Build log
nerves_system_mangopi_mq_pro
gcloud_speech_grpc 0.4.0 · fail · run gcloud_speech_grpc-0.4.0-1791188310848
427 of 427 lines
1Resolving Hex dependencies...2Resolution completed in 0.172s3Unchanged:4 certifi 2.17.05 circular_buffer 1.1.06 cowboy 2.6.3 VULNERABLE!7 EEF-CVE-2026-8466 (HIGH)8 aka: CVE-2026-8466, GHSA-jfc2-q6qh-g5x89 Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy10 https://osv.dev/vulnerability/EEF-CVE-2026-84661112 EEF-CVE-2026-65624 (MEDIUM)13 aka: CVE-2026-6562414 Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion15 https://osv.dev/vulnerability/EEF-CVE-2026-656241617 GHSA-w4f7-4cxr-rv3c (MEDIUM)18 aka: CVE-2026-43966, EEF-CVE-2026-4396619 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability20 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c21 cowlib 2.7.3 VULNERABLE!22 EEF-CVE-2026-59248 (HIGH)23 aka: CVE-2026-5924824 Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS25 https://osv.dev/vulnerability/EEF-CVE-2026-592482627 EEF-CVE-2026-43970 (HIGH)28 aka: CVE-2026-43970, GHSA-84f2-rp86-235p29 Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame30 https://osv.dev/vulnerability/EEF-CVE-2026-439703132 EEF-CVE-2026-43968 (MEDIUM)33 aka: CVE-2026-43968, GHSA-hv23-4qp7-8c8r34 CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/135 https://osv.dev/vulnerability/EEF-CVE-2026-439683637 EEF-CVE-2026-7790 (HIGH)38 aka: CVE-2026-7790, GHSA-32p9-57cr-4x6539 Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS40 https://osv.dev/vulnerability/EEF-CVE-2026-779041 elixir_make 0.10.042 finch 0.24.043 gcloud_speech_grpc 0.4.044 goth 1.4.545 grpc 0.3.1 VULNERABLE!46 EEF-CVE-2026-48854 (HIGH)47 aka: CVE-2026-48854, GHSA-q8gf-9rvj-gmgj48 Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc49 https://osv.dev/vulnerability/EEF-CVE-2026-4885450 gun 1.3.3 VULNERABLE!51 EEF-CVE-2026-43973 (HIGH)52 aka: CVE-2026-43973, GHSA-r53j-fjj5-mv7753 gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion54 https://osv.dev/vulnerability/EEF-CVE-2026-439735556 GHSA-w4f7-4cxr-rv3c (MEDIUM)57 aka: CVE-2026-43966, EEF-CVE-2026-4396658 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability59 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c60 hpax 1.1.061 interactive_cmd 0.1.462 jason 1.4.563 jose 1.11.1264 mime 2.0.765 mint 1.11.066 nerves 2.0.0-pre.267 nerves_discovery 0.1.568 nerves_logging 0.2.469 nerves_runtime 0.13.1370 nerves_system_bbb 2.30.271 nerves_system_br 1.34.472 nerves_system_mangopi_mq_pro 0.17.273 nerves_system_qemu_aarch64 0.4.274 nerves_system_rpi0 2.1.275 nerves_system_rpi4 2.1.276 nerves_system_rpi5 2.1.277 nerves_system_trellis 0.5.078 nerves_system_x86_64 1.34.279 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.180 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.181 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.182 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.183 nerves_toolchain_x86_64_nerves_linux_musl 15.3.184 nerves_uevent 0.1.785 nimble_options 1.1.186 nimble_pool 1.1.087 property_table 0.3.488 protobuf 0.6.389 ranch 1.7.190 ring_logger 0.11.791 tablet 0.3.392 telemetry 1.4.293 toolshed 0.5.094 uboot_env 1.0.295* Getting gcloud_speech_grpc (Hex package)96* Getting nerves (Hex package)97* Getting ring_logger (Hex package)98* Getting toolshed (Hex package)99* Getting nerves_runtime (Hex package)100* Getting nerves_system_bbb (Hex package)101* Getting nerves_system_mangopi_mq_pro (Hex package)102* Getting nerves_system_qemu_aarch64 (Hex package)103* Getting nerves_system_rpi0 (Hex package)104* Getting nerves_system_rpi4 (Hex package)105* Getting nerves_system_rpi5 (Hex package)106* Getting nerves_system_trellis (Hex package)107* Getting nerves_system_x86_64 (Hex package)108* Getting nerves_system_br (Hex package)109* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)110* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)111* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)112* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)113* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)114* Getting