smalisca
smalisca copied to clipboard
Parsing is incomplete on some apps
I'm trying to use smalisca to analyze some popular apps (whatsapp and facebook). After parsing, the resulting sqlite database is kinda small for both, only a few kbs in size. Analyzing the database confirms that it contains only a small number of classes ( around 50 for facebook and 120 for whatsapp) and calls (for instance, I tried scl -tm checkSelfPermission and I get 0 results, very very odd).
I'm not sure why this happens, but I noticed that a lot of the smali files have very short names (like a.smali, b.smali, c.smali, etc) and some names appear multiple times (there's several a.smali). I guess that either:
- they're using some sort of code obfuscation that prevents smalisca from working correctly OR
- having multiple files with the same name "tilts" smalisca
Just to be sure, I tried baksmaling with both apktool and dex2jar, same result.
In my case, when I run smalisca parser, there is no element in classes in json file and size of json file is in bytes. And there are around 10 classes only for each app in sqlite files. Please look into this.