Skip to content

Latest commit

 

History

History
38 lines (28 loc) · 1.6 KB

README.md

File metadata and controls

38 lines (28 loc) · 1.6 KB

CDA (Control Dependence Analysis) implementation based on Soot

This is a scala implementation of a framework that builds a control dependence edge using Soot and an Exceptional Block Graph Construction.

Status

  • experimental

Usage

  • clone this repository or download an stable release
  • you will need to add a github token to your ~/.gitconfig. 
    [github]
        token = TOKEN
        user = USER_NAME
  • build this project using sbt (sbt compile test)
  • publish the artifact as a JAR file in your m2 repository (sbt publish)
  • create a dependency to the control-dependence-analysis artifact in your maven project.
<dependency>
  <groupId>br.ufpe.cin.control-dependence-analysis_2</groupId>
  <artifactId>12</artifactId>
  <version>0.1.0-SNAPSHOT</version>
</dependency>
  • implement a class that extends the JCDA class (see some examples in the scala tests). you must provide implementations to the following methods
    • getEntryPoints() to set up the "main" methods. This implementation must return a list of Soot methods
    • sootClassPath() to set up the soot classpath. This implementation must return a string
    • analyze(unit) to identify the type of a node (source, sink, simple node) in the graph; given a statement (soot unit)

Dependencies

This project use some of the FlowDroid test cases. The FlowDroid test cases in src/test/java/securibench are under LGPL-2.1 license.