nerves_logging (Hex package)115* Getting nerves_uevent (Hex package)116* Getting uboot_env (Hex package)117* Getting elixir_make (Hex package)118* Getting property_table (Hex package)119* Getting circular_buffer (Hex package)120* Getting interactive_cmd (Hex package)121* Getting nerves_discovery (Hex package)122* Getting tablet (Hex package)123* Getting certifi (Hex package)124* Getting goth (Hex package)125* Getting grpc (Hex package)126* Getting protobuf (Hex package)127* Getting cowboy (Hex package)128* Getting gun (Hex package)129* Getting cowlib (Hex package)130* Getting ranch (Hex package)131* Getting finch (Hex package)132* Getting jason (Hex package)133* Getting jose (Hex package)134* Getting mime (Hex package)135* Getting mint (Hex package)136* Getting nimble_options (Hex package)137* Getting nimble_pool (Hex package)138* Getting telemetry (Hex package)139* Getting hpax (Hex package)140Found packages with security advisories, see above for details141==> nerves_system_br142Generated nerves_system_br app143==> mime144Compiling 1 file (.ex)145Generated mime app146==> circular_buffer147Compiling 1 file (.ex)148Generated circular_buffer app149==> nimble_options150Compiling 3 files (.ex)151Generated nimble_options app152==> jason153Compiling 10 files (.ex)154Generated jason app155==> hpax156Compiling 4 files (.ex)157Generated hpax app158==> mint159Compiling 1 file (.erl)160Compiling 21 files (.ex)161Generated mint app162==> jose163Compiling 113 files (.erl)164src/jose_server.erl:137:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.165Compile directive 'nowarn_deprecated_catch' can be used to suppress166warnings in selected modules.167% 137| _ = catch jose_jwa:unsecured_signing(UnsecuredSigning),168% | ^169170src/jose_server.erl:797:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.171Compile directive 'nowarn_deprecated_catch' can be used to suppress172warnings in selected modules.173% 797| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, PlainText, true) of174% | ^175176src/jose_server.erl:799:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.177Compile directive 'nowarn_deprecated_catch' can be used to suppress178warnings in selected modules.179% 799| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, CipherText, false) of180% | ^181182src/jose_server.erl:809:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.183Compile directive 'nowarn_deprecated_catch' can be used to suppress184warnings in selected modules.185% 809| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, IV, PlainText, true) of186% | ^187188src/jose_server.erl:811:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.189Compile directive 'nowarn_deprecated_catch' can be used to suppress190warnings in selected modules.191% 811| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, IV, CipherText, false) of192% | ^193194src/jose_server.erl:821:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.195Compile directive 'nowarn_deprecated_catch' can be used to suppress196warnings in selected modules.197% 821| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, IV, {AAD, PlainText}, true) of198% | ^199200src/jose_server.erl:823:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.201Compile directive 'nowarn_deprecated_catch' can be used to suppress202warnings in selected modules.203% 823| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, IV, {AAD, CipherText, CipherTag}, false) of204% | ^205206src/jose_server.erl:837:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.207Compile directive 'nowarn_deprecated_catch' can be used to suppress208warnings in selected modules.209% 837| case catch public_key:encrypt_public(PlainText, PublicKey, FutureOptions) of210% | ^211212src/jose_server.erl:840:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.213Compile