Back to library list

com.android.tools__sdk-common

Column Insecure: Icon yes indicates the version is insecure, otherwise no
Column CryptoMisuse: Icon yes indicates the version has cryptographic API misuse, otherwise no
Version Insecure CryptoMisuse Rule name Method Statement Details
26.0.0 no       yes KeyPairGenerator com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z r3 = virtualinvoke $r12.<java.security.KeyPairGenerator: java.security.KeyPair generateKeyPair()>() Unexpected call to method generateKeyPair on object of type java.security.KeyPairGenerator. Expect a call to one of the following methods initialize
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z virtualinvoke r23.<java.security.KeyStore: void store(java.io.OutputStream,char[])>(r7, $r16) Second parameter should never be of type java.lang.String.
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z virtualinvoke r23.<java.security.KeyStore: void store(java.io.OutputStream,char[])>(r7, $r16) Unexpected call to method store on object of type java.security.KeyStore. Expect a call to one of the following methods getKey,getEntry
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.getCertificateInfo(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lcom/android/ide/common/signing/CertificateInfo; $r11 = virtualinvoke r27.<java.security.KeyStore: java.security.KeyStore$Entry getEntry(java.lang.String,java.security.KeyStore$ProtectionParameter)>(r4, $r10) Operation on object of type java.security.KeyStore object not completed. Expected call to getKey
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.getCertificateInfo(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lcom/android/ide/common/signing/CertificateInfo; virtualinvoke r27.<java.security.KeyStore: void load(java.io.InputStream,char[])>(r5, $r9) Second parameter should never be of type java.lang.String.
26.0.1 no       yes KeyPairGenerator com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z r3 = virtualinvoke $r12.<java.security.KeyPairGenerator: java.security.KeyPair generateKeyPair()>() Unexpected call to method generateKeyPair on object of type java.security.KeyPairGenerator. Expect a call to one of the following methods initialize
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z virtualinvoke r23.<java.security.KeyStore: void store(java.io.OutputStream,char[])>(r7, $r16) Second parameter should never be of type java.lang.String.
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z virtualinvoke r23.<java.security.KeyStore: void store(java.io.OutputStream,char[])>(r7, $r16) Unexpected call to method store on object of type java.security.KeyStore. Expect a call to one of the following methods getKey,getEntry
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.getCertificateInfo(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lcom/android/ide/common/signing/CertificateInfo; $r11 = virtualinvoke r27.<java.security.KeyStore: java.security.KeyStore$Entry getEntry(java.lang.String,java.security.KeyStore$ProtectionParameter)>(r4, $r10) Operation on object of type java.security.KeyStore object not completed. Expected call to getKey
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.getCertificateInfo(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lcom/android/ide/common/signing/CertificateInfo; virtualinvoke r27.<java.security.KeyStore: void load(java.io.InputStream,char[])>(r5, $r9) Second parameter should never be of type java.lang.String.
26.1.0 no       yes KeyPairGenerator com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z r3 = virtualinvoke $r12.<java.security.KeyPairGenerator: java.security.KeyPair generateKeyPair()>() Unexpected call to method generateKeyPair on object of type java.security.KeyPairGenerator. Expect a call to one of the following methods initialize
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z virtualinvoke r23.<java.security.KeyStore: void store(java.io.OutputStream,char[])>(r7, $r16) Second parameter should never be of type java.lang.String.
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z virtualinvoke r23.<java.security.KeyStore: void store(java.io.OutputStream,char[])>(r7, $r16) Unexpected call to method store on object of type java.security.KeyStore. Expect a call to one of the following methods getKey,getEntry
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.getCertificateInfo(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lcom/android/ide/common/signing/CertificateInfo; $r11 = virtualinvoke r27.<java.security.KeyStore: java.security.KeyStore$Entry getEntry(java.lang.String,java.security.KeyStore$ProtectionParameter)>(r4, $r10) Operation on object of type java.security.KeyStore object not completed. Expected call to getKey
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.getCertificateInfo(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lcom/android/ide/common/signing/CertificateInfo; virtualinvoke r27.<java.security.KeyStore: void load(java.io.InputStream,char[])>(r5, $r9) Second parameter should never be of type java.lang.String.
