CallGraphTest.java

package sootup.apk.frontend;

import static org.junit.jupiter.api.Assertions.assertEquals;
import static org.junit.jupiter.api.Assertions.assertTrue;

import java.io.File;
import java.nio.file.Path;
import java.nio.file.Paths;
import java.util.List;
import java.util.stream.Collectors;
import org.junit.jupiter.api.BeforeAll;
import org.junit.jupiter.api.Test;
import sootup.apk.frontend.main.AndroidVersionInfo;
import sootup.callgraph.CallGraph;
import sootup.callgraph.CallGraphAlgorithm;
import sootup.callgraph.ClassHierarchyAnalysisAlgorithm;
import sootup.callgraph.RapidTypeAnalysisAlgorithm;
import sootup.core.signatures.MethodSignature;
import sootup.java.bytecode.frontend.inputlocation.JavaClassPathAnalysisInputLocation;
import sootup.java.core.JavaSootClass;
import sootup.java.core.views.JavaView;

public class CallGraphTest {

  public static JavaView view;
  public static JavaView locationLeakView;
  public static JavaView cryptoView;

  String flowSensitivityClassName = "de.ecspride.MainActivity";
  String locationLeakClassName = "de.ecspride.LocationLeak1";
  String cryptoClassName = "com.example.MainActivity";
  String methodName = "onCreate";
  List<String> methodParameters = List.of("android.os.Bundle");
  String methodReturnType = "void";

  @BeforeAll
  public static void createView() {
    view = createViewForApk("src/test/resources/FlowSensitivity1.apk");
    locationLeakView = createViewForApk("src/test/resources/LocationLeak1.apk");
    cryptoView = createViewForApk("src/test/resources/Crypto.apk");
  }

  private static JavaView createViewForApk(String apkPathString) {
    Path apkPath = Paths.get(apkPathString);
    String androidPlatformsPath = "src/test/resources/platforms";
    AndroidVersionInfo androidVersionInfo = new AndroidVersionInfo(apkPath, androidPlatformsPath);

    ApkAnalysisInputLocation sootClassApkAnalysisInputLocation =
        new ApkAnalysisInputLocation(
            apkPath, androidVersionInfo, DexBodyInterceptors.Default.bodyInterceptors());
    JavaClassPathAnalysisInputLocation classPathAnalysisInputLocation =
        new JavaClassPathAnalysisInputLocation(
            androidPlatformsPath
                + File.separator
                + "android-"
                + androidVersionInfo.getApi_version()
                + File.separator
                + "android.jar");

    return new JavaView(List.of(sootClassApkAnalysisInputLocation, classPathAnalysisInputLocation));
  }

  @Test
  public void testCHACallGraphAlgorithm() {

    MethodSignature onCreateMethodSignature =
        view.getIdentifierFactory()
            .getMethodSignature(
                flowSensitivityClassName, methodName, methodReturnType, methodParameters);

    CallGraphAlgorithm cha = new ClassHierarchyAnalysisAlgorithm(view);
    CallGraph cg = cha.initialize(List.of(onCreateMethodSignature));

    assertTrue(cg.containsMethod(onCreateMethodSignature));
    assertEquals(9, cg.callsFrom(onCreateMethodSignature).size());
  }

  @Test
  public void testRTACallGraphAlgorithm() {

    MethodSignature onCreateMethodSignature =
        view.getIdentifierFactory()
            .getMethodSignature(
                flowSensitivityClassName, methodName, methodReturnType, methodParameters);

    CallGraphAlgorithm rta =
        new RapidTypeAnalysisAlgorithm(
            view, view.getClasses().map(JavaSootClass::getType).collect(Collectors.toSet()));

    CallGraph cg = rta.initialize(List.of(onCreateMethodSignature));

    assertTrue(cg.containsMethod(onCreateMethodSignature));
    assertEquals(9, cg.callsFrom(onCreateMethodSignature).size());
  }

  @Test
  public void testLocationLeakCHACallGraphAlgorithm() {

    MethodSignature onCreateMethodSignature =
        locationLeakView
            .getIdentifierFactory()
            .getMethodSignature(
                locationLeakClassName, methodName, methodReturnType, methodParameters);

    CallGraphAlgorithm cha = new ClassHierarchyAnalysisAlgorithm(locationLeakView);
    CallGraph cg = cha.initialize(List.of(onCreateMethodSignature));

    assertTrue(cg.containsMethod(onCreateMethodSignature));
    assertEquals(5, cg.callsFrom(onCreateMethodSignature).size());
  }

  @Test
  public void testLocationLeakRTACallGraphAlgorithm() {

    MethodSignature onCreateMethodSignature =
        locationLeakView
            .getIdentifierFactory()
            .getMethodSignature(
                locationLeakClassName, methodName, methodReturnType, methodParameters);

    CallGraphAlgorithm rta =
        new RapidTypeAnalysisAlgorithm(
            locationLeakView,
            locationLeakView.getClasses().map(JavaSootClass::getType).collect(Collectors.toSet()));

    CallGraph cg = rta.initialize(List.of(onCreateMethodSignature));

    assertTrue(cg.containsMethod(onCreateMethodSignature));
    assertEquals(5, cg.callsFrom(onCreateMethodSignature).size());
  }

  @Test
  public void testCryptoCHACallGraphAlgorithm() {

    MethodSignature onCreateMethodSignature =
        cryptoView
            .getIdentifierFactory()
            .getMethodSignature(cryptoClassName, methodName, methodReturnType, methodParameters);

    CallGraphAlgorithm cha = new ClassHierarchyAnalysisAlgorithm(cryptoView);
    CallGraph cg = cha.initialize(List.of(onCreateMethodSignature));

    assertTrue(cg.containsMethod(onCreateMethodSignature));
    assertEquals(3, cg.callsFrom(onCreateMethodSignature).size());
  }

  @Test
  public void testCryptoRTACallGraphAlgorithm() {

    MethodSignature onCreateMethodSignature =
        cryptoView
            .getIdentifierFactory()
            .getMethodSignature(cryptoClassName, methodName, methodReturnType, methodParameters);

    CallGraphAlgorithm rta =
        new RapidTypeAnalysisAlgorithm(
            cryptoView,
            cryptoView.getClasses().map(JavaSootClass::getType).collect(Collectors.toSet()));

    CallGraph cg = rta.initialize(List.of(onCreateMethodSignature));

    assertTrue(cg.containsMethod(onCreateMethodSignature));
    assertEquals(3, cg.callsFrom(onCreateMethodSignature).size());
  }
}