directive 'nowarn_deprecated_catch' can be used to suppress214warnings in selected modules.215% 840| case catch public_key:decrypt_private(CipherText, PrivateKey, FutureOptions) of216% | ^217218src/jose_server.erl:842:11: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.219Compile directive 'nowarn_deprecated_catch' can be used to suppress220warnings in selected modules.221% 842| case catch public_key:decrypt_private(rsa_ciphertext(Algorithm), PrivateKey, FutureOptions) of222% | ^223224src/jose_server.erl:859:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.225Compile directive 'nowarn_deprecated_catch' can be used to suppress226warnings in selected modules.227% 859| case catch public_key:encrypt_public(PlainText, PublicKey, LegacyOptions) of228% | ^229230src/jose_server.erl:862:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.231Compile directive 'nowarn_deprecated_catch' can be used to suppress232warnings in selected modules.233% 862| case catch public_key:decrypt_private(CipherText, PrivateKey, LegacyOptions) of234% | ^235236src/jose_server.erl:864:11: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.237Compile directive 'nowarn_deprecated_catch' can be used to suppress238warnings in selected modules.239% 864| case catch public_key:decrypt_private(rsa_ciphertext(Algorithm), PrivateKey, LegacyOptions) of240% | ^241242src/jose_server.erl:882:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.243Compile directive 'nowarn_deprecated_catch' can be used to suppress244warnings in selected modules.245% 882| case catch public_key:sign(Message, DigestType, PrivateKey, Options) of246% | ^247248src/jose_server.erl:885:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.249Compile directive 'nowarn_deprecated_catch' can be used to suppress250warnings in selected modules.251% 885| case catch public_key:verify(Message, DigestType, Signature, PublicKey, Options) of252% | ^253254src/jose_server.erl:897:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.255Compile directive 'nowarn_deprecated_catch' can be used to suppress256warnings in selected modules.257% 897| case catch public_key:sign(Message, DigestType, PrivateKey) of258% | ^259260src/jose_server.erl:900:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.261Compile directive 'nowarn_deprecated_catch' can be used to suppress262warnings in selected modules.263% 900| case catch public_key:verify(Message, DigestType, Signature, PublicKey) of264% | ^265266src/jwa/jose_jwa.erl:230:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.267Compile directive 'nowarn_deprecated_catch' can be used to suppress268warnings in selected modules.269% 230| case catch block_cipher(Cipher) of270% | ^271272src/jwa/jose_jwa.erl:238:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.273Compile directive 'nowarn_deprecated_catch' can be used to suppress274warnings in selected modules.275% 238| case catch ?MAYBE_START_JOSE(ets:lookup_element(?TAB, chacha20_poly1305_module, 2)) of276% | ^277278src/jwa/jose_jwa.erl:246:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.279Compile directive 'nowarn_deprecated_catch' can be used to suppress280warnings in selected modules.281% 246| case catch rsa_crypt(Padding) of282% | ^283284src/jwa/jose_jwa.erl:254:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.285Compile directive 'nowarn_deprecated_catch' can be used to suppress286warnings in selected modules.287% 254| case catch rsa_sign(Padding) of288% | ^289290src/jwa/jose_jwa.erl:262:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.291Compile directive 'nowarn_deprecated_catch' can be used to suppress292warnings in selected modules.293% 262| case catch ?MAYBE_START_JOSE(ets:lookup_element(?TAB, xchacha20_poly1305_module, 2)) of294% | ^295296Compiling 8 files (.ex)297Generated jose app298==> nerves_compatibility_test299===> Analyzing applications...300===> Compiling