Bug 2047013 - Allows rating of summarizations#303
Open
boek wants to merge 1 commit into
Open
firefoxci-taskcluster / source-test-mozlint-cargo-audit
succeeded
Jun 23, 2026 in 2m 1s
FirefoxCI (pull_request)
Audit cargo lock files for vulnerable dependencies (Treeherder job)
Details
View task in Taskcluster | View logs in Taskcluster | View task group in Taskcluster
Task Status
Started: 2026-06-23T02:47:46.367Z
Resolved: 2026-06-23T02:49:47.277Z
Task Execution Time: 2 minutes, 910 milliseconds
Task Status: completed
Reason Resolved: completed
TaskId: b7__7CVwR8ip4AtWlL0XaA
RunId: 0
Artifacts
- public/code-review/mozlint.json
- public/fetch/perfherder-data-fetch-content.json
- public/logs/live_backing.log
- public/logs/live.log
- public/profile_resource-usage.json
[taskcluster 2026-06-23T02:47:46.563Z] Worker Type (gecko-t/t-linux-docker-amd) settings:
[taskcluster 2026-06-23T02:47:46.563Z] {
[taskcluster 2026-06-23T02:47:46.563Z] "generic-worker": {
[taskcluster 2026-06-23T02:47:46.563Z] "config": {
[taskcluster 2026-06-23T02:47:46.563Z] "headlessTasks": true
[taskcluster 2026-06-23T02:47:46.563Z] },
[taskcluster 2026-06-23T02:47:46.563Z] "engine": "multiuser",
[taskcluster 2026-06-23T02:47:46.563Z] "go-arch": "amd64",
[taskcluster 2026-06-23T02:47:46.563Z] "go-os": "linux",
[taskcluster 2026-06-23T02:47:46.563Z] "go-version": "go1.26.2",
[taskcluster 2026-06-23T02:47:46.563Z] "release": "https://github.com/taskcluster/taskcluster/releases/tag/v99.2.1",
[taskcluster 2026-06-23T02:47:46.563Z] "revision": "ddb9ce7efdb98ae2d0917b69778e9f3cd125e07f",
[taskcluster 2026-06-23T02:47:46.563Z] "source": "https://github.com/taskcluster/taskcluster/commits/ddb9ce7efdb98ae2d0917b69778e9f3cd125e07f",
[taskcluster 2026-06-23T02:47:46.563Z] "version": "99.2.1"
[taskcluster 2026-06-23T02:47:46.563Z] },
[taskcluster 2026-06-23T02:47:46.563Z] "image": "projects/taskcluster-imaging/global/images/gw-fxci-gcp-l1-2404-amd64-headless-googlecompute-2026-05-04",
[taskcluster 2026-06-23T02:47:46.563Z] "instance-id": "5484745635990359913",
[taskcluster 2026-06-23T02:47:46.563Z] "instance-type": "projects/887720501152/machineTypes/c3d-standard-8-lssd",
[taskcluster 2026-06-23T02:47:46.563Z] "local-ipv4": "10.128.3.165",
[taskcluster 2026-06-23T02:47:46.563Z] "project-id": "fxci-production-level1-workers",
...(47 lines hidden)...
