Marc Miltenberger

Here is another app with the same issue. Maybe it is easier to figure out with it: https://drive.google.com/open?id=1pfV2bjHQepke51LqV4WxJaQC7wgMmlZI This whole content seems to belong to one string: " The Nasik...

If you use maven, you can try to use the version from maven central as indicated in the README file. A compatible soot version should be installed as an dependency...

You could also obtain https://repo1.maven.org/maven2/de/fraunhofer/sit/sse/flowdroid/soot-infoflow-cmd/2.10.0/soot-infoflow-cmd-2.10.0-jar-with-dependencies.jar which is a jar containing all dependencies packaged in in the same jar.

None afaik. https://github.com/secure-software-engineering/FlowDroid/blob/c2ba056542f01f9ce23b0e989061e1f3acd6b717/soot-infoflow-android/pom.xml#L154 AXML is used to decode the binary XMLs.

You can do it, take a look at the ProcessManifest class. It has a constructor, which you can supply an InputStream. It is meant for reading the AndroidManifest.xml file. As...

We use maven. You can either search on how to integrate maven artifacts into gradle or you use the release jars: https://github.com/secure-software-engineering/FlowDroid/releases soot-infoflow-cmd-jar-with-dependencies.jar should contain all you need (and much...

Ah, so you're targeting Android. So, you *can* use ProcessManifest if you want, it is just a convenience class for AXMLPrinter2. Since FlowDroid is about computing dataflows, you'd get quite...

You can use it, but it has more dependencies to other classes. As said, it's best to use it as a reference on how to use axml. AXML can be...

The release jar with dependencies seems to have a "./" entry, which shouldn't be there. Unzipping and rezipping worked for me, but a version compiled straight from the current repository...

First of all, this is done in Soot, not FlowDroid. This is a perfectly valid Jimple representation. If your analysis is not capable of distinguishing these values, you might want...