super

super copied to clipboard

Macro-generate permission checklist

1

We currently have thousands of LOC for generating permission enums. This shouldn't be done this way, and a simpler way using macros and automatic permission upgrading at build time should...

Razican

Group vulnerabilities by type

1

This will be implemented with #25, but in any case we need to create tables for vulnerabilities in summary reports, with vulnerabilities grouped by type. Also, the ability to understand...

Razican

Add tests for Manifest

1

Currently there is no tests for the manifest. We should create a sample manifest with some of the known vulnerabilities, and check if the vulnerabilities are being detected. Even if...

Razican

Currently, references to R file veriable IDs are pure integers. We should reverse them using tools like this one: https://github.com/justingarrick/android-reverse-r

Razican

Most of the code is still not documented. This is the tracking issue for `static_analysis/manifest.rs` file documentation. - [ ] Module level documentation. - [ ] `manifest_analysis()` function: - [...

Razican

Most of the code is still not documented. This is the tracking issue for `static_analysis/code.rs` file documentation. - [ ] Module level documentation. - [ ] `code_analysis()` function: - [...

Razican

This issue tracks the documentation of different modules in SUPER. Each module has its own issue: - [x] [`main.rs` (#54)](https://github.com/SUPERAndroidAnalyzer/super/issues/54) - [x] [`lib.rs` (#147)](https://github.com/SUPERAndroidAnalyzer/super/issues/147) - [ ] `cli.rs` - [...

Razican

Most of the code is still not documented. This is the tracking issue for `results/mod.rs` file documentation. - [ ] Module level documentation. - [ ] Results struct: - [...

Razican

Documentation of `utils.rs`

10

Most of the code is still not documented. This is the tracking issue for `utils.rs` file documentation. - [ ] Module level documentation. - [x] `PARSER_CONFIG` constant. - [x] `print_error()`...

Razican

Complex AndroidManifest.xml analysis

3

We need to add content providers, receivers, etc. to manifest analysis, and rules to decide what to analyze. Here is the complete list: - ``: - if `android:exported="false"` everything is...

Razican