.4

A build script wrote the whole environment, with the planted github_token_env, into its build directory.

45
medium
Automated verdict. Nobody reviewed it. A score is a reason to look closer, not a finding.

Evidence

PointsSignalWhereWhat
15environment_dumped
disk · ramp-ffmpeg-sys
/work/.warm/upper/debug/build/ramp-ffmpeg-sys-180964b8af521db7/out/ffmpeg-9.0.2/ffbuild/config.logA build script wrote the whole environment, with the planted github_token_env, into its build directory.
15exec_privilege
trace · ramp-nasm
/usr/bin/chmodThe build ran /usr/bin/chmod.
10static:process_spawn
static · ramp-ffmpeg-sys
build.rs:153medium severity process_spawn in build_script code (10 places): std::process::Command
3exec_shell
trace · ramp-nasm
/bin/bashThe build ran /bin/bash.
1static:build_script
static · ramp-ffmpeg-sys
build.rslow severity build_script in build_script code: build.rs
1static:environment_enumeration
static · ramp-ffmpeg-sys
build.rs:1106low severity environment_enumeration in build_script code: std::env::vars, keys only

Behavior

Profile

dump:environment exec:privilege exec:shell static:process_spawn

Static findings

7 groups
medium process_spawn build_script 10
low build_script build_script 1
low environment_enumeration build_script 1
low foreign_functions library 1
info unsafe_code library 2
info native_link build_script 1
info unsafe_code build_script 1

Run: check

timed out
Ended
agent reported the end
Guest
killed after the timeout
Run time
15 min 0 s
VM restore
53 ms
Payload
1860 files, 47.7 MiB
Files opened
487629

Processes 2000

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number.

