Steven Arzt

We are currently looking into an alternative data flow solution that is not based on IFDS and that could reason about the number of iterations of a loop, but that's...

You can use the FlowDroid command-line tool which is located in the JAR with dependencies if you just want to run the tool. If you need better control over the...

Are you working on Android apps or Java code? Depending on that, the code you need to use is slightly different. As Tim mentioned, the ``ResultsAvailableHandler`` is a good approach...

Your Android platform directory is wrong. You need to specify the "platforms" directory inside the Android SDK folder, not the root of your Android Studio installation. The specification of the...

The platforms directory would then be ``C:\Users\mafga\AppData\Local\Android\Sdk\platforms``. Does the ``SourcesAndSinks.txt`` file exist on your hard disk in the folder ``soot-infoflow-android``? For me, this command-line works well with the 2.12 command-line...

@t1mlange This still doesn't explain why the leak is missed. The alias analysis should derive a taint on ``$r3`` from the taint on ``$r6`` at the line ``r3 = r6``....

I haven't seen the ``--aliasalgo NONE`` option. Not finding aliases when there is no aliasing strategy enabled makes perfect sense.

The problem is not with Multidex support. The code that triggers the bug just seems to be in one of the additional dex files by chance. Apparently, the a method...

I know that my proposed quickfix is not a replacement for a proper solution. However, it allows you to get rid of the problem for now since I don't have...

I'm not exactly sure how this has happened. We have made some refactorings, and we have removed some older features / classes that have been deprecated for a long time....