arkitekt-mesh-smoltcp 0.9.0

Done dynamic on Linux job 288623 crates.io SBOM Findings (VEX)

high severity environment_enumeration in build_script code: std::env::vars

high

False positive. A person reviewed this verdict and found the crate benign. The evidence below is what the analysis saw.

Evidence

Points	Signal	Where	What
30	static:environment_enumeration static · arkitekt-mesh-smoltcp	build.rs:56	high severity environment_enumeration in build_script code: std::env::vars
10	build_script_added diff · arkitekt-mesh-smoltcp		A build script was added since 0.0.0.
10	new_high_finding diff · arkitekt-mesh-smoltcp	build.rs:56	New since 0.0.0: environment_enumeration

2 without points

Signal	Where	What
static:build_script static · arkitekt-mesh-smoltcp	build.rs	low severity build_script in build_script code: build.rs
static:obfuscated_data static · arkitekt-mesh-smoltcp	src/wire/dhcpv4.rs:963	medium severity obfuscated_data in library code (4 places): array of 276 integer literals

Behavior

New since the previous version

static:environment_enumeration static:obfuscated_data

Profile

static:environment_enumeration static:obfuscated_data

Static findings

high environment_enumeration build_script 1

std::env::vars build.rs:56

medium obfuscated_data library 4

array of 276 integer literals src/wire/dhcpv4.rs:963
array of 331 integer literals src/wire/dhcpv4.rs:985
array of 300 integer literals src/wire/dhcpv4.rs:1011
DODAG CONF IntD={dio_interval_doublings} IntMin={dio_interval_min} RedCst={dio_redundancy_constant} MaxRankIncr={max_rank_increase} MinHopRankIncr={minimum_hop_rank_increase} OCP={objective_code_point… src/wire/rpl.rs:1954

low build_script build_script 1

build.rs build.rs

info unsafe_code library 4

4 unsafe blocks, functions or impls src/phy/sys/bpf.rs:83
2 unsafe blocks, functions or impls src/phy/sys/mod.rs:47
5 unsafe blocks, functions or impls src/phy/sys/raw_socket.rs:30
6 unsafe blocks, functions or impls src/phy/sys/tuntap_interface.rs:20

Run: full

succeeded

The full build covers everything the earlier cargo check run did, so only the full run is shown.

Ended: agent reported the end
Guest: exit code 0
Run time: 6.3 s
VM restore: 57 ms
Payload: 1220 files, 11.1 MiB
Files opened: 1509

Processes 29

Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number. Hide the 25 compiler processes (rustc, C toolchain)

