{ "ml": { "v": "7", "eng": "2.9.1", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.000007788341, "rte": "az", "prob": 0.000007788341 }, { "cls": 0, "raw": 0.000017374754, "rte": "az/native", "prob": 0.000017374754 }, { "cls": 0, "raw": 0.0000016192595, "rte": "az/elf", "prob": 0.0000016192595 } ], "prob": 0.000007788341, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.000007788340553815942, "type": "elf" } ], "version": "v18.18", "analyzed_at": "2026-09-12T00:37:07Z" }, "path": "libxcb-screensaver.so.0.0.0", "raw": { "v": "8", "rev": "c7f7e", "files": [ { "id": 0, "ctx": [ { "b": "E))420S-r400000000000@$H+0rr910000000000kMy=:00000:v(Nl0000000000kMA+z3iir\u003e9SNhX0rr911onA4000000000000000000000000000000\u002612!/00000\u002612!/0000001Ybg000000rr911POJ501Ybg0000001Ybg0000001Ybg00000KQ}G)00000KQ}G)0000001Ybg000000rr911onA405axM0000005axM0000005axM00000?#-@V00000?#-@V0000001Ybg000000rr911][S6\u00265Z]s00000\u00267B4I00000\u00267B4I00000KotK-00000M\u0026)x?0000001Ybg000000SSi21][S6S67aX00000S7^l(00000S7^l(000", "ln": 0 }, { "b": "000005Dz!haPIGx9@(ov3ig5a761sm2(\u003c@9000002lj-74/=Of000001][S68VP\u003cr3JHeb000008uo:q4GDFe3\u0026*nc4fcwdaohxw00000000000rr910SSi200000", "ln": 620 }, { "b": "qNx/Ec*fmF(N[\u003eHXxi:[vZG5Z=bEAaGs$X.I.h1u*!V=:[10+emqY%f00000000000000000000000000000000000^GfyG5=.[i000000000000000000005c8Xgaohxw00000000000000000000GA7#L5=.[i000000000000000000000rr91aohx", "ln": 976 }, { "b": "Rul!#5DATFu@c?6000005c8Xg00000L(H^:5=-sufCju=00000EGfuF000000af8CzeTr0B97\u0026hByewPuRai\u003euU0.*wOkZ#By/F(o*--nzE(^QvR/PQuRai\u003euVGZ\u003cx(!xcA-t+2y\u0026si5raflLwDl7Av%zA?w[=c\u003ey?Xib0c\u00260.uVPZ$wO2+2vrMj5uVyj1A^q2nwPz\u003caz/bM1v}5!^wO#3=A+flkwPI}[uTE\u003e@vpK7Wv}YT+w)]y\u00260c\u00260.uVPZ$wO2+2vrMj5uVyj1A^q2nwPz\u003caz/e{8zEWu\u003ev@2T^0c\u00260.uVPZ$wO2+2vrMj5uVyj1A^q2nwPz\u003caz/e{5wPhEh0c\u00260.uW2{)ByeS#A:J\u0026#Abo!1", "ln": 1768 }, { "b": "B7ol4wO#M$C4CY3B7GD2vruQix\u003c#jbwPIj4vqH6$uU\u003cB$Byf92A+O@#x)Ks\u003czdNM]AcRC2vqG:#v/Q:-vQBg^A+e*1B76l6A:J)0ByeD#BAh88B-.houV]\u003c]B.a]@x(!x6B-8ebv}#6?v}5!^v@=c(zGxlfwPzd0wPRo/BAzLqvS=^7B6\u003c90y\u0026%q@y?S", "ln": 2227 }, { "b": "v@2T^0c\u00260.uVPZ$wO2+2vrMj5uVQvhAaJ]$0c\u00260.uVPZ$wO2+2vrMj5uUK3Jy?Wv6v}46iz.r:Ay?WuXvrBhzz.r{Fy?WuXwnL*}e]$}-humMcvQ?3iz.r{Fy?Wv6v}43hv@=c(zGxlfwPxzAz.rZzm[=GvlTIP3f/e(2oI4MruOTk\u003c07PZOlpk9ne\u002624p055k7CRsbWz/PzxCZ0WMB2L}4yCPBzx(4@HA4\u003c45i5CbXD3Ih2iD/7ZeO]cgCW\u003ehmf!Lgte?!