sireum / archived-v2-amandroid Goto Github PK

View Code? Open in Web Editor NEW

34.0 34.0 16.0 93.85 MB

Scala 78.35% C++ 11.15% C 2.68% HTML 7.82%

archived-v2-amandroid's People

Contributors

Stargazers

Watchers

Forkers

chubbymaggie davidyoung8906 linfc magicislab magicyb xuyunnan wdbhust tenmalin yutaono futurelighthouse gitter-badger terry2012 carlcurist zhongwenn happyxzw qiqi1

archived-v2-amandroid's Issues

Error: Following code has format problem: when analyzing apk

Hi, I try to run amandroid example. but when i analyze apk file, it occurs the following errors:

Thanks a lot !

Sireum/apps/amandroid/dex2pilar/linux64/newdex2pilar: error while loading shared libraries: libc++.so: cannot open shared object file: No such file or directory

Hi,

i have downloaded the latest version of Strawberry Sireum stable distribution. But, it seems like some library is missed.

I am using Ubuntu 14.04 x64. How to solve those problems?

An error occured on 20150609-104157 java.lang.RuntimeException: Error on running: /scratch/avdiienko/Sireum/apps/amandroid/dex2pilar/linux64/newdex2pilar Message: StringResult(/scratch/avdiienko/Sireum/apps/amandroid/dex2pilar/linux64/newdex2pilar: error while loading shared libraries: libc++.so: cannot open shared object file: No such file or directory ,127) at org.sireum.amandroid.decompile.Dex2PilarConverter$.convert(Dex2PilarConverter.scala:36) at org.sireum.amandroid.security.AmandroidSocket.loadApk(AmandroidSocket.scala:84) at org.sireum.amandroid.cli.TanitAnalysis$TaintTask.run(TaintAnalysis.scala:183) at org.sireum.amandroid.cli.TanitAnalysis$$anonfun$taintAnalyze$1.apply(TaintAnalysis.scala:159) at org.sireum.amandroid.cli.TanitAnalysis$$anonfun$taintAnalyze$1.apply(TaintAnalysis.scala:155) at scala.collection.immutable.Set$Set1.foreach(Set.scala:79) at org.sireum.amandroid.cli.TanitAnalysis$.taintAnalyze(TaintAnalysis.scala:154) at org.sireum.amandroid.cli.TanitAnalysis$.main(TaintAnalysis.scala:135) at org.sireum.amandroid.cli.TanitAnalysis.main(TaintAnalysis.scala)

Thank you in advance.

Vitalii

bundle 'org sireum' cannot be resolved

Hi, fengguo.
Thanks for your hard work on this project. Similar like CoolDeveloper1, I also hope to use Amandroid as a platform to build further analysis and useful plugins.
I am testing the shortcake stable branches on Mac OSX 10.10 laptop.
However, I encountered some problem.
I followed the instructions from the doc chapter 2.1, and imported the source of Amandroid into Eclipse.
When building the project, it encountered one error.

So I really hope to understand how to solve such issue? Thanks a lot!

Questions about analyzeCallback

Amandroid is powerful analysis tool. But when I use AppInfoCollector.analyzeCallback to get the call back methods in an apk, it get nothing. Here is my codes:

def main(args:Array[String]){
    val sourcePath = args(0)
    val apkFileUri = FileUtil.toUri(sourcePath)
    val mfp = AppInfoCollector.analyzeManifest(apkFileUri)
    val afp = AppInfoCollector.analyzeARSC(apkFileUri)
    val lfp = AppInfoCollector.analyzeLayouts(apkFileUri, mfp)
    val ra = AppInfoCollector.reachabilityAnalysis(mfp)
    val callbackMethods = AppInfoCollector.analyzeCallback(afp, lfp, ra)
    println(callbackMethods.size)

There is a file called AndroidCallbacks.txt in the FlowDroid, which list the callBackMethods in the Android platform. Is there a file like this in Amandroid?

Read Results

Hello, I wanted to ask you something about the results obtained. In this example, I have a loss of simSerialNumber through a kind Log files.
What I can not understand, it is written after the string "Types: maliciousness: information_theft". Please let me explain what I mean?

TaintPath: Source: <Descriptors: api_source: Landroid/telephony/TelephonyManager;.getSimSerialNumber:()Ljava/lang/String; > Sink: <Descriptors: api_sink: Landroid/util/Log;.d:(Ljava/lang/String;Ljava/lang/String;)I 1> Types: maliciousness:information_theft The path consists of the following edges ("->"). The nodes have the context information (p1 to pn means which parameter). The source is at the top : VirtualBody@(<init>,L0132d8)(<init>,L013b34) -> VirtualBody@(sendSMS,L015770)(access$11,L013f00) -> VirtualBody@(sendSMS,L015794)(access$11,L013f00) -> VirtualBody@(onReceive,L01379a)(env,L225) -> Call@(onReceive,L0137aa)(env,L225)p1 -> VirtualBody@(onCreate,L016206)(env,L165)

Is Amandroid possible to analyze Android framework?

Hi, I just wonder whether Amandroid is possible to analyze Android framework (e.g., system service)? As its website says, Amandroid is a static analyzer for Android apps; however, is it possible to analyze framework?

If so, how to achieve it?

Thanks!

The following code has format problem

Hi,

i am analysing an app and have the following error:

An error occured on 20150410-133311 java.lang.RuntimeException: Following code has format problem: at org.sireum.jawa.JawaCodeSource$.org$sireum$jawa$JawaCodeSource$$getRecordName(JawaCodeSource.scala:85) at org.sireum.jawa.JawaCodeSource$$anonfun$load$1.apply(JawaCodeSource.scala:79) at org.sireum.jawa.JawaCodeSource$$anonfun$load$1.apply(JawaCodeSource.scala:77) at scala.collection.immutable.List.foreach(List.scala:381) at org.sireum.jawa.JawaCodeSource$.load(JawaCodeSource.scala:76) at org.sireum.amandroid.security.AmandroidSocket.loadApk(AmandroidSocket.scala:84) at org.sireum.amandroid.cli.TanitAnalysis$TaintTask.run(TaintAnalysis.scala:185) at org.sireum.amandroid.cli.TanitAnalysis$$anonfun$taintAnalyze$1.apply(TaintAnalysis.scala:161) at org.sireum.amandroid.cli.TanitAnalysis$$anonfun$taintAnalyze$1.apply(TaintAnalysis.scala:157) at scala.collection.immutable.Set$Set1.foreach(Set.scala:79) at org.sireum.amandroid.cli.TanitAnalysis$.taintAnalyze(TaintAnalysis.scala:156) at org.sireum.amandroid.cli.TanitAnalysis$.main(TaintAnalysis.scala:137) at org.sireum.amandroid.cli.TanitAnalysis.main(TaintAnalysis.scala)

It is a development branch.

Thanks.

Could not analyze apk

Running reachability analysis on some popular large apks get empty result. According to "verbose" logging option, components are all phantom so no result is returned, seems like some parsing error on apk.

attached trace:

[VERBOSE]layoutcallback--->Map()
[VERBOSE]layoutuser--->Map()
[VERBOSE]add phantom record com.***.activity.specialcare.QvipSpecialCareActivity
[VERBOSE]add phantom record com.***.av.service.QQServiceForAV
//.... all components are phantom
[VERBOSE]current all callbacks = Map()
[VERBOSE]LayoutClasses --> Map()
[NORMAL]Entry point calculation done.
[CRITICAL]************************************

One test sample apk attached as below:
http://box.myqsc.com/-07382619

Error: String index out of range: -44

Hi, I analyzing of the application and several apps return this error:

Error: String index out of range: -44

What means it?

Thank's

TaintAnalysis doesn't work on the latest commit

Hi all,

i have found out that TaintAnalysis stopped working on the latest development distribution of Sireum Amandroid. I have also checked the latest version of your GitHub project - the same result. I think some latest commits broke TaintAnalysis....
Everything works fine when I am using a stable distribution of Sireum Amandroid...

You can compare TaintAnalysis.txt files from runs on Stable and Development distributions on any DroidBench app... You can start with Callbacks_Button1.apk.

The thing is that I want to extend TaintAnalysis plugin and thus I need to work with the latest sources, which seems to be broken now.. Or just let me know on which commit it works.

Thank you in advance.

Best Regards,
Vitalii

Run sireum am android in my windows

HI friends, amandroid isn't works.Why?

No sbt/boot/scala in sireum-amandroid-build

Hi,
i am trying to compile amandroid in Eclipse, but got the following error:

amandroid/sireum-amandroid-build/sbt/boot/scala-2.10.4/lib/scala-compiler.jar (No such file or directory)

I didn't find anything about downloading of scala in the tutorial.

Thanks.

Best Rergards,
Vitalii

.jar file for Amandroid and other Sireum projects

Can I get the .jar file of Amandroid and the other projects and use it instead of importing all the projects?

Exception thrown when running runWithoutDDA on class with clinit methods.

Errors thrown when analyzing apk with clinit, at the step of socket.runWithoutDDA.
Output and traces are as below:

[CRITICAL]####file:/media/DATA/TestWebview.apk#####
[NORMAL]entrypoints--->Set(com.example.testwebview.MainActivity, com.example.testwebview.MyService, com.example.testwebview.TestActivity)
[NORMAL]packagename--->com.example.testwebview
[NORMAL]permissions--->Set(android.permission.INTERNET)
[NORMAL]intentDB------>Map(com.example.testwebview.MainActivity -> Set(component: com.example.testwebview.MainActivity (actions: Set(android.intent.action.MAIN) categorys: Set(android.intent.category.LAUNCHER) datas: schemes= Set() authorities= Set() path= Set() pathPrefix= Set() pathPattern= Set() mimeType= Set())), com.example.testwebview.TestActivity -> Set(component: com.example.testwebview.TestActivity (actions: Set(android.intent.action.MAIN) categorys: Set(android.intent.category.LAUNCHER) datas: schemes= Set() authorities= Set() path= Set() pathPrefix= Set() pathPattern= Set() mithorwmeType= Set())))
[NORMAL]Generate environment for com.example.testwebview.MainActivity
[NORMAL]environment code:
procedure `void` `com.example.testwebview.MainActivity.envMain`(`android.content.Intent` r0 @type `object`) @owner `com.example.testwebview.MainActivity` @signature `Lcom/example/testwebview/MainActivity;.envMain:(Landroid/content/Intent;)V` @Access `STATIC` {
    temp;
    RandomCoinToss;
    head;
    x;
    `com.example.testwebview.MainActivity` r1;
    `android.app.ContextImpl` r2;
    `android.os.Bundle` r3;

  #Label0.

