<html><body><div style="color:#000; background-color:#fff; font-family:Courier New, courier, monaco, monospace, sans-serif;font-size:13px"><div id="yui_3_16_0_1_1435795709338_191291"><span id="yui_3_16_0_1_1435795709338_200318"><font size="2" id="yui_3_16_0_1_1435795709338_201077">Dear Steven,</font></span></div><div id="yui_3_16_0_1_1435795709338_191291"><span><font size="2"><br></font></span></div><div id="yui_3_16_0_1_1435795709338_191291"><span id="yui_3_16_0_1_1435795709338_191763"><font size="2">Thanks for your reply. </font></span></div><div id="yui_3_16_0_1_1435795709338_191291"><span><font size="2"><br></font></span></div><div id="yui_3_16_0_1_1435795709338_191291" dir="ltr"><font size="2" id="yui_3_16_0_1_1435795709338_201083"><span id="yui_3_16_0_1_1435795709338_191757" class="">Since I did not use </span><span class="" id="yui_3_16_0_1_1435795709338_196268">FlowDroid, </span>I added method "APEGENERATED_ENTRY_POINT()" into the application which includes all the methods that I need to analyze. Then I added the following code to my analysis program:</font></div><div id="yui_3_16_0_1_1435795709338_191291" dir="ltr"><span><font size="2"><br></font></span></div><div class="" id="yui_3_16_0_1_1435795709338_195364"><font size="2" id="yui_3_16_0_1_1435795709338_201082">SootClass <span class="">c</span> = Scene.v().forceResolve(<span class="" id="yui_3_16_0_1_1435795709338_195365">"com.example.marjanradi.npr_test4.MainActivity"</span>, SootClass.<span class="">BODIES</span>);</font></div><div class="" id="yui_3_16_0_1_1435795709338_195358"><font size="2" id="yui_3_16_0_1_1435795709338_201081"><span class=""> </span><span class=""> </span>List<SootMethod> <span class="" id="yui_3_16_0_1_1435795709338_197600">entryPoints</span> = <span class="" id="yui_3_16_0_1_1435795709338_196269">new</span> ArrayList<SootMethod>();</font></div><div class="" id="yui_3_16_0_1_1435795709338_195360"><font size="2" id="yui_3_16_0_1_1435795709338_201080"><span class=""> </span><span class=""> </span><span class="" id="yui_3_16_0_1_1435795709338_195363">entryPoints</span>.add(<span class="">c</span>.getMethodByName(<span class="" id="yui_3_16_0_1_1435795709338_195359">"APEGENERATED_ENTRY_POINT"</span>));</font></div><div id="yui_3_16_0_1_1435795709338_191291" dir="ltr">
</div><div class="" dir="ltr" id="yui_3_16_0_1_1435795709338_195361"><font size="2" id="yui_3_16_0_1_1435795709338_201750"><span class=""> </span><span class=""> </span>Scene.v().setEntryPoints(<span class="" id="yui_3_16_0_1_1435795709338_195362">entryPoints</span>);</font></div><div class="" dir="ltr" id="yui_3_16_0_1_1435795709338_195361"><font size="2"><br></font></div><div class="" dir="ltr" id="yui_3_16_0_1_1435795709338_195361"><font size="2"><br></font></div><div class="" dir="ltr" id="yui_3_16_0_1_1435795709338_195361"><font size="2" id="yui_3_16_0_1_1435795709338_201079">My question is that, Can I use <span class="" id="yui_3_16_0_1_1435795709338_197603">FlowDroid to construct the Dummy Main() </span><span class="" id="yui_3_16_0_1_1435795709338_198310">and then </span>add async methods to that? </font></div><div class="" dir="ltr" id="yui_3_16_0_1_1435795709338_195361"><font size="2"><br></font></div><div class="" dir="ltr" id="yui_3_16_0_1_1435795709338_195361"><font size="2"><br></font></div><div class="" dir="ltr" id="yui_3_16_0_1_1435795709338_195361">Best Regards,</div><div></div><div id="yui_3_16_0_1_1435795709338_191762">Marjan</div> <br><div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" style="display: block;"> <div style="font-family: Courier New, courier, monaco, monospace, sans-serif; font-size: 13px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"> <font size="2" face="Arial"> On Thursday, July 9, 2015 9:54 AM, Steven Arzt <Steven.Arzt@cased.de> wrote:<br> </font> </div> <br><br> <div class="y_msg_container"><div id="yiv6684757301"><style>#yiv6684757301 #yiv6684757301 --
_filtered #yiv6684757301 {font-family:Helvetica;panose-1:2 11 6 4 2 2 2 2 2 4;}
_filtered #yiv6684757301 {font-family:Helvetica;panose-1:2 11 6 4 2 2 2 2 2 4;}
_filtered #yiv6684757301 {font-family:Calibri;panose-1:2 15 5 2 2 2 4 3 2 4;}
