packageNamesToCertMap = new HashMap<>();\n // 1st Entry: valid remote certificate location\n packageNamesToCertMap.put(\"headfirstlab.nasadailyimage\", new URL(\"https://dl.dropboxusercontent.com/u/28681922/test_cert.pem\"));\n // 2nd Entry: not existent certificate -> This link will be enforced to https,\n // but still there is no certificate at the secure endpoint\n packageNamesToCertMap.put(\"it.polimi.example\", new URL(\"http://google.com/test_cert.pem\"));\n // 3rd Entry: misspelled and so invalid URL (missing a p..)\n // packageNamesToCertMap.put(\"it.polimi.example2\", \"htt://google.com/test_cert2.pem\");\n // 3rd Entry: reverse package name and then inexistent certificate at https://polimi.it/example3/certificate.pem\n packageNamesToCertMap.put(\"it.polimi.example3\", null);\n\n Log.i(TAG_MAIN, \"2nd Test: Evaluate container signed with the Android debug private key.\");\n mSecureDexClassLoader = mSecureLoaderFactory.createDexClassLoader(\n exampleTestAPKPath,\n null,\n ClassLoader.getSystemClassLoader(),\n packageNamesToCertMap);\n\n try {\n Class loadedClass = mSecureDexClassLoader.loadClass(classNameInAPK);\n\n if (loadedClass != null) {\n\n Log.w(TAG_MAIN, \"No class should be loaded!\");\n } else {\n\n Log.i(TAG_MAIN, \"The chosen class is signed but it does not pass \" +\n \"the verification against the trusted certificate! CORRECT!\");\n }\n\n } catch (ClassNotFoundException e) {\n e.printStackTrace();\n Log.w(TAG_MAIN, \"Class should be present in the provided path!!\");\n }\n\n // 3rd Test: Fetch the certificate by filling associative map\n // between package name and certificate --> FAIL cause some of\n // signatures in the container failed the verification process\n // against the trusted developer certificate.\n Log.i(TAG_MAIN, \"3rd Test: Evaluate container with some tampered entries..\");\n mSecureDexClassLoader = mSecureLoaderFactory.createDexClassLoader(\n exampleSignedChangedAPKPath,\n null,\n ClassLoader.getSystemClassLoader(),\n packageNamesToCertMap);\n\n try {\n Class loadedClass = mSecureDexClassLoader.loadClass(classNameInAPK);\n\n if (loadedClass != null) {\n\n Log.w(TAG_MAIN, \"No class should be loaded!\");\n } else {\n\n Log.i(TAG_MAIN, \"The chosen class was signed but the \" +\n \"apk container was tampered, thus not all the \" +\n \"signatures match anymore. Therefore so no class loading! CORRECT!\");\n }\n\n } catch (ClassNotFoundException e) {\n e.printStackTrace();\n Log.w(TAG_MAIN, \"Class should be present in the provided path!!\");\n }\n\n // 4th Test: Fetch the certificate by filling associative map\n // between package name and certificate --> SUCCESS cause this\n // time the apk was signed and successfully verified against the correct certificate\n Log.i(TAG_MAIN, \"4th Test: Fetch the certificate by filling associative map..\");\n\n // Creating the apk paths list (you can mix between remote and local URL)..\n String listAPKPaths =\n \"http://google.com/testApp2.apk:\" + exampleSignedAPKPath;\n\n mSecureDexClassLoader = mSecureLoaderFactory.createDexClassLoader(\n listAPKPaths,\n null,\n ClassLoader.getSystemClassLoader(),\n packageNamesToCertMap);\n\n try {\n Class loadedClass = mSecureDexClassLoader.loadClass(classNameInAPK);\n\n if (loadedClass != null) {\n\n final Activity NasaDailyActivity = (Activity) loadedClass.newInstance();\n\n Log.i(TAG_MAIN, \"Found valid class: \" + loadedClass.getSimpleName() + \"; APK path: \" + exampleSignedAPKPath + \"; Success!\");\n\n toastHandler.post(new Runnable() {\n\n @Override\n public void run() {\n Toast.makeText(MainActivity.this,\n \"SecureDexClassLoader was successful! Found activity: \" + NasaDailyActivity.getClass().getName(),\n Toast.LENGTH_SHORT).show();\n }\n\n });\n\n } else {\n\n Log.w(TAG_MAIN, \"This time the chosen class should pass the security verification!\");\n }\n\n } catch (ClassNotFoundException e) {\n e.printStackTrace();\n Log.w(TAG_MAIN, \"Class should be present in the provided path!!\");\n } catch (InstantiationException e) {\n Log.w(TAG_MAIN, \"Error while instantiating the loaded class!!\");\n e.printStackTrace();\n } catch (IllegalAccessException e) {\n Log.w(TAG_MAIN, \"Error while instantiating the loaded class!!\");\n e.printStackTrace();\n }\n\n // Remove the cached certificates and the certificate..\n mSecureDexClassLoader.wipeOutPrivateAppCachedData(true, true);\n Log.d(TAG_MAIN, \"Cached data of SecureDexClassLoader have been wiped out..\");\n\n } catch (MalformedURLException e) {\n\n // The previous entries for the map are not necessarily the right ones\n // but still they are not malformed so no exception should be raised.\n Log.e(TAG_MAIN, \"A malformed URL was provided for a remote certificate location\");\n\n }\n }\n\n /**\n * This method is used to set up and manage a DexClassLoader component in\n * order to retrieve a new activity from an .apk, which has been\n * already downloaded and installed on the mobile device.\n * If everything works fine, it will instantiate the main activity of\n * this .apk.\n */\n protected void setUpDexClassLoader() {\n\n // First check: this operation can only start after\n // that the proper button has just been pressed..\n if (!effectiveDexClassLoader) return;\n\n Log.d(TAG_MAIN, \"Setting up DexClassLoader..\");\n\n if (PROFILING_ON) Debug.startMethodTracing(\"DexClassLoader\");\n\n File dexOutputDir = getDir(\"dex\", MODE_PRIVATE);\n DexClassLoader mDexClassLoader = new DexClassLoader(\n exampleSignedAPKPath,\n dexOutputDir.getAbsolutePath(),\n null,\n ClassLoader.getSystemClassLoader());\n\n try {\n\n // TODO(lfalsina)\n // Use reflection to enforce the class loader of this activity\n // to be the DexClassLoader one instantiated in this function.\n // Reference: http://blog.pentests.pl/2015/02/android-dynamic-activities.html\n\n // Load NasaDailyImage Main Activity..\n Class loadedClass = mDexClassLoader.loadClass(classNameInAPK);\n\n if (PROFILING_ON) Debug.stopMethodTracing(); // end of \"DexClassLoader\" trace\n\n final Activity NasaDailyActivity = (Activity) loadedClass.newInstance();\n\n // Note that in this case loading class operation was performed even if the APK which contains\n // the target class was signed just with the Android Debug key. This operation would have failed\n // if SecureDexClassLoader would have been used in stead..\n Log.i(TAG_MAIN, \"Found class: \" + loadedClass.getSimpleName() + \"; APK path: \" + exampleSignedAPKPath);\n\n toastHandler.post(new Runnable() {\n\n @Override\n public void run() {\n Toast.makeText(\n MainActivity.this,\n \"DexClassLoader was successful! Found activity: \" + NasaDailyActivity.getClass().getName(),\n Toast.LENGTH_SHORT).show();\n }\n\n });\n\n // An intent is defined to start the new loaded activity.\n //Intent transitionIntent = new Intent(this, loadedClass);\n //transitionIntent.setFlags(Intent.FLAG_ACTIVITY_NEW_TASK);\n //this.startActivity(transitionIntent);\n\n } catch (ClassNotFoundException e) {\n\n Log.e(TAG_MAIN, \"Error: Class not found!\");\n\n toastHandler.post(new Runnable() {\n\n @Override\n public void run() {\n Toast.makeText(MainActivity.this,\n \"Error! No class found for DexClassLoader..\",\n Toast.LENGTH_SHORT).show();\n }\n\n });\n\n e.printStackTrace();\n } catch (ActivityNotFoundException e) {\n\n Log.e(TAG_MAIN, \"Error: Activity not found in the manifest!\");\n\n toastHandler.post(new Runnable() {\n\n @Override\n public void run() {\n Toast.makeText(MainActivity.this,\n \"Error! The activity found by DexClassLoader is not a legitimate one..\",\n Toast.LENGTH_SHORT).show();\n }\n\n });\n\n e.printStackTrace();\n } catch (InstantiationException e) {\n e.printStackTrace();\n } catch (IllegalAccessException e) {\n e.printStackTrace();\n }\n }\n}\n"
},
{
"path": "example/AS/app/src/main/res/layout/activity_dex_class_sample.xml",
"content": "\n\n \n\n \n \n \n \n \n \n \n \n \n \n \n\n"
},
{
"path": "example/AS/app/src/main/res/layout/activity_main.xml",
"content": "\n\n \n \t\n\t\t\n\n"
},
{
"path": "example/AS/app/src/main/res/values/strings.xml",
"content": "\n\n\n Dynamic Code Loading Techniques\n The aim of this simple application\n is showing a couple of techniques which could be used\n to load external code from a remote or a local path\n dynamically.\n DexClassLoader with a .jar container\n Here it is shown a small example\n of a Java class, loaded dynamically through DexClassLoader from a jar container.\n \\nIts methods are used to rearrange and modify the graphical components in this screen..\n \\nGuess what you should do now ;)\n Hello world!\n Click me!\n Switch\n Dynamically loaded activity\n\n\n"
},
{
"path": "example/AS/build.gradle",
"content": "// Top-level build file where you can add configuration options common to all sub-projects/modules.\nbuildscript {\n repositories {\n jcenter()\n }\n dependencies {\n classpath 'com.android.tools.build:gradle:1.5.0'\n }\n}\n\nallprojects {\n repositories {\n jcenter()\n }\n}\n"
},
{
"path": "example/AS/gradle/wrapper/gradle-wrapper.properties",
"content": "#Wed Apr 10 15:27:10 PDT 2013\ndistributionBase=GRADLE_USER_HOME\ndistributionPath=wrapper/dists\nzipStoreBase=GRADLE_USER_HOME\nzipStorePath=wrapper/dists\ndistributionUrl=https\\://services.gradle.org/distributions/gradle-2.2.1-all.zip\n"
},
{
"path": "example/AS/gradlew",
"content": "#!/usr/bin/env bash\n\n##############################################################################\n##\n## Gradle start up script for UN*X\n##\n##############################################################################\n\n# Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script.\nDEFAULT_JVM_OPTS=\"\"\n\nAPP_NAME=\"Gradle\"\nAPP_BASE_NAME=`basename \"$0\"`\n\n# Use the maximum available, or set MAX_FD != -1 to use that value.\nMAX_FD=\"maximum\"\n\nwarn ( ) {\n echo \"$*\"\n}\n\ndie ( ) {\n echo\n echo \"$*\"\n echo\n exit 1\n}\n\n# OS specific support (must be 'true' or 'false').\ncygwin=false\nmsys=false\ndarwin=false\ncase \"`uname`\" in\n CYGWIN* )\n cygwin=true\n ;;\n Darwin* )\n darwin=true\n ;;\n MINGW* )\n msys=true\n ;;\nesac\n\n# For Cygwin, ensure paths are in UNIX format before anything is touched.\nif $cygwin ; then\n [ -n \"$JAVA_HOME\" ] && JAVA_HOME=`cygpath --unix \"$JAVA_HOME\"`\nfi\n\n# Attempt to set APP_HOME\n# Resolve links: $0 may be a link\nPRG=\"$0\"\n# Need this for relative symlinks.\nwhile [ -h \"$PRG\" ] ; do\n ls=`ls -ld \"$PRG\"`\n link=`expr \"$ls\" : '.*-> \\(.*\\)$'`\n if expr \"$link\" : '/.*' > /dev/null; then\n PRG=\"$link\"\n else\n PRG=`dirname \"$PRG\"`\"/$link\"\n fi\ndone\nSAVED=\"`pwd`\"\ncd \"`dirname \\\"$PRG\\\"`/\" >&-\nAPP_HOME=\"`pwd -P`\"\ncd \"$SAVED\" >&-\n\nCLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar\n\n# Determine the Java command to use to start the JVM.\nif [ -n \"$JAVA_HOME\" ] ; then\n if [ -x \"$JAVA_HOME/jre/sh/java\" ] ; then\n # IBM's JDK on AIX uses strange locations for the executables\n JAVACMD=\"$JAVA_HOME/jre/sh/java\"\n else\n JAVACMD=\"$JAVA_HOME/bin/java\"\n fi\n if [ ! -x \"$JAVACMD\" ] ; then\n die \"ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME\n\nPlease set the JAVA_HOME variable in your environment to match the\nlocation of your Java installation.\"\n fi\nelse\n JAVACMD=\"java\"\n which java >/dev/null 2>&1 || die \"ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH.\n\nPlease set the JAVA_HOME variable in your environment to match the\nlocation of your Java installation.\"\nfi\n\n# Increase the maximum file descriptors if we can.\nif [ \"$cygwin\" = \"false\" -a \"$darwin\" = \"false\" ] ; then\n MAX_FD_LIMIT=`ulimit -H -n`\n if [ $? -eq 0 ] ; then\n if [ \"$MAX_FD\" = \"maximum\" -o \"$MAX_FD\" = \"max\" ] ; then\n MAX_FD=\"$MAX_FD_LIMIT\"\n fi\n ulimit -n $MAX_FD\n if [ $? -ne 0 ] ; then\n warn \"Could not set maximum file descriptor limit: $MAX_FD\"\n fi\n else\n warn \"Could not query maximum file descriptor limit: $MAX_FD_LIMIT\"\n fi\nfi\n\n# For Darwin, add options to specify how the application appears in the dock\nif $darwin; then\n GRADLE_OPTS=\"$GRADLE_OPTS \\\"-Xdock:name=$APP_NAME\\\" \\\"-Xdock:icon=$APP_HOME/media/gradle.icns\\\"\"\nfi\n\n# For Cygwin, switch paths to Windows format before running java\nif $cygwin ; then\n APP_HOME=`cygpath --path --mixed \"$APP_HOME\"`\n CLASSPATH=`cygpath --path --mixed \"$CLASSPATH\"`\n\n # We build the pattern for arguments to be converted via cygpath\n ROOTDIRSRAW=`find -L / -maxdepth 1 -mindepth 1 -type d 2>/dev/null`\n SEP=\"\"\n for dir in $ROOTDIRSRAW ; do\n ROOTDIRS=\"$ROOTDIRS$SEP$dir\"\n SEP=\"|\"\n done\n OURCYGPATTERN=\"(^($ROOTDIRS))\"\n # Add a user-defined pattern to the cygpath arguments\n if [ \"$GRADLE_CYGPATTERN\" != \"\" ] ; then\n OURCYGPATTERN=\"$OURCYGPATTERN|($GRADLE_CYGPATTERN)\"\n fi\n # Now convert the arguments - kludge to limit ourselves to /bin/sh\n i=0\n for arg in \"$@\" ; do\n CHECK=`echo \"$arg\"|egrep -c \"$OURCYGPATTERN\" -`\n CHECK2=`echo \"$arg\"|egrep -c \"^-\"` ### Determine if an option\n\n if [ $CHECK -ne 0 ] && [ $CHECK2 -eq 0 ] ; then ### Added a condition\n eval `echo args$i`=`cygpath --path --ignore --mixed \"$arg\"`\n else\n eval `echo args$i`=\"\\\"$arg\\\"\"\n fi\n i=$((i+1))\n done\n case $i in\n (0) set -- ;;\n (1) set -- \"$args0\" ;;\n (2) set -- \"$args0\" \"$args1\" ;;\n (3) set -- \"$args0\" \"$args1\" \"$args2\" ;;\n (4) set -- \"$args0\" \"$args1\" \"$args2\" \"$args3\" ;;\n (5) set -- \"$args0\" \"$args1\" \"$args2\" \"$args3\" \"$args4\" ;;\n (6) set -- \"$args0\" \"$args1\" \"$args2\" \"$args3\" \"$args4\" \"$args5\" ;;\n (7) set -- \"$args0\" \"$args1\" \"$args2\" \"$args3\" \"$args4\" \"$args5\" \"$args6\" ;;\n (8) set -- \"$args0\" \"$args1\" \"$args2\" \"$args3\" \"$args4\" \"$args5\" \"$args6\" \"$args7\" ;;\n (9) set -- \"$args0\" \"$args1\" \"$args2\" \"$args3\" \"$args4\" \"$args5\" \"$args6\" \"$args7\" \"$args8\" ;;\n esac\nfi\n\n# Split up the JVM_OPTS And GRADLE_OPTS values into an array, following the shell quoting and substitution rules\nfunction splitJvmOpts() {\n JVM_OPTS=(\"$@\")\n}\neval splitJvmOpts $DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS\nJVM_OPTS[${#JVM_OPTS[*]}]=\"-Dorg.gradle.appname=$APP_BASE_NAME\"\n\nexec \"$JAVACMD\" \"${JVM_OPTS[@]}\" -classpath \"$CLASSPATH\" org.gradle.wrapper.GradleWrapperMain \"$@\"\n"
},
{
"path": "example/AS/gradlew.bat",
"content": "@if \"%DEBUG%\" == \"\" @echo off\r\n@rem ##########################################################################\r\n@rem\r\n@rem Gradle startup script for Windows\r\n@rem\r\n@rem ##########################################################################\r\n\r\n@rem Set local scope for the variables with windows NT shell\r\nif \"%OS%\"==\"Windows_NT\" setlocal\r\n\r\n@rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script.\r\nset DEFAULT_JVM_OPTS=\r\n\r\nset DIRNAME=%~dp0\r\nif \"%DIRNAME%\" == \"\" set DIRNAME=.\r\nset APP_BASE_NAME=%~n0\r\nset APP_HOME=%DIRNAME%\r\n\r\n@rem Find java.exe\r\nif defined JAVA_HOME goto findJavaFromJavaHome\r\n\r\nset JAVA_EXE=java.exe\r\n%JAVA_EXE% -version >NUL 2>&1\r\nif \"%ERRORLEVEL%\" == \"0\" goto init\r\n\r\necho.\r\necho ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH.\r\necho.\r\necho Please set the JAVA_HOME variable in your environment to match the\r\necho location of your Java installation.\r\n\r\ngoto fail\r\n\r\n:findJavaFromJavaHome\r\nset JAVA_HOME=%JAVA_HOME:\"=%\r\nset JAVA_EXE=%JAVA_HOME%/bin/java.exe\r\n\r\nif exist \"%JAVA_EXE%\" goto init\r\n\r\necho.\r\necho ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME%\r\necho.\r\necho Please set the JAVA_HOME variable in your environment to match the\r\necho location of your Java installation.\r\n\r\ngoto fail\r\n\r\n:init\r\n@rem Get command-line arguments, handling Windowz variants\r\n\r\nif not \"%OS%\" == \"Windows_NT\" goto win9xME_args\r\nif \"%@eval[2+2]\" == \"4\" goto 4NT_args\r\n\r\n:win9xME_args\r\n@rem Slurp the command line arguments.\r\nset CMD_LINE_ARGS=\r\nset _SKIP=2\r\n\r\n:win9xME_args_slurp\r\nif \"x%~1\" == \"x\" goto execute\r\n\r\nset CMD_LINE_ARGS=%*\r\ngoto execute\r\n\r\n:4NT_args\r\n@rem Get arguments from the 4NT Shell from JP Software\r\nset CMD_LINE_ARGS=%$\r\n\r\n:execute\r\n@rem Setup the command line\r\n\r\nset CLASSPATH=%APP_HOME%\\gradle\\wrapper\\gradle-wrapper.jar\r\n\r\n@rem Execute Gradle\r\n\"%JAVA_EXE%\" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% \"-Dorg.gradle.appname=%APP_BASE_NAME%\" -classpath \"%CLASSPATH%\" org.gradle.wrapper.GradleWrapperMain %CMD_LINE_ARGS%\r\n\r\n:end\r\n@rem End local scope for the variables with windows NT shell\r\nif \"%ERRORLEVEL%\"==\"0\" goto mainEnd\r\n\r\n:fail\r\nrem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of\r\nrem the _cmd.exe /c_ return code!\r\nif not \"\" == \"%GRADLE_EXIT_CONSOLE%\" exit 1\r\nexit /b 1\r\n\r\n:mainEnd\r\nif \"%OS%\"==\"Windows_NT\" endlocal\r\n\r\n:omega\r\n"
},
{
"path": "example/AS/settings.gradle",
"content": "include ':app'\n"
},
{
"path": "gnr/.gitignore",
"content": "/app/build/\n/build/\n/import-summary.txt\n.gradle\n/local.properties\n.DS_Store\n\n## Directory-based project format:\n.idea/\n\n## IntelliJ config files\n*.iml\n"
},
{
"path": "gnr/app/build.gradle",
"content": "apply plugin: 'com.android.library'\napply plugin: 'maven'\n\next {\n PUBLISH_GROUP_ID = 'it.necst.grabnrun'\n PUBLISH_ARTIFACT_ID = 'grabnrun'\n PUBLISH_VERSION = '1.0.4'\n}\n\nandroid {\n compileSdkVersion 23\n buildToolsVersion \"23.0.2\"\n\n defaultConfig {\n minSdkVersion 14\n targetSdkVersion 21\n versionCode 5\n versionName \"1.0.4\"\n\n }\n\n buildTypes {\n release {\n minifyEnabled false\n proguardFiles getDefaultProguardFile('proguard-android.txt'), 'proguard-project.txt'\n }\n }\n\n sourceSets {\n\n androidTest {\n java.srcDirs = ['test/java']\n }\n }\n\n // Used to avoid unit tests to fail when encountering a static\n // Android method not mocked.\n // See: http://g.co/androidstudio/not-mocked\n testOptions {\n unitTests.returnDefaultValues = true\n }\n}\n\ndependencies {\n compile 'com.android.support:appcompat-v7:23.1.1'\n compile group: 'com.google.guava', name: 'guava', version: '18.0'\n\n // Unit testing dependencies\n testCompile 'junit:junit:4.12'\n testCompile 'org.mockito:mockito-core:1.10.19'\n testCompile 'org.hamcrest:hamcrest-library:1.1'\n testCompile \"org.robolectric:robolectric:3.0\"\n}\n\ndef groupId = project.PUBLISH_GROUP_ID\ndef artifactId = project.PUBLISH_ARTIFACT_ID\ndef version = project.PUBLISH_VERSION\n\ndef localReleaseDest = \"${buildDir}/release/${version}\"\n\ntask androidJavadocs(type: Javadoc) {\n source = android.sourceSets.main.java.srcDirs\n classpath += project.files(android.getBootClasspath().join(File.pathSeparator))\n}\n\ntask androidJavadocsJar(type: Jar, dependsOn: androidJavadocs) {\n classifier = 'javadoc'\n from androidJavadocs.destinationDir\n}\n\ntask androidSourcesJar(type: Jar) {\n classifier = 'sources'\n from android.sourceSets.main.java.srcDirs\n}\n\nuploadArchives {\n repositories.mavenDeployer {\n pom.groupId = groupId\n pom.artifactId = artifactId\n pom.version = version\n pom.project {\n\n name \"Grab'n Run Library\"\n packaging 'aar'\n description 'A simple and effective Java Library for Android projects to secure dynamic code loading.'\n url 'https://github.com/lukeFalsina/Grab-n-Run'\n\n licenses {\n license {\n name 'The Apache Software License, Version 2.0'\n url 'http://www.apache.org/licenses/LICENSE-2.0.txt'\n distribution 'repo'\n }\n }\n\n developers {\n developer {\n name 'Luca Falsina'\n email 'lfalsina@gmail.com'\n }\n }\n }\n\n repository(url: \"file://${localReleaseDest}\")\n }\n}\n\ntask zipRelease(type: Zip) {\n from localReleaseDest\n destinationDir buildDir\n archiveName \"release-${version}.zip\"\n}\n\ntask generateRelease << {\n println \"Release ${version} can be found at ${localReleaseDest}/\"\n println \"Release ${version} zipped can be found ${buildDir}/release-${version}.zip\"\n}\n\ngenerateRelease.dependsOn(uploadArchives)\ngenerateRelease.dependsOn(zipRelease)\n\nartifacts {\n archives androidSourcesJar\n archives androidJavadocsJar\n}"
},
{
"path": "gnr/app/lint.xml",
"content": "\n\n"
},
{
"path": "gnr/app/proguard-project.txt",
"content": "# To enable ProGuard in your project, edit project.properties\n# to define the proguard.config property as described in that file.\n#\n# Add project specific ProGuard rules here.\n# By default, the flags in this file are appended to flags specified\n# in ${sdk.dir}/tools/proguard/proguard-android.txt\n# You can edit the include path and order by changing the ProGuard\n# include property in project.properties.\n#\n# For more details, see\n# http://developer.android.com/guide/developing/tools/proguard.html\n\n# Add any project specific keep options here:\n-assumenosideeffects class android.util.Log {\n public static boolean isLoggable(java.lang.String, int);\n public static int v(...);\n public static int d(...);\n}\n\n# If your project uses WebView with JS, uncomment the following\n# and specify the fully qualified class name to the JavaScript interface\n# class:\n#-keepclassmembers class fqcn.of.javascript.interface.for.webview {\n# public *;\n#}\n"
},
{
"path": "gnr/app/src/main/AndroidManifest.xml",
"content": "\n\n \n \n \n \n\n"
},
{
"path": "gnr/app/src/main/java/it/necst/grabnrun/CacheLogger.java",
