os icon indicating copy to clipboard operation
os copied to clipboard

protobuf/3.28.2 package update

Open octo-sts[bot] opened this issue 1 year ago • 5 comments

octo-sts[bot] avatar Sep 18 '24 21:09 octo-sts[bot]

Open AI suggestions to solve the build error:

The error message is: "Get \"./packages/apk-configuration\": unsupported protocol scheme \"\""

1. Verify the URL in your code or configuration file.
2. Ensure the URL includes a valid protocol (e.g., "http://", "https://").
3. Check for any environment variables or configuration settings that might be affecting the URL.
4. Correct the URL to include the appropriate protocol scheme.

octo-sts[bot] avatar Sep 18 '24 21:09 octo-sts[bot]

Open AI suggestions to solve the build error:

The error message is: "protoc: error while loading shared libraries: libutf8_validity.so: cannot open shared object file: No such file or directory"

1. Verify if `libutf8_validity.so` is installed.
2. Install the library using your package manager (e.g., `sudo apt-get install libutf8-validity-dev`).
3. Ensure the library path is in your `LD_LIBRARY_PATH`.
4. Run `ldconfig` to update the shared library cache.
5. Retry running `protoc`.

octo-sts[bot] avatar Sep 18 '24 23:09 octo-sts[bot]

Open AI suggestions to solve the build error:

The error message is: "protoc: error while loading shared libraries: libutf8_validity.so: cannot open shared object file: No such file or directory"

1. Verify if `libutf8_validity.so` is installed.
2. Install the library if missing (e.g., `sudo apt-get install libutf8-validity-dev`).
3. Add the library path to `LD_LIBRARY_PATH`.
4. Run `ldconfig` to update the cache.
5. Retry running `protoc`.

octo-sts[bot] avatar Sep 20 '24 16:09 octo-sts[bot]

Open AI suggestions to solve the build error:

The error in the log indicates that the shared library `libutf8_validity.so` is missing. To resolve this issue, you can:

1. Check if `libutf8_validity.so` is installed on your system.
2. If it's missing, install it using a package manager, for example: `apt-get install libutf8-validity-dev`.
3. Add the library's path to the `LD_LIBRARY_PATH` environment variable.
4. Run `ldconfig` to refresh the library cache.
5. Retry running the `protoc` command.

octo-sts[bot] avatar Oct 11 '24 20:10 octo-sts[bot]

Open AI suggestions to solve the build error:

The error in the log is: "protoc: error while loading shared libraries: libutf8_validity.so: cannot open shared object file: No such file or directory". 

To resolve this issue, you can:
1. Verify if `libutf8_validity.so` is installed on your system.
2. If it's missing, install it using your package manager.
3. Add the library path to the `LD_LIBRARY_PATH` environment variable.
4. Run `ldconfig` to update the library cache.
5. Try running `protoc` again.

octo-sts[bot] avatar Oct 11 '24 21:10 octo-sts[bot]

Gen AI suggestions to solve the build error:

The error in the log indicates that the shared library `libutf8_validity.so` is missing. Here are the steps to resolve it:

1. Verify if `libutf8_validity.so` is installed on your system.
2. If it's missing, install it using your package manager.
3. Ensure that the library path is included in the `LD_LIBRARY_PATH` environment variable.
4. Run `ldconfig` to update the library cache.
5. Retry running the `protoc` command.

octo-sts[bot] avatar Oct 15 '24 18:10 octo-sts[bot]

Package protobuf: Click to expand/collapse

Package protobuf: Added: /usr/lib/libutf8_range.so Added: /usr/lib/libutf8_validity.so

Package protobuf-dev: Click to expand/collapse

Package protobuf-dev: Added: /usr/include/google/protobuf/compiler/rust/accessors/default_value.h Modified: /usr/include/google/protobuf/any.pb.h Modified: /usr/include/google/protobuf/api.pb.h Modified: /usr/include/google/protobuf/arena.h Modified: /usr/include/google/protobuf/arena_align.h Modified: /usr/include/google/protobuf/arena_cleanup.h Modified: /usr/include/google/protobuf/compiler/command_line_interface.h Modified: /usr/include/google/protobuf/compiler/cpp/field.h Modified: /usr/include/google/protobuf/compiler/cpp/generator.h Modified: /usr/include/google/protobuf/compiler/cpp/helpers.h Modified: /usr/include/google/protobuf/compiler/cpp/message.h Modified: /usr/include/google/protobuf/compiler/csharp/csharp_helpers.h Modified: /usr/include/google/protobuf/compiler/java/doc_comment.h Modified: /usr/include/google/protobuf/compiler/java/field_common.h Modified: /usr/include/google/protobuf/compiler/java/full/enum.h Modified: /usr/include/google/protobuf/compiler/java/generator.h Modified: /usr/include/google/protobuf/compiler/java/helpers.h Modified: /usr/include/google/protobuf/compiler/java/internal_helpers.h Modified: /usr/include/google/protobuf/compiler/java/java_features.pb.h Modified: /usr/include/google/protobuf/compiler/java/kotlin_generator.h Modified: /usr/include/google/protobuf/compiler/java/names.h Modified: /usr/include/google/protobuf/compiler/java/options.h Modified: /usr/include/google/protobuf/compiler/php/names.h Modified: /usr/include/google/protobuf/compiler/php/php_generator.h Modified: /usr/include/google/protobuf/compiler/plugin.pb.h Modified: /usr/include/google/protobuf/compiler/rust/naming.h Modified: /usr/include/google/protobuf/compiler/versions.h Modified: /usr/include/google/protobuf/cpp_edition_defaults.h Modified: /usr/include/google/protobuf/cpp_features.pb.h Modified: /usr/include/google/protobuf/cpp_features.proto Modified: /usr/include/google/protobuf/descriptor.h Modified: /usr/include/google/protobuf/descriptor.pb.h Modified: /usr/include/google/protobuf/descriptor.proto Modified: /usr/include/google/protobuf/descriptor_database.h Modified: /usr/include/google/protobuf/descriptor_lite.h Modified: /usr/include/google/protobuf/duration.pb.h Modified: /usr/include/google/protobuf/dynamic_message.h Modified: /usr/include/google/protobuf/empty.pb.h Modified: /usr/include/google/protobuf/endian.h Modified: /usr/include/google/protobuf/field_mask.pb.h Modified: /usr/include/google/protobuf/generated_message_bases.h Modified: /usr/include/google/protobuf/generated_message_tctable_decl.h Modified: /usr/include/google/protobuf/generated_message_tctable_impl.h Modified: /usr/include/google/protobuf/generated_message_util.h Modified: /usr/include/google/protobuf/implicit_weak_message.h Modified: /usr/include/google/protobuf/io/coded_stream.h Modified: /usr/include/google/protobuf/io/printer.h Modified: /usr/include/google/protobuf/io/zero_copy_stream_impl_lite.h Modified: /usr/include/google/protobuf/map.h Modified: /usr/include/google/protobuf/map_entry.h Modified: /usr/include/google/protobuf/map_field.h Modified: /usr/include/google/protobuf/message.h Modified: /usr/include/google/protobuf/message_lite.h Modified: /usr/include/google/protobuf/parse_context.h Modified: /usr/include/google/protobuf/port.h Modified: /usr/include/google/protobuf/port_def.inc Modified: /usr/include/google/protobuf/port_undef.inc Modified: /usr/include/google/protobuf/reflection_visit_field_info.h Modified: /usr/include/google/protobuf/reflection_visit_fields.h Modified: /usr/include/google/protobuf/repeated_field.h Modified: /usr/include/google/protobuf/repeated_ptr_field.h Modified: /usr/include/google/protobuf/runtime_version.h Modified: /usr/include/google/protobuf/serial_arena.h Modified: /usr/include/google/protobuf/source_context.pb.h Modified: /usr/include/google/protobuf/struct.pb.h Modified: /usr/include/google/protobuf/stubs/common.h Modified: /usr/include/google/protobuf/text_format.h Modified: /usr/include/google/protobuf/thread_safe_arena.h Modified: /usr/include/google/protobuf/timestamp.pb.h Modified: /usr/include/google/protobuf/type.pb.h Modified: /usr/include/google/protobuf/util/message_differencer.h Modified: /usr/include/google/protobuf/wire_format.h Modified: /usr/include/google/protobuf/wrappers.pb.h Modified: /usr/include/java/core/src/main/resources/google/protobuf/java_features.proto Modified: /usr/lib/cmake/protobuf/protobuf-config-version.cmake Modified: /usr/lib/cmake/protobuf/protobuf-module.cmake Modified: /usr/lib/cmake/protobuf/protobuf-targets-release.cmake Modified: /usr/lib/cmake/utf8_range/utf8_range-targets-release.cmake Modified: /usr/lib/cmake/utf8_range/utf8_range-targets.cmake Modified: /usr/lib/pkgconfig/protobuf-lite.pc Modified: /usr/lib/pkgconfig/protobuf.pc Deleted: /usr/include/google/protobuf/compiler/rust/accessors/helpers.h Deleted: /usr/lib/libutf8_range.a Deleted: /usr/lib/libutf8_validity.a

