Function is_stack_suspicious 

pub fn is_stack_suspicious(
    crash_log: &str,
    access_address: u64,
    exception_type: i32,
    cpu_type: CpuType,
    config: &ClassifyConfig,
) -> StackVerdict

Backtrace-based exploitability override.

Examines the crash log backtrace for patterns that indicate exploitability (or lack thereof). This can override the initial classification.

Ported from CrashWrangler’s is_stack_suspicious (exc_handler.m lines 791-1006).