[Soot-list] missing APIs in SuSi

Mohammad Ghafari ghafari.ir at gmail.com
Wed Oct 12 10:16:22 EDT 2016


Hi,

Some of the sensitive APIs are completely absent in the SuSi files
<https://github.com/secure-software-engineering/SuSi/tree/develop/SourceSinkLists/Android%204.2/SourcesSinks>
while they exist in the default SourcesAndSinks shipped with FlowDroid
<https://github.com/secure-software-engineering/soot-infoflow-android/blob/develop/SourcesAndSinks.txt>.
For example, see following APIs:

<android.media.AudioRecord: int
read(short[],int,int)><android.media.AudioRecord: int
read(byte[],int,int)><android.media.AudioRecord: int
read(java.nio.ByteBuffer,int)>

I conjecture these APIs may belong to a more recent output from SuSi. If
so, where can one access the complete set of updated Sources and Sinks?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://mailman.CS.McGill.CA/pipermail/soot-list/attachments/20161012/7a212e32/attachment.html 


More information about the Soot-list mailing list