[setup 2026-06-23T02:47:51.042+00:00] MOZ_FETCHES_DIR is /builds/worker/fetches
[setup 2026-06-23T02:47:51.042+00:00] MOZ_PYTHON_HOME is /builds/worker/fetches/python
[setup 2026-06-23T02:47:51.042+00:00] MOZ_UV_HOME is /builds/worker/fetches/uv
[setup 2026-06-23T02:47:51.042+00:00] PIP_CACHE_DIR is /builds/worker/.task-cache/pip
[setup 2026-06-23T02:47:51.042+00:00] UV_CACHE_DIR is /builds/worker/.task-cache/uv
[setup 2026-06-23T02:47:51.042+00:00] GECKO_PATH is /builds/worker/checkouts/gecko
[fetches 2026-06-23T02:47:51.042+00:00] fetching artifacts
[fetches 2026-06-23T02:47:51.042+00:00] executing ['/usr/bin/python3', '-u', '/builds/worker/bin/fetch-content', 'task-artifacts']
attempt 1/5
Downloading https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/Xbd5S1xyRlaaC_2F84_cSQ/artifacts/public/build/python.tar.zst to /builds/worker/fetches/python.tar.zst
attempt 1/5
Downloading https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/LOhPykyUR_CeQZGDb_xnyQ/artifacts/public/build/rustc.tar.zst to /builds/worker/fetches/rustc.tar.zst
Downloading https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/Xbd5S1xyRlaaC_2F84_cSQ/artifacts/public/build/python.tar.zstattempt 1/5
Downloading https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/LKQBsO-0TsqZmomFn5K0ww/artifacts/public/build/uv.tar.zst to /builds/worker/fetches/uv.tar.zstDownloading https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/LOhPykyUR_CeQZGDb_xnyQ/artifacts/public/build/rustc.tar.zst
Downloading https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/LKQBsO-0TsqZmomFn5K0ww/artifacts/public/build/uv.tar.zst
https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/LKQBsO-0TsqZmomFn5K0ww/artifacts/public/build/uv.tar.zst resolved to 12952527 bytes with sha256 e2060f2278780097936c423bc0ccc98a0a487c2bf71a88a1a0a2f9ac964e356e in 0.228s
Verified size of https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/LKQBsO-0TsqZmomFn5K0ww/artifacts/public/build/uv.tar.zst
Extracting /builds/worker/fetches/uv.tar.zst to /builds/worker/fetches
/builds/worker/fetches/uv.tar.zst extracted in 0.070s
Removing /builds/worker/fetches/uv.tar.zst
https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/Xbd5S1xyRlaaC_2F84_cSQ/artifacts/public/build/python.tar.zst resolved to 110452602 bytes with sha256 ccdba4989621d897853e6ecbfe02b177804a2f96cffaa3ca2ed9ba5e015a7e15 in 1.615s
Verified size of https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/Xbd5S1xyRlaaC_2F84_cSQ/artifacts/public/build/python.tar.zst
Extracting /builds/worker/fetches/python.tar.zst to /builds/worker/fetches
/builds/worker/fetches/python.tar.zst extracted in 0.854s
Removing /builds/worker/fetches/python.tar.zst
https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/LOhPykyUR_CeQZGDb_xnyQ/artifacts/public/build/rustc.tar.zst resolved to 335062136 bytes with sha256 1bfe6ccf825baf78572eda930a429cac5a64bc78f5b25fa3582087b76def9054 in 6.968s
Verified size of https://firefox-ci-tc.services.mozilla.com/api/queue/v1/task/LOhPykyUR_CeQZGDb_xnyQ/artifacts/public/build/rustc.tar.zst
Extracting /builds/worker/fetches/rustc.tar.zst to /builds/worker/fetches
/builds/worker/fetches/rustc.tar.zst extracted in 1.882s
Removing /builds/worker/fetches/rustc.tar.zst
PERFHERDER_DATA: {"framework": {"name": "build_metrics"}, "suites": [{"name": "fetch_content", "value": 8.871027813000069, "lowerIsBetter": true, "shouldAlert": false, "subtests": []}]}
[fetches 2026-06-23T02:47:59.994+00:00] finished fetching artifacts
[task 2026-06-23T02:47:59.994+00:00] executing ['bash', '-cx', 'PATH=$MOZ_FETCHES_DIR/rustc/bin/:/builds/worker/.cargo/bin/${PATH:+:$PATH} ./mach lint -v --warnings=soft -l cargo-audit -f treeherder -f json:/builds/worker/mozlint.json .']
[task 2026-06-23T02:47:59.996+00:00] bash: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8): No such file or directory
[task 2026-06-23T02:47:59.996+00:00] + PATH=/builds/worker/fetches/rustc/bin/:/builds/worker/.cargo/bin/:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
[task 2026-06-23T02:47:59.996+00:00] + ./mach lint -v --warnings=soft -l cargo-audit -f treeherder -f json:/builds/worker/mozlint.json .