"content": "/*******************************************************************************\n * Copyright 2014 Luca Falsina\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n *******************************************************************************/\npackage it.necst.grabnrun;\n\nimport static com.google.common.base.Preconditions.checkArgument;\nimport static com.google.common.base.Preconditions.checkNotNull;\nimport static com.google.common.base.Preconditions.checkState;\n\nimport android.support.annotation.NonNull;\nimport android.util.Log;\n\nimport com.google.common.annotations.VisibleForTesting;\nimport com.google.common.base.Optional;\n\nimport java.io.File;\nimport java.io.FileNotFoundException;\nimport java.io.IOException;\nimport java.io.PrintWriter;\nimport java.net.MalformedURLException;\nimport java.net.URL;\nimport java.util.HashMap;\nimport java.util.Map;\nimport java.util.Scanner;\n\n/**\n * {@link CacheLogger} is an helper class used by {@link SecureLoaderFactory} to keep lined\n * remote URLs with the corresponding local resources, which have been already cached in the\n * application private folder.\n * \n * It provides methods to look for the associated local file of a remote URL, as well as adding a\n * new reference between a URL, and a local file. For dismissing it, invoke the finalizeLog()\n * method, which saves all the fresh references into an helper file on the device filesystem,\n * in the same private folder.\n * \n * @author Luca Falsina\n */\nfinal class CacheLogger {\n\n private static final String TAG_CACHE_LOGGER = CacheLogger.class.getSimpleName();\n\t\n\t// Constants used for the formatting the helper log file\n\tprivate static final int ELEMENTS_PER_LOG_LINE = 3;\n\tprivate static final int REMOTE_URL_INDEX = 0;\n\tprivate static final int LOCAL_FILE_NAME_INDEX = 1;\n\tprivate static final int CREATION_TIMESTAMP_INDEX = 2;\n\tpublic static final int HOURS_PER_DAY = 24;\n\tpublic static final int MINUTES_PER_HOUR = 60;\n\tpublic static final int SEC_TO_MILLISEC = 1000;\n @VisibleForTesting static final String FIELD_SEPARATOR_FOR_LOG_LINE = \" \";\n @VisibleForTesting static final String TERMINATOR_FOR_LOG_LINE = \";\";\n\n @VisibleForTesting static final String HELPER_FILE_NAME = \"helper.txt\";\n public static final String LINE_SEPARATOR = System.getProperty(\"line.separator\");\n\n private boolean hasBeenAlreadyFinalized;\n private final String cacheDirectoryPath;\n\n private final int daysTillConsideredFresh;\n private final Map remoteURLToLocalFileNameMap;\n\tprivate final Map remoteURLToCreationTimestampMap;\n\n private File helperFile;\n\n\t/**\n\t * This constructor generates a {@link CacheLogger} instance which will\n\t * analyze the helper.txt file in the provided directory and \n\t * create all the references between remote URLs and local cached\n\t * resources.\n\t * \n\t * All of those resources, whose life time is bigger than the one \n\t * stated by the daysTillConsideredFresh parameter, will be \n\t * automatically erased. \n\t * \n\t * @param cacheDirectoryPath\n\t * the path to the directory which contains both the cached local\n\t * resources and the Log helper file.\n\t * @param daysTillConsideredFresh\n\t * the number of days till a resource will be considered fresh and so\n\t * good to be cached.\n * @throws IllegalArgumentException if the number of days is not greater then zero\n\t */\n\tCacheLogger(@NonNull String cacheDirectoryPath, int daysTillConsideredFresh) {\n\t\tthis.cacheDirectoryPath = checkNotNull(\n\t\t\t\tcacheDirectoryPath, \"cacheDirectoryPath was null.\");\n\t\tcheckArgument(\n\t\t\t\tdaysTillConsideredFresh > 0, \"daysTillConsideredFresh must be a positive integer.\");\n this.daysTillConsideredFresh = daysTillConsideredFresh;\n\n\t\tthis.remoteURLToLocalFileNameMap = new HashMap<>();\n\t\tthis.remoteURLToCreationTimestampMap = new HashMap<>();\n\n\t\thasBeenAlreadyFinalized = false;\n\t\t\n\t\t// Check whether the \"helper\" file exists\n\t\t// In this case, populate the map accordingly to it.\n\t\t// Otherwise just skip this step.\n initializeMapsThroughHelperFile();\n\t}\n\n private void initializeMapsThroughHelperFile() {\n helperFile = new File(cacheDirectoryPath, HELPER_FILE_NAME);\n\n if (helperFile.exists()) {\n Scanner helperFileScanner = null;\n\n try {\n helperFileScanner = new Scanner(helperFile)\n .useDelimiter(TERMINATOR_FOR_LOG_LINE + LINE_SEPARATOR);\n\n while (helperFileScanner.hasNext()) {\n parseLineInHelperFile(helperFileScanner.next());\n }\n } catch (FileNotFoundException e) {\n Log.w(TAG_CACHE_LOGGER, \"Issue while opening the helper file\");\n } finally {\n if (helperFileScanner != null) {\n helperFileScanner.close();\n }\n }\n }\n }\n\n private void parseLineInHelperFile(String currentLine) {\n checkNotNull(currentLine, \"The current parsed line was empty.\");\n String[] lineTokens = currentLine.split(FIELD_SEPARATOR_FOR_LOG_LINE);\n\n if (lineTokens.length == ELEMENTS_PER_LOG_LINE) {\n File checkContainerFile = new File(cacheDirectoryPath, lineTokens[LOCAL_FILE_NAME_INDEX]);\n\n if (checkContainerFile.exists()) {\n try {\n // The associated file is present. Now it is necessary\n // to check whether it is fresh enough.\n checkLocalFileFreshness(Long.valueOf(lineTokens[CREATION_TIMESTAMP_INDEX]));\n\n // Cached file is fresh enough and it should be added to the hash maps.\n URL reconstructedRemoteURL = new URL(lineTokens[REMOTE_URL_INDEX]);\n remoteURLToLocalFileNameMap.put(\n reconstructedRemoteURL, lineTokens[LOCAL_FILE_NAME_INDEX]);\n remoteURLToCreationTimestampMap.put(\n reconstructedRemoteURL, Long.valueOf(lineTokens[CREATION_TIMESTAMP_INDEX]));\n } catch (IllegalStateException unused) {\n // File is not fresh anymore so it should be erased..\n if (!checkContainerFile.delete())\n Log.w(TAG_CACHE_LOGGER,\n \"Issue while erasing \" + checkContainerFile.getAbsolutePath());\n } catch (MalformedURLException e) {\n Log.w(\n TAG_CACHE_LOGGER,\n \"The string \" + lineTokens[REMOTE_URL_INDEX] + \" can not be \" +\n \"converted back to a valid remote URL.\");\n }\n }\n }\n }\n\n private void checkLocalFileFreshness(Long fileCreationTimestamp) {\n long currentLivedTime = System.currentTimeMillis() - fileCreationTimestamp;\n long maximumTimeToLive =\n\t\t\t\tdaysTillConsideredFresh * HOURS_PER_DAY * MINUTES_PER_HOUR * SEC_TO_MILLISEC;\n checkState(currentLivedTime < maximumTimeToLive, \"The current local copy is not fresh enough.\");\n }\n\n /**\n\t * This method checks inside the {@link CacheLogger} data structure whether a certain URL of\n * a remote container is associated to one local file stored in the private application folder.\n\t * \n\t * @param remoteURL\n\t * a {@link java.net.URL} pointing to a remote resource.\n\t * @return\n\t * an optional {@link java.lang.String} pointing to the local file associated to the remote URL.\n\t */\n\tfinal @NonNull Optional checkForCachedEntry(@NonNull URL remoteURL) {\n checkNotNull(remoteURL, \"The remote URL must not be null\");\n\t\tif (hasBeenAlreadyFinalized) return Optional.absent();\n\n\t\t// If the remote URL is contained in the map, return the\n\t\t// linked fresh local container\n\t\tif (remoteURLToLocalFileNameMap.containsKey(remoteURL))\n\t\t\tif (new File(cacheDirectoryPath, remoteURLToLocalFileNameMap.get(remoteURL)).exists())\n\t\t\t\treturn Optional.of(remoteURLToLocalFileNameMap.get(remoteURL));\n\t\t\n\t\t// Otherwise no cached entry..\n\t\treturn Optional.absent();\n\t}\n\t\n\t/**\n\t * Every time that a remote resource is successfully imported into the local\n\t * cache folder, this method should be invoked to link the initial remote \n\t * {@link java.net.URL} and the corresponding local file stored on the mobile.\n\t * \n\t * @param remoteURL\n\t * the remote {@link java.net.URL} from which the resource was retrieved.\n\t * @param localFileName\n\t * the name of the file on the mobile where the resource will be stored.\n\t */\n\tfinal void addCachedEntryToLog(@NonNull URL remoteURL, @NonNull String localFileName) {\n checkNotNull(remoteURL, \"The remote URL must not be null\");\n checkNotNull(localFileName, \"The file name must not be null\");\n if (hasBeenAlreadyFinalized) return;\n\n\t\t// Add also a timestamp for verifying the freshness of the new log entry later.\n\t\tremoteURLToCreationTimestampMap.put(remoteURL, System.currentTimeMillis());\n\t\tremoteURLToLocalFileNameMap.put(remoteURL, localFileName);\n\t}\n\n\t/**\n\t * This method must be called before dismissing the {@link CacheLogger} object.\n\t * \n\t * It writes back to the helper file all the saved linkages between remote \n\t * {@link java.net.URL} and local resources imported into the application private\n\t * directory.\n\t */\n\tfinal void finalizeLog() {\n\t\tif (hasBeenAlreadyFinalized) return;\n\t\thasBeenAlreadyFinalized = true;\n\n deletePreviousHelperFile();\n\n if (!remoteURLToLocalFileNameMap.isEmpty()) {\n updateHelperFileWithNewMappings();\n\t\t}\n\t}\n\n private void deletePreviousHelperFile() {\n if (helperFile.exists())\n if (!helperFile.delete())\n Log.w(TAG_CACHE_LOGGER, \"Problem while erasing old copy of helper file!\");\n }\n\n private void updateHelperFileWithNewMappings() {\n PrintWriter mPrintWriter = null;\n\n try {\n mPrintWriter = new PrintWriter(helperFile);\n\n for (URL currentRemoteURL : remoteURLToLocalFileNameMap.keySet()) {\n if (remoteURLToCreationTimestampMap.containsKey(currentRemoteURL)) {\n mPrintWriter.println(getLogLineFromURL(currentRemoteURL));\n }\n }\n\n if (mPrintWriter.checkError()) { throw new IOException(); }\n Log.d(TAG_CACHE_LOGGER, \"Helper file was correctly stored on the device.\");\n } catch (IOException e) {\n Log.w(TAG_CACHE_LOGGER, \"Problem while storing the updated helper file.\");\n } finally {\n if (mPrintWriter != null)\n mPrintWriter.close();\n }\n }\n\n private String getLogLineFromURL(URL currentRemoteURL) {\n return currentRemoteURL.toExternalForm() + FIELD_SEPARATOR_FOR_LOG_LINE\n + remoteURLToLocalFileNameMap.get(currentRemoteURL) + FIELD_SEPARATOR_FOR_LOG_LINE\n + remoteURLToCreationTimestampMap.get(currentRemoteURL) + TERMINATOR_FOR_LOG_LINE;\n }\n}"
},
{
"path": "gnr/app/src/main/java/it/necst/grabnrun/CertificateFileFilterByNameMatch.java",
"content": "/*******************************************************************************\n * Copyright 2014 Luca Falsina\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n *******************************************************************************/\npackage it.necst.grabnrun;\n\nimport static com.google.common.base.Preconditions.checkNotNull;\n\nimport android.support.annotation.NonNull;\n\nimport com.google.common.annotations.VisibleForTesting;\n\n/**\n * CertificateFileFilterByNameMatch checks local files and verifies whether\n * these elements hold the correct extension (.pem), and they match\n * the expected certificate name provided at construction time.\n * \n * @author Luca Falsina\n */\nfinal class CertificateFileFilterByNameMatch extends FileFilterByNameMatch {\n\n @VisibleForTesting final static String PEM_EXTENSION = \".pem\";\n\t\n\t/**\n\t * A constructor for the filter which receives the \n\t * name of the desired certificate as a parameter.\n\t *
\n\t * Do not provide the extension of the certificate\n\t * file but only the name!\n\t * \n\t * @param certificateName\n\t * the file name of the certificate.\n\t */\n\tCertificateFileFilterByNameMatch(@NonNull String certificateName) {\n\t\tsuper(\n checkNotNull(certificateName, \"The input name for the certificate was null\"),\n PEM_EXTENSION);\n\t}\n}\n"
},
{
"path": "gnr/app/src/main/java/it/necst/grabnrun/ContainerSignatureVerifier.java",
"content": "package it.necst.grabnrun;\n\nimport static com.google.common.base.Preconditions.checkArgument;\nimport static com.google.common.base.Preconditions.checkNotNull;\nimport static it.necst.grabnrun.FileHelper.APK_EXTENSION;\nimport static it.necst.grabnrun.FileHelper.JAR_EXTENSION;\nimport static it.necst.grabnrun.FileHelper.extractExtensionFromFilePath;\n\nimport android.content.pm.PackageInfo;\nimport android.content.pm.PackageManager;\nimport android.content.pm.Signature;\nimport android.support.annotation.NonNull;\nimport android.util.Log;\n\nimport com.google.common.base.Optional;\n\nimport java.io.ByteArrayInputStream;\nimport java.io.File;\nimport java.io.IOException;\nimport java.io.InputStream;\nimport java.security.cert.Certificate;\nimport java.security.cert.CertificateException;\nimport java.security.cert.CertificateExpiredException;\nimport java.security.cert.CertificateFactory;\nimport java.security.cert.CertificateNotYetValidException;\nimport java.security.cert.X509Certificate;\nimport java.util.Enumeration;\nimport java.util.Vector;\nimport java.util.jar.JarEntry;\nimport java.util.jar.JarFile;\nimport java.util.jar.Manifest;\n\nclass ContainerSignatureVerifier {\n private static final String TAG_CONTAINER_SIGNATURE_VERIFIER =\n ContainerSignatureVerifier.class.getSimpleName();\n\n private final PackageManager packageManager;\n private final CertificateFactory certificateFactory;\n\n ContainerSignatureVerifier(\n @NonNull PackageManager packageManager,\n @NonNull CertificateFactory certificateFactory) {\n this.packageManager = checkNotNull(packageManager);\n this.certificateFactory = checkNotNull(certificateFactory);\n }\n\n // TODO(falsinal): It may be possible to simplify the logic here by\n // removing the APK branch\n\n // Given the path to a jar/apk container and a valid certificate instance this method returns\n // whether the container is signed properly against the verified certificate.\n boolean verifyContainerSignatureAgainstCertificate(\n @NonNull String containerPath,\n @NonNull X509Certificate trustedCertificate) {\n checkNotNull(containerPath);\n checkArgument(\n !containerPath.isEmpty() && (new File(containerPath).exists()),\n \"The container path must be associated to an existing file\");\n checkNotNull(trustedCertificate);\n\n // Check whether the selected resource is a jar or apk container\n Optional optionalExtension = extractExtensionFromFilePath(containerPath);\n if (!optionalExtension.isPresent()) {\n return false;\n }\n String extension = optionalExtension.get();\n\n boolean signatureCheckIsSuccessful = false;\n\n // Depending on the container extension the process for\n // signature verification changes\n if (extension.equals(APK_EXTENSION)) {\n\n // APK container case:\n // At first look for the certificates used to sign the apk\n // and check whether at least one of them is the verified one..\n\n PackageInfo mPackageInfo =\n packageManager.getPackageArchiveInfo(containerPath, PackageManager.GET_SIGNATURES);\n\n if (mPackageInfo != null) {\n\n // Use PackageManager field to retrieve the certificates used to sign the apk\n Signature[] signatures = mPackageInfo.signatures;\n\n if (signatures != null) {\n for (Signature sign : signatures) {\n if (sign != null) {\n\n X509Certificate certFromSign;\n InputStream inStream = null;\n\n try {\n\n // Recreate the certificate starting from this signature\n inStream = new ByteArrayInputStream(sign.toByteArray());\n certFromSign = (X509Certificate) certificateFactory.generateCertificate(inStream);\n\n // Check that the reconstructed certificate is not expired..\n certFromSign.checkValidity();\n\n // Check whether the reconstructed certificate and the trusted one match\n // Please note that certificates may be self-signed but it's not an issue..\n if (certFromSign.equals(trustedCertificate))\n // This a necessary but not sufficient condition to\n // prove that the apk container has not been repackaged..\n signatureCheckIsSuccessful = true;\n\n } catch (CertificateException e) {\n // If this branch is reached certificateFromSign is not valid..\n } finally {\n if (inStream != null) {\n try {\n inStream.close();\n } catch (IOException e) {\n e.printStackTrace();\n }\n }\n }\n }\n }\n } else {\n Log.i(TAG_CONTAINER_SIGNATURE_VERIFIER, \"An invalid/corrupted signature is associated with the source archive.\");\n }\n } else {\n Log.i(TAG_CONTAINER_SIGNATURE_VERIFIER, \"An invalid/corrupted container was found.\");\n }\n }\n\n // This branch must be taken by all jar containers and by those apk containers\n // whose certificates list contains also the trusted verified certificate.\n if (extension.equals(JAR_EXTENSION) ||\n (extension.equals(APK_EXTENSION) && signatureCheckIsSuccessful)) {\n\n // Verify that each entry of the container has been signed properly\n JarFile containerToVerify = null;\n\n try {\n\n containerToVerify = new JarFile(containerPath);\n // This method will throw an IOException whenever\n // the JAR container was not signed with the trusted certificate\n // N.B. apk are an extension of a jar container..\n verifyJARContainer(containerToVerify, trustedCertificate);\n\n // No exception raised so the signature\n // verification succeeded\n signatureCheckIsSuccessful = true;\n\n } catch (Exception e) {\n // Signature process failed since it triggered\n // an exception (either an IOException or a SecurityException)\n signatureCheckIsSuccessful = false;\n\n } finally {\n if (containerToVerify != null)\n try {\n containerToVerify.close();\n } catch (IOException e) {\n e.printStackTrace();\n }\n\n }\n\n }\n\n return signatureCheckIsSuccessful;\n }\n\n private void verifyJARContainer(\n @NonNull JarFile jarFile,\n @NonNull X509Certificate trustedCertificate) throws IOException {\n\n Vector entriesVec = new Vector<>();\n\n // Ensure the jar file is at least signed.\n Manifest man = jarFile.getManifest();\n if (man == null) {\n Log.i(TAG_CONTAINER_SIGNATURE_VERIFIER, jarFile.getName() + \"is not signed.\");\n throw new SecurityException(\"The container is not signed\");\n }\n\n // Ensure all the entries' signatures verify correctly\n byte[] buffer = new byte[8192];\n Enumeration entries = jarFile.entries();\n\n while (entries.hasMoreElements()) {\n\n // Current entry in the jar container\n JarEntry je = entries.nextElement();\n\n // Skip directories.\n if (je.isDirectory()) continue;\n entriesVec.addElement(je);\n InputStream inStream = jarFile.getInputStream(je);\n\n // Read in each jar entry. A security exception will\n // be thrown if a signature/digest check fails.\n while (inStream.read(buffer, 0, buffer.length) != -1) {\n // Don't care as soon as no exception is raised..\n }\n\n // Close the input stream\n inStream.close();\n }\n\n // Get the list of signed entries from which certificates\n // will be extracted..\n Enumeration signedEntries = entriesVec.elements();\n\n while (signedEntries.hasMoreElements()) {\n\n JarEntry signedEntry = signedEntries.nextElement();\n\n // Every file must be signed except files in META-INF.\n Certificate[] certificates = signedEntry.getCertificates();\n if ((certificates == null) || (certificates.length == 0)) {\n if (!signedEntry.getName().startsWith(\"META-INF\")) {\n Log.i(TAG_CONTAINER_SIGNATURE_VERIFIER, signedEntry.getName() + \" is an unsigned class file\");\n throw new SecurityException(\"The container has unsigned class files.\");\n }\n }\n else {\n // Check whether the file is signed by the expected\n // signer. The jar may be signed by multiple signers.\n // So see if one of the signers is 'trustedCert'.\n boolean signedAsExpected = false;\n\n for (Certificate signerCert : certificates) {\n\n try {\n\n ((X509Certificate) signerCert).checkValidity();\n } catch (CertificateExpiredException\n | CertificateNotYetValidException e) {\n // Usually expired certificate are not such a relevant issue; nevertheless\n // on Android a common practice is using certificates (even self signed) but\n // with at least a long life span and so temporal validity should be enforced..\n Log.i(TAG_CONTAINER_SIGNATURE_VERIFIER, \"One of the certificates used to sign \" + signedEntry.getName() + \" is expired\");\n throw new SecurityException(\"One of the used certificates is expired!\");\n } catch (Exception e) {\n // It was impossible to cast the general certificate into an X.509 one..\n }\n\n if (signerCert.equals(trustedCertificate))\n // The trusted certificate was used to sign this entry\n signedAsExpected = true;\n }\n\n if (!signedAsExpected) {\n Log.i(TAG_CONTAINER_SIGNATURE_VERIFIER, \"The trusted certificate was not used to sign \" + signedEntry.getName());\n throw new SecurityException(\"The provider is not signed by a trusted signer\");\n }\n }\n }\n }\n}\n"
},
{
"path": "gnr/app/src/main/java/it/necst/grabnrun/DexPathStringProcessor.java",
"content": "package it.necst.grabnrun;\n\nimport static com.google.common.base.Preconditions.checkArgument;\nimport static com.google.common.base.Preconditions.checkNotNull;\n\nimport android.support.annotation.NonNull;\n\nimport java.io.File;\nimport java.util.Arrays;\nimport java.util.List;\nimport java.util.ListIterator;\nimport java.util.NoSuchElementException;\nimport java.util.regex.Pattern;\n\nclass DexPathStringProcessor {\n private static final String HTTP_PROTOCOL_STRING = \"http://\";\n private static final String HTTPS_PROTOCOL_STRING = \"https://\";\n private static final String HTTP_PROTOCOL_STRING_WITHOUT_COLON = \"http//\";\n private static final String HTTPS_PROTOCOL_STRING_WITHOUT_COLON = \"https//\";\n\n private final List extractedSingleDexPathStrings;\n private final ListIterator extractedSingleDexPathStringsIterator;\n\n DexPathStringProcessor(@NonNull String fullDexPathString) {\n\n checkNotNull(fullDexPathString, \"The dex path string must not be null\");\n checkArgument(!fullDexPathString.isEmpty(), \"The dex path string must not be empty\");\n\n extractedSingleDexPathStrings = extractSingleDexPathStringsFromFullOne(fullDexPathString);\n\n extractedSingleDexPathStringsIterator = extractedSingleDexPathStrings.listIterator();\n }\n\n private List extractSingleDexPathStringsFromFullOne(String fullDexPathString) {\n // Necessary workaround to avoid remote URL being split in a wrong way..\n String temporaryDexPathCompleteString = fullDexPathString\n .replaceAll(HTTP_PROTOCOL_STRING, HTTP_PROTOCOL_STRING_WITHOUT_COLON)\n .replaceAll(HTTPS_PROTOCOL_STRING, HTTPS_PROTOCOL_STRING_WITHOUT_COLON);\n\n return Arrays.asList(\n temporaryDexPathCompleteString.split(Pattern.quote(File.pathSeparator)));\n }\n\n public boolean hasNextDexPathString() {\n return extractedSingleDexPathStringsIterator.hasNext();\n }\n\n public String nextDexPathString() throws NoSuchElementException {\n String nextDexPathString = extractedSingleDexPathStringsIterator.next();\n\n if (nextDexPathString.startsWith(HTTP_PROTOCOL_STRING_WITHOUT_COLON)) {\n return nextDexPathString.replaceFirst(\n HTTP_PROTOCOL_STRING_WITHOUT_COLON, HTTP_PROTOCOL_STRING);\n }\n\n if (nextDexPathString.startsWith(HTTPS_PROTOCOL_STRING_WITHOUT_COLON)) {\n return nextDexPathString.replaceFirst(\n HTTPS_PROTOCOL_STRING_WITHOUT_COLON, HTTPS_PROTOCOL_STRING);\n }\n\n return nextDexPathString;\n }\n}\n"
},
{
"path": "gnr/app/src/main/java/it/necst/grabnrun/FileDownloader.java",
