FlowDroid

FlowDroid copied to clipboard

Hi, steven professor or group member! I found there maybe have some bug in soot.jimple.infoflow.problems.rules.SinkPropagationRule#checkForSink. I use the latest develop branch. In the logic of ``` if (getResults().addResult(new AbstractionAtSink(sinkInfo.getDefinition(), source,...

LeoYelton

Confusion about backward alias analysis.

1

Dear, I have confusion about backward alias analysis, and there is false negative caused by this. The following is the case. The local $r2 in line12 is a source based...

zhouyuhao1018

Issue with CLI : Error when looking for manifest

2

@StevenArzt Getting this error when running `java -jar soot-infoflow-cmd-2.9.0-jar-with-dependencies.jar -a testdroid-sample-app.apk -p /usr/lib/android-sdk/platforms -s SourcesAndSinks.txt` [main] INFO soot.jimple.infoflow.cmd.MainClass - Analyzing app /home/ubuntu/logtesting/testdroid-sample-app.apk (1 of 1)... [main] INFO soot.jimple.infoflow.android.SetupApplication - Initializing...

khemrajrathore

mvn install error

5

 Hi! I'm a beginner of maven and Flowdroid. I tried to use this tool for starting research on dataflow features on android apks. However, I got error when using...

GeniusPudding

a question about using --iccmodel

1

Hi! I recently discovered a problem when I tried to add '--iccmodel' to the command line. I found that the exact same example reported different results when add '--iccmodel'. Such...

ICSF2024

Question of gramma compatible (●'◡'●)

6

Hi professor！ Thank you so much for taking the time to answer my questions. With recently deeper using of flowdroid. I feel more and more that your project is full...

LeoYelton

FlowDroid Unsound Callgraph

9

Hi, Consider the following case: ` public class MainActivity extends AppCompatActivity { private Button btn1; private final View.OnClickListener onClickListener = v -> onClick2(v); @Override protected void onCreate(Bundle savedInstanceState) { super.onCreate(savedInstanceState);...

maryammsd

Hi, I'm trying to make `DroidRA`(https://github.com/MobileSE/DroidRA) work correctly. `DroidRA` is based on `Coal` to perform composite constant propagation analysis( `Composite Constant Propagation: Application to Android Inter-Component Communication Analysis`). `Coal` doesn't...

xwlin-roy

CallbackAnalysisTimeout failed to terminate flowdroid analysis with setMergeDexFiles(true)

7

Hi, all When I analyzed a big app with `setMergeDexFiles(true)` and `setCallbackAnalysisTimeout(50)`, the analysis process of Flowdroid won't terminated. But if I didn't `setMergeDexFiles(true)`, it could terminated normally. The code...

xwlin-roy

How to give an existing call graph to FlowDroid for analysis?

4

Dear, After `setupApplication.constructCallgraph(); ` , I get a call graph by `cg = Scene.v().getCallGraph();`. Then I add some new edges to this call graph `cg` and call `Scene.v().setCallGraph(cg);` . Then,...

zhouyuhao1018