Package protoc: Click to expand/collapse

Package protoc: Added: /usr/bin/protoc-28.2.0 Deleted: /usr/bin/protoc-27.4.0

Package libprotoc: Click to expand/collapse

Package libprotoc: Added: /usr/lib/libprotoc.so.28.2.0 Deleted: /usr/lib/libprotoc.so.27.4.0

Package libprotobuf: Click to expand/collapse

Package libprotobuf: Added: /usr/lib/libprotobuf.so.28.2.0 Deleted: /usr/lib/libprotobuf.so.27.4.0

Package libprotobuf-lite: Click to expand/collapse

Package libprotobuf-lite: Added: /usr/lib/libprotobuf-lite.so.28.2.0 Deleted: /usr/lib/libprotobuf-lite.so.27.4.0

malcontent found differences: Click to expand/collapse

Deleted: protobuf-dev/usr/include/google/protobuf/compiler/rust/accessors/helpers.h [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://developers.google.com/open-source/licenses/bsd

Deleted: protoc/var/lib/db/sbom/protoc-3.27.4-r1.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/e650bcb39e2f85cab0f9efc7ad96

Deleted: protobuf/var/lib/db/sbom/protobuf-3.27.4-r1.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/e2fcf8ef519a2a0e7f3c56b3657a

Deleted: libprotobuf/var/lib/db/sbom/libprotobuf-3.27.4-r1.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/6e3441266a9185a5c9c93a61cceb

Deleted: libprotobuf-lite/var/lib/db/sbom/libprotobuf-lite-3.27.4-r1.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/14487215848aa5e74d47fdb3b251

Deleted: protobuf-dev/var/lib/db/sbom/protobuf-dev-3.27.4-r1.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/dc8c66b19f90c3e6329fff638134

Deleted: libprotoc/usr/lib/libprotoc.so.27.4.0 [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM exec/program executes external programs execvp
-MEDIUM procfs/self/exe gets executable associated to this process /proc/self/exe
-LOW encoding/base64 Supports base64 encoded strings base64
-LOW env/USER Looks up the USER name of the current user USER
getenv
-LOW exec/program/background wait for process to exit waitpid
-LOW fs/directory/create creates directories mkdir
-LOW fs/directory/remove Uses libc functions to remove directories rmdir
-LOW fs/file/read reads files ReadFile
-LOW fs/link/read read value of a symbolic link readlink
-LOW process/thread_local_storage Uses glibc thread local storage __tls_get_addr
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/protocolbuffers/protobuf/blob/main/java/lite.md
https://medium.com/ios-os-x-development/categories-in-static-libraries-78
https://protobuf.dev/editions/overview/
https://protobuf.dev/support/cross-version-runtime-guarantee/
-LOW ref/words/plugin references a 'plugin' First file chunk returned by plugin did not
PluginProtosZ
This compiler does not support plugins
in which case the given plugin name
pluginpb
sent unparseable request to plugin
users should use the Java Lite plugin instead

Deleted: libprotobuf-lite/usr/lib/libprotobuf-lite.so.27.4.0 [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW process/thread_local_storage Uses glibc thread local storage __tls_get_addr

Deleted: libprotobuf/usr/lib/libprotobuf.so.27.4.0 [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW compression/gzip works with gzip files gzip
-LOW encoding/base64 Supports base64 encoded strings base64
-LOW process/thread_local_storage Uses glibc thread local storage __tls_get_addr
-LOW ref/site/url contains embedded HTTPS URLs https://developers.google.com/protocol-buffers/docs/style

Added: libprotoc/usr/lib/libprotoc.so.28.2.0 [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM exec/program executes external programs execvp
+MEDIUM procfs/self/exe gets executable associated to this process /proc/self/exe
+LOW encoding/base64 Supports base64 encoded strings base64
+LOW env/USER Looks up the USER name of the current user USER
getenv
+LOW exec/program/background wait for process to exit waitpid
+LOW fs/directory/create creates directories mkdir
+LOW fs/directory/remove Uses libc functions to remove directories rmdir
+LOW fs/file/read reads files ReadFile
+LOW fs/link/read read value of a symbolic link readlink
+LOW process/thread_local_storage Uses glibc thread local storage __tls_get_addr
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/protocolbuffers/protobuf/blob/main/java/lite.md
https://github.com/protocolbuffers/protobuf/issues
https://medium.com/ios-os-x-development/categories-in-static-libraries-78
https://protobuf.dev/editions/overview/
https://protobuf.dev/support/cross-version-runtime-guarantee/
+LOW ref/words/plugin references a 'plugin' First file chunk returned by plugin did not
PluginProtosZ
This compiler does not support plugins
in which case the given plugin name
pluginpb
sent unparseable request to plugin
users should use the Java Lite plugin instead

Added: libprotobuf-lite/usr/lib/libprotobuf-lite.so.28.2.0 [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW process/thread_local_storage Uses glibc thread local storage __tls_get_addr

Added: libprotobuf-lite/var/lib/db/sbom/libprotobuf-lite-3.28.2-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/c760c284ec0e1d7cb828055809d1

Added: protobuf/var/lib/db/sbom/protobuf-3.28.2-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/93f5cef6dca71241fce74535f13b

Added: libprotobuf/usr/lib/libprotobuf.so.28.2.0 [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW compression/gzip works with gzip files gzip
+LOW encoding/base64 Supports base64 encoded strings base64
+LOW process/thread_local_storage Uses glibc thread local storage __tls_get_addr
+LOW ref/site/url contains embedded HTTPS URLs https://developers.google.com/protocol-buffers/docs/style

Added: protobuf-dev/var/lib/db/sbom/protobuf-dev-3.28.2-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/3e8b7706df8ae0ef38cadf4d8bdd

Added: protoc/var/lib/db/sbom/protoc-3.28.2-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/bce711cc5db7eaf9bf0ed271ed81

Added: protobuf-dev/usr/include/google/protobuf/compiler/rust/accessors/default_value.h [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://developers.google.com/open-source/licenses/bsd

Changed: /tmp/wolfictl-apk-2805304414/protobuf-dev/usr/include/google/protobuf/descriptor.pb.h

Changed: /tmp/wolfictl-apk-2805304414/protobuf-dev/usr/include/google/protobuf/compiler/plugin.pb.h

Moved: libprotoc/var/lib/db/sbom/libprotoc-3.27.4-r1.spdx.json -> /tmp/wolfictl-apk-2805304414/libprotobuf/var/lib/db/sbom/libprotobuf-3.28.2-r0.spdx.json (similarity: 0.91)

Moved: libprotoc/var/lib/db/sbom/libprotoc-3.27.4-r1.spdx.json -> /tmp/wolfictl-apk-2805304414/libprotoc/var/lib/db/sbom/libprotoc-3.28.2-r0.spdx.json (similarity: 0.97)

github-actions[bot] avatar Oct 15 '24 18:10 github-actions[bot]

Gen AI suggestions to solve the build error:

The error message is: "No error message found in the log."

