draftyfrog

Using FlowDroid for Java Programs

1

Is there any documentation/tutorial on how to use FlowDroid to perform data flow analysis on Java programs that aren't Android Apps? What would be the arguments for running the command-line...

Hi, I've found nondeterministic behavior in the FlowDroid command line tool. I'm running the command line tool with the following settings: ``` java -jar ./soot-infoflow-cmd-jar-with-dependencies.jar -a {path-to-apk} -s {path-to-SourcesAndSinks.xml} -o...

Missed sinks with lists and statements uninvolved in the taint path including negative numbers

2

I ran into an issue where FlowDroid misses a leak if some statements that don't affect the propagation are added. Please consider the following example-code where FlowDroid misses the sink...

Missed sink when using --pathreconstructionmode PRECISE

1

Please consider the following code: ```java public void onCreate(Bundle savedInstanceState){ super.onCreate(savedInstanceState); setContentView(R.layout.activity_main); String taint_1 = function1(source()); String taint_2 = function1(taint_1); sink(taint_2); } public String source(){ // Defined as source return...

False positive with sanitizing function in a loop

11

I've found a bug in the FlowDroid command line tool. Consider the following code: ```java public class MainActivity extends AppCompatActivity { public void onCreate(Bundle savedInstanceState) { super.onCreate(savedInstanceState); setContentView(R.layout.activity_main); String s...

False negative with taint propagated via class attribute without static initializer

3

# Bug **Bug description** This one is very similar to [#174](https://github.com/facebook/mariana-trench/issues/174) but without static initializer. Please consider the following code ```java public class MainActivity extends AppCompatActivity{ public void onCreate(Bundle savedInstanceState){...

False negative with taint propagated via class attribute

1

# Bug **Bug description** This might be the _False Negative_ counterpart to the _False Positive_ reported in [#173](https://github.com/facebook/mariana-trench/issues/173). Please consider the following code ```java public class MainActivity extends AppCompatActivity{ public...

Missed sink in loop in called function

2

# Pysa Bug **Pre-submission checklist** [x] I've checked the list of [common issues](https://pyre-check.org/docs/pysa-quickstart/#common-issues) and mine does not appear **Bug description** Please consider the following program source code ```python class MyClass:...

False positive with sanitization in method

1

# Pysa Bug **Pre-submission checklist** [x] I've checked the list of [common issues](https://pyre-check.org/docs/pysa-quickstart/#common-issues) and mine does not appear I've reported a similar issue for Mariana Trench ([Issue 179](https://github.com/facebook/mariana-trench/issues/179)) so maybe...

Missed sink after second class instantiation

5

Please consider the following code: ```java MyClass myVar = new MyClass(); myVar.myString = source(); MyClass mySecondVar = new MyClass(); // If this statement is removed, the leak in the next...