cuckoosandbox / cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system
http://www.cuckoosandbox.org
Other
5.56k stars 1.71k forks source link

Error installing Cuckoo using Mojave 10.14 #2836

Open Rodasa opened 5 years ago

Rodasa commented 5 years ago

Thanks for creating an issue! But first: did you read our community guidelines? https://cuckoo.sh/docs/introduction/community.html

My issue is:

Error installing Cuckoo building wheel for capstone.

My Cuckoo version and operating system are:

Mojave 10.14

This can be reproduced by:
The log, error, files etc can be found at:Processing /Users/sabenix/Downloads/Cuckoo/capstone-3.0.5rc2.tar.gz

Building wheels for collected packages: capstone Building wheel for capstone (setup.py) ... error ERROR: Command errored out with exit status 1: command: /Users/sabenix/Virtualenvs/cuckoo/bin/python2.7 -u -c 'import sys, setuptools, tokenize; sys.argv[0] = '"'"'/private/var/folders/db/v7f8qbh95sq3qvtykwysp4v40000gn/T/pip-req-build-ZHX9yi/setup.py'"'"'; file='"'"'/private/var/folders/db/v7f8qbh95sq3qvtykwysp4v40000gn/T/pip-req-build-ZHX9yi/setup.py'"'"';f=getattr(tokenize, '"'"'open'"'"', open)(file);code=f.read().replace('"'"'\r\n'"'"', '"'"'\n'"'"');f.close();exec(compile(code, file, '"'"'exec'"'"'))' bdist_wheel -d /private/var/folders/db/v7f8qbh95sq3qvtykwysp4v40000gn/T/pip-wheel-k3pfzy --python-tag cp27 cwd: /private/var/folders/db/v7f8qbh95sq3qvtykwysp4v40000gn/T/pip-req-build-ZHX9yi/ Complete output (203 lines): /Users/sabenix/Virtualenvs/cuckoo/lib/python2.7/site-packages/setuptools/dist.py:474: UserWarning: Normalizing '3.0.5.rc2' to '3.0.5rc2' normalized_version, running bdist_wheel running build Building C extensions CC cs.o CC utils.o CC SStream.o CC MCInstrDesc.o CC MCRegisterInfo.o CC arch/ARM/ARMDisassembler.o CC arch/ARM/ARMInstPrinter.o CC arch/ARM/ARMMapping.o CC arch/ARM/ARMModule.o CC arch/AArch64/AArch64BaseInfo.o CC arch/AArch64/AArch64Disassembler.o CC arch/AArch64/AArch64InstPrinter.o CC arch/AArch64/AArch64Mapping.o CC arch/AArch64/AArch64Module.o CC arch/Mips/MipsDisassembler.o CC arch/Mips/MipsInstPrinter.o CC arch/Mips/MipsMapping.o CC arch/Mips/MipsModule.o CC arch/PowerPC/PPCDisassembler.o CC arch/PowerPC/PPCInstPrinter.o CC arch/PowerPC/PPCMapping.o CC arch/PowerPC/PPCModule.o CC arch/Sparc/SparcDisassembler.o CC arch/Sparc/SparcInstPrinter.o CC arch/Sparc/SparcMapping.o CC arch/Sparc/SparcModule.o CC arch/SystemZ/SystemZDisassembler.o CC arch/SystemZ/SystemZInstPrinter.o CC arch/SystemZ/SystemZMapping.o CC arch/SystemZ/SystemZModule.o CC arch/SystemZ/SystemZMCTargetDesc.o CC arch/X86/X86DisassemblerDecoder.o CC arch/X86/X86Disassembler.o CC arch/X86/X86IntelInstPrinter.o CC arch/X86/X86ATTInstPrinter.o CC arch/X86/X86Mapping.o CC arch/X86/X86Module.o CC