draftyfrog

Missed sink with taint propagated in lists and --aliasalgo NONE/LAZY

4

Please consider the following code: ```java List myList = new ArrayList(); myList.add(source()); sink(myList); // Reported by FlowDroid try{System.out.println("");}catch(Exception ex){} // If removed, FlowDroid correctly reports the sink in the next...

Compilation error - Could not resolve dependencies for soot-4.7.0-SNAPSHOT

2

HI, I am trying to build the latest FlowDroid version with `mvn install -DskipTests` and getting the following error: ``` [INFO] Scanning for projects... [INFO] ------------------------------------------------------------------------ [INFO] Reactor Build Order:...

False positive with taint propagated via class attribute

3

# Bug **Bug description** Please consider the following code ```java MyClass myInstance = new MyClass(); String myString = myInstance.myField; myInstance.myField = source(); sink(myString); // Mariana Trench falsely reports this as...

False positive with sanitization in methode

1

# Bug **Bug description** Please consider the following code ```Java public void onCreate(Bundle savedInstanceState){ MyClass myInstance = new MyClass(); myInstance.attribute = source(); sanitize(myInstance); sink(myInstance.attribute); # Reported by Mariana Trench }...