"content": "/*******************************************************************************\n * Copyright 2014 Luca Falsina\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n *******************************************************************************/\npackage it.necst.grabnrun;\n\nimport static android.content.Context.*;\nimport static com.google.common.base.Preconditions.checkArgument;\nimport static com.google.common.base.Preconditions.checkNotNull;\n\nimport android.content.Context;\nimport android.net.ConnectivityManager;\nimport android.net.NetworkInfo;\nimport android.support.annotation.NonNull;\nimport android.util.Log;\n\nimport com.google.common.base.Optional;\nimport com.google.common.collect.ImmutableMap;\n\nimport java.io.BufferedInputStream;\nimport java.io.File;\nimport java.io.FileOutputStream;\nimport java.io.IOException;\nimport java.io.InputStream;\nimport java.io.OutputStream;\nimport java.net.HttpURLConnection;\nimport java.net.URL;\n\nimport javax.net.ssl.HttpsURLConnection;\n\n/**\n * {@link FileDownloader} retrieves remote resources like containers or certificates,\n * which are then used for dynamic class loading or signature verification.\n * \n * @author Luca Falsina\n */\nfinal class FileDownloader {\n\n // Unique identifier used for Log entries\n\tprivate static final String TAG_FILE_DOWNLOADER = FileDownloader.class.getSimpleName();\n\n public static final ImmutableMap SUPPORTED_MIME_TYPE_TO_FILE_EXTENSION_MAP =\n ImmutableMap.of(\n \"application/vnd.android.package-archive\", \".apk\",\n \"application/java-archive\", \".jar\",\n \"application/octet-stream\", \".pem\");\n\n private static final String HTTPS_PROTOCOL_AS_STRING = \"https\";\n private static final String HTTP_PROTOCOL_AS_STRING = \"http\";\n\n // Objects used to check availability of Internet connection\n\tprivate ConnectivityManager mConnectivityManager;\n\n\t// private NetworkInfo activeNetworkInfo;\n\tprivate Optional retrievedFileMimeType;\n\n\t/**\n\t * This constructor initializes a {@link FileDownloader} for retrieving remote resources.\n\t *\n\t * @param parentContext\n\t * a {@link Context} coming from the parent {@link android.app.Activity} and used to\n\t * retrieve the state of the connectivity service on the mobile.\n\t */\n\tFileDownloader(@NonNull Context parentContext) {\n\n checkNotNull(parentContext, \"The parent context must be not null\");\n\t\tmConnectivityManager = (ConnectivityManager) parentContext.getSystemService(CONNECTIVITY_SERVICE);\n\t\tretrievedFileMimeType = Optional.absent();\n\t}\n\n\t/**\n\t * This method takes a remote {@link URL}, downloads the corresponding resource,\n * and stores it on the mobile at the location provided by the second parameter.\n * The download task is carried on a separate thread.\n\t * \n\t * It is also possible to specify whether redirect link should be followed for one hop,\n * or simply ignored.\n\t * \n\t * @param remoteURL\n\t * the {@link URL} where the remote resource is located.\n\t * @param localURI\n\t * the local path where the final resource will be stored in case of a successful download.\n\t * @param isRedirectAllowed\n\t * a {@code boolean} stating whether {@link FileDownloader} should follow redirect link\n * for one hop, or not.\n\t * @return\n\t * a boolean indicating whether the download was successful.\n\t */\n\tfinal boolean downloadRemoteResource(\n @NonNull final URL remoteURL,\n @NonNull final String localURI,\n final boolean isRedirectAllowed) {\n\n checkNotNull(\n remoteURL,\n \"The URL at which the remote resource is located must not be null\");\n checkNotNull(\n localURI,\n \"The URI at which storing the file pointed by the remote URL must not be null\");\n checkArgument(\n remoteURL.getProtocol().equalsIgnoreCase(HTTPS_PROTOCOL_AS_STRING) ||\n remoteURL.getProtocol().equalsIgnoreCase(HTTP_PROTOCOL_AS_STRING),\n \"The FileDownloader supports only HTTP, and HTTPS protocols\");\n\n\t\t// Check whether Internet access is granted..\n\t\tNetworkInfo activeNetworkInfo = mConnectivityManager.getActiveNetworkInfo();\n\t\tif (activeNetworkInfo == null || !activeNetworkInfo.isConnected()) {\n\t\t\t\n\t\t\tLog.w(TAG_FILE_DOWNLOADER, \"No connectivity is available. Download failed!\");\n\t\t\treturn false;\n\t\t}\n\t\t\n \t// Data are retrieved in a separate thread.\n \tThread dataThread = new Thread() {\n \t\t\n \t\t@Override\n \t\tpublic void run() {\n \t\t\t\n \t\t\tHttpURLConnection urlConnection = null;\n \t\t\tInputStream inputStream = null;\n \t\t\tOutputStream outputStream = null;\n \t\t\t\n \t\t\ttry {\n\n \t\t\t\turlConnection = openAndReturnConnectionAssociatedToURL(remoteURL);\n\n \t\t\t\t// Fix timeout for the connection..\n \t\t\t\turlConnection.setConnectTimeout(1000);\n \t\t\t\t\n \t\t\t\tLog.d(TAG_FILE_DOWNLOADER, \"A connection was set up: \" + remoteURL.toString());\n \t\t\t\t\n \t\t\t\t// When it is allowed, check if this URL asks for a redirect..\n \t\t\t\tif (isRedirectAllowed) {\n \t\t\t\t\t\n \t\t\t\t\t// Normally 301, 302, or 303 is redirect..\n \t\t\t\t\tint connection_status = urlConnection.getResponseCode();\n\n \t\t\t\t\tif (connection_status != HttpURLConnection.HTTP_OK) {\n \t\t\t\t\t\tif (connection_status == HttpURLConnection.HTTP_MOVED_TEMP\n \t\t\t\t\t\t\t|| connection_status == HttpURLConnection.HTTP_MOVED_PERM\n \t\t\t\t\t\t\t\t|| connection_status == HttpURLConnection.HTTP_SEE_OTHER) {\n urlConnection = followURLRedirection(urlConnection);\n }\n }\n \t\t\t\t}\n\n if (urlConnection.getResponseCode() == HttpURLConnection.HTTP_OK) {\n\n retrievedFileMimeType = Optional.fromNullable(urlConnection.getContentType());\n\n inputStream = new BufferedInputStream(urlConnection.getInputStream());\n outputStream = new FileOutputStream(localURI);\n\n copyReadContentFromInputStreamToOutputStream(inputStream, outputStream);\n }\n\n \t\t\t} catch (IOException e) {\n \t\t\t\t// No file was found at the remote URL!\n \t\t\t\t// Nothing should have been written at the local path \n \t\t\t\t// and so false should be returned.\n \t\t\t} finally {\n closeConnectionAndStreams(urlConnection, inputStream, outputStream);\n \t\t\t}\n \t\t}\n\n private HttpURLConnection followURLRedirection(HttpURLConnection urlConnection)\n throws IOException {\n // Get redirect URL from \"location\" header field\n URL redirectedURL = new URL(urlConnection.getHeaderField(\"Location\"));\n\n // Get the cookie for login if provided\n String cookies = urlConnection.getHeaderField(\"Set-Cookie\");\n\n // Open the new redirected connection again..\n urlConnection = openAndReturnConnectionAssociatedToURL(redirectedURL);\n\n urlConnection.setConnectTimeout(1000);\n urlConnection.setRequestProperty(\"Cookie\", cookies);\n\n Log.d(TAG_FILE_DOWNLOADER, \"The connection was redirected to: \" + redirectedURL.toString());\n return urlConnection;\n }\n\n private HttpURLConnection openAndReturnConnectionAssociatedToURL(URL remoteURL)\n throws IOException {\n if (remoteURL.getProtocol().equals(HTTPS_PROTOCOL_AS_STRING)) {\n return (HttpsURLConnection) remoteURL.openConnection();\n } else {\n return (HttpURLConnection) remoteURL.openConnection();\n }\n }\n\n private void copyReadContentFromInputStreamToOutputStream(\n InputStream inputStream,\n OutputStream outputStream) throws IOException {\n int read;\n byte[] bytes = new byte[1024];\n\n while ((read = inputStream.read(bytes)) > 0) {\n outputStream.write(bytes, 0, read);\n }\n\n Log.i(TAG_FILE_DOWNLOADER, \"Download complete. Container Path: \" + localURI);\n }\n\n private void closeConnectionAndStreams(\n HttpURLConnection urlConnection,\n InputStream inputStream,\n OutputStream outputStream) {\n Log.d(TAG_FILE_DOWNLOADER, \"Clean up all pending streams..\");\n if (urlConnection != null)\n urlConnection.disconnect();\n\n if (inputStream != null) {\n try {\n inputStream.close();\n } catch (IOException e) {\n e.printStackTrace();\n }\n }\n\n if (outputStream != null) {\n try {\n // outputStream.flush();\n outputStream.close();\n } catch (IOException e) {\n e.printStackTrace();\n }\n }\n }\n };\n \t\n \tdataThread.start();\n \t\n \ttry {\n\t\t\tdataThread.join();\n\t\t} catch (InterruptedException e) {\n\t\t\te.printStackTrace();\n\t\t\treturn false;\n\t\t}\n\n // Download is successful when a not empty file was retrieved, and stored.\n File fileAtLocalURI = new File(localURI);\n return fileAtLocalURI.exists() && fileAtLocalURI.length() > 0;\n\t}\n\t\n\t/**\n\t * This method analyzes the MIME-type of the last downloaded file\n\t * and returns the related extension.\n\t * \n\t * @return\n\t * an optional with either the extension of the last downloaded file,\n * or absent if MIME-type is unknown\n * (see {@link #SUPPORTED_MIME_TYPE_TO_FILE_EXTENSION_MAP}).\n\t */\n\tOptional getDownloadedFileExtension() {\n\n if (retrievedFileMimeType.isPresent() &&\n SUPPORTED_MIME_TYPE_TO_FILE_EXTENSION_MAP.containsKey(retrievedFileMimeType.get())) {\n return Optional.of(\n SUPPORTED_MIME_TYPE_TO_FILE_EXTENSION_MAP.get(retrievedFileMimeType.get()));\n }\n\n return Optional.absent();\n\t}\n}"
},
{
"path": "gnr/app/src/main/java/it/necst/grabnrun/FileFilterByNameMatch.java",
"content": "/*******************************************************************************\n * Copyright 2014 Luca Falsina\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n *******************************************************************************/\npackage it.necst.grabnrun;\n\nimport static com.google.common.base.Preconditions.checkArgument;\nimport static com.google.common.base.Preconditions.checkNotNull;\n\nimport android.support.annotation.NonNull;\n\nimport java.io.File;\nimport java.io.FileFilter;\nimport java.util.Locale;\n\n/**\n * A simple implementation of the {@link FileFilter} interface that will accept\n * only those files whose name and extension match the required one\n * stated during object creation.\n * \n * @author Luca Falsina\n */\nclass FileFilterByNameMatch implements FileFilter {\n private static final String DOT_FOLLOWED_BY_THREE_OR_FOUR_CHARACTERS = \".[a-z]{3,4}\";\n private final String name;\n\tprivate final String extension;\n\n\t/**\n\t * Instantiate a {@link FileFilterByNameMatch} that will accept\n\t * files matching the provided name and extension.\n\t * \n\t * @param name\n\t * the file name.\n\t * @param extension\n\t * the file extension in the format \".????\" (e.g., \".txt\", or \".DOCX\").\n\t */\n\tFileFilterByNameMatch(@NonNull String name, @NonNull String extension) {\n\t\tthis.name = checkNotNull(name, \"The name of the target file was null\");\n\t\tcheckArgument(!name.isEmpty(), \"The file name must not be empty\");\n\t\tthis.extension = checkNotNull(extension, \"The extension of the target file was null\");\n checkArgument(\n extension.toLowerCase(Locale.US).matches(DOT_FOLLOWED_BY_THREE_OR_FOUR_CHARACTERS),\n \"The extension must be one dot, followed by three, \" +\n \"or fours alphabetical characters\");\n\t}\n\t\n\t@Override\n\tpublic final boolean accept(@NonNull File file) {\n\t\tcheckNotNull(file, \"The input file descriptor was null\");\n\t\tif (file.isDirectory())\n\t\t\treturn false;\n\t\telse if (file.isFile()) {\n\t\t\tif (file.getName().equals(name + extension))\n\t\t \t return true;\n\t\t}\n\t\t\t\t\n\t\t// Used for any other kind of weird stuff reaching the filter..\n\t\treturn false;\n\t}\n}\n"
},
{
"path": "gnr/app/src/main/java/it/necst/grabnrun/FileHelper.java",
"content": "package it.necst.grabnrun;\n\nimport static com.google.common.base.Preconditions.checkArgument;\nimport static com.google.common.base.Preconditions.checkNotNull;\n\nimport android.support.annotation.NonNull;\n\nimport com.google.common.base.Optional;\n\nimport java.io.File;\n\npublic class FileHelper {\n public static final String DOT_SEPARATOR = \".\";\n public static final String APK_EXTENSION = DOT_SEPARATOR + \"apk\";\n public static final String JAR_EXTENSION = DOT_SEPARATOR + \"jar\";\n\n public static String extractFilePathWithoutExtensionFromFilePath(@NonNull String filePath) {\n checkPreconditionsOnFilePath(filePath);\n\n return extractSubstringWithoutExtensionFromString(filePath);\n }\n\n public static String extractFileNameWithoutExtensionFromFilePath(@NonNull String filePath) {\n checkPreconditionsOnFilePath(filePath);\n\n return extractSubstringWithoutExtensionFromString(extractFileNameFromFilePath(filePath));\n }\n\n private static String extractSubstringWithoutExtensionFromString(@NonNull String candidateString) {\n int firstCharacterOfAnExtensionIndex = candidateString.lastIndexOf(DOT_SEPARATOR);\n\n if (firstCharacterOfAnExtensionIndex > 0) {\n return candidateString.substring(0, firstCharacterOfAnExtensionIndex);\n } else {\n return candidateString;\n }\n }\n\n public static String extractFileNameFromFilePath(@NonNull String filePath) {\n checkPreconditionsOnFilePath(filePath);\n\n int lastOccurrenceOfFileSeparatorIndex = filePath.lastIndexOf(File.separator);\n\n if (lastOccurrenceOfFileSeparatorIndex == -1)\n return filePath;\n\n return filePath.substring(lastOccurrenceOfFileSeparatorIndex + 1);\n }\n\n public static Optional extractExtensionFromFilePath(@NonNull String filePath) {\n checkPreconditionsOnFilePath(filePath);\n\n int initialCharacterOfAnExtensionIndex = filePath.lastIndexOf(DOT_SEPARATOR);\n\n if (initialCharacterOfAnExtensionIndex == -1)\n return Optional.absent();\n\n return Optional.of(filePath.substring(initialCharacterOfAnExtensionIndex));\n }\n\n public static boolean endsWithJarOrApkExtension(@NonNull String filePath) {\n checkPreconditionsOnFilePath(filePath);\n\n int initialCharacterOfAnExtensionIndex = filePath.lastIndexOf(DOT_SEPARATOR);\n\n if (initialCharacterOfAnExtensionIndex == -1)\n return false;\n\n String fileExtension = filePath.substring(initialCharacterOfAnExtensionIndex);\n\n return fileExtension.equalsIgnoreCase(APK_EXTENSION) ||\n fileExtension.equalsIgnoreCase(JAR_EXTENSION);\n }\n\n private static void checkPreconditionsOnFilePath(@NonNull String filePath) {\n checkNotNull(filePath, \"The path of the input file must not be null\");\n checkArgument(!filePath.isEmpty(), \"The path of the input file must not be empty\");\n }\n}\n"
},
{
"path": "gnr/app/src/main/java/it/necst/grabnrun/PackageNameHelper.java",
"content": "package it.necst.grabnrun;\n\nimport static com.google.common.base.Preconditions.checkArgument;\nimport static com.google.common.base.Preconditions.checkNotNull;\n\nimport android.support.annotation.NonNull;\n\nimport com.google.common.annotations.VisibleForTesting;\n\nimport java.net.MalformedURLException;\nimport java.net.URL;\n\npublic class PackageNameHelper {\n @VisibleForTesting static final String HTTPS_PROTOCOL_AS_STRING = \"https\";\n @VisibleForTesting static final String DEFAULT_CERTIFICATE_FILE_NAME = \"/certificate.pem\";\n\n private static final String DOT_AS_REGULAR_EXPRESSION = \"\\\\.\";\n private static final int MINIMUM_NUMBER_OF_FIELDS_IN_A_PACKAGE_NAME = 2;\n private static final int FIRST_LEVEL_DOMAIN_INDEX = 0;\n private static final int SECOND_LEVEL_DOMAIN_INDEX = 1;\n\n public static boolean isAValidPackageName(@NonNull String candidatePackageName) {\n checkNotNull(candidatePackageName, \"The candidate package name must not be null\");\n\n if (candidatePackageName.isEmpty()) return false;\n if (candidatePackageName.endsWith(\".\")) return false;\n\n String[] packageNameFields = candidatePackageName.split(DOT_AS_REGULAR_EXPRESSION);\n if (packageNameFields.length < MINIMUM_NUMBER_OF_FIELDS_IN_A_PACKAGE_NAME) {\n return false;\n }\n\n for (String packageNameField : packageNameFields) {\n if (packageNameField.isEmpty()) {\n return false;\n }\n }\n\n return true;\n }\n\n public static URL revertPackageNameToURL(@NonNull String candidatePackageName)\n throws MalformedURLException {\n checkArgument(\n isAValidPackageName(candidatePackageName),\n \"A valid package name must be provided\");\n\n // If a package name is valid, it has at least two fields.\n String[] packageNameFields = candidatePackageName.split(DOT_AS_REGULAR_EXPRESSION);\n StringBuilder urlAsStringBuilder = new StringBuilder(HTTPS_PROTOCOL_AS_STRING + \"://\")\n .append(packageNameFields[SECOND_LEVEL_DOMAIN_INDEX])\n .append(\".\")\n .append(packageNameFields[FIRST_LEVEL_DOMAIN_INDEX]);\n\n for (int fieldIndex = 2; fieldIndex < packageNameFields.length; fieldIndex++) {\n urlAsStringBuilder.append(\"/\")\n .append(packageNameFields[fieldIndex]);\n }\n\n urlAsStringBuilder.append(DEFAULT_CERTIFICATE_FILE_NAME);\n\n return new URL(urlAsStringBuilder.toString());\n }\n}\n"
},
{
"path": "gnr/app/src/main/java/it/necst/grabnrun/PackageNameTrie.java",
"content": "/*******************************************************************************\n * Copyright 2014 Luca Falsina\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n *******************************************************************************/\npackage it.necst.grabnrun;\n\nimport android.util.Log;\n\nimport com.google.common.base.Optional;\n\nimport java.util.HashMap;\nimport java.util.Map;\n\n/**\n * {@link PackageNameTrie} is an helper class used to keep a hierarchy among package names and certificates.\n * \n * In particular when a certificate is associated to a package name, all the descendant package names of the \n * previous one should be able to verify the signature of their classes with the same certificate.\n *
\n * Example:
\n * Package name \"com.example\" has certificate \"CertA\" associated to it.
\n * Package names \"com.example.polimi\" and \"com.example.application.system\" can use \"CertA\" as well.
\n * Package names \"com\" and \"it.example\" cannot use \"CertA\" for their classes verification.\n * \n * @author Luca Falsina\n */\nfinal class PackageNameTrie {\n\n\t// Unique identifier used for Log entries\n\tprivate static final String TAG_PACKAGE_NAME_TRIE = PackageNameTrie.class.getSimpleName();\n\t\n\t// Map which links the package name string to the associated node\n\tprivate Map packageNameToHasCertificateMap;\n\t\n\t/**\n\t * Basic constructor that initializes internal data structures.\n\t */\n\tPackageNameTrie() {\n\t\t\n\t\tpackageNameToHasCertificateMap = new HashMap<>();\n\t\t// Add also the root entry and suppose that it has \n\t\t// always an associated certificate.\n\t\tpackageNameToHasCertificateMap.put(\"\", true);\n\t}\n\t\n\t/**\n\t * This method generates an internal hierarchy representation of a provided package name.\n\t * In particular it will generate all not empty prefixes of the input package name.\n\t * \n\t * Example execution:
\n\t * Input: \"com.example.polimi.application\"
\n\t * Internal Hierarchy generates the strings:
\n\t * \"com.example.polimi.application\", \"com.example.polimi\", \"com.example\" and \"com\".\n\t * \n\t * @param packageName\n\t * the package name for which the hierarchical structure of package name prefix will be generated.\n\t */\n\tfinal void generateEntriesForPackageName(String packageName) {\n\t\t\n\t\tString currentPackageName = packageName;\n\t\tboolean hasFoundAnAlreadyInsertedPackageName = false;\n\t\t\n\t\twhile (!hasFoundAnAlreadyInsertedPackageName) {\n\t\t\t\n\t\t\tif (packageNameToHasCertificateMap.containsKey(currentPackageName)) {\n\t\t\t\t\n\t\t\t\t// In this case this entry has been already inserted in the map\n\t\t\t\t// so the process of package name generation stops here.\n\t\t\t\thasFoundAnAlreadyInsertedPackageName = true;\n\t\t\t\t\n\t\t\t} else {\n\t\t\t\t\n\t\t\t\t// Need to insert this entry by populating the map accordingly\n\t\t\t\tpackageNameToHasCertificateMap.put(currentPackageName, false);\n\t\t\t\t\n\t\t\t\tLog.d(TAG_PACKAGE_NAME_TRIE, \"Inserted a new entry for \" + currentPackageName);\n\t\t\t\t\n\t\t\t\t// Now remove the last part of the package name and then\n\t\t\t\t// repeat the previous step recursively.\n\t\t\t\tcurrentPackageName = getUpALevel(currentPackageName);\n\t\t\t}\n\t\t}\n\t}\n\t\n\t// Remove the last part of the package name.\n\t// If nothing more is left after this removal, return an empty string.\n\tprivate String getUpALevel(String packageName) {\n\t\t\n\t\tint lastPointIndex = packageName.lastIndexOf('.');\n\t\t\n\t\tif (lastPointIndex > 0)\n\t\t\treturn packageName.substring(0, lastPointIndex);\n\t\telse\n\t\t\treturn \"\";\n\t}\n\t\n\t/**\n\t * This method simply marks the input package name as one having an\n\t * associated certificate that may be used for verifying a container signature.\n *
\n * If the input package name has not been generated yet using\n * {@link #generateEntriesForPackageName}, this method has no effect.\n\t * \n\t * @param packageName\n\t * the package name to mark as having a certificate associated to it.\n\t */\n\tfinal void setPackageNameHasAssociatedCertificate(String packageName) {\n\t\t\n\t\tif (packageNameToHasCertificateMap.containsKey(packageName)) {\n\t\t\t\n\t\t\tpackageNameToHasCertificateMap.put(packageName, true);\n\t\t\tLog.d(TAG_PACKAGE_NAME_TRIE, packageName + \" has a certificate associated now.\");\n\t\t}\n\t}\n\t\n\t/**\n\t * This method is used to query {@link PackageNameTrie} to obtain the name of the\n\t * closest prefix of the input package name, which has been linked to a certificate.\n\t * \n\t * @param packageName\n\t * the package name for which a certificate for signature verification must be found\n\t * @return\n\t * an optional containing either the longest prefix of the input package name\n * (possibly the one provided as input), which has an associated certificate\n * for signature verification, or an absent value if no certificate\n\t * is associated to any of the package names in its hierarchy.\n\t */\n\tfinal Optional getPackageNameWithAssociatedCertificate(String packageName) {\n\t\t\n\t\tString currentPackageName = packageName;\n\t\t\n\t\tif (!packageNameToHasCertificateMap.containsKey(currentPackageName))\n\t\t\treturn Optional.absent();\n\t\t\n\t\twhile (!packageNameToHasCertificateMap.get(currentPackageName)) {\n currentPackageName = getUpALevel(currentPackageName);\n\n if (currentPackageName.equals(\"\")) {\n Log.d(TAG_PACKAGE_NAME_TRIE, \"There is no prefix associated with a certificate \"\n + \"for package name \" + packageName);\n\n return Optional.absent();\n }\n }\n\n\t\tLog.d(TAG_PACKAGE_NAME_TRIE, currentPackageName + \" is the closest package name to the target \"\n\t\t+ packageName + \" with an associated certificate for verification.\");\n\t\t\n\t\treturn Optional.of(currentPackageName);\n\t}\n}\n"
},
{
"path": "gnr/app/src/main/java/it/necst/grabnrun/SecureDexClassLoader.java",
"content": "/*******************************************************************************\n * Copyright 2014 Luca Falsina\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n *******************************************************************************/\npackage it.necst.grabnrun;\n\nimport static android.content.Context.MODE_PRIVATE;\nimport static com.google.common.base.Preconditions.checkArgument;\nimport static com.google.common.base.Preconditions.checkNotNull;\nimport static dalvik.system.DexFile.loadDex;\nimport static it.necst.grabnrun.FileHelper.APK_EXTENSION;\nimport static it.necst.grabnrun.FileHelper.JAR_EXTENSION;\nimport static it.necst.grabnrun.FileHelper.extractExtensionFromFilePath;\nimport static it.necst.grabnrun.FileHelper.extractFilePathWithoutExtensionFromFilePath;\nimport static it.necst.grabnrun.SecureLoaderFactory.IMPORTED_CONTAINERS_PRIVATE_DIRECTORY_NAME;\nimport static it.necst.grabnrun.SecureLoaderFactory.X_509_CERTIFICATE;\nimport static java.util.Collections.synchronizedMap;\nimport static java.util.Collections.synchronizedSet;\n\nimport android.content.Context;\nimport android.support.annotation.NonNull;\nimport android.util.Log;\n\nimport com.google.common.annotations.VisibleForTesting;\nimport com.google.common.base.Optional;\nimport com.google.common.collect.ImmutableMap;\nimport com.google.common.collect.ImmutableSet;\n\nimport java.io.File;\nimport java.io.FileInputStream;\nimport java.io.FileNotFoundException;\nimport java.io.IOException;\nimport java.io.InputStream;\nimport java.net.URL;\nimport java.security.cert.CertificateException;\nimport java.security.cert.CertificateExpiredException;\nimport java.security.cert.CertificateFactory;\nimport java.security.cert.CertificateNotYetValidException;\nimport java.security.cert.X509Certificate;\nimport java.util.ArrayList;\nimport java.util.Arrays;\nimport java.util.Collections;\nimport java.util.Enumeration;\nimport java.util.HashMap;\nimport java.util.HashSet;\nimport java.util.Iterator;\nimport java.util.LinkedHashMap;\nimport java.util.List;\nimport java.util.Map;\nimport java.util.Set;\nimport java.util.concurrent.ExecutionException;\nimport java.util.concurrent.ExecutorService;\nimport java.util.concurrent.Executors;\nimport java.util.concurrent.Future;\nimport java.util.concurrent.TimeUnit;\nimport java.util.jar.JarFile;\n\nimport javax.security.auth.x500.X500Principal;\n\nimport dalvik.system.DexClassLoader;\nimport dalvik.system.DexFile;\n\n/**\n * A class that provides an extension of default {@link dalvik.system.DexClassLoader} \n * provided by the Android system and it is used to load classes \n * from jar and apk container files including a classes.dex entry in a secure way.\n * \n * In order to instantiate this class a call to \n * {@link SecureLoaderFactory#createDexClassLoader(String, String, ClassLoader, Map)} \n * must be performed.\n *
