Build log
nerves_system_x86_64
membrane_element_gcloud_speech_to_text 0.10.0 · fail · run membrane_element_gcloud_speech_to_text-0.10.0-1790990354478
414 of 414 lines
1Resolving Hex dependencies...2Resolution completed in 0.274s3Unchanged:4 bunch 1.6.45 certifi 2.17.06 circular_buffer 1.1.07 coerce 1.0.28 cowboy 2.6.3 VULNERABLE!9 EEF-CVE-2026-8466 (HIGH)10 aka: CVE-2026-8466, GHSA-jfc2-q6qh-g5x811 Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy12 https://osv.dev/vulnerability/EEF-CVE-2026-84661314 EEF-CVE-2026-65624 (MEDIUM)15 aka: CVE-2026-6562416 Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion17 https://osv.dev/vulnerability/EEF-CVE-2026-656241819 GHSA-w4f7-4cxr-rv3c (MEDIUM)20 aka: CVE-2026-43966, EEF-CVE-2026-4396621 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability22 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c23 cowlib 2.7.3 VULNERABLE!24 EEF-CVE-2026-59248 (HIGH)25 aka: CVE-2026-5924826 Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS27 https://osv.dev/vulnerability/EEF-CVE-2026-592482829 EEF-CVE-2026-43970 (HIGH)30 aka: CVE-2026-43970, GHSA-84f2-rp86-235p31 Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame32 https://osv.dev/vulnerability/EEF-CVE-2026-439703334 EEF-CVE-2026-43968 (MEDIUM)35 aka: CVE-2026-43968, GHSA-hv23-4qp7-8c8r36 CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/137 https://osv.dev/vulnerability/EEF-CVE-2026-439683839 EEF-CVE-2026-7790 (HIGH)40 aka: CVE-2026-7790, GHSA-32p9-57cr-4x6541 Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS42 https://osv.dev/vulnerability/EEF-CVE-2026-779043 elixir_make 0.10.044 finch 0.24.045 gcloud_speech_grpc 0.4.046 goth 1.4.547 grpc 0.3.1 VULNERABLE!48 EEF-CVE-2026-48854 (HIGH)49 aka: CVE-2026-48854, GHSA-q8gf-9rvj-gmgj50 Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc51 https://osv.dev/vulnerability/EEF-CVE-2026-4885452 gun 1.3.3 VULNERABLE!53 EEF-CVE-2026-43973 (HIGH)54 aka: CVE-2026-43973, GHSA-r53j-fjj5-mv7755 gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion56 https://osv.dev/vulnerability/EEF-CVE-2026-439735758 GHSA-w4f7-4cxr-rv3c (MEDIUM)59 aka: CVE-2026-43966, EEF-CVE-2026-4396660 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability61 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c62 hpax 1.1.063 interactive_cmd 0.1.464 jason 1.4.565 jose 1.11.1266 membrane_core 1.3.467 membrane_element_gcloud_speech_to_text 0.10.068 membrane_flac_format 0.2.269 mime 2.0.770 mint 1.11.071 nerves 2.0.0-pre.272 nerves_discovery 0.1.573 nerves_logging 0.2.474 nerves_runtime 0.13.1375 nerves_system_bbb 2.30.276 nerves_system_br 1.34.477 nerves_system_mangopi_mq_pro 0.17.278 nerves_system_qemu_aarch64 0.4.279 nerves_system_rpi0 2.1.280 nerves_system_rpi4 2.1.281 nerves_system_rpi5 2.1.282 nerves_system_trellis 0.5.083 nerves_system_x86_64 1.34.284 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.185 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.186 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.187 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.188 nerves_toolchain_x86_64_nerves_linux_musl 15.3.189 nerves_uevent 0.1.790 nimble_options 1.1.191 nimble_pool 1.1.092 numbers 5.2.593 property_table 0.3.494 protobuf 0.6.395 qex 0.5.296 ranch 1.7.197 ratio 4.0.198 ring_logger 0.11.799 tablet 0.3.3100 telemetry 1.4.2101 toolshed 0.5.0102 uboot_env 1.0.2103* Getting membrane_element_gcloud_speech_to_text (Hex package)104* Getting nerves (Hex package)105* Getting ring_logger (Hex package)106* Getting toolshed (Hex package)107* Getting nerves_runtime (Hex package)108* Getting nerves_system_bbb (Hex package)109* Getting nerves_system_mangopi_mq_pro (Hex package)110* Getting nerves_system_qemu_aarch64 (Hex package)111* Getting nerves_system_rpi0 (Hex package)112* Getting nerves_system_rpi4 (Hex package)113* Getting nerves_system_rpi5 (Hex package)114* Getting nerves_system_trellis (Hex package)115* Getting nerves_system_x86_64 (Hex package)116* Getting nerves_system_br (Hex package)117* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)118* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)119* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)120* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)121* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)122* Getting nerves_logging (Hex package)123* Getting nerves_uevent (Hex package)124* Getting uboot_env (Hex package)125* Getting elixir_make (Hex package)126* Getting property_table (Hex package)127* Getting circular_buffer (Hex package)128* Getting interactive_cmd (Hex package)129* Getting nerves_discovery (Hex package)130* Getting tablet (Hex package)131* Getting gcloud_speech_grpc (Hex package)132* Getting membrane_core (Hex package)133* Getting membrane_flac_format (Hex package)134* Getting qex (Hex package)135* Getting bunch (Hex package)136* Getting ratio (Hex package)137* Getting telemetry (Hex package)138* Getting numbers (Hex package)139* Getting coerce (Hex package)140* Getting certifi (Hex package)141* Getting goth (Hex package)142* Getting grpc (Hex package)143* Getting protobuf (Hex package)144* Getting cowboy (Hex package)145* Getting gun (Hex package)146* Getting cowlib (Hex package)147* Getting ranch (Hex package)148* Getting finch (Hex package)149* Getting jason (Hex package)150* Getting jose (Hex package)151* Getting mime (Hex package)152* Getting mint (Hex package)153* Getting nimble_options (Hex package)154* Getting nimble_pool (Hex package)155* Getting hpax (Hex package)156Found packages with security advisories, see above for details157==> membrane_flac_format158Compiling 3 files (.ex)159Generated membrane_flac_format app160==> jose161Compiling 113 files (.erl)162src/jose_server.erl:137:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.163Compile directive 'nowarn_deprecated_catch' can be used to suppress164warnings in selected modules.165% 137| _ = catch jose_jwa:unsecured_signing(UnsecuredSigning),166% | ^167168src/jose_server.erl:797:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.169Compile directive 'nowarn_deprecated_catch' can be used to suppress170warnings in selected modules.171% 797| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, PlainText, true) of172% | ^173174src/jose_server.erl:799:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.175Compile directive 'nowarn_deprecated_catch' can be used to suppress176warnings in selected modules.177% 799| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, CipherText, false) of178% | ^179180src/jose_server.erl:809:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.181Compile directive 'nowarn_deprecated_catch' can be used to suppress182warnings in selected modules.183% 809| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, IV, PlainText, true) of184% | ^185186src/jose_server.erl:811:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.187Compile directive 'nowarn_deprecated_catch' can be used to suppress188warnings in selected modules.189% 811| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, IV, CipherText, false) of190% | ^191192src/jose_server.erl:821:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.193Compile directive 'nowarn_deprecated_catch' can be used to suppress194warnings in selected modules.195% 821| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, IV, {AAD, PlainText}, true) of196% | ^197198src/jose_server.erl:823:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.199Compile directive 'nowarn_deprecated_catch' can be used to suppress200warnings in selected modules.201% 823| case catch jose_crypto_compat:crypto_one_time(Cipher, Key, IV, {AAD, CipherText, CipherTag}, false) of202% | ^203204src/jose_server.erl:837:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.205Compile directive 'nowarn_deprecated_catch' can