smalisca icon indicating copy to clipboard operation
smalisca copied to clipboard

Parsing is incomplete on some apps

Open gianlucascoccia opened this issue 8 years ago • 2 comments

I'm trying to use smalisca to analyze some popular apps (whatsapp and facebook). After parsing, the resulting sqlite database is kinda small for both, only a few kbs in size. Analyzing the database confirms that it contains only a small number of classes ( around 50 for facebook and 120 for whatsapp) and calls (for instance, I tried scl -tm checkSelfPermission and I get 0 results, very very odd).

I'm not sure why this happens, but I noticed that a lot of the smali files have very short names (like a.smali, b.smali, c.smali, etc) and some names appear multiple times (there's several a.smali). I guess that either:

  • they're using some sort of code obfuscation that prevents smalisca from working correctly OR
  • having multiple files with the same name "tilts" smalisca

Just to be sure, I tried baksmaling with both apktool and dex2jar, same result.

gianlucascoccia avatar Oct 18 '16 15:10 gianlucascoccia

Hi,

that's indeed strange. Right now I'm at the hack.lu. When I'm back home, I'll look at this.

dorneanu avatar Oct 19 '16 10:10 dorneanu

In my case, when I run smalisca parser, there is no element in classes in json file and size of json file is in bytes. And there are around 10 classes only for each app in sqlite files. Please look into this.

amangupta87 avatar May 31 '19 06:05 amangupta87