{ "ml": { "v": "4", "fs": [ { "id": 0, "prob": 0.9453380107879639, "class": 0 } ], "prob": 0.945338, "class": 0, "version": "v16.16", "thresholds": [ 0.9815004, 0.99404883 ], "analyzed_at": "2026-04-30T05:39:53Z" }, "path": "BN_new.3", "raw": { "v": "4", "fs": [ { "f": "O₂(As₂S)Md(Pa)", "x": 1, "id": 0, "ms": { "text": { "digit_ratio": 0.02, "space_count": 492.0, "total_lines": 117.0, "char_entropy": 5.24, "unique_chars": 84.0, "string_density": 0.89, "ascii_art_lines": 2.0, "avg_line_length": 28.84, "max_line_length": 84.0, "last_line_length": 46.0, "most_common_char": "e", "whitespace_ratio": 0.17, "most_common_ratio": 0.07, "identifier_density": 0.59, "line_length_stddev": 26.37, "normalized_string_count": 9.61, "repeated_char_sequences": 4.0, "suspicious_string_ratio": 0.02, "max_inline_whitespace_run": 12.0, "suspicious_identifier_ratio": 0.13, "normalized_unique_identifiers": 8.15 }, "strings": { "total": 104.0, "avg_length": 26.0, "max_length": 128.0, "avg_entropy": 2.74, "total_bytes": 2704.0, "entropy_stddev": 1.42, "shell_command_strings": 1.0, "embedded_code_candidates": 1.0 }, "comments": {}, "functions": {}, "identifiers": { "total": 69.0, "avg_length": 4.45, "max_length": 13.0, "min_length": 1.0, "avg_entropy": 1.69, "reuse_ratio": 0.81, "unique_count": 56.0, "length_stddev": 2.8, "sequential_names": 6.0, "single_char_count": 6.0, "single_char_ratio": 0.11, "all_lowercase_ratio": 0.59, "all_uppercase_ratio": 0.09, "repeated_char_names": 1.0 } }, "ss": [ [ 218, " Vertical space (when we can't use .PP)" ], [ 294, " Begin verbatim text" ], [ 347, " End verbatim text" ], [ 387, " and \\*(C' are quotes in nroff, nothing in troff, for use with C\u003c\u003e.\n.ie n \\{\\\n. ds C" ], [ 388, " and " ], [ 395, "(C' are quotes in nroff, nothing in troff, for use with C\u003c\u003e.\n.ie n " ], [ 466, ". ds C" ], [ 489, " \"\"\n" ], [ 490, " " ], [ 517, "\n. ds C'\n'br" ], [ 534, "\n." ], [ 538, "\n." ], [ 542, " Escape single quotes in literal strings from groff's Unicode transform.\n.ie " ], [ 621, "(.g .ds Aq " ], [ 634, "aq\n.el .ds Aq '\n." ], [ 659, "\n." ], [ 663, " If the F register is \u003e0, we'll generate index entries on stderr for\n." ], [ 735, " titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index\n." ], [ 810, " entries marked with X\u003c\u003e in POD. Of course, you'll have to process the\n." ], [ 885, " output yourself in some meaningful fashion.\n." ], [ 933, "\n." ], [ 937, " Avoid warning from groff about undefined register 'F'.\n.de IX\n..\n.nr rF 0\n.if " ], [ 1018, "(.g .if rF .nr rF 1\n.if (" ], [ 1045, "(rF:(" ], [ 1052, "(.g==0)) " ], [ 1065, ". if " ], [ 1075, "F " ], [ 1081, ". de IX\n. tm Index:" ], [ 1116, "$1" ], [ 1122, "n%" ], [ 1129, "$2\"\n..\n. if !" ], [ 1151, "F==2 " ], [ 1160, ". nr % 0\n. nr F 2\n. " ], [ 1211, "\n. " ], [ 1219, "\n." ], [ 1223, "\n.rr rF\n." ], [ 1234, " ========================================================================\n." ], [ 1311, "\n.IX Title \"BN_NEW 3ossl\"\n.TH BN_NEW 3ossl 2025-09-30 3.5.4 OpenSSL\n." ], [ 1382, " For nroff, turn off justification. Always turn off hyphenation; it makes\n." ], [ 1460, " way too many mistakes in technical documents.\n.if n .ad l\n.nh\n.SH NAME\nBN_new, BN_secure_new, BN_clear, BN_free, BN_clear_free " ], [ 1590, " allocate and free BIGNUMs\n.SH SYNOPSIS\n.IX Header \"SYNOPSIS\"\n.Vb 1\n" ], [ 1660, " #include \u003copenssl/bn.h\u003e\n" ], [ 1687, "\n" ], [ 1690, " BIGNUM *BN_new(void);\n" ], [ 1715, "\n" ], [ 1718, " BIGNUM *BN_secure_new(void);\n" ], [ 1750, "\n" ], [ 1753, " void BN_clear(BIGNUM *a);\n" ], [ 1782, "\n" ], [ 1785, " void BN_free(BIGNUM *a);\n" ], [ 1813, "\n" ], [ 1816, " void BN_clear_free(BIGNUM *a);\n.Ve\n.SH DESCRIPTION\n.IX Header \"DESCRIPTION\"\n" ], [ 1897, "BBN_new()" ], [ 1908, "R allocates and initializes a " ], [ 1940, "BBIGNUM" ], [ 1949, "R structure.