[Soot-list] Call Graphs and callbacks

[Marc-André Laverdière-Papineau]

Hello,

It depends on the options you give to soot. If you use exclusions and
phantom references, there is a chance you will have lots of missing edges.

Have you looked at flowdroid? It is based on top of soot and has an
extension that supports Android analysis.

Marc-André Laverdière-Papineau
Doctorant - PhD Candidate

On 10/06/13 10:15 AM, Akhil Jain wrote:
> Hi
> 
> I had a question regarding soot's handling of callbacks during the
> generation of call graphs. I wanted to know whether or not the functions
> sent as callbacks are taken into account during the call graph
> generation routine. Actually, I want to know the locations of all the
> reachable network sinks in an android app which may contain callbacks.
> So I want to know whether or not the code of the callback function taken
> into account during call graph generation? Is it sufficient to generate
> the call graphs from the entry points of the application or would that
> lead to some misses?
> 
> Thanks
> Akhil Jain
> 
> 
> 
> _______________________________________________
> Soot-list mailing list
> Soot-list at sable.mcgill.ca
> http://mailman.cs.mcgill.ca/mailman/listinfo/soot-list
>