Process	Arguments	Start	Took	Exit
cargo /usr/local/bin/cargo	build --locked --offline	5 ms	6.3 s	0
└rustc /usr/local/bin/rustc ×3	--crate-name build_script_build --edition=2021 /cw/vendor/libc-0.2.191/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --allow=unused_qualifications --warn=clippy::unnecessary_semicolon --allow=clippy::unnecessary_cast --warn=clippy::ptr_as_ptr --allow=clippy::non_minimal_cfg --allow=clippy::missing_safety_doc --warn=clippy::map_unwrap_or --warn=clippy::manual_assert --allow=clippy::identity_op --warn=clippy::explicit_iter_loop --cfg feature="default" --cfg feature="std" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("align", "const-extern-fn", "default", "extra_traits", "rustc-dep-of-std", "rustc-std-workspace-core", "std", "use_std")) -C metadata=f2b3c09777387306	127 ms	780 ms	0
└toolchain /usr/bin/cc	-m64 /work/target/debug/build/libc-24a0c765ebd7d3cb/rustcEU5OK6/symbols.o /work/target/debug/build/libc-24a0c765ebd7d3cb/build_script_build-24a0c765ebd7d3cb.build_script_build.2cf7c5ec755a4f39-cgu.0.rcgu.o /work/target/debug/build/libc-24a0c765ebd7d3cb/build_script_build-24a0c765ebd7d3cb.build_script_build.2cf7c5ec755a4f39-cgu.1.rcgu.o /work/target/debug/build/libc-24a0c765ebd7d3cb/build_script_build-24a0c765ebd7d3cb.build_script_build.2cf7c5ec755a4f39-cgu.2.rcgu.o /work/target/debug/build/libc-24a0c765ebd7d3cb/build_script_build-24a0c765ebd7d3cb.build_script_build.2cf7c5ec755a4f39-cgu.3.rcgu.o /work/target/debug/build/libc-24a0c765ebd7d3cb/build_script_build-24a0c765ebd7d3cb.9x3fp7esgkeb4azbnju054438.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rus	762 ms	142 ms	0
└toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2	-plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccTHj5vs.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/libc-24a0c765ebd7d3cb/build_script_build-24a0c765ebd7d3cb /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/libc-24a0c765ebd7d3cb/rustcEU5OK6/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../li	770 ms	134 ms	0
└toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld	-flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccTHj5vs.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/libc-24a0c765ebd7d3cb/build_script_build-24a0c765ebd7d3cb /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/libc-24a0c765ebd7d3cb/rustcEU5OK6/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L	772 ms	131 ms	0
└rustc /usr/local/bin/rustc ×11	--crate-name byteorder --edition=2021 /cw/vendor/byteorder-1.5.0/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no -C debuginfo=2 --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("default", "i128", "std")) -C metadata=2e83a583dee76857 -C extra-filename=-8d30dd12a8dcba11 --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow	912 ms	94 ms	0
└build_script heapless		1.1 s	36 ms	0
└rustc /usr/local/bin/rustc	--edition=2018 --crate-name=probe --crate-type=lib --out-dir /work/target/debug/build/heapless-4828972e42b16889/out /work/target/debug/build/heapless-4828972e42b16889/out/probe.rs --target x86_64-unknown-linux-gnu	1.1 s	33 ms	256
└build_script libc		1.2 s	9 ms	0
└rustc /usr/local/bin/rustc	--version	1.2 s	6 ms	0
└build_script arkitekt-mesh-smoltcp		1.9 s	1 ms	0

Network 0

No network activity.

Files 0

Secrets opened

None.

Written outside the build directories

None.

Scratch disk 0

Files: 138
Directories: 45
Size: 59.0 MiB
Compiled units: 22

Nothing outside the build areas.

Output

Standard error

   Compiling libc v0.2.191
   Compiling byteorder v1.5.0
   Compiling heapless v0.9.3
   Compiling hash32 v0.3.1
   Compiling arkitekt-mesh-smoltcp v0.9.0
   Compiling stable_deref_trait v1.2.1
   Compiling managed v0.8.0
   Compiling log v0.4.34
   Compiling bitflags v1.3.2
   Compiling cfg-if v1.0.5
   Compiling crateward-probe v0.0.0 (/cw/probe)
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 6.27s

Timeline

When	From	To	Event	Worker
2026-10-27 12:56 UTC	Discovered	Fetched	fetched	fetcher-12688
2026-10-27 12:56 UTC	Fetched	ReadyForSandbox	static_analysis_completed	static-12726
2026-10-27 12:56 UTC	ReadyForSandbox	Running	sandbox_started	orchestrator-12760-slot1
2026-10-27 12:56 UTC	Running	DynamicallyAnalyzed	sandbox_completed	orchestrator-12760-slot1
2026-10-27 12:56 UTC	DynamicallyAnalyzed	ReadyForSandbox	scored	analyzer-12816
2026-10-27 12:56 UTC	ReadyForSandbox	Running	sandbox_started	orchestrator-12760-slot1
2026-10-27 12:56 UTC	Running	DynamicallyAnalyzed	sandbox_completed	orchestrator-12760-slot1
2026-10-27 12:56 UTC	DynamicallyAnalyzed	Scored	scored	analyzer-12816
2026-10-27 12:56 UTC	Scored	Done	finalized	analyzer-12816