\n * {@link SecureDexClassLoader} ensures integrity of loaded external remote \n * classes by comparing them with the developer certificate, which\n * is retrieved either by a provided associative map between package names \n * and certificate remote URL or by simply reverting the \n * first two words of the package name of the loaded class and then \n * by adding each following word in the same order and separated by \n * a slash \"/\".\n *
\n * Package name reversion example:
\n * Class name = it.necst.grabnrun.example.TestClassImpl
\n * Constructed URL = https://necst.it/grabnrun/example
\n * Final certificate location = https://necst.it/grabnrun/example/certificate.pem
\n *
\n * A request is pointed to the final certificate location and if \n * the file is found, it is imported in the local private \n * application directory.\n *
\n * Please note that in the current implementation certificates obtained \n * by reverting package name must have been saved at the described \n * location as \"certificate.pem\". Moreover all the certificates must \n * fit requirements of a standard {@link java.security.cert.X509Certificate}, \n * they must be valid in the current time frame and of course they must have been \n * used to sign the jar or apk, which contains the classes to be loaded.\n *
\n * If any of these previous requirements is violated no class is loaded \n * and this class returns without executing any class loading operation.\n * \n * @author Luca Falsina\n */\npublic class SecureDexClassLoader {\n\n // Unique identifier used for Log entries\n\tprivate static final String TAG_SECURE_DEX_CLASS_LOADER = SecureDexClassLoader.class.getSimpleName();\n\n // Final name of the folder user to store certificates for the verification\n @VisibleForTesting static final String IMPORTED_CERTIFICATE_PRIVATE_DIRECTORY_NAME = \"valid_certs\";\n\n // Constant used to tune concurrent vs standard verification in Eager mode.\n private static final int MINIMUM_NUMBER_OF_CONTAINERS_FOR_CONCURRENT_VERIFICATION = 2;\n\n // Sets the Time Unit to milliseconds.\n private static final TimeUnit KEEP_ALIVE_TIME_UNIT = TimeUnit.MILLISECONDS;\n\n // Relevant file entries, and file extensions\n private static final String CLASSES_DEX_ENTRY_NAME = \"classes.dex\";\n private static final String ODEX_EXTENSION = \".odex\";\n private static final String PEM_EXTENSION = \".pem\";\n\n private File certificateFolder, containersFolder;\n private FileDownloader fileDownloader;\n private CertificateFactory certificateFactory;\n private final ContainerSignatureVerifier containerSignatureVerifier;\n\n\t// The internal DexClassLoader used to load classes that passes all the checks..\n\tprivate final DexClassLoader dexClassLoader;\n\n private final Map packageNameToContainerPathMap;\n private final ImmutableMap packageNameToCertificateMap;\n\n\t// Used to verify if a call to the wiped out method has been performed.\n\tprivate boolean hasBeenWipedOut;\n\n\t// Variable used to understand whether SecureDexClassLoader will immediately verify all\n\t// the incoming containers or if it will just verify each one of those lazily when the\n\t// loadClass() method will be invoked.\n\tprivate boolean performLazyEvaluation;\n\t\n\t// Helper cache set used in lazy mode in order to check only once that the container\n\t// associated to a package name is valid (This works fine since each used container is\n\t// previously imported in an application-private folder).\n\tprivate final Set lazyAlreadyVerifiedPackageNameSet;\n\t\n\t// An helper data structure used to connect each package name of a possible target class\n\t// to the certificate of the closest package name. The closeness relation here is considered\n\t// in terms of hierarchy on the package name.\n\tprivate PackageNameTrie packageNameTrie;\n\t\n\t@VisibleForTesting SecureDexClassLoader(\n @NonNull String dexPath,\n @NonNull DexClassLoader dexClassLoader,\n @NonNull Context parentContext,\n @NonNull Map sanitizePackageNameToCertificateMap,\n\t\t\tboolean performLazyEvaluation,\n @NonNull ContainerSignatureVerifier containerSignatureVerifier,\n @NonNull CertificateFactory certificateFactory) {\n\t\t\n\t\tthis.dexClassLoader = dexClassLoader;\n this.performLazyEvaluation = performLazyEvaluation;\n this.containerSignatureVerifier = containerSignatureVerifier;\n this.certificateFactory = certificateFactory;\n\t\t\n\t\tcertificateFolder =\n\t\t\t\tparentContext.getDir(IMPORTED_CERTIFICATE_PRIVATE_DIRECTORY_NAME, MODE_PRIVATE);\n\t\tcontainersFolder =\n\t\t\t\tparentContext.getDir(IMPORTED_CONTAINERS_PRIVATE_DIRECTORY_NAME, MODE_PRIVATE);\n\n\t\tfileDownloader = new FileDownloader(parentContext);\n\t\t\n\t\thasBeenWipedOut = false;\n\t\t\n\t\tlazyAlreadyVerifiedPackageNameSet = synchronizedSet(new HashSet());\n\n packageNameToContainerPathMap =\n synchronizedMap(generatePackageNameToContainerPathMap(dexPath));\n\n packageNameToCertificateMap = ImmutableMap.copyOf(sanitizePackageNameToCertificateMap);\n\n packageNameTrie = initializePackageNameTrieBasedOnContainerAndCertificateMaps(\n packageNameToContainerPathMap, sanitizePackageNameToCertificateMap);\n\n if (!performLazyEvaluation) {\n // If an eager approach is chosen, all containers have to be verified now,\n // and invalid ones must be removed.\n performEagerEvaluationOnAllContainers();\n }\n\t}\n\n private static Map generatePackageNameToContainerPathMap(\n @NonNull String dexPath) {\n Map packageNameToContainerPathMap = new LinkedHashMap<>();\n\n // Analyze each path in dexPath, find its package name and\n // populate packageNameToContainerPathMap accordingly\n DexPathStringProcessor dexPathStringProcessor = new DexPathStringProcessor(dexPath);\n\n while (dexPathStringProcessor.hasNextDexPathString()) {\n String currentPath = dexPathStringProcessor.nextDexPathString();\n\n // In jar containers you may have classes from different package names, while in apk\n // there is usually only one of those.\n Optional> optionalPackageNameSet =\n getPackageNamesFromContainerPath(currentPath);\n\n if (optionalPackageNameSet.isPresent() && !optionalPackageNameSet.get().isEmpty()) {\n\n for (String packageName : optionalPackageNameSet.get()) {\n\n // This is a valid entry so it must be added to packageNameToContainerPathMap\n String previousPath = packageNameToContainerPathMap.put(packageName, currentPath);\n\n // If previous path is not null, it means that one of the previous analyzed\n // path had the same package name (this is a possibility for JAR containers..)\n if (previousPath != null) {\n\n // TODO Up to now only a warning message is registered in the logs and the most\n // fresh of the two references is stored.\n Log.w(TAG_SECURE_DEX_CLASS_LOADER, \"Package Name \" + packageName + \" is not unique!\\n Previous path: \"\n + previousPath + \";\\n New path: \" + currentPath + \";\");\n }\n }\n }\n }\n\n return packageNameToContainerPathMap;\n }\n\n private static Optional> getPackageNamesFromContainerPath(\n\t\t\t@NonNull String containerPath) {\n\n\t\t// Filter empty or missing path input\n\t\tif (containerPath.isEmpty() ||\n !(new File(containerPath).exists())) {\n return Optional.absent();\n }\n\n\t\t// JAR container case (APK are simply an extension of jar files):\n\t\t// 1. Open the jar file.\n\t\t// 2. Look for the \"classes.dex\" entry inside the container.\n\t\t// 3. If it is present, retrieve package names by parsing it as a DexFile.\n\n\t\tboolean isAValidJar = false;\n\t\tJarFile containerJar = null;\n\n\t\ttry {\n\n\t\t\t// Open the jar container..\n\t\t\tcontainerJar = new JarFile(containerPath);\n\n\t\t\t// Look for the \"classes.dex\" entry inside the container.\n\t\t\tif (containerJar.getJarEntry(CLASSES_DEX_ENTRY_NAME) != null)\n\t\t\t\tisAValidJar = true;\n\n\t\t} catch (IOException e) {\n\t\t\treturn Optional.absent();\n\t\t} finally {\n\t\t\tif (containerJar != null)\n\t\t\t\ttry {\n\t\t\t\t\tcontainerJar.close();\n\t\t\t\t} catch (IOException e) {\n\t\t\t\t\te.printStackTrace();\n\t\t\t\t}\n\t\t}\n\n\t\tif (isAValidJar) {\n\n\t\t\t// Use a DexFile object to parse the classes inside of the jar container and retrieve package names..\n\t\t\tDexFile dexFile;\n\n\t\t\t// Since in a jar there may be different package names for each class\n\t\t\t// but at the same time I want to keep just one record for each package\n\t\t\t// name, a set data structure fits well while processing.\n\t\t\tImmutableSet.Builder packageNameSetBuilder = ImmutableSet.builder();\n\n\t\t\ttry {\n\n\t\t\t\t// Temporary file location for the loaded classes inside of the jar container\n\t\t\t\tString outputDexTempPath =\n\t\t\t\t\t\textractFilePathWithoutExtensionFromFilePath(containerPath) + ODEX_EXTENSION;\n\n\t\t\t\t// Load the dex classes inside the temporary file.\n\t\t\t\tdexFile = loadDex(containerPath, outputDexTempPath, 0);\n\n\t\t\t\tEnumeration dexEntries = dexFile.entries();\n\n\t\t\t\twhile (dexEntries.hasMoreElements()) {\n\n\t\t\t\t\t// Full class name, used to extract a valid package name.\n\t\t\t\t\tString fullClassName = dexEntries.nextElement();\n\t\t\t\t\t//Log.i(TAG_SECURE_DEX_CLASS_LOADER, fullClassName);\n\n\t\t\t\t\t// Cancel white spaces before processing the full class name..\n\t\t\t\t\t// It may happen to find them while parsing class names..\n\t\t\t\t\twhile (fullClassName.startsWith(\" \"))\n\t\t\t\t\t\tfullClassName = fullClassName.substring(1, fullClassName.length());\n\n\t\t\t\t\tint lastIndexPackageName = fullClassName.lastIndexOf(\".\");\n\n\t\t\t\t\tif (lastIndexPackageName != -1) {\n\n\t\t\t\t\t\tString packageName = fullClassName.substring(0, lastIndexPackageName);\n\t\t\t\t\t\tpackageNameSetBuilder.add(packageName);\n\t\t\t\t\t}\n\n\t\t\t\t}\n\n\t\t\t\t// Finally erase the .odex file since it's not necessary anymore..\n\t\t\t\tnew File(outputDexTempPath).delete();\n\n\t\t\t} catch (IOException e) {\n\t\t\t\t// Problem parsing the attached classes.dex so no valid package name\n\t\t\t\treturn Optional.absent();\n\t\t\t}\n\n\t\t\treturn Optional.of(packageNameSetBuilder.build());\n\t\t}\n\n\t\t// If classes.dex is not present in the jar, the jar container is not valid\n\t\treturn Optional.absent();\n\t}\n\n private static PackageNameTrie initializePackageNameTrieBasedOnContainerAndCertificateMaps(\n @NonNull Map packageNameToContainerPathMap,\n @NonNull Map packageNameToCertificateMap) {\n PackageNameTrie packageNameTrie = new PackageNameTrie();\n\n for (String packageNameIdentifyingAContainer : packageNameToContainerPathMap.keySet()) {\n packageNameTrie.generateEntriesForPackageName(packageNameIdentifyingAContainer);\n }\n\n for (String packageNameWithACertificate : packageNameToCertificateMap.keySet()) {\n packageNameTrie.setPackageNameHasAssociatedCertificate(packageNameWithACertificate);\n }\n\n return packageNameTrie;\n }\n\n private void performEagerEvaluationOnAllContainers() {\n // Get the distinct set of containers path..\n Set containersToVerifySet = new HashSet<>(packageNameToContainerPathMap.values());\n\n // Check how many containers need to be verified..\n if (containersToVerifySet.size() < MINIMUM_NUMBER_OF_CONTAINERS_FOR_CONCURRENT_VERIFICATION) {\n\n // Choose standard single thread verification.\n verifyAllContainersSignature();\n } else {\n\n // Perform a concurrent container verification.\n verifyAllContainersSignatureConcurrently(containersToVerifySet);\n }\n }\n\n\t// This method is invoked only in the case of an eager evaluation.\n\t// It will check that all the provided containers successfully\n\t// execute the signature verification step against the certificate associated\n\t// to those. Containers which fail the test will be removed.\n\tprivate void verifyAllContainersSignature() {\n\t\t\n\t\t// This map is used to check whether one container has been already verified and the\n\t\t// result of the signature verification process.\n\t\tMap alreadyCheckedContainerMap = new HashMap<>();\n\t\t\n\t\t// Analyze all the package names which are linked to a container.\n\t\tIterator packageNamesIterator = packageNameToContainerPathMap.keySet().iterator();\n\t\t\n\t\twhile (packageNamesIterator.hasNext()) {\n\t\t\t\n\t\t\tString currentPackageName = packageNamesIterator.next();\n\t\t\tString containerPath = packageNameToContainerPathMap.get(currentPackageName);\n\t\t\t\n\t\t\t// At first check whether the signature verification on this container has been already performed\n\t\t\tif (alreadyCheckedContainerMap.containsKey(containerPath)) {\n\t\t\t\t\n\t\t\t\t// In this case depending on the previous verification result\n\t\t\t\t// decide whether this package name should be removed or not\n\t\t\t\tif (!alreadyCheckedContainerMap.get(containerPath))\n\t\t\t\t\tpackageNamesIterator.remove();\n\t\t\t\t\n\t\t\t} else {\n\t\t\t\t\n\t\t\t\t// A complete signature verification on the container must be performed and \n\t\t\t\t// depending on the final result the alreadyCheckedContainerMap will be updated.\n\t\t\t\t\n\t\t\t\t// At first find the package name which is closest in hierarchy to the target one\n\t\t\t\t// and has an associated URL for a certificate.\n\t\t\t\tOptional optionalRootPackageNameWithCertificate =\n\t\t\t\t\t\tpackageNameTrie.getPackageNameWithAssociatedCertificate(currentPackageName);\n\t\t\t\t\n\t\t\t\tX509Certificate verifiedCertificate = null;\n\t\t\t\t\n\t\t\t\t// Check that such a package name exists and, in this case, try to import the certificate.\n\t\t\t\tif (optionalRootPackageNameWithCertificate.isPresent()) {\n\t\t\t\t\t\n\t\t\t\t\t// Try to find and import the certificate used to check the signature of .apk or .jar container\n\t\t\t\t\tverifiedCertificate = importCertificateFromPackageName(\n optionalRootPackageNameWithCertificate.get());\n\t\t\t\t}\n\t\t\t\t\n\t\t\t\t// Relevant only if a verified certificate object is found.\n\t\t\t\tboolean signatureCheckIsSuccessful = true;\n\t\t\t\t\n\t\t\t\tif (verifiedCertificate != null) {\n\t\t\t\t\t\n\t\t\t\t\t// We were able to get a valid certificate either directly from the local cache directory or after having \n\t\t\t\t\t// downloaded it from the web securely.\n\t\t\t\t\t// Now it's time to check whether this certificate was used to sign the class to be loaded.\n\t\t\t\t\t\n\t\t\t\t\tsignatureCheckIsSuccessful =\n containerSignatureVerifier.verifyContainerSignatureAgainstCertificate(\n containerPath, verifiedCertificate);\n\t\t\t\t\t\n\t\t\t\t\t// Signature verification result..\n\t\t\t\t\tif (signatureCheckIsSuccessful) {\n\t\t\t\t\t\t\n\t\t\t\t\t\t// This container is valid so all of those package names which load\n\t\t\t\t\t\t// classes from it should be successful when loadClass() is called.\n\t\t\t\t\t\talreadyCheckedContainerMap.put(containerPath, true);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\t\n\t\t\t\tif ((verifiedCertificate == null) || ((verifiedCertificate != null) && (signatureCheckIsSuccessful == false))) {\n\t\t\t\t\t\n\t\t\t\t\t// In this case the map must be updated stating that this container has been\n\t\t\t\t\t// already checked and it fails the signature verification.\n\t\t\t\t\talreadyCheckedContainerMap.put(containerPath, false);\n\t\t\t\t\t\n\t\t\t\t\t// Then the container should be erased.\n\t\t\t\t\tFile containerToRemove = new File(containerPath);\n\t\t\t\t\tif (!containerToRemove.delete())\n\t\t\t\t\t\tLog.w(TAG_SECURE_DEX_CLASS_LOADER, \"It was impossible to delete \" + containerPath);\n\t\t\t\t\t\n\t\t\t\t\t// Finally this package name should be removed from the map of those\n\t\t\t\t\t// which are allowed to load classes.\n\t\t\t\t\tpackageNamesIterator.remove();\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\t\n\t}\n\t\n\t// This method is invoked only in the case of an eager evaluation.\n\t// It will check that all the provided containers successfully\n\t// execute the signature verification step against the certificate associated\n\t// to those. Containers which fail the test will be removed.\n\tprivate void verifyAllContainersSignatureConcurrently(Set containersPathToVerifySet) {\n\t\t\n\t\t\n\t\t// Initialize helper map which links a container to the certificate to validate it..\n\t\tMap containerPathToRootPackageNameMap = new LinkedHashMap<>();\n\t\t\n\t\t// Analyze all the package names which are linked to a container.\n\t\tIterator packageNamesIterator = packageNameToContainerPathMap.keySet().iterator();\n\t\t\t\t\n\t\t// Scan all package names and find a suitable root package name \n\t\t// with an associated certificate to validate each container.\n\t\twhile (packageNamesIterator.hasNext()) {\n\t\t\t\n\t\t\tString currentPackageName = packageNamesIterator.next();\n\t\t\t\n\t\t\t// At first find the package name which is closest in hierarchy to the target one\n\t\t\t// and has an associated URL for a certificate.\n\t\t\tOptional optionalRootPackageNameWithCertificate =\n packageNameTrie.getPackageNameWithAssociatedCertificate(currentPackageName);\n\t\t\t\n\t\t\tif (optionalRootPackageNameWithCertificate.isPresent()) {\n\t\t\t\t\n\t\t\t\t// Insert a valid entry into the container to certificate Map\n\t\t\t\tcontainerPathToRootPackageNameMap.put(packageNameToContainerPathMap.get(\n currentPackageName), optionalRootPackageNameWithCertificate.get());\n\t\t\t}\n\t\t}\n\t\t\n\t\t// Initialize the set of successfully verified containers\n\t\tSet successVerifiedContainerPathSet = synchronizedSet(new HashSet());\n\t\t\n\t\tif (!containerPathToRootPackageNameMap.isEmpty()) {\n\t\t\t\n\t\t\t// Initialize the thread pool executor with number of thread equals to the\n\t\t\t// number of containers to verify..\n\t\t\tExecutorService threadSignatureVerificationPool = Executors.newFixedThreadPool(containerPathToRootPackageNameMap.size());\t\t\t\n\t\t\tList> futureTaskList = new ArrayList<>();\n\t\t\t\n\t\t\tIterator containerPathIterator = containerPathToRootPackageNameMap.keySet().iterator();\n\t\t\t\n\t\t\twhile (containerPathIterator.hasNext()) {\n\t\t\t\t\n\t\t\t\tString currentContainerPath = containerPathIterator.next();\n\t\t\t\t\n\t\t\t\t// Submit a new signature verification thread on a container and store a \n\t\t\t\t// reference in the future objects list.\n\t\t\t\tFuture futureTask = threadSignatureVerificationPool.submit(\n new SignatureVerificationTask(\n currentContainerPath,\n containerPathToRootPackageNameMap.get(currentContainerPath),\n successVerifiedContainerPathSet));\n\t\t\t\tfutureTaskList.add(futureTask);\n\t\t\t}\n\t\t\t\n\t\t\t// Stop accepting new tasks for the current threadSignatureVerificationPool\n\t\t\tthreadSignatureVerificationPool.shutdown();\n\t\t\t\n\t\t\tfor (Future futureTask : futureTaskList) {\n\t\t\t\t\n\t\t\t\ttry {\n\t\t\t\t\t\n\t\t\t\t\t// Wait till the current task for signature verification is finished..\n\t\t\t\t\tfutureTask.get();\n\t\t\t\t\t\n\t\t\t\t} catch (InterruptedException | ExecutionException e) {\n\t\t\t\t\t\n\t\t\t\t\t// Issue while executing the verification on a thread\n\t\t\t\t\tLog.w(TAG_SECURE_DEX_CLASS_LOADER, \"One of the thread failed during signature verification because of \" + e.getCause().toString());\n\t\t\t\t}\n\t\t\t}\n\t\t\t\n\t\t\ttry {\n\t\t\t\t\n\t\t\t\t// Join all the threads here..\n\t\t\t\tthreadSignatureVerificationPool.awaitTermination(MINIMUM_NUMBER_OF_CONTAINERS_FOR_CONCURRENT_VERIFICATION, KEEP_ALIVE_TIME_UNIT);\n\t\t\t} catch (InterruptedException e) {\n\t\t\t\t\n\t\t\t\t// One or more of the thread were still busy.. This should not happen..\n\t\t\t\tLog.w(TAG_SECURE_DEX_CLASS_LOADER, \"At least one thread for signature verification was still busy and so it was interrupted\");\n\t\t\t}\n\t\t}\n\t\t\n\t\t// Now all the package names are scanned again and removed from the packageNameToContainerPathMap \n\t\t// if their container is not one of the valid ones..\n\t\tIterator packageNamesAfterVerificationIterator = packageNameToContainerPathMap.keySet().iterator();\n\t\t\n\t\twhile (packageNamesAfterVerificationIterator.hasNext()) {\n\t\t\t\n\t\t\tString currentPackageName = packageNamesAfterVerificationIterator.next();\n\t\t\t\n\t\t\t// Verify that at least one of the prefix of the current package name was designated \n\t\t\t// for loading its classes.\n\t\t\tOptional optionalRootPackageNameAllowedForLoading =\n packageNameTrie.getPackageNameWithAssociatedCertificate(currentPackageName);\n\t\t\t\n\t\t\tif (!optionalRootPackageNameAllowedForLoading.isPresent() ||\n !successVerifiedContainerPathSet.contains(packageNameToContainerPathMap.get(currentPackageName))) {\n\t\t\t\t\n\t\t\t\t// The container linked to this package name did not succeed in the verification process.\n\t\t\t\t// No class with this package name can be loaded..\n\t\t\t\tpackageNamesAfterVerificationIterator.remove();\n\t\t\t}\n\t\t\t\t\n\t\t}\n\t\t\n\t\t// In the end all the containers that failed the verification are deleted..\n\t\tIterator containersPathToVerifyIterator = containersPathToVerifySet.iterator();\n\t\t\n\t\twhile (containersPathToVerifyIterator.hasNext()) {\n\t\t\t\n\t\t\tString currentContainerPath = containersPathToVerifyIterator.next();\n\t\t\t\n\t\t\tif (!successVerifiedContainerPathSet.contains(currentContainerPath)) {\n\t\t\t\t\n\t\t\t\t// This container did not overcome successfully the signature verification\n\t\t\t\t// so it should be deleted from the cached container directory.\n\t\t\t\tif (!(new File(currentContainerPath).delete()))\n\t\t\t\t\t\tLog.w(TAG_SECURE_DEX_CLASS_LOADER, \"Issue while deleting conainer located at \" + currentContainerPath);\n\t\t\t}\n\t\t}\n\t}\n\t\n\tclass SignatureVerificationTask implements Runnable {\n\n\t\t// Location of the container to verify.\n\t\tprivate String containerPath;\n\t\t// Package name associated with a certificate.\n\t\tprivate String rootPackageNameWithCertificate;\n\t\t// Concurrent set of containers that has been successfully verified.\n\t\tprivate final Set successVerifiedContainerSet;\n\t\t\n\t\tpublic SignatureVerificationTask(String containerPath, String rootPackageNameWithCertificate, Set successVerifiedContainerSet) {\n\t\t\t\n\t\t\t// Simply copy all the incoming parameters..\n\t\t\tthis.containerPath = containerPath;\n\t\t\tthis.rootPackageNameWithCertificate = rootPackageNameWithCertificate;\n\t\t\tthis.successVerifiedContainerSet = successVerifiedContainerSet;\n\t\t}\n\t\t\n\t\t@Override\n\t\tpublic void run() {\n\t\t\t\n\t\t\t// Moves the current Thread into the background\n\t android.os.Process.setThreadPriority(android.os.Process.THREAD_PRIORITY_DEFAULT);\n\t\t\t\n\t\t\t// This runnable class performs a full signature verification on the \n\t\t\t// associated container\n\t\t\t\n\t\t\t// Try to find and import the certificate used to check the signature of .apk or .jar container\n\t\t\tX509Certificate verifiedCertificate = importCertificateFromPackageName(rootPackageNameWithCertificate);\n\t\t\t\n\t\t\tif (verifiedCertificate != null) {\n\t\t\t\t\n\t\t\t\t// We were able to get a valid certificate either directly from the local cache directory or after having \n\t\t\t\t// downloaded it from the web securely.\n\t\t\t\t// Now it's time to check whether this certificate was used to sign the class to be loaded.\n\t\t\t\t\n\t\t\t\tboolean signatureCheckIsSuccessful =\n containerSignatureVerifier.verifyContainerSignatureAgainstCertificate(\n containerPath, verifiedCertificate);\n\t\t\t\t\n\t\t\t\t// Signature verification result..