Open adityavardhanpadala opened 11 months ago
If you just want to assume taint-in-taint-out
and taint-in-taint-this
for that function and skip its analysis, you can use a model:
{
"find": "methods",
"where": [
{
"constraint": "signature_match",
"parent": "Lcom/example/Logger;",
"name": "log"
}
],
"model": {
"modes" : ["skip-analysis", "taint-in-taint-out", "taint-in-taint-this"]
}
}
We usually do this for methods slow to analyze. You could try to understand why the analysis is slow, but that requires a good understanding of the analysis, and looking at a lot of logs.
We usually do this for methods slow to analyze. This is not very scalable when you are working on a bigger dataset of APKs so I am assuming using a model for a common set of functions is the way. Thanks!
How do I verify which propagations are applied to a specific function, mariana-trench spends alot of time analysing functions like this
Is there a way to make mariana-trench apply either
taint-in-taint-out
and/ortaint-in-taint-this
propagation automatically?