be used to suppress206warnings in selected modules.207% 837| case catch public_key:encrypt_public(PlainText, PublicKey, FutureOptions) of208% | ^209210src/jose_server.erl:840:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.211Compile directive 'nowarn_deprecated_catch' can be used to suppress212warnings in selected modules.213% 840| case catch public_key:decrypt_private(CipherText, PrivateKey, FutureOptions) of214% | ^215216src/jose_server.erl:842:11: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.217Compile directive 'nowarn_deprecated_catch' can be used to suppress218warnings in selected modules.219% 842| case catch public_key:decrypt_private(rsa_ciphertext(Algorithm), PrivateKey, FutureOptions) of220% | ^221222src/jose_server.erl:859:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.223Compile directive 'nowarn_deprecated_catch' can be used to suppress224warnings in selected modules.225% 859| case catch public_key:encrypt_public(PlainText, PublicKey, LegacyOptions) of226% | ^227228src/jose_server.erl:862:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.229Compile directive 'nowarn_deprecated_catch' can be used to suppress230warnings in selected modules.231% 862| case catch public_key:decrypt_private(CipherText, PrivateKey, LegacyOptions) of232% | ^233234src/jose_server.erl:864:11: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.235Compile directive 'nowarn_deprecated_catch' can be used to suppress236warnings in selected modules.237% 864| case catch public_key:decrypt_private(rsa_ciphertext(Algorithm), PrivateKey, LegacyOptions) of238% | ^239240src/jose_server.erl:882:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.241Compile directive 'nowarn_deprecated_catch' can be used to suppress242warnings in selected modules.243% 882| case catch public_key:sign(Message, DigestType, PrivateKey, Options) of244% | ^245246src/jose_server.erl:885:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.247Compile directive 'nowarn_deprecated_catch' can be used to suppress248warnings in selected modules.249% 885| case catch public_key:verify(Message, DigestType, Signature, PublicKey, Options) of250% | ^251252src/jose_server.erl:897:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.253Compile directive 'nowarn_deprecated_catch' can be used to suppress254warnings in selected modules.255% 897| case catch public_key:sign(Message, DigestType, PrivateKey) of256% | ^257258src/jose_server.erl:900:9: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.259Compile directive 'nowarn_deprecated_catch' can be used to suppress260warnings in selected modules.261% 900| case catch public_key:verify(Message, DigestType, Signature, PublicKey) of262% | ^263264src/jwa/jose_jwa.erl:230:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.265Compile directive 'nowarn_deprecated_catch' can be used to suppress266warnings in selected modules.267% 230| case catch block_cipher(Cipher) of268% | ^269270src/jwa/jose_jwa.erl:238:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.271Compile directive 'nowarn_deprecated_catch' can be used to suppress272warnings in selected modules.273% 238| case catch ?MAYBE_START_JOSE(ets:lookup_element(?TAB, chacha20_poly1305_module, 2)) of274% | ^275276src/jwa/jose_jwa.erl:246:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.277Compile directive 'nowarn_deprecated_catch' can be used to suppress278warnings in selected modules.279% 246| case catch rsa_crypt(Padding) of280% | ^281282src/jwa/jose_jwa.erl:254:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.283Compile directive 'nowarn_deprecated_catch' can be used to suppress284warnings in selected modules.285% 254| case catch rsa_sign(Padding) of286% | ^287288src/jwa/jose_jwa.erl:262:7: Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.289Compile directive 'nowarn_deprecated_catch' can be used to suppress290warnings in selected