\n\t\t\t\tif (signatureCheckIsSuccessful) {\n\t\t\t\t\n\t\t\t\t\t// If the signature verification on the container succeeds, insert this container path\n\t\t\t\t\t// into the set of those containers which successfully pass the signature verification process.\n\t\t\t\t\tsynchronized (successVerifiedContainerSet) {\n\t\t\t\t\t\n\t\t\t\t\t\tsuccessVerifiedContainerSet.add(containerPath);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\t\n\t}\n\n\t/* (non-Javadoc)\n\t * @see java.lang.ClassLoader#loadClass(java.lang.String)\n\t */\n\t/**\n\t * @see java.lang.ClassLoader#loadClass(java.lang.String)\n\t * @param className\n\t * the full class name to load. It must fit the form \"package name + . + class name\".\n\t * A valid full class name is for example \"it.polimi.myapplication.classA\"; while \"classA\" is not\n\t * enough since it misses the package name and so {@link SecureDexClassLoader} will not find any\n\t * class to load.\n\t * @return\n\t * Either a class that needs to be casted at runtime accordingly to className if the verification\n\t * process succeeds or a {@code null} pointer in case that at least one of the security\n\t * constraints for secure dynamic class loading is violated.\n\t * @throws ClassNotFoundException\n\t * this exception is raised whenever no security constraint is violated but still the target class is\n\t * not found in any of the available containers used to instantiate this {@link SecureDexClassLoader} object.\n\t */\n\tpublic Class loadClass(@NonNull String className) throws ClassNotFoundException {\n\t\t\n checkNotNull(className, \"The name of the class to load must be not null\");\n checkArgument(!className.isEmpty(), \"The name of the class to load must be not empty\");\n\n\t\t// Cached data have been wiped out so some of the required\n\t\t// resources may have been erased..\n\t\tif (hasBeenWipedOut) return null;\n\t\t\n\t\t// At first the name of the certificate possibly stored \n\t\t// in the application private directory is generated\n\t\t// from the package name.\n\t\tString packageName = className.substring(0, className.lastIndexOf('.'));\n\t\t\n\t\t// Retrieve the path of the container from package name.\n\t\t// If there is not such a path, then no class can be loaded.\n\t\tString containerPath;\n\t\t\n\t\tsynchronized (packageNameToContainerPathMap) {\n\t\t\t\n\t\t\tcontainerPath = packageNameToContainerPathMap.get(packageName);\n\t\t}\n\t\t\n\t\tif (containerPath == null) return null;\n\t\t\n\t\tif (performLazyEvaluation) {\n\t\t\t\n\t\t\t// If SecureDexClassLoader is running in LAZY mode, now it is time \n\t\t\t// to verify the signature of the container associated with the class to load..\n\t\t\tboolean alreadyVerifiedPackageName;\n\t\t\t\n\t\t\t// Force synchronization on this check on the set..\n\t\t\tsynchronized (lazyAlreadyVerifiedPackageNameSet) {\n\t\t\t\n\t\t\t\t// At first check whether this package name has been already verified..\n\t\t\t\talreadyVerifiedPackageName = lazyAlreadyVerifiedPackageNameSet.contains(packageName);\n\t\t\t}\n\t\t\t\n\t\t\tif (alreadyVerifiedPackageName) {\n\n\t\t\t\t// Even if the container associated to this package name may have been verified correctly,\n\t\t\t\t// it is necessary to verify that the user also wants to dynamically load classes from this package name.\n\t\t\t\tOptional optionalRootPackageNameWithCertificate =\n packageNameTrie.getPackageNameWithAssociatedCertificate(packageName);\n\t\t\t\t\n\t\t\t\tif (optionalRootPackageNameWithCertificate.isPresent()) {\n\t\t\t\t\t\n\t\t\t\t\t// The container associated to this package name has been already verified once so classes\n\t\t\t\t\t// belonging to this package name can be immediately loaded.\n\t\t\t\t\treturn dexClassLoader.loadClass(className);\n\t\t\t\t}\n\t\t\t}\n\t\t\telse {\n\t\t\t\t\n\t\t\t\t// This branch represents those classes, whose package name and related container has not been analyzed yet..\n\t\t\t\t\n\t\t\t\t// At first find the package name which is closest in hierarchy to the target one\n\t\t\t\t// and has an associated URL for a certificate.\n\t\t\t\tOptional optionalRootPackageNameWithCertificate =\n packageNameTrie.getPackageNameWithAssociatedCertificate(packageName);\n\t\t\t\t\n\t\t\t\tX509Certificate verifiedCertificate = null;\n\t\t\t\t\n\t\t\t\t// Check that such a package name exists and, in this case, try to import the certificate.\n\t\t\t\tif (optionalRootPackageNameWithCertificate.isPresent()) {\n\t\t\t\t\t\n\t\t\t\t\t// Try to find and import the certificate used to check the signature of .apk or .jar container\n\t\t\t\t\tverifiedCertificate = importCertificateFromPackageName(\n optionalRootPackageNameWithCertificate.get());\n\t\t\t\t}\n\t\t\t\t\n\t\t\t\tif (verifiedCertificate != null) {\n\t\t\t\t\t\n\t\t\t\t\t// We were able to get a valid certificate either directly from the local cache directory or after having \n\t\t\t\t\t// downloaded it from the web securely.\n\t\t\t\t\t// Now it's time to check whether this certificate was used to sign the class to be loaded.\n\t\t\t\t\t\n\t\t\t\t\tboolean signatureCheckIsSuccessful =\n containerSignatureVerifier.verifyContainerSignatureAgainstCertificate(\n containerPath, verifiedCertificate);\n\t\t\t\t\t\n\t\t\t\t\t// Signature verification result..\n\t\t\t\t\tif (signatureCheckIsSuccessful) {\n\t\t\t\t\t\t\n\t\t\t\t\t\t// The signature of the related .apk or .jar container\n\t\t\t\t\t\t// was successfully verified against the valid certificate.\n\t\t\t\t\t\t// Integrity was granted and the class can be loaded.\n\t\t\t\t\t\t// Before doing so this package name is stored into the set of \n\t\t\t\t\t\t// those which have been already successfully verified.\n\t\t\t\t\t\t// lazyAlreadyVerifiedPackageNameSet.add(packageName);\n\t\t\t\t\t\t\n\t\t\t\t\t\t// Look for all the package names linked to the same container.\n\t\t\t\t\t\t// Since the verification steps is performed on the whole container, \n\t\t\t\t\t\t// all the package names linked to it will automatically succeed on the\n\t\t\t\t\t\t// signature verification and so they need to be stored into the set of \n\t\t\t\t\t\t// those package names which have been already successfully verified..\n\t\t\t\t\t\t\n\t\t\t\t\t\tsynchronized (lazyAlreadyVerifiedPackageNameSet) {\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tIterator packageNamesIterator = packageNameToContainerPathMap.keySet().iterator();\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\twhile (packageNamesIterator.hasNext()) {\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\tString currentPackageName = packageNamesIterator.next();\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\tif (packageNameToContainerPathMap.get(currentPackageName).equals(containerPath)) {\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t// This collection won't be modified if it already contains the current analyzed package name..\n\t\t\t\t\t\t\t\t\tlazyAlreadyVerifiedPackageNameSet.add(currentPackageName);\n\t\t\t\t\t\t\t\t}\t\t\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\treturn dexClassLoader.loadClass(className);\n\t\t\t\t\t}\n\t\t\t\t\t\n\t\t\t\t\t// The signature of the .apk or .jar container was not valid when compared against the selected certificate.\n\t\t\t\t\t// No class loading should be allowed and the container should be removed as well.\n\t\t\t\t\tFile containerToRemove = new File(containerPath);\n\t\t\t\t\tif (!containerToRemove.delete())\n\t\t\t\t\t\tLog.i(TAG_SECURE_DEX_CLASS_LOADER, \"It was impossible to delete \" + containerPath);\n\t\t\t\t\t\n\t\t\t\t\t// packageNameToContainerPathMap.remove(packageName);\n\t\t\t\t\t// Remove from the associative map all of those package names which are linked to this container.\n\t\t\t\t\t// In fact since this container fails the verification steps, all the classes inside of it won't be loaded.\n\t\t\t\t\tsynchronized (packageNameToContainerPathMap) {\n\t\t\t\t\t\n\t\t\t\t\t\tIterator packageNamesIterator = packageNameToContainerPathMap.keySet().iterator();\n\t\t\t\t\t\t\n\t\t\t\t\t\twhile (packageNamesIterator.hasNext()) {\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tString currentPackageName = packageNamesIterator.next();\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tif (packageNameToContainerPathMap.get(currentPackageName).equals(containerPath))\n\t\t\t\t\t\t\t\tpackageNamesIterator.remove();\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\treturn null;\n\t\t\t\t}\n\t\t\t\t\n\t\t\t\t// Either download procedure fails and the required certificate has not been cached locally or\n\t\t\t\t// a package name with no certificate associated to its hierarchy was provided.\n\t\t\t\t// No class should be loaded since its signature can't be verified..\n\t\t\t\t// But on the other hand this do not imply that the container is necessarily malicious.\n\t\t\t\treturn null;\n\t\t\t}\n\t\t\t\n\t\t}\n\n\t\t// If SecureDexClassLoader is running in EAGER mode, all the required checks\n\t\t// on the containers signatures have been already performed so we can simply \n\t\t// invoke the super method loadClass() of DexClassLoader.\n\t\treturn dexClassLoader.loadClass(className);\n\t}\n\n\t// Given a package name, at first try to locate the associated certificate from the cached\n\t// certificate directory. If this check fails, try to download and store on the device the \n\t// certificate provided by the developer. If one of the two ways is successful return \n\t// a certificate instance.\n\tprivate X509Certificate importCertificateFromPackageName(String packageName) {\n\t\t\n\t\t//Trace.beginSection(\"Import Certificate\");\n\t\t// Log.i(\"Profile\",\"[Start]\tImport Certificate: \" + System.currentTimeMillis() + \" ms.\");\t\t\n\t\t\n\t\t// At first check if the correct certificate has been \n\t\t// already imported in the application-private certificate directory.\n\t\tX509Certificate verifiedCertificate = importCertificateFromAppPrivateDir(packageName);\n\t\t\t\t\n\t\tif (verifiedCertificate == null) {\n\t\t\t\t\t\n\t\t\t// No matching certificate or an expired one was found \n\t\t\t// locally and so it's necessary to download the \n\t\t\t// certificate through an Https request.\n\t\t\t//Trace.beginSection(\"Download Certificate\");\n\t\t\t// Log.i(\"Profile\",\"[Start]\tDownload Certificate: \" + System.currentTimeMillis() + \" ms.\");\n\t\t\tboolean isCertificateDownloadSuccessful = downloadCertificateRemotelyViaHttps(packageName);\n\t\t\t// Log.i(\"Profile\",\"[End]\tDownload Certificate: \" + System.currentTimeMillis() + \" ms.\");\n\t\t\t//Trace.endSection(); // end of \"Download Certificate\" section\n\t\t\t\t\t\n\t\t\tif (isCertificateDownloadSuccessful) {\n\t\t\t\t\t\t\n\t\t\t\t// Download procedure works fine and the new \n\t\t\t\t// certificate should now be in the local folder.\n\t\t\t\t// So let's try to retrieve it once again..\n\t\t\t\tverifiedCertificate = importCertificateFromAppPrivateDir(packageName);\n\t\t\t}\n\t\t}\n\t\t\n\t\t// Log.i(\"Profile\",\"[End]\tImport Certificate: \" + System.currentTimeMillis() + \" ms.\");\n\t\t//Trace.endSection(); // end of \"Import Certificate\" section\n\t\t\n\t\treturn verifiedCertificate;\n\t}\n\n\tprivate X509Certificate importCertificateFromAppPrivateDir(String packageName) {\n\t\t\n\t\t// The procedure looks for the correct certificate and \n\t\t// if a match is found, it will import it and return it.\n\t\tFile[] certMatchingFiles = certificateFolder.listFiles(new CertificateFileFilterByNameMatch(packageName));\n\t\t\n\t\tX509Certificate verifiedCertificate = null;\n\t\t\t\t\n\t\tif (certMatchingFiles != null && certMatchingFiles.length != 0) {\n\t\t\t\t\t\n\t\t\t// Import the first (and only) matching certificate from file..\n\t\t\tInputStream inStream = null;\n\t\t\t\n\t\t\ttry {\n\t\t\t\t\t\n\t\t\t\t// Since certificate files has unique package names as their own\n\t\t\t\t// name, either no one or exactly one matching certificate file will\n\t\t\t\t// be found.\n\t\t\t\tinStream = new FileInputStream(certMatchingFiles[0]);\n\t\t\t //CertificateFactory cf = CertificateFactory.getInstance(\"X.509\");\n\t\t\t verifiedCertificate = (X509Certificate) certificateFactory.generateCertificate(inStream);\n\t\t\t\t\t \n\t\t\t} catch (FileNotFoundException | CertificateException e) {\n\t\t\t\te.printStackTrace();\n\t\t\t} finally {\n\t\t\t if (inStream != null) {\n\t\t\t try {\n\t\t\t\t\t\tinStream.close();\n\t\t\t\t\t} catch (IOException e) {\n\t\t\t\t\t\te.printStackTrace();\n\t\t\t\t\t}\n\t\t\t }\n\t\t\t}\n\t\t\t\t\t\n\t\t\t// If the certificate was correctly created, check \n\t\t\t// if it's currently valid\n\t\t\tif (verifiedCertificate != null) {\n\t\t\t\t\t\t\n\t\t\t\ttry {\n\t\t\t\t\tverifiedCertificate.checkValidity();\n\t\t\t\t\t\n\t\t\t\t\t// Evaluate whether the certificate can be used for signature verification\n\t\t\t\t\t// keyCertSignIndex is a magic number from ASN.1 definition of Key Usage.\n\t\t\t\t\tif (verifiedCertificate.getKeyUsage() != null) {\n\t\t\t\t\t\t\n\t\t\t\t\t\tint keyCertSignIndex = 5;\n\t\t\t\t\t\tif(verifiedCertificate.getKeyUsage()[keyCertSignIndex])\n\t\t\t\t\t\t\tthrow new CertificateExpiredException(\"This certificate should not be used for code verification!\");\n\t\t\t\t\t\t\n\t\t\t\t\t\tLog.d(TAG_SECURE_DEX_CLASS_LOADER, Arrays.toString(verifiedCertificate.getKeyUsage()));\n\t\t\t\t\t}\n\t\t\t\t\t\n\t\t\t\t\t// Check whether the certificate used to verify is the one \n\t\t\t\t\t// used by Android in Debug Mode. If so, discard this certificate\n\t\t\t\t\t// since it's not secure.\n\t\t\t\t\tString androidDebugModeDN = \"C=US,O=Android,CN=Android Debug\";\n\t\t\t\t\tX500Principal androidDebugModePrincipal = new X500Principal(androidDebugModeDN);\n\t\t\t\t\tif (\tverifiedCertificate.getIssuerX500Principal().equals(androidDebugModePrincipal) ||\n\t\t\t\t\t\t\tverifiedCertificate.getSubjectX500Principal().equals(androidDebugModePrincipal)\t)\n\t\t\t\t\t\tthrow new CertificateExpiredException(\"Android Debug Certificate can't be accepted to sign containers!\");\n\t\t\t\t\t\n\t\t\t\t} catch (CertificateExpiredException\n\t\t\t\t\t\t| CertificateNotYetValidException e) {\n\t\t\t\t\t// This certificate is not valid!\n\t\t\t\t\t// Discard it and erase the copy of \n\t\t\t\t\t// the file on the device memory\n\t\t\t\t\tverifiedCertificate = null;\n\t\t\t\t\tString certFileToErase = certMatchingFiles[0].getName();\n\t\t\t\t\tif (certMatchingFiles[0].delete()) {\n\t\t\t\t\t\tLog.i(TAG_SECURE_DEX_CLASS_LOADER, \"Expired certificate \" + certFileToErase + \" has been erased.\");\n\t\t\t\t\t}else {\n\t\t\t\t\t\tLog.w(TAG_SECURE_DEX_CLASS_LOADER, \"Problems while deleting expired certificate \" + certFileToErase + \"!\");\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\t\n\t\t}\n\t\t\n\t\t// At the end return the result of the procedure: \n\t\t// either null or a valid and not expired certificate\n\t\treturn verifiedCertificate;\n\t}\n\n\tprivate boolean downloadCertificateRemotelyViaHttps(String packageName) {\n\t\t\n\t\t// Find remote URL of the certificate from the related map through class package name.\n\t\t// All URLs here use method HTTPS.\n\t\tURL certificateRemoteURL = packageNameToCertificateMap.get(packageName);\n\t\t\n\t\t// The new certificate should be stored in the application private directory\n\t\t// and its name should be the same as the package name.\n\t\tString localCertPath =\n certificateFolder.getAbsolutePath() + File.separator + packageName + PEM_EXTENSION;\n\t\t\n\t\t// Return the result of the download procedure (redirect here is not permitted).\n\t\treturn fileDownloader.downloadRemoteResource(certificateRemoteURL, localCertPath, false);\n\t}\n\t\n\t/**\n\t * Sometimes it may be useful to remove those data that have been cached in \n\t * the private application folders (basically for performance reason or for making \n\t * {@link SecureDexClassLoader} works also partially offline). A call to this method solves the issue.\n\t * \n\t * Please notice that a call to this method with both the parameters set to false \n\t * has no effect.\n\t *
\n\t * In any of the other cases the content of the related folder(s) will be erased and \n\t * since some of the data may have been used by {@link SecureDexClassLoader} instances, it is \n\t * required to the caller to create a new {@link SecureDexClassLoader} object through \n\t * {@link SecureLoaderFactory} since the already present object is going to be disabled \n\t * from loading classes dynamically.\n\t * \n\t * @param containerPrivateFolder\n\t * if the private folder where jar and apk containers downloaded from remote URL or imported from local storage needs to be wiped out.\n\t * @param certificatePrivateFolder\n\t * if the private folder containing certificates needs to be wiped out.\n\t */\n\tpublic void wipeOutPrivateAppCachedData(boolean containerPrivateFolder, boolean certificatePrivateFolder) {\n\t\t\n\t\t// This is a useless call.. Nothing will happen..\n\t\tif (!containerPrivateFolder && !certificatePrivateFolder) return;\n\t\t\n\t\tList fileToEraseList = new ArrayList<>();\n\t\t\n\t\tif (containerPrivateFolder) {\n\t\t\t\n\t\t\t// It is required to erase all the files in the application\n\t\t\t// private container folder..\n\t\t\tFile[] containerFiles = containersFolder.listFiles();\n\n Collections.addAll(fileToEraseList, containerFiles);\n\t\t}\n\t\t\n\t\tif (certificatePrivateFolder) {\n\t\t\t\n\t\t\t// It is required to erase all the files in the application\n\t\t\t// private certificate folder..\n\t\t\tFile[] certificateFiles = certificateFolder.listFiles();\n\n Collections.addAll(fileToEraseList, certificateFiles);\n\t\t}\n\n for (File file : fileToEraseList) {\n\n // Check whether the selected resource is a container (jar or apk)\n // or a certificate (pem)\n Optional optionalExtension = extractExtensionFromFilePath(file.getAbsolutePath());\n\n if (optionalExtension.isPresent() &&\n (optionalExtension.get().equals(APK_EXTENSION) ||\n optionalExtension.get().equals(JAR_EXTENSION) ||\n optionalExtension.get().equals(PEM_EXTENSION))) {\n\n if (file.delete())\n Log.i(TAG_SECURE_DEX_CLASS_LOADER, file.getPath() + \" has been erased.\");\n else\n Log.i(TAG_SECURE_DEX_CLASS_LOADER, file.getPath() + \" was NOT erased.\");\n }\n }\n\t\t\n\t\thasBeenWipedOut = true;\n\t}\n}\n"
},
{
"path": "gnr/app/src/main/java/it/necst/grabnrun/SecureLoaderFactory.java",
"content": "/*******************************************************************************\n * Copyright 2014 Luca Falsina\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n *******************************************************************************/\npackage it.necst.grabnrun;\n\nimport static android.content.Context.MODE_PRIVATE;\nimport static com.google.common.base.Preconditions.checkArgument;\nimport static com.google.common.base.Preconditions.checkNotNull;\nimport static it.necst.grabnrun.FileHelper.endsWithJarOrApkExtension;\nimport static it.necst.grabnrun.FileHelper.extractExtensionFromFilePath;\nimport static it.necst.grabnrun.FileHelper.extractFileNameFromFilePath;\nimport static it.necst.grabnrun.PackageNameHelper.isAValidPackageName;\nimport static it.necst.grabnrun.PackageNameHelper.revertPackageNameToURL;\n\nimport android.content.Context;\nimport android.support.annotation.NonNull;\nimport android.support.annotation.Nullable;\nimport android.util.Base64;\nimport android.util.Log;\n\nimport com.google.common.annotations.VisibleForTesting;\nimport com.google.common.base.Optional;\n\nimport java.io.File;\nimport java.io.FileInputStream;\nimport java.io.FileNotFoundException;\nimport java.io.FileOutputStream;\nimport java.io.IOException;\nimport java.io.InputStream;\nimport java.io.OutputStream;\nimport java.net.MalformedURLException;\nimport java.net.URL;\nimport java.security.MessageDigest;\nimport java.security.NoSuchAlgorithmException;\nimport java.security.cert.CertificateException;\nimport java.security.cert.CertificateFactory;\nimport java.util.HashMap;\nimport java.util.Map;\n\nimport dalvik.system.DexClassLoader;\n\n/**\n * A factory class that generates instances of classes used to\n * retrieve containers holding code to execute dynamically in a secure way.\n * \n * @author Luca Falsina\n */\npublic class SecureLoaderFactory {\n\n // Unique identifier used for Log entries\n\tprivate static final String TAG_SECURE_FACTORY = SecureLoaderFactory.class.getSimpleName();\n\n // Name of the folder user to store imported containers (both coming from remote, or local resources)\n static final String IMPORTED_CONTAINERS_PRIVATE_DIRECTORY_NAME = \"imported_cont\";\n @VisibleForTesting static final String OUTPUT_DEX_CLASSES_DIRECTORY_NAME = \"dex_classes\";\n @VisibleForTesting static final String X_509_CERTIFICATE = \"X.509\";\n\n /**\n * When a URL for a remote container is found, this field specifies the default time interval,\n * expressed in days, before a local copy of it, stored in an application-private directory,\n * will be considered rotten, and so not acceptable to be cached.\n * \n * Those local copies of remote containers, whose life time is greater than this\n * field value, will be erased from the device storage in stead of being cached.\n *
\n * You can change this duration by generating the {@link SecureLoaderFactory} instance\n * with {@link SecureLoaderFactory#SecureLoaderFactory(android.content.Context, int)}.\n */\n public static final int DEFAULT_DAYS_BEFORE_CONTAINER_EXPIRATION = 5;\n private static final String HTTP_PROTOCOL_STRING = \"http\";\n private static final String HTTPS_PROTOCOL_STRING = \"https\";\n\n\n private Context context;\n\n\t// Used to compute the digest of different containers\n\t// in order to check which has been already cached.\n\tprivate MessageDigest messageDigest;\n\n\tprivate int daysBeforeContainerCacheExpiration;\n\n\t/**\n\t * Creates a {@link SecureLoaderFactory} used to check and generate instances \n\t * from secure dynamic code loader classes.\n\t *
\n\t * It requires a {@link android.content.Context} (i.e. the launching activity) which\n\t * should be used to manage and retrieve internal directories \n\t * of the application.\n *
\n * The number of days for which a local copy of a remote resource is considered acceptable\n * is set to the value of {@link SecureLoaderFactory#DEFAULT_DAYS_BEFORE_CONTAINER_EXPIRATION}.\n\t * \n\t * @param parentContext\n\t * The content wrapper coming from the launching Activity.\n\t */\n\tpublic SecureLoaderFactory(Context parentContext) {\n\t\n\t\tthis(parentContext, DEFAULT_DAYS_BEFORE_CONTAINER_EXPIRATION);\n\t}\n\t\n\t/**\n * Creates a {@link SecureLoaderFactory} used to check and generate instances\n * from secure dynamic code loader classes.\n *
\n * It requires a {@link android.content.ContextWrapper} (i.e. the launching activity) which\n * should be used to manage and retrieve internal directories\n * of the application.\n *
\n\t * It allows to decide the time interval in days before which a local copy of a remote\n * container, will be considered fresh and so acceptable to be cached.\n\t *