[task 2026-06-23T02:48:08.091+00:00] Creating default state directory: /builds/worker/.mozbuild
[task 2026-06-23T02:48:08.091+00:00] Creating local state directory: /builds/worker/.mozbuild/srcdirs/gecko-8a5b87fe5d69
[task 2026-06-23T02:48:08.091+00:00] Creating the 'lint' site at /builds/worker/.mozbuild/srcdirs/gecko-8a5b87fe5d69/_virtualenvs/lint
[task 2026-06-23T02:49:15.403+00:00] 02:49:15.403 mozlint (53) | setup for cargo-audit finished in 67.31 seconds
[task 2026-06-23T02:49:30.180+00:00] 02:49:30.180 cargo-audit (6174) | Passing the following paths:
[task 2026-06-23T02:49:30.180+00:00] /builds/worker/checkouts/gecko/Cargo.lock
[task 2026-06-23T02:49:44.941+00:00] 02:49:44.941 cargo-audit (6174) | Finished in 14.77 seconds
[task 2026-06-23T02:49:44.986+00:00] TEST-UNEXPECTED-WARNING | /builds/worker/checkouts/gecko/Cargo.lock:-1:-1 | Crate depends on a unmaintained version of proc-macro-error2.
[task 2026-06-23T02:49:44.986+00:00]
[task 2026-06-23T02:49:44.986+00:00] Advisory:
[task 2026-06-23T02:49:44.986+00:00] proc-macro-error2 is unmaintained
[task 2026-06-23T02:49:44.986+00:00] Package: proc-macro-error2
[task 2026-06-23T02:49:44.986+00:00] ID: RUSTSEC-2026-0173
[task 2026-06-23T02:49:44.986+00:00] Report date: 2026-06-07
[task 2026-06-23T02:49:44.986+00:00] The author of `proc-macro-error2` has [confirmed](https://github.com/GnomedDev/proc-macro-error-2/issues/17#issuecomment-4643215473) that the crate is no longer maintained and recommends that users migrate away from it.
[task 2026-06-23T02:49:44.986+00:00]
[task 2026-06-23T02:49:44.986+00:00] `proc-macro-error2` was originally created as a maintained fork of [`proc-macro-error`](https://crates.io/crates/proc-macro-error) (see [RUSTSEC-2024-0370](https://rustsec.org/advisories/RUSTSEC-2024-0370)). Both the original crate and this fork are now unmaintained.
[task 2026-06-23T02:49:44.986+00:00]
[task 2026-06-23T02:49:44.986+00:00] ## Possible Alternative(s)
[task 2026-06-23T02:49:44.986+00:00]
[task 2026-06-23T02:49:44.986+00:00] - [manyhow](https://crates.io/crates/manyhow)
[task 2026-06-23T02:49:44.986+00:00] - [proc-macro2-diagnostics](https://github.com/SergioBenitez/proc-macro2-diagnostics)
[task 2026-06-23T02:49:44.986+00:00] URL: https://github.com/GnomedDev/proc-macro-error-2/issues/17
[task 2026-06-23T02:49:44.986+00:00] Advisory metadata: {
[task 2026-06-23T02:49:44.986+00:00] "aliases": [],
[task 2026-06-23T02:49:44.986+00:00] "related": [],
[task 2026-06-23T02:49:44.986+00:00] "collection": "crates",
[task 2026-06-23T02:49:44.986+00:00] "categories": [],
[task 2026-06-23T02:49:44.986+00:00] "keywords": [],
[task 2026-06-23T02:49:44.986+00:00] "informational": "unmaintained",
[task 2026-06-23T02:49:44.986+00:00] "references": [],
[task 2026-06-23T02:49:44.986+00:00] "source": null,