_filtered #yiv6684757301 {font-family:Tahoma;panose-1:2 11 6 4 3 5 4 4 2 4;}
#yiv6684757301
#yiv6684757301 p.yiv6684757301MsoNormal, #yiv6684757301 li.yiv6684757301MsoNormal, #yiv6684757301 div.yiv6684757301MsoNormal
{margin:0cm;margin-bottom:.0001pt;font-size:12.0pt;}
#yiv6684757301 a:link, #yiv6684757301 span.yiv6684757301MsoHyperlink
{color:blue;text-decoration:underline;}
#yiv6684757301 a:visited, #yiv6684757301 span.yiv6684757301MsoHyperlinkFollowed
{color:purple;text-decoration:underline;}
#yiv6684757301 p.yiv6684757301MsoAcetate, #yiv6684757301 li.yiv6684757301MsoAcetate, #yiv6684757301 div.yiv6684757301MsoAcetate
{margin:0cm;margin-bottom:.0001pt;font-size:8.0pt;}
#yiv6684757301 p.yiv6684757301msoacetate, #yiv6684757301 li.yiv6684757301msoacetate, #yiv6684757301 div.yiv6684757301msoacetate
{margin-right:0cm;margin-left:0cm;font-size:12.0pt;}
#yiv6684757301 p.yiv6684757301msonormal, #yiv6684757301 li.yiv6684757301msonormal, #yiv6684757301 div.yiv6684757301msonormal
{margin-right:0cm;margin-left:0cm;font-size:12.0pt;}
#yiv6684757301 p.yiv6684757301msochpdefault, #yiv6684757301 li.yiv6684757301msochpdefault, #yiv6684757301 div.yiv6684757301msochpdefault
{margin-right:0cm;margin-left:0cm;font-size:12.0pt;}
#yiv6684757301 p.yiv6684757301msonormal1, #yiv6684757301 li.yiv6684757301msonormal1, #yiv6684757301 div.yiv6684757301msonormal1
{margin-right:0cm;margin-left:0cm;font-size:12.0pt;}
#yiv6684757301 p.yiv6684757301msochpdefault1, #yiv6684757301 li.yiv6684757301msochpdefault1, #yiv6684757301 div.yiv6684757301msochpdefault1
{margin-right:0cm;margin-left:0cm;font-size:12.0pt;}
#yiv6684757301 p.yiv6684757301msonormal2, #yiv6684757301 li.yiv6684757301msonormal2, #yiv6684757301 div.yiv6684757301msonormal2
{margin-right:0cm;margin-left:0cm;font-size:12.0pt;}
#yiv6684757301 p.yiv6684757301msoacetate1, #yiv6684757301 li.yiv6684757301msoacetate1, #yiv6684757301 div.yiv6684757301msoacetate1
{margin-right:0cm;margin-left:0cm;font-size:12.0pt;}
#yiv6684757301 p.yiv6684757301msochpdefault2, #yiv6684757301 li.yiv6684757301msochpdefault2, #yiv6684757301 div.yiv6684757301msochpdefault2
{margin-right:0cm;margin-left:0cm;font-size:12.0pt;}
#yiv6684757301 p.yiv6684757301msonormal11, #yiv6684757301 li.yiv6684757301msonormal11, #yiv6684757301 div.yiv6684757301msonormal11
{margin-right:0cm;margin-left:0cm;font-size:12.0pt;}
#yiv6684757301 p.yiv6684757301msochpdefault11, #yiv6684757301 li.yiv6684757301msochpdefault11, #yiv6684757301 div.yiv6684757301msochpdefault11
{margin-right:0cm;margin-left:0cm;font-size:12.0pt;}
#yiv6684757301 span.yiv6684757301msohyperlink
{}
#yiv6684757301 span.yiv6684757301msohyperlinkfollowed
{}
#yiv6684757301 span.yiv6684757301msohyperlink2
{}
#yiv6684757301 span.yiv6684757301msohyperlinkfollowed2
{}
#yiv6684757301 span.yiv6684757301msohyperlink11
{}
#yiv6684757301 span.yiv6684757301msohyperlinkfollowed11
{}
#yiv6684757301 span.yiv6684757301e-mailformatvorlage1711
{}
#yiv6684757301 span.yiv6684757301e-mailformatvorlage271
{}
#yiv6684757301 span.yiv6684757301e-mailformatvorlage39
{}
#yiv6684757301 p.yiv6684757301msonormal3, #yiv6684757301 li.yiv6684757301msonormal3, #yiv6684757301 div.yiv6684757301msonormal3
{margin:0cm;margin-bottom:.0001pt;font-size:12.0pt;}
#yiv6684757301 span.yiv6684757301msohyperlink1
{color:blue;text-decoration:underline;}
#yiv6684757301 span.yiv6684757301msohyperlinkfollowed1
{color:purple;text-decoration:underline;}
#yiv6684757301 p.yiv6684757301msoacetate2, #yiv6684757301 li.yiv6684757301msoacetate2, #yiv6684757301 div.yiv6684757301msoacetate2
{margin:0cm;margin-bottom:.0001pt;font-size:12.0pt;}
#yiv6684757301 p.yiv6684757301msonormal4, #yiv6684757301 li.yiv6684757301msonormal4, #yiv6684757301 div.yiv6684757301msonormal4
{margin-right:0cm;margin-left:0cm;font-size:12.0pt;}
#yiv6684757301 p.yiv6684757301msochpdefault3, #yiv6684757301 li.yiv6684757301msochpdefault3, #yiv6684757301 div.yiv6684757301msochpdefault3
{margin-right:0cm;margin-left:0cm;font-size:12.0pt;}
#yiv6684757301 p.yiv6684757301msonormal12, #yiv6684757301 li.yiv6684757301msonormal12, #yiv6684757301 div.yiv6684757301msonormal12
{margin-right:0cm;margin-left:0cm;font-size:12.0pt;}
