View on GitHub

Soot

A framework for analyzing and transforming Java and Android Applications

What is Soot?

Originally, Soot started off as a Java optimization framework. By now, researchers and practitioners from around the world use Soot to analyze, instrument, optimize and visualize Java and Android applications.

What input formats does Soot provide?

Currently, Soot can process code from the following sources:

What output formats does Soot provide?

Soot can produce (possibly transformed/instrumented/optimized) code in these output formats:

Soot can go from any input format to any output format, i.e., for instance, allows the translation from Android to Java or Java to Jasmin.

Who develops and maintains Soot?

Soot was originally developed by the Sable Research Group of McGill University. The first publication on Soot appeared at CASCON 1999. Since then, Soot has seen contributions from many people inside and outside the research community. The current maintenance is driven by the Secure Software Engineering Group at Technische Universität Darmstadt.

This publication provides an insight into the first ten years of Soot’s development.

What kind of analyses does Soot provide?

What extensions exist to Soot?

How does Soot work internally?

Soot transforms programs into an intermediate representation, which can then be analyzed. Soot provides four intermediate representations for analyzing and transforming Java bytecode:

Jimple is Soot’s primary IR and most analyses are implemented on the Jimple level. Custom IRs may be added when desired.

How do I get started with Soot?

We have some documentation on Soot in the wiki, including a large range of tutorials on Soot. We also have a JavaDoc documentation.

How do I obtain the nightly builds?

Nightly builds of soot can be obtained from nightly build. The “soot-trunk.jar” file is an all-in-one file that also contains all the required libraries. The “sootclasses-trunk.jar” file contains only Soot, allowing you to use manually pick dependencies as you need them.

About Soot’s source code

Soot follows the git-flow convention. Releases and hotfixes are maintained in the master branch. Development happens in the develop branch. To catch the bleeding edge of Soot, check out the latter. You will also need the projects jasmin and heros. In case of any questions, please consult the Soot mailing list.