-
Notifications
You must be signed in to change notification settings - Fork 48
Inspect the Information Flow summary
- Open the information flow summary view
- Expand or collapse the info flow summary outline
- Nodes in the info flow summary outline
- Select a sink method node from the info flow summary outline
- Search the info flow summary outline
-
Click on the tab Info Flow Summary in the left window pane to open the info flow summary outline view
In Figure 3, the left window pane displays the info flow summary for the app PickContacts.
Click on the following icons in the toolbar to expand or collapse the info flow summary outline:
-
- expanding the outline to show all the levels
-
- collapsing the outline to show only the top level
-
Source category -> Sink category pairs
At the top level, the info flow summary outline contains nodes that represent high-level info flows from source categories to sink categories. For example, the top level node
UNIQUE_IDENTIFIER->NETWORK
indicates that there is an info flow in the app from the UNIQUE_IDENTIFIER
category to the NETWORK
category
-
Sink method calls
Expanding a source category -> sink category node at the top level, you will get a list of sink method calls in the sink category that some sources in the source category can flow to. For example, a second level node under the top level node above
AbstractHttpClient execute (HttpUriRequest)
denotes a sink method call in the
NETWORK
info category where a source in theUNIQUE_IDENTIFIER
info category can flow to.
Clicking on an outline node representing a sink method call will cause the other Droidsafe views and the editor to be updated accordingly.
-
Info Flow Details view - shows the sources of the given category that can flow to the arguments and/or the receiver of this sink method call.
-
Values view - shows the values computed for the arguments and the receiver of this sink method call.
-
Points To Info view - shows the points-to information on the arguments and the receiver of this sink method call.
-
Editor - reveals and highlights the file location corresponding to this sink method call.
Figure 3 shows the updated contents in the other Droidsafe views and in the editor when a sink method call
AbstractHttpClient execute (HttpUriRequest)
in the info flow summary outline is selected.
-
Click on
in the toolbar
A search dialog will appear on the top of the info flow summary outline, allowing you to enter search strings and to navigate among the search results.
-
Enter a search string
result
in the Search input box and then pressreturn
When the search status shows
(1 of 12)
, it means that twelve occurrences ofresult
in the outline are found and the current search position is at the first occurrence. The current occurrence is highlighted red, and the remaining occurrence is highlighted yellow. -
press
return
or click onto navigate to the next occurrence
-
Click on
to navigate to the previous occurrence
-
Click on
to exit search.
Previous section: Inspect the Security Specification
Next section: Inspect the Indicators