{ "ml": { "v": "7", "eng": "2.9.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.028812787, "rte": "az", "prob": 0.028812787 }, { "cls": 0, "raw": 0.00063384575, "rte": "az/native", "prob": 0.00063384575 }, { "cls": 0, "raw": 0.00004961093, "rte": "az/elf", "prob": 0.00004961093 } ], "prob": 0.028812787, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.02881278656423092, "type": "elf" } ], "version": "v18.18", "analyzed_at": "2026-09-12T01:57:20Z" }, "path": "bfs.module", "raw": { "v": "8", "rev": "b3dc8", "files": [ { "id": 0, "ctx": [ { "b": "E))420S-r400000000000rtp-0rr9100000000000000000000{:2[u0000000000kMy=:002m:3\u0026*Unf#asd3\u003cIybBq4h9.GlU?Jx^I73\u003cQ[UoO{NJ\u003cW.zGBoSn:1pak]f#blV.:}oq0000000010nq?%]nqVEd=[Ssw.=ol:\u003cV#\u003cqItQpCJFdVr%nLSD^/", "ln": 0 }, { "b": "0000000030\u00269Blrz/^agavnK@azbt7wPJcrBy/p?vruQ5ze:OtBz\u0026pxwNP9(Aa9*faARpdaz2C3aA7\u003cmw[=6)0blsXz/P(fv@@\u00267x(W={BrC4ez!0N70blsXz/P(fv@@\u0026czE^E4wN/*8vR/%)yJxF\u0026zEWQ9A+e:5ay]zkvR/Qcx(mD}A+e:5ayYe9v}#6R", "ln": 5313 }, { "b": "00002009620SSi20000J1POJ50001j000020096L2lj-70000y0rr910001v000020096@2MK\u002680000?000000001J000020097^2MK\u00268000200SSi20001Y00002", "ln": 5857 } ], "mol": "Md₃(BiBkHe)", "sha": "83faa3ed556f311c356c8ee1732030b4861ef0b3eeabe2c0b5e3bfb456dec6c7", "path": "bfs.module", "risk": 4, "size": 10488, "supp": [ { "by": [ { "id": "metrics", "spans": [ [ 0, 25 ] ] } ], "id": "metadata/build/artifact::elf-stripped-but-symtab-present", "crit": "notable", "kind": "unless" }, { "by": [ { "id": "metadata/binary/linking/static::elf-needed-libs-zero", "spans": [ [ 0, 25 ] ] } ], "id": "metadata/hardening/mitigation::no-relro", "crit": "notable", "kind": "unless" } ], "type": "elf", "facts": { "imp": [ [ "", "grub_xasprintf" ], [ "", "grub_memmove" ], [ "", "grub_fshelp_find_file_lookup" ], [ "", "grub_disk_read" ], [ "", "grub_errno" ], [ "", "grub_fs_list" ], [ "", "grub_print_error" ], [ "", "grub_zalloc" ], [ "", "grub_malloc" ], [ "", "grub_is_lockdown" ], [ "", "grub_error" ], [ "", "grub_list_remove" ], [ "", "grub_free" ], [ "", "grub_strndup" ], [ "", "grub_list_push" ], [ "", "grub_memcmp" ] ], "sec": [ [ ".text", 64, 5260, 5.64, "alloc,executable" ], [ ".rela.text", 7096, 2352, 1.67, "info_link" ], [ ".rodata.str1.1", 5324, 184, 4.47, "alloc,merge,strings" ], [ ".data", 5512, 88, 0.0, "write,alloc" ], [ ".rela.data", 9448, 168, 1.38, "info_link" ], [ ".module_license", 5600, 15, 3.64, "write,alloc" ], [ ".symtab", 5616, 960, 1.53, "" ], [ ".strtab", 6576, 513, 4.24, "" ], [ ".shstrtab", 9616, 101, 4.08, "" ] ], "funcs": [ [ "sym.bfs_strcmp", 134217792 ], [ "sym.grub_bfs_close", 134217837 ], [ "sym.grub_bfs_dir_iter", 134217861 ], [ "sym.mount", 134218028 ], [ "sym.grub_bfs_label", 134218163 ], [ "sym.read_extent.constprop.0", 134218258 ], [ "sym.read_bfs_file", 134218305 ], [ "sym.read_b_node", 134219630 ], [ "sym.grub_bfs_read", 134219920 ], [ "sym.find_in_b_tree", 134219991 ], [ "sym.lookup_file", 134220673 ], [ "sym.grub_bfs_uuid", 134220911 ], [ "sym.read_symlink", 134221584 ], [ "sym.find_file", 134221767 ], [ "sym.grub_bfs_dir", 134222006 ], [ "sym.grub_bfs_open", 134222710 ], [ "sym.grub_mod_init", 134222930 ], [ "sym.grub_mod_fini", 134223007 ] ], "metrics": { "elf": { "bits": 64, "entry": 0, "has_got": 0, "has_plt": 0, "has_note": 1, "has_symtab": 1, "note_count": 0, "nx_enabled": 1, "dynrel_count": 0, "dynsym_count": 0, "has_eh_frame": 0, "no_gnu_stack": 0, "symtab_count": 40, "dynrela_count": 0, "little_endian": 1, "pltreloc_count": 0, "executable_stack": 0, "wx_segment_count": 0, "program_header_count": 0, "stripped_with_symtab": 1, "load_segment_max_file_size": 0, "load_segment_max_memory_size": 0, "section_relocation_group_count": 2, "stripped_metadata_section_count": 6 }, "file": { "size": 10488, "entropy": 4.57 }, "binary": { "is_pie": 0, "has_overlay": 1, "is_stripped": 0, "basic_blocks": 193, "code_entropy": 5.64, "data_entropy": 0.53, "overlay_size": 771, "string_count": 55, "overlay_ratio": 0.07, "avg_complexity": 6.67, "max_complexity": 27, "huge_func_count": 0, "leaf_func_count": 8, "overlay_entropy": 1.03, "tiny_func_count": 2, "avg_basic_blocks": 10.72, "entropy_variance": 3.08, "avg_string_length": 13.73, "max_string_length": 36, "peak_region_bytes": 4096, "code_to_data_ratio": 0.98, "peak_region_entropy": 5.63, "string_length_stddev": 6.14, "largest_section_ratio": 0.5, "sentence_string_count": 6, "sentence_string_ratio": 0.11, "high_entropy_string_count": 0 }, "imports": { "count": 16 }, "sections": { "count": 12, "code_size": 5260, "entropy_max": 5.64, "entropy_mean": 2.96, "name_entropy": 3.96, "writable_count": 3, "executable_count": 1, "nonstandard_count": 6, "executable_writable_count": 0 }, "functions": { "count": 18 }, "consistency": { "extension_content_mismatch": 1, "extension_content_mismatch.binary_as_unknown": 1 }, "dependencies": { "count": 0 } } }, "traits": [ { "id": "metadata/binary/layout::binary-format-checked", "conf": 1.0, "crit": 2, "desc": "Binary format is identified", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/binary/linking/static::elf-needed-libs-zero", "conf": 0.9, "crit": 2, "desc": "ELF imports zero needed libraries", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/build/artifact::stripped-toolchain-comment", "conf": 1.0, "crit": 3, "desc": "ELF omits compiler metadata (.comment)" }, { "id": "metadata/hardening/mitigation::no-pie-struct", "conf": 0.6, "crit": 3, "desc": "Binary not position-independent (no ASLR)" }, { "id": "metadata/binary/linking/static::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "uses": [ 0 ], "spans": [ [ 0, 16 ] ] }, { "id": "metadata/hardening/missing::static-linked-heuristic", "conf": 0.75, "crit": 3, "desc": "ELF lacks dynamic linker sections", "uses": [ 0 ], "spans": [ [ 0, 16 ] ] }, { "id": "metadata/binary/linking/static::static-linked", "conf": 0.8, "crit": 3, "desc": "Statically linked binary", "uses": [ 1, 4 ], "spans": [ [ 0, 25 ] ] } ] } ] } }