{
  "ml": {
    "v": "4",
    "fs": [
      {
        "id": 0,
        "prob": 0.12601469457149506,
        "class": 0
      }
    ],
    "prob": 0.1260147,
    "class": 0,
    "models": [
      {
        "m": "az",
        "prob": 0.060943644,
        "class": 0
      },
      {
        "m": "az/source",
        "prob": 0.1260147,
        "class": 0
      },
      {
        "m": "az/c",
        "prob": 0.027083334,
        "class": 0
      }
    ],
    "version": "v17.17",
    "thresholds": [
      0.999503,
      0.9998882
    ],
    "analyzed_at": "2026-05-25T19:32:21Z"
  },
  "path": "fs_helper.c",
  "raw": {
    "v": "5",
    "fs": [
      {
        "f": "O(Er)",
        "x": 1,
        "ff": {
          "i": [
            [
              "",
              "container_of"
            ],
            [
              "",
              "PROC_I"
            ],
            [
              "",
              "strncmp"
            ],
            [
              "",
              "strlen"
            ],
            [
              "",
              "filp_open"
            ],
            [
              "",
              "IS_ERR"
            ],
            [
              "",
              "file_inode"
            ],
            [
              "",
              "IS_ERR"
            ],
            [
              "",
              "PDE"
            ],
            [
              "",
              "filp_close"
            ],
            [
              "",
              "proc_find_by_path"
            ],
            [
              "",
              "proc_find_by_path"
            ],
            [
              "",
              "dfs"
            ],
            [
              "",
              "printk"
            ],
            [
              "",
              "container_of"
            ],
            [
              "",
              "dfs"
            ],
            [
              "",
              "dfs"
            ],
            [
              "",
              "fs_helper.h"
            ]
          ],
          "m": {
            "ast": {
              "max_depth": 10.0,
              "bind_count": 1.0,
              "call_count": 17.0,
              "node_count": 496.0,
              "member_count": 8.0,
              "identifier_count": 38.0,
              "member_depth_max": 3.0,
              "string_literal_count": 3.0
            },
            "file": {
              "size": 1429.0,
              "entropy": 4.78,
              "size_bytes": 1429.0
            },
            "text": {
              "digit_ratio": 0.01,
              "space_count": 234.0,
              "total_lines": 62.0,
              "char_entropy": 4.78,
              "unique_chars": 64.0,
              "string_density": 0.05,
              "avg_line_length": 22.06,
              "max_line_length": 73.0,
              "empty_line_ratio": 0.18,
              "last_line_length": 1.0,
              "whitespace_ratio": 0.21,
              "most_common_ratio": 0.07,
              "identifier_density": 1.48,
              "line_length_stddev": 23.65,
              "normalized_string_count": 0.38,
              "repeated_char_sequences": 1.0,
              "most_common_char_is_null": 0.0,
              "max_inline_whitespace_run": 1.0,
              "most_common_char_codepoint": 114.0,
              "normalized_unique_identifiers": 6.38
            },
            "binds": {
              "count": 1.0
            },
            "calls": {
              "count": 17.0
            },
            "source": {
              "class_count": 7.0,
              "function_count": 7.0
            },
            "imports": {
              "count": 1.0,
              "unique_modules": 1.0,
              "third_party_count": 1.0,
              "third_party_ratio": 1.0
            },
            "members": {
              "count": 8.0
            },
            "strings": {
              "total": 3.0,
              "avg_length": 11.67,
              "max_length": 19.0,
              "path_count": 1.0,
              "avg_entropy": 3.08,
              "total_bytes": 35.0,
              "entropy_stddev": 0.61
            },
            "functions": {
              "count": 14.0
            },
            "identifiers": {
              "count": 38.0,
              "total": 92.0,
              "avg_length": 8.32,
              "max_length": 25.0,
              "min_length": 3.0,
              "avg_entropy": 2.63,
              "reuse_ratio": 0.41,
              "unique_count": 38.0,
              "length_stddev": 5.09,
              "high_entropy_count": 2.0,
              "high_entropy_ratio": 0.05,
              "all_lowercase_ratio": 0.87,
              "all_uppercase_ratio": 0.13
            }
          },
          "s": [
            [
              9,
              "u8",
              "fs_helper.h"
            ],
            [
              10,
              "u8",
              "fs_helper.h"
            ],
            [
              346,
              "u8",
              "/proc"
            ],
            [
              347,
              "u8",
              "/proc"
            ],
            [
              355,
              "10",
              "5"
            ],
            [
              458,
              "10",
              "0"
            ],
            [
              680,
              "10",
              "0"
            ],
            [
              883,
              "10",
              "0"
            ],
            [
              1075,
              "10",
              "0"
            ],
            [
              1188,
              "u8",
              "proc_list_dir: %s\\n"
            ],
            [
              1189,
              "u8",
              "proc_list_dir: %s"
            ]
          ],
          "v": {
            "source.language": "c",
            "source.imports[0]": "IS_ERR",
            "source.imports[1]": "PDE",
            "source.imports[2]": "PROC_I",
            "source.imports[3]": "container_of",
            "source.imports[4]": "dfs",
            "source.imports[5]": "file_inode",
            "source.imports[6]": "filp_close",
            "source.imports[7]": "filp_open",
            "source.imports[8]": "fs_helper.h",
            "source.imports[9]": "printk",
            "source.strings[0]": "fs_helper.h",
            "source.strings[1]": "proc_list_dir: %s",
            "source.strings[2]": "proc_list_dir: %s\\n",
            "source.has_imports": true,
            "source.imports[10]": "proc_find_by_path",
            "source.imports[11]": "strlen",
            "source.imports[12]": "strncmp",
            "source.functions[0]": "*PDE(const struct inode *inode)",
            "source.functions[1]": "*PROC_I(const struct inode *inode)",
            "source.functions[2]": "*proc_find_by_path(const char *path)",
            "source.functions[3]": "*proc_get_proc_ops_by_path(const char *path)",
            "source.functions[4]": "*proc_get_seq_ops_by_path(const char *path)",
            "source.functions[5]": "dfs(struct rb_node *node)",
            "source.functions[6]": "proc_list_dir(struct proc_dir_entry *entry)"
          },
          "ct": [
            "IS_ERR",
            "PDE",
            "PROC_I",
            "container_of",
            "dfs",
            "file_inode",
            "filp_close",
            "filp_open",
            "printk",
            "proc_find_by_path",
            "strlen",
            "strncmp"
          ],
          "id": "c",
          "mc": [
            "PROC_I().pde",
            "container_of().name",
            "entry.subdir",
            "entry.subdir.rb_node",
            "node.rb_left",
            "node.rb_right",
            "res.proc_ops",
            "res.seq_ops"
          ]
        },
        "id": 0,
        "sz": 1429,
        "ts": [
          {
            "c": 0.699999988079071,
            "d": "printk kernel logging function",
            "e": [
              "printk"
            ],
            "i": "objectives/evasion/kernel-hide/module::printk-sym",
            "l": 3
          },
          {
            "c": 0.949999988079071,
            "d": "imports fs_helper.h",
            "e": [
              "fs_helper.h"
            ],
            "i": "metadata/import/c::fs_helper/h",
            "l": 2
          }
        ],
        "sha": "1035eaed931fc3d506f6f2a0d1cd8a5b75a3dfbec754c7640d366d3a0b057b42",
        "path": "/data/samples/bad/projects/ksymless/src/kernel/fs_helper.c",
        "type": "c"
      }
    ],
    "tv": "cf883"
  }
}