Soot Tutorial

This repository contains (will contain) several simple examples of static program analysis in Java using Soot.

Who this tutorial is for?

Anybody who knows Java programming and wants to do some static analysis in practice but does not know anything about Soot and static analysis in theory.

If you have some knowledge about static program analysis I suggest you learn Soot from here.

Why another tutorial for Soot?

Setup

Setup

Chapters

1: Get your hands dirty

In this chapter, you will visit a very simple code example to be familiar with Soot essential data structures and Jimple, Soot's principle intermediate representation.

• ./gradlew run --args="HelloSoot": The Jimple representation of the printFizzBuzz method alongside the branch statement.
• ./gradlew run --args="HelloSoot draw": The visualization of the printFizzBuzz control-flow graph.

Title	Tutorial	Soot Code	Example Input
Hello Soot	Doc	HelloSoot.java	FizzBuzz.java

2: Know the basic APIs

In this chapter, you will be familiar with some basic but useful methods in Soot to help read, analyze, and even update java code.

• ./gradlew run --args="BasicAPI": Analyze the class Circle.
• ./gradlew run --args="BasicAPI draw": Analyze the class Circle and draws the call graph.

Title	Tutorial	Soot Code	Example Input
Basic API	Doc	BasicAPI.java	Circle

3: Some Real Static Analysis (:construction: WIP)

• ./gradlew run --args="UsageFinder 'void println(java.lang.String)' 'java.io.PrintStream": Find usages of the method with the given subsignature in all methods of UsageExample.java.
• ./gradlew run --args="UsageFinder 'void println(java.lang.String)' 'java.io.PrintStream": Find usages of the method with the given subsignature of the given class signature in all methods of UsageExample.java.

Title	Tutorial	Soot Code	Example Input
Find usages of a method		UsageFinder.java	UsageExample.java
Null Pointer Analysis		NullPointerAnalysis	NullPointerExample.java

4: Manipulate the code (:construction: WIP)

5: Call Graphs (:construction: WIP)

6: Interprocedural analysis (:construction: WIP)

Title	Tutorial	Soot Code	Example Input

7: Android (:construction: WIP)

Title	Tutorial	Soot Code	Example Input
Trace an APK		AndroidTracer.java