[Soot-list] FlowDroid: Connection Detection

[John Ng]

Hello,

I'm trying to use the soot-infoflow component to perform taint analysis on
a Java program. I have two examples as following:
Example 1:
-------------
  int source() {
    return -1;
  }
  static int foo(int p) {
    return p;
  }
  public static void main(String[] args) {
    Main m = new Main();
     int x = m.source();
     int y = foo(x);
     System.out.println(y);
  }
-------------
Example 2:
-------------
  int source() {
    return -1;
  }
  public static void main(String[] args) {
    Main m = new Main();
     int x = m.source();
     int y = Math.abs(x);
     System.out.println(y);
  }
-------------
Source: <Main: int source()>
Sink: <java.io.PrintStream: void println(int)>

soot-infoflow can detect the connection between the source and the sink in
the first example but not in the second one. Can anyone please let me know
how I should do to detect the connection in the second example? Thank you
in advance.

Best,
John
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://mailman.CS.McGill.CA/pipermail/soot-list/attachments/20151007/28ed97dc/attachment-0001.html