Flowdroid on Android libraries (.aar)

secure-software-engineering / FlowDroid

FlowDroid Static Data Flow Tracker

GNU Lesser General Public License v2.1

1.03k stars 293 forks source link

Flowdroid on Android libraries (.aar) #486

Open mukut007 opened 2 years ago

mukut007 commented 2 years ago

The current implementation of Flowdroid seems to work on .apk files. Usage: java -jar soot-infoflow-cmd/target/soot-infoflow-cmd-jar-with-dependencies.jar \ -a <APK File> \ -p <Android JAR folder> \ -s <SourcesSinks file>

How could I use this for analyzing Android libraries (.aar) files? Is it achievable?

StevenArzt commented 2 years ago

Soot doesn't support the aar format at the moment. However, it shouldn't be hard to implement is as a new src-prec. You can try and open an MR for it.