-> _SOURCE_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ % -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ android.permission.READ_PHONE_STATE -> _SOURCE_ android.permission.READ_PHONE_STATE -> _SOURCE_ android.permission.READ_PHONE_STATE -> _SOURCE_ android.permission.READ_PHONE_STATE -> _SOURCE_ -> _SINK_ -> _BOTH_ -> _SINK_ -> _BOTH_ -> _BOTH_ -> _BOTH_ -> _SINK_ -> _SINK_ -> _SOURCE_ % Covered by the EasyTaintWrapper given that the HttpEntity is tainted % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % add Activity.getIntent() as source instead of the next methods to avoid duplicate results. % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ %()> -> _SOURCE_ %(android.content.Intent)> -> _SOURCE_ %(java.lang.String)> -> _SOURCE_ %(java.lang.String,android.net.Uri)> -> _SOURCE_ %(android.content.Context,java.lang.Class)> -> _SOURCE_ %(java.lang.String,android.net.Uri,android.content.Context,java.lang.Class)> -> _SOURCE_ %bundle sources % do not consider them as sources, because we have the callback parameters from % which the apps obtain the bundles as sources anyway % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ % -> _SOURCE_ %bundle sinks -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ android.permission.SEND_SMS -> _SINK_ android.permission.SEND_SMS -> _SINK_ android.permission.SEND_SMS -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SINK_ -> _SINK_ -> _SOURCE_ -> _SOURCE_ % This is handled by the Easy Taint Wrapper given that the URL is used afterwards %(java.lang.String,java.lang.String,int,java.lang.String)> -> _SINK_ %(java.lang.String,java.lang.String,java.lang.String)> -> _SINK_ %(java.lang.String,java.lang.String,int,java.lang.String,java.net.URLStreamHandler)> -> _SINK_ %(java.lang.String)> -> _SINK_ %(java.net.URL,java.lang.String)> -> _SINK_ %(java.net.URL,java.lang.String,java.net.URLStreamHandler)> -> _SINK_ % -> _SINK_ % -> _SINK_ % -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ % -> _SOURCE_ -> _SINK_ % Do not enter this method as a source. Our callback parameter handling will take care % of the parameters of this method anyway. Adding this method taints the whole activity! % -> _SOURCE_ % -> _SINK_ % -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ -> _SINK_ % -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SOURCE_ -> _SINK_