aoli-al / exchain Goto Github PK

public class Flow {
public static int data1=-1;
public static int flow1(int count){
data1++;
if(count<1){
count++;
}
return count;
}
public static int flow2(int count){
count=count+data1;
if(count<2){
count++;
}
return count;
}
public static void entryMethod(){
int flowdatat1=0;
data1=flow1(flowdata1);
flow2(flowdata1);
}
}

hi aoli, i see that your work use flowdroid for local primitive taint analysis.
The reason is that flowdroid cannot find flow path between flow1 and flow2, right?
Flowdroid can transfer taint variable via assign|call parameter|call return value instead of shared memory data1, right?
So, you use phosphor to trace the taint path between flow1 and flow2 via data1.
My understanding is correct? If i misunderstand your work, please correct me, thanks.