ghostty-vt-sys 0.6.0+ghostty.1.3.2-main.b40acce
A build script was added since 0.0.1.
60
high
False positive. A person reviewed this verdict and found the crate benign. The evidence below is what the analysis saw.
Evidence
| Points | Signal | Where | What |
|---|---|---|---|
| 10 | build_script_added diff · ghostty-vt-sys | A build script was added since 0.0.1. | |
| 10 | network_lookup network · ghostty-vt-sys | tip.files.ghostty.org | The build looked up tip.files.ghostty.org. |
| 10 | new_high_finding diff · ghostty-vt-sys | build.rs:281 | New since 0.0.1: downloader_pattern |
| 10 | static:downloader_pattern static · ghostty-vt-sys | build.rs:281 | high severity downloader_pattern in build_script code: ureq::tls::TlsProvider::NativeTls at build.rs:281 with std::process::Command::new at build.rs:340 |
| 10 | static:network_access static · ghostty-vt-sys | build.rs:281 | medium severity network_access in build_script code (5 places): ureq::tls::TlsProvider::NativeTls |
| 10 | static:process_spawn static · ghostty-vt-sys | build.rs:340 | medium severity process_spawn in build_script code (4 places): std::process::Command::new |
2 without points
| Signal | Where | What |
|---|---|---|
| new_behavior diff · ghostty-vt-sys | net:tip.files.ghostty.org | New since the previous version: net:tip.files.ghostty.org. |
| static:build_script static · ghostty-vt-sys | build.rs | low severity build_script in build_script code: build.rs |
Behavior
New since the previous version
net:tip.files.ghostty.org static:downloader_pattern static:network_access static:process_spawn
Profile
net:tip.files.ghostty.org static:downloader_pattern static:network_access static:process_spawn
Static findings
7 groups
high downloader_pattern build_script 1
ureq::tls::TlsProvider::NativeTls at build.rs:281 with std::process::Command::new at build.rs:340build.rs:281
medium network_access build_script 5
ureq::tls::TlsProvider::NativeTlsbuild.rs:281ureq::tls::TlsProvider::Rustlsbuild.rs:283ureq::Agentbuild.rs:285ureq::Agent::config_builderbuild.rs:285ureq::tls::TlsConfig::builderbuild.rs:286
medium process_spawn build_script 4
std::process::Command::newbuild.rs:340 build.rs:409 build.rs:445std::process::Commandbuild.rs:460
low foreign_functions library 198
extern blocksrc/bindings.rs:308 src/bindings.rs:396 src/bindings.rs:400 src/bindings.rs:441 src/bindings.rs:508 src/bindings.rs:512 src/bindings.rs:520 src/bindings.rs:528 src/bindings.rs:537 src/bindings.rs:541 src/bindings.rs:552 src/bindings.rs:556 src/bindings.rs:560 src/bindings.rs:564 src/bindings.rs:568 src/bindings.rs:680 src/bindings.rs:699 src/bindings.rs:938 src/bindings.rs:946 src/bindings.rs:956 src/bindings.rs:964 src/bindings.rs:1083 src/bindings.rs:1087 src/bindings.rs:1118 src/bindings.rs:1122 src/bindings.rs:1126 src/bindings.rs:1135 src/bindings.rs:1144 src/bindings.rs:1652 src/bindings.rs:1660 src/bindings.rs:1664 src/bindings.rs:1672 src/bindings.rs:1681 src/bindings.rs:1688 src/bindings.rs:1692 src/bindings.rs:1696 src/bindings.rs:1705 src/bindings.rs:1716 src/bindings.rs:1724 src/bindings.rs:1732 src/bindings.rs:1740 src/bindings.rs:1747 src/bindings.rs:1755 src/bindings.rs:1765 src/bindings.rs:1775 src/bindings.rs:1783 src/bindings.rs:1791 src/bindings.rs:1800 src/bindings.rs:1809 src/bindings.rs:1836 and 148 more
low build_script build_script 1
build.rsbuild.rs
info unsafe_code library 2
44 unsafe blocks, functions or implssrc/bindings.rs:2332 unsafe blocks, functions or implssrc/lib.rs:65
info native_link build_script 1
links = "ghostty-vt"Cargo.toml
Run: full
failedThe full build covers everything the earlier cargo check run did, so only the full run is shown.
