{ "ml": { "v": "4", "fs": [ { "id": 0, "prob": 0.9262516498565674, "class": 0 } ], "prob": 0.92625165, "class": 0, "version": "v16.16", "thresholds": [ 0.9815004, 0.99404883 ], "analyzed_at": "2026-04-30T06:00:59Z" }, "path": "ahb.c", "raw": { "v": "4", "fs": [ { "f": "O₂(DyEr₂)", "x": 1, "id": 0, "is": [ "ioread32", "ioread32", "iowrite32", "iowrite32", "ath12k_ce_get_attr_flags", "cancel_work_sync", "disable_irq_nosync", "ath12k_ahb_ext_grp_disable", "napi_synchronize", "napi_disable", "enable_irq", "ath12k_ahb_read32", "ath12k_ahb_write32", "BIT", "ath12k_ahb_read32", "ath12k_ahb_write32", "BIT", "ath12k_ahb_setbit32", "ath12k_ahb_setbit32", "ath12k_ahb_setbit32", "ath12k_ahb_clearbit32", "ath12k_ahb_clearbit32", "ath12k_ahb_clearbit32", "ath12k_ce_get_attr_flags", "synchronize_irq", "synchronize_irq", "ath12k_ce_get_attr_flags", "ath12k_ahb_ce_irq_enable", "ath12k_ce_get_attr_flags", "ath12k_ahb_ce_irq_disable", "ath12k_ahb_ce_irqs_enable", "ath12k_ce_rx_post_buf", "napi_enable", "ath12k_ahb_ext_grp_enable", "ath12k_ahb_ext_irq_disable", "ath12k_ahb_sync_ext_irqs", "test_bit", "ath12k_ahb_ce_irqs_disable", "ath12k_ahb_sync_ce_irqs", "ath12k_ahb_cancel_workqueue", "timer_delete_sync", "ath12k_ce_cleanup_pipes", "ath12k_ab_to_ahb", "ath12k_core_get_reserved_mem", "devm_memremap", "IS_ERR", "ath12k_err", "PTR_ERR", "snprintf", "request_firmware", "ath12k_err", "ath12k_dbg", "ath12k_err", "u32_encode_bits", "qcom_mdt_load", "ath12k_err", "snprintf", "request_firmware", "ath12k_err", "ath12k_dbg", "ath12k_err", "qcom_mdt_load_no_init", "ath12k_err", "qcom_scm_pas_auth_and_reset", "ath12k_err", "qcom_smem_state_update_bits", "BIT", "BIT", "ath12k_err", "wait_for_completion_timeout", "ath12k_err", "wait_for_completion_timeout", "ath12k_err", "qcom_smem_state_update_bits", "BIT", "ath12k_dbg", "release_firmware", "release_firmware", "ath12k_ab_to_ahb", "qcom_smem_state_update_bits", "BIT", "BIT", "wait_for_completion_timeout", "ath12k_err", "qcom_smem_state_update_bits", "BIT", "u32_encode_bits", "qcom_scm_pas_shutdown", "ath12k_err", "from_work", "ath12k_ce_per_engine_service", "ath12k_ahb_ce_irq_enable", "ath12k_ahb_ce_irq_disable", "queue_work", "container_of", "ath12k_ab_to_dp", "ath12k_dp_service_srng", "napi_complete_done", "ath12k_ahb_ext_grp_enable", "ath12k_ahb_ext_grp_disable", "napi_schedule", "alloc_netdev_dummy", "netif_napi_add", "BIT", "BIT", "BIT", "BIT", "BIT", "BIT", "platform_get_irq_byname", "irq_set_status_flags", "devm_request_irq", "ath12k_warn", "ath12k_ce_get_attr_flags", "INIT_WORK", "platform_get_irq_byname", "devm_request_irq", "ath12k_ahb_config_ext_irq", "le32_to_cpu", "le32_to_cpu", "WARN_ON", "le32_to_cpu", "WARN_ON", "le32_to_cpu", "WARN_ON", "ath12k_ab_to_ahb", "complete", "complete", "complete", "ath12k_err", "ath12k_ab_to_ahb", "platform_get_irq_byname", "devm_kzalloc", "scnprintf", "devm_request_threaded_irq", "dev_err_probe", "devm_qcom_smem_state_get", "IS_ERR", "dev_err_probe", "PTR_ERR", "devm_qcom_smem_state_get", "IS_ERR", "dev_err_probe", "PTR_ERR", "init_completion", "init_completion", "init_completion", "container_of", "ath12k_dbg", "complete", "ath12k_ab_to_ahb", "init_completion", "qcom_register_ssr_notifier", "IS_ERR", "PTR_ERR", "ath12k_ab_to_ahb", "ath12k_err", "qcom_unregister_ssr_notifier", "ath12k_ab_to_ahb", "of_parse_phandle", "ath12k_err", "rproc_get_by_phandle", "of_node_put", "dev_err_probe", "ath12k_ab_to_ahb", "rproc_boot", "ath12k_err", "wait_for_completion_timeout", "ath12k_err", "ath12k_ab_to_ahb", "ath12k_ahb_get_rproc", "ath12k_ahb_register_rproc_notifier", "dev_err_probe", "ath12k_ahb_boot_root_pd", "ath12k_err", "ath12k_ahb_config_rproc_irq", "ath12k_ahb_unregister_rproc_notifier", "rproc_put", "ath12k_ab_to_ahb", "ath12k_ahb_unregister_rproc_notifier", "rproc_put", "ath12k_ab_to_ahb", "devm_platform_get_and_ioremap_resource", "IS_ERR", "dev_err_probe", "PTR_ERR", "resource_size", "ioremap", "dev_err", "devm_clk_get", "IS_ERR", "dev_err_probe", "PTR_ERR", "clk_prepare_enable", "dev_err", "devm_clk_put", "iounmap", "devm_iounmap", "ath12k_ab_to_ahb", "devm_iounmap", "iounmap", "clk_disable_unprepare", "devm_clk_put", "of_match_device", "dma_set_mask_and_coherent", "DMA_BIT_MASK", "dev_err", "ath12k_core_alloc", "ath12k_ab_to_ahb", "platform_set_drvdata", "ath12k_ahb_get_device_family", "ath12k_err", "ath12k_dbg", "ab_ahb.device_family_ops.probe", "ath12k_err", "of_property_read_u32", "set_bit", "ath12k_core_pre_init", "ath12k_ahb_resource_init", "ath12k_hal_srng_init", "ath12k_ce_alloc_pipes", "ath12k_err", "ath12k_ahb_init_qmi_ce_config", "ath12k_ahb_configure_rproc", "ath12k_ahb_config_irq", "ath12k_err", "ab_ahb.device_family_ops.arch_init", "ath12k_err", "ath12k_core_init", "ath12k_err", "ab_ahb.device_family_ops.arch_deinit", "ath12k_ahb_deconfigure_rproc", "ath12k_ce_free_pipes", "ath12k_hal_srng_deinit", "ath12k_ahb_resource_deinit", "ath12k_core_free", "platform_set_drvdata", "test_bit", "wait_for_completion_timeout", "ath12k_warn", "set_bit", "cancel_work_sync", "cancel_work_sync", "ath12k_ab_to_ahb", "ath12k_hal_srng_deinit", "ath12k_ce_free_pipes", "ath12k_ahb_resource_deinit", "ath12k_ahb_deconfigure_rproc", "ab_ahb.device_family_ops.arch_deinit", "ath12k_core_free", "platform_set_drvdata", "platform_get_drvdata", "test_bit", "ath12k_ahb_power_down", "ath12k_ahb_remove_prepare", "ath12k_core_hw_group_cleanup", "ath12k_core_deinit", "ath12k_ahb_free_resources", "pr_err", "platform_driver_register", "EXPORT_SYMBOL", "platform_driver_unregister", "EXPORT_SYMBOL" ], "ms": { "text": { "tab_count": 1311.0, "digit_ratio": 0.05, "space_count": 2029.0, "total_lines": 1217.0, "char_entropy": 5.33, "mixed_indent": true, "unique_chars": 90.0, "import_density": 21.61, "string_density": 0.19, "avg_line_length": 24.72, "max_line_length": 85.0, "empty_line_ratio": 0.18, "last_line_length": 44.0, "most_common_char": "_", "whitespace_ratio": 0.15, "most_common_ratio": 0.06, "identifier_density": 1.19, "line_length_stddev": 22.29, "normalized_import_count": 7.54, "normalized_string_count": 6.54, "suspicious_comment_ratio": 0.06, "max_inline_whitespace_run": 2.0, "normalized_function_count": 1.32, "imports_to_functions_ratio": 5.72, "strings_to_functions_ratio": 4.96, "suspicious_identifier_ratio": 0.01, "normalized_unique_identifiers": 29.66, "identifiers_to_functions_ratio": 6.61 }, "imports": { "total": 263.0, "unique_modules": 127.0, "third_party_count": 263.0, "third_party_ratio": 1.0 }, "strings": { "total": 228.0, "avg_length": 21.47, "max_length": 48.0, "avg_entropy": 3.36, "total_bytes": 4895.0, "entropy_stddev": 0.83 }, "comments": { "chars": 1206.0, "lines": 32.0, "total": 16.0, "to_code_ratio": 0.03, "high_entropy_comments": 1.0 }, "functions": { "total": 46.0, "length_stddev": 25.16, "over_100_lines": 2.0, "avg_name_length": 56.52, "no_params_count": 46.0, "avg_length_lines": 22.5, "max_length_lines": 124.0, "min_length_lines": 5.0, "high_entropy_names": 46.0, "density_per_100_lines": 3.78, "code_in_functions_ratio": 0.85 }, "identifiers": { "total": 1443.0, "avg_length": 16.69, "max_length": 38.0, "min_length": 1.0, "avg_entropy": 3.2, "reuse_ratio": 0.21, "unique_count": 304.0, "length_stddev": 8.77, "has_digit_ratio": 0.5, "sequential_names": 2.0, "single_char_count": 2.0, "single_char_ratio": 0.01, "high_entropy_count": 147.0, "high_entropy_ratio": 0.48, "all_lowercase_ratio": 0.41, "all_uppercase_ratio": 0.09, "numeric_suffix_count": 39.0, "underscore_prefix_count": 2.0 } }, "ss": [ [ 204, "\u003clinux/dma-mapping.h\u003e" ], [ 235, "\u003clinux/firmware/qcom/qcom_scm.h\u003e" ], [ 277, "\u003clinux/of.h\u003e" ], [ 299, "\u003clinux/of_device.h\u003e" ], [ 328, "\u003clinux/platform_device.h\u003e" ], [ 363, "\u003clinux/remoteproc.h\u003e" ], [ 393, "\u003clinux/soc/qcom/mdt_loader.h\u003e" ], [ 432, "\u003clinux/soc/qcom/smem_state.h\u003e" ], [ 471, "ahb.h" ], [ 472, "ahb.h" ], [ 488, "debug.h" ], [ 489, "debug.h" ], [ 507, "hif.h" ], [ 508, "hif.h" ], [ 740, "spawn" ], [ 741, "spawn" ], [ 758, "ready" ], [ 759, "ready" ], [ 776, "stop-ack" ], [ 777, "stop-ack" ], [ 843, "misc-pulse1" ], [ 844, "misc-pulse1" ], [ 859, "misc-latch" ], [ 860, "misc-latch" ], [ 874, "sw-exception" ], [ 875, "sw-exception" ], [ 891, "watchdog" ], [ 892, "watchdog" ], [ 904, "ce0" ], [ 905, "ce0" ], [ 912, "ce1" ], [ 913, "ce1" ], [ 920, "ce2" ], [ 921, "ce2" ], [ 928, "ce3" ], [ 929, "ce3" ], [ 936, "ce4" ], [ 937, "ce4" ], [ 944, "ce5" ], [ 945, "ce5" ], [ 952, "ce6" ], [ 953, "ce6" ], [ 960, "ce7" ], [ 961, "ce7" ], [ 