[task 2026-06-23T02:49:44.986+00:00] "withdrawn": null,
[task 2026-06-23T02:49:44.986+00:00] "license": "CC0-1.0"
[task 2026-06-23T02:49:44.986+00:00] }
[task 2026-06-23T02:49:44.986+00:00]
[task 2026-06-23T02:49:44.986+00:00] Package info: {
[task 2026-06-23T02:49:44.986+00:00] "name": "proc-macro-error2",
[task 2026-06-23T02:49:44.986+00:00] "version": "2.0.1",
[task 2026-06-23T02:49:44.986+00:00] "source": "registry+https://github.com/rust-lang/crates.io-index",
[task 2026-06-23T02:49:44.986+00:00] "checksum": "11ec05c52be0a07b08061f7dd003e7d7092e0472bc731b4af7bb1ef876109802",
[task 2026-06-23T02:49:44.986+00:00] "dependencies": [
[task 2026-06-23T02:49:44.986+00:00] {
[task 2026-06-23T02:49:44.986+00:00] "name": "proc-macro-error-attr2",
[task 2026-06-23T02:49:44.986+00:00] "version": "2.0.0",
[task 2026-06-23T02:49:44.986+00:00] "source": "registry+https://github.com/rust-lang/crates.io-index"
[task 2026-06-23T02:49:44.986+00:00] },
[task 2026-06-23T02:49:44.986+00:00] {
[task 2026-06-23T02:49:44.986+00:00] "name": "proc-macro2",
[task 2026-06-23T02:49:44.986+00:00] "version": "1.0.101",
[task 2026-06-23T02:49:44.986+00:00] "source": "registry+https://github.com/rust-lang/crates.io-index"
[task 2026-06-23T02:49:44.986+00:00] },
[task 2026-06-23T02:49:44.986+00:00] {
[task 2026-06-23T02:49:44.986+00:00] "name": "quote",
[task 2026-06-23T02:49:44.986+00:00] "version": "1.0.40",
[task 2026-06-23T02:49:44.986+00:00] "source": "registry+https://github.com/rust-lang/crates.io-index"
[task 2026-06-23T02:49:44.986+00:00] },
[task 2026-06-23T02:49:44.986+00:00] {
[task 2026-06-23T02:49:44.986+00:00] "name": "syn",
[task 2026-06-23T02:49:44.986+00:00] "version": "2.0.106",
[task 2026-06-23T02:49:44.986+00:00] "source": "registry+https://github.com/rust-lang/crates.io-index"
[task 2026-06-23T02:49:44.986+00:00] }
[task 2026-06-23T02:49:44.986+00:00] ],
[task 2026-06-23T02:49:44.986+00:00] "replace": null
[task 2026-06-23T02:49:44.986+00:00] } (cargo-audit)
[task 2026-06-23T02:49:44.986+00:00] TEST-UNEXPECTED-WARNING | /builds/worker/checkouts/gecko/Cargo.lock:-1:-1 | Crate depends on a unsound version of memmap2.
[task 2026-06-23T02:49:44.986+00:00]
[task 2026-06-23T02:49:44.986+00:00] Advisory:
[task 2026-06-23T02:49:44.986+00:00] Unchecked pointer offset in crate `memmap2`
[task 2026-06-23T02:49:44.986+00:00] Package: memmap2
[task 2026-06-23T02:49:44.986+00:00] ID: RUSTSEC-2026-0186
[task 2026-06-23T02:49:44.986+00:00] Report date: 2026-06-20
[task 2026-06-23T02:49:44.986+00:00] Affected versionf of `memmap2` did not perform enough validation on the `offset` and `len` parameters of
[task 2026-06-23T02:49:44.986+00:00] `Mmap::[unchecked_]advise_range()`,
[task 2026-06-23T02:49:44.986+00:00] `MmapMut::[unchecked_]advise_ranage()`
[task 2026-06-23T02:49:44.986+00:00] and `MmapMut::flush[_async]_range()`.