\n" ], [ 1966, "BBN_secure_new()" ], [ 1984, "R does the same except that the secure heap\n" ], [ 2032, "BOPENSSL_secure_malloc" ], [ 2056, "R" ], [ 2059, "(3) is used to store the value.\n.PP\n" ], [ 2099, "BBN_clear()" ], [ 2112, "R is used to destroy sensitive data such as keys when they\nare no longer needed. It erases the memory used by " ], [ 2224, "Ba" ], [ 2228, "R and sets it\nto the value 0.\nIf " ], [ 2263, "Ba" ], [ 2267, "R is NULL, nothing is done.\n.PP\n" ], [ 2303, "BBN_free()" ], [ 2315, "R frees the components of the " ], [ 2347, "BBIGNUM" ], [ 2356, "R, and if it was created\nby " ], [ 2386, "BBN_new()" ], [ 2397, "R, also the structure itself. " ], [ 2429, "BBN_clear_free()" ], [ 2447, "R additionally\noverwrites the data before the memory is returned to the system.\nIf " ], [ 2532, "Ba" ], [ 2536, "R is NULL, nothing is done.\n.SH \"RETURN VALUES\"\n.IX Header \"RETURN VALUES\"\n" ], [ 2615, "BBN_new()" ], [ 2626, "R and " ], [ 2634, "BBN_secure_new()" ], [ 2652, "R\nreturn a pointer to the " ], [ 2680, "BBIGNUM" ], [ 2689, "R initialised to the value 0.\nIf the allocation fails,\nthey return " ], [ 2758, "BNULL" ], [ 2765, "R and set an error code that can be obtained\nby " ], [ 2815, "BERR_get_error" ], [ 2831, "R" ], [ 2834, "(3).\n.PP\n" ], [ 2847, "BBN_clear()" ], [ 2860, "R, " ], [ 2865, "BBN_free()" ], [ 2877, "R and " ], [ 2885, "BBN_clear_free()" ], [ 2903, "R have no return values.\n.SH \"SEE ALSO\"\n.IX Header \"SEE ALSO\"\n" ], [ 2969, "BERR_get_error" ], [ 2985, "R" ], [ 2988, "(3), " ], [ 2995, "BOPENSSL_secure_malloc" ], [ 3019, "R" ], [ 3022, "(3)\n.SH HISTORY\n.IX Header \"HISTORY\"\n" ], [ 3063, "BBN_init()" ], [ 3075, "R was removed in OpenSSL 1.1.0; use " ], [ 3113, "BBN_new()" ], [ 3124, "R instead.\n.SH COPYRIGHT\n.IX Header \"COPYRIGHT\"\nCopyright 2000" ] ], "sz": 3491, "ts": [ { "c": 0.20000000298023224, "d": "output keyword", "e": [ "output" ], "i": "micro-behaviors/data/text/keywords::output", "l": 1 }, { "c": 0.30000001192092896, "d": "stderr string reference", "e": [ " If the F register is \u003e0, we'll generate index entries on stderr for\n." ], "i": "micro-behaviors/process/fd/stdio::stderr-string", "l": 2 }, { "a": "T1027", "c": 0.8999999761581421, "d": "Low string density base64 context", "e": [ "text.string_density = 0.89" ], "i": "objectives/anti-static/obfuscation/code-metrics::js-base64-candidate-low-string-density", "l": 1, "m": "B0032" }, { "c": 1.0, "d": "Path-like string pattern", "e": [ "x:\\\\$1\\t\\\\n%\\t\"\\\\$2\"" ], "i": "micro-behaviors/data/text/malware::path-like-pattern", "l": 2 }, { "c": 0.8999999761581421, "d": "Unix manual page or bundled manpage example", "e": [ "BN_new.3" ], "i": "metadata/package/documentation::unix-manpage", "l": 2 }, { "c": 0.8999999761581421, "d": "File has 30 or more lines", "e": [ "text.total_lines = 117.00" ], "i": "metadata/package/metrics::file-has-30-plus-lines", "l": 1 }, { "c": 1.0, "d": "HISTORY documentation reference", "e": [ "HISTORY" ], "i": "metadata/package/documentation::references-changelog-history", "l": 2 }, { "a": "T1027", "c": 0.6000000238418579, "d": "No comments in code", "e": [ "comments.total = 0.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::no-comments", "l": 1, "m": "B0032" }, { "c": 0.699999988079071, "d": "Small file under 5KB", "e": [ "BN_new.3" ], "i": "objectives/supply-chain/metadata-anomaly/markers/npm::small-file-5k", "l": 1 }, { "a": "T1027", "c": 0.800000011920929, "d": "Sequential identifiers (a, b, c,", "e": [ "identifiers.sequential_names = 6.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/identifiers::sequential-identifiers", "l": 2, "m": "B0032" } ], "sha": "fd4b052d0f54703abf8ba90ffdf4f5cadf78db4e8eb93258bb5d27ff78b71374", "path": "/data/samples/good/freebsd/usr/src/secure/lib/libcrypto/man/man3/BN_new.3", "type": "javascript" } ], "tv": "f6eaa" } }