java.lang.NoClassDefFoundError on calling constructCallGraph() in an android application,

[Harshit22209]

Running FlowDroid in an APK, crashes when SetupApplication.constructCallgraph() initializes FlowDroidMemoryWatcher. The watcher delegates to MemoryWarningSystem, which requires java.lang.management.ManagementFactory (JMX).

I think the reason for this is:
Android’s runtime does not provide java.lang.management.*, so class loading fails with NoClassDefFoundError.

Am i correct ?

val setup = SetupApplication(androidJar, apkFile)
 val cfg = setup.config  
 cfg.callbackConfig.setEnableCallbacks(false)   
setup.constructCallgraph() 

Soot/FlowDroid failed
java.lang.NoClassDefFoundError: Failed resolution of: Ljava/lang/management/ManagementFactory;
at soot.jimple.infoflow.memory.MemoryWarningSystem.findTenuredGenPool(MemoryWarningSystem.java:156)
at soot.jimple.infoflow.memory.MemoryWarningSystem.(MemoryWarningSystem.java:63)
at soot.jimple.infoflow.memory.FlowDroidMemoryWatcher.(FlowDroidMemoryWatcher.java:22)
at soot.jimple.infoflow.AbstractInfoflow.runAnalysis(AbstractInfoflow.java:834)
at soot.jimple.infoflow.AbstractInfoflow.runAnalysis(AbstractInfoflow.java:808)
at soot.jimple.infoflow.android.SetupApplication$InPlaceInfoflow.runAnalysis(SetupApplication.java:1358)
at soot.jimple.infoflow.android.SetupApplication.processEntryPoint(SetupApplication.java:1656)
at soot.jimple.infoflow.android.SetupApplication.runInfoflow(SetupApplication.java:1585)
at soot.jimple.infoflow.android.SetupApplication.constructCallgraph(SetupApplication.java:1439)
at com.example.malwaredetector.SootAnalyzeRunner.analyzeFile(SootAnalyzeRunner.kt:150)
at com.example.malwaredetector.runner.SootRunnerService.onStartCommand$lambda$3(SootRunnerService.kt:95)
at com.example.malwaredetector.runner.SootRunnerService.$r8$lambda$J76wxW3_qPnsEJ7phes8d5844Rw(Unknown Source:0)
at com.example.malwaredetector.runner.SootRunnerService$$ExternalSyntheticLambda0.run(D8$$SyntheticClass:0)
at java.lang.Thread.run(Thread.java:1012)
Caused by: java.lang.ClassNotFoundException: Didn't find class "java.lang.management.ManagementFactory" on path: DexPathList[[dex file "/data/data/com.example.malwaredetector/code_cache/.overlay/base.apk/classes4.dex", zip file "/data/app/~~K85R8B4ik7KNnnbBQ9dCsA==/com.example.malwaredetector-dbTnueby37flV8cGI5LzDg==/base.apk"],nativeLibraryDirectories=[/data/app/~~K85R8B4ik7KNnnbBQ9dCsA==/com.example.malwaredetector-dbTnueby37flV8cGI5LzDg==/lib/arm64, /data/app/~~K85R8B4ik7KNnnbBQ9dCsA==/com.example.malwaredetector-dbTnueby37flV8cGI5LzDg==/base.apk!/lib/arm64-v8a, /system/lib64, /system_ext/lib64]]
at dalvik.system.BaseDexClassLoader.findClass(BaseDexClassLoader.java:259)
at java.lang.ClassLoader.loadClass(ClassLoader.java:379)

Since i am using kotlin version, i am assuming FlowDroid is supported in an APK.

[StevenArzt]

Are you trying to run FlowDroid on Android? It was never meant to run on a phone. Keep in mind that FlowDroid requires substantial CPU and memory resources, which are likely not available on a phone anyway.

Our usage scenario is to run FlowDroid on a desktop computer (or even better: a powerful compute server).

[Harshit22209]

If CPU and RAM aren't the issue, then what could be the work around or technical solution for this problem?

[StevenArzt]

You can just remove the memory warning system. It's just a safety measure that ensures that FlowDroid will not run into trouble when the machine runs out of memory. Just remove it so that the watcher will never abort the analysis and just do nothing.

[Harshit22209]

Thanks for the help.