#yiv6684757301 p.yiv6684757301msochpdefault12, #yiv6684757301 li.yiv6684757301msochpdefault12, #yiv6684757301 div.yiv6684757301msochpdefault12
{margin-right:0cm;margin-left:0cm;font-size:12.0pt;}
#yiv6684757301 p.yiv6684757301msonormal21, #yiv6684757301 li.yiv6684757301msonormal21, #yiv6684757301 div.yiv6684757301msonormal21
{margin:0cm;margin-bottom:.0001pt;font-size:12.0pt;}
#yiv6684757301 span.yiv6684757301msohyperlink21
{color:blue;text-decoration:underline;}
#yiv6684757301 span.yiv6684757301msohyperlinkfollowed21
{color:purple;text-decoration:underline;}
#yiv6684757301 p.yiv6684757301msoacetate11, #yiv6684757301 li.yiv6684757301msoacetate11, #yiv6684757301 div.yiv6684757301msoacetate11
{margin:0cm;margin-bottom:.0001pt;font-size:8.0pt;}
#yiv6684757301 p.yiv6684757301msochpdefault21, #yiv6684757301 li.yiv6684757301msochpdefault21, #yiv6684757301 div.yiv6684757301msochpdefault21
{margin-right:0cm;margin-left:0cm;font-size:12.0pt;}
#yiv6684757301 p.yiv6684757301msonormal111, #yiv6684757301 li.yiv6684757301msonormal111, #yiv6684757301 div.yiv6684757301msonormal111
{margin:0cm;margin-bottom:.0001pt;font-size:12.0pt;}
#yiv6684757301 span.yiv6684757301msohyperlink111
{color:blue;text-decoration:underline;}
#yiv6684757301 span.yiv6684757301msohyperlinkfollowed111
{color:purple;text-decoration:underline;}
#yiv6684757301 span.yiv6684757301e-mailformatvorlage17111
{color:#1F497D;}
#yiv6684757301 p.yiv6684757301msochpdefault111, #yiv6684757301 li.yiv6684757301msochpdefault111, #yiv6684757301 div.yiv6684757301msochpdefault111
{margin-right:0cm;margin-left:0cm;font-size:10.0pt;}
#yiv6684757301 span.yiv6684757301e-mailformatvorlage2711
{color:#1F497D;}
#yiv6684757301 span.yiv6684757301e-mailformatvorlage391
{color:#1F497D;}
#yiv6684757301 span.yiv6684757301E-MailFormatvorlage56
{color:#1F497D;}
#yiv6684757301 span.yiv6684757301SprechblasentextZchn
{}
#yiv6684757301 .yiv6684757301MsoChpDefault
{font-size:10.0pt;}
_filtered #yiv6684757301 {margin:70.85pt 70.85pt 2.0cm 70.85pt;}
#yiv6684757301 div.yiv6684757301WordSection1
{}
#yiv6684757301 </style><div><div class="yiv6684757301WordSection1"><div class="yiv6684757301MsoNormal"><span style="font-size:11.0pt;">Hi Marjan,</span></div><div class="yiv6684757301MsoNormal"><span style="font-size:11.0pt;"> </span></div><div class="yiv6684757301MsoNormal"><span lang="EN-US" style="font-size:11.0pt;">This brings us back to the original question: How do you construct this custom entry point at the moment? If you do it properly (for instance using the SetupApplication class in FlowDroid), SPARK will be able to run and you can use the JimpleBasedInterproceduralCFG class to iterate over the units in your program.</span></div><div class="yiv6684757301MsoNormal"><span lang="EN-US" style="font-size:11.0pt;"> </span></div><div class="yiv6684757301MsoNormal"><span lang="EN-US" style="font-size:11.0pt;">If something doesn’t work, please provide the actual code you are using and specify what you still need or what doesn’t work. Otherwise it’s hard to tell what the real problem is.</span></div><div class="yiv6684757301MsoNormal"><span lang="EN-US" style="font-size:11.0pt;"> </span></div><div class="yiv6684757301MsoNormal"><span lang="EN-US" style="font-size:11.0pt;">Best regards,</span></div><div class="yiv6684757301MsoNormal"><span lang="EN-US" style="font-size:11.0pt;"> Steven</span></div><div class="yiv6684757301MsoNormal"><span lang="EN-US" style="font-size:11.0pt;"> </span></div><div class="yiv6684757301yqt1298101459" id="yiv6684757301yqt00665"><div><div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm;"><div class="yiv6684757301MsoNormal"><b><span style="font-size:10.0pt;">Von:</span></b><span style="font-size:10.0pt;"> Marjan Radi [mailto:marjan.radi@yahoo.com] <br clear="none"><b>Gesendet:</b> Donnerstag, 9. Juli 2015 16:50<br clear="none"><b>An:</b> Steven Arzt; Soot List<br clear="none"><b>Betreff:</b> Re: AW: AW: [Soot-list] application Control Flow Graph</span></div></div></div><div class="yiv6684757301MsoNormal"> </div><div><div id="yiv6684757301yui_3_16_0_1_1436416321149_74845"><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">Dear Steven,</span></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_74845"><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;"> </span></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_74845"><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">After initializing soot with the customized entry point, I run the SPARK analysis. Is SPARK analysis uses FlowDroid for constructing the dummy main? If it is correct so, the blocks of the CFG must have an order.