arch/XCore/XCoreDisassembler.o CC arch/XCore/XCoreInstPrinter.o CC arch/XCore/XCoreMapping.o CC arch/XCore/XCoreModule.o CC MCInst.o LINK libcapstone.dylib ld: warning: The i386 architecture is deprecated for macOS (remove from the Xcode build setting: ARCHS) ld: warning: ignoring file /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.14.sdk/usr/lib/libSystem.tbd, missing required architecture i386 in file /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.14.sdk/usr/lib/libSystem.tbd Undefined symbols for architecture i386: "_bzero", referenced from: _Thumb_getInstruction in ARMDisassembler.o _ARM_getInstruction in ARMDisassembler.o _AArch64_getInstruction in AArch64Disassembler.o _Mips_getInstruction in MipsDisassembler.o _Mips64_getInstruction in MipsDisassembler.o _PPC_getInstruction in PPCDisassembler.o _SparcgetInstruction in SparcDisassembler.o ... "memcpy_chk", referenced from: _SystemZ_getInstruction in SystemZDisassembler.o "_stack_chk_fail", referenced from: _cs_disasm in cs.o _cs_disasm_iter in cs.o _ARM_get_insn_id in ARMMapping.o _A64SysRegMapper_toString in AArch64BaseInfo.o _decodeToMCInst in AArch64Disassembler.o _printInstruction in AArch64InstPrinter.o printTypedVectorList in AArch64InstPrinter.o ... "stack_chk_guard", referenced from: _cs_disasm in cs.o _cs_disasm_iter in cs.o _ARM_get_insn_id in ARMMapping.o _A64SysRegMapper_toString in AArch64BaseInfo.o _decodeToMCInst in AArch64Disassembler.o _printInstruction in AArch64InstPrinter.o _printTypedVectorList in AArch64InstPrinter.o ... _cs_disasm in cs.o _cs_disasm_iter in cs.o _ARM_get_insn_id in ARMMapping.o _A64SysRegMapper_toString in AArch64BaseInfo.o _decodeToMCInst in AArch64Disassembler.o _printInstruction in AArch64InstPrinter.o _printTypedVectorList in AArch64InstPrinter.o ... _cs_disasm in cs.o _cs_disasm_iter in cs.o _ARM_get_insn_id in ARMMapping.o _A64SysRegMapper_toString in AArch64BaseInfo.o _decodeToMCInst in AArch64Disassembler.o _printInstruction in AArch64InstPrinter.o _printTypedVectorList in AArch64InstPrinter.o ... _cs_disasm in cs.o _cs_disasm_iter in cs.o _ARM_get_insn_id in ARMMapping.o _A64SysRegMapper_toString in AArch64BaseInfo.o _decodeToMCInst in AArch64Disassembler.o _printInstruction in AArch64InstPrinter.o _printTypedVectorList in AArch64InstPrinter.o ... _cs_disasm in cs.o _cs_disasm_iter in cs.o _ARM_get_insn_id in ARMMapping.o _A64SysRegMapper_toString in AArch64BaseInfo.o _decodeToMCInst in AArch64Disassembler.o _printInstruction in AArch64InstPrinter.o _printTypedVectorList in AArch64InstPrinter.o ... _cs_disasm in cs.o _cs_disasm_iter in cs.o _ARM_get_insn_id in ARMMapping.o _A64SysRegMapper_toString in AArch64BaseInfo.o _decodeToMCInst in AArch64Disassembler.o _printInstruction in AArch64InstPrinter.o _printTypedVectorList