\n\t * If a negative value is provided for the second parameter, {@link SecureLoaderFactory} will\n\t * throws an {@link IllegalArgumentException}.\n\t * \n\t * @param parentContext\n\t * The content wrapper coming from the launching Activity.\n\t * @param daysBeforeContainerCacheExpiration\n\t * The value in days for which a local copy of a remote container is considered fresh,\n * thus acceptable to be cached.\n * @throws IllegalArgumentException if the number of days is not greater than zero\n\t */\n\tpublic SecureLoaderFactory(Context parentContext, int daysBeforeContainerCacheExpiration) {\n\n checkArgument(\n daysBeforeContainerCacheExpiration > 0,\n \"The number of days before considering a container rotten must be greater than zero\");\n this.daysBeforeContainerCacheExpiration = daysBeforeContainerCacheExpiration;\n\n\t\tcontext = parentContext;\n\n\t\ttry {\n\t\t\tmessageDigest = MessageDigest.getInstance(\"SHA-1\");\n\t\t} catch (NoSuchAlgorithmException e) {\n\t\t\tLog.e(TAG_SECURE_FACTORY, \"Wrong algorithm choice for message digest!\");\n\t\t\te.printStackTrace();\n\t\t}\n\t}\n\t\n\t/**\n\t * Creates a {@link SecureDexClassLoader} that finds interpreted and native code in a set of\n\t * provided locations (either local, or remote via HTTP, or HTTPS protocol) in dexPath.\n\t * Interpreted classes are found in a set of DEX files contained in Jar or Apk files and \n\t * stored into an application-private directory.\n\t *
\n\t * Before executing one of these classes the signature of the target class is \n\t * verified against the certificate associated with its package name.\n\t * Certificates location are provided by filling appropriately packageNameToCertificateMap;\n\t * each package name must be linked with the remote location of the certificate that\n\t * should be used to validate all the classes of that package. It's important \n\t * that each one of these locations uses HTTPS as its protocol; otherwise this \n\t * choice will be enforced!\n\t * If a class package name do not match any of the provided entries in the map, \n\t * certificate location will be constructed by simply reverting package name and \n\t * transforming it into a web-based URL using HTTPS.\n\t *
\n\t * Note that this method returns {@code null} if no matching Jar, or Apk file is found at the\n\t * provided dexPath parameter; otherwise a {@link SecureDexClassLoader} instance is returned.\n\t *
\n\t * Dynamic class loading with the returned {@link SecureDexClassLoader} will fail whether\n\t * at least one of these conditions is not accomplished: target class is not found in dexPath\n\t * or is in a missing remote container (i.e. Internet connectivity is not present), missing or\n\t * invalid (i.e. expired) certificate is associated with the package name of the target class,\n\t * target class signature check fails against the associated certificate.\n\t * \n\t * @param dexPath\n\t * the list of jar/apk files containing classes and resources; these paths could\n\t * be either local URLs pointing to a location in the device or URLs that links\n\t * to a resource stored in the web via HTTP/HTTPS. In the latter case, if Internet\n\t * connectivity is available, the resource will be imported in a private-application \n\t * directory before being used.\n\t * @param libraryPath\n\t * the list of directories containing native libraries; it may be {@code null}.\n\t * @param parent\n\t * the parent class loader.\n\t * @param packageNameToCertificateMap\n\t * a map that couples each package name to a URL which contains the certificate\n\t * that must be used to validate all the classes that belong to that package\n\t * before launching them at run time. Please notice that any URL in this map \n\t * using HTTP protocol will be enforced to use HTTPS in stead.\n\t * @return\n\t * a {@link SecureDexClassLoader} object which can be used to load dynamic code securely and \n\t * uses a Eager strategy for container signature verification.\n\t */\n\tpublic SecureDexClassLoader createDexClassLoader(\n @NonNull String dexPath,\n\t\t\t@Nullable String libraryPath,\n @NonNull ClassLoader parent,\n @NonNull Map packageNameToCertificateMap) {\n\t\t\n\t\t// The default behavior is EAGER evaluation.\n\t\t// In order to change it, simply modify the last boolean parameter from \"false\" to \"true\".\n\t\treturn createDexClassLoader(dexPath, libraryPath, parent, packageNameToCertificateMap, false);\n\t}\n\t\n\t/**\n\t * This method returns a {@link SecureDexClassLoader} instance in the same way as it is \n\t * explained in the {@link SecureLoaderFactory#createDexClassLoader(String, String, ClassLoader, Map)}. In addition it is \n\t * possible to specify the mode in which the signature verification process will be carried.\n\t * \n\t * In particular by setting the performLazyEvaluation parameter on true, \n\t * a lazy verification process will be chosen. This means that the signature\n\t * of the single container associated with the target class will be evaluated \n\t * only when {@link SecureDexClassLoader#loadClass(String)} will be invoked . \n\t * If this check succeeds the target class will be loaded.\n\t *
\n\t * On the other hand, by setting the parameter performLazyEvaluation to false \n\t * an eager evaluation will be carried out. This means that before returning this \n\t * object, the signature verification procedure will be carried out on all the \n\t * provided containers in a CONCURRENT way and all of those that do not succeed in the process will\n\t * be blocked from loading their classes in the following loadClass() method calls.\n\t *
\n\t * The use of one mode in stead of the other is merely a performance-related choice.\n\t * If you do not care that much about it, just invoke\n\t * {@link SecureLoaderFactory#createDexClassLoader(String, String, ClassLoader, Map)} \n\t * which does not require to provide the performLazyEvaluation\n\t * parameter and it will perform an Eager evaluation. Otherwise as a general guideline, \n\t * prefer the lazy mode whenever you think that you won't need to load classes \n\t * from all the provided containers.\n\t * \n\t * @param dexPath\n\t * the list of jar/apk files containing classes and resources; these paths could\n\t * be either local URLs pointing to a location in the device or URLs that links\n\t * to a resource stored in the web via HTTP/HTTPS. In the latter case, if Internet\n\t * connectivity is available, the resource will be imported in a private-application \n\t * directory before being used.\n\t * @param libraryPath\n\t * the list of directories containing native libraries; it may be {@code null}.\n\t * @param parent\n\t * the parent class loader.\n\t * @param packageNameToCertificateMap\n\t * a map that couples each package name to a URL which contains the certificate\n\t * that must be used to validate all the classes that belong to that package\n\t * before launching them at run time. Please notice that any URL in this map \n\t * using HTTP protocol will be enforced to use HTTPS in stead.\n\t * @param performLazyEvaluation\n\t * the mode in which the verification will be handled. True for lazy verification;\n\t * false for the eager one.\n\t * @return\n\t * \ta {@link SecureDexClassLoader} object which can be used to load dynamic code securely and \n\t * uses a either Lazy, or an Eager strategy for container signature verification depending\n\t * on the last parameter provided to this constructor.\n\t */\n\tpublic SecureDexClassLoader createDexClassLoader(\n @NonNull String dexPath,\n @Nullable String libraryPath,\n @NonNull ClassLoader parent,\n @NonNull Map packageNameToCertificateMap,\n\t\t\tboolean performLazyEvaluation) {\n\n checkPreconditionsOnArgumentsForSecureDexClassLoaderCreation(\n dexPath, parent, packageNameToCertificateMap);\n\n // New container resources will be imported, or cached into this application private folder.\n File importedContainerDirectory = context.getDir(\n IMPORTED_CONTAINERS_PRIVATE_DIRECTORY_NAME, MODE_PRIVATE);\n Log.d(TAG_SECURE_FACTORY, \"Download Resource Dir has been mounted at: \" +\n importedContainerDirectory.getAbsolutePath());\n\n // Now the location of the final loaded classes is created.\n // Since it is assumed that the developer do not care where\n // exactly the dex classes will be stored, an application-private,\n // writable directory is created ad hoc.\n File dexOutputDirectory = context.getDir(OUTPUT_DEX_CLASSES_DIRECTORY_NAME, MODE_PRIVATE);\n Log.d(TAG_SECURE_FACTORY, \"Dex Output Dir has been mounted at: \" +\n dexOutputDirectory.getAbsolutePath());\n\n String finalDexPathString =\n processDexPathStringAndImportContainers(dexPath, importedContainerDirectory);\n\n\t\t// Til now libraryPath is left untouched..\n\n // Initialize the certificate factory\n CertificateFactory certificateFactory = null;\n try {\n certificateFactory = CertificateFactory.getInstance(X_509_CERTIFICATE);\n } catch (CertificateException e) {\n e.printStackTrace();\n }\n\n\t\treturn new SecureDexClassLoader(\n finalDexPathString,\n new DexClassLoader(\n finalDexPathString,\n dexOutputDirectory.getAbsolutePath(),\n libraryPath,\n parent),\n context,\n processPackageNameToCertificateMap(packageNameToCertificateMap),\n\t\t\t\tperformLazyEvaluation,\n new ContainerSignatureVerifier(\n context.getPackageManager(), certificateFactory),\n certificateFactory);\n\t}\n\n private static void checkPreconditionsOnArgumentsForSecureDexClassLoaderCreation(\n @NonNull String dexPath,\n @NonNull ClassLoader parent,\n @NonNull Map packageNameToCertificateMap) {\n checkNotNull(dexPath, \"The dex path string of the containers used as source must not be null\");\n checkArgument(\n !dexPath.isEmpty(),\n \"The dex path string of the containers used as source must not be empty\");\n\n checkNotNull(parent, \"The parent class loader must not be null\");\n\n checkNotNull(\n packageNameToCertificateMap,\n \"The map associating package names with the URL of the certificate for \" +\n \"signature check must not be null\");\n checkArgument(\n !packageNameToCertificateMap.isEmpty(),\n \"The map associating package names with the URL of the certificate for \" +\n \"signature check must have at least one package name as key\");\n }\n\n private String processDexPathStringAndImportContainers(String dexPath, File importedContainerDir) {\n StringBuilder finalDexPathStringBuilder = new StringBuilder();\n\n CacheLogger remoteContainersCacheLogger = new CacheLogger(\n importedContainerDir.getAbsolutePath(), daysBeforeContainerCacheExpiration);\n\n DexPathStringProcessor dexPathStringProcessor = new DexPathStringProcessor(dexPath);\n\n while (dexPathStringProcessor.hasNextDexPathString()) {\n\n String singleDexPath = dexPathStringProcessor.nextDexPathString();\n Optional optionalSuccessfullyProcessedSingleDexPath;\n\n\t\t\tif (isARemoteHttpOrHttpsResource(singleDexPath)) {\n\n optionalSuccessfullyProcessedSingleDexPath = processPathPointingToARemoteContainer(\n singleDexPath, importedContainerDir, remoteContainersCacheLogger);\n }\n\t\t\telse {\n\n optionalSuccessfullyProcessedSingleDexPath = processPathPointingToALocallyStoredContainer(\n singleDexPath, importedContainerDir);\n }\n\n if (optionalSuccessfullyProcessedSingleDexPath.isPresent()) {\n\n finalDexPathStringBuilder\n .append(optionalSuccessfullyProcessedSingleDexPath.get())\n .append(File.pathSeparator);\n Log.d(TAG_SECURE_FACTORY, \"Dex Path has been modified into: \" + finalDexPathStringBuilder);\n }\n\t\t}\n\n // Remove the last unnecessary separator from finalDexPathStringBuilder\n // (if finalDexPathStringBuilder has at least one path inside)\n if (finalDexPathStringBuilder.lastIndexOf(File.pathSeparator) != -1)\n finalDexPathStringBuilder.deleteCharAt(finalDexPathStringBuilder.lastIndexOf(File.pathSeparator));\n\n // Finalize the CacheLogger object and update the helper file on the device\n remoteContainersCacheLogger.finalizeLog();\n\n return finalDexPathStringBuilder.toString();\n }\n\n private static boolean isARemoteHttpOrHttpsResource(String resourcePath) {\n return resourcePath.startsWith(HTTP_PROTOCOL_STRING) ||\n resourcePath.startsWith(HTTPS_PROTOCOL_STRING);\n }\n\n private Optional processPathPointingToARemoteContainer(\n String singleDexPath,\n File importedContainerDir,\n CacheLogger remoteContainersCacheLogger) {\n try {\n URL currentSingleDexPathAsURL = new URL(singleDexPath);\n\n Optional cachedContainerFileName =\n remoteContainersCacheLogger.checkForCachedEntry(currentSingleDexPathAsURL);\n\n if (cachedContainerFileName.isPresent()) {\n\n // A fresh enough cached copy of the remote container is present\n // on the device storage, so this copy can be used in stead of downloading\n // the remote container again.\n return Optional.of(importedContainerDir.getAbsolutePath() + File.separator +\n cachedContainerFileName.get());\n } else {\n\n // No cached copy so it is necessary to download the remote resource from the web.\n\n //Trace.beginSection(\"Download Container\");\n // Log.i(\"Profile\",\"[Start]\tDownload Container: \" + System.currentTimeMillis() + \" ms.\");\n String downloadedContainerPath = downloadContainerIntoFolder(singleDexPath, importedContainerDir);\n // Log.i(\"Profile\",\"[End]\tDownload Container: \" + System.currentTimeMillis() + \" ms.\");\n //Trace.endSection(); // end of \"Download Container\" section\n\n if (downloadedContainerPath != null) {\n\n // In such a case the download was successful.\n // Now the downloaded container is renamed according to its finger print.\n String containerDigest = computeDigestFromFilePath(downloadedContainerPath);\n\n File downloadedContainer = new File(downloadedContainerPath);\n\n if (containerDigest == null) {\n\n // Fingerprint computation fails. Delete the resource container and do not add\n // this file to the singleDexPath\n if (!downloadedContainer.delete())\n Log.w(TAG_SECURE_FACTORY, \"Issue while deleting \" + downloadedContainerPath);\n } else {\n\n // Compute the extension of the file.\n String extension = extractExtensionFromFilePath(downloadedContainerPath).get();\n\n // Rename the previous container file according to the containerDigest and its extension.\n String downloadedContainerFinalPath = importedContainerDir.getAbsolutePath() + File.separator + containerDigest + extension;\n\n File downloadContainerFinalPosition = new File(downloadedContainerFinalPath);\n\n if (downloadContainerFinalPosition.exists())\n if (!downloadContainerFinalPosition.delete())\n Log.w(TAG_SECURE_FACTORY, \"Issue while deleting \" + downloadedContainerFinalPath);\n\n if (downloadedContainer.renameTo(downloadContainerFinalPosition)) {\n\n // It is relevant to add this resource to the Log file of the cached remote containers.\n remoteContainersCacheLogger.addCachedEntryToLog(currentSingleDexPathAsURL, containerDigest + extension);\n\n // Successful renaming..\n // It is necessary to replace the current web-like singleDexPath to access the resource with the new local version.\n return Optional.of(downloadedContainerFinalPath);\n\n } else {\n // Renaming operation failed..\n // Erase downloaded container.\n if (!downloadedContainer.delete())\n Log.w(TAG_SECURE_FACTORY, \"Issue while deleting \" + downloadedContainerPath);\n\n return Optional.absent();\n }\n }\n }\n }\n } catch (MalformedURLException e) {\n Log.d(\n TAG_SECURE_FACTORY,\n \"The provided singleDexPath \" + singleDexPath + \" is not a valid remote URL\");\n }\n\n return Optional.absent();\n }\n\n private Optional processPathPointingToALocallyStoredContainer(\n String singleDexPath, File importedContainerDir) {\n // On the other hand when the developer provides a local URI for the container\n // SecureLoaderFactory has to import this file into an application private folder on the device.\n\n // At first compute the digest on the provided local container.\n String encodedContainerDigest = null;\n\n // If a container exists on the device storage, compute its digest.\n if (new File(singleDexPath).exists()) encodedContainerDigest = computeDigestFromFilePath(singleDexPath);\n\n // Take this branch if the digest was correctly computed on the container..\n if (encodedContainerDigest != null) {\n\n // Compute the extension of the file.\n String extension = extractExtensionFromFilePath(singleDexPath).get();\n\n // Check if a file whose name is \"encodedContainerDigest.(jar/apk)\" is already present in\n // the cached certificate folder.\n File[] matchingContainerArray = importedContainerDir.listFiles(new FileFilterByNameMatch(encodedContainerDigest, extension));\n\n if (matchingContainerArray != null && matchingContainerArray.length > 0) {\n\n // A cached version of the container already exists.\n // So simply use that cached version\n return Optional.of(matchingContainerArray[0].getAbsolutePath());\n }\n else {\n\n // No cached copy of the container in the directory.\n // So it is necessary to import the container into the application folder\n // before using it.\n InputStream inStream = null;\n OutputStream outStream = null;\n String cachedContainerPath = importedContainerDir.getAbsolutePath() + File.separator + encodedContainerDigest + extension;\n\n try {\n\n inStream = new FileInputStream(singleDexPath);\n outStream = new FileOutputStream(cachedContainerPath);\n\n byte[] buf = new byte[8192];\n int length;\n\n // Copying the external container into the application\n // private folder.\n while ((length = inStream.read(buf)) > 0) {\n outStream.write(buf, 0, length);\n }\n\n // In the end add the internal singleDexPath of the container\n return Optional.of(cachedContainerPath);\n\n } catch (FileNotFoundException e) {\n Log.w(TAG_SECURE_FACTORY, \"Problem in locating container to import in the application private folder!\");\n } catch (IOException e) {\n Log.w(TAG_SECURE_FACTORY, \"Problem while importing a local container into the application private folder!\");\n } finally {\n\n try {\n\n if (inStream != null) {\n inStream.close();\n }\n if (outStream != null) {\n outStream.close();\n }\n\n } catch (IOException e) {\n Log.w(TAG_SECURE_FACTORY, \"Issue in closing file streams while importing a container!\");\n }\n }\n }\n }\n\n return Optional.absent();\n }\n\n // Given the path of a file this function returns the encoded base 64 of SHA-1 digest of the file.\n\tprivate String computeDigestFromFilePath(String filePath) {\n\t\t\n\t\tFileInputStream inStream = null;\n\t\tString digestString = null;\n\t\t\n\t\ttry {\n\t\t\t// A stream used to parse the bytes of the file\n\t\t\tinStream = new FileInputStream(filePath);\n\t\t\t\n\t\t\tbyte[] buffer = new byte[8192];\n\t\t int length;\n\t\t while( (length = inStream.read(buffer)) != -1 ) {\n\t\t \t// File is loaded by considering chunks of it..\n\t\t \tmessageDigest.update(buffer, 0, length);\n\t\t }\n\t\t // The digest is finally computed..\n\t\t byte[] digestBytes = messageDigest.digest();\n\t\t \n\t\t // ..and translated into a human readable string through Base64 encoding (Url safe).\n\t\t // Also remove the last /n part of the string\n\t\t digestString = Base64.encodeToString(digestBytes, Base64.URL_SAFE)\n .replace(System.getProperty(\"line.separator\"), \"\")\n .replace(\"\\r\", \"\");\n\n\t\t} catch (FileNotFoundException e) {\n\t\t\tLog.w(TAG_SECURE_FACTORY, \"No file found at \" + filePath);\n\t\t} catch (IOException e) {\n\t\t\tLog.w(TAG_SECURE_FACTORY, \"Something went wrong while calculating the digest!\");\n\t\t} finally {\n\t\t\tif (inStream != null) {\n\t\t\t\ttry {\n\t\t\t\t\tinStream.close();\n\t\t\t\t} catch (IOException e) {\n\t\t\t\t\tLog.w(TAG_SECURE_FACTORY, \"Issue while closing file stream in message digest computation!\");\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\t\n\t\t// Finally return the digest string..\n\t\treturn digestString;\n\t}\n\n\tprivate Map processPackageNameToCertificateMap(\n Map packageNameToCertificateMap) {\n\t\tMap sanitizedPackageNameToCertificateMap = new HashMap<>();\n\t\t\n for (String currentPackageName : packageNameToCertificateMap.keySet()) {\n if (isAValidPackageName(currentPackageName)) {\n try {\n URL certificateURL = packageNameToCertificateMap.get(currentPackageName);\n\n if (certificateURL != null) {\n // If the URL for the certificate is present, check that it is valid one,\n // and enforce HTTPS protocol..\n if (certificateURL.getProtocol().equals(HTTP_PROTOCOL_STRING) ||\n certificateURL.getProtocol().equals(HTTPS_PROTOCOL_STRING)) {\n sanitizedPackageNameToCertificateMap.put(\n currentPackageName,\n new URL(\n HTTPS_PROTOCOL_STRING,\n certificateURL.getHost(),\n certificateURL.getPort(),\n certificateURL.getFile()));\n }\n } else {\n // Otherwise, revert the package name, and use it as the certificate URL.\n sanitizedPackageNameToCertificateMap.put(\n currentPackageName, revertPackageNameToURL(currentPackageName));\n }\n } catch (MalformedURLException e) {\n // Ignore this package name if an exception on the URL is raised.\n Log.w(TAG_SECURE_FACTORY, \"Issue while enforcing certificate URL \" +\n packageNameToCertificateMap.get(currentPackageName) +\n \" to use HTTPS protocol\");\n }\n }\n }\n\t\t\n\t\treturn sanitizedPackageNameToCertificateMap;\n\t}\n\n\tprivate String downloadContainerIntoFolder(String urlPath, File resOutputDir) {\n\t\t\n\t\t// Precondition check on URL path variable..\n\t\tif (urlPath == null) return null;\n\t\t\n\t\t// Precondition check on the output local folder..\n\t\tif (resOutputDir == null || !resOutputDir.exists()) return null;\n\t\tif (!resOutputDir.isDirectory() || !resOutputDir.canRead() || !resOutputDir.canWrite()) return null;\n\n if (!isARemoteHttpOrHttpsResource(urlPath)) return null;\n\n URL url;\n try {\n url = new URL(urlPath);\n } catch (MalformedURLException e) {\n e.printStackTrace();\n return null;\n }\n\n // Check whether the path of the file pointed by the URL is not empty\n if (url.getFile().isEmpty()) return null;\n\n String containerName = extractFileNameFromFilePath(url.getFile());\n\n // Check whether the name of the file pointed by the URL is not empty\n if (containerName.isEmpty()) return null;\n\t\t\n\t\t// Check whether the selected resource is a container (jar or apk)\n Optional optionalContainerExtension = extractExtensionFromFilePath(containerName);\n\n if (optionalContainerExtension.isPresent() &&\n !endsWithJarOrApkExtension(optionalContainerExtension.get())) {\n return null;\n }\n\n // Check that no file is present at this location.\n\t\tFile checkFile = new File(resOutputDir.getAbsolutePath() + containerName);\n\t\t\n\t\t// In case, just delete the old file..\n\t\tif (checkFile.exists())\n\t\t\tcheckFile.delete();\n\t\t\n\t\t// Finally the container file can be downloaded from the URL\n\t\t// and stored in the local folder\n\t\tString localContainerPath = resOutputDir.getAbsolutePath() + containerName;\n\n FileDownloader fileDownloader = new FileDownloader(context);\n\t\t\n\t\t// Redirect may be allowed here while downloading a remote container..\n\t\tboolean isDownloadSuccessful = fileDownloader.downloadRemoteResource(url, localContainerPath, true);\n\t\t\n\t\tif (isDownloadSuccessful) {\n\t\t\t\n\t\t\t// If this branch is reached, the download worked properly and the path of the output\n\t\t\t// file container is returned.\n\t\t\tif (!optionalContainerExtension.isPresent()) {\n\n\t\t\t\t// In such a situation, try to identify the extension of the downloaded file\n\t\t\t\tOptional retrievedFileExtension = fileDownloader.getDownloadedFileExtension();\n\t\t\t\t\n\t\t\t\t// Check that an extension was found and it is a suitable one..\n\t\t\t\tif (retrievedFileExtension.isPresent() &&\n endsWithJarOrApkExtension(retrievedFileExtension.get())) {\n\n\t\t\t\t\t// In such a case rename the previous file by adding the extension\n\t\t\t\t\tFile containerToRename = new File(localContainerPath);\n\t\t\t\t\tFile finalContainerWithExtension = new File(localContainerPath + retrievedFileExtension);\n\t\t\t\t\t\n\t\t\t\t\tif (finalContainerWithExtension.exists())\n\t\t\t\t\t\tif (!finalContainerWithExtension.delete())\n\t\t\t\t\t\t\tLog.w(TAG_SECURE_FACTORY, \"Issue while deleting \" + finalContainerWithExtension);\n\t\t\t\t\t\n\t\t\t\t\tif (!containerToRename.renameTo(finalContainerWithExtension)) {\n\t\t\t\t\t\t\n\t\t\t\t\t\t// Renaming operation failed..\n\t\t\t\t\t\t// Erase downloaded container.\n\t\t\t\t\t\tif (!containerToRename.delete())\n\t\t\t\t\t\t\tLog.w(TAG_SECURE_FACTORY, \"Issue while deleting \" + localContainerPath);\n\t\t\t\t\t\t\n\t\t\t\t\t\treturn null;\n\t\t\t\t\t}\n\t\t\t\t\t\t\n\t\t\t\t\t// Return the local path to the renamed container.\n\t\t\t\t\treturn localContainerPath + retrievedFileExtension;\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t\n\t\t\t\t// An extension is already present so just return the path..\n\t\t\t\treturn localContainerPath;\n\t\t\t}\n\t\t}\n\t\t\n\t\t// Return null if any of the download steps failed.\n\t\treturn null;\n\t}\n}\n"
