You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
publicvoidonCreate(BundlesavedInstanceState){
super.onCreate(savedInstanceState);
setContentView(R.layout.activity_main);
Stringtaint_1 = function1(source());
Stringtaint_2 = function1(taint_1);
sink(taint_2);
}
publicStringsource(){ // Defined as source return"Secret";
}
publicvoidsink(Stringparam){ // Defined as sink
}
publicStringfunction1(Stringarg1){
arg1 = function2(arg1);
returnarg1;
}
publicStringfunction2(Stringarg1){
returnarg1;
}
There is a taint path from the source()-call in onCreate to the sink, traversing function1 and function2 two times. If I run FlowDroid with the following command
it won't report this leak. If I change the --pathreconstructionmode from PRECISE to FAST or NONE (or just remove the whole argument), FlowDroid reports this leak.
If relevant, my SourcesAndSinks.xml looks like this
Please consider the following code:
There is a taint path from the
source()
-call inonCreate
to thesink
, traversingfunction1
andfunction2
two times. If I run FlowDroid with the following commandit won't report this leak. If I change the
--pathreconstructionmode
fromPRECISE
toFAST
orNONE
(or just remove the whole argument), FlowDroid reports this leak.If relevant, my SourcesAndSinks.xml looks like this
The text was updated successfully, but these errors were encountered: