Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feat: Implement 2 cases for native and 6 cases for cross-lingual information flow #42

Open
wants to merge 8 commits into
base: develop
Choose a base branch
from

Conversation

kordood
Copy link

@kordood kordood commented Aug 31, 2022

System properties can be sources to trigger sensitive operations such as emulator detection (They are also defined in Difuzer).

I implemented one case obtaining system properties in native code.

Another case is to copy string region in native code.
It may flow information implicitly supported by some JNI Functions.

Moreover, the android developer document recommends using these JNI Functions

@kordood
Copy link
Author

kordood commented Sep 16, 2022

I appended six cases focusing on cross-lingual information flow in the InfoFlows directory

JavaToJava: Source and sink in java code.
JavaToNative: Source in java code and sink in native code.
NativeProxy: Source and sink in java code with implicit flow through native code.
NativeToNative: Source and sink in native code.
NativeToJava: Source in native code and sink in java code.
JavaProxy: Source and sink in native code with implicit flow through java code.

@kordood kordood changed the title Feat: Implement 2 cases for native Feat: Implement 2 cases for native and 6 cases for cross-lingual information flow Sep 16, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant