com.android.tools.lint.checks

Class SecurityDetector

java.lang.Object

com.android.tools.lint.detector.api.Detector

com.android.tools.lint.checks.SecurityDetector

All Implemented Interfaces:

com.android.tools.lint.detector.api.FileScanner, com.android.tools.lint.detector.api.SourceCodeScanner, com.android.tools.lint.detector.api.XmlScanner, com.android.tools.lint.detector.api.XmlScannerConstants

public class SecurityDetector
extends com.android.tools.lint.detector.api.Detector
implements com.android.tools.lint.detector.api.XmlScanner, com.android.tools.lint.detector.api.SourceCodeScanner

Checks that exported services request a permission.

Nested Class Summary

Nested classes/interfaces inherited from class com.android.tools.lint.detector.api.Detector

com.android.tools.lint.detector.api.Detector.BinaryResourceScanner, com.android.tools.lint.detector.api.Detector.ClassScanner, com.android.tools.lint.detector.api.Detector.GradleScanner, com.android.tools.lint.detector.api.Detector.OtherFileScanner, com.android.tools.lint.detector.api.Detector.ResourceFolderScanner, com.android.tools.lint.detector.api.Detector.UastScanner, com.android.tools.lint.detector.api.Detector.XmlScanner

Field Summary

Fields

Modifier and Type	Field and Description
static com.android.tools.lint.detector.api.Issue	EXPORTED_PROVIDER Exported content providers
static com.android.tools.lint.detector.api.Issue	EXPORTED_RECEIVER Exported receivers
static com.android.tools.lint.detector.api.Issue	EXPORTED_SERVICE Exported services
static com.android.tools.lint.detector.api.Issue	OPEN_PROVIDER Content provides which grant all URIs access
static com.android.tools.lint.detector.api.Issue	SET_READABLE Using java.io.File.setReadable(true, false) to set file world-readable
static com.android.tools.lint.detector.api.Issue	SET_WRITABLE Using java.io.File.setWritable(true, false) to set file world-writable
static com.android.tools.lint.detector.api.Issue	WORLD_READABLE Using the world-readable flag
static com.android.tools.lint.detector.api.Issue	WORLD_WRITEABLE Using the world-writable flag

Fields inherited from interface com.android.tools.lint.detector.api.XmlScannerConstants

ALL

Constructor Summary

Constructors

Constructor and Description
SecurityDetector() Constructs a new SecurityDetector check

Method Summary

Modifier and Type	Method and Description
com.android.tools.lint.client.api.UElementHandler	createUastHandler(com.android.tools.lint.detector.api.JavaContext context)
java.util.Collection<java.lang.String>	getApplicableElements()
java.util.List<java.lang.String>	getApplicableMethodNames()
java.util.List<java.lang.Class<? extends org.jetbrains.uast.UElement>>	getApplicableUastTypes()
static boolean	getExported(org.w3c.dom.Element element)
void	visitElement(com.android.tools.lint.detector.api.XmlContext context, org.w3c.dom.Element element)
void	visitMethod(com.android.tools.lint.detector.api.JavaContext context, org.jetbrains.uast.UCallExpression node, com.intellij.psi.PsiMethod method)

Methods inherited from class com.android.tools.lint.detector.api.Detector

afterCheckFile, afterCheckLibraryProject, afterCheckProject, analyzeCallGraph, applicableAnnotations, applicableSuperClasses, appliesTo, appliesTo, appliesToResourceRefs, beforeCheckFile, beforeCheckLibraryProject, beforeCheckProject, checkBinaryResource, checkCall, checkClass, checkClass, checkFolder, checkInstruction, createPsiVisitor, fix, getApplicableAsmNodeTypes, getApplicableAttributes, getApplicableCallNames, getApplicableCallOwners, getApplicableConstructorTypes, getApplicableFiles, getApplicablePsiTypes, getApplicableReferenceNames, getSpeed, isApplicableAnnotationUsage, isCallGraphRequired, run, visitAnnotationUsage, visitAttribute, visitBuildScript, visitClass, visitClass, visitConstructor, visitConstructor, visitDocument, visitElementAfter, visitMethod, visitReference, visitReference, visitResourceReference, visitResourceReference

