search

arguslab / Argus-SAF

Argus static analysis framework
Apache License 2.0
181 stars 49 forks source link

Is it possible to extract an object which is invoking a sink? #65

Open mukut007 opened 5 years ago

mukut007 commented 5 years ago

Suppose the putExtra method of Intent is used as a sink which takes a key value parameter. For example

L1 : Intent i = new Intent() L2: i.putExtra("Key","Value") from L2 using explicit value finder I can get the values of the arguments passed into putExtra. But is it possible to fetch the Intent object from this line?

Thanks

fgwei commented 4 years ago

Theoretically, yes. However, currently, the explicit value finder only keeps track of constants. You might extend it to track object creation as well.