},
{
"path": "gnr/app/src/main/res/values-v11/styles.xml",
"content": "\n\n \n \n\n\n"
},
{
"path": "gnr/app/src/main/res/values-v14/styles.xml",
"content": "\n\n \n \n\n\n"
},
{
"path": "gnr/app/src/test/java/it/necst/grabnrun/CacheLoggerTest.java",
"content": "package it.necst.grabnrun;\n\nimport static org.hamcrest.MatcherAssert.assertThat;\nimport static org.hamcrest.Matchers.equalTo;\n\nimport com.google.common.base.Optional;\n\nimport org.junit.Rule;\nimport org.junit.Test;\nimport org.junit.rules.TemporaryFolder;\nimport org.junit.runner.RunWith;\nimport org.mockito.runners.MockitoJUnitRunner;\n\nimport java.io.IOException;\nimport java.net.URL;\n\n@RunWith(MockitoJUnitRunner.class)\npublic class CacheLoggerTest {\n private static final int POSITIVE_INTEGER_FOR_DAYS_TILL_CONSIDERED_FRESH = 1;\n private static final String TEST_REMOTE_URL_AS_STRING = \"https://test.com/myExample.jar\";\n private static final String ANOTHER_TEST_REMOTE_URL_AS_STRING = \"https://test2.com/anotherExample.apk\";\n\n @Rule\n public TemporaryFolder temporaryFolder = new TemporaryFolder();\n\n @Test (expected = IllegalArgumentException.class)\n public void givenNotPositiveIntegerForDaysTillConsideredFresh_whenCreateCacheLogger_thenThrows() {\n // GIVEN\n int notPositiveIntegerForDaysTillConsideredFresh = -1;\n\n // WHEN\n new CacheLogger(getTemporaryFolderPath(), notPositiveIntegerForDaysTillConsideredFresh);\n }\n\n @Test\n public void givenNoHelperFileWasStored_whenCheckForCachedEntry_thenReturnsAnAbsentOptional()\n throws Exception {\n // GIVEN\n final CacheLogger testCacheLogger = initializeCacheLoggerWithTestValues();\n\n // WHEN\n final Optional optionalLocalFileNameOfTheCachedResource =\n testCacheLogger.checkForCachedEntry(new URL(TEST_REMOTE_URL_AS_STRING));\n\n // THEN\n assertThat(optionalLocalFileNameOfTheCachedResource, equalTo(Optional.absent()));\n }\n\n @Test\n public void givenNoHelperFileWasStoredAndAddAURLAsACachedEntry_whenCheckForCachedEntryWithADifferentURL_thenReturnsAnAbsentOptional()\n throws Exception {\n // GIVEN\n final CacheLogger testCacheLogger = initializeCacheLoggerWithTestValues();\n final URL testRemoteURL = new URL(TEST_REMOTE_URL_AS_STRING);\n createFakeLocalFileAndAddItsNameToTheCacheLogger(testCacheLogger, testRemoteURL);\n\n // WHEN\n final Optional optionalLocalFileNameOfTheCachedResource =\n testCacheLogger.checkForCachedEntry(new URL(ANOTHER_TEST_REMOTE_URL_AS_STRING));\n\n // THEN\n assertThat(optionalLocalFileNameOfTheCachedResource, equalTo(Optional.absent()));\n }\n\n @Test\n public void givenNoHelperFileWasStoredAndAddAURLAsACachedEntry_whenCheckForCachedEntryWithThatURL_thenReturnsTheLocalFileName()\n throws Exception {\n // GIVEN\n final CacheLogger testCacheLogger = initializeCacheLoggerWithTestValues();\n final URL testRemoteURL = new URL(TEST_REMOTE_URL_AS_STRING);\n final String testLocalFileName =\n createFakeLocalFileAndAddItsNameToTheCacheLogger(testCacheLogger, testRemoteURL);\n\n // WHEN\n final Optional optionalLocalFileNameOfTheCachedResource =\n testCacheLogger.checkForCachedEntry(testRemoteURL);\n\n // THEN\n assertThat(optionalLocalFileNameOfTheCachedResource, equalTo(Optional.of(testLocalFileName)));\n }\n\n @Test\n public void givenNoHelperFileWasStoredAndCacheLoggerIsFinalizedAndAURLIsAddedAsACachedEntry_whenCheckForCachedEntryWithThatURL_thenReturnsAnAbsentOptional()\n throws Exception {\n // GIVEN\n final CacheLogger testCacheLogger = initializeCacheLoggerWithTestValues();\n testCacheLogger.finalizeLog();\n final URL testRemoteURL = new URL(TEST_REMOTE_URL_AS_STRING);\n createFakeLocalFileAndAddItsNameToTheCacheLogger(testCacheLogger, testRemoteURL);\n\n // WHEN\n final Optional optionalLocalFileNameOfTheCachedResource =\n testCacheLogger.checkForCachedEntry(testRemoteURL);\n\n // THEN\n assertThat(optionalLocalFileNameOfTheCachedResource, equalTo(Optional.absent()));\n }\n\n @Test\n public void givenHelperFileWasStoredWithAURLAsACachedEntry_whenCheckForCachedEntryWithThatURLOnANewCacheLogger_thenReturnsTheLocalFileName()\n throws Exception {\n // GIVEN\n final CacheLogger testCacheLogger = initializeCacheLoggerWithTestValues();\n final URL testRemoteURL = new URL(TEST_REMOTE_URL_AS_STRING);\n final String testLocalFileName =\n createFakeLocalFileAndAddItsNameToTheCacheLogger(testCacheLogger, testRemoteURL);\n testCacheLogger.finalizeLog();\n\n final CacheLogger anotherTestCacheLogger = initializeCacheLoggerWithTestValues();\n\n // WHEN\n final Optional optionalLocalFileNameOfTheCachedResource =\n anotherTestCacheLogger.checkForCachedEntry(testRemoteURL);\n\n // THEN\n assertThat(optionalLocalFileNameOfTheCachedResource, equalTo(Optional.of(testLocalFileName)));\n }\n\n private CacheLogger initializeCacheLoggerWithTestValues() {\n return new CacheLogger(\n getTemporaryFolderPath(), POSITIVE_INTEGER_FOR_DAYS_TILL_CONSIDERED_FRESH);\n }\n\n private String getTemporaryFolderPath() {\n return temporaryFolder.getRoot().getPath();\n }\n\n private String createFakeLocalFileAndAddItsNameToTheCacheLogger(\n CacheLogger testCacheLogger, URL testRemoteURL) throws IOException {\n final String testLocalFileName = computeFileNameFromURL(testRemoteURL);\n temporaryFolder.newFile(testLocalFileName);\n testCacheLogger.addCachedEntryToLog(testRemoteURL, testLocalFileName);\n return testLocalFileName;\n }\n\n private String computeFileNameFromURL(URL testRemoteURL) {\n return testRemoteURL.getPath().substring(1);\n }\n}\n"
},
{
"path": "gnr/app/src/test/java/it/necst/grabnrun/CertificateFileFilterByNameMatchTest.java",
"content": "package it.necst.grabnrun;\n\nimport static it.necst.grabnrun.CertificateFileFilterByNameMatch.PEM_EXTENSION;\nimport static org.junit.Assert.assertFalse;\nimport static org.junit.Assert.assertTrue;\nimport static org.mockito.Mockito.when;\n\nimport org.junit.Before;\nimport org.junit.Test;\nimport org.junit.runner.RunWith;\nimport org.mockito.Mock;\nimport org.mockito.runners.MockitoJUnitRunner;\n\nimport java.io.File;\n\n@RunWith(MockitoJUnitRunner.class)\npublic class CertificateFileFilterByNameMatchTest {\n\n public static final String EMPTY_CERTIFICATE_NAME = \"\";\n private static final String TEST_CERTIFICATE_NAME = \"testCertificate\";\n private static final String CERTIFICATE_WITH_MATCHING_NAME_BUT_UNSUPPORTED_EXTENSION =\n TEST_CERTIFICATE_NAME + \".cert\";\n private static final String CERTIFICATE_WITH_SUPPORTED_PEM_EXTENSION_BUT_NOT_MATCHING_NAME =\n \"anotherTestCertificate\" + PEM_EXTENSION;\n private static final String CERTIFICATE_WITH_MATCHING_NAME_AND_SUPPORTED_PEM_EXTENSION =\n TEST_CERTIFICATE_NAME + PEM_EXTENSION;\n\n @Mock File fileMock;\n CertificateFileFilterByNameMatch testCertFileFilter;\n\n @Before\n public void initializeCertificateFileFilterWithTestCertificateName() {\n testCertFileFilter = new CertificateFileFilterByNameMatch(TEST_CERTIFICATE_NAME);\n }\n\n @Test (expected = IllegalArgumentException.class)\n public void givenAnEmptyFileName_whenCreateCertificateFileFilter_thenThrows() {\n new CertificateFileFilterByNameMatch(EMPTY_CERTIFICATE_NAME);\n }\n\n @Test\n public void givenADirectory_whenAccept_thenReturnFalse() {\n // GIVEN\n setupFileMockAsADirectory(true);\n\n // WHEN\n boolean isAccepted = testCertFileFilter.accept(fileMock);\n\n // THEN\n assertFalse(isAccepted);\n }\n\n @Test\n public void givenAFileWithMatchingFileNameButUnsupportedExtension_whenAccept_thenReturnFalse() {\n // GIVEN\n setupFileMockAsADirectory(false);\n when(fileMock.getName())\n .thenReturn(CERTIFICATE_WITH_MATCHING_NAME_BUT_UNSUPPORTED_EXTENSION);\n\n // WHEN\n boolean isAccepted = testCertFileFilter.accept(fileMock);\n\n // THEN\n assertFalse(isAccepted);\n }\n\n @Test\n public void givenAFileWithSupportedExtensionButNotMatchingFileName_whenAccept_thenReturnFalse() {\n // GIVEN\n setupFileMockAsADirectory(false);\n when(fileMock.getName())\n .thenReturn(CERTIFICATE_WITH_SUPPORTED_PEM_EXTENSION_BUT_NOT_MATCHING_NAME);\n\n // WHEN\n boolean isAccepted = testCertFileFilter.accept(fileMock);\n\n // THEN\n assertFalse(isAccepted);\n }\n\n @Test\n public void givenAFileWithMatchingFileNameAndSupportedExtension_whenAccept_thenReturnTrue() {\n // GIVEN\n setupFileMockAsADirectory(false);\n when(fileMock.getName())\n .thenReturn(CERTIFICATE_WITH_MATCHING_NAME_AND_SUPPORTED_PEM_EXTENSION);\n\n // WHEN\n boolean isAccepted = testCertFileFilter.accept(fileMock);\n\n // THEN\n assertTrue(isAccepted);\n }\n\n private void setupFileMockAsADirectory(boolean shouldBeADirectory) {\n when(fileMock.isDirectory()).thenReturn(shouldBeADirectory);\n when(fileMock.isFile()).thenReturn(!shouldBeADirectory);\n }\n}"
},
{
"path": "gnr/app/src/test/java/it/necst/grabnrun/ContainerSignatureVerifierTest.java",
"content": "package it.necst.grabnrun;\n\nimport static android.content.Context.CONNECTIVITY_SERVICE;\nimport static it.necst.grabnrun.FileHelper.extractFileNameFromFilePath;\nimport static it.necst.grabnrun.SecureLoaderFactory.X_509_CERTIFICATE;\nimport static junit.framework.Assert.assertFalse;\nimport static junit.framework.Assert.assertNotNull;\nimport static junit.framework.Assert.assertTrue;\nimport static org.mockito.Mockito.mock;\nimport static org.mockito.Mockito.when;\n\nimport android.content.Context;\nimport android.content.pm.PackageManager;\nimport android.net.ConnectivityManager;\nimport android.net.NetworkInfo;\n\nimport org.junit.Before;\nimport org.junit.Rule;\nimport org.junit.Test;\nimport org.junit.rules.TemporaryFolder;\nimport org.junit.runner.RunWith;\nimport org.mockito.Mock;\nimport org.mockito.runners.MockitoJUnitRunner;\n\nimport java.io.File;\nimport java.io.FileInputStream;\nimport java.io.InputStream;\nimport java.net.URL;\nimport java.security.cert.CertificateFactory;\nimport java.security.cert.X509Certificate;\n\n// TODO(falsinal): Once the code of the tested classes will be simplified, evaluate\n// whether to add extra test cases for APK containers\n\n@RunWith(MockitoJUnitRunner.class)\npublic class ContainerSignatureVerifierTest {\n\n @Rule public TemporaryFolder temporaryResourceFolder = new TemporaryFolder();\n\n private static final String EMPTY_CONTAINER_PATH = \"\";\n\n private static final String UNSIGNED_JAR_CONTAINER_URL_AS_STRING =\n \"https://dl.dropboxusercontent.com/s/ofl0q47rhggfugg/unsigned-jsoup-1.8.3.jar\";\n private static final String REPACKAGED_JAR_CONTAINER_SIGNED_WITH_TRUSTED_CERTIFICATE_URL_AS_STRING =\n \"https://dl.dropboxusercontent.com/s/dm0v5gnrli6fu31/componentModifierRepack.jar\";\n private static final String JAR_CONTAINER_SIGNED_WITH_TRUSTED_CERTIFICATE_URL_AS_STRING =\n \"https://dl.dropboxusercontent.com/u/28681922/componentModifier.jar\";\n private static final String TRUSTED_CERTIFICATE_URL_AS_STRING =\n \"https://dl.dropboxusercontent.com/u/28681922/test_cert.pem\";\n private static final String A_DIFFERENT_TRUSTED_CERTIFICATE_URL_AS_STRING =\n \"https://dl.dropboxusercontent.com/s/px59dqbwsbhvln5/verify_cert.pem\";\n\n @Mock PackageManager mockPackageManager = mock(PackageManager.class);\n @Mock Context mockContext = mock(Context.class);\n @Mock ConnectivityManager mockConnectivityManager = mock(ConnectivityManager.class);\n @Mock NetworkInfo mockNetworkInfo = mock(NetworkInfo.class);\n\n ContainerSignatureVerifier testContainerSignatureVerifier;\n X509Certificate trustedCertificate;\n\n @Before\n public void initializeTestContainerSignatureVerifierAndSetupMocks() throws Exception {\n\n testContainerSignatureVerifier = new ContainerSignatureVerifier(\n mockPackageManager, CertificateFactory.getInstance(X_509_CERTIFICATE));\n\n when(mockContext.getSystemService(CONNECTIVITY_SERVICE))\n .thenReturn(mockConnectivityManager);\n when(mockConnectivityManager.getActiveNetworkInfo()).thenReturn(mockNetworkInfo);\n when(mockNetworkInfo.isConnected()).thenReturn(true);\n\n trustedCertificate = retrieveAndGenerateTrustedCertificate(TRUSTED_CERTIFICATE_URL_AS_STRING);\n }\n\n @Test (expected = IllegalArgumentException.class)\n public void givenAnEmptyContainerPath_whenVerifyContainerAgainstCertificate_thenThrows() {\n // GIVEN + WHEN\n testContainerSignatureVerifier\n .verifyContainerSignatureAgainstCertificate(EMPTY_CONTAINER_PATH, trustedCertificate);\n }\n\n @Test (expected = IllegalArgumentException.class)\n public void givenAnUnsignedJarContainer_whenVerifyContainerAgainstCertificate_thenThrows() {\n // GIVEN\n String containerPathPointingToNoFile = temporaryResourceFolder.getRoot()\n + File.pathSeparator + \"NotExistingContainer.jar\";\n assertFalse(new File(containerPathPointingToNoFile).exists());\n\n // WHEN\n testContainerSignatureVerifier\n .verifyContainerSignatureAgainstCertificate(\n containerPathPointingToNoFile, trustedCertificate);\n }\n\n @Test\n public void givenAnUnsignedJarContainer_whenVerifyContainerAgainstCertificate_thenReturnsFalse() throws Exception {\n // GIVEN + WHEN\n boolean isContainerVerificationSuccessful =\n testContainerSignatureVerifier.verifyContainerSignatureAgainstCertificate(\n downloadRemoteResourceIntoTemporaryFolder(\n UNSIGNED_JAR_CONTAINER_URL_AS_STRING),\n trustedCertificate);\n\n // THEN\n assertFalse(isContainerVerificationSuccessful);\n }\n @Test\n public void givenAJarContainerSignedWithAnOtherTrustedCertificate_whenVerifyContainerAgainstCertificate_thenReturnsFalse() throws Exception {\n // GIVEN\n X509Certificate aDifferentTrustedCertificate =\n retrieveAndGenerateTrustedCertificate(A_DIFFERENT_TRUSTED_CERTIFICATE_URL_AS_STRING);\n\n // WHEN\n boolean isContainerVerificationSuccessful =\n testContainerSignatureVerifier.verifyContainerSignatureAgainstCertificate(\n downloadRemoteResourceIntoTemporaryFolder(\n JAR_CONTAINER_SIGNED_WITH_TRUSTED_CERTIFICATE_URL_AS_STRING),\n aDifferentTrustedCertificate);\n\n // THEN\n assertFalse(isContainerVerificationSuccessful);\n }\n\n @Test\n public void givenARepackagedJarContainerPreviouslySignedWithTheTrustedCertificate_whenVerifyContainerAgainstCertificate_thenReturnsFalse() throws Exception {\n // GIVEN + WHEN\n boolean isContainerVerificationSuccessful =\n testContainerSignatureVerifier.verifyContainerSignatureAgainstCertificate(\n downloadRemoteResourceIntoTemporaryFolder(\n REPACKAGED_JAR_CONTAINER_SIGNED_WITH_TRUSTED_CERTIFICATE_URL_AS_STRING),\n trustedCertificate);\n\n // THEN\n assertFalse(isContainerVerificationSuccessful);\n }\n\n @Test\n public void givenAJarContainerSignedWithTheTrustedCertificate_whenVerifyContainerAgainstCertificate_thenReturnsTrue() throws Exception {\n // GIVEN + WHEN\n boolean isContainerVerificationSuccessful =\n testContainerSignatureVerifier.verifyContainerSignatureAgainstCertificate(\n downloadRemoteResourceIntoTemporaryFolder(\n JAR_CONTAINER_SIGNED_WITH_TRUSTED_CERTIFICATE_URL_AS_STRING),\n trustedCertificate);\n\n // THEN\n assertTrue(isContainerVerificationSuccessful);\n }\n\n private X509Certificate retrieveAndGenerateTrustedCertificate(\n String remoteCertificateURLAsString) throws Exception {\n String trustedCertificatePath =\n downloadRemoteResourceIntoTemporaryFolder(remoteCertificateURLAsString);\n\n InputStream inStream = new FileInputStream(trustedCertificatePath);\n X509Certificate trustedCertificate = (X509Certificate) CertificateFactory\n .getInstance(X_509_CERTIFICATE)\n .generateCertificate(inStream);\n\n assertNotNull(inStream);\n inStream.close();\n\n return trustedCertificate;\n }\n\n private String downloadRemoteResourceIntoTemporaryFolder(String remoteURLAsString) throws Exception {\n URL remoteURL = new URL(remoteURLAsString);\n\n String localContainerURI = temporaryResourceFolder.getRoot().toString()\n + File.separator + extractFileNameFromFilePath(remoteURL.getPath());\n\n boolean isRemoteResourceSuccessful = new FileDownloader(mockContext).downloadRemoteResource(\n remoteURL,\n localContainerURI,\n false);\n\n assertTrue(isRemoteResourceSuccessful);\n return localContainerURI;\n }\n\n}"
},
{
"path": "gnr/app/src/test/java/it/necst/grabnrun/DexPathStringProcessorTest.java",
"content": "package it.necst.grabnrun;\n\nimport static junit.framework.Assert.assertFalse;\nimport static junit.framework.Assert.assertTrue;\nimport static org.hamcrest.CoreMatchers.equalTo;\nimport static org.hamcrest.CoreMatchers.is;\nimport static org.hamcrest.MatcherAssert.assertThat;\n\nimport org.junit.Test;\nimport org.junit.runner.RunWith;\nimport org.mockito.runners.MockitoJUnitRunner;\n\nimport java.io.File;\nimport java.util.NoSuchElementException;\n\n@RunWith(MockitoJUnitRunner.class)\npublic class DexPathStringProcessorTest {\n\n private static final String TEST_EMPTY_PATH = \"\";\n\n private static final String TEST_LOCAL_PATH = \"/example/path/for/test/file.jar\";\n private static final String TEST_REMOTE_HTTP_PATH = \"http://myexample.com/file.apk\";\n private static final String TEST_REMOTE_HTTPS_PATH = \"https://myexample.com/file.apk\";\n private static final String TEST_COMPOSITE_DEX_PATH = concatenateDexPathStrings(\n TEST_LOCAL_PATH, TEST_REMOTE_HTTP_PATH, TEST_REMOTE_HTTPS_PATH);\n\n private DexPathStringProcessor testDexPathStringProcessor;\n\n @Test (expected = IllegalArgumentException.class)\n public void givenAnEmptyDexPath_whenCreateDexPathStringProcessor_thenThrows() {\n // WHEN\n testDexPathStringProcessor = new DexPathStringProcessor(TEST_EMPTY_PATH);\n }\n\n @Test\n public void givenASingleTestLocalPath_whenHasNextDexPathString_thenReturnsTrue() {\n // GIVEN\n testDexPathStringProcessor = new DexPathStringProcessor(TEST_LOCAL_PATH);\n\n // WHEN\n final boolean hasNextDexPathString = testDexPathStringProcessor.hasNextDexPathString();\n\n // THEN\n assertTrue(hasNextDexPathString);\n }\n\n @Test\n public void givenASingleTestLocalPath_whenNextDexPathString_thenReturnsTheTestLocalPath() {\n // GIVEN\n testDexPathStringProcessor = new DexPathStringProcessor(TEST_LOCAL_PATH);\n\n // WHEN\n final String nextDexPathString = testDexPathStringProcessor.nextDexPathString();\n\n // THEN\n assertThat(nextDexPathString, is(equalTo(TEST_LOCAL_PATH)));\n }\n\n @Test\n public void givenASingleTestRemoteHttpPath_whenHasNextDexPathString_thenReturnsTrue() {\n // GIVEN\n testDexPathStringProcessor = new DexPathStringProcessor(TEST_REMOTE_HTTP_PATH);\n\n // WHEN\n final boolean hasNextDexPathString = testDexPathStringProcessor.hasNextDexPathString();\n\n // THEN\n assertTrue(hasNextDexPathString);\n }\n\n @Test\n public void givenASingleTestRemoteHttpPath_whenNextDexPathString_thenReturnsTheTestRemoteHttpPath() {\n // GIVEN\n testDexPathStringProcessor = new DexPathStringProcessor(TEST_REMOTE_HTTP_PATH);\n\n // WHEN\n final String nextDexPathString = testDexPathStringProcessor.nextDexPathString();\n\n // THEN\n assertThat(nextDexPathString, is(equalTo(TEST_REMOTE_HTTP_PATH)));\n }\n\n @Test\n public void givenASingleTestRemoteHttpsPath_whenHasNextDexPathString_thenReturnsTrue() {\n // GIVEN\n testDexPathStringProcessor = new DexPathStringProcessor(TEST_REMOTE_HTTPS_PATH);\n\n // WHEN\n final boolean hasNextDexPathString = testDexPathStringProcessor.hasNextDexPathString();\n\n // THEN\n assertTrue(hasNextDexPathString);\n }\n\n @Test\n public void givenASingleTestRemoteHttpsPath_whenNextDexPathString_thenReturnsTheTestRemoteHttpsPath() {\n // GIVEN\n testDexPathStringProcessor = new DexPathStringProcessor(TEST_REMOTE_HTTPS_PATH);\n\n // WHEN\n final String nextDexPathString = testDexPathStringProcessor.nextDexPathString();\n\n // THEN\n assertThat(nextDexPathString, is(equalTo(TEST_REMOTE_HTTPS_PATH)));\n }\n\n @Test\n public void givenATestDexPathWhichConcatenatesThreePaths_whenHasNextDexPathString_thenReturnsTrueThreeTimesAndFalseAtTheFourth() {\n // GIVEN\n testDexPathStringProcessor = new DexPathStringProcessor(TEST_COMPOSITE_DEX_PATH);\n\n // WHEN + THEN\n assertTrue(testDexPathStringProcessor.hasNextDexPathString());\n testDexPathStringProcessor.nextDexPathString();\n assertTrue(testDexPathStringProcessor.hasNextDexPathString());\n testDexPathStringProcessor.nextDexPathString();\n assertTrue(testDexPathStringProcessor.hasNextDexPathString());\n testDexPathStringProcessor.nextDexPathString();\n assertFalse(testDexPathStringProcessor.hasNextDexPathString());\n }\n\n @Test\n public void givenATestDexPathWhichConcatenatesThreePaths_whenNextDexPathString_thenReturnsThreeStringsInTheSameOrderOfTheInputDexPath() {\n // GIVEN\n testDexPathStringProcessor = new DexPathStringProcessor(TEST_COMPOSITE_DEX_PATH);\n\n // WHEN + THEN\n assertThat(testDexPathStringProcessor.nextDexPathString(), is(equalTo(TEST_LOCAL_PATH)));\n assertThat(testDexPathStringProcessor.nextDexPathString(), is(equalTo(TEST_REMOTE_HTTP_PATH)));\n assertThat(testDexPathStringProcessor.nextDexPathString(), is(equalTo(TEST_REMOTE_HTTPS_PATH)));\n }\n\n @Test (expected = NoSuchElementException.class)\n public void givenATestDexPathWhichConcatenatesThreePaths_whenNextDexPathString_thenThrowsAfterThirdInvocation() {\n // GIVEN\n testDexPathStringProcessor = new DexPathStringProcessor(TEST_COMPOSITE_DEX_PATH);\n\n // WHEN\n testDexPathStringProcessor.nextDexPathString();\n testDexPathStringProcessor.nextDexPathString();\n testDexPathStringProcessor.nextDexPathString();\n testDexPathStringProcessor.nextDexPathString();\n }\n\n private static String concatenateDexPathStrings(String... dexPathStrings) {\n StringBuilder dexPathComplexStringBuilder = new StringBuilder();\n\n for (String dexPathString : dexPathStrings) {\n dexPathComplexStringBuilder.append(dexPathString).append(File.pathSeparator);\n }\n\n return dexPathComplexStringBuilder\n .deleteCharAt(dexPathComplexStringBuilder.lastIndexOf(File.pathSeparator))\n .toString();\n }\n}\n"
},
{
"path": "gnr/app/src/test/java/it/necst/grabnrun/FileDownloaderTest.java",