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface com.android.tools.lint.detector.api.XmlScanner

appliesTo, getApplicableAttributes, visitAttribute, visitDocument, visitElementAfter

Methods inherited from interface com.android.tools.lint.detector.api.SourceCodeScanner

analyzeCallGraph, applicableAnnotations, applicableSuperClasses, appliesToResourceRefs, getApplicableConstructorTypes, getApplicableReferenceNames, isApplicableAnnotationUsage, isCallGraphRequired, visitAnnotationUsage, visitClass, visitClass, visitConstructor, visitReference, visitResourceReference

Methods inherited from interface com.android.tools.lint.detector.api.FileScanner

afterCheckFile, beforeCheckFile

Field Detail

EXPORTED_SERVICE

public static final com.android.tools.lint.detector.api.Issue EXPORTED_SERVICE

Exported services

EXPORTED_PROVIDER

public static final com.android.tools.lint.detector.api.Issue EXPORTED_PROVIDER

Exported content providers

EXPORTED_RECEIVER

public static final com.android.tools.lint.detector.api.Issue EXPORTED_RECEIVER

Exported receivers

OPEN_PROVIDER

public static final com.android.tools.lint.detector.api.Issue OPEN_PROVIDER

Content provides which grant all URIs access

SET_READABLE

public static final com.android.tools.lint.detector.api.Issue SET_READABLE

Using java.io.File.setReadable(true, false) to set file world-readable

SET_WRITABLE

public static final com.android.tools.lint.detector.api.Issue SET_WRITABLE

Using java.io.File.setWritable(true, false) to set file world-writable

WORLD_WRITEABLE

public static final com.android.tools.lint.detector.api.Issue WORLD_WRITEABLE

Using the world-writable flag

WORLD_READABLE

public static final com.android.tools.lint.detector.api.Issue WORLD_READABLE

Using the world-readable flag

Constructor Detail

SecurityDetector

public SecurityDetector()

Constructs a new SecurityDetector check

Method Detail

getApplicableElements

public java.util.Collection<java.lang.String> getApplicableElements()

Specified by:

getApplicableElements in interface com.android.tools.lint.detector.api.XmlScanner

Overrides:

getApplicableElements in class com.android.tools.lint.detector.api.Detector

visitElement

public void visitElement(@NonNull
                         com.android.tools.lint.detector.api.XmlContext context,
                         @NonNull
                         org.w3c.dom.Element element)

Specified by:

visitElement in interface com.android.tools.lint.detector.api.XmlScanner

Overrides:

visitElement in class com.android.tools.lint.detector.api.Detector

getExported

public static boolean getExported(org.w3c.dom.Element element)

getApplicableMethodNames

public java.util.List<java.lang.String> getApplicableMethodNames()

Specified by:

getApplicableMethodNames in interface com.android.tools.lint.detector.api.SourceCodeScanner

Overrides:

getApplicableMethodNames in class com.android.tools.lint.detector.api.Detector

visitMethod

public void visitMethod(@NonNull
                        com.android.tools.lint.detector.api.JavaContext context,
                        @NonNull
                        org.jetbrains.uast.UCallExpression node,
                        @NonNull
                        com.intellij.psi.PsiMethod method)

Specified by:

visitMethod in interface com.android.tools.lint.detector.api.SourceCodeScanner

Overrides:

visitMethod in class com.android.tools.lint.detector.api.Detector

getApplicableUastTypes

public java.util.List<java.lang.Class<? extends org.jetbrains.uast.UElement>> getApplicableUastTypes()

Specified by:

getApplicableUastTypes in interface com.android.tools.lint.detector.api.SourceCodeScanner

Overrides:

getApplicableUastTypes in class com.android.tools.lint.detector.api.Detector

createUastHandler

@Nullable
public com.android.tools.lint.client.api.UElementHandler createUastHandler(@NonNull
                                                                                     com.android.tools.lint.detector.api.JavaContext context)

Specified by:

createUastHandler in interface com.android.tools.lint.detector.api.SourceCodeScanner

Overrides:

createUastHandler in class com.android.tools.lint.detector.api.Detector