  #Label1.
  #L0. if RandomCoinToss == head  then goto Label13;
  #L1. r1:= new `com.example.testwebview.MainActivity` ;
  #L2. call temp:= `com.example.testwebview.MainActivity.<init>`(r1) @signature `Lcom/example/testwebview/MainActivity;.<init>:()V` @type `direct`;
  #L3. if RandomCoinToss == head  then goto Label12;
  #L4. r2:= new `android.app.ContextImpl` ;
  #L5. call temp:= `android.app.ContextImpl.<init>`(r2) @signature `Landroid/app/ContextImpl;.<init>:()V` @type `direct`;
  #L6. r1.`android.view.ContextThemeWrapper.mBase`:= r2 @type `object`;
  #L7. call temp:= `android.app.Activity.setIntent`(r1, r0) @signature `Landroid/app/Activity;.setIntent:(Landroid/content/Intent;)V` @type `virtual`;
  #Label2.
  #L8. r3:= new `android.os.Bundle` ;
  #L9. call temp:= `android.os.Bundle.<init>`(r3) @signature `Landroid/os/Bundle;.<init>:()V` @type `direct`;
  #L10. call temp:= `com.example.testwebview.MainActivity.onCreate`(r1, r3) @signature `Lcom/example/testwebview/MainActivity;.onCreate:(Landroid/os/Bundle;)V` @type `virtual`;
  #Label3.
  #L11. call temp:= `android.app.Activity.onStart`(r1) @signature `Landroid/app/Activity;.onStart:()V` @type `virtual`;
  #L12. call temp:= `android.app.Activity.onRestoreInstanceState`(r1, r3) @signature `Landroid/app/Activity;.onRestoreInstanceState:(Landroid/os/Bundle;)V` @type `virtual`;
  #L13. call temp:= `android.app.Activity.onPostCreate`(r1, r3) @signature `Landroid/app/Activity;.onPostCreate:(Landroid/os/Bundle;)V` @type `virtual`;
  #Label4.
  #L14. call temp:= `android.app.Activity.onResume`(r1) @signature `Landroid/app/Activity;.onResume:()V` @type `virtual`;
  #L15. call temp:= `android.app.Activity.onPostResume`(r1) @signature `Landroid/app/Activity;.onPostResume:()V` @type `virtual`;
  #Label5.

  #Label6.

  #Label7.
  #L16. if RandomCoinToss == head  then goto Label5;
  #Label8.
  #L17. call temp:= `android.app.Activity.onPause`(r1) @signature `Landroid/app/Activity;.onPause:()V` @type `virtual`;
  #L18. call temp:= `android.app.Activity.onCreateDescription`(r1) @signature `Landroid/app/Activity;.onCreateDescription:()Ljava/lang/CharSequence;` @type `virtual`;
  #L19. call temp:= `android.app.Activity.onSaveInstanceState`(r1, r3) @signature `Landroid/app/Activity;.onSaveInstanceState:(Landroid/os/Bundle;)V` @type `virtual`;
  #L20. if RandomCoinToss == head  then goto Label9;
  #L21. if RandomCoinToss == head  then goto Label4;
  #L22. if RandomCoinToss == head  then goto Label2;
  #Label9.
  #L23. call temp:= `android.app.Activity.onStop`(r1) @signature `Landroid/app/Activity;.onStop:()V` @type `virtual`;
  #L24. if RandomCoinToss == head  then goto Label11;
  #L25. if RandomCoinToss == head  then goto Label10;
  #L26. if RandomCoinToss == head  then goto Label2;
  #Label10.
  #L27. call temp:= `android.app.Activity.onRestart`(r1) @signature `Landroid/app/Activity;.onRestart:()V` @type `virtual`;
  #L28. goto Label3;
  #Label11.
  #L29. call temp:= `android.app.Activity.onDestroy`(r1) @signature `Landroid/app/Activity;.onDestroy:()V` @type `virtual`;
  #L30. if RandomCoinToss == head  then goto Label12;
  #Label12.

  #Label13.

  #Label14.
  #L31. if RandomCoinToss == head  then goto Label0;
  #L32. return @void;
}
[NORMAL]Entry point calculation done.
[CRITICAL]--------------Component Lcom/example/testwebview/MainActivity;.envMain:(Landroid/content/Intent;)V--------------
[CRITICAL]total: 1, oversize: 0, haveResult: 0
[CRITICAL]************************************