- Ended
- agent reported the end
- Guest
- exit code 101
- Run time
- 22.8 s
- VM restore
- 62 ms
- Payload
- 5272 files, 140.8 MiB
- Files opened
- 7727
Processes 191
Siblings that ran the same program with the same result and the same processes below are folded into one row, with their number.
| Process | Arguments | Start | Took | Exit |
|---|---|---|---|---|
| cargo /usr/local/bin/cargo | build --locked --offline | 5 ms | 22.7 s | 25856 |
| └rustc /usr/local/bin/rustc ×44 | --crate-name cfg_if --edition=2018 /cw/vendor/cfg-if-1.0.5/src/lib.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type lib --emit=dep-info,metadata,link -C embed-bitcode=no --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("core", "rustc-dep-of-std")) -C metadata=400facf07191281c -C extra-filename=-e5a3a60555e44b7f --out-dir /work/target/debug/deps -L dependency=/work/target/debug/deps --cap-lints allow | 199 ms | 212 ms | 0 |
| └rustc /usr/local/bin/rustc ×8 | --crate-name build_script_build --edition=2021 /cw/vendor/libc-0.2.190/build.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --crate-type bin --emit=dep-info,link -C embed-bitcode=no --allow=unused_qualifications --warn=clippy::unnecessary_semicolon --allow=clippy::unnecessary_cast --warn=clippy::ptr_as_ptr --allow=clippy::non_minimal_cfg --allow=clippy::missing_safety_doc --warn=clippy::map_unwrap_or --warn=clippy::manual_assert --allow=clippy::identity_op --warn=clippy::explicit_iter_loop --cfg feature="default" --cfg feature="std" --check-cfg cfg(docsrs,test) --check-cfg cfg(feature, values("align", "const-extern-fn", "default", "extra_traits", "rustc-dep-of-std", "rustc-std-workspace-core", "std", "use_std")) -C metadata=cc8fbcc4ffcedc67 | 414 ms | 589 ms | 0 |
| └toolchain /usr/bin/cc | -m64 /work/target/debug/build/libc-d6090283aeec6873/rustcs4q0lB/symbols.o /work/target/debug/build/libc-d6090283aeec6873/build_script_build-d6090283aeec6873.build_script_build.478463c381baa231-cgu.0.rcgu.o /work/target/debug/build/libc-d6090283aeec6873/build_script_build-d6090283aeec6873.build_script_build.478463c381baa231-cgu.1.rcgu.o /work/target/debug/build/libc-d6090283aeec6873/build_script_build-d6090283aeec6873.build_script_build.478463c381baa231-cgu.2.rcgu.o /work/target/debug/build/libc-d6090283aeec6873/build_script_build-d6090283aeec6873.build_script_build.478463c381baa231-cgu.3.rcgu.o /work/target/debug/build/libc-d6090283aeec6873/build_script_build-d6090283aeec6873.duv7zwsm27ecgad8ejp2yfjq7.rcgu.o -Wl,--as-needed -Wl,-Bstatic /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libstd-64f5f36fb0927694.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libpanic_unwind-549498e8b2e4d924.rlib /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib/libobject-7ff85ea729a864ff.rlib /usr/local/lib/rus | 864 ms | 138 ms | 0 |
| └toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/collect2 | -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccAjKc0B.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -fuse-ld=lld -o /work/target/debug/build/libc-d6090283aeec6873/build_script_build-d6090283aeec6873 /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/libc-d6090283aeec6873/rustcs4q0lB/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../li | 871 ms | 131 ms | 0 |
| └toolchain /usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/rust-lld | -flavor gnu -plugin /usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so -plugin-opt=/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper -plugin-opt=-fresolution=/tmp/ccAjKc0B.res --build-id --eh-frame-hdr -m elf_x86_64 --hash-style=gnu --as-needed -dynamic-linker /lib64/ld-linux-x86-64.so.2 -pie -o /work/target/debug/build/libc-d6090283aeec6873/build_script_build-d6090283aeec6873 /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/Scrt1.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o -L/work/target/debug/build/libc-d6090283aeec6873/rustcs4q0lB/raw-dylibs -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/lib -L/usr/local/lib/rustlib/x86_64-unknown-linux-gnu/bin/gcc-ld -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L | 873 ms | 127 ms | 0 |