}{x\u003c%aRzFstGB98s", "ln": 2721 }, { "b": "y?Wutfk+GGflqkNA+c[rgIHrhw]?:7ixq7\u0026ic67Rvp\u0026$/vpp)3zfPPqxFB/+xkzo\u003ev\u003exC*g+ZHthzn(XvGoIjsxFWcsxFWcsxFWcsxFWcsxFWcsxFWcsxFWcsxFWcsxFWcsxFWcsxFWcsxFWcsxFWcsxFWcsxFWc00002009640096200Ao500ic300i", "ln": 3057 }, { "b": "0000000000000000000000000000000000000000o?wqoq:TCKmntBkk#{AL00000000001onA4aohxw1POJ5m]04:0rreo1onA40rr91000000SSnp1onA40rr910000", "ln": 12256 }, { "b": "0000000000000000000000000000000SSi200000000000000000000000000rr9100000XDq*i000000rr9100000-rc8u000000rr9100000^e%vG000000rr9100000?VA\u0026U000004GDFe00000\u003e(Q[=000009rl6t00000a{m(C000003\u0026*nc00000", "ln": 15736 } ], "mol": "Md(He)", "sha": "f66920a2c4a3ae540707b841483f748abb1add163a19e0bd40759fb6ea4a860d", "path": "/data/samples/incoming/forager/nixos/nixos.org/osimage/minimal-x86-64/nixos-minimal-25.05.813814.ac62194c3917-x86_64-linux/nix-store.squashfs.d/xwd1s74zk3bwilv4p02284ckyy319vhz-libxcb-1.17.0/lib/libxcb-screensaver.so.0.0.0", "risk": 1, "size": 21576, "supp": [ { "by": [ { "id": "metadata/binary/linking/runtime::elf-dynamic-linking-metadata" } ], "id": "metadata/binary/linking/static::static-linked-heuristic", "crit": "notable", "kind": "unless" }, { "by": [ { "id": "metrics", "spans": [ [ 0, 25 ] ] } ], "id": "metadata/build/artifact::elf-stripped-but-symtab-present", "crit": "notable", "kind": "unless" } ], "type": "elf", "facts": { "exp": [ [ "xcb_screensaver_select_input" ], [ "xcb_screensaver_set_attributes_checked" ], [ "xcb_screensaver_set_attributes_value_list_unpack" ], [ "xcb_screensaver_set_attributes_aux_checked" ], [ "xcb_screensaver_suspend_checked" ], [ "xcb_screensaver_unset_attributes" ], [ "xcb_screensaver_set_attributes_aux" ], [ "xcb_screensaver_select_input_checked" ], [ "xcb_screensaver_query_info" ], [ "xcb_screensaver_set_attributes_value_list_serialize" ], [ "xcb_screensaver_query_version" ], [ "xcb_screensaver_set_attributes" ], [ "xcb_screensaver_query_version_reply" ], [ "xcb_screensaver_query_info_unchecked" ], [ "xcb_screensaver_set_attributes_value_list_sizeof" ], [ "xcb_screensaver_set_attributes_sizeof" ], [ "xcb_screensaver_query_info_reply" ], [ "xcb_screensaver_suspend" ], [ "xcb_screensaver_set_attributes_value_list" ], [ "xcb_screensaver_unset_attributes_checked" ], [ "xcb_screensaver_id" ], [ "xcb_screensaver_query_version_unchecked" ] ], "imp": [ [ "", "free" ], [ "", "ITM_deregisterTMCloneTable" ], [ "", "stack_chk_fail" ], [ "", "gmon_start__" ], [ "", "xcb_send_request" ], [ "", "memcpy" ], [ "", "xcb_wait_for_reply" ], [ "", "malloc" ], [ "", "ITM_registerTMCloneTable" ], [ "", "cxa_finalize" ] ], "sec": [ [ ".hash", 624, 208, 1.46, "alloc" ], [ ".gnu.hash", 832, 188, 5.04, "alloc" ], [ ".dynsym", 1024, 792, 1.92, "alloc" ], [ ".dynstr", 1816, 1370, 4.83, "alloc" ], [ ".gnu.version", 3186, 66, 1.41, "alloc" ], [ ".gnu.version_r", 3256, 64, 2.71, "alloc" ], [ ".rela.dyn", 3320, 528, 1.4, "alloc" ], [ ".rela.plt", 3848, 216, 1.18, "alloc,info_link" ], [ ".init", 4096, 