Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Bytecode verification ensures that the bytecode contains many of the security checks mandated by the Java Language Specification. Omitting the verification step could permit execution of insecure Java code.

Rule

Severity

Likelihood

Remediation Cost

Priority

Level

ENV04-J

High

Likely

Low

P27

L1

Automated Detection

Static checking of this rule is not feasible in the general case.

...

Under the default settings, bytecode verification is enabled on the Dalvik VM. To change the settings, use the adb shell to set the appropriate system property: for example, adb shell setprop dalvik.vm.dexopt-flags v=a or pass -Xverify:all as an argument to the Dalvik VM.

Bibliography

[Oaks 2001]

"The Bytecode Verifier"

[Pistoia 2004]

Section 7.3, "The Class File Verifier"

 


...