Translating smali instruction into SOURCE definition

secure-software-engineering / FlowDroid

FlowDroid Static Data Flow Tracker

GNU Lesser General Public License v2.1

1.04k stars 296 forks source link

Translating smali instruction into SOURCE definition #91

Open ThomasGoodMan opened 5 years ago

ThomasGoodMan commented 5 years ago

Hi, I'm having trouble translating an instruction into the corresponding FlowDroid grammar.

I have this smali instruction const-string v7, "JQd3VXtpUlhFQcNQAwFL1xqjVVprVKBMTEZSelBjFiAVIh...." Is it possible to translate it in SOURCE definition? Thanks.

StevenArzt commented 5 years ago

By default, FlowDroid only supports method calls as sources. However, you can implement your own class on top of the ISourceSinkManager interface to define any kind of source you like. For finding statements in the code, I suggest to convert the app code to Jimple using Soot and start from there, instead of reading the Smali code.