| └build_script libc | 1.0 s | 9 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 1.0 s | 7 ms | 0 |
| └build_script ring | 3.9 s | 1.5 s | 0 | |
| └toolchain /usr/bin/cc ×2 | -E /work/target/debug/build/ring-88f4c4b66b466fb5/out/8118485219780970543detect_compiler_family.c | 3.9 s | 25 ms | 0 |
| └toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 | -E -quiet -imultiarch x86_64-linux-gnu /work/target/debug/build/ring-88f4c4b66b466fb5/out/8118485219780970543detect_compiler_family.c -mtune=generic -march=x86-64 -fasynchronous-unwind-tables -dumpbase 8118485219780970543detect_compiler_family.c -dumpbase-ext .c | 3.9 s | 21 ms | 0 |
| └toolchain /usr/bin/cc ×2 | -? | 3.9 s | 3 ms | 256 |
| └toolchain /usr/bin/cc ×30 | -O0 -ffunction-sections -fdata-sections -fPIC -m64 -I /cw/vendor/ring-0.17.14/include -I /cw/vendor/ring-0.17.14/pregenerated -Wall -Wextra -fvisibility=hidden -std=c1x -Wall -Wbad-function-cast -Wcast-align -Wcast-qual -Wconversion -Wmissing-field-initializers -Wmissing-include-dirs -Wnested-externs -Wredundant-decls -Wshadow -Wsign-compare -Wsign-conversion -Wstrict-prototypes -Wundef -Wuninitialized -g3 -DNDEBUG -o | 3.9 s | 222 ms | 0 |
| └toolchain /usr/libexec/gcc/x86_64-linux-gnu/14/cc1 | -quiet -I /cw/vendor/ring-0.17.14/include -I /cw/vendor/ring-0.17.14/pregenerated -imultiarch x86_64-linux-gnu -dD -D NDEBUG /cw/vendor/ring-0.17.14/crypto/curve25519/curve25519.c -quiet -dumpdir /work/target/debug/build/ring-88f4c4b66b466fb5/out/ -dumpbase 25ac62e5b3c53843-curve25519.c -dumpbase-ext .c -m64 -mtune=generic -march=x86-64 -g3 -O0 -Wextra -Wall -Wbad-function-cast -Wcast-align -Wcast-qual -Wconversion -Wmissing-field-initializers -Wmissing-include-dirs | 3.9 s | 195 ms | 0 |
| └toolchain /usr/bin/as | -I /cw/vendor/ring-0.17.14/include -I /cw/vendor/ring-0.17.14/pregenerated --gdwarf-5 --64 -o /work/target/debug/build/ring-88f4c4b66b466fb5/out/25ac62e5b3c53843-curve25519.o /tmp/ccS1J2JL.s | 4.1 s | 24 ms | 0 |
| └toolchain /usr/bin/ar ×4 | cqD /work/target/debug/build/ring-88f4c4b66b466fb5/out/libring_core_0_17_14_.a /work/target/debug/build/ring-88f4c4b66b466fb5/out/25ac62e5b3c53843-curve25519.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/0bbbd18bda93c05b-aes_nohw.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/00c879ee3285a50d-montgomery.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/00c879ee3285a50d-montgomery_inv.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/a0330e891e733f4e-ecp_nistz.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/a0330e891e733f4e-gfp_p256.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/a0330e891e733f4e-gfp_p384.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/a0330e891e733f4e-p256.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/aaa1ba3e455ee2e1-limbs.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/a4019cc0736b0423-mem.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/d5a9841f3dc6e253-poly1305.o /work/target/debug/build/ring-88f4c4b66b466fb5/out/a4019cc0736b0423-crypt | 5.3 s | 19 ms | 0 |
| └build_script generic-array | 5.4 s | 10 ms | 0 | |
| └rustc /usr/local/bin/rustc | --verbose --version | 5.4 s | 8 ms | 0 |
| └build_script httparse | 7.2 s | 10 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 7.2 s | 8 ms | 0 |
| └build_script rustix | 8.7 s | 39 ms | 0 | |
| └rustc /usr/local/bin/rustc ×2 | --crate-type=rlib --emit=metadata --target x86_64-unknown-linux-gnu -o /work/target/debug/build/rustix-91fad39b65314a2d/out/rustix_test_can_compile - | 8.7 s | 17 ms | 0 |
| └build_script rustls | 10.7 s | 1 ms | 0 | |
| └build_script crc32fast | 10.7 s | 9 ms | 0 | |
| └rustc /usr/local/bin/rustc | --version | 10.7 s | 7 ms | 0 |
| └build_script ghostty-vt-sys | 22.7 s | 7 ms | 25856 |
Network 2
The VM has no internet. Every name it looks up resolves to 10.0.2.1, the fake internet, which accepts every connection and records what was sent. Below, it is shown by its port alone, such as :443. The name the build wanted is in the lookups, the HTTP host and the TLS SNI.
