Steven Arzt

How did you run FlowDroid? Did you use the JAR fil with all dependencies? Or did you integrate FlowDroid into your own application?

I would recommend using Maven to integrate FlowDroid into your own project, because Maven takes care of resolving all the (transitive) dependencies.

@mbenz89 Can you comment on the issue with the official build? It seems there is a problem with your build chain. We can also host the official build at Fraunhofer...

You can use FlowDroid to build the callgraph of an APK: ``` SetupApplication app = new SetupApplication("Test.apk", "/opt/android-sdk-linux/platforms"); app.constructCallgraph(); ``` Afterwards, you have a Soot instance with a callgraph. Do...

For the Android JARs parameter ``-p``, you should specify the ``platforms`` directory of your Android SDK installation, not a single JAR file. Note that you need the SDK with its...

How do you use FlowDroi? Do you use the API or do you run the command-line tool? If so, with which parameters? Note that you need to configure a proper...

Your setup looks overly complex. I'd suggest to have FlowDroid initialize Soot: ``` SetupApplication app = new SetupApplication("myApp.apk", "PLATFORMDIR"); app. constructCallgraph(); CallGraph cg = Scene.v().getCallgraph(); ``` No need to do...

This looks like a bug on first sight, the intent object itself should not be tainted. Thanks a lot for the thorough investigation with the taint propagation handler. I'll have...

This fix doesn't solve the underlying problem. In the example, the incorrect propagation happens to fail the type check, so enforcing type checks avoids the problem in _this case_. In...

Strange. The commits you mention just allowed us to not configure the setting and use the default value. Instead of pushing the default to the summary reader, I decided to...