{ "ml": { "v": "4", "fs": [ { "id": 0, "prob": 0.10377421975135803, "class": 0 } ], "prob": 0.10377422, "class": 0, "models": [ { "m": "az", "prob": 0.10377422, "class": 0 }, { "m": "az/source", "prob": 0.003722087, "class": 0 }, { "m": "az/rust", "prob": 0.00000000000000000000000000000000000010348181, "class": 0 } ], "version": "v16.16", "thresholds": [ 0.9961138, 0.99909174 ], "analyzed_at": "2026-05-09T04:43:58Z" }, "path": "ksucalls.rs", "raw": { "v": "4", "fs": [ { "f": "H(Cr)", "k": { "source.imports[0]": "DRIVER_FD.get_or_init", "source.imports[1]": "Err", "source.imports[2]": "INFO_CACHE.get_or_init", "source.imports[3]": "IO", "source.imports[4]": "Ok", "source.imports[5]": "Some", "source.imports[6]": "c_mnt.as_ptr", "source.imports[7]": "c_path.as_ptr", "source.imports[8]": "entry.file_name", "source.imports[9]": "entry.file_name.to_string_lossy", "source.strings[0]": "/proc/self/fd", "source.strings[1]": "/proc/self/fd/{fd_num}", "source.strings[2]": "Failed to check safemode, assuming safe mode: {e}", "source.strings[3]": "Failed to get KSU info from kernel: {e}", "source.strings[4]": "Failed to report event {event} to kernel: {e}", "source.strings[5]": "[io_uring]", "source.has_imports": true, "source.imports[10]": "fd.is_none", "source.imports[11]": "fd_dir.flatten", "source.imports[12]": "format", "source.imports[13]": "get_info", "source.imports[14]": "init_driver_fd", "source.imports[15]": "init_driver_fd.unwrap_or", "source.imports[16]": "ksuctl", "source.imports[17]": "report_event", "source.imports[18]": "scan_driver_fd", "source.imports[19]": "target.to_string_lossy", "source.imports[20]": "target_str.contains", "source.functions[0]": "check_kernel_safemode", "source.functions[1]": "get_feature", "source.functions[2]": "get_info", "source.functions[3]": "get_version", "source.functions[4]": "get_wrapped_fd", "source.functions[5]": "grant_root", "source.functions[6]": "init_driver_fd", "source.functions[7]": "ksuctl", "source.functions[8]": "mark_get", "source.functions[9]": "mark_refresh", "source.functions[10]": "mark_set", "source.functions[11]": "mark_unset", "source.functions[12]": "nuke_ext4_sysfs", "source.functions[13]": "report_boot_complete", "source.functions[14]": "report_event", "source.functions[15]": "report_module_mounted", "source.functions[16]": "report_post_fs_data", "source.functions[17]": "scan_driver_fd", "source.functions[18]": "set_feature", "source.functions[19]": "set_sepolicy", "source.functions[20]": "umount_list_add", "source.functions[21]": "umount_list_del", "source.functions[22]": "umount_list_wipe" }, "id": 0, "is": [ "IO", "fd_dir.flatten", "entry.file_name.to_string_lossy", "entry.file_name", "format", "target.to_string_lossy", "target_str.contains", "Some", "scan_driver_fd", "fd.is_none", "Some", "DRIVER_FD.get_or_init", "init_driver_fd.unwrap_or", "init_driver_fd", "Err", "Ok", "INFO_CACHE.get_or_init", "ksuctl", "get_info", "ksuctl", "Ok", "ksuctl", "report_event", "report_event", "report_event", "ksuctl", "ksuctl", "Ok", "ksuctl", "Ok", "ksuctl", "Ok", "ksuctl", "Ok", "ksuctl", "Ok", "ksuctl", "Ok", "ksuctl", "Ok", "ksuctl", "Ok", "c_mnt.as_ptr", "ksuctl", "Ok", "ksuctl", "Ok", "c_path.as_ptr", "ksuctl", "Ok", "c_path.as_ptr", "ksuctl", "Ok" ], "ms": { "file": { "size": 8994.0 }, "text": { "digit_ratio": 0.04, "space_count": 1822.0, "total_lines": 341.0, "char_entropy": 5.19, "unique_chars": 85.0, "import_density": 15.54, "string_density": 0.04, "avg_line_length": 25.38, "high_byte_ratio": 0.0, "max_line_length": 90.0, "non_ascii_ratio": 0.0, "empty_line_ratio": 0.13, "last_line_length": 1.0, "most_common_char": "t", "whitespace_ratio": 0.24, "most_common_ratio": 0.05, "identifier_density": 1.13, "line_length_stddev": 21.74, "normalized_import_count": 2.87, "normalized_string_count": 0.65, "repeated_char_sequences": 19.0, "suspicious_comment_ratio": 0.04, "max_inline_whitespace_run": 3.0, "normalized_function_count": 1.25, "imports_to_functions_ratio": 2.3, "strings_to_functions_ratio": 0.52, "suspicious_identifier_ratio": 0.03, "normalized_unique_identifiers": 13.43, "identifiers_to_functions_ratio": 4.91 }, "imports": { "total": 53.0, "unique_modules": 21.0, "third_party_count": 53.0, "third_party_ratio": 1.0 }, "strings": { "total": 12.0, "avg_length": 29.67, "max_length": 49.0, "path_count": 4.0, "avg_entropy": 3.65, "total_bytes": 356.0, "entropy_stddev": 0.38 }, "comments": { "chars": 1171.0, "lines": 27.0, "total": 27.0, "to_code_ratio": 0.09, "high_entropy_comments": 1.0 }, "functions": { "total": 23.0, "length_stddev": 4.38, "avg_name_length": 13.17, "no_params_count": 23.0, "avg_length_lines": 8.39, "max_length_lines": 20.0, "min_length_lines": 3.0, "high_entropy_names": 1.0, "density_per_100_lines": 6.74, "code_in_functions_ratio": 0.57 }, "identifiers": { "total": 387.0, "avg_length": 9.69, "max_length": 25.0, "min_length": 1.0, "avg_entropy": 2.54, "reuse_ratio": 0.29, "unique_count": 113.0, "length_stddev": 6.53, "has_digit_ratio": 0.04, "sequential_names": 3.0, "single_char_count": 3.0, "single_char_ratio": 0.03, "high_entropy_count": 13.0, "high_entropy_ratio": 0.12, "all_lowercase_ratio": 0.61, "all_uppercase_ratio": 0.25, "numeric_suffix_count": 2.0, "underscore_prefix_count": 4.0 } }, "ss": [ [ 2718, "/proc/self/fd" ], [ 2719, "/proc/self/fd" ], [ 2896, "/proc/self/fd/{fd_num}" ], [ 2897, "/proc/self/fd/{fd_num}" ], [ 3081, "[io_uring]" ], [ 3082, "[io_uring]" ], [ 4600, "Failed to get KSU info from kernel: {e}" ], [ 4601, "Failed to get KSU info from kernel: {e}" ], [ 5073, "Failed to report event {event} to kernel: {e}" ], [ 5074, "Failed to report event {event} to kernel: {e}" ], [ 5620, "Failed to check safemode, assuming safe mode: {e}" ], [ 5621, "Failed to check safemode, assuming safe mode: {e}" ] ], "sz": 8994, "ts": [ { "a": "T1573", "c": 0.800000011920929, "d": "Regex component marker", "e": [ "magic" ], "i": "micro-behaviors/crypto/asymmetric/kem::encrypted-trailer-terms--rx-7", "l": 1, "m": "C0027" } ], "sha": "9384e05f87b459f271fb48b7cf0312890c899b095117be69a9c49a7eefdd742c", "path": "ksucalls.rs", "type": "rust" } ], "tv": "a9555" } }