Suggestions on how to fix the error:
1. Ensure the log file path is correct.
2. Verify the log file contains error messages.
3. Check if the log level is set to capture errors.
4. Confirm the application is running and generating logs.

octo-sts[bot] avatar Oct 15 '24 18:10 octo-sts[bot]

Package protobuf: Click to expand/collapse

Package protobuf: Added: /usr/lib/libutf8_range.so Added: /usr/lib/libutf8_validity.so

Package protobuf-dev: Click to expand/collapse

Package protobuf-dev: Added: /usr/include/google/protobuf/compiler/rust/accessors/default_value.h Modified: /usr/include/google/protobuf/any.pb.h Modified: /usr/include/google/protobuf/api.pb.h Modified: /usr/include/google/protobuf/arena.h Modified: /usr/include/google/protobuf/arena_align.h Modified: /usr/include/google/protobuf/arena_cleanup.h Modified: /usr/include/google/protobuf/compiler/command_line_interface.h Modified: /usr/include/google/protobuf/compiler/cpp/field.h Modified: /usr/include/google/protobuf/compiler/cpp/generator.h Modified: /usr/include/google/protobuf/compiler/cpp/helpers.h Modified: /usr/include/google/protobuf/compiler/cpp/message.h Modified: /usr/include/google/protobuf/compiler/csharp/csharp_helpers.h Modified: /usr/include/google/protobuf/compiler/java/doc_comment.h Modified: /usr/include/google/protobuf/compiler/java/field_common.h Modified: /usr/include/google/protobuf/compiler/java/full/enum.h Modified: /usr/include/google/protobuf/compiler/java/generator.h Modified: /usr/include/google/protobuf/compiler/java/helpers.h Modified: /usr/include/google/protobuf/compiler/java/internal_helpers.h Modified: /usr/include/google/protobuf/compiler/java/java_features.pb.h Modified: /usr/include/google/protobuf/compiler/java/kotlin_generator.h Modified: /usr/include/google/protobuf/compiler/java/names.h Modified: /usr/include/google/protobuf/compiler/java/options.h Modified: /usr/include/google/protobuf/compiler/php/names.h Modified: /usr/include/google/protobuf/compiler/php/php_generator.h Modified: /usr/include/google/protobuf/compiler/plugin.pb.h Modified: /usr/include/google/protobuf/compiler/rust/naming.h Modified: /usr/include/google/protobuf/compiler/versions.h Modified: /usr/include/google/protobuf/cpp_edition_defaults.h Modified: /usr/include/google/protobuf/cpp_features.pb.h Modified: /usr/include/google/protobuf/cpp_features.proto Modified: /usr/include/google/protobuf/descriptor.h Modified: /usr/include/google/protobuf/descriptor.pb.h Modified: /usr/include/google/protobuf/descriptor.proto Modified: /usr/include/google/protobuf/descriptor_database.h Modified: /usr/include/google/protobuf/descriptor_lite.h Modified: /usr/include/google/protobuf/duration.pb.h Modified: /usr/include/google/protobuf/dynamic_message.h Modified: /usr/include/google/protobuf/empty.pb.h Modified: /usr/include/google/protobuf/endian.h Modified: /usr/include/google/protobuf/field_mask.pb.h Modified: /usr/include/google/protobuf/generated_message_bases.h Modified: /usr/include/google/protobuf/generated_message_tctable_decl.h Modified: /usr/include/google/protobuf/generated_message_tctable_impl.h Modified: /usr/include/google/protobuf/generated_message_util.h Modified: /usr/include/google/protobuf/implicit_weak_message.h Modified: /usr/include/google/protobuf/io/coded_stream.h Modified: /usr/include/google/protobuf/io/printer.h Modified: /usr/include/google/protobuf/io/zero_copy_stream_impl_lite.h Modified: /usr/include/google/protobuf/map.h Modified: /usr/include/google/protobuf/map_entry.h Modified: /usr/include/google/protobuf/map_field.h Modified: /usr/include/google/protobuf/message.h Modified: /usr/include/google/protobuf/message_lite.h Modified: /usr/include/google/protobuf/parse_context.h Modified: /usr/include/google/protobuf/port.h Modified: /usr/include/google/protobuf/port_def.inc Modified: /usr/include/google/protobuf/port_undef.inc Modified: /usr/include/google/protobuf/reflection_visit_field_info.h Modified: /usr/include/google/protobuf/reflection_visit_fields.h Modified: /usr/include/google/protobuf/repeated_field.h Modified: /usr/include/google/protobuf/repeated_ptr_field.h Modified: /usr/include/google/protobuf/runtime_version.h Modified: /usr/include/google/protobuf/serial_arena.h Modified: /usr/include/google/protobuf/source_context.pb.h Modified: /usr/include/google/protobuf/struct.pb.h Modified: /usr/include/google/protobuf/stubs/common.h Modified: /usr/include/google/protobuf/text_format.h Modified: /usr/include/google/protobuf/thread_safe_arena.h Modified: /usr/include/google/protobuf/timestamp.pb.h Modified: /usr/include/google/protobuf/type.pb.h Modified: /usr/include/google/protobuf/util/message_differencer.h Modified: /usr/include/google/protobuf/wire_format.h Modified: /usr/include/google/protobuf/wrappers.pb.h Modified: /usr/include/java/core/src/main/resources/google/protobuf/java_features.proto Modified: /usr/lib/cmake/protobuf/protobuf-config-version.cmake Modified: /usr/lib/cmake/protobuf/protobuf-module.cmake Modified: /usr/lib/cmake/protobuf/protobuf-targets-release.cmake Modified: /usr/lib/cmake/utf8_range/utf8_range-targets-release.cmake Modified: /usr/lib/cmake/utf8_range/utf8_range-targets.cmake Modified: /usr/lib/pkgconfig/protobuf-lite.pc Modified: /usr/lib/pkgconfig/protobuf.pc Deleted: /usr/include/google/protobuf/compiler/rust/accessors/helpers.h Deleted: /usr/lib/libutf8_range.a Deleted: /usr/lib/libutf8_validity.a

Package protoc: Click to expand/collapse

Package protoc: Added: /usr/bin/protoc-28.2.0 Deleted: /usr/bin/protoc-27.4.0

Package libprotoc: Click to expand/collapse

Package libprotoc: Added: /usr/lib/libprotoc.so.28.2.0 Deleted: /usr/lib/libprotoc.so.27.4.0

Package libprotobuf: Click to expand/collapse

Package libprotobuf: Added: /usr/lib/libprotobuf.so.28.2.0 Deleted: /usr/lib/libprotobuf.so.27.4.0

Package libprotobuf-lite: Click to expand/collapse

Package libprotobuf-lite: Added: /usr/lib/libprotobuf-lite.so.28.2.0 Deleted: /usr/lib/libprotobuf-lite.so.27.4.0

malcontent found differences: Click to expand/collapse

Deleted: libprotobuf-lite/usr/lib/libprotobuf-lite.so.27.4.0 [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW process/thread_local_storage Uses glibc thread local storage __tls_get_addr

Deleted: protoc/var/lib/db/sbom/protoc-3.27.4-r1.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/e650bcb39e2f85cab0f9efc7ad96

Deleted: protobuf/var/lib/db/sbom/protobuf-3.27.4-r1.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/e2fcf8ef519a2a0e7f3c56b3657a

Deleted: libprotobuf/usr/lib/libprotobuf.so.27.4.0 [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW compression/gzip works with gzip files gzip
-LOW encoding/base64 Supports base64 encoded strings base64
-LOW process/thread_local_storage Uses glibc thread local storage __tls_get_addr
-LOW ref/site/url contains embedded HTTPS URLs https://developers.google.com/protocol-buffers/docs/style

Deleted: libprotobuf-lite/var/lib/db/sbom/libprotobuf-lite-3.27.4-r1.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/14487215848aa5e74d47fdb3b251