</span></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_74845"><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;"> </span></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_74845"><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">Best Regards,</span></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_74845"><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">Marjan</span></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_74907"><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;"> </span></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_74847"><div id="yiv6684757301yui_3_16_0_1_1426188032239_18320"><div id="yiv6684757301yui_3_16_0_1_1426188032239_71660"><div class="yiv6684757301MsoNormal" style="background:white;"><span style="color:black;"> </span></div></div></div></div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;"> </span></div><div><div class="yiv6684757301MsoNormal" style="margin-bottom:12.0pt;background:white;"><span style="font-size:10.0pt;"> </span></div></div><div><div><div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">On Thursday, July 9, 2015 9:25 AM, Steven Arzt <<a rel="nofollow" shape="rect" ymailto="mailto:Steven.Arzt@cased.de" target="_blank" href="mailto:Steven.Arzt@cased.de">Steven.Arzt@cased.de</a>> wrote:</span><span style=""></span></div></div><div class="yiv6684757301MsoNormal" style="margin-bottom:12.0pt;background:white;"><span style=""> </span></div><div><div id="yiv6684757301"><div><div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span lang="EN-US" style="font-size:11.0pt;">Hi Marjan,</span><span style=""></span></div></div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span lang="EN-US" style="font-size:11.0pt;"> </span><span style=""></span></div></div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span lang="EN-US" style="font-size:11.0pt;">If you do not use FlowDroid to construct the dummy main method at the moment, what do you use for constructing the callgraph? SPARK definitely needs a dummy main method, that’s why I was under the impression that you use FlowDroid to construct it. The only other alternative I can think of is to use CHA (which is horrible imprecise). In the latter case, the JimpleBasedInterproceduralCFG should not order the entry points at all, but keep them as totally separate graphs.</span><span style=""></span></div></div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span lang="EN-US" style="font-size:11.0pt;"> </span><span style=""></span></div></div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span lang="EN-US" style="font-size:11.0pt;">Best regards,</span><span style=""></span></div></div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span lang="EN-US" style="font-size:11.0pt;"> Steven</span><span style=""></span></div></div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span lang="EN-US" style="font-size:11.0pt;"> </span><span style=""></span></div></div><div id="yiv6684757301yqt21174"><div><div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm;"><div><div class="yiv6684757301MsoNormal" style="background:white;"><b><span style="font-size:10.0pt;">Von:</span></b><span style="font-size:10.0pt;"> Marjan Radi [<a rel="nofollow" shape="rect" ymailto="mailto:marjan.radi@yahoo.com" target="_blank" href="mailto:marjan.radi@yahoo.com">mailto:marjan.radi@yahoo.com</a>] <br clear="none"><b>Gesendet:</b> Donnerstag, 9. Juli 2015 16:20<br clear="none"><b>An:</b> Steven Arzt; 'Soot List'<br clear="none"><b>Betreff:</b> Re: AW: [Soot-list] application Control Flow Graph</span><span style=""></span></div></div></div></div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style=""> </span></div></div><div><div id="yiv6684757301"><div id="yiv6684757301yui_3_16_0_1_1436416321149_43279"><div id="yiv6684757301yui_3_16_0_1_1436416321149_43278"><div id="yiv6684757301yui_3_16_0_1_1436416321149_36818"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">Dear Steven,</span><span style=""></span></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_36818"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;"> </span><span style=""></span></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_36818"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">Thanks for your reply.