StevenArzt
commented
5 years ago StubDroid is enabled by default and uses the summaries compiled into the JAR, or from the "summariesManual" directory on disk if you run the program from the source distribution. You can use the command-line option to specify an alternate search directory for summaries. You can use the -t option multiple times to specify multiple directories. Keep in mind to also reference the original summary directory to retain StubDroid's default summaries, or else they will be discarded.
As a shortcut for analyzing the complete library implementation without taking StubDroid summaries into account, you can use the -ff option. It will internally set various options to disable the taint wrappers and some shortcuts, that would otherwise lead to skipped classes.
Note that I'm referring to FlowDroid 2.7 here, i.e., the current "develop" branch. I'm still sorting out a single failing test case, and I'll hope to have a proper release soon.
liuyongxiang
Hello~ If I want to use the StubDroid generated method summary when running FlowDroid, do I need to specify the summaries directory (XML files) with the "-t /XXX/summary" command and use "-tw STUBDROID" to enable the STUBDROID? And so what settings should I use to allow FlowDroid to analyze the entire library function? Best wishes！