Looked up tip.files.ghostty.org
| Destination | Protocol | What was sent | Bytes |
|---|---|---|---|
| :443 | tls | SNI tip.files.ghostty.org | 248 B |
Sockets in the trace 3
| When | Program | How | Address | Type |
|---|---|---|---|---|
| 22.7 s | /work/target/debug/build/ghostty-vt-sys-002e4bd10c27b699/build-script-build | connect | unix:/var/run/nscd/socket | stream |
| 22.7 s | /work/target/debug/build/ghostty-vt-sys-002e4bd10c27b699/build-script-build | connect | :53 | datagram |
| 22.7 s | /work/target/debug/build/ghostty-vt-sys-002e4bd10c27b699/build-script-build | connect | :443 | stream |
Files 0
Secrets opened
None.
Written outside the build directories
None.
Scratch disk 0
- Files
- 450
- Directories
- 102
- Size
- 180.3 MiB
- Compiled units
- 88
Nothing outside the build areas.
Output
Standard error
warning: Cargo.toml: version requirement `=0.6.0+ghostty.1.3.2-main.b40acce` for dependency `target` includes semver metadata which will be ignored, removing the metadata is recommended to avoid confusion
warning: `crateward-probe` (manifest) generated 1 warning
Compiling cfg-if v1.0.5
Compiling libc v0.2.190
Compiling shlex v2.0.1
Compiling find-msvc-tools v0.1.14
Compiling cc v1.6.0
Compiling version_check v0.9.5
Compiling generic-array v0.14.7
Compiling ring v0.17.14
Compiling zeroize v1.9.1
Compiling typenum v1.20.1
Compiling rustls-pki-types v1.15.1
Compiling getrandom v0.2.17
Compiling rustix v1.1.5
Compiling untrusted v0.9.0
Compiling httparse v1.10.1
Compiling linux-raw-sys v0.12.1
Compiling bitflags v2.13.2
Compiling log v0.4.34
Compiling bytes v1.12.1
Compiling crc32fast v1.5.2
Compiling rustls v0.23.45
Compiling itoa v1.0.18
Compiling http v1.5.0
Compiling rustls-webpki v0.103.15
Compiling crypto-common v0.1.7
Compiling block-buffer v0.10.4
Compiling adler2 v2.0.1
Compiling subtle v2.6.1
Compiling base64 v0.23.1
Compiling simd-adler32 v0.3.10
Compiling once_cell v1.21.4
Compiling miniz_oxide v0.9.1
Compiling ureq-proto v0.6.4
Compiling digest v0.10.7
Compiling xattr v1.6.1
Compiling webpki-roots v1.0.9
Compiling filetime v0.2.29
Compiling utf8-zero v0.8.1
Compiling cpufeatures v0.2.17
Compiling percent-encoding v2.3.2
Compiling ureq v3.4.2
Compiling sha2 v0.10.9
Compiling tar v0.4.46
Compiling flate2 v1.1.10
Compiling ghostty-vt-sys v0.6.0+ghostty.1.3.2-main.b40acce
error: failed to run custom build command for `ghostty-vt-sys v0.6.0+ghostty.1.3.2-main.b40acce`
Caused by:
process didn't exit successfully: `/work/target/debug/build/ghostty-vt-sys-002e4bd10c27b699/build-script-build` (exit status: 101)
--- stdout
cargo:rerun-if-changed=build.rs
cargo:rerun-if-changed=GHOSTTY.lock
cargo:rerun-if-env-changed=DOCS_RS
cargo:rerun-if-env-changed=GHOSTTY_SOURCE_DIR