</span><span style=""></span></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_36818"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;"> </span><span style=""></span></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_36818"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">Since the application that I want to analyze has AsyncTasks, I have customized the entry points. I did not use FlowDroid. So, I wanted to know without using FlowDroid, dose "JimpleBasedInterproceduralCFG" consider any order between methods to construct the CFG?</span><span style=""></span></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_37182"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;"> </span><span style=""></span></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_37176"><div id="yiv6684757301yui_3_16_0_1_1426188032239_18320"><div id="yiv6684757301yui_3_16_0_1_1426188032239_71660"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">Marjan,</span><span style=""></span></div></div></div><div id="yiv6684757301yui_3_16_0_1_1426188032239_71660"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">Best Regards</span><span style=""></span></div></div></div></div></div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;"> </span><span style=""></span></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_45223"><div style="margin-bottom:12.0pt;"><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;"> </span><span style=""></span></div></div></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_45410"><div id="yiv6684757301yui_3_16_0_1_1436416321149_45409"><div id="yiv6684757301yui_3_16_0_1_1436416321149_45408"><div id="yiv6684757301yui_3_16_0_1_1436416321149_45407"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">On Thursday, July 9, 2015 2:56 AM, Steven Arzt <<a rel="nofollow" shape="rect" ymailto="mailto:Steven.Arzt@cased.de" target="_blank" href="mailto:Steven.Arzt@cased.de">Steven.Arzt@cased.de</a>> wrote:</span><span style=""></span></div></div></div><div style="margin-bottom:12.0pt;"><div class="yiv6684757301MsoNormal" style="background:white;"><span style=""> </span></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_45646"><div id="yiv6684757301"><div id="yiv6684757301yui_3_16_0_1_1436416321149_45645"><div id="yiv6684757301yui_3_16_0_1_1436416321149_45644"><div id="yiv6684757301yui_3_16_0_1_1436416321149_46223"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:11.0pt;">Hi Marjan,</span><span style=""></span></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_46179"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:11.0pt;"> </span><span style=""></span></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_45643"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span lang="EN-US" style="font-size:11.0pt;">I think we first have to sort out what you actually need. For an Android app, tools like FlowDroid first construct a dummy main method which simulates the Android lifecycle. This method, for instance, first calls onCreate() on an activity and then onResume(), because this is what the Android OS would do if the app was run on an emulator or a real device. Therefore, it’s correct for the analysis to first run through onCreate() and then through onResume().</span><span style=""></span></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_45696"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span lang="EN-US" style="font-size:11.0pt;"> </span><span style=""></span></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_45699"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span lang="EN-US" style="font-size:11.0pt;">The concept of an “enty point” doesn’t really exist in Android; there is none. Instead, apps are much more tightly coupled with the OS. You might even consider an Android app to be a plugin to the OS. The app derives classes from OS classes and overrides methods which are then called by the OS at runtime. Since most program analysis frameworks, however, depend on an entry point such as the classical main() method, we fake one that emulates this plugin model.