FlowDroid

FlowDroid copied to clipboard

Hi @StevenArzt , I am using FlowDroid to perform static taint analysis on some medium sized databases and from the logs I have been at `Source lookup done, found 30...

jimmy66688

something about cleanDroid

4

Hello, I would like to ask, is the tool cleanDroid in your paper "Sustainable Solving: Reducing the Memory Footprint of IFDS-Based Data Flow Analyses Using Intelligent Garbage Collection" already integrated...

mengjianwei12345

Hi @StevenArzt @ericbodden and All! I am facing the same issue like this (https://github.com/secure-software-engineering/FlowDroid/issues/62) :Invalid class source type Error Log: ``` [main] INFO soot.jimple.infoflow.cmd.MainClass - Analyzing app /home/prakash/Documents/FlowDroid/Apks_List/AdobeAcrobat.apk (1 of...

neupaneprakash

Could FlowDroid be applied to client-server applications for static taint analysis?

4

Hi @ericbodden @StevenArzt , I want to perform static taint analysis on some client-server applications, but these client-server applications have one feature: there is no fixed entrypoint on the server...

jimmy66688

FlowDroid repeatedly keeps on printing "Constructing callgraph... " Analysis is not terminating for hours!

1

Hello @StevenArzt! Whichever apks I analyzed to generate a call graph, FlowDroid repeatedly keeps on printing "Constructing callgraph... " Some partial running logs of an apk is as follows: ```...

neupaneprakash

Hi @StevenArzt I know that FlowDroid removes methods that are unreachable from an entry point when building the call graph (with SPARK). But there are cases in which "unreachable" methods...

RichardHoOoOo

Is there a method for declaring sinks directly in the Jimple form inside FlowDroid

2

Dear Steven Can we declare sinks directly in to the Jimple body of a code so that the issink() method of FlowDroid correctly maps the information flow from source to...

DeepakUniAdel

FastCallbackAnalyzer unsoundly deals with anonymous classes

1

## Issue The fast callback analyzer (i.e., running FlowDroid with configuration `callbackanalyzer` set to `FAST`) unsoundly deals with anonymous classes. ## Test Cases Many of the APKs in Droidbench 3.0's...

amordahl

Unsoundness in flow sensitive alias algorithm due to strong updates

1

Here's another issue (different cause than #501) with flow sensitive aliasing: ## Test Case Mutant of Callbacks/Button5.apk in DroidBench, in which the source and sink statements are switched in `sendMessage()`:...

amordahl

Instrumenting test codes

1

Dear Steven I am currently running the Java test cases inside the "soot-info-flow" module of FlowDorid. I just wanted to know how we can instrument the test codes so that...

DeepakUniAdel