968, "ce8" ], [ 969, "ce8" ], [ 976, "ce9" ], [ 977, "ce9" ], [ 984, "ce10" ], [ 985, "ce10" ], [ 993, "ce11" ], [ 994, "ce11" ], [ 1002, "host2wbm-desc-feed" ], [ 1003, "host2wbm-desc-feed" ], [ 1025, "host2reo-re-injection" ], [ 1026, "host2reo-re-injection" ], [ 1051, "host2reo-command" ], [ 1052, "host2reo-command" ], [ 1072, "host2rxdma-monitor-ring3" ], [ 1073, "host2rxdma-monitor-ring3" ], [ 1101, "host2rxdma-monitor-ring2" ], [ 1102, "host2rxdma-monitor-ring2" ], [ 1130, "host2rxdma-monitor-ring1" ], [ 1131, "host2rxdma-monitor-ring1" ], [ 1159, "reo2ost-exception" ], [ 1160, "reo2ost-exception" ], [ 1181, "wbm2host-rx-release" ], [ 1182, "wbm2host-rx-release" ], [ 1205, "reo2host-status" ], [ 1206, "reo2host-status" ], [ 1225, "reo2host-destination-ring4" ], [ 1226, "reo2host-destination-ring4" ], [ 1256, "reo2host-destination-ring3" ], [ 1257, "reo2host-destination-ring3" ], [ 1287, "reo2host-destination-ring2" ], [ 1288, "reo2host-destination-ring2" ], [ 1318, "reo2host-destination-ring1" ], [ 1319, "reo2host-destination-ring1" ], [ 1349, "rxdma2host-monitor-destination-mac3" ], [ 1350, "rxdma2host-monitor-destination-mac3" ], [ 1389, "rxdma2host-monitor-destination-mac2" ], [ 1390, "rxdma2host-monitor-destination-mac2" ], [ 1429, "rxdma2host-monitor-destination-mac1" ], [ 1430, "rxdma2host-monitor-destination-mac1" ], [ 1469, "ppdu-end-interrupts-mac3" ], [ 1470, "ppdu-end-interrupts-mac3" ], [ 1498, "ppdu-end-interrupts-mac2" ], [ 1499, "ppdu-end-interrupts-mac2" ], [ 1527, "ppdu-end-interrupts-mac1" ], [ 1528, "ppdu-end-interrupts-mac1" ], [ 1556, "rxdma2host-monitor-status-ring-mac3" ], [ 1557, "rxdma2host-monitor-status-ring-mac3" ], [ 1596, "rxdma2host-monitor-status-ring-mac2" ], [ 1597, "rxdma2host-monitor-status-ring-mac2" ], [ 1636, "rxdma2host-monitor-status-ring-mac1" ], [ 1637, "rxdma2host-monitor-status-ring-mac1" ], [ 1676, "host2rxdma-host-buf-ring-mac3" ], [ 1677, "host2rxdma-host-buf-ring-mac3" ], [ 1710, "host2rxdma-host-buf-ring-mac2" ], [ 1711, "host2rxdma-host-buf-ring-mac2" ], [ 1744, "host2rxdma-host-buf-ring-mac1" ], [ 1745, "host2rxdma-host-buf-ring-mac1" ], [ 1778, "rxdma2host-destination-ring-mac3" ], [ 1779, "rxdma2host-destination-ring-mac3" ], [ 1815, "rxdma2host-destination-ring-mac2" ], [ 1816, "rxdma2host-destination-ring-mac2" ], [ 1852, "rxdma2host-destination-ring-mac1" ], [ 1853, "rxdma2host-destination-ring-mac1" ], [ 1889, "host2tcl-input-ring4" ], [ 1890, "host2tcl-input-ring4" ], [ 1914, "host2tcl-input-ring3" ], [ 1915, "host2tcl-input-ring3" ], [ 1939, "host2tcl-input-ring2" ], [ 1940, "host2tcl-input-ring2" ], [ 1964, "host2tcl-input-ring1" ], [ 1965, "host2tcl-input-ring1" ], [ 1989, "wbm2host-tx-completions-ring4" ], [ 1990, "wbm2host-tx-completions-ring4" ], [ 2023, "wbm2host-tx-completions-ring3" ], [ 2024, "wbm2host-tx-completions-ring3" ], [ 