Taint analysis in FlowDroid

CallStack before run() method

1) Construct flow function:

PathEdgeProcessingTask.run() (private class in IFDSSolver.java) calling private method processCall which calls FlowFunction<D> function = flowFunctions.getCallFlowFunction(n, sCalledProcN);

Flow function is constructed at Class InfoflowProblem, Method createFlowFunctionsFactory (override method getCallFlowFunction etc.).

2) Compute the flow.

Also in processCall (IFDSSolver.java), Set<D> res = computeCallFlowFunction(function, d1, d2); computeTargets()  is then invoked, so is TaintPropagationHandler.notifyFlowIn()  (we need to create a handler to see how this will work)