This repo is the final snapshot of the DroidSafe project's modifications to the Soot analysis framework. This repo includes the source code for our object-sensitive points to analysis, and all associated modifications to Soot. It has been tested extensively, and performance-tuned. The analysis needs lots of memory to run on large Android programs (we ran on a machine with 512GB of memory).
A while ago, this branch diverged from the Soot mainline, and we do not currently have the resources to merge our changes back to the Soot master. We are sorry for this.
We hope you can find this code useful.
Please see the DroidSafe analysis driver for an example on how to use the object-sensitive analysis.
What remains in this document is the existing Soot documentation.
Soot is a Java optimization framework. It provides four intermediate representations for analyzing and transforming Java bytecode:
- Baf: a streamlined representation of bytecode which is simple to manipulate.
- Jimple: a typed 3-address intermediate representation suitable for optimization.
- Shimple: an SSA variation of Jimple.
- Grimp: an aggregated version of Jimple suitable for decompilation and code inspection.
See http://www.sable.mcgill.ca/soot/ for details.
We have some documentation on Soot in the wiki and also a large range of tutorials on Soot.
** Note that the nightly build server has moved**
Nightly builds of soot can be obtained from nightly build. The "soot-trunk.jar" file is an all-in-one file that also contains all the required libraries. The "sootclasses-trunk.jar" file contains only Soot, allowing you to use manually pick dependencies as you need them.
Soot follows the git-flow convention. Releases and hotfixes are maintained in the master branch. Development happens in the develop branch. To catch the bleeding edge of Soot, check out the latter. You will also need the projects jasmin and heros. In case of any questions, please consult the Soot mailing list at: http://www.sable.mcgill.ca/mailman/listinfo/soot-list/