...
| Code Block | ||
|---|---|---|
| ||
java -Xverify:all ApplicationName |
Exceptions
ENV04-J-EX0: On Java 2 systems, the primordial class loader is permitted to omit bytecode verification of classes loaded from the boot class path. These system classes are protected through platform and file system protections rather than by the bytecode verification process.
...
Bytecode verification ensures that the bytecode contains many of the security checks mandated by the Java Language Specification. Omitting the verification step could permit execution of insecure Java code.
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
ENV04-J | High | Likely | Low | P27 | L1 |
Automated Detection
Static checking of this rule is not feasible in the general case.
...
Under the default settings, bytecode verification is enabled on the Dalvik VM. To change the settings, use the adb shell to set the appropriate system property: for example, adb shell setprop dalvik.vm.dexopt-flags v=a or pass -Xverify:all as an argument to the Dalvik VM.
Bibliography
"The Bytecode Verifier" | |
Section 7.3, "The Class File Verifier" |
...
...