java.util.NoSuchElementException: key not found: Entry@(<clinit>,<clinit>)(envMain,L1)
    at scala.collection.MapLike$class.default(MapLike.scala:228)
    at scala.collection.AbstractMap.default(Map.scala:59)
    at scala.collection.mutable.HashMap.apply(HashMap.scala:65)
    at org.sireum.jawa.alir.interProcedural.InterProceduralGraph$$anon$1.scala$collection$mutable$SynchronizedMap$$super$apply(InterProceduralGraph.scala:57)
    at scala.collection.mutable.SynchronizedMap$class.apply(SynchronizedMap.scala:48)
    at org.sireum.jawa.alir.interProcedural.InterProceduralGraph$$anon$1.apply(InterProceduralGraph.scala:57)
    at org.sireum.jawa.alir.controlFlowGraph.InterproceduralControlFlowGraph.getCGEntryNode(InterproceduralControlFlowGraph.scala:632)
    at org.sireum.amandroid.alir.reachingFactsAnalysis.AndroidReachingFactsAnalysisBuilder.checkAndLoadClassFromHierarchy(AndroidReachingFactsAnalysis.scala:89)
    at org.sireum.amandroid.alir.reachingFactsAnalysis.AndroidReachingFactsAnalysisBuilder.org$sireum$amandroid$alir$reachingFactsAnalysis$AndroidReachingFactsAnalysisBuilder$$checkClass(AndroidReachingFactsAnalysis.scala:101)
    at org.sireum.amandroid.alir.reachingFactsAnalysis.AndroidReachingFactsAnalysisBuilder$$anonfun$checkAndLoadClasses$2.apply(AndroidReachingFactsAnalysis.scala:135)
    at org.sireum.amandroid.alir.reachingFactsAnalysis.AndroidReachingFactsAnalysisBuilder$$anonfun$checkAndLoadClasses$2.apply(AndroidReachingFactsAnalysis.scala:123)
    at scala.collection.immutable.List.foreach(List.scala:381)
    at org.sireum.amandroid.alir.reachingFactsAnalysis.AndroidReachingFactsAnalysisBuilder.checkAndLoadClasses(AndroidReachingFactsAnalysis.scala:122)
    at org.sireum.amandroid.alir.reachingFactsAnalysis.AndroidReachingFactsAnalysisBuilder$Gen.apply(AndroidReachingFactsAnalysis.scala:247)
    at org.sireum.jawa.alir.interProcedural.InterProceduralMonotoneDataFlowAnalysisFramework$IMdaf$1.fA(InterProceduralMonotoneDataFlowAnalysisFramework.scala:159)
    at org.sireum.jawa.alir.interProcedural.InterProceduralMonotoneDataFlowAnalysisFramework$IMdaf$1.actionF(InterProceduralMonotoneDataFlowAnalysisFramework.scala:172)
    at org.sireum.jawa.alir.interProcedural.InterProceduralMonotoneDataFlowAnalysisFramework$IMdaf$1.visitForward(InterProceduralMonotoneDataFlowAnalysisFramework.scala:498)
    at org.sireum.jawa.alir.interProcedural.InterProceduralMonotoneDataFlowAnalysisFramework$IMdaf$1.caculateResult(InterProceduralMonotoneDataFlowAnalysisFramework.scala:518)
    at org.sireum.jawa.alir.interProcedural.InterProceduralMonotoneDataFlowAnalysisFramework$IMdaf$1.visit(InterProceduralMonotoneDataFlowAnalysisFramework.scala:523)
    at org.sireum.jawa.alir.interProcedural.InterProceduralMonotoneDataFlowAnalysisFramework$.org$sireum$jawa$alir$interProcedural$InterProceduralMonotoneDataFlowAnalysisFramework$$process$1(InterProceduralMonotoneDataFlowAnalysisFramework.scala:565)
    at org.sireum.jawa.alir.interProcedural.InterProceduralMonotoneDataFlowAnalysisFramework$.build(InterProceduralMonotoneDataFlowAnalysisFramework.scala:591)
    at org.sireum.jawa.alir.interProcedural.InterProceduralMonotoneDataFlowAnalysisFramework$$anonfun$apply$1.apply(InterProceduralMonotoneDataFlowAnalysisFramework.scala:74)
    at org.sireum.jawa.alir.interProcedural.InterProceduralMonotoneDataFlowAnalysisFramework$$anonfun$apply$1.apply(InterProceduralMonotoneDataFlowAnalysisFramework.scala:74)
    at org.sireum.amandroid.alir.reachingFactsAnalysis.AndroidReachingFactsAnalysisBuilder.build(AndroidReachingFactsAnalysis.scala:67)
    at org.sireum.amandroid.alir.reachingFactsAnalysis.AndroidReachingFactsAnalysis$.apply(AndroidReachingFactsAnalysis.scala:665)
    at org.sireum.amandroid.security.AmandroidSocket$$anonfun$runWithoutDDA$1.apply(AmandroidSocket.scala:168)
    at org.sireum.amandroid.security.AmandroidSocket$$anonfun$runWithoutDDA$1.apply(AmandroidSocket.scala:164)
    at scala.collection.Iterator$class.foreach(Iterator.scala:743)
    at scala.collection.parallel.immutable.ParHashSet$ParHashSetIterator.foreach(ParHashSet.scala:77)
    at scala.collection.parallel.ParIterableLike$Foreach.leaf(ParIterableLike.scala:971)
    at scala.collection.parallel.Task$$anonfun$tryLeaf$1.apply$mcV$sp(Tasks.scala:49)
    at scala.collection.parallel.Task$$anonfun$tryLeaf$1.apply(Tasks.scala:48)
    at scala.collection.parallel.Task$$anonfun$tryLeaf$1.apply(Tasks.scala:48)
    at scala.collection.parallel.Task$class.tryLeaf(Tasks.scala:51)
    at scala.collection.parallel.ParIterableLike$Foreach.tryLeaf(ParIterableLike.scala:968)
    at scala.collection.parallel.AdaptiveWorkStealingTasks$WrappedTask$class.compute(Tasks.scala:152)
    at scala.collection.parallel.AdaptiveWorkStealingForkJoinTasks$WrappedTask.compute(Tasks.scala:443)
    at scala.concurrent.forkjoin.RecursiveAction.exec(RecursiveAction.java:160)
    at scala.concurrent.forkjoin.ForkJoinTask.doExec(ForkJoinTask.java:260)
    at scala.concurrent.forkjoin.ForkJoinPool$WorkQueue.runTask(ForkJoinPool.java:1339)
    at scala.concurrent.forkjoin.ForkJoinPool.runWorker(ForkJoinPool.java:1979)
    at scala.concurrent.forkjoin.ForkJoinWorkerThread.run(ForkJoinWorkerThread.java:107)

