[Soot-list] Question

[Bernhard Berger]

Hi Zeinab,

you are right. Soot is not able to scan  JSP files. For this purpose I am using jspc (included in tomcat or usable during the build with some maven plugins) to compile the JSP files into valid class files. Afterwards you are able to analyze them. As far as I know there is no taint propagation implemented but you may use the heroes framework to implement one. Currently I'm working on a Soot extension that is able to generate a call graph for JavaEE systems (including servlets that have been translated into class files) which I have not released yet. When will you M.S thesis start?

Happy New Year to all of you,

Bernhard

Am 31.12.2012 um 15:40 schrieb Zeinab Lashkaripour <lashkaripour at yahoo.com>:

> 
> Dear Reader,
> 
> I want to use Soot in my M.S thesis and I wanted to know if Soot supports taint propagation analysis?
> Another question is that as far as I know Soot does not get a JSP file (only .java and .class files) as input is that correct?
> 
> Best Regards,
> Zeinab
> 
> 
> _______________________________________________
> Soot-list mailing list
> Soot-list at sable.mcgill.ca
> http://mailman.cs.mcgill.ca/mailman/listinfo/soot-list

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.cs.mcgill.ca/pipermail/soot-list/attachments/20121231/6ed6abc2/attachment.html