[Soot-list] Help: How to retrive the value passed in mehod call.

[Marc-André Laverdière]

As a sidenote, it is possible to cheat a little bit. You can always
write some code that would load the values from the configuration
file, generate a stub that would pass those values to the program, and
run your analysis on that.

Of course, the validity of your results goes kaput if anyone changes
the config file...

Marc-André Laverdière-Papineau
Doctorant - PhD Candidate

On 01/21/2014 03:51 AM, Bodden, Eric wrote:
> Hi Pratibind.
> 
>> Yes,  String could be from any source like, like you mention "
>> String concatenation or loaded from files or other resources".
>> string is always constant like the statement "String str =
>> "Constant String";" which is loaded from different file or other
>> source, now it has been passed as argument to method like
>> "someMethodName(SourceLocation.str)".
> 
> Well, if the string could be located inside configuration files
> then this is a problem. Your analysis would need to understand
> those files. It might be easier to actually execute the code with
> some instrumentation and then perform a dynamic analysis for those
> strings. By just analyzing the code as such (statically) there is
> not much hope that you will be able to recover the strings unless
> they are constants in the code.
> 
> Eric
> 
> 
> 
> _______________________________________________ Soot-list mailing
> list Soot-list at sable.mcgill.ca 
> http://mailman.cs.mcgill.ca/mailman/listinfo/soot-list
>