26.1.1 no       yes KeyPairGenerator com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z r3 = virtualinvoke $r12.<java.security.KeyPairGenerator: java.security.KeyPair generateKeyPair()>() Unexpected call to method generateKeyPair on object of type java.security.KeyPairGenerator. Expect a call to one of the following methods initialize
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z virtualinvoke r23.<java.security.KeyStore: void store(java.io.OutputStream,char[])>(r7, $r16) Second parameter should never be of type java.lang.String.
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z virtualinvoke r23.<java.security.KeyStore: void store(java.io.OutputStream,char[])>(r7, $r16) Unexpected call to method store on object of type java.security.KeyStore. Expect a call to one of the following methods getKey,getEntry
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.getCertificateInfo(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lcom/android/ide/common/signing/CertificateInfo; $r11 = virtualinvoke r27.<java.security.KeyStore: java.security.KeyStore$Entry getEntry(java.lang.String,java.security.KeyStore$ProtectionParameter)>(r4, $r10) Operation on object of type java.security.KeyStore object not completed. Expected call to getKey
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.getCertificateInfo(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lcom/android/ide/common/signing/CertificateInfo; virtualinvoke r27.<java.security.KeyStore: void load(java.io.InputStream,char[])>(r5, $r9) Second parameter should never be of type java.lang.String.
26.1.2 no       yes KeyPairGenerator com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z r3 = virtualinvoke $r12.<java.security.KeyPairGenerator: java.security.KeyPair generateKeyPair()>() Unexpected call to method generateKeyPair on object of type java.security.KeyPairGenerator. Expect a call to one of the following methods initialize
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z virtualinvoke r23.<java.security.KeyStore: void store(java.io.OutputStream,char[])>(r7, $r16) Second parameter should never be of type java.lang.String.
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z virtualinvoke r23.<java.security.KeyStore: void store(java.io.OutputStream,char[])>(r7, $r16) Unexpected call to method store on object of type java.security.KeyStore. Expect a call to one of the following methods getKey,getEntry
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.getCertificateInfo(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lcom/android/ide/common/signing/CertificateInfo; $r11 = virtualinvoke r27.<java.security.KeyStore: java.security.KeyStore$Entry getEntry(java.lang.String,java.security.KeyStore$ProtectionParameter)>(r4, $r10) Operation on object of type java.security.KeyStore object not completed. Expected call to getKey
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.getCertificateInfo(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lcom/android/ide/common/signing/CertificateInfo; virtualinvoke r27.<java.security.KeyStore: void load(java.io.InputStream,char[])>(r5, $r9) Second parameter should never be of type java.lang.String.
26.1.3 no       yes KeyPairGenerator com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z r3 = virtualinvoke $r12.<java.security.KeyPairGenerator: java.security.KeyPair generateKeyPair()>() Unexpected call to method generateKeyPair on object of type java.security.KeyPairGenerator. Expect a call to one of the following methods initialize
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z virtualinvoke r23.<java.security.KeyStore: void store(java.io.OutputStream,char[])>(r7, $r16) Second parameter should never be of type java.lang.String.
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z virtualinvoke r23.<java.security.KeyStore: void store(java.io.OutputStream,char[])>(r7, $r16) Unexpected call to method store on object of type java.security.KeyStore. Expect a call to one of the following methods getKey,getEntry
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.getCertificateInfo(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lcom/android/ide/common/signing/CertificateInfo; $r11 = virtualinvoke r27.<java.security.KeyStore: java.security.KeyStore$Entry getEntry(java.lang.String,java.security.KeyStore$ProtectionParameter)>(r4, $r10) Operation on object of type java.security.KeyStore object not completed. Expected call to getKey
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.getCertificateInfo(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lcom/android/ide/common/signing/CertificateInfo; virtualinvoke r27.<java.security.KeyStore: void load(java.io.InputStream,char[])>(r5, $r9) Second parameter should never be of type java.lang.String.
