FlowDroid icon indicating copy to clipboard operation
FlowDroid copied to clipboard

Feature suggestions: Exclude class name or package name

Open ohyeah521 opened this issue 1 year ago • 3 comments

Does it support setting excluded class names or package names? Because some large Android applications have a lot of code from third-party SDKs, and these third-party SDKs are not practical when studying the security of the APK's own code.

ohyeah521 avatar Nov 22 '24 22:11 ohyeah521

Yes, that is possible. If you initialize Soot on your own, you can mark the classes to exclude as "library classes" in Soot's terminology. In the InfoflowConfiguration, you then have the flag excludeSootLibraryClasses to ensure that FlowDroid doesn't touch them.

StevenArzt avatar Nov 25 '24 09:11 StevenArzt

@StevenArzt what should I do if I use the command line version soot-infoflow-cmd-2.13.0-jar-with-dependencies.jar?

ohyeah521 avatar Nov 25 '24 12:11 ohyeah521

The command-line application does not support such exclusions.

StevenArzt avatar Nov 25 '24 13:11 StevenArzt