cargo:rerun-if-env-changed=GHOSTTY_SOURCE_URL
cargo:rerun-if-env-changed=GHOSTTY_ZIG_SYSTEM_DIR
cargo:rerun-if-env-changed=GHOSTTY_VT_CPU
cargo:rerun-if-env-changed=ZIG
cargo:rerun-if-changed=/cw/vendor/ghostty-vt-sys-0.6.0+ghostty.1.3.2-main.b40acce/../../third_party/ghostty/.git
cargo:rustc-env=GHOSTTY_VT_COMMIT=b40acce58dcf77df52231c3798ea58e924647c89
cargo:rustc-env=GHOSTTY_VT_VERSION=1.3.2-main+b40acce
cargo::metadata=COMMIT=b40acce58dcf77df52231c3798ea58e924647c89
cargo::metadata=VERSION=1.3.2-main+b40acce
--- stderr
thread 'main' (1262) panicked at /cw/vendor/ghostty-vt-sys-0.6.0+ghostty.1.3.2-main.b40acce/build.rs:224:23:
ghostty-vt-sys could not obtain the Ghostty source tarball.
error: io: invalid peer certificate: UnknownIssuer
url: https://tip.files.ghostty.org/b40acce58dcf77df52231c3798ea58e924647c89/libghostty-vt-source.tar.gz
sha256: a623aa0b1267594d9a1bb76a5fef535f198004e78730894f494a5bdc522a4850
commit: b40acce58dcf77df52231c3798ea58e924647c89
Without network access, point GHOSTTY_SOURCE_DIR at a Ghostty checkout or
an extracted libghostty-vt source tarball at commit b40acce58dcf77df52231c3798ea58e924647c89, or set
GHOSTTY_SOURCE_URL to a mirror of the tarball. The tarball is reproducible
from a Ghostty checkout with:
printf '1.3.2-main+b40acce' > VERSION
git archive --format=tgz --prefix=libghostty-vt-1.3.2-main+b40acce/ --add-file=VERSION \
--prefix=libghostty-vt-1.3.2-main+b40acce/ -o libghostty-vt-source.tar.gz b40acce58dcf77df52231c3798ea58e924647c89 \
$(for d in images macos dist/doxygen dist/linux dist/macos dist/windows \
flatpak snap po example test src/font/res src/crash/testdata \
pkg/wuffs/src/too_big.jpg pkg/wuffs/src/too_big.png pkg/breakpad/vendor \
vendor; do printf ':(exclude)%s ' $d; done)
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
Timeline
9
| When | From | To | Event | Worker |
|---|---|---|---|---|
| 2026-10-08 07:17 UTC | Discovered | Fetched | fetched | fetcher-799714 |
| 2026-10-08 07:17 UTC | Fetched | ReadyForSandbox | static_analysis_completed | static-799757 |
| 2026-10-08 07:17 UTC | ReadyForSandbox | Running | sandbox_started | orchestrator-800051-slot1 |
| 2026-10-08 07:18 UTC | Running | DynamicallyAnalyzed | sandbox_completed | orchestrator-800051-slot1 |
| 2026-10-08 07:18 UTC | DynamicallyAnalyzed | ReadyForSandbox | scored | analyzer-800083 |
| 2026-10-08 07:18 UTC | ReadyForSandbox | Running | sandbox_started | orchestrator-800051-slot1 |
| 2026-10-08 07:18 UTC | Running | DynamicallyAnalyzed | sandbox_completed | orchestrator-800051-slot1 |
| 2026-10-08 07:18 UTC | DynamicallyAnalyzed | Scored | scored | analyzer-800083 |
| 2026-10-08 07:18 UTC | Scored | Done | finalized | analyzer-800083 |