modules.291% 262| case catch ?MAYBE_START_JOSE(ets:lookup_element(?TAB, xchacha20_poly1305_module, 2)) of292% | ^293294Compiling 8 files (.ex)295Generated jose app296==> nerves_compatibility_test297===> Analyzing applications...298===> Compiling ranch299 ┌─ src/ranch_ssl.erl:300 │301 142 │ case ssl:ssl_accept(CSocket, Opts, Timeout) of302 │ ╰── Warning: ssl:ssl_accept/3 is removed; use ssl:handshake/1,2,3 instead303304305 ┌─ src/ranch_conns_sup.erl:306 │307 80 │ catch erlang:send(SupPid, {?MODULE, active_connections, self(), Tag},308 │ ╰── Warning: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.309Compile directive 'nowarn_deprecated_catch' can be used to suppress310warnings in selected modules.311312313==> protobuf314Compiling 20 files (.ex)315 warning: this clause cannot match because a previous clause at line 253 matches the same pattern as this clause316 │317 254 │ defp cal_repeated(_props, %{repeated: true, oneof: true}), do:318 │ ~319 │320 └─ lib/protobuf/dsl.ex:254:8321322warning: pattern matching on 0.0 is equivalent to matching only on +0.0. Instead you must match on +0.0 or -0.0323└─ lib/protobuf/encoder.ex: Protobuf.Encoder.skip_field?/3324325 warning: Logger.warn/1 is deprecated. Use Logger.warning/2 instead326 │327 119 │ val = decode_type_m(type, key, val)328 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~329 │330 └─ lib/protobuf/decoder.ex:119: Protobuf.Decoder.build_struct/3331332 warning: the variable "len" is accessed inside size(...) of a bitstring but it was defined outside of the match. You must precede it with the pin operator333 │334 270 │ <<bytes::bytes-size(len), rest::bits>> = bin335 │ ~336 │337 └─ lib/protobuf/decoder.ex:270:25: Protobuf.Decoder.raw_handle_varint/4338339 warning: Logger.warn/1 is deprecated. Use Logger.warning/2 instead340 │341 303 │ decode_type_m(type, key, v)342 │ ~~~~~~~~~~~~~~~~~~~~~~~~~~~343 │344 └─ lib/protobuf/decoder.ex:303: Protobuf.Decoder.put_packed_field/3345346 warning: System.stacktrace/0 is deprecated. Use __STACKTRACE__ instead347 │348 65 │ stacktrace = System.stacktrace()349 │ ~350 │351 └─ lib/protobuf/encoder.ex:65:27: Protobuf.Encoder.encode_fields/5352353 warning: the following clause is redundant:354355 defp cal_repeated(_props, %{repeated: true, oneof: true})356357 it has type:358359 dynamic(), %{..., oneof: true, repeated: true}360361 previous clauses have already matched on the following types:362363 %{..., map?: true}, term()364 term(), %{..., repeated: true}365366 │367 254 │ defp cal_repeated(_props, %{repeated: true, oneof: true}), do:368 │ ~369 │370 └─ lib/protobuf/dsl.ex:254:8: Protobuf.DSL.cal_repeated/2371372 warning: incompatible types given to Protobuf.Decoder.decode/2:373374 Protobuf.Decoder.decode(data, mod)375376 given types:377378 -dynamic(%{..., __struct__: atom()})-, dynamic(atom())379380 but expected one of:381382 bitstring(), atom()383384 where "data" was given the type:385386 # type: dynamic(%{..., __struct__: atom()})387 # from: lib/protobuf.ex:29:21388 %mod{} = data389390 where "mod" was given the type:391392 # type: dynamic(atom())393 # from: lib/protobuf.ex:29:21394 %mod{} = data395396 type warning found at:397 │398 30 │ Protobuf.Decoder.decode(data, mod)399 │ ~400 │401 └─ lib/protobuf.ex:30:22: Protobuf.decode/1402403Generated protobuf app404==> nerves_compatibility_test405===> Analyzing applications...406===> Compiling cowlib407===> Compiling src/cow_sse.erl failed408 ┌─ src/cow_sse.erl:409 │410 56 │ -> {event, parsed_event(), State} | {more, State}.411 │ ╰── type variable 'State' is only used once (is unbound)412413414** (Mix) Could not compile dependency :cowlib, "/home/nerves/.mix/elixir/1-20-otp-29/rebar3 bare compile --paths /work/proj/_build/x86_64/lib/*/ebin" command failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile cowlib --force", update it with "mix deps.update cowlib" or clean it with "mix deps.clean cowlib"