</span><span style=""></span></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_47578"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span lang="EN-US" style="font-size:11.0pt;"> </span><span style=""></span></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_46176"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span lang="EN-US" style="font-size:11.0pt;">Best regards,</span><span style=""></span></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_46221"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span lang="EN-US" style="font-size:11.0pt;"> Steven</span><span style=""></span></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_46174"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span lang="EN-US" style="font-size:11.0pt;"> </span><span style=""></span></div></div></div><div id="yiv6684757301yqt50409"><div id="yiv6684757301yui_3_16_0_1_1436416321149_46172"><div id="yiv6684757301yui_3_16_0_1_1436416321149_46171" style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm;"><div id="yiv6684757301yui_3_16_0_1_1436416321149_46170"><div><div class="yiv6684757301MsoNormal" style="background:white;"><b><span style="font-size:10.0pt;">Von:</span></b><span style="font-size:10.0pt;"> <a rel="nofollow" shape="rect" ymailto="mailto:soot-list-bounces@CS.McGill.CA" target="_blank" href="mailto:soot-list-bounces@CS.McGill.CA">soot-list-bounces@CS.McGill.CA</a> [<a rel="nofollow" shape="rect" ymailto="mailto:soot-list-bounces@CS.McGill.CA" target="_blank" href="mailto:soot-list-bounces@CS.McGill.CA">mailto:soot-list-bounces@CS.McGill.CA</a>] <b>Im Auftrag von </b>Marjan Radi<br clear="none"><b>Gesendet:</b> Donnerstag, 9. Juli 2015 06:55<br clear="none"><b>An:</b> Steven Arzt; 'Soot List'<br clear="none"><b>Betreff:</b> Re: [Soot-list] application Control Flow Graph</span><span style=""></span></div></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_45701"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style=""> </span></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_45705"><div id="yiv6684757301yui_3_16_0_1_1436416321149_19920"><div id="yiv6684757301yui_3_16_0_1_1436416321149_46219"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">Dear Steven,</span><span style=""></span></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_19920"><div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;"> </span><span style=""></span></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_19920"><div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">Thank you for your reply. I have two questions:</span><span style=""></span></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_19920"><div id="yiv6684757301yui_3_16_0_1_1436416321149_47569"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;"> </span><span style=""></span></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_19920"><div id="yiv6684757301yui_3_16_0_1_1436416321149_46168"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">1- I have tried to use "JimpleBasedInterproceduralCFG", but it is not clear to me how can I use its methods, how can I use it to construct the application CFG and how to iterate through this graph. I looked at <a rel="nofollow" shape="rect" id="yiv6684757301yui_3_16_0_1_1436416321149_21661" target="_blank" href="https://github.com/Sable/soot/tree/develop/src/soot/jimple/toolkits/ide/exampleproblems"><span style="border:none windowtext 1.0pt;padding:0cm;text-decoration:none;">https://github.com/Sable/soot/tree/develop/src/soot/jimple/toolkits/ide/exampleproblems</span></a>, but it could not help me. Is there any example that uses this class which I can look at to do my implementation?