package-analysis
package-analysis copied to clipboard
Report when a bad library causes an analysis worker to terminate due to a timeouts.
trafficstars
Currently the analysis does not set any timeouts on how long an install and import is allowed to run.
This can allow a bad library to cause an analysis worker to block forever waiting for it to finish.
At a coarse level this is done, as sandboxes use "sleep" as the entrypoint and will exit after about 30m.
However, this does not give us any clear reporting on timeout as the cause of termination.
We should record when a dynamic analysis run terminated due to a timeout.