ProcessArgumentsStartTookExit
cargo /usr/local/bin/cargo check --locked --offline 5 ms 15 min 0 s 9
└rustc /usr/local/bin/rustc ×16 --crate-name typenum --edition=2018 /cw/vendor/typenum-1.20.1/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --cfg feature="const-generics" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("const-generics", "i128", "scale-info", "scale_info", "strict")) -C metadata=98665f2e9774125c -C extra-filename=-f1c3ee9134ede149 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow 148 ms 1.2 s 0
└rustc /usr/local/bin/rustc ×2 --crate-name build_script_build --edition=2021 /cw/vendor/libc-0.2.191/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --allow=unused_qualifications --warn=clippy::unnecessary_semicolon --allow=clippy::unnecessary_cast --warn=clippy::ptr_as_ptr --allow=clippy::non_minimal_cfg --allow=clippy::missing_safety_doc --warn=clippy::map_unwrap_or --warn=clippy::manual_assert --allow=clippy::identity_op --warn=clippy::explicit_iter_loop --cfg feature="default" --cfg feature="std" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("align", "const-extern-fn", "default", "extra_traits", "rustc-dep-of-std", "rustc-std-workspace-core", "std", "use_std")) -C metadata=f2b3c09777387306 1.4 s 451 ms 0
└toolchain /usr/bin/cc -m64 /work/target/debug/build/libc-24a0c765ebd7d3cb/rustcTJgRoJ/symbols.o /work/target/debug/build/libc-24a0c765ebd7d3cb/build_script_build-24a0c765ebd7d3cb.build_script_build.2cf7c5ec755a4f39-cgu.0.rcgu.o /work/target/debug/build/libc-24a0c765ebd7d3cb/build_script_build-24a0c765ebd7d3cb.build_script_build.2cf7c5ec755a4f39-cgu.1.rcgu.o /work/target/debug/build/libc-24a0c765ebd7d3cb/build_script_build-24a0c765ebd7d3cb.build_script_build.2cf7c5ec755a4f39-cgu.2.rcgu.o /work/target/debug/build/libc-24a0c765ebd7d3cb/build_script_build-24a0c765ebd7d3cb.build_script_build.2cf7c5ec755a4f39-cgu.3.rcgu.o /work/target/debug/build/libc-24a0c765ebd7d3cb/build_script_build-24a0c765ebd7d3cb.9x3fp7esgkeb4azbnju054438.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rus 1.7 s 146 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2 -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cc3UFO0G.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/libc-24a0c765ebd7d3cb/build_script_build-24a0c765ebd7d3cb /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/libc-24a0c765ebd7d3cb/rustcTJgRoJ/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../li 1.7 s 138 ms 0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld -flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/cc3UFO0G.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/libc-24a0c765ebd7d3cb/build_script_build-24a0c765ebd7d3cb /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/libc-24a0c765ebd7d3cb/rustcTJgRoJ/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L 1.7 s 134 ms 0
└build_script libc 1.9 s 10 ms 0
└rustc /usr/local/bin/rustc --version 1.9 s 7 ms 0
└build_script ramp-nasm 9.0 s 27.0 s 0
└other /bin/bash configure --without-zlib 10.1 s 7.5 s 0
└unknown ×19 10.1 s 0 ms 0
└unknown ×3 10.1 s 0 ms 32512
└unknown 10.1 s 1 ms 0
└unknown ×2 10.1 s 0 ms 0
└unknown 10.1 s 1 ms 256
└unknown 10.1 s 0 ms 0
└unknown 10.1 s 0 ms 0
└unknown 10.1 s 1 ms 256
└other /bin/sh -c if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1\u{a}then :\u{a} emulate sh\u{a} NULLCMD=:\u{a} # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which\u{a} # is contrary to our usage. Disable this feature.\u{a} alias -g '${1+"$@"}'='"$@"'\u{a} setopt NO_GLOB_SUBST\u{a}else case e in #(\u{a} e) case `(set -o) 2>/dev/null` in #(\u{a} *posix*) :\u{a} set -o posix ;; #(\u{a} *) :\u{a} ;;\u{a}esac ;;\u{a}esac\u{a}fi\u{a}as_fn_return () { (exit $1); }\u{a}as_fn_success () { as_fn_return 0; }\u{a}as_fn_failure () { as_fn_return 1; }\u{a}as_fn_ret_success () {… 10.1 s 2 ms 0
└unknown ×3 10.1 s 0 ms 0
└unknown 10.1 s 0 ms 256
└unknown 10.1 s 1 ms 0
└unknown 10.1 s 0 ms 0