26.1.4 no       yes KeyPairGenerator com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z r3 = virtualinvoke $r12.<java.security.KeyPairGenerator: java.security.KeyPair generateKeyPair()>() Unexpected call to method generateKeyPair on object of type java.security.KeyPairGenerator. Expect a call to one of the following methods initialize
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z virtualinvoke r23.<java.security.KeyStore: void store(java.io.OutputStream,char[])>(r7, $r16) Second parameter should never be of type java.lang.String.
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z virtualinvoke r23.<java.security.KeyStore: void store(java.io.OutputStream,char[])>(r7, $r16) Unexpected call to method store on object of type java.security.KeyStore. Expect a call to one of the following methods getKey,getEntry
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.getCertificateInfo(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lcom/android/ide/common/signing/CertificateInfo; $r11 = virtualinvoke r27.<java.security.KeyStore: java.security.KeyStore$Entry getEntry(java.lang.String,java.security.KeyStore$ProtectionParameter)>(r4, $r10) Operation on object of type java.security.KeyStore object not completed. Expected call to getKey
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.getCertificateInfo(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lcom/android/ide/common/signing/CertificateInfo; virtualinvoke r27.<java.security.KeyStore: void load(java.io.InputStream,char[])>(r5, $r9) Second parameter should never be of type java.lang.String.
26.2.0 no       yes KeyPairGenerator com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z r3 = virtualinvoke $r12.<java.security.KeyPairGenerator: java.security.KeyPair generateKeyPair()>() Unexpected call to method generateKeyPair on object of type java.security.KeyPairGenerator. Expect a call to one of the following methods initialize
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z virtualinvoke r23.<java.security.KeyStore: void store(java.io.OutputStream,char[])>(r7, $r16) Second parameter should never be of type java.lang.String.
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z virtualinvoke r23.<java.security.KeyStore: void store(java.io.OutputStream,char[])>(r7, $r16) Unexpected call to method store on object of type java.security.KeyStore. Expect a call to one of the following methods getKey,getEntry
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.getCertificateInfo(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lcom/android/ide/common/signing/CertificateInfo; $r11 = virtualinvoke r27.<java.security.KeyStore: java.security.KeyStore$Entry getEntry(java.lang.String,java.security.KeyStore$ProtectionParameter)>(r4, $r10) Operation on object of type java.security.KeyStore object not completed. Expected call to getKey
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.getCertificateInfo(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lcom/android/ide/common/signing/CertificateInfo; virtualinvoke r27.<java.security.KeyStore: void load(java.io.InputStream,char[])>(r5, $r9) Second parameter should never be of type java.lang.String.
26.2.1 no       yes KeyPairGenerator com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z r3 = virtualinvoke $r12.<java.security.KeyPairGenerator: java.security.KeyPair generateKeyPair()>() Unexpected call to method generateKeyPair on object of type java.security.KeyPairGenerator. Expect a call to one of the following methods initialize
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z virtualinvoke r23.<java.security.KeyStore: void store(java.io.OutputStream,char[])>(r7, $r16) Second parameter should never be of type java.lang.String.
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.createDebugStore(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Lcom/android/utils/ILogger;)Z virtualinvoke r23.<java.security.KeyStore: void store(java.io.OutputStream,char[])>(r7, $r16) Unexpected call to method store on object of type java.security.KeyStore. Expect a call to one of the following methods getKey,getEntry
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.getCertificateInfo(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lcom/android/ide/common/signing/CertificateInfo; $r11 = virtualinvoke r27.<java.security.KeyStore: java.security.KeyStore$Entry getEntry(java.lang.String,java.security.KeyStore$ProtectionParameter)>(r4, $r10) Operation on object of type java.security.KeyStore object not completed. Expected call to getKey
- - yes KeyStore com.android.ide.common.signing.KeystoreHelper.getCertificateInfo(Ljava/lang/String;Ljava/io/File;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Lcom/android/ide/common/signing/CertificateInfo; virtualinvoke r27.<java.security.KeyStore: void load(java.io.InputStream,char[])>(r5, $r9) Second parameter should never be of type java.lang.String.