Deleted: protobuf-dev/var/lib/db/sbom/protobuf-dev-3.27.4-r1.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/dc8c66b19f90c3e6329fff638134

Deleted: protobuf-dev/usr/include/google/protobuf/compiler/rust/accessors/helpers.h [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://developers.google.com/open-source/licenses/bsd

Deleted: libprotoc/usr/lib/libprotoc.so.27.4.0 [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM exec/program executes external programs execvp
-MEDIUM procfs/self/exe gets executable associated to this process /proc/self/exe
-LOW encoding/base64 Supports base64 encoded strings base64
-LOW env/USER Looks up the USER name of the current user USER
getenv
-LOW exec/program/background wait for process to exit waitpid
-LOW fs/directory/create creates directories mkdir
-LOW fs/directory/remove Uses libc functions to remove directories rmdir
-LOW fs/file/read reads files ReadFile
-LOW fs/link/read read value of a symbolic link readlink
-LOW process/thread_local_storage Uses glibc thread local storage __tls_get_addr
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/protocolbuffers/protobuf/blob/main/java/lite.md
https://medium.com/ios-os-x-development/categories-in-static-libraries-78
https://protobuf.dev/editions/overview/
https://protobuf.dev/support/cross-version-runtime-guarantee/
-LOW ref/words/plugin references a 'plugin' First file chunk returned by plugin did not
PluginProtosZ
This compiler does not support plugins
in which case the given plugin name
pluginpb
sent unparseable request to plugin
users should use the Java Lite plugin instead

Deleted: libprotoc/var/lib/db/sbom/libprotoc-3.27.4-r1.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/3af642dd650addc8a07c30c5a665

Added: libprotoc/usr/lib/libprotoc.so.28.2.0 [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM exec/program executes external programs execvp
+MEDIUM procfs/self/exe gets executable associated to this process /proc/self/exe
+LOW encoding/base64 Supports base64 encoded strings base64
+LOW env/USER Looks up the USER name of the current user USER
getenv
+LOW exec/program/background wait for process to exit waitpid
+LOW fs/directory/create creates directories mkdir
+LOW fs/directory/remove Uses libc functions to remove directories rmdir
+LOW fs/file/read reads files ReadFile
+LOW fs/link/read read value of a symbolic link readlink
+LOW process/thread_local_storage Uses glibc thread local storage __tls_get_addr
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/protocolbuffers/protobuf/blob/main/java/lite.md
https://github.com/protocolbuffers/protobuf/issues
https://medium.com/ios-os-x-development/categories-in-static-libraries-78
https://protobuf.dev/editions/overview/
https://protobuf.dev/support/cross-version-runtime-guarantee/
+LOW ref/words/plugin references a 'plugin' First file chunk returned by plugin did not
PluginProtosZ
This compiler does not support plugins
in which case the given plugin name
pluginpb
sent unparseable request to plugin
users should use the Java Lite plugin instead

Added: libprotobuf-lite/var/lib/db/sbom/libprotobuf-lite-3.28.2-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/c760c284ec0e1d7cb828055809d1

Added: protobuf/var/lib/db/sbom/protobuf-3.28.2-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/93f5cef6dca71241fce74535f13b

Added: libprotobuf/usr/lib/libprotobuf.so.28.2.0 [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW compression/gzip works with gzip files gzip
+LOW encoding/base64 Supports base64 encoded strings base64
+LOW process/thread_local_storage Uses glibc thread local storage __tls_get_addr
+LOW ref/site/url contains embedded HTTPS URLs https://developers.google.com/protocol-buffers/docs/style

Added: protobuf-dev/usr/include/google/protobuf/compiler/rust/accessors/default_value.h [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://developers.google.com/open-source/licenses/bsd

Added: protobuf-dev/var/lib/db/sbom/protobuf-dev-3.28.2-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/3e8b7706df8ae0ef38cadf4d8bdd

Added: libprotobuf-lite/usr/lib/libprotobuf-lite.so.28.2.0 [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW process/thread_local_storage Uses glibc thread local storage __tls_get_addr

Added: protoc/var/lib/db/sbom/protoc-3.28.2-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/bce711cc5db7eaf9bf0ed271ed81

Changed: /tmp/wolfictl-apk-3174120505/protobuf-dev/usr/include/google/protobuf/descriptor.pb.h

Changed: /tmp/wolfictl-apk-3174120505/protobuf-dev/usr/include/google/protobuf/compiler/plugin.pb.h

Moved: libprotobuf/var/lib/db/sbom/libprotobuf-3.27.4-r1.spdx.json -> /tmp/wolfictl-apk-3174120505/libprotoc/var/lib/db/sbom/libprotoc-3.28.2-r0.spdx.json (similarity: 0.91)

Moved: libprotobuf/var/lib/db/sbom/libprotobuf-3.27.4-r1.spdx.json -> /tmp/wolfictl-apk-3174120505/libprotobuf/var/lib/db/sbom/libprotobuf-3.28.2-r0.spdx.json (similarity: 0.97)

github-actions[bot] avatar Oct 15 '24 18:10 github-actions[bot]

Gen AI suggestions to solve the build error:

There is no error message found in the log at the specified file path. You may want to ensure the log file is correctly specified and contains error messages, or check for any warnings that might indicate potential issues.

octo-sts[bot] avatar Oct 15 '24 18:10 octo-sts[bot]

Package protoc: Click to expand/collapse

Package protoc: Added: /usr/bin/protoc-28.2.0 Deleted: /usr/bin/protoc-27.4.0

Package libprotoc: Click to expand/collapse

Package libprotoc: Added: /usr/lib/libprotoc.so.28.2.0 Deleted: /usr/lib/libprotoc.so.27.4.0

Package libprotobuf: Click to expand/collapse

Package libprotobuf: Added: /usr/lib/libprotobuf.so.28.2.0 Deleted: /usr/lib/libprotobuf.so.27.4.0

Package libprotobuf-lite: Click to expand/collapse

Package libprotobuf-lite: Added: /usr/lib/libprotobuf-lite.so.28.2.0 Deleted: /usr/lib/libprotobuf-lite.so.27.4.0

Package protobuf: Click to expand/collapse

Package protobuf: Added: /usr/lib/libutf8_range.so Added: /usr/lib/libutf8_validity.so