[task 2026-06-23T02:49:44.986+00:00]
[task 2026-06-23T02:49:44.986+00:00] This can cause undefined behavior due to invalid values being passed to [`pointer::offset()`] and [`pointer::add()`]
[task 2026-06-23T02:49:44.986+00:00] when passing an out-of-bounds range to any of the affected functions.
[task 2026-06-23T02:49:44.986+00:00]
[task 2026-06-23T02:49:44.986+00:00] The flaw was corrected in commit [`cee7cf0`] and released in version `0.9.11`.
[task 2026-06-23T02:49:44.987+00:00]
[task 2026-06-23T02:49:44.987+00:00] The invalid pointer is not dereferenced,
[task 2026-06-23T02:49:44.987+00:00] but it is passed to the `madvise` and `msync` syscalls and their Windows equivalents.
[task 2026-06-23T02:49:44.987+00:00]
[task 2026-06-23T02:49:44.987+00:00] [`pointer::offset()`]: https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.offset-1
[task 2026-06-23T02:49:44.987+00:00] [`pointer::add()`]: https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.add-1
[task 2026-06-23T02:49:44.987+00:00] [`cee7cf0`] https://github.com/RazrFalcon/memmap2-rs/pull/170/changes/cee7cf03a9ee095982a3c37b7aac8e3f68f1a00c
[task 2026-06-23T02:49:44.987+00:00] URL: https://github.com/RazrFalcon/memmap2-rs/issues/169
[task 2026-06-23T02:49:44.987+00:00] Patched versions: [
[task 2026-06-23T02:49:44.987+00:00] ">=0.9.11"
[task 2026-06-23T02:49:44.987+00:00] ]
[task 2026-06-23T02:49:44.987+00:00] Affected functions: {
[task 2026-06-23T02:49:44.987+00:00] "memmap2::Mmap::advise_range": [
[task 2026-06-23T02:49:44.987+00:00] ">=0.5.9",
[task 2026-06-23T02:49:44.987+00:00] "<0.9.11"
[task 2026-06-23T02:49:44.987+00:00] ],
[task 2026-06-23T02:49:44.987+00:00] "memmap2::Mmap::unchecked_advise_range": [
[task 2026-06-23T02:49:44.987+00:00] ">=0.8.0",
[task 2026-06-23T02:49:44.987+00:00] "<0.9.11"
[task 2026-06-23T02:49:44.987+00:00] ],
[task 2026-06-23T02:49:44.987+00:00] "memmap2::MmapMut::advise_range": [
[task 2026-06-23T02:49:44.987+00:00] ">=0.5.9",
[task 2026-06-23T02:49:44.987+00:00] "<0.9.11"
[task 2026-06-23T02:49:44.987+00:00] ],
[task 2026-06-23T02:49:44.987+00:00] "memmap2::MmapMut::flush_async_range": [
[task 2026-06-23T02:49:44.987+00:00] "<0.9.11"
[task 2026-06-23T02:49:44.987+00:00] ],
[task 2026-06-23T02:49:44.987+00:00] "memmap2::MmapMut::flush_range": [
[task 2026-06-23T02:49:44.987+00:00] "<0.9.11"
[task 2026-06-23T02:49:44.987+00:00] ],
[task 2026-06-23T02:49:44.987+00:00] "memmap2::MmapMut::unchecked_advise_range": [
[task 2026-06-23T02:49:44.987+00:00] ">=0.8.0",
[task 2026-06-23T02:49:44.987+00:00] "<0.9.11"
[task 2026-06-23T02:49:44.987+00:00] ]
[task 2026-06-23T02:49:44.987+00:00] }
[task 2026-06-23T02:49:44.987+00:00] Advisory metadata: {
[task 2026-06-23T02:49:44.987+00:00] "aliases": [],
[task 2026-06-23T02:49:44.987+00:00] "related": [],
[task 2026-06-23T02:49:44.987+00:00] "collection": "crates",
