0

I want to do a static analysis of an Android app with Androguard. Particularly, I am interested to identify whether a particular library method is called. However, as the method call could be in a part of the code that is never reached, would the static analysis with Androguard account for that? If not, is there a different tool that I can use? (On a side note, as I need to do a large-scale analysis of many apps, the tool should be automatable, which I understand is the case for Androguard.)

Marcin Orlowski
  • 72,056
  • 11
  • 123
  • 141
You_got_it
  • 331
  • 3
  • 12
  • Determining whether a particular line of code is executed is Undecidable, so any implementation of this wouldn't be perfect. I'm not familiar with Androguard, though, so I don't know if it takes care of this in obviously unreachable code blocks. – IanPudney Jul 12 '15 at 21:43
  • Your question is Androguard specific. Dead code can be detected at compile time and this is what even your IDE would do, not to mention tools like ProGuard – Marcin Orlowski Jul 12 '15 at 21:52

1 Answers1

1

You can use JArchitect and create your custom CQLinq queries to query the codebase and check if a method is callable or not, many other possibilities are provided by CQLinq to create advanced queries.