2057, "wbm2host-tx-completions-ring2" ], [ 2058, "wbm2host-tx-completions-ring2" ], [ 2091, "wbm2host-tx-completions-ring1" ], [ 2092, "wbm2host-tx-completions-ring1" ], [ 2125, "tcl2host-status-ring" ], [ 2126, "tcl2host-status-ring" ], [ 8976, "unable to map memory region: %pa+%pa\\n" ], [ 8977, "unable to map memory region: %pa+%pa" ], [ 9121, "%s/%s/%s%d%s" ], [ 9122, "%s/%s/%s%d%s" ], [ 9323, "request_firmware failed\\n" ], [ 9324, "request_firmware failed" ], [ 9403, "Booting fw image %s, size %zd\\n" ], [ 9404, "Booting fw image %s, size %zd" ], [ 9499, "Invalid firmware size\\n" ], [ 9500, "Invalid firmware size" ], [ 9835, "Failed to load MDT segments: %d\\n" ], [ 9836, "Failed to load MDT segments: %d" ], [ 9935, "%s/%s/%s" ], [ 9936, "%s/%s/%s" ], [ 10085, "request_firmware failed\\n" ], [ 10086, "request_firmware failed" ], [ 10166, "Booting fw image %s, size %zd\\n" ], [ 10167, "Booting fw image %s, size %zd" ], [ 10265, "Invalid firmware size\\n" ], [ 10266, "Invalid firmware size" ], [ 10460, "Failed to load MDT segments: %d\\n" ], [ 10461, "Failed to load MDT segments: %d" ], [ 10644, "failed to boot the remote processor %d\\n" ], [ 10645, "failed to boot the remote processor %d" ], [ 10897, "Failed to update spawn state %d\\n" ], [ 10898, "Failed to update spawn state %d" ], [ 11098, "UserPD spawn wait timed out\\n" ], [ 11099, "UserPD spawn wait timed out" ], [ 11308, "UserPD ready wait timed out\\n" ], [ 11309, "UserPD ready wait timed out" ], [ 11493, "UserPD%d is now UP\\n" ], [ 11494, "UserPD%d is now UP" ], [ 12037, "UserPD stop wait timed out\\n" ], [ 12038, "UserPD stop wait timed out" ], [ 12347, "scm pas shutdown failed for userPD%d: %d\\n" ], [ 12348, "scm pas shutdown failed for userPD%d: %d" ], [ 16078, "failed request_irq for %d\\n" ], [ 16079, "failed request_irq for %d" ], [ 18568, "Invalid userpd interrupt\\n" ], [ 18569, "Invalid userpd interrupt" ], [ 19201, "UserPD%u-%s" ], [ 19202, "UserPD%u-%s" ], [ 19512, "Request %s irq failed: %d\\n" ], [ 19513, "Request %s irq failed: %d" ], [ 19649, "spawn" ], [ 19650, "spawn" ], [ 19804, "Failed to acquire spawn state\\n" ], [ 19805, "Failed to acquire spawn state" ], [ 19904, "stop" ], [ 19905, "stop" ], [ 20054, "Failed to acquire stop state\\n" ], [ 20055, "Failed to acquire stop state" ], [ 20548, "Root PD is UP\\n" ], [ 20549, "Root PD is UP" ], [ 21249, "Rproc notifier not registered\\n" ], [ 21250, "Rproc notifier not registered" ], [ 21649, "qcom,rproc" ], [ 21650, "qcom,rproc" ], [ 21696, "failed to get q6_rproc handle\\n" ], [ 21697, "failed to get q6_rproc handle" ], [ 21894, "failed to get rproc\\n" ], [ 21895, "failed to get rproc" ], [ 22185, "RootPD boot failed\\n" ], [ 22186, "RootPD boot failed" ], [ 22364, "RootPD ready wait timed out\\n" ], [ 22365, "RootPD ready wait timed out" ], [ 