search

secure-software-engineering / FlowDroid

FlowDroid Static Data Flow Tracker
GNU Lesser General Public License v2.1
1.02k stars 292 forks source link

Using FlowDroid for Java Programs #698

Open draftyfrog opened 4 months ago

draftyfrog commented 4 months ago

Is there any documentation/tutorial on how to use FlowDroid to perform data flow analysis on Java programs that aren't Android Apps? What would be the arguments for running the command-line tool to analyses a Java Application?

Thank you for any help!

StevenArzt commented 4 months ago

The command-line tool does not support Java programs as input. However, you can look into the test cases in the soot-infoflow project. These JUnit test cases are all purely Java-based. The package name with junit in it contains the test case, i.e., the runner, and the package without junit in it contains the code to be tested. It should be fairly easy to see how things are configured. The test cases just point FlowDroid to the class files. You can put a JAR instead.