[Soot-list] Question about how Flowdroid should handle multiple path

[Jordan Samhi]

Hi there,

This is just a question I have about how Flowdroid handle multiple
common paths when a path is detected between a source and multiple sinks.

I am experiencing a behavior with Flowdroid that I am not sure it is
expected :

This is a simplified structure of the program I am analyzing :

a() {
  s = source();
  b(s);
}

b(s){
  c(s);
}

In this program, there is a leak from source() to c().
When I only use method b() as a sink, a leak is detected between
source() and b() -> this is normal.
When I only use method c() as a sink, a leak is detected between
source() and c() through b() -> this is normal.
But when I use b() and c() as sinks, only one leak between source() and
b() is found, not the one between source() and c() -> I have to remove
b() as sink to find the path from source() to c() -> I do not think this
is normal behavior, can someone confirm ?

Thank you in advance,

-- 

*Jordan Samhi*
Doctoral Researcher Interdisciplinary Centre for Security, Reliability
and Trust UNIVERSITY OF LUXEMBOURG Kirchberg Campus 6, rue Richard
Coudenhove-Kalergi L-1359 Luxembourg T: +352 466 644 9465 F: +352 466
644 39465 jordan.samhi at uni.lu <mailto:jordan.samhi at uni.lu> / www.uni.lu
<https://www.uni.lu/>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailman.CS.McGill.CA/pipermail/soot-list/attachments/20200918/d17d7231/attachment.html>