[Soot-list] Can Stubdroid handle interfaces?

Kazuki Hatayama komakomaillusion at gmail.com
Tue Sep 6 07:20:40 EDT 2016


Hi all,

I'm faced with the similar problem 
(https://github.com/secure-software-engineering/soot-infoflow-android/issues/125). 


here is the snapshot of my app.
         $r5 = virtualinvoke $r3.<java.net.URL: java.net.URLConnection 
openConnection()>();
         $r6 = virtualinvoke $r5.<java.net.URLConnection: 
java.io.InputStream getInputStream()>();
*interfaceinvoke $r4.<org.xmlpull.v1.XmlPullParser: void 
setInput(java.io.InputStream,java.lang.String)>($r6, "UTF-8");*
[...]
         $r7 = interfaceinvoke $r4.<org.xmlpull.v1.XmlPullParser: 
java.lang.String nextText()>();

In 3rd line, I want to propagate taints $r6 to $4. The above web page 
says Stubdroid can handle this situation.

But Stubdroid seems to be applicable to only classes, not interfaces.

Can really Stubdroid handle this situation?

Best regards,
Kazuki.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://mailman.CS.McGill.CA/pipermail/soot-list/attachments/20160906/dd417e18/attachment.html 


More information about the Soot-list mailing list