[Soot-list] Could Source/Sink be other type such as Constant, field variable?

[Steven Arzt]

Hi Rainkin,

 

I replied to your post on Github. Essentially, you should be able to do this pretty easily. With the latest update I pushed today, you can specify your sources and sinks even more precisely than you could before.

 

Best regards,

  Steven

 

Von: soot-list-bounces at CS.McGill.CA [mailto:soot-list-bounces at CS.McGill.CA] Im Auftrag von ???
Gesendet: Montag, 13. April 2015 04:18
An: feng shen; soot-list at CS.McGill.CA
Betreff: Re: [Soot-list] Could Source/Sink be other type such as Constant, field variable?

 

Hi Feng,

    Thanks for your help.

    Yeah, I get many errors when I implement my new sources.

    Can you give me more details about where source will affect, I mean, where SourceManager will be used.

   

 

Thanks.

 

-Rainkin

 

2015-04-12 23:40 GMT+08:00 feng shen <fengshen at buffalo.edu>:

Hi, Rainkin

 

You can implement your own Source/Sink manager for sure. 

 

However, if you use FlowDroid, you might need to modify it to adapt your new sources.

 

thanks.

 

-Feng

 

 

 

On Sun, Apr 12, 2015 at 10:11 AM, 润青杨 <rainkin1993 at gmail.com> wrote:

Hi guys,

    I had posted this problem at <https://github.com/secure-software-engineering/soot-infoflow/issues/23>  https://github.com/secure-software-engineering/soot-infoflow/issues/23

    

    Now I explained it more clearly.

    For all I know, source and sink could only be method, but sometimes source/sink may be other types.

    

    Case 1:

    e.g. 

    s = source(); // source

    if(s == null)  // sink, which doesn't contain invokeExpr

    { ...}

 

    s is source and I want to define "if(s == null)" as sink.

 

 

    Case 2:

    e.g.

    String s = "Option1"; // source 

    sink(s); // sink 

 

 

    How to solve the above problems?

    I noticed the DefaultSourceSinkManager, ISourceSinkManager and MethodBasedSourceSinkManager classes. I think that may       be I can implement my own SourceSinkManager which could accept variable as a source, define IfStmt as a sink .etc. But I don't know whether this way work

    

    Could you give me some help?

 

Thx

 

rainkin

    

 

_______________________________________________
Soot-list mailing list
Soot-list at CS.McGill.CA
https://mailman.CS.McGill.CA/mailman/listinfo/soot-list

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://mailman.CS.McGill.CA/pipermail/soot-list/attachments/20150413/2f875488/attachment-0001.html