[task 2026-06-23T02:49:44.987+00:00] "categories": [],
[task 2026-06-23T02:49:44.987+00:00] "keywords": [
[task 2026-06-23T02:49:44.987+00:00] "pointer-arithmetic",
[task 2026-06-23T02:49:44.987+00:00] "out-of-bounds"
[task 2026-06-23T02:49:44.987+00:00] ],
[task 2026-06-23T02:49:44.987+00:00] "informational": "unsound",
[task 2026-06-23T02:49:44.987+00:00] "references": [
[task 2026-06-23T02:49:44.987+00:00] "https://github.com/RazrFalcon/memmap2-rs/pull/170"
[task 2026-06-23T02:49:44.987+00:00] ],
[task 2026-06-23T02:49:44.987+00:00] "source": null,
[task 2026-06-23T02:49:44.987+00:00] "withdrawn": null,
[task 2026-06-23T02:49:44.987+00:00] "license": "CC0-1.0"
[task 2026-06-23T02:49:44.987+00:00] }
[task 2026-06-23T02:49:44.987+00:00]
[task 2026-06-23T02:49:44.987+00:00] Package info: {
[task 2026-06-23T02:49:44.987+00:00] "name": "memmap2",
[task 2026-06-23T02:49:44.987+00:00] "version": "0.9.3",
[task 2026-06-23T02:49:44.987+00:00] "source": "registry+https://github.com/rust-lang/crates.io-index",
[task 2026-06-23T02:49:44.987+00:00] "checksum": "45fd3a57831bf88bc63f8cebc0cf956116276e97fef3966103e96416209f7c92",
[task 2026-06-23T02:49:44.987+00:00] "dependencies": [
[task 2026-06-23T02:49:44.987+00:00] {
[task 2026-06-23T02:49:44.987+00:00] "name": "libc",
[task 2026-06-23T02:49:44.987+00:00] "version": "0.2.183",
[task 2026-06-23T02:49:44.987+00:00] "source": "registry+https://github.com/rust-lang/crates.io-index"
[task 2026-06-23T02:49:44.987+00:00] }
[task 2026-06-23T02:49:44.987+00:00] ],
[task 2026-06-23T02:49:44.987+00:00] "replace": null
[task 2026-06-23T02:49:44.987+00:00] } (cargo-audit)
[taskcluster 2026-06-23T02:49:45.406Z] Exit Code: 0
[taskcluster 2026-06-23T02:49:45.406Z] User Time: 19.034ms
[taskcluster 2026-06-23T02:49:45.406Z] Kernel Time: 10.382ms
[taskcluster 2026-06-23T02:49:45.406Z] Wall Time: 1m57.934929197s
[taskcluster 2026-06-23T02:49:45.406Z] Average Available System Memory: 29.48 GiB
[taskcluster 2026-06-23T02:49:45.406Z] Average System Memory Used: 1.86 GiB
[taskcluster 2026-06-23T02:49:45.406Z] Peak System Memory Used: 2.90 GiB
[taskcluster 2026-06-23T02:49:45.406Z] Total System Memory: 31.34 GiB
[taskcluster 2026-06-23T02:49:45.406Z] Result: SUCCEEDED
[taskcluster 2026-06-23T02:49:45.406Z] === Task Finished ===
[taskcluster 2026-06-23T02:49:45.406Z] Task Duration: 1m57.935377967s
[taskcluster 2026-06-23T02:49:46.866Z] [mounts] Preserving cache: Moving "/home/task_178218258088548/cache0" to "/home/generic-worker/caches/LFBd5O-bTEO2mb5WquckHw"
[taskcluster 2026-06-23T02:49:46.866Z] [mounts] Preserving cache: Moving "/home/task_178218258088548/cache1" to "/home/generic-worker/caches/YulcXxEGQAmWyAncmULkhA"
[taskcluster 2026-06-23T02:49:46.866Z] [mounts] Preserving cache: Moving "/home/task_178218258088548/cache2" to "/home/generic-worker/caches/ZcUkUtVPSUGGxvcBSQZibA"
Loading