Secure Software Engineering

Java Specification Request (JSR) 292, which was realized with Java 7, defines a new java bytecode called invokedy-namic, which can be used to call methods by name, with-out determining statically where the implementation of the called method is to be found. This mechanism eases the im-plementation of highly dynamic languages for the Java Vir-tual Machine. In this work we explain how we extended the Soot frame-work for static analysis and transformation of Java programs to properly handle invokedynamic bytecodes. Our imple-mentation required changes on all levels of Soot, as all inter-mediate representations needed to be adapted appropriately. We comment on the design decisions taken and how users can use our implementation to statically process or generate invokedynamic instructions. Our support has been integrated into Soot release 2.5.0 and is thus already available for everyone to use