27, 4.24, "alloc,executable" ], [ ".plt", 4128, 160, 3.45, "alloc,executable" ], [ ".plt.got", 4288, 8, 2.75, "alloc,executable" ], [ ".text", 4320, 4002, 5.58, "alloc,executable" ], [ ".fini", 8324, 13, 3.24, "alloc,executable" ], [ ".rodata", 12288, 17, 3.45, "alloc,merge,strings" ], [ ".note.gnu.property", 12312, 48, 1.87, "alloc" ], [ ".eh_frame_hdr", 12360, 196, 4.06, "alloc" ], [ ".eh_frame", 12560, 720, 4.42, "alloc" ], [ ".init_array", 15328, 8, 1.06, "write,alloc" ], [ ".fini_array", 15336, 8, 1.06, "write,alloc" ], [ ".data.rel.ro", 15344, 440, 0.57, "write,alloc" ], [ ".dynamic", 15784, 544, 1.53, "write,alloc" ], [ ".got", 16328, 32, 0.0, "write,alloc" ], [ ".got.plt", 16360, 96, 1.34, "write,alloc" ], [ ".data", 16464, 32, 0.53, "write,alloc" ], [ ".comment", 16496, 18, 3.73, "merge,strings" ], [ ".symtab", 16520, 1488, 2.11, "" ], [ ".strtab", 18008, 1392, 4.69, "" ], [ ".shstrtab", 19400, 254, 4.17, "" ] ], "metrics": { "elf": { "bits": 64, "entry": 0, "has_got": 1, "has_plt": 1, "has_note": 1, "relacount": 4, "has_symtab": 1, "note_count": 1, "nx_enabled": 1, "has_runpath": 1, "dynrel_count": 0, "dynsym_count": 33, "has_eh_frame": 1, "has_gnu_hash": 1, "no_gnu_stack": 0, "stack_canary": 1, "symtab_count": 62, "dynrela_count": 22, "little_endian": 1, "pltreloc_count": 9, "dt_versym_count": 33, "executable_stack": 0, "fini_array_count": 1, "init_array_count": 1, "wx_segment_count": 0, "comment_entry_count": 1, "has_both_hash_tables": 1, "program_header_count": 10, "stripped_with_symtab": 1, "comment_distinct_count": 1, "load_segment_max_file_size": 4241, "load_segment_max_memory_size": 4241, "section_relocation_group_count": 2, "stripped_metadata_section_count": 5 }, "file": { "size": 21576, "entropy": 3.56 }, "binary": { "is_pie": 0, "has_overlay": 1, "is_stripped": 0, "code_entropy": 5.47, "data_entropy": 1.08, "overlay_size": 1922, "string_count": 87, "overlay_ratio": 0.09, "overlay_entropy": 1.44, "entropy_variance": 2.42, "avg_string_length": 21.3, "max_string_length": 248, "peak_region_bytes": 4096, "code_to_data_ratio": 0.78, "peak_region_entropy": 5.45, "string_length_stddev": 27.22, "largest_section_ratio": 0.19, "sentence_string_count": 1, "sentence_string_ratio": 0.01, "high_entropy_string_count": 0 }, "exports": { "count": 22 }, "imports": { "count": 10 }, "sections": { "count": 30, "code_size": 4210, "entropy_max": 5.58, "entropy_mean": 2.64, "name_entropy": 4.11, "writable_count": 8, "executable_count": 5, "nonstandard_count": 4, "executable_writable_count": 0 }, "dependencies": { "count": 4 } } }, "traits": [ { "id": "metadata/hardening/mitigation::partial-relro", "conf": 0.8, "crit": 3, "desc": "Partial RELRO (GOT partially protected)" } ] } ] } }