File tree Expand file tree Collapse file tree 2 files changed +3
-2
lines changed
icc_stateful/src/main/java/org/arguslab/icc_stateful Expand file tree Collapse file tree 2 files changed +3
-2
lines changed Original file line number Diff line number Diff line change @@ -15,7 +15,7 @@ protected void onCreate(Bundle savedInstanceState) {
1515 String imei = tel .getDeviceId (); // source
1616 Intent i2 = getIntent ();
1717 i2 .putExtra ("data" , imei );
18- setResult (RESULT_OK , i2 );
18+ setResult (RESULT_OK , i2 ); // sink
1919 finish ();
2020 }
2121}
Original file line number Diff line number Diff line change 1515 * @description MainActivity start FooActivity and waiting for the result and leak it.
1616 * FooActivity obtains sensitive data and return to MainActivity.
1717 * @dataflow source -> imei -> i2 -> FooActivity.setResult(i2) -> MainActivity.onActivityResult(data) -> imei3 -> sink
18- * @number_of_leaks 1
18+ * source -> imei -> i2 -> FooActivity.setResult(i2)
19+ * @number_of_leaks 2
1920 * @challenges The analysis must be able to resolve stateful ICC call and handle data flow
2021 * across different components.
2122 */
You can’t perform that action at this time.
0 commit comments