in AArch64InstPrinter.o ... _cs_disasm in cs.o _cs_disasm_iter in cs.o _ARM_get_insn_id in ARMMapping.o _A64SysRegMapper_toString in AArch64BaseInfo.o _decodeToMCInst in AArch64Disassembler.o _printInstruction in AArch64InstPrinter.o _printTypedVectorList in AArch64InstPrinter.o ... ... "_strcpy_chk", referenced from: _XCore_insnextract in XCoreInstPrinter.o "strncpy_chk", referenced from: _Sparc_printInst in SparcInstPrinter.o "_tolower", referenced from: _A64NamedImmMapperfromString in AArch64BaseInfo.o "udivdi3", referenced from: _A64SysRegMapper_toString in AArch64BaseInfo.o "_atoi", referenced from: _XCore_insn_extract in XCoreInstPrinter.o "_calloc", referenced from: _cs_mem_calloc in cs.o (maybe you meant: _cs_mem_calloc) "_free", referenced from: _cs_mem_free in cs.o (maybe you meant: _cs_free, _cs_mem_free ) "_malloc", referenced from: _cs_mem_malloc in cs.o (maybe you meant: _cs_mem_malloc, _cs_malloc ) "_memcpy", referenced from: _cs_disasm in cs.o _fill_insn in cs.o _cs_disasm_iter in cs.o _SStream_concat0 in SStream.o "_memmove", referenced from: _cs_strdup in utils.o _X86_Intel_printInst in X86IntelInstPrinter.o _X86_ATT_printInst in X86ATTInstPrinter.o "_realloc", referenced from: _cs_mem_realloc in cs.o (maybe you meant: _cs_mem_realloc) "_strchr", referenced from: _Sparc_printInst in SparcInstPrinter.o _XCore_insn_extract in XCoreInstPrinter.o _XCore_printInst in XCoreInstPrinter.o "_strcmp", referenced from: _name2id in utils.o _A64NamedImmMapper_fromString in AArch64BaseInfo.o _printPredicateOperand in PPCInstPrinter.o _PPC_alias_insn in PPCMapping.o _printMemOperand in SparcInstPrinter.o _Sparc_map_hint in SparcMapping.o _XCore_reg_id in XCoreMapping.o ... "_strcpy", referenced from: _A64SysRegMapper_toString in AArch64BaseInfo.o "_strlen", referenced from: _cs_strdup in utils.o _SStream_concat0 in SStream.o _ARM_post_printer in ARMInstPrinter.o _PPC_printInst in PPCInstPrinter.o _Sparc_printInst in SparcInstPrinter.o _Sparc_map_hint in SparcMapping.o "_strncmp", referenced from: _ARM_post_printer in ARMInstPrinter.o "_strncpy", referenced from: _cs_disasm in cs.o _fill_insn in cs.o _cs_disasm_iter in cs.o "_strrchr", referenced from: _ARM_post_printer in ARMInstPrinter.o _AArch64_post_printer in AArch64InstPrinter.o _PPC_post_printer in PPCInstPrinter.o "_strstr", referenced from: _AArch64_printInst in AArch64InstPrinter.o _PPC_post_printer in PPCInstPrinter.o _printAliasInstr in SparcInstPrinter.o "_vsnprintf", referenced from: _cs_vsnprintf in cs.o (maybe you meant: _cs_vsnprintf) ld: symbol(s) not found for architecture i386 clang: error: linker command failed with exit code 1 (use -v to see invocation) make: *** [libcapstone.dylib] Error 1 error: [Errno 2] No such file or directory: 'libcapstone.dylib'