Test apk at : http://box.myqsc.com/-82089460

NullPointerException when analyzing APK

Hi. Whenever I run sireum amandroid genCallGraph, I got NullPointerException output in the .errorlog file. The error log is similar to that of issue #17:

An error occured on 20150325-145830
java.lang.NullPointerException
    at scala.collection.mutable.ArrayOps$ofRef$.length$extension(ArrayOps.scala:192)
    at scala.collection.mutable.ArrayOps$ofRef.length(ArrayOps.scala:192)
    at scala.collection.IndexedSeqOptimized$class.foreach(IndexedSeqOptimized.scala:32)
    at scala.collection.mutable.ArrayOps$ofRef.foreach(ArrayOps.scala:186)
    at org.sireum.util.FileUtil$.listFiles(File.scala:51)
    at org.sireum.jawa.JawaCodeSource$.load(JawaCodeSource.scala:75)
    at org.sireum.amandroid.cli.GenCallGraph$$anonfun$genCallGraph$1.apply(GenCallGraph.scala:137)
    at org.sireum.amandroid.cli.GenCallGraph$$anonfun$genCallGraph$1.apply(GenCallGraph.scala:123)
    at scala.collection.immutable.Set$Set1.foreach(Set.scala:79)
    at org.sireum.amandroid.cli.GenCallGraph$.genCallGraph(GenCallGraph.scala:122)
    at org.sireum.amandroid.cli.GenCallGraph$.main(GenCallGraph.scala:112)
    at org.sireum.amandroid.cli.GenCallGraph.main(GenCallGraph.scala)

Similar to that issue, I was able to run on Ubuntu 14.04, but unable to run on CentOS 6.5. The suggested solution is to install lib32, but which package, in particular, do I need?

Additional information: I did not compile it via Eclipse, but instead used the built version from sireum site, and run sireum amandroid to install the necessary files. Also, the system doesn't have a lib32 directory, only lib and lib64.

Error from IntentInjection_run after i install new amandroid source

-Rohit BGSU
org.sireum.amandroid.run.security.IntentInjection_run

command line arguments:
/Users/rohitsharma/Desktop/Sireum/apks/com.fcbh.dbp.BibleSocietyOfPhilippines_3.1.0.apk /Users/rohitsharma/Desktop/Sireum/output

Exception in thread "main" java.lang.NullPointerException
at scala.collection.mutable.ArrayOps$ofRef$.length$extension(ArrayOps.scala:192)
at scala.collection.mutable.ArrayOps$ofRef.length(ArrayOps.scala:192)
at scala.collection.IndexedSeqOptimized$class.foreach(IndexedSeqOptimized.scala:32)
at scala.collection.mutable.ArrayOps$ofRef.foreach(ArrayOps.scala:186)
at org.sireum.util.FileUtil$.listFiles(File.scala:45)
at org.sireum.amandroid.run.security.IntentInjection_run$.main(IntentInjection_run.scala:145)
at org.sireum.amandroid.run.security.IntentInjection_run.main(IntentInjection_run.scala)

Taint analysis - Source & Sink

But Android can update the list of source and sink?

Cannot access launch context extension points and StackOverflowError

After I configure all stuff on my computer(ubuntu x64) follow the website,i run CryptoMisuse.scala from org.sireum.amandroid.run.security,i found than when the code invoked AmandroidSocket.preProcess,it may read all file from AMANDROID_HOME. However the eclipse give the error:java.lang.StackOverflowError. Also,when i invoke Center.getEntryPoints(AndroidConstants.MAINCOMP_ENV),the eclipse give the error:Cannot access launch context extension points.
I have no idea how to deal with it.I think it may be my problem when i configure the amandroid,but i don`t know why.Please help me with these problems.I am looking forward to hearing from you.Thanks a lot.

java.lang.AssertionError: assertion failed

I developed some simple apps in Android Studio and when I tried to analyze them with Amandroid taintAnalysis cli, I got the following error. I still can analyze other apps, but not those which I developed in Android Studio.

