[Soot-list] Incomplete Call Graph for Web Application

[Eric Bodden]

Hi Tony.

> I have similar questions too. Is it possible to have Soot perform an
> analysis of mixed precisions? Here is what I mean: when the points-to
> set is not empty, let SPARK do what it used to do; when it is empty,
> let it fall back to a CHA solution.

Not out of the box. I guess you could instantiate two call graphs, but
it would involve some manual coding because Soot is not set up to have
more than one call graph at a time. It may be simpler to just compute
Spark's normal call-graph and then program a CHA-like call graph on
your own. It's not hard: you just need to match call sites against the
possible call targets in the class hierarchy.

About using CHA in general: I tried this with Soot yesterday and I
found that it works if all-reachable is enabled, see here:
http://www.sable.mcgill.ca/soot/tutorial/phase/

Eric