Package protobuf-dev: Click to expand/collapse

Package protobuf-dev: Added: /usr/include/google/protobuf/compiler/rust/accessors/default_value.h Modified: /usr/include/google/protobuf/any.pb.h Modified: /usr/include/google/protobuf/api.pb.h Modified: /usr/include/google/protobuf/arena.h Modified: /usr/include/google/protobuf/arena_align.h Modified: /usr/include/google/protobuf/arena_cleanup.h Modified: /usr/include/google/protobuf/compiler/command_line_interface.h Modified: /usr/include/google/protobuf/compiler/cpp/field.h Modified: /usr/include/google/protobuf/compiler/cpp/generator.h Modified: /usr/include/google/protobuf/compiler/cpp/helpers.h Modified: /usr/include/google/protobuf/compiler/cpp/message.h Modified: /usr/include/google/protobuf/compiler/csharp/csharp_helpers.h Modified: /usr/include/google/protobuf/compiler/java/doc_comment.h Modified: /usr/include/google/protobuf/compiler/java/field_common.h Modified: /usr/include/google/protobuf/compiler/java/full/enum.h Modified: /usr/include/google/protobuf/compiler/java/generator.h Modified: /usr/include/google/protobuf/compiler/java/helpers.h Modified: /usr/include/google/protobuf/compiler/java/internal_helpers.h Modified: /usr/include/google/protobuf/compiler/java/java_features.pb.h Modified: /usr/include/google/protobuf/compiler/java/kotlin_generator.h Modified: /usr/include/google/protobuf/compiler/java/names.h Modified: /usr/include/google/protobuf/compiler/java/options.h Modified: /usr/include/google/protobuf/compiler/php/names.h Modified: /usr/include/google/protobuf/compiler/php/php_generator.h Modified: /usr/include/google/protobuf/compiler/plugin.pb.h Modified: /usr/include/google/protobuf/compiler/rust/naming.h Modified: /usr/include/google/protobuf/compiler/versions.h Modified: /usr/include/google/protobuf/cpp_edition_defaults.h Modified: /usr/include/google/protobuf/cpp_features.pb.h Modified: /usr/include/google/protobuf/cpp_features.proto Modified: /usr/include/google/protobuf/descriptor.h Modified: /usr/include/google/protobuf/descriptor.pb.h Modified: /usr/include/google/protobuf/descriptor.proto Modified: /usr/include/google/protobuf/descriptor_database.h Modified: /usr/include/google/protobuf/descriptor_lite.h Modified: /usr/include/google/protobuf/duration.pb.h Modified: /usr/include/google/protobuf/dynamic_message.h Modified: /usr/include/google/protobuf/empty.pb.h Modified: /usr/include/google/protobuf/endian.h Modified: /usr/include/google/protobuf/field_mask.pb.h Modified: /usr/include/google/protobuf/generated_message_bases.h Modified: /usr/include/google/protobuf/generated_message_tctable_decl.h Modified: /usr/include/google/protobuf/generated_message_tctable_impl.h Modified: /usr/include/google/protobuf/generated_message_util.h Modified: /usr/include/google/protobuf/implicit_weak_message.h Modified: /usr/include/google/protobuf/io/coded_stream.h Modified: /usr/include/google/protobuf/io/printer.h Modified: /usr/include/google/protobuf/io/zero_copy_stream_impl_lite.h Modified: /usr/include/google/protobuf/map.h Modified: /usr/include/google/protobuf/map_entry.h Modified: /usr/include/google/protobuf/map_field.h Modified: /usr/include/google/protobuf/message.h Modified: /usr/include/google/protobuf/message_lite.h Modified: /usr/include/google/protobuf/parse_context.h Modified: /usr/include/google/protobuf/port.h Modified: /usr/include/google/protobuf/port_def.inc Modified: /usr/include/google/protobuf/port_undef.inc Modified: /usr/include/google/protobuf/reflection_visit_field_info.h Modified: /usr/include/google/protobuf/reflection_visit_fields.h Modified: /usr/include/google/protobuf/repeated_field.h Modified: /usr/include/google/protobuf/repeated_ptr_field.h Modified: /usr/include/google/protobuf/runtime_version.h Modified: /usr/include/google/protobuf/serial_arena.h Modified: /usr/include/google/protobuf/source_context.pb.h Modified: /usr/include/google/protobuf/struct.pb.h Modified: /usr/include/google/protobuf/stubs/common.h Modified: /usr/include/google/protobuf/text_format.h Modified: /usr/include/google/protobuf/thread_safe_arena.h Modified: /usr/include/google/protobuf/timestamp.pb.h Modified: /usr/include/google/protobuf/type.pb.h Modified: /usr/include/google/protobuf/util/message_differencer.h Modified: /usr/include/google/protobuf/wire_format.h Modified: /usr/include/google/protobuf/wrappers.pb.h Modified: /usr/include/java/core/src/main/resources/google/protobuf/java_features.proto Modified: /usr/lib/cmake/protobuf/protobuf-config-version.cmake Modified: /usr/lib/cmake/protobuf/protobuf-module.cmake Modified: /usr/lib/cmake/protobuf/protobuf-targets-release.cmake Modified: /usr/lib/cmake/utf8_range/utf8_range-targets-release.cmake Modified: /usr/lib/cmake/utf8_range/utf8_range-targets.cmake Modified: /usr/lib/pkgconfig/protobuf-lite.pc Modified: /usr/lib/pkgconfig/protobuf.pc Deleted: /usr/include/google/protobuf/compiler/rust/accessors/helpers.h Deleted: /usr/lib/libutf8_range.a Deleted: /usr/lib/libutf8_validity.a

malcontent found differences: Click to expand/collapse

Deleted: libprotoc/usr/lib/libprotoc.so.27.4.0 [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM exec/program executes external programs execvp
-MEDIUM procfs/self/exe gets executable associated to this process /proc/self/exe
-LOW encoding/base64 Supports base64 encoded strings base64
-LOW env/USER Looks up the USER name of the current user USER
getenv
-LOW exec/program/background wait for process to exit waitpid
-LOW fs/directory/create creates directories mkdir
-LOW fs/directory/remove Uses libc functions to remove directories rmdir
-LOW fs/file/read reads files ReadFile
-LOW fs/link/read read value of a symbolic link readlink
-LOW process/thread_local_storage Uses glibc thread local storage __tls_get_addr
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/protocolbuffers/protobuf/blob/main/java/lite.md
https://medium.com/ios-os-x-development/categories-in-static-libraries-78
https://protobuf.dev/editions/overview/
https://protobuf.dev/support/cross-version-runtime-guarantee/
-LOW ref/words/plugin references a 'plugin' First file chunk returned by plugin did not
PluginProtosZ
This compiler does not support plugins
in which case the given plugin name
pluginpb
sent unparseable request to plugin
users should use the Java Lite plugin instead

Deleted: libprotobuf-lite/usr/lib/libprotobuf-lite.so.27.4.0 [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW process/thread_local_storage Uses glibc thread local storage __tls_get_addr

Deleted: protoc/var/lib/db/sbom/protoc-3.27.4-r1.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/e650bcb39e2f85cab0f9efc7ad96

Deleted: libprotobuf/usr/lib/libprotobuf.so.27.4.0 [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW compression/gzip works with gzip files gzip
-LOW encoding/base64 Supports base64 encoded strings base64
-LOW process/thread_local_storage Uses glibc thread local storage __tls_get_addr
-LOW ref/site/url contains embedded HTTPS URLs https://developers.google.com/protocol-buffers/docs/style

Deleted: protobuf/var/lib/db/sbom/protobuf-3.27.4-r1.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/e2fcf8ef519a2a0e7f3c56b3657a

Deleted: libprotoc/var/lib/db/sbom/libprotoc-3.27.4-r1.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/3af642dd650addc8a07c30c5a665

Deleted: libprotobuf-lite/var/lib/db/sbom/libprotobuf-lite-3.27.4-r1.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/14487215848aa5e74d47fdb3b251

Deleted: protobuf-dev/var/lib/db/sbom/protobuf-dev-3.27.4-r1.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/dc8c66b19f90c3e6329fff638134

Deleted: protobuf-dev/usr/include/google/protobuf/compiler/rust/accessors/helpers.h [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://developers.google.com/open-source/licenses/bsd

Added: protobuf-dev/var/lib/db/sbom/protobuf-dev-3.28.2-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/3e8b7706df8ae0ef38cadf4d8bdd

Added: libprotoc/usr/lib/libprotoc.so.28.2.0 [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM exec/program executes external programs execvp
+MEDIUM procfs/self/exe gets executable associated to this process /proc/self/exe
+LOW encoding/base64 Supports base64 encoded strings base64
+LOW env/USER Looks up the USER name of the current user USER
getenv
+LOW exec/program/background wait for process to exit waitpid
+LOW fs/directory/create creates directories mkdir
+LOW fs/directory/remove Uses libc functions to remove directories rmdir
+LOW fs/file/read reads files ReadFile
+LOW fs/link/read read value of a symbolic link readlink
+LOW process/thread_local_storage Uses glibc thread local storage __tls_get_addr
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/protocolbuffers/protobuf/blob/main/java/lite.md
https://github.com/protocolbuffers/protobuf/issues
https://medium.com/ios-os-x-development/categories-in-static-libraries-78
https://protobuf.dev/editions/overview/
https://protobuf.dev/support/cross-version-runtime-guarantee/
+LOW ref/words/plugin references a 'plugin' First file chunk returned by plugin did not
PluginProtosZ
This compiler does not support plugins
in which case the given plugin name
pluginpb
sent unparseable request to plugin
users should use the Java Lite plugin instead

Added: protoc/var/lib/db/sbom/protoc-3.28.2-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/bce711cc5db7eaf9bf0ed271ed81

Added: libprotobuf-lite/usr/lib/libprotobuf-lite.so.28.2.0 [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW process/thread_local_storage Uses glibc thread local storage __tls_get_addr

Added: protobuf/var/lib/db/sbom/protobuf-3.28.2-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/93f5cef6dca71241fce74535f13b

Added: libprotobuf/usr/lib/libprotobuf.so.28.2.0 [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW compression/gzip works with gzip files gzip
+LOW encoding/base64 Supports base64 encoded strings base64
+LOW process/thread_local_storage Uses glibc thread local storage __tls_get_addr
+LOW ref/site/url contains embedded HTTPS URLs https://developers.google.com/protocol-buffers/docs/style

Added: libprotobuf-lite/var/lib/db/sbom/libprotobuf-lite-3.28.2-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/c760c284ec0e1d7cb828055809d1

Added: protobuf-dev/usr/include/google/protobuf/compiler/rust/accessors/default_value.h [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://developers.google.com/open-source/licenses/bsd

Changed: /tmp/wolfictl-apk-768707876/protobuf-dev/usr/include/google/protobuf/compiler/plugin.pb.h

Changed: /tmp/wolfictl-apk-768707876/protobuf-dev/usr/include/google/protobuf/descriptor.pb.h

Moved: libprotobuf/var/lib/db/sbom/libprotobuf-3.27.4-r1.spdx.json -> /tmp/wolfictl-apk-768707876/libprotoc/var/lib/db/sbom/libprotoc-3.28.2-r0.spdx.json (similarity: 0.91)

Moved: libprotobuf/var/lib/db/sbom/libprotobuf-3.27.4-r1.spdx.json -> /tmp/wolfictl-apk-768707876/libprotobuf/var/lib/db/sbom/libprotobuf-3.28.2-r0.spdx.json (similarity: 0.97)

github-actions[bot] avatar Oct 15 '24 18:10 github-actions[bot]

Gen AI suggestions to solve the build error:

No error messages were found in the log at `/tmp/script1449472244`. Here are some suggestions:

1. Ensure the log file is correctly specified and contains error messages.
2. Verify that the process generating the log is functioning as expected.
3. If errors are expected but not found, check the logging configuration for proper error level settings.

octo-sts[bot] avatar Oct 15 '24 18:10 octo-sts[bot]

Gen AI suggestions to solve the build error:

The error message indicates that the library `libutf8_validity.so` is missing. To resolve this issue, you can:

1. Verify if `libutf8_validity.so` is installed on your system.
2. If it's not installed, use your package manager to install it.
3. Add the library path to `LD_LIBRARY_PATH` or create a configuration file in `/etc/ld.so.conf.d/` with the library path.
4. Execute `sudo ldconfig` to update the linker cache.

octo-sts[bot] avatar Oct 15 '24 19:10 octo-sts[bot]

Gen AI suggestions to solve the build error:

The error message indicates that there is an array subscript out of bounds issue in the code. Specifically, the subscript values are outside the valid range for the array `google::protobuf::RepeatedPtrField<std::__cxx11::basic_string<char>> [1]`. 

To fix this error, consider the following suggestions:
1. Ensure the index used to access the array is within valid bounds.
2. Verify the logic that calculates the index to prevent negative or out-of-range values.
3. Implement assertions or checks to validate index values before accessing the array.
4. Review the loop or function where the array is accessed for potential off-by-one errors.

octo-sts[bot] avatar Oct 15 '24 20:10 octo-sts[bot]

libpulsar doesn't want to build properly with the protobuf bump. While it doesn't generate errors, it does generate warnings which are treated as errors and fail the build. There does not appear to be any open issues on any upstream repos regarding this.

Relevant logs:

2024/10/16 09:43:44 INFO [85/147] Building CXX object lib/CMakeFiles/PULSAR_OBJECT_LIB.dir/Message.cc.o uses=cmake/build
2024/10/16 09:43:45 INFO [86/147] Building CXX object lib/CMakeFiles/PULSAR_OBJECT_LIB.dir/MemoryLimitController.cc.o uses=cmake/build
2024/10/16 09:43:45 INFO [87/147] Building CXX object lib/CMakeFiles/PULSAR_OBJECT_LIB.dir/LogUtils.cc.o uses=cmake/build
2024/10/16 09:43:47 INFO [88/147] Building CXX object lib/CMakeFiles/PULSAR_OBJECT_LIB.dir/Latch.cc.o uses=cmake/build
2024/10/16 09:43:47 INFO [89/147] Building CXX object lib/CMakeFiles/PULSAR_OBJECT_LIB.dir/KeyValueImpl.cc.o uses=cmake/build
2024/10/16 09:43:47 INFO [90/147] Building CXX object lib/CMakeFiles/PULSAR_OBJECT_LIB.dir/KeyValue.cc.o uses=cmake/build
2024/10/16 09:43:49 INFO [91/147] Building CXX object lib/CMakeFiles/PULSAR_OBJECT_LIB.dir/KeySharedPolicy.cc.o uses=cmake/build
2024/10/16 09:43:50 INFO [92/147] Building CXX object lib/CMakeFiles/PULSAR_OBJECT_LIB.dir/JavaStringHash.cc.o uses=cmake/build
2024/10/16 09:43:50 WARN ninja: job failed: /usr/bin/c++ -DBOOST_ALLOW_DEPRECATED_HEADERS -DBOOST_ALL_NO_LIB -DBUILDING_PULSAR -DHAS_SNAPPY=0 -DHAS_ZSTD=0 -DPULSAR_AUXV_GETAUXVAL_PRESENT -I/home/build -I/home/build/include -I/home/build/output/include -I/home/build/output/generated -I/home/build/output/generated/lib -O2 -Wall -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -march=x86-64-v2 -mtune=broadwell -O3 -DNDEBUG -std=gnu++17 -fPIC -Wall -Wformat-security -Wvla -Werror -Wno-sign-compare -Wno-deprecated-declarations -Wno-error=cpp -msse4.2 -mpclmul -Wno-stringop-truncation -fdiagnostics-show-option -fdiagnostics-color -fvisibility=hidden -MD -MT lib/CMakeFiles/PULSAR_OBJECT_LIB.dir/MessageImpl.cc.o -MF lib/CMakeFiles/PULSAR_OBJECT_LIB.dir/MessageImpl.cc.o.d -o lib/CMakeFiles/PULSAR_OBJECT_LIB.dir/MessageImpl.cc.o -c /home/build/lib/MessageImpl.cc uses=cmake/build
2024/10/16 09:43:50 INFO In file included from /usr/include/google/protobuf/repeated_field.h:45, uses=cmake/build
2024/10/16 09:43:50 INFO                  from /usr/include/google/protobuf/parse_context.h:32, uses=cmake/build
2024/10/16 09:43:50 INFO                  from /usr/include/google/protobuf/generated_message_tctable_decl.h:23, uses=cmake/build
2024/10/16 09:43:50 INFO                  from /home/build/output/generated/lib/PulsarApi.pb.h:23, uses=cmake/build
2024/10/16 09:43:50 INFO                  from /home/build/lib/MessageImpl.h:26, uses=cmake/build
2024/10/16 09:43:50 INFO                  from /home/build/lib/MessageImpl.cc:19: uses=cmake/build
2024/10/16 09:43:50 INFO In member function 'void google::protobuf::internal::RepeatedPtrFieldBase::AddAllocated(Value<Handler>*) [with TypeHandler = google::protobuf::internal::GenericTypeHandler<std::__cxx11::basic_string<char> >]', uses=cmake/build
2024/10/16 09:43:50 INFO     inlined from 'void google::protobuf::RepeatedPtrField<T>::AddAllocated(Element*) [with Element = std::__cxx11::basic_string<char>]' at /usr/include/google/protobuf/repeated_ptr_field.h:1559:50, uses=cmake/build
2024/10/16 09:43:50 INFO     inlined from 'void pulsar::MessageImpl::disableReplication(bool)' at /home/build/lib/MessageImpl.cc:66:23: uses=cmake/build
2024/10/16 09:43:50 INFO /usr/include/google/protobuf/repeated_ptr_field.h:419:52: error: array subscript [-2147483648, -1] is outside array bounds of 'google::protobuf::RepeatedPtrField<std::__cxx11::basic_string<char> > [1]' [-Werror=array-bounds=] uses=cmake/build
2024/10/16 09:43:50 INFO   419 |       elems[allocated_size()] = elems[current_size_]; uses=cmake/build
2024/10/16 09:43:50 INFO       |                                 ~~~~~~~~~~~~~~~~~~~^ uses=cmake/build
2024/10/16 09:43:50 INFO /home/build/lib/MessageImpl.cc: In member function 'void pulsar::MessageImpl::disableReplication(bool)': uses=cmake/build
2024/10/16 09:43:50 INFO /home/build/lib/MessageImpl.cc:64:53: note: at offset [-17179869184, -8] into object 'r' of size 24 uses=cmake/build
2024/10/16 09:43:50 INFO    64 |     google::protobuf::RepeatedPtrField<std::string> r; uses=cmake/build
2024/10/16 09:43:50 INFO       |                                                     ^ uses=cmake/build
2024/10/16 09:43:50 INFO cc1plus: all warnings being treated as errors uses=cmake/build
2024/10/16 09:43:55 WARN ninja: job failed: /usr/bin/c++ -DBOOST_ALLOW_DEPRECATED_HEADERS -DBOOST_ALL_NO_LIB -DBUILDING_PULSAR -DHAS_SNAPPY=0 -DHAS_ZSTD=0 -DPULSAR_AUXV_GETAUXVAL_PRESENT -I/home/build -I/home/build/include -I/home/build/output/include -I/home/build/output/generated -I/home/build/output/generated/lib -O2 -Wall -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer -march=x86-64-v2 -mtune=broadwell -O3 -DNDEBUG -std=gnu++17 -fPIC -Wall -Wformat-security -Wvla -Werror -Wno-sign-compare -Wno-deprecated-declarations -Wno-error=cpp -msse4.2 -mpclmul -Wno-stringop-truncation -fdiagnostics-show-option -fdiagnostics-color -fvisibility=hidden -MD -MT lib/CMakeFiles/PULSAR_OBJECT_LIB.dir/MessageBuilder.cc.o -MF lib/CMakeFiles/PULSAR_OBJECT_LIB.dir/MessageBuilder.cc.o.d -o lib/CMakeFiles/PULSAR_OBJECT_LIB.dir/MessageBuilder.cc.o -c /home/build/lib/MessageBuilder.cc uses=cmake/build
2024/10/16 09:43:55 INFO In file included from /usr/include/google/protobuf/repeated_field.h:45, uses=cmake/build
2024/10/16 09:43:55 INFO                  from /usr/include/google/protobuf/parse_context.h:32, uses=cmake/build
2024/10/16 09:43:55 INFO                  from /usr/include/google/protobuf/generated_message_tctable_decl.h:23, uses=cmake/build
2024/10/16 09:43:55 INFO                  from /home/build/output/generated/lib/PulsarApi.pb.h:23, uses=cmake/build
2024/10/16 09:43:55 INFO                  from /home/build/lib/MessageImpl.h:26, uses=cmake/build
2024/10/16 09:43:55 INFO                  from /home/build/lib/MessageBuilder.cc:28: uses=cmake/build
2024/10/16 09:43:55 INFO In member function 'void google::protobuf::internal::RepeatedPtrFieldBase::AddAllocated(Value<Handler>*) [with TypeHandler = google::protobuf::internal::GenericTypeHandler<std::__cxx11::basic_string<char> >]', uses=cmake/build
2024/10/16 09:43:55 INFO     inlined from 'void google::protobuf::RepeatedPtrField<T>::AddAllocated(Element*) [with Element = std::__cxx11::basic_string<char>]' at /usr/include/google/protobuf/repeated_ptr_field.h:1559:50, uses=cmake/build
2024/10/16 09:43:55 INFO     inlined from 'pulsar::MessageBuilder& pulsar::MessageBuilder::disableReplication(bool)' at /home/build/lib/MessageBuilder.cc:154:23: uses=cmake/build
2024/10/16 09:43:55 INFO /usr/include/google/protobuf/repeated_ptr_field.h:419:52: error: array subscript [-2147483648, -1] is outside array bounds of 'google::protobuf::RepeatedPtrField<std::__cxx11::basic_string<char> > [1]' [-Werror=array-bounds=] uses=cmake/build
2024/10/16 09:43:55 INFO   419 |       elems[allocated_size()] = elems[current_size_]; uses=cmake/build
2024/10/16 09:43:55 INFO       |                                 ~~~~~~~~~~~~~~~~~~~^ uses=cmake/build
2024/10/16 09:43:55 INFO /home/build/lib/MessageBuilder.cc: In member function 'pulsar::MessageBuilder& pulsar::MessageBuilder::disableReplication(bool)': uses=cmake/build
2024/10/16 09:43:55 INFO /home/build/lib/MessageBuilder.cc:152:53: note: at offset [-17179869184, -8] into object 'r' of size 24 uses=cmake/build
2024/10/16 09:43:55 INFO   152 |     google::protobuf::RepeatedPtrField<std::string> r; uses=cmake/build
2024/10/16 09:43:55 INFO       |                                                     ^ uses=cmake/build
2024/10/16 09:43:55 INFO cc1plus: all warnings being treated as errors uses=cmake/build
2024/10/16 09:44:02 WARN ninja: subcommands failed uses=cmake/build
2024/10/16 09:44:04 INFO pod cc7a46043b777d0482dba2ea23fd1fc8fed565bce040bf770011fadb4e251b9c terminated
2024/10/16 09:44:08 ERRO ERROR: failed to build package. the build environment has been preserved:
2024/10/16 09:44:08 INFO   workspace dir: /tmp/melange-workspace-307022690
2024/10/16 09:44:08 INFO   guest dir: /tmp/melange-guest-3988922823
2024/10/16 09:44:08 ERRO failed to build package: unable to run package libpulsar pipeline: unable to run pipeline: unable to run pipeline: task exited with code 1
make[1]: *** [Makefile:114: packages/x86_64/libpulsar-3.6.0-r1.apk] Error 1
make[1]: Leaving directory '/home/hunter-harris/Documents/GitRepos/wolfi-dev-os'
make: *** [Makefile:104: package/libpulsar] Error 2

Relevant lines causing trouble: https://github.com/apache/pulsar-client-cpp/blob/54e529aaf82bddac063c847d4c11d3fba3acf0f3/lib/MessageImpl.cc#L63 https://github.com/apache/pulsar-client-cpp/blob/54e529aaf82bddac063c847d4c11d3fba3acf0f3/lib/MessageBuilder.cc#L150

hbh7 avatar Oct 16 '24 14:10 hbh7

Gen AI suggestions to solve the build error:

The error message indicates an out-of-bounds array access in the code. To resolve this, ensure that the index used to access the array is within the valid range, verify the logic calculating the index, and consider adding checks or assertions to validate index values before accessing the array. Additionally, review the code for any potential off-by-one errors.

octo-sts[bot] avatar Oct 17 '24 06:10 octo-sts[bot]

The error in libpulsar is not specific to this latest version of protobuf it is failing even with the previous version 3.27.x. The relevant Upstream code MessageImpl.cc#L63 and MessageBuilder.cc#L150 Calling the AddAllocate() function from protobuf lib and it results in the above mentioned error.

specifically in here

if (current_size_ < allocated_size()) {
    elems[allocated_size()] = elems[current_size_];
}

I am unable to find the potential reason for the error but from the warning/error it seems like allocated_size() doesn’t reflect the actual allocated size accurately, thats why we are encountering a buffer overrun error when assigning elems[allocated_size()] (I am guessing)

Next Step I Choose

As it is an warning we are treating as an error and also it is not specific to this latest version of protobuf. I suppress it with CMAKE_CXX_FLAGS="-Wno-array-bounds" in configuration. now the array bound warning is just an warning not an error.