java.lang.AssertionError: assertion failed
at scala.Predef$.assert(Predef.scala:151)
at org.sireum.amandroid.parser.ARSCFileParser.readResourceHeader(ARSCFileParser.scala:901)
at org.sireum.amandroid.parser.ARSCFileParser.doParse(ARSCFileParser.scala:761)
at org.sireum.amandroid.parser.ARSCFileParser$$anon$1.handleXMLFile(ARSCFileParser.scala:749)
at org.sireum.amandroid.parser.AbstractAndroidXMLParser.handleAndroidXMLFiles(AbstractAndroidXMLParser.scala:52)
at org.sireum.amandroid.parser.ARSCFileParser.parse(ARSCFileParser.scala:743)
at org.sireum.amandroid.appInfo.AppInfoCollector$.analyzeARSC(AppInfoCollector.scala:197)
at org.sireum.amandroid.appInfo.AppInfoCollector.collectInfo(AppInfoCollector.scala:153)
at org.sireum.amandroid.security.AmandroidSocket.loadApk(AmandroidSocket.scala:86)
at org.sireum.amandroid.cli.TanitAnalysis$$anonfun$taintAnalyze$1.apply(TaintAnalysis.scala:162)
at org.sireum.amandroid.cli.TanitAnalysis$$anonfun$taintAnalyze$1.apply(TaintAnalysis.scala:157)
at scala.collection.immutable.Set$Set1.foreach(Set.scala:79)
at org.sireum.amandroid.cli.TanitAnalysis$.taintAnalyze(TaintAnalysis.scala:156)
at org.sireum.amandroid.cli.TanitAnalysis$.main(TaintAnalysis.scala:137)
at org.sireum.amandroid.cli.TanitAnalysis.main(TaintAnalysis.scala)

update the sireum - failure

HI, i try to update/execute the sireum , but it seems to always download failure. How to fix such problem?
Could I download the newest version of java from the Oracle website ?

Exception thrown when running runWithoutDDA on class with clinit methods.

Errors thrown when analyzing apk with clinit, at the step of socket.runWithoutDDA.
Output and traces are as below:

[NORMAL]entrypoints--->Set(com.example.testwebview.MainActivity, com.example.testwebview.MyService, com.example.testwebview.TestActivity)
[NORMAL]packagename--->com.example.testwebview
[NORMAL]permissions--->Set(android.permission.INTERNET)
[NORMAL]intentDB------>Map(com.example.testwebview.MainActivity -> Set(component: com.example.testwebview.MainActivity (actions: Set(android.intent.action.MAIN) categorys: Set(android.intent.category.LAUNCHER) datas: schemes= Set() authorities= Set() path= Set() pathPrefix= Set() pathPattern= Set() mimeType= Set())), com.example.testwebview.TestActivity -> Set(component: com.example.testwebview.TestActivity (actions: Set(android.intent.action.MAIN) categorys: Set(android.intent.category.LAUNCHER) datas: schemes= Set() authorities= Set() path= Set() pathPrefix= Set() pathPattern= Set() mithorwmeType= Set())))
[NORMAL]Generate environment for com.example.testwebview.MainActivity
[NORMAL]environment code:
procedure `void` `com.example.testwebview.MainActivity.envMain`(`android.content.Intent` r0 @type `object`) @owner `com.example.testwebview.MainActivity` @signature `Lcom/example/testwebview/MainActivity;.envMain:(Landroid/content/Intent;)V` @Access `STATIC` {
    temp;
    RandomCoinToss;
    head;
    x;
    `com.example.testwebview.MainActivity` r1;
    `android.app.ContextImpl` r2;
    `android.os.Bundle` r3;

  #Label0.

  #Label1.
  #L0. if RandomCoinToss == head  then goto Label13;
  #L1. r1:= new `com.example.testwebview.MainActivity` ;
  #L2. call temp:= `com.example.testwebview.MainActivity.<init>`(r1) @signature `Lcom/example/testwebview/MainActivity;.<init>:()V` @type `direct`;
  #L3. if RandomCoinToss == head  then goto Label12;
  #L4. r2:= new `android.app.ContextImpl` ;
  #L5. call temp:= `android.app.ContextImpl.<init>`(r2) @signature `Landroid/app/ContextImpl;.<init>:()V` @type `direct`;
  #L6. r1.`android.view.ContextThemeWrapper.mBase`:= r2 @type `object`;
  #L7. call temp:= `android.app.Activity.setIntent`(r1, r0) @signature `Landroid/app/Activity;.setIntent:(Landroid/content/Intent;)V` @type `virtual`;
  #Label2.
  #L8. r3:= new `android.os.Bundle` ;
  #L9. call temp:= `android.os.Bundle.<init>`(r3) @signature `Landroid/os/Bundle;.<init>:()V` @type `direct`;
  #L10. call temp:= `com.example.testwebview.MainActivity.onCreate`(r1, r3) @signature `Lcom/example/testwebview/MainActivity;.onCreate:(Landroid/os/Bundle;)V` @type `virtual`;
  #Label3.
  #L11. call temp:= `android.app.Activity.onStart`(r1) @signature `Landroid/app/Activity;.onStart:()V` @type `virtual`;
  #L12. call temp:= `android.app.Activity.onRestoreInstanceState`(r1, r3) @signature `Landroid/app/Activity;.onRestoreInstanceState:(Landroid/os/Bundle;)V` @type `virtual`;
  #L13. call temp:= `android.app.Activity.onPostCreate`(r1, r3) @signature `Landroid/app/Activity;.onPostCreate:(Landroid/os/Bundle;)V` @type `virtual`;
  #Label4.
  #L14. call temp:= `android.app.Activity.onResume`(r1) @signature `Landroid/app/Activity;.onResume:()V` @type `virtual`;
  #L15. call temp:= `android.app.Activity.onPostResume`(r1) @signature `Landroid/app/Activity;.onPostResume:()V` @type `virtual`;
  #Label5.

  #Label6.

  #Label7.
  #L16. if RandomCoinToss == head  then goto Label5;
  #Label8.
  #L17. call temp:= `android.app.Activity.onPause`(r1) @signature `Landroid/app/Activity;.onPause:()V` @type `virtual`;
  #L18. call temp:= `android.app.Activity.onCreateDescription`(r1) @signature `Landroid/app/Activity;.onCreateDescription:()Ljava/lang/CharSequence;` @type `virtual`;
  #L19. call temp:= `android.app.Activity.onSaveInstanceState`(r1, r3) @signature `Landroid/app/Activity;.onSaveInstanceState:(Landroid/os/Bundle;)V` @type `virtual`;
  #L20. if RandomCoinToss == head  then goto Label9;
  #L21. if RandomCoinToss == head  then goto Label4;
  #L22. if RandomCoinToss == head  then goto Label2;
  #Label9.
  #L23. call temp:= `android.app.Activity.onStop`(r1) @signature `Landroid/app/Activity;.onStop:()V` @type `virtual`;
  #L24. if RandomCoinToss == head  then goto Label11;
  #L25. if RandomCoinToss == head  then goto Label10;
  #L26. if RandomCoinToss == head  then goto Label2;
  #Label10.
  #L27. call temp:= `android.app.Activity.onRestart`(r1) @signature `Landroid/app/Activity;.onRestart:()V` @type `virtual`;
  #L28. goto Label3;
  #Label11.
  #L29. call temp:= `android.app.Activity.onDestroy`(r1) @signature `Landroid/app/Activity;.onDestroy:()V` @type `virtual`;
  #L30. if RandomCoinToss == head  then goto Label12;
  #Label12.

  #Label13.

  #Label14.
  #L31. if RandomCoinToss == head  then goto Label0;
  #L32. return @void;
}
[NORMAL]Entry point calculation done.
[CRITICAL]--------------Component Lcom/example/testwebview/MainActivity;.envMain:(Landroid/content/Intent;)V--------------
[CRITICAL]total: 1, oversize: 0, haveResult: 0
[CRITICAL]************************************

java.util.NoSuchElementException: key not found: Entry@(<clinit>,<clinit>)(envMain,L1)
    at scala.collection.MapLike$class.default(MapLike.scala:228)
    at scala.collection.AbstractMap.default(Map.scala:59)
    at scala.collection.mutable.HashMap.apply(HashMap.scala:65)
    at org.sireum.jawa.alir.interProcedural.InterProceduralGraph$$anon$1.scala$collection$mutable$SynchronizedMap$$super$apply(InterProceduralGraph.scala:57)
    at scala.collection.mutable.SynchronizedMap$class.apply(SynchronizedMap.scala:48)
    at org.sireum.jawa.alir.interProcedural.InterProceduralGraph$$anon$1.apply(InterProceduralGraph.scala:57)
    at org.sireum.jawa.alir.controlFlowGraph.InterproceduralControlFlowGraph.getCGEntryNode(InterproceduralControlFlowGraph.scala:632)
    at org.sireum.amandroid.alir.reachingFactsAnalysis.AndroidReachingFactsAnalysisBuilder.checkAndLoadClassFromHierarchy(AndroidReachingFactsAnalysis.scala:89)
    at org.sireum.amandroid.alir.reachingFactsAnalysis.AndroidReachingFactsAnalysisBuilder.org$sireum$amandroid$alir$reachingFactsAnalysis$AndroidReachingFactsAnalysisBuilder$$checkClass(AndroidReachingFactsAnalysis.scala:101)
    at org.sireum.amandroid.alir.reachingFactsAnalysis.AndroidReachingFactsAnalysisBuilder$$anonfun$checkAndLoadClasses$2.apply(AndroidReachingFactsAnalysis.scala:135)
    at org.sireum.amandroid.alir.reachingFactsAnalysis.AndroidReachingFactsAnalysisBuilder$$anonfun$checkAndLoadClasses$2.apply(AndroidReachingFactsAnalysis.scala:123)
    at scala.collection.immutable.List.foreach(List.scala:381)
    at org.sireum.amandroid.alir.reachingFactsAnalysis.AndroidReachingFactsAnalysisBuilder.checkAndLoadClasses(AndroidReachingFactsAnalysis.scala:122)
    at org.sireum.amandroid.alir.reachingFactsAnalysis.AndroidReachingFactsAnalysisBuilder$Gen.apply(AndroidReachingFactsAnalysis.scala:247)
    at org.sireum.jawa.alir.interProcedural.InterProceduralMonotoneDataFlowAnalysisFramework$IMdaf$1.fA(InterProceduralMonotoneDataFlowAnalysisFramework.scala:159)
    at org.sireum.jawa.alir.interProcedural.InterProceduralMonotoneDataFlowAnalysisFramework$IMdaf$1.actionF(InterProceduralMonotoneDataFlowAnalysisFramework.scala:172)
    at org.sireum.jawa.alir.interProcedural.InterProceduralMonotoneDataFlowAnalysisFramework$IMdaf$1.visitForward(InterProceduralMonotoneDataFlowAnalysisFramework.scala:498)
    at org.sireum.jawa.alir.interProcedural.InterProceduralMonotoneDataFlowAnalysisFramework$IMdaf$1.caculateResult(InterProceduralMonotoneDataFlowAnalysisFramework.scala:518)
    at org.sireum.jawa.alir.interProcedural.InterProceduralMonotoneDataFlowAnalysisFramework$IMdaf$1.visit(InterProceduralMonotoneDataFlowAnalysisFramework.scala:523)
    at org.sireum.jawa.alir.interProcedural.InterProceduralMonotoneDataFlowAnalysisFramework$.org$sireum$jawa$alir$interProcedural$InterProceduralMonotoneDataFlowAnalysisFramework$$process$1(InterProceduralMonotoneDataFlowAnalysisFramework.scala:565)
    at org.sireum.jawa.alir.interProcedural.InterProceduralMonotoneDataFlowAnalysisFramework$.build(InterProceduralMonotoneDataFlowAnalysisFramework.scala:591)
    at org.sireum.jawa.alir.interProcedural.InterProceduralMonotoneDataFlowAnalysisFramework$$anonfun$apply$1.apply(InterProceduralMonotoneDataFlowAnalysisFramework.scala:74)
    at org.sireum.jawa.alir.interProcedural.InterProceduralMonotoneDataFlowAnalysisFramework$$anonfun$apply$1.apply(InterProceduralMonotoneDataFlowAnalysisFramework.scala:74)
    at org.sireum.amandroid.alir.reachingFactsAnalysis.AndroidReachingFactsAnalysisBuilder.build(AndroidReachingFactsAnalysis.scala:67)
    at org.sireum.amandroid.alir.reachingFactsAnalysis.AndroidReachingFactsAnalysis$.apply(AndroidReachingFactsAnalysis.scala:665)
    at org.sireum.amandroid.security.AmandroidSocket$$anonfun$runWithoutDDA$1.apply(AmandroidSocket.scala:168)
    at org.sireum.amandroid.security.AmandroidSocket$$anonfun$runWithoutDDA$1.apply(AmandroidSocket.scala:164)
    at scala.collection.Iterator$class.foreach(Iterator.scala:743)
    at scala.collection.parallel.immutable.ParHashSet$ParHashSetIterator.foreach(ParHashSet.scala:77)
    at scala.collection.parallel.ParIterableLike$Foreach.leaf(ParIterableLike.scala:971)
    at scala.collection.parallel.Task$$anonfun$tryLeaf$1.apply$mcV$sp(Tasks.scala:49)
    at scala.collection.parallel.Task$$anonfun$tryLeaf$1.apply(Tasks.scala:48)
    at scala.collection.parallel.Task$$anonfun$tryLeaf$1.apply(Tasks.scala:48)
    at scala.collection.parallel.Task$class.tryLeaf(Tasks.scala:51)
    at scala.collection.parallel.ParIterableLike$Foreach.tryLeaf(ParIterableLike.scala:968)
    at scala.collection.parallel.AdaptiveWorkStealingTasks$WrappedTask$class.compute(Tasks.scala:152)
    at scala.collection.parallel.AdaptiveWorkStealingForkJoinTasks$WrappedTask.compute(Tasks.scala:443)
    at scala.concurrent.forkjoin.RecursiveAction.exec(RecursiveAction.java:160)
    at scala.concurrent.forkjoin.ForkJoinTask.doExec(ForkJoinTask.java:260)
    at scala.concurrent.forkjoin.ForkJoinPool$WorkQueue.runTask(ForkJoinPool.java:1339)
    at scala.concurrent.forkjoin.ForkJoinPool.runWorker(ForkJoinPool.java:1979)
    at scala.concurrent.forkjoin.ForkJoinWorkerThread.run(ForkJoinWorkerThread.java:107)