</span><span style=""></span></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_19920"><div id="yiv6684757301yui_3_16_0_1_1436416321149_47571"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;"> </span><span style=""></span></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_19920"><div id="yiv6684757301yui_3_16_0_1_1436416321149_45704"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">2- I want to construct the android applications' CFG and they have multiple entry points. I think "JimpleBasedInterproceduralCFG" combines the blocks of program entry points randomly and it dose not consider any specific order for the blocks of different methods in the program entry points. Am I correct? or is there any way that we can force "JimpleBasedInterproceduralCFG" to consider a specific order on the sequence of its blocks (based on the program entry points)? For example, it first considers the blocks of onCreate() method and it is followed by the blocks of onResume() method (</span><span style="">onCreate() and onResume() are both program entry points).</span></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_19920"><div id="yiv6684757301yui_3_16_0_1_1436416321149_47576"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;"> </span><span style=""></span></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_19920"><div id="yiv6684757301yui_3_16_0_1_1436416321149_47573"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">Best Regards,</span><span style=""></span></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_19920"><div id="yiv6684757301yui_3_16_0_1_1436416321149_45708"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">Marjan</span><span style=""></span></div></div></div></div><div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;"> </span><span style=""></span></div></div></div><div><div style="margin-bottom:12.0pt;"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;"> </span><span style=""></span></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_46190"><div id="yiv6684757301yui_3_16_0_1_1436416321149_46189"><div id="yiv6684757301yui_3_16_0_1_1436416321149_46188"><div><div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">On Wednesday, July 8, 2015 4:10 AM, Steven Arzt <<a rel="nofollow" shape="rect" ymailto="mailto:Steven.Arzt@cased.de" target="_blank" href="mailto:Steven.Arzt@cased.de">Steven.Arzt@cased.de</a>> wrote:</span><span style=""></span></div></div></div></div><div style="margin-bottom:12.0pt;"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style=""> </span></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_46187"><div id="yiv6684757301"><div id="yiv6684757301yui_3_16_0_1_1436416321149_46186"><div id="yiv6684757301yui_3_16_0_1_1436416321149_46185"><div><div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:11.0pt;">Hi Marjan,</span><span style=""></span></div></div></div></div><div><div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:11.0pt;"> </span><span style=""></span></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_46202"><div id="yiv6684757301yui_3_16_0_1_1436416321149_46201"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span lang="EN-US" style="font-size:11.0pt;">There is a class called JimpleBasedInterproceduralCFG that combines the intra-procedural control flow graph with a callgraph. This class is used inside the IFDS implementation to propagate data flow facts through the whole program. You can essentially navigate through the graph using getSuccsOf(). If you arrive at a call site, you can dispatch your analysis into the callees returned by getCalleesOfCallAt().</span><span style=""></span></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_46205"><div id="yiv6684757301yui_3_16_0_1_1436416321149_46204"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span lang="EN-US" style="font-size:11.0pt;"> </span><span style=""></span></div></div></div></div><div><div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span lang="EN-US" style="font-size:11.0pt;">Best regards,</span><span style=""></span></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_46208"><div id="yiv6684757301yui_3_16_0_1_1436416321149_46207"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span lang="EN-US" style="font-size:11.0pt;"> Steven</span><span