Query on writing sanitizers about mariana-trench

[yuhshin-oss]

Hi, sorry for the late reply and thank you for the question.

At a glance, I believe the issue is with the "name" constraint. This matches the full name of the method, which includes the class name as a prefix. Something like: Landroid/content/Intent;.setClass(<arg types>)V. This means the "pattern" constraint cannot treat the name as a prefix.

Specifically this part:

            {
              "constraint": "name",
              // "pattern": "setClass.*" --> change this to the following:
              "pattern": ".*setClass.*"
            },

If that still does not work, you can use the verbosity: 1 flag to debug the model generators. There should be output logs to indicate which methods were processed and which ones matched or didn't match.

    {
      "find": "methods",
      "where": [...]
        }
      ],
      "model": {...},
      "verbosity": 1
    }

[serrapa]

Hello @yuhshin-oss, I tried applying your fix but it doesn't work, the sanitizier doesn't stop the taint. The verbosity says everything is satisfied. I cannot understand where the problem is. I tried also adding:
{"sanitize": "sources"},
{"sanitize": "sinks"},
{"sanitize": "propagations"}