Test apk at : http://box.myqsc.com/-82089460

About Amandroid setup -- Java compiler version

After I imported the Sireum repositories and Amandroid repository , there are many errors mark,
The tutorial ("http://amandroid.sireum.org/docs/tutorial.html") says that "Just make sure you are using correct Java compiler version, and then clean all projects."

I am not sure which Java compiler version is correct?

Thanks.

issue about configuration

here some errors, I do not know the reason ,please help me!

Possible MisMatich in CryptoAPIMisuse signatures

This is just to report the following issue.

CryptographicConstants.scala has signatures as "[| sig |]"
Which should have been just " sig "

-Kaushik, BGSU

How to run the code I changed?

Hi,
I changed the code in "TaintAnalysis.scala" for test:
//println("Analysis result write into " + arFile) println("LinAnalysis result write into " + arFile)
And how can i compile and run this change to run my analysis?
Is this can be implemented in eclipse?
Maybe it's a silly question,but hope your answer.

Required Memory

Whats the minimum size of memory required to run Amandroid? I tried with heap size of up to 6GB, but still I get java.lang.OutOfMemoryError: Java heap space.

Amandroid Stability

Hi Fengguo and Team,

Thank you for your hard work on this project. I would like to use Amandroid as a platform to build further analysis, but I have been running into many errors just running the included plugins. I want to make sure Amandroid is a stable platform before I invest significant time into development. I have been testing both the Shortcake stable and dev branches on a Mac OSX 10.9 laptop.

Here is an example run of a CLI plugin that illustrates my concern. I have been testing each of the plugins on a set of 24 APKs, primarily from the Google Play store. This particular run is using the latest version of Amandroid dev.

time ./sireum amandroid staging -o /path/Desktop/amandroid_eval/dev_build/staging/ -m 8 -t DIR /path/Desktop/apks/ 2>&1 | tee ~/Desktop/amandroid_eval/dev_build/staging/out.txt

Command Line Output
Total apks: 24