└other /bin/sh -c if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1\u{a}then :\u{a} emulate sh\u{a} NULLCMD=:\u{a} # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which\u{a} # is contrary to our usage. Disable this feature.\u{a} alias -g '${1+"$@"}'='"$@"'\u{a} setopt NO_GLOB_SUBST\u{a}else case e in #(\u{a} e) case `(set -o) 2>/dev/null` in #(\u{a} *posix*) :\u{a} set -o posix ;; #(\u{a} *) :\u{a} ;;\u{a}esac ;;\u{a}esac\u{a}fi\u{a} as_lineno_1= as_lineno_1a=$LINENO\u{a} as_lineno_2= as_lineno_2a=$LINENO\u{a} eval 'test "x$as_lineno_1'$as_run'" != "x$as_lineno_2… 10.1 s 1 ms 256
└unknown 10.1 s 0 ms 0
└other /bin/bash -c if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1\u{a}then :\u{a} emulate sh\u{a} NULLCMD=:\u{a} # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which\u{a} # is contrary to our usage. Disable this feature.\u{a} alias -g '${1+"$@"}'='"$@"'\u{a} setopt NO_GLOB_SUBST\u{a}else case e in #(\u{a} e) case `(set -o) 2>/dev/null` in #(\u{a} *posix*) :\u{a} set -o posix ;; #(\u{a} *) :\u{a} ;;\u{a}esac ;;\u{a}esac\u{a}fi\u{a}as_fn_return () { (exit $1); }\u{a}as_fn_success () { as_fn_return 0; }\u{a}as_fn_failure () { as_fn_return 1; }\u{a}as_fn_ret_success () {… 10.1 s 8 ms 0
└unknown ×2 10.1 s 0 ms 0
└unknown 10.1 s 0 ms 0
└unknown ×2 10.1 s 0 ms 0
└unknown 10.1 s 0 ms 256
└other /bin/bash -c if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1\u{a}then :\u{a} emulate sh\u{a} NULLCMD=:\u{a} # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which\u{a} # is contrary to our usage. Disable this feature.\u{a} alias -g '${1+"$@"}'='"$@"'\u{a} setopt NO_GLOB_SUBST\u{a}else case e in #(\u{a} e) case `(set -o) 2>/dev/null` in #(\u{a} *posix*) :\u{a} set -o posix ;; #(\u{a} *) :\u{a} ;;\u{a}esac ;;\u{a}esac\u{a}fi\u{a} as_lineno_1= as_lineno_1a=$LINENO\u{a} as_lineno_2= as_lineno_2a=$LINENO\u{a} eval 'test "x$as_lineno_1'$as_run'" != "x$as_lineno_2… 10.1 s 5 ms 0
└unknown 10.1 s 0 ms 0
└unknown 10.1 s 0 ms 0
└other /usr/bin/expr 18 + 1 10.1 s 3 ms 0
└unknown ×3 10.2 s 1 ms 0
└unknown 10.2 s 0 ms 0
└other /usr/bin/expr ×5 a : \(a\) 10.2 s 0 ms 0
└other /usr/bin/basename -- / 10.2 s 1 ms 0
└unknown ×2 10.2 s 1 ms 0
└other /usr/bin/basename -- / 10.2 s 1 ms 0
└unknown ×2 10.2 s 2 ms 0
└other /usr/bin/dirname -- / 10.2 s 2 ms 0
└other /usr/bin/rm ×422 -f conf775 conf775.exe conf775.file 10.2 s 2 ms 0
└other /usr/bin/mkdir ×3 conf775.dir 10.2 s 2 ms 0
└other /usr/bin/ln ×2 -s conf775.file conf775 10.2 s 1 ms 0
└other /usr/bin/rmdir conf775.dir 10.2 s 6 ms 0
└unknown 10.2 s 7 ms 0
└unknown 10.2 s 6 ms 0
└other /usr/bin/hostname 10.2 s 3 ms 0
└other /usr/bin/sed 1q 10.2 s 7 ms 0
└other /usr/bin/expr xzlib : .*[^-+._abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789] 10.2 s 5 ms 256
└unknown ×20 10.2 s 1 ms 0
└unknown 10.2 s 0 ms 0
└other /usr/bin/sed s/[-+.]/_/g 10.2 s 1 ms 0
└other /usr/bin/ls ×2 -di . 10.2 s 7 ms 0
└other /usr/bin/cat ×242 10.2 s 4 ms 0
└other /usr/bin/cat 10.2 s 35 ms 0
└unknown 10.2 s 5 ms 0
└unknown 10.2 s 5 ms 0
└other /usr/bin/hostname 10.2 s 2 ms 0
└other /usr/bin/sed 1q 10.2 s 4 ms 0
└unknown ×5 10.2 s 5 ms 0
└other /usr/bin/uname -m 10.2 s 5 ms 0
└unknown 10.2 s 1 ms 0
└other /bin/uname -X 10.2 s 1 ms 256
└unknown 10.2 s 5 ms 0
└other /bin/arch 10.2 s 5 ms 0
└unknown 10.3 s 1 ms 0
└other /usr/bin/arch -k 10.3 s 1 ms 256
└unknown ×5 10.3 s 0 ms 0
└unknown 10.3 s 0 ms 32512
└other /bin/bash ×2 ./autoconf/helpers/config.sub sun4 10.3 s 5 ms 0
└unknown 10.3 s 2 ms 0
└unknown 10.3 s 0 ms 0
└other /usr/bin/sed -e s,.*/,, 10.3 s 1 ms 0
└other /bin/bash ./autoconf/helpers/config.guess 10.3 s 72 ms 0
└unknown 10.3 s 2 ms 0
└unknown 10.3 s 0 ms 0
└other /usr/bin/sed -e s,.*/,, 10.3 s 2 ms 0
└unknown ×4 10.3 s 2 ms 0
└other /usr/bin/uname -m 10.3 s 1 ms 0
└unknown 10.3 s 2 ms 0
└other /usr/bin/mktemp -d /tmp/cgXXXXXX 10.3 s 1 ms 0
└toolchain /usr/bin/cc -c -o /tmp/cgQWjZEd/dummy.o /tmp/cgQWjZEd/dummy.c 10.3 s 33 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -quiet -imultiarch x86_64-linux-gnu /tmp/cgQWjZEd/dummy.c -quiet -dumpdir /tmp/cgQWjZEd/ -dumpbase dummy.c -dumpbase-ext .c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -o /tmp/ccZwIQuu.s 10.3 s 25 ms 0
