Johannes Späth

Results 15 comments of Johannes Späth

It is just not implemented within the tool yet.

Yes, I agree. I discussed it with Stefan: Actually, there should be an error marker at the init call saying "No predicate generatedKey received for key". If we make the...

No, I didn't and it is related to [this one](https://github.com/CROSSINGTUD/CryptoAnalysis/issues/49). I don't know when I will have time to fix it.

Thanks for reporting. I was able to reproduce it. The finding is related to the exception. Technically, if `generateKey` throws an Exception, the control flow continues in the catch block...

Thanks for reporting. Those transformation are indeed not yet handled by CryptoAnalysis. We have not found such transformation to appear in practice (we did not analyze malware!), and we did...

Seems to be a bug in the code that prints the error messages. Do you get the correct number of warnings in the Eclipse Plugin itself?

We currently do not model maps, lists etc. hence the analysis does not detect the flow.

That is indeed weird, especially because shippable told that the Build suceeded. On my machine, the tests failed as well and I have just pushed the fixes to the repo....

The class is just compiled to the `bin` folder (of the Eclipse project). This [test case](https://github.com/CROSSINGTUD/CryptoAnalysis/blob/cbc11580a83b80c1d53a608411567ad13bcb38d7/CryptoAnalysis/src/test/java/test/headless/HeadlessTests.java#L67) then executes the analysis on the class files contained in the directory.