22739, "failed to register rproc notifier\\n" ], [ 22740, "failed to register rproc notifier" ], [ 22927, "failed to boot the remote processor Q6\\n" ], [ 22928, "failed to boot the remote processor Q6" ], [ 23711, "ioremap error\\n" ], [ 23712, "ioremap error" ], [ 24141, "ce ioremap error\\n" ], [ 24142, "ce ioremap error" ], [ 24362, "xo" ], [ 24363, "xo" ], [ 24467, "failed to get xo clock\\n" ], [ 24468, "failed to get xo clock" ], [ 24602, "failed to enable gcc_xo_clk: %d\\n" ], [ 24603, "failed to enable gcc_xo_clk: %d" ], [ 26165, "Failed to set 32-bit coherent dma\\n" ], [ 26166, "Failed to set 32-bit coherent dma" ], [ 26592, "failed to get device family: %d\\n" ], [ 26593, "failed to get device family: %d" ], [ 26716, "AHB device family id: %d\\n" ], [ 26717, "AHB device family id: %d" ], [ 27071, "failed to probe device: %d\\n" ], [ 27072, "failed to probe device: %d" ], [ 27368, "memory-region" ], [ 27369, "memory-region" ], [ 27722, "failed to allocate ce pipes: %d\\n" ], [ 27723, "failed to allocate ce pipes: %d" ], [ 27967, "failed to configure irq: %d\\n" ], [ 27968, "failed to configure irq: %d" ], [ 28253, "AHB arch_init failed %d\\n" ], [ 28254, "AHB arch_init failed %d" ], [ 28380, "failed to init core: %d\\n" ], [ 28381, "failed to init core: %d" ], [ 29085, "failed to receive recovery response completion\\n" ], [ 29086, "failed to receive recovery response completion" ], [ 30423, "Driver already registered for id %d\\n" ], [ 30424, "Driver already registered for id %d" ] ], "sz": 31302, "ts": [ { "a": "T1046", "c": 0.800000011920929, "d": "EALREADY async connect state", "e": [ "EALREADY" ], "i": "objectives/discovery/network/scan/port::errno-ealready", "l": 1, "m": "E1046" }, { "c": 0.6000000238418579, "d": "Kernel error code return", "e": [ "return -ENODEV;", "return -ENOMEM;", "return -ENOENT;", "return -ENOMEM;", "return -ENOENT;", "return dev_err_probe(\u0026ab-\u003epdev-\u003edev, -EPROBE_DEFER,\n\t\t\t\t \"failed to get rproc\\n\");", "return -ETIMEDOUT;", "return -ENOMEM;", "return -EINVAL;", "return -EINVAL;", "return -EALREADY;" ], "i": "objectives/evasion/kernel-hide/lkm/internals::error-code-return", "l": 1 }, { "c": 0.20000000298023224, "d": "command keyword", "e": [ "command" ], "i": "micro-behaviors/data/text/keywords::command-dup", "l": 1 }, { "a": "T1106", "c": 0.949999988079071, "d": "EXPORT_SYMBOL macro", "e": [ "EXPORT_SYMBOL(" ], "i": "micro-behaviors/os/syscall/invoke::export-symbol-macro", "l": 2 }, { "c": 0.699999988079071, "d": "Kernel export symbol macro", "e": [ "EXPORT_SYMBOL" ], "i": "objectives/evasion/kernel-hide/lkm/tracepoint::export-symbol-macro", "l": 1 } ], "sha": "81f0a4c1a3de9e449831958227ccb35bc28e13881f762c7601f52635fa4b3c02", "path": "/data/samples/good/repos/linux/drivers/net/wireless/ath/ath12k/ahb.c", "type": "c" } ], "tv": "f6eaa" } }