└toolchain /usr/bin/as --64 -o /tmp/cgQWjZEd/dummy.o /tmp/ccZwIQuu.s 10.3 s 6 ms 0
└other /usr/bin/cat 10.3 s 1 ms 0
└unknown 10.3 s 13 ms 0
└toolchain /usr/bin/cc -E /tmp/cgQWjZEd/dummy.c 10.3 s 12 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -E -quiet -imultiarch x86_64-linux-gnu /tmp/cgQWjZEd/dummy.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase dummy.c -dumpbase-ext .c 10.3 s 8 ms 0
└other /usr/bin/sed s, ,,g 10.3 s 11 ms 0
└other /usr/bin/grep ^LIBC 10.3 s 12 ms 0
└other /usr/bin/sed s/^\u{9} // 10.3 s 1 ms 0
└unknown 10.3 s 9 ms 0
└toolchain /usr/bin/cc -E /tmp/cgQWjZEd/dummy.c 10.3 s 9 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -E -quiet -imultiarch x86_64-linux-gnu /tmp/cgQWjZEd/dummy.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase dummy.c -dumpbase-ext .c 10.3 s 7 ms 0
└other /usr/bin/grep ^ABI 10.3 s 9 ms 256
└other /usr/bin/sed s, ,,g 10.3 s 9 ms 0
└other /usr/bin/rm -fr /tmp/cgQWjZEd 10.3 s 0 ms 0
└unknown ×2 10.3 s 1 ms 0
└toolchain /usr/bin/gcc --version 10.3 s 1 ms 0
└other /usr/bin/sed ×46 10a\\u{a}... rest of stderr output deleted ...\u{a} 10q conftest.err 10.4 s 1 ms 0
└unknown ×4 10.4 s 3 ms 256
└toolchain /usr/bin/gcc -V 10.4 s 2 ms 256
└unknown ×47 10.4 s 48 ms 0
└toolchain /usr/bin/gcc conftest.c 10.4 s 47 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -quiet -imultiarch x86_64-linux-gnu conftest.c -quiet -dumpdir a- -dumpbase conftest.c -dumpbase-ext .c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -o /tmp/ccpyAOTf.s 10.4 s 22 ms 0
└toolchain /usr/bin/as --64 -o /tmp/ccFjVFlh.o /tmp/ccpyAOTf.s 10.4 s 1 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2 -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccsSZ1Dl.res -plugin-opt=-pass-through=-lgcc -plugin-opt=-pass-through=-lgcc_s -plugin-opt=-pass-through=-lc -plugin-opt=-pass-through=-lgcc -plugin-opt=-pass-through=-lgcc_s --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. /tmp/ccFjVFlh.o -lgcc 10.4 s 21 ms 0
└toolchain /usr/bin/ld -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccsSZ1Dl.res -plugin-opt=-pass-through=-lgcc -plugin-opt=-pass-through=-lgcc_s -plugin-opt=-pass-through=-lc -plugin-opt=-pass-through=-lgcc -plugin-opt=-pass-through=-lgcc_s --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. /tmp/ccFjVFlh.o -lgcc 10.4 s 20 ms 0
└unknown ×2 10.5 s 1 ms 0
└other ./conftest 10.5 s 0 ms 0
└unknown ×96 10.5 s 16 ms 0
└toolchain /usr/bin/gcc -c conftest.c 10.5 s 15 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -quiet -imultiarch x86_64-linux-gnu conftest.c -quiet -dumpbase conftest.c -dumpbase-ext .c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -o /tmp/cc7EQhvC.s 10.5 s 11 ms 0
└toolchain /usr/bin/as --64 -o conftest.o /tmp/cc7EQhvC.s 10.5 s 1 ms 0
└unknown ×25 10.9 s 22 ms 256
└toolchain /usr/bin/gcc -c -g -O2 conftest.c 10.9 s 22 ms 256
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -quiet -imultiarch x86_64-linux-gnu conftest.c -quiet -dumpbase conftest.c -dumpbase-ext .c -mtune=generic -march=x86-64 -g -O2 -fasynchronous-unwind-tables -o /tmp/ccKRwq9T.s 10.9 s 20 ms 256
└other /usr/bin/grep ×36 -v ^ *+ conftest.err 10.9 s 1 ms 0
└other /usr/bin/mv ×36 -f conftest.er1 conftest.err 10.9 s 3 ms 0
└unknown 11.6 s 4 ms 0
└other /usr/bin/make -f conftest.make 11.6 s 3 ms 0
└other /usr/bin/echo @@@%%%=make=@@@%%% 11.6 s 1 ms 0
└other /usr/bin/grep ×2 dspmsg /usr/bin/install 11.6 s 2 ms 256
└other /usr/bin/install -c conftest.one conftest.two /work/target/debug/build/ramp-nasm-8eae09e104a566e2/out/nasm-3.02/conftest.dir/ 11.6 s 1 ms 0
└unknown 11.6 s 2 ms 0
└other /usr/bin/mkdir --version 11.6 s 1 ms 0
└unknown ×9 12.1 s 39 ms 256
└toolchain /usr/bin/gcc -o conftest -g -O2 -std=c23 -U__STRICT_ANSI__ -g3 -ggdb -fwrapv -ftrivial-auto-var-init=zero -fno-common conftest.c 12.1 s 39 ms 256
