[Soot-list] Analyzing Android source code with Soot

[Steven Arzt]

Hi,

FlowDroid is described here:
https://github.com/secure-software-engineering/soot-infoflow-android/wiki

The source code is documented quite well and you can take the existing Main
class (soot.jimple.infoflow.android.TestApps.Test) as an example of how to
use FlowDroid's API. If you have any further questions on FlowDroid, feel
free to ask me directly.

Best regards,
  Steven

-----Ursprüngliche Nachricht-----
Von: soot-list-bounces at sable.mcgill.ca
[mailto:soot-list-bounces at sable.mcgill.ca] Im Auftrag von Marc-André
Laverdière
Gesendet: Montag, 10. Februar 2014 17:42
An: M Alsob; soot-list at sable.mcgill.ca; hamid2c at gmail.com
Betreff: Re: [Soot-list] Analyzing Android source code with Soot

Hello,

There are two things: inclusions trumps exclusions, so make sure there is no
contradictions between them.

Second, here is what I am seeing in SootResolver

boolean onlySignatures = sc.isPhantom() ||
(Options.v().no_bodies_for_excluded() &&
 Scene.v().isExcluded(sc) &&
!Scene.v().getBasicClasses().contains(sc.getName())

So please check that the method is not a basic class.

As for flowdroid, I know that there is a main method somewhere - good luck
:)

Marc-André Laverdière-Papineau
Doctorant - PhD Candidate

On 02/09/2014 03:47 PM, M Alsob wrote:
> Hi,
> Thanks a lot for responding!
> I tried the exclude option but I am still getting the same result, I 
> tried adding the option right after and then before the phantom option 
> with no parameters , I appreciate any guidance on how to use it if 
> what I did was not right!..
> 
> about Flowdroid, is there any example, tutorials or guide describing 
> how to use it??
> there is a reference to a thesis but apparently removed from the 
> provided link..
> 
> Thanks again..
> 
> **
> 
> 
> 
>   /_
> 
> 
>   <http://www.smileycentral.com/?partner=ZSzeb068_ZNxdm119YYSA>_/
> 
> 
> 
>> Date: Fri, 7 Feb 2014 14:56:37 -0500
>> From: marc-andre.laverdiere-papineau at polymtl.ca
>> To: soot-list at sable.mcgill.ca
>> Subject: Re: [Soot-list] Analyzing Android source code with Soot
>>
>> Hello,
>>
>> Two things to add:
>>
>> 1) Have you checked out flowdroid? It might just be doing what you 
>> want (n.b. I haven't used it for android)
>>
>> 2) Exclusions are great, but they are not a silver bullet. By the 
>> way, sometimes the class hierarchy gets messed up because of exclusions.
>> Maybe this won't affect you, but maybe it will. Just keep that in mind.
>>
>> Marc-André Laverdière-Papineau
>> Doctorant - PhD Candidate
>>
>> On 02/07/2014 12:17 PM, Hamid A. Toussi wrote:
>> > Hello M Alsob
>> >>
>> >> Is there a way to tell soot to ignore the imported libraries and
> the R class??
>> >>
>> >>
>> > As far as I remember you should use -exclude and 
>> > -no-bodies-for-excluded options.
>> >
>> > Hamid
>> > _______________________________________________
>> > Soot-list mailing list
>> > Soot-list at sable.mcgill.ca
>> > http://mailman.cs.mcgill.ca/mailman/listinfo/soot-list
>> >
>> _______________________________________________
>> Soot-list mailing list
>> Soot-list at sable.mcgill.ca
>> http://mailman.cs.mcgill.ca/mailman/listinfo/soot-list
_______________________________________________
Soot-list mailing list
Soot-list at sable.mcgill.ca
http://mailman.cs.mcgill.ca/mailman/listinfo/soot-list