When I look into the upstream build logs they are not getting the error. Not sure which version of protobuf they are using.

debasishbsws avatar Oct 17 '24 09:10 debasishbsws

Gen AI suggestions to solve the build error:

The error message indicates that the file `libutf8_validity.so` cannot be found. To resolve this issue, you should:

1. Verify if `libutf8_validity.so` is installed on your system.
2. If it's missing, install it using your package manager.
3. Add the library's path to the `LD_LIBRARY_PATH` environment variable.
4. Run `ldconfig` to update the library cache.
5. Rebuild the project if necessary.

octo-sts[bot] avatar Oct 17 '24 09:10 octo-sts[bot]

Potentially related to the latest build failure? https://github.com/protocolbuffers/protobuf/issues/17793

Logs:

│2024-10-17T09:55:53.6364478Z 2024/10/17 09:55:53 INFO installing wolfi-keys (1-r8)                                                                                                                                                                                                                                                                                                          │
│2024-10-17T09:55:53.6370078Z 2024/10/17 09:55:53 INFO installing apk-tools (2.14.4-r0)                                                                                                                                                                                                                                                                                                      │
│2024-10-17T09:55:53.6391830Z 2024/10/17 09:55:53 INFO installing busybox (1.37.0-r0)                                                                                                                                                                                                                                                                                                        │
│2024-10-17T09:55:53.6406006Z 2024/10/17 09:55:53 INFO installing wolfi-base (1-r6)                                                                                                                                                                                                                                                                                                          │
│2024-10-17T09:55:54.2538766Z 2024/10/17 09:55:54 INFO built image layer tarball as /temp/apko-temp-2689362474/apko-aarch64.tar.gz                                                                                                                                                                                                                                                           │
│2024-10-17T09:55:54.2540285Z 2024/10/17 09:55:54 INFO using /temp/apko-temp-2689362474/apko-aarch64.tar.gz for image layer                                                                                                                                                                                                                                                                  │
│2024-10-17T09:55:54.2668474Z 2024/10/17 09:55:54 INFO OCI layer digest: sha256:f4034c87220a2d1e2c07b3be2b19817c5705a6264de1815f7ba971c190650747                                                                                                                                                                                                                                             │
│2024-10-17T09:55:54.2670057Z 2024/10/17 09:55:54 INFO OCI layer diffID: sha256:3590a91054e1d0ebd62ff4d782c865029fbdf323e7f27610783070f263a545b9                                                                                                                                                                                                                                             │
│2024-10-17T09:55:54.2671968Z 2024/10/17 09:55:54 INFO saving OCI image locally: apko.local/cache:4fbc1e549cffc1c30a151a7e72f883660d90e37102e8149eea5392e67971ffb6                                                                                                                                                                                                                           │
│2024-10-17T09:55:57.4435148Z 2024/10/17 09:55:57 WARN skipping local domain tagging apko.local/cache:4fbc1e549cffc1c30a151a7e72f883660d90e37102e8149eea5392e67971ffb6 as index.docker.io/library/melange:latest                                                                                                                                                                             │
│2024-10-17T09:55:57.4437564Z 2024/10/17 09:55:57 INFO ImgRef = apko.local/cache:4fbc1e549cffc1c30a151a7e72f883660d90e37102e8149eea5392e67971ffb6                                                                                                                                                                                                                                            │
│2024-10-17T09:55:57.8868465Z 2024/10/17 09:55:57 INFO running step "python/import"                                                                                                                                                                                                                                                                                                          │
│2024-10-17T09:55:57.9556993Z 2024/10/17 09:55:57 WARN + '[' -d /home/build ] uses=python/import                                                                                                                                                                                                                                                                                             │
│2024-10-17T09:55:57.9557932Z 2024/10/17 09:55:57 WARN + cd /home/build uses=python/import                                                                                                                                                                                                                                                                                                   │
│2024-10-17T09:55:57.9558719Z 2024/10/17 09:55:57 WARN + exit 0 uses=python/import                                                                                                                                                                                                                                                                                                           │
│2024-10-17T09:55:57.9813062Z 2024/10/17 09:55:57 WARN + '[' -d /home/build ] uses=python/import                                                                                                                                                                                                                                                                                             │
│2024-10-17T09:55:57.9814012Z 2024/10/17 09:55:57 WARN + cd /home/build uses=python/import                                                                                                                                                                                                                                                                                                   │
│2024-10-17T09:55:57.9814796Z 2024/10/17 09:55:57 WARN + set +x uses=python/import                                                                                                                                                                                                                                                                                                           │
│2024-10-17T09:55:58.1012891Z 2024/10/17 09:55:58 WARN Traceback (most recent call last): uses=python/import                                                                                                                                                                                                                                                                                 │
│2024-10-17T09:55:58.1014033Z 2024/10/17 09:55:58 WARN   File "<string>", line 1, in <module> uses=python/import                                                                                                                                                                                                                                                                             │
│2024-10-17T09:55:58.1016196Z 2024/10/17 09:55:58 WARN   File "/usr/lib/python3.10/site-packages/onnx/__init__.py", line 77, in <module> uses=python/import                                                                                                                                                                                                                                  │
│2024-10-17T09:55:58.1017802Z 2024/10/17 09:55:58 WARN     from onnx.onnx_cpp2py_export import ONNX_ML uses=python/import                                                                                                                                                                                                                                                                    │
│2024-10-17T09:55:58.1019373Z 2024/10/17 09:55:58 WARN ImportError: libutf8_validity.so: cannot open shared object file: No such file or directory uses=python/import                                                                                                                                                                                                                        │
│2024-10-17T09:55:58.1103796Z 2024/10/17 09:55:58 INFO python3.10 -c "import onnx": FAIL uses=python/import                                                                                                                                                                                                                                                                                  │
│2024-10-17T09:55:58.2966302Z 2024/10/17 09:55:58 INFO pod 00e4d9b90531fdd6f7cff30bfa961552a39f94ac89921bc92a0c4e0822d3f0d9 terminated                                                                                                                                                                                                                                                       │
│2024-10-17T09:55:58.2968150Z 2024/10/17 09:55:58 INFO ERROR: failed to test package. the test environment has been preserved:                                                                                                                                                                                                                                                               │
│2024-10-17T09:55:58.2969922Z 2024/10/17 09:55:58 INFO   workspace dir: /temp/melange-workspace-3017189716                                                                                                                                                                                                                                                                                   │
│2024-10-17T09:55:58.2971335Z 2024/10/17 09:55:58 INFO   guest dir: /temp/melange-guest-3079847999                                                                                                                                                                                                                                                                                           │
│2024-10-17T09:55:58.2973923Z 2024/10/17 09:55:58 ERRO failed to test package: unable to run pipeline: unable to run pipeline: unable to run pipeline: task exited with code 1                                                                                                                                                                                                               │
│2024-10-17T09:55:58.3299468Z make: *** [Makefile:136: test/py3-onnx] Error 1                                                                                                                                                                                                                                                                                                                │
│2024-10-17T09:55:58.5680630Z ##[error]Process completed with exit code 2.                                                                                                                                                                                                                                                                                                                   │
│2024-10-17T09:55:58.5870482Z Post job cleanup.                

hbh7 avatar Oct 17 '24 20:10 hbh7

Summary: Debasish suppressed a warning about an upstream code bug, which resolved one of the build issues. However, the issue with the libutf8_validity.so file remain, and also appear to be an upstream bug. Escalating to confirm the problem and evaluate possible solutions.

hbh7 avatar Oct 18 '24 16:10 hbh7

superseded by https://github.com/wolfi-dev/os/pull/31615

octo-sts[bot] avatar Oct 22 '24 22:10 octo-sts[bot]