[Soot-list] Why classes in the library "android.support.v4" are regarded as application classes?

[Steven Arzt]

Hi,

The no-bodies-for-excluded option only prevents Soot from loading the 
bodies of methods in excluded classes. Soot distinguishes two types of 
classes: library classes and application classes. All classes that come 
from the process-dir (the APK in your case) are consoidered as 
application classes by default and are fully loaded. To exclude them, 
you must explicitly use the -exclude option to mark all classes in these 
packages as library classes. Only if this is done, the 
no-bodies-for-excluded option can be applied.

Best regards,
   Steven

On 2016-12-22 08:38, xwlin.roy at gmail.com wrote:
> Hi Steven,
> How to config this option in Soot?
> I don't need soot-infoflow.
> I set
> 
> Options.v().set_no_bodies_for_excluded(true);
> But Soot can still not ignore android support libraries.
> 
> 在 2015年3月5日星期四 UTC+8下午4:29:42，Steven Arzt写道：
> 
>> Hi Zipeng,
>> 
>> These classes are contained in your APK file and are thus considered
>> application classes. Your whole APK file is Soot’s process dir and
>> that makes all contents application classes. You can however use the
>> Soot exclude options to remove them from the set of application
>> classes. The Infoflow / SetupApplication classes have
>> setSootConfig() methods which allow you to provide a custom Soot
>> configuration to adapt exactly such options.
>> 
>> Best regards,
>> 
>> Steven
>> 
>> M.Sc. M.Sc. Steven Arzt
>> 
>> Secure Software Engineering Group (SSE)
>> 
>> European Center for Security and Privacy by Design (EC SPRIDE)
>> 
>> Rheinstraße 75
>> 
>> D-64293 Darmstadt
>> 
>> Phone: +49 61 51 869-336
>> 
>> Fax: +49 61 51 16-72118
>> 
>> eMail: steven.arzt at ec-spride.de
>> 
>> Web: http://sse.ec-spride.de [1]
>> 
>> VON: soot-lis... at CS.McGill.CA [mailto:soot-lis... at CS.McGill.CA] IM
>> AUFTRAG VON fox tiny
>> GESENDET: Mittwoch, 4. März 2015 11:49
>> AN: soot... at CS.McGill.CA
>> BETREFF: [Soot-list] Why classes in the library "android.support.v4"
>> are regarded as application classes?
>> 
>> Hi all,
>> 
>> I analyzed an android application and found that classes defined
>> in "android.support.v4" were analyzed.
>> 
>> Then I print "Scene.v().getApplicationClasses()" and found that
>> classes in "android.support.v4" were contained in it.
>> 
>> Analyzing those classes will consume more time, how to forbid
>> it?
>> 
>> Thanks!
>> 
>> -------------
>> 
>> zipeng zhang
> 
> 
> Links:
> ------
> [1] http://sse.ec-spride.de/
> 
> _______________________________________________
> Soot-list mailing list
> Soot-list at CS.McGill.CA
> https://mailman.CS.McGill.CA/mailman/listinfo/soot-list