On Demystifying the Android Application Framework: Re-Visiting Android Permission Specification Analysis