style=""></span></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_46184"><div id="yiv6684757301yui_3_16_0_1_1436416321149_46183"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span lang="EN-US" style="font-size:11.0pt;"> </span><span style=""></span></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_46199"><div id="yiv6684757301yui_3_16_0_1_1436416321149_46198" style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm;"><div id="yiv6684757301yui_3_16_0_1_1436416321149_46197"><div id="yiv6684757301yui_3_16_0_1_1436416321149_46196"><div><div class="yiv6684757301MsoNormal" style="background:white;"><b><span style="font-size:10.0pt;">Von:</span></b><span style="font-size:10.0pt;"> <a rel="nofollow" shape="rect" ymailto="mailto:soot-list-bounces@CS.McGill.CA" target="_blank" href="mailto:soot-list-bounces@CS.McGill.CA">soot-list-bounces@CS.McGill.CA</a> [<a rel="nofollow" shape="rect" ymailto="mailto:soot-list-bounces@CS.McGill.CA" target="_blank" href="mailto:soot-list-bounces@CS.McGill.CA">mailto:soot-list-bounces@CS.McGill.CA</a>] <b>Im Auftrag von </b>Marjan Radi<br clear="none"><b>Gesendet:</b> Sonntag, 5. Juli 2015 21:31<br clear="none"><b>An:</b> Soot List<br clear="none"><b>Betreff:</b> [Soot-list] application Control Flow Graph</span><span style=""></span></div></div></div></div></div></div><div><div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style=""> </span></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1436416321149_46194"><div id="yiv6684757301yui_3_16_0_1_1435795709338_29196"><div><div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">Hi,</span><span style=""></span></div></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1435795709338_29196"><div><div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;"> </span><span style=""></span></div></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1435795709338_29196"><div><div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">I am using soot for analyzing android programs. I wanted to identify all the methods which have called between every two program point, and each program point is the beginning of a method of the program. I tried to use intra procedural data flow analysis, but soot constructs Control Flow Graph of each method separately and I can not construct the whole application control flow graph. </span><span style=""></span></div></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1435795709338_29342"><div id="yiv6684757301yui_3_16_0_1_1436416321149_46193"><div id="yiv6684757301yui_3_16_0_1_1436416321149_46192"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">I would be appreciated if you could give me an idea about how can I do this.</span><span style=""></span></div></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1435795709338_29263"><div id="yiv6684757301yui_3_16_0_1_1436416321149_46213"><div id="yiv6684757301yui_3_16_0_1_1436416321149_46212"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;"> </span><span style=""></span></div></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1435795709338_29175"><div id="yiv6684757301yui_3_16_0_1_1426188032239_18320"><div id="yiv6684757301yui_3_16_0_1_1426188032239_71660"><div><div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">Best Regards,</span><span style=""></span></div></div></div></div></div><div id="yiv6684757301yui_3_16_0_1_1426188032239_71660"><div><div><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style="font-size:10.0pt;">Marjan</span><span style=""></span></div></div></div></div></div></div></div></div></div></div></div><div style="margin-bottom:12.0pt;"><div><div class="yiv6684757301MsoNormal" style="background:white;"><span style=""> </span></div></div></div></div></div></div></div></div></div></div></div></div><div style="margin-bottom:12.0pt;"><div class="yiv6684757301MsoNormal" style="background:white;"><span style=""> </span></div></div></div></div></div></div></div></div></div></div></div><div class="yiv6684757301MsoNormal" style="margin-bottom:12.0pt;background:white;"><span style=""> </span></div></div></div></div></div></div></div></div></div></div><br><br></div> </div> </div> </div></div></body></html>