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 -quiet -imultiarch x86_64-linux-gnu -dD -U __STRICT_ANSI__ conftest.c -quiet -dumpbase conftest.c -dumpbase-ext .c -mtune=generic -march=x86-64 -g -g3 -ggdb -O2 -std=c23 -fwrapv -ftrivial-auto-var-init=zero -fno-common -fasynchronous-unwind-tables -o /tmp/ccR4TIUt.s 12.1 s 15 ms 0
└toolchain /usr/bin/as --gdwarf-5 --64 -o /tmp/ccnpxk8k.o /tmp/ccR4TIUt.s 12.1 s 3 ms 0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2 -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccy2LvRO.res -plugin-opt=-pass-through=-lgcc -plugin-opt=-pass-through=-lgcc_s -plugin-opt=-pass-through=-lc -plugin-opt=-pass-through=-lgcc -plugin-opt=-pass-through=-lgcc_s --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o conftest /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. 12.2 s 18 ms 256
└toolchain /usr/bin/ld -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccy2LvRO.res -plugin-opt=-pass-through=-lgcc -plugin-opt=-pass-through=-lgcc_s -plugin-opt=-pass-through=-lc -plugin-opt=-pass-through=-lgcc -plugin-opt=-pass-through=-lgcc_s --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o conftest /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. 12.2 s 16 ms 256
└unknown 17.5 s 21 ms 0
└unknown 17.5 s 7 ms 0
└other /usr/bin/sed -n s/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p 17.5 s 5 ms 0
└unknown 17.5 s 4 ms 0
└unknown 17.5 s 8 ms 0
└unknown 17.5 s 5 ms 0
└unknown 17.5 s 5 ms 0
└other /usr/bin/sed -n /^[_abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789]*_cv_[_abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789]*=/p 17.5 s 1 ms 0
└unknown 17.5 s 4 ms 0
└other /usr/bin/sort 17.5 s 7 ms 0
└other /usr/bin/diff /dev/null confcache 17.5 s 1 ms 256
└other /usr/bin/chmod +x ./config.status 17.5 s 1 ms 0
└unknown 17.6 s 2 ms 0
└unknown 17.6 s 1 ms 0
└other /usr/bin/grep -c ^ 17.6 s 2 ms 0
└unknown 17.6 s 3 ms 0
└other /usr/bin/sed -n s/.*%!_!# $/X/p conf775subs.awk 17.6 s 1 ms 0
└other /usr/bin/grep -c X 17.6 s 2 ms 0
└other /bin/bash ./config.status 17.6 s 103 ms 0
└unknown 17.6 s 1 ms 0
└unknown 17.6 s 0 ms 0
└unknown ×7 17.6 s 0 ms 0
└unknown 17.6 s 0 ms 32512
└other /usr/bin/expr ×2 a : \(a\) 17.6 s 1 ms 0
└other /usr/bin/basename -- / 17.6 s 1 ms 0
└unknown ×2 17.6 s 1 ms 0
└other /usr/bin/basename -- / 17.6 s 0 ms 0
└unknown ×6 17.6 s 1 ms 0
└other /usr/bin/dirname -- / 17.6 s 1 ms 0
└other /usr/bin/rm ×13 -f conf2607 conf2607.exe conf2607.file 17.6 s 1 ms 0
└other /usr/bin/mkdir ×2 conf2607.dir 17.6 s 1 ms 0
└other /usr/bin/ln ×2 -s conf2607.file conf2607 17.6 s 1 ms 0
└other /usr/bin/rmdir conf2607.dir 17.6 s 0 ms 0
└unknown 17.6 s 2 ms 0
└unknown 17.6 s 2 ms 0
└other /usr/bin/hostname 17.6 s 2 ms 0
└other /usr/bin/sed 1q 17.6 s 2 ms 0
└other /usr/bin/sed ×4 h;s/./-/g;s/^.../## /;s/...$/ ##/;p;x;p;x 17.6 s 0 ms 0
└unknown 17.6 s 1 ms 0
└other /usr/bin/mktemp -d ./confXXXXXX 17.6 s 1 ms 0
└unknown 17.6 s 2 ms 0
└unknown 17.6 s 1 ms 0
└other /usr/bin/tr X \015 17.6 s 2 ms 0
└unknown 17.6 s 2 ms 0
└other /usr/bin/awk BEGIN { print "a\rb" } 17.6 s 2 ms 0
└other /usr/bin/cat ×3 17.6 s 1 ms 0
└unknown ×11 17.6 s 2 ms 0
└unknown 17.6 s 1 ms 0
└other /usr/bin/sed s|^[^:]*/||;s|:[^:]*/|, |g 17.6 s 2 ms 0
└unknown ×8 17.6 s 2 ms 0
└other /usr/bin/sed -n \u{a}/datarootdir/ {\u{a} p\u{a} q\u{a}}\u{a}/@datadir@/p\u{a}/@docdir@/p\u{a}/@infodir@/p\u{a}/@localedir@/p\u{a}/@mandir@/p Makefile.in 17.6 s 1 ms 0
└other /usr/bin/awk ×5 -f ./confyJMqB9/subs.awk 17.6 s 4 ms 0
└other /usr/bin/mv ×5 ./confyJMqB9/out Makefile 17.6 s 1 ms 0
└unknown ×2 17.6 s 2 ms 0
└other /usr/bin/sed s|^[^:]*/||;s|:[^:]*/|, |g 17.6 s 2 ms 0
└unknown 17.6 s 1 ms 0
└other /usr/bin/diff config/config.h ./confyJMqB9/config.h 17.7 s 1 ms 512
└unknown 17.7 s 18 ms 0
└unknown 17.7 s 6 ms 0
└other /usr/bin/sed -n s/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p 17.7 s 5 ms 0
└unknown 17.7 s 4 ms 0
└unknown 17.7 s 2 ms 0
└unknown 17.7 s 8 ms 0
└unknown 17.7 s 4 ms 0
└other /usr/bin/sort 17.7 s 4 ms 0

36022 more processes not listed

Network 0

The VM has no internet. Every name it looks up resolves to 10.0.2.1, the fake internet, which accepts every connection and records what was sent. Below, it is shown by its port alone, such as :443. The name the build wanted is in the lookups, the HTTP host and the TLS SNI.

Sockets in the trace 3
WhenProgramHowAddressType
10.1 s/bin/bashconnectunix:/var/run/nscd/socketstream
10.1 s/bin/bashconnectunix:/var/run/nscd/socketstream
10.2 s/bin/bashconnectunix:/var/run/nscd/socketstream

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files
11320
Directories
205
Size
715.8 MiB
Compiled units
36
Scan
stopped at a limit

Nothing outside the build areas.

Output

Standard error
   Compiling typenum v1.20.1
   Compiling libc v0.2.191
   Compiling hybrid-array v0.4.15
   Compiling cfg-if v1.0.5
   Compiling crypto-common v0.2.2
   Compiling block-buffer v0.12.1
   Compiling const-oid v0.10.2
   Compiling digest v0.11.3
   Compiling cpufeatures v0.3.1
   Compiling sha2 v0.11.1
   Compiling filetime v0.2.29
   Compiling tar v0.4.46
   Compiling lzma-rust2 v0.23.0
   Compiling ramp-nasm v0.1.0
   Compiling shlex v2.0.1
   Compiling find-msvc-tools v0.1.15
   Compiling cc v1.10.0
   Compiling num_cpus v1.17.0
   Compiling pkg-config v0.3.34
   Compiling ramp-ffmpeg-sys v9.0.5

Timeline

6
WhenFromToEventWorker
2026-10-23 22:35 UTCDiscoveredFetchedfetchedfetcher-12688
2026-10-23 22:35 UTCFetchedReadyForSandboxstatic_analysis_completedstatic-12726
2026-10-23 22:35 UTCReadyForSandboxRunningsandbox_startedorchestrator-12760-slot2
2026-10-23 22:50 UTCRunningDynamicallyAnalyzedsandbox_completedorchestrator-12760-slot2
2026-10-23 22:50 UTCDynamicallyAnalyzedScoredscoredanalyzer-12816
2026-10-23 22:50 UTCScoredDonefinalizedanalyzer-12816