ERROR: Failed building wheel for capstone Running setup.py clean for capstone Failed to build capstone Installing collected packages: capstone Running setup.py install for capstone ... error ERROR: Command errored out with exit status 1: command: /Users/sabenix/Virtualenvs/cuckoo/bin/python2.7 -u -c 'import sys, setuptools, tokenize; sys.argv[0] = '"'"'/private/var/folders/db/v7f8qbh95sq3qvtykwysp4v40000gn/T/pip-req-build-ZHX9yi/setup.py'"'"'; file='"'"'/private/var/folders/db/v7f8qbh95sq3qvtykwysp4v40000gn/T/pip-req-build-ZHX9yi/setup.py'"'"';f=getattr(tokenize, '"'"'open'"'"', open)(file);code=f.read().replace('"'"'\r\n'"'"', '"'"'\n'"'"');f.close();exec(compile(code, file, '"'"'exec'"'"'))' install --record /private/var/folders/db/v7f8qbh95sq3qvtykwysp4v40000gn/T/pip-record-O3Qqm4/install-record.txt --single-version-externally-managed --compile --install-headers /Users/sabenix/Virtualenvs/cuckoo/bin/../include/site/python2.7/capstone cwd: /private/var/folders/db/v7f8qbh95sq3qvtykwysp4v40000gn/T/pip-req-build-ZHX9yi/ Complete output (161 lines): /Users/sabenix/Virtualenvs/cuckoo/lib/python2.7/site-packages/setuptools/dist.py:474: UserWarning: Normalizing '3.0.5.rc2' to '3.0.5rc2' normalized_version, running install running build Building C extensions LINK libcapstone.dylib ld: warning: The i386 architecture is deprecated for macOS (remove from the Xcode build setting: ARCHS) ld: warning: ignoring file /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.14.sdk/usr/lib/libSystem.tbd, missing required architecture i386 in file /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.14.sdk/usr/lib/libSystem.tbd Undefined symbols for architecture i386: "_bzero", referenced from: _Thumb_getInstruction in ARMDisassembler.o _ARM_getInstruction in ARMDisassembler.o _AArch64_getInstruction in AArch64Disassembler.o _Mips_getInstruction in MipsDisassembler.o _Mips64_getInstruction in MipsDisassembler.o _PPC_getInstruction in PPCDisassembler.o _SparcgetInstruction in SparcDisassembler.o ... "memcpy_chk", referenced from: _SystemZ_getInstruction in SystemZDisassembler.o "_stack_chk_fail", referenced from: _cs_disasm in cs.o _cs_disasm_iter in cs.o _ARM_get_insn_id in ARMMapping.o _A64SysRegMapper_toString in AArch64BaseInfo.o _decodeToMCInst in AArch64Disassembler.o _printInstruction in AArch64InstPrinter.o printTypedVectorList in AArch64InstPrinter.o ... "stack_chk_guard", referenced from: _cs_disasm in cs.o _cs_disasm_iter in cs.o _ARM_get_insn_id in ARMMapping.o _A64SysRegMapper_toString in AArch64BaseInfo.o _decodeToMCInst in AArch64Disassembler.o _printInstruction in AArch64InstPrinter.o _printTypedVectorList in AArch64InstPrinter.o ... _cs_disasm in cs.o _cs_disasm_iter in cs.o _ARM_get_insn_id in ARMMapping.o _A64SysRegMapper_toString in AArch64BaseInfo.o _decodeToMCInst in AArch64Disassembler.o _printInstruction in AArch64InstPrinter.o _printTypedVectorList in AArch64InstPrinter.o ... _cs_disasm in cs.o _cs_disasm_iter in cs.o _ARM_get_insn_id in ARMMapping.o _A64SysRegMapper_toString in AArch64BaseInfo.o _decodeToMCInst in AArch64Disassembler.o _printInstruction in AArch64InstPrinter.o _printTypedVectorList in AArch64InstPrinter.o ... _cs_disasm in cs.o _cs_disasm_iter in cs.o _ARM_get_insn_id in ARMMapping.o _A64SysRegMapper_toString in AArch64BaseInfo.o _decodeToMCInst in AArch64Disassembler.o _printInstruction in AArch64InstPrinter.o _printTypedVectorList in AArch64InstPrinter.o ... _cs_disasm in cs.o _cs_disasm_iter in cs.o _ARM_get_insn_id in ARMMapping.o _A64SysRegMapper_toString in AArch64BaseInfo.o _decodeToMCInst in AArch64Disassembler.o _printInstruction in AArch64InstPrinter.o _printTypedVectorList in AArch64InstPrinter.o ... _cs_disasm in cs.o _cs_disasm_iter in cs.o _ARM_get_insn_id in ARMMapping.o _A64SysRegMapper_toString in AArch64BaseInfo.o _decodeToMCInst in AArch64Disassembler.o _printInstruction in AArch64InstPrinter.o _printTypedVectorList in AArch64InstPrinter.o ... _cs_disasm in cs.o _cs_disasm_iter in cs.o _ARM_get_insn_id in ARMMapping.o _A64SysRegMapper_toString in AArch64BaseInfo.o _decodeToMCInst in AArch64Disassembler.o _printInstruction in AArch64InstPrinter.o _printTypedVectorList in AArch64InstPrinter.o ... ... "_strcpy_chk", referenced from: _XCore_insnextract in XCoreInstPrinter.o "strncpy_chk", referenced from: _Sparc_printInst in SparcInstPrinter.o "_tolower", referenced from: _A64NamedImmMapperfromString in AArch64BaseInfo.o "udivdi3", referenced from: _A64SysRegMapper_toString in AArch64BaseInfo.o "_atoi", referenced from: _XCore_insn_extract in XCoreInstPrinter.o "_calloc", referenced from: _cs_mem_calloc in cs.o (maybe you meant: _cs_mem_calloc) "_free", referenced from: _cs_mem_free in cs.o (maybe you meant: _cs_free, _cs_mem_free ) "_malloc", referenced from: _cs_mem_malloc in cs.o (maybe you meant: _cs_mem_malloc, _cs_malloc ) "_memcpy", referenced from: _cs_disasm in cs.o _fill_insn in cs.o _cs_disasm_iter in cs.o _SStream_concat0 in SStream.o "_memmove", referenced from: _cs_strdup in utils.o _X86_Intel_printInst in X86IntelInstPrinter.o _X86_ATT_printInst in X86ATTInstPrinter.o "_realloc", referenced from: _cs_mem_realloc in cs.o (maybe you meant: _cs_mem_realloc) "_strchr", referenced from: _Sparc_printInst in SparcInstPrinter.o _XCore_insn_extract in XCoreInstPrinter.o _XCore_printInst in XCoreInstPrinter.o "_strcmp", referenced from: _name2id in utils.o _A64NamedImmMapper_fromString in AArch64BaseInfo.o _printPredicateOperand in PPCInstPrinter.o _PPC_alias_insn in PPCMapping.o _printMemOperand in SparcInstPrinter.o _Sparc_map_hint in SparcMapping.o _XCore_reg_id in XCoreMapping.o ... "_strcpy", referenced from: _A64SysRegMapper_toString in AArch64BaseInfo.o "_strlen", referenced from: _cs_strdup in utils.o _SStream_concat0 in SStream.o _ARM_post_printer in ARMInstPrinter.o _PPC_printInst in PPCInstPrinter.o _Sparc_printInst in SparcInstPrinter.o _Sparc_map_hint in SparcMapping.o "_strncmp", referenced from: _ARM_post_printer in ARMInstPrinter.o "_strncpy", referenced from: _cs_disasm in cs.o _fill_insn in cs.o _cs_disasm_iter in cs.o "_strrchr", referenced from: _ARM_post_printer in ARMInstPrinter.o _AArch64_post_printer in AArch64InstPrinter.o _PPC_post_printer in PPCInstPrinter.o "_strstr", referenced from: _AArch64_printInst in AArch64InstPrinter.o _PPC_post_printer in PPCInstPrinter.o _printAliasInstr in SparcInstPrinter.o "_vsnprintf", referenced from: _cs_vsnprintf in cs.o (maybe you meant: _cs_vsnprintf) ld: symbol(s) not found for architecture i386 clang: error: linker command failed with exit code 1 (use -v to see invocation) make: *** [libcapstone.dylib] Error 1 error: [Errno 2] No such file or directory: 'libcapstone.dylib'

ERROR: Command errored out with exit status 1: /Users/sabenix/Virtualenvs/cuckoo/bin/python2.7 -u -c 'import sys, setuptools, tokenize; sys.argv[0] = '"'"'/private/var/folders/db/v7f8qbh95sq3qvtykwysp4v40000gn/T/pip-req-build-ZHX9yi/setup.py'"'"'; file='"'"'/private/var/folders/db/v7f8qbh95sq3qvtykwysp4v40000gn/T/pip-req-build-ZHX9yi/setup.py'"'"';f=getattr(tokenize, '"'"'open'"'"', open)(file);code=f.read().replace('"'"'\r\n'"'"', '"'"'\n'"'"');f.close();exec(compile(code, file, '"'"'exec'"'"'))' install --record /private/var/folders/db/v7f8qbh95sq3qvtykwysp4v40000gn/T/pip-record-O3Qqm4/install-record.txt --single-version-externally-managed --compile --install-headers /Users/sabenix/Virtualenvs/cuckoo/bin/../include/site/python2.7/capstone Check the logs for full command output.

huskersec commented 5 years ago

Same for me today

doomedraven commented 5 years ago

thats is capstone problem, see how to install capstone on mac, but for best performance, and cuckoo only officially maintained on ubuntu 18.04