ranch301 ┌─ src/ranch_conns_sup.erl:302 │303 80 │ catch erlang:send(SupPid, {?MODULE, active_connections, self(), Tag},304 │ ╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.305Compile directive 'nowarn_deprecated_catch' can be used to suppress306warnings in selected modules.307308309 ┌─ src/ranch_ssl.erl:310 │311 142 │ case ssl:ssl_accept(CSocket, Opts, Timeout) of312 │ ╰── Warning: ssl:ssl_accept/3 is removed; use ssl:handshake/1,2,3 instead313314315==> tablet316Compiling 2 files (.ex)317Generated tablet app318==> protobuf319Compiling 20 files (.ex)320 warning: this clause cannot match because a previous clause at line 253 matches the same pattern as this clause321 │322 254 │ defp cal_repeated(_props, %{repeated: true, oneof: true}), do:323 │ ~324 │325 └─ lib/protobuf/dsl.ex:254:8326327 warning: Logger.warn/1 is deprecated. Use Logger.warning/2 instead328 │329 119 │ val = decode_type_m(type, key, val)330 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~331 │332 └─ lib/protobuf/decoder.ex:119: Protobuf.Decoder.build_struct/3333334 warning: the variable "len" is accessed inside size(...) of a bitstring but it was defined outside of the match. You must precede it with the pin operator335 │336 270 │ <<bytes::bytes-size(len), rest::bits>> = bin337 │ ~338 │339 └─ lib/protobuf/decoder.ex:270:25: Protobuf.Decoder.raw_handle_varint/4340341 warning: Logger.warn/1 is deprecated. Use Logger.warning/2 instead342 │343 303 │ decode_type_m(type, key, v)344 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~345 │346 └─ lib/protobuf/decoder.ex:303: Protobuf.Decoder.put_packed_field/3347348warning: pattern matching on 0.0 is equivalent to matching only on +0.0. Instead you must match on +0.0 or -0.0349└─ lib/protobuf/encoder.ex: Protobuf.Encoder.skip_field?/3350351 warning: System.stacktrace/0 is deprecated. Use __STACKTRACE__ instead352 │353 65 │ stacktrace = System.stacktrace()354 │ ~355 │356 └─ lib/protobuf/encoder.ex:65:27: Protobuf.Encoder.encode_fields/5357358 warning: the following clause is redundant:359360 defp cal_repeated(_props, %{repeated: true, oneof: true})361362 it has type:363364 dynamic(), %{..., oneof: true, repeated: true}365366 previous clauses have already matched on the following types:367368 %{..., map?: true}, term()369 term(), %{..., repeated: true}370371 │372 254 │ defp cal_repeated(_props, %{repeated: true, oneof: true}), do:373 │ ~374 │375 └─ lib/protobuf/dsl.ex:254:8: Protobuf.DSL.cal_repeated/2376377 warning: incompatible types given to Protobuf.Decoder.decode/2:378379 Protobuf.Decoder.decode(data, mod)380381 given types:382383 -dynamic(%{..., __struct__: atom()})-, dynamic(atom())384385 but expected one of:386387 bitstring(), atom()388389 where "data" was given the type:390391 # type: dynamic(%{..., __struct__: atom()})392 # from: lib/protobuf.ex:29:21393 %mod{} = data394395 where "mod" was given the type:396397 # type: dynamic(atom())398 # from: lib/protobuf.ex:29:21399 %mod{} = data400401 type warning found at:402 │403 30 │ Protobuf.Decoder.decode(data, mod)404 │ ~405 │406 └─ lib/protobuf.ex:30:22: Protobuf.decode/1407408Generated protobuf app409==> elixir_make410Compiling 8 files (.ex)411Generated elixir_make app412==> nerves_logging413 CC kmsg_tailer.o414 LD kmsg_tailer415Compiling 5 files (.ex)416Generated nerves_logging app417==> nerves_compatibility_test418===> Analyzing applications...419===> Compiling cowlib420===> Compiling src/cow_sse.erl failed421 ┌─ src/cow_sse.erl:422 │423 56 │ -> {event, parsed_event(), State} | {more, State}.424 │ ╰── type variable 'State' is only used once (is unbound)425426427** (Mix) Could not compile dependency :cowlib, "/home/nerves/.mix/elixir/1-20-otp-29/rebar3 bare compile --paths /work/proj/_build/mangopi_mq_pro/lib/*/ebin" command failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile cowlib --force", update it with "mix deps.update cowlib" or clean it with "mix deps.clean cowlib"