[Soot-list] [Flowdroid taint propagation]

claudio claudio.rizzo.2015 at live.rhul.ac.uk
Fri Feb 9 11:19:02 EST 2018


Dear all,

I am currently using Flowdroid to analyze Android app. However, I need 
to detect particular situations. For example consider this method sequence:


x = method1(....);

y.method2(...);


now assume that method 1 is called with tainted value from a known source.

If method2 is called as well with tainted value, then I want to check 
whether the taint as input in method2 comes from the same source as the 
one that is tainting its base object y.

Is there a way to achieve it? I was looking for some sort of taint Map 
where all the taints are stored, but I couldn't find it.


Thanks,

Claudio



More information about the Soot-list mailing list