"content": "package it.necst.grabnrun;\n\nimport static org.hamcrest.CoreMatchers.equalTo;\nimport static org.junit.Assert.assertFalse;\nimport static org.junit.Assert.assertTrue;\nimport static org.junit.Assert.assertThat;\nimport static org.mockito.Mockito.mock;\nimport static org.mockito.Mockito.when;\n\nimport android.content.Context;\nimport android.net.ConnectivityManager;\nimport android.net.NetworkInfo;\nimport android.test.mock.MockContext;\n\nimport com.google.common.base.Optional;\n\nimport org.junit.Before;\nimport org.junit.Rule;\nimport org.junit.Test;\nimport org.junit.rules.TemporaryFolder;\nimport org.junit.runner.RunWith;\nimport org.mockito.Mock;\nimport org.mockito.runners.MockitoJUnitRunner;\n\nimport java.io.File;\nimport java.net.URL;\n\n@RunWith(MockitoJUnitRunner.class)\npublic class FileDownloaderTest {\n\n private static final String TEST_REMOTE_CERTIFICATE_URL_AS_STRING =\n \"https://dl.dropboxusercontent.com/u/28681922/test_cert.pem\";\n private static final String TEST_REMOTE_CERTIFICATE_URL_NEEDING_REDIRECT_AS_STRING =\n \"http://bit.ly/1Yh5kft\";\n private static final String TEST_REMOTE_URL_USING_UNSUPPORTED_FTP_PROTOCOL_AS_STRING =\n \"ftp://ftp.funet.fi/pub/standards/RFC/rfc959.txt\";\n\n private static final String LOCAL_FILE_NAME = \"localFile\";\n\n @Rule public TemporaryFolder temporaryTestFolder = new TemporaryFolder();\n\n @Mock MockContext mockContext = new MockContext();\n @Mock ConnectivityManager mockConnectivityManager = mock(ConnectivityManager.class);\n @Mock NetworkInfo mockNetworkInfo = mock(NetworkInfo.class);\n\n FileDownloader testFileDownloader;\n\n @Before\n public void setupMocksForFileDownloader() {\n when(mockContext.getSystemService(Context.CONNECTIVITY_SERVICE))\n .thenReturn(mockConnectivityManager);\n when(mockConnectivityManager.getActiveNetworkInfo()).thenReturn(mockNetworkInfo);\n when(mockNetworkInfo.isConnected()).thenReturn(true);\n testFileDownloader = new FileDownloader(mockContext);\n }\n\n @Test\n public void givenNoNetworkConnectivityIsAvailable_whenDownloadRemoteResource_thenDownloadFailsAndRetrievesNoFile()\n throws Exception {\n // GIVEN\n when(mockNetworkInfo.isConnected()).thenReturn(false);\n final String localFileURIInTemporaryTestDirectory =\n getLocalFileURIInTemporaryTestDirectory(LOCAL_FILE_NAME);\n\n // WHEN\n final boolean wasDownloadSuccessful = testFileDownloader.downloadRemoteResource(\n new URL(TEST_REMOTE_CERTIFICATE_URL_AS_STRING),\n localFileURIInTemporaryTestDirectory,\n false);\n\n // THEN\n assertFalse(wasDownloadSuccessful);\n assertFalse(fileExists(localFileURIInTemporaryTestDirectory));\n }\n\n @Test (expected = IllegalArgumentException.class)\n public void givenNetworkConnectivityIsAvailable_whenDownloadRemoteResourceWithTestURLUsingUnsupportedProtocol_thenThrows()\n throws Exception {\n // GIVEN\n final String localFileURIInTemporaryTestDirectory =\n getLocalFileURIInTemporaryTestDirectory(LOCAL_FILE_NAME);\n\n // WHEN\n testFileDownloader.downloadRemoteResource(\n new URL(TEST_REMOTE_URL_USING_UNSUPPORTED_FTP_PROTOCOL_AS_STRING),\n localFileURIInTemporaryTestDirectory,\n false);\n }\n\n @Test\n public void givenNetworkConnectivityIsAvailable_whenDownloadRemoteResourceWithTestRemoteCertificateURL_thenDownloadSucceedsAndRetrievesAFile()\n throws Exception {\n // GIVEN\n final String localFileURIInTemporaryTestDirectory =\n getLocalFileURIInTemporaryTestDirectory(LOCAL_FILE_NAME);\n\n // WHEN\n final boolean wasDownloadSuccessful = testFileDownloader.downloadRemoteResource(\n new URL(TEST_REMOTE_CERTIFICATE_URL_AS_STRING),\n localFileURIInTemporaryTestDirectory,\n false);\n\n // THEN\n assertTrue(wasDownloadSuccessful);\n assertTrue(fileExists(localFileURIInTemporaryTestDirectory));\n }\n\n @Test\n public void givenNetworkConnectivityIsAvailableAndNoRedirectIsAllowed_whenDownloadRemoteResourceWithTestRemoteCertificateURLNeedingRedirect_thenDownloadFailsAndRetrievesNoFile()\n throws Exception {\n // GIVEN\n final String localFileURIInTemporaryTestDirectory =\n getLocalFileURIInTemporaryTestDirectory(LOCAL_FILE_NAME);\n final boolean redirectIsNotAllowed = false;\n\n // WHEN\n final boolean wasDownloadSuccessful = testFileDownloader.downloadRemoteResource(\n new URL(TEST_REMOTE_CERTIFICATE_URL_NEEDING_REDIRECT_AS_STRING),\n localFileURIInTemporaryTestDirectory,\n redirectIsNotAllowed);\n\n // THEN\n assertFalse(wasDownloadSuccessful);\n assertFalse(fileExists(localFileURIInTemporaryTestDirectory));\n }\n\n @Test\n public void givenNetworkConnectivityIsAvailableAndRedirectIsAllowed_whenDownloadRemoteResourceWithTestRemoteCertificateURLNeedingRedirect_thenDownloadSucceedsAndRetrievesAFile()\n throws Exception {\n // GIVEN\n final String localFileURIInTemporaryTestDirectory =\n getLocalFileURIInTemporaryTestDirectory(LOCAL_FILE_NAME);\n final boolean redirectIsAllowed = true;\n\n // WHEN\n final boolean wasDownloadSuccessful = testFileDownloader.downloadRemoteResource(\n new URL(TEST_REMOTE_CERTIFICATE_URL_NEEDING_REDIRECT_AS_STRING),\n localFileURIInTemporaryTestDirectory,\n redirectIsAllowed);\n\n // THEN\n assertTrue(wasDownloadSuccessful);\n assertTrue(fileExists(localFileURIInTemporaryTestDirectory));\n }\n\n @Test\n public void givenNoRemoteResourceWasPreviouslyDownloaded_whenGetDownloadedFileExtension_thenReturnsAnOptionalAbsent() {\n // WHEN\n final Optional optionalDownloadedFileExtension =\n testFileDownloader.getDownloadedFileExtension();\n\n // THEN\n assertThat(optionalDownloadedFileExtension, equalTo(Optional.absent()));\n }\n\n @Test\n public void givenRemoteResourceWasPreviouslyDownloaded_whenGetDownloadedFileExtension_thenReturnsAnOptionalStringMatchingTheFileExtension()\n throws Exception {\n // GIVEN\n testFileDownloader.downloadRemoteResource(\n new URL(TEST_REMOTE_CERTIFICATE_URL_AS_STRING),\n getLocalFileURIInTemporaryTestDirectory(LOCAL_FILE_NAME),\n false);\n // WHEN\n final Optional optionalDownloadedFileExtension =\n testFileDownloader.getDownloadedFileExtension();\n\n // THEN\n final String expectedFileExtensionForCertificateFile = \".pem\";\n assertThat(\n optionalDownloadedFileExtension,\n equalTo(Optional.of(expectedFileExtensionForCertificateFile)));\n }\n\n @Test\n public void givenRemoteResourceRequiringRedirectWasPreviouslyDownloaded_whenGetDownloadedFileExtension_thenReturnsAnOptionalStringMatchingTheFileExtension()\n throws Exception {\n // GIVEN\n final boolean redirectIsAllowed = true;\n testFileDownloader.downloadRemoteResource(\n new URL(TEST_REMOTE_CERTIFICATE_URL_NEEDING_REDIRECT_AS_STRING),\n getLocalFileURIInTemporaryTestDirectory(LOCAL_FILE_NAME),\n redirectIsAllowed);\n // WHEN\n final Optional optionalDownloadedFileExtension =\n testFileDownloader.getDownloadedFileExtension();\n\n // THEN\n final String expectedFileExtensionForCertificateFile = \".pem\";\n assertThat(\n optionalDownloadedFileExtension,\n equalTo(Optional.of(expectedFileExtensionForCertificateFile)));\n }\n\n private String getLocalFileURIInTemporaryTestDirectory(String localFileName) {\n return temporaryTestFolder.getRoot().getPath() + File.separator + localFileName;\n }\n\n private static boolean fileExists(String path) {\n return new File(path).exists();\n }\n}\n"
},
{
"path": "gnr/app/src/test/java/it/necst/grabnrun/FileFilterByNameMatchTest.java",
"content": "package it.necst.grabnrun;\n\nimport static org.junit.Assert.assertFalse;\nimport static org.junit.Assert.assertTrue;\nimport static org.mockito.Mockito.when;\n\nimport org.junit.Test;\nimport org.junit.runner.RunWith;\nimport org.mockito.Mock;\nimport org.mockito.runners.MockitoJUnitRunner;\n\nimport java.io.File;\n\n@RunWith(MockitoJUnitRunner.class)\npublic class FileFilterByNameMatchTest {\n\n public static final String EMPTY_FILE_NAME = \"\";\n private static final String TEST_FILE_NAME = \"testCertificate\";\n private static final String INVALID_FILE_EXTENSION = \".tooLongSinceUpToFourCharsAreSupported\";\n\n private static final String VALID_FILE_EXTENSION = \".txt\";\n private static final String ANOTHER_VALID_FILE_EXTENSION_WITH_UPPERCASE = \".DOCX\";\n private static final String CERTIFICATE_WITH_MATCHING_NAME_BUT_NOT_EXTENSION =\n TEST_FILE_NAME + \".doc\";\n private static final String CERTIFICATE_WITH_MATCHING_EXTENSION_BUT_NOT_NAME =\n \"anotherTestFileName\" + VALID_FILE_EXTENSION;\n private static final String CERTIFICATE_WITH_MATCHING_NAME_AND_EXTENSION =\n TEST_FILE_NAME + VALID_FILE_EXTENSION;\n\n @Mock File fileMock;\n private FileFilterByNameMatch testFileFilter;\n\n @Test (expected = IllegalArgumentException.class)\n public void givenAnEmptyFileName_whenCreateFileFilter_thenThrows() {\n new FileFilterByNameMatch(EMPTY_FILE_NAME, VALID_FILE_EXTENSION);\n }\n\n @Test (expected = IllegalArgumentException.class)\n public void givenAFileExtensionNotMatchingDotAndThreeCharacters_whenCreateFileFilter_thenThrows() {\n new FileFilterByNameMatch(TEST_FILE_NAME, INVALID_FILE_EXTENSION);\n }\n\n @Test\n public void givenAFileExtensionWithFourUppercaseCharacters_whenCreateFileFilter_thenTheTestSucceeds() {\n new FileFilterByNameMatch(TEST_FILE_NAME, ANOTHER_VALID_FILE_EXTENSION_WITH_UPPERCASE);\n }\n\n @Test\n public void givenADirectory_whenAccept_thenReturnFalse() {\n // GIVEN\n initializeFileFilterWithTestValues();\n setupFileMockAsADirectory(true);\n\n // WHEN\n boolean isAccepted = testFileFilter.accept(fileMock);\n\n // THEN\n assertFalse(isAccepted);\n }\n\n @Test\n public void givenAFileWithMatchingFileNameButNotExtension_whenAccept_thenReturnFalse() {\n // GIVEN\n initializeFileFilterWithTestValues();\n setupFileMockAsADirectory(false);\n when(fileMock.getName())\n .thenReturn(CERTIFICATE_WITH_MATCHING_NAME_BUT_NOT_EXTENSION);\n\n // WHEN\n boolean isAccepted = testFileFilter.accept(fileMock);\n\n // THEN\n assertFalse(isAccepted);\n }\n\n @Test\n public void givenAFileWithMatchingExtensionButNotName_whenAccept_thenReturnFalse() {\n // GIVEN\n initializeFileFilterWithTestValues();\n setupFileMockAsADirectory(false);\n when(fileMock.getName())\n .thenReturn(CERTIFICATE_WITH_MATCHING_EXTENSION_BUT_NOT_NAME);\n\n // WHEN\n boolean isAccepted = testFileFilter.accept(fileMock);\n\n // THEN\n assertFalse(isAccepted);\n }\n\n @Test\n public void givenAFileWithMatchingNameAndExtension_whenAccept_thenReturnTrue() {\n // GIVEN\n initializeFileFilterWithTestValues();\n setupFileMockAsADirectory(false);\n when(fileMock.getName())\n .thenReturn(CERTIFICATE_WITH_MATCHING_NAME_AND_EXTENSION);\n\n // WHEN\n boolean isAccepted = testFileFilter.accept(fileMock);\n\n // THEN\n assertTrue(isAccepted);\n }\n\n private void initializeFileFilterWithTestValues() {\n testFileFilter = new FileFilterByNameMatch(TEST_FILE_NAME, VALID_FILE_EXTENSION);\n }\n\n private void setupFileMockAsADirectory(boolean shouldBeADirectory) {\n when(fileMock.isDirectory()).thenReturn(shouldBeADirectory);\n when(fileMock.isFile()).thenReturn(!shouldBeADirectory);\n }\n}"
},
{
"path": "gnr/app/src/test/java/it/necst/grabnrun/FileHelperTest.java",
"content": "package it.necst.grabnrun;\n\nimport static it.necst.grabnrun.FileHelper.endsWithJarOrApkExtension;\nimport static it.necst.grabnrun.FileHelper.extractExtensionFromFilePath;\nimport static it.necst.grabnrun.FileHelper.extractFileNameFromFilePath;\nimport static it.necst.grabnrun.FileHelper.extractFileNameWithoutExtensionFromFilePath;\nimport static it.necst.grabnrun.FileHelper.extractFilePathWithoutExtensionFromFilePath;\nimport static junit.framework.Assert.assertFalse;\nimport static org.hamcrest.CoreMatchers.equalTo;\nimport static org.hamcrest.CoreMatchers.is;\nimport static org.hamcrest.MatcherAssert.assertThat;\nimport static org.junit.Assert.assertTrue;\n\nimport com.google.common.base.Optional;\n\nimport org.junit.Test;\nimport org.junit.runner.RunWith;\nimport org.mockito.runners.MockitoJUnitRunner;\n\n@RunWith(MockitoJUnitRunner.class)\npublic class FileHelperTest {\n\n private static final String TEST_FILE_PATH = \"/testPath/\";\n private static final String TEST_FILE_NAME_WITH_NO_EXTENSION = \"testFile\";\n private static final String TEST_FILE_EXTENSION_FOR_A_CONTAINER = FileHelper.APK_EXTENSION;\n\n private static final String TEST_FILE_NAME_WITH_CONTAINER_EXTENSION =\n TEST_FILE_NAME_WITH_NO_EXTENSION + TEST_FILE_EXTENSION_FOR_A_CONTAINER;\n\n private static final String TEST_FILE_PATH_WITH_NO_EXTENSION =\n TEST_FILE_PATH + TEST_FILE_NAME_WITH_NO_EXTENSION;\n private static final String TEST_FILE_PATH_WITH_CONTAINER_EXTENSION =\n TEST_FILE_PATH + TEST_FILE_NAME_WITH_CONTAINER_EXTENSION;\n\n private static final String TEST_FILE_EXTENSION_NOT_FOR_A_CONTAINER = \".txt\";\n\n @Test (expected = IllegalArgumentException.class)\n public void givenAnEmptyFilePath_whenExtractFilePathWithoutExtensionFromFilePath_thenThrows() {\n // GIVEN\n String emptyFilePath = \"\";\n\n // WHEN\n extractFilePathWithoutExtensionFromFilePath(emptyFilePath);\n }\n\n @Test\n public void givenFileNameWithoutExtension_whenExtractFilePathWithoutExtensionFromFilePath_thenReturnsTheSameString() {\n // WHEN\n String extractedFilePath =\n extractFilePathWithoutExtensionFromFilePath(TEST_FILE_NAME_WITH_NO_EXTENSION);\n\n // THEN\n assertThat(extractedFilePath, is(equalTo(TEST_FILE_NAME_WITH_NO_EXTENSION)));\n }\n\n @Test\n public void givenFileNameWithExtension_whenExtractFilePathWithoutExtensionFromFilePath_thenReturnsTheFileNameWithoutTheExtension() {\n // WHEN\n String extractedFilePath =\n extractFilePathWithoutExtensionFromFilePath(TEST_FILE_NAME_WITH_CONTAINER_EXTENSION);\n\n // THEN\n assertThat(extractedFilePath, is(equalTo(TEST_FILE_NAME_WITH_NO_EXTENSION)));\n }\n\n @Test\n public void givenFilePathWithoutExtension_whenExtractFilePathWithoutExtensionFromFilePath_thenReturnsTheSameString() {\n // WHEN\n String extractedFilePath =\n extractFilePathWithoutExtensionFromFilePath(TEST_FILE_PATH_WITH_NO_EXTENSION);\n\n // THEN\n assertThat(extractedFilePath, is(equalTo(TEST_FILE_PATH_WITH_NO_EXTENSION)));\n }\n\n @Test\n public void givenFilePathWithExtension_whenExtractFilePathWithoutExtensionFromFilePath_thenReturnsTheFilePathWithoutTheExtension() {\n // WHEN\n String extractedFilePath =\n extractFilePathWithoutExtensionFromFilePath(TEST_FILE_PATH_WITH_CONTAINER_EXTENSION);\n\n // THEN\n assertThat(extractedFilePath, is(equalTo(TEST_FILE_PATH_WITH_NO_EXTENSION)));\n }\n\n @Test (expected = IllegalArgumentException.class)\n public void givenAnEmptyFilePath_whenExtractFileNameWithoutExtensionFromFilePath_thenThrows() {\n // GIVEN\n String emptyFilePath = \"\";\n\n // WHEN\n extractFileNameWithoutExtensionFromFilePath(emptyFilePath);\n }\n\n @Test\n public void givenAFilePathWithoutAFileNameAndExtension_whenExtractFileNameWithoutExtensionFromFilePath_thenReturnsAnEmptyString() {\n // WHEN\n String extractedFileName = extractFileNameWithoutExtensionFromFilePath(TEST_FILE_PATH);\n\n // THEN\n assertTrue(extractedFileName.isEmpty());\n }\n\n @Test\n public void givenFileNameWithoutExtension_whenExtractFileNameWithoutExtensionFromFilePath_thenReturnsTheSameString() {\n // WHEN\n String extractedFileName =\n extractFileNameWithoutExtensionFromFilePath(TEST_FILE_NAME_WITH_NO_EXTENSION);\n\n // THEN\n assertThat(extractedFileName, is(equalTo(TEST_FILE_NAME_WITH_NO_EXTENSION)));\n }\n\n @Test\n public void givenFileNameWithExtension_whenExtractFileNameWithoutExtensionFromFilePath_thenReturnsTheFileNameWithoutTheExtension() {\n // WHEN\n String extractedFileName =\n extractFileNameWithoutExtensionFromFilePath(TEST_FILE_NAME_WITH_CONTAINER_EXTENSION);\n\n // THEN\n assertThat(extractedFileName, is(equalTo(TEST_FILE_NAME_WITH_NO_EXTENSION)));\n }\n\n @Test\n public void givenFilePathWithoutExtension_whenExtractFileNameWithoutExtensionFromFilePath_thenReturnsTheFileNameWithoutTheExtension() {\n // WHEN\n String extractedFileName =\n extractFileNameWithoutExtensionFromFilePath(TEST_FILE_PATH_WITH_NO_EXTENSION);\n\n // THEN\n assertThat(extractedFileName, is(equalTo(TEST_FILE_NAME_WITH_NO_EXTENSION)));\n }\n\n @Test\n public void givenFilePathWithExtension_whenExtractFileNameWithoutExtensionFromFilePath_thenReturnsTheFileNameWithoutTheExtension() {\n // WHEN\n String extractedFileName =\n extractFileNameWithoutExtensionFromFilePath(TEST_FILE_PATH_WITH_CONTAINER_EXTENSION);\n\n // THEN\n assertThat(extractedFileName, is(equalTo(TEST_FILE_NAME_WITH_NO_EXTENSION)));\n }\n\n @Test (expected = IllegalArgumentException.class)\n public void givenAnEmptyFilePath_whenExtractFileNameFromFilePath_thenThrows() {\n // GIVEN\n String emptyFilePath = \"\";\n\n // WHEN\n extractFileNameFromFilePath(emptyFilePath);\n }\n\n @Test\n public void givenAFilePathWithoutAFileNameAndExtension_whenExtractFileNameFromFilePath_thenReturnsAnEmptyString() {\n // WHEN\n String extractedFileName = extractFileNameFromFilePath(TEST_FILE_PATH);\n\n // THEN\n assertTrue(extractedFileName.isEmpty());\n }\n\n @Test\n public void givenFileNameWithoutExtension_whenExtractFileNameFromFilePath_thenReturnsTheSameString() {\n // WHEN\n String extractedFileName = extractFileNameFromFilePath(TEST_FILE_NAME_WITH_NO_EXTENSION);\n\n // THEN\n assertThat(extractedFileName, is(equalTo(TEST_FILE_NAME_WITH_NO_EXTENSION)));\n }\n\n @Test\n public void givenFileNameWithExtension_whenExtractFileNameFromFilePath_thenReturnsTheSameString() {\n // WHEN\n String extractedFileName = extractFileNameFromFilePath(TEST_FILE_NAME_WITH_CONTAINER_EXTENSION);\n\n // THEN\n assertThat(extractedFileName, is(equalTo(TEST_FILE_NAME_WITH_CONTAINER_EXTENSION)));\n }\n\n @Test\n public void givenFilePathWithoutExtension_whenExtractFileNameFromFilePath_thenReturnsTheFileName() {\n // WHEN\n String extractedFileName = extractFileNameFromFilePath(TEST_FILE_PATH_WITH_NO_EXTENSION);\n\n // THEN\n assertThat(extractedFileName, is(equalTo(TEST_FILE_NAME_WITH_NO_EXTENSION)));\n }\n\n @Test\n public void givenFilePathWithExtension_whenExtractFileNameFromFilePath_thenReturnsTheFileName() {\n // WHEN\n String extractedFileName =\n extractFileNameFromFilePath(TEST_FILE_PATH_WITH_CONTAINER_EXTENSION);\n\n // THEN\n assertThat(extractedFileName, is(equalTo(TEST_FILE_NAME_WITH_CONTAINER_EXTENSION)));\n }\n\n @Test (expected = IllegalArgumentException.class)\n public void givenAnEmptyFilePath_whenExtractExtensionFromFilePath_thenThrows() {\n // GIVEN\n String emptyFilePath = \"\";\n\n // WHEN\n extractExtensionFromFilePath(emptyFilePath);\n }\n\n @Test\n public void givenAFileNameWithNoExtensionOnTheFile_whenExtractExtensionFromFilePath_thenReturnsAnAbsentOptional() {\n // WHEN\n Optional optionalFileExtension =\n extractExtensionFromFilePath(TEST_FILE_NAME_WITH_NO_EXTENSION);\n\n // THEN\n assertThat(optionalFileExtension, is(equalTo(Optional.absent())));\n }\n\n @Test\n public void givenAFilePathWithNoExtensionOnTheFile_whenExtractExtensionFromFilePath_thenReturnsAnAbsentOptional() {\n // WHEN\n Optional optionalFileExtension =\n extractExtensionFromFilePath(TEST_FILE_PATH_WITH_NO_EXTENSION);\n\n // THEN\n assertThat(optionalFileExtension, is(equalTo(Optional.absent())));\n }\n\n @Test\n public void givenAFileNameWithExtensionForTheFile_whenExtractExtensionFromFilePath_thenReturnsAnOptionalContainingTheExtension() {\n // WHEN\n Optional optionalFileExtension =\n extractExtensionFromFilePath(TEST_FILE_NAME_WITH_CONTAINER_EXTENSION);\n\n // THEN\n assertThat(optionalFileExtension, is(equalTo(Optional.of(TEST_FILE_EXTENSION_FOR_A_CONTAINER))));\n }\n\n @Test\n public void givenAFilePathWithExtensionForTheFile_whenExtractExtensionFromFilePath_thenReturnsAnOptionalContainingTheExtension() {\n // WHEN\n Optional optionalFileExtension =\n extractExtensionFromFilePath(TEST_FILE_PATH_WITH_CONTAINER_EXTENSION);\n\n // THEN\n assertThat(optionalFileExtension, is(equalTo(Optional.of(TEST_FILE_EXTENSION_FOR_A_CONTAINER))));\n }\n\n @Test (expected = IllegalArgumentException.class)\n public void givenAnEmptyFilePath_whenEndsWithJarOrApkExtension_thenThrows() {\n // GIVEN\n String emptyFilePath = \"\";\n\n // WHEN\n endsWithJarOrApkExtension(emptyFilePath);\n }\n\n @Test\n public void givenAFileNameWithNoExtension_whenEndsWithJarOrApkExtension_thenReturnsFalse() {\n // WHEN + THEN\n assertFalse(endsWithJarOrApkExtension(TEST_FILE_NAME_WITH_NO_EXTENSION));\n }\n\n @Test\n public void givenAFileNameWithANotContainerExtension_whenEndsWithJarOrApkExtension_thenReturnsFalse() {\n // WHEN + THEN\n assertFalse(endsWithJarOrApkExtension(\n TEST_FILE_NAME_WITH_NO_EXTENSION + TEST_FILE_EXTENSION_NOT_FOR_A_CONTAINER));\n }\n\n @Test\n public void givenAFileExtensionNotForAContainer_whenEndsWithJarOrApkExtension_thenReturnsFalse() {\n // WHEN + THEN\n assertFalse(endsWithJarOrApkExtension(TEST_FILE_EXTENSION_NOT_FOR_A_CONTAINER));\n }\n\n @Test\n public void givenAFileExtensionForAContainer_whenEndsWithJarOrApkExtension_thenReturnsTrue() {\n // WHEN + THEN\n assertTrue(endsWithJarOrApkExtension(TEST_FILE_EXTENSION_FOR_A_CONTAINER));\n }\n\n @Test\n public void givenAFileNameWithAContainerExtension_whenEndsWithJarOrApkExtension_thenReturnsTrue() {\n // WHEN + THEN\n assertTrue(endsWithJarOrApkExtension(TEST_FILE_NAME_WITH_CONTAINER_EXTENSION));\n }\n\n @Test\n public void givenAFilePathWithAContainerExtension_whenEndsWithJarOrApkExtension_thenReturnsTrue() {\n // WHEN + THEN\n assertTrue(endsWithJarOrApkExtension(TEST_FILE_PATH_WITH_CONTAINER_EXTENSION));\n }\n}\n"
},
{
"path": "gnr/app/src/test/java/it/necst/grabnrun/PackageNameHelperTest.java",
"content": "package it.necst.grabnrun;\n\nimport static it.necst.grabnrun.PackageNameHelper.isAValidPackageName;\nimport static it.necst.grabnrun.PackageNameHelper.revertPackageNameToURL;\nimport static junit.framework.Assert.assertFalse;\nimport static junit.framework.Assert.assertTrue;\nimport static org.hamcrest.CoreMatchers.equalTo;\nimport static org.hamcrest.CoreMatchers.is;\nimport static org.hamcrest.MatcherAssert.assertThat;\n\nimport org.junit.Test;\n\nimport java.net.URL;\n\npublic class PackageNameHelperTest {\n\n private static final String TEST_INVALID_PACKAGE_NAME_STARTING_WITH_A_DOT = \".com.example\";\n private static final String TEST_INVALID_PACKAGE_NAME_WITH_AN_EMPTY_FIELD_BETWEEN_TWO_DOTS =\n \"com..example\";\n private static final String TEST_INVALID_PACKAGE_NAME_ENDING_WITH_A_DOT = \"com.example.\";\n private static final String TEST_INVALID_PACKAGE_NAME_WITH_ONLY_ONE_FIELD = \"com\";\n\n private static final String TEST_VALID_PACKAGE_NAME_WITH_TWO_FIELDS = \"com.example\";\n private static final String TEST_VALID_PACKAGE_NAME_WITH_FOUR_FIELDS =\n \"com.example.polimi.application\";\n\n private static final String TEST_EXPECTED_URL_STRING_WITH_VALID_PACKAGE_NAME_WITH_TWO_FIELDS =\n \"https://example.com/certificate.pem\";\n private static final String TEST_EXPECTED_URL_STRING_WITH_VALID_PACKAGE_NAME_WITH_FOUR_FIELDS =\n \"https://example.com/polimi/application/certificate.pem\";\n\n @Test\n public void givenAnEmptyPackageName_whenIsAValidPackageName_thenReturnFalse() {\n // GIVEN\n String emptyPackageName = \"\";\n\n // WHEN\n boolean isAValidPackageName = isAValidPackageName(emptyPackageName);\n\n // THEN\n assertFalse(isAValidPackageName);\n }\n\n @Test\n public void givenAPackageNameStartingWithADot_whenIsAValidPackageName_thenReturnFalse() {\n // WHEN\n boolean isAValidPackageName = isAValidPackageName(TEST_INVALID_PACKAGE_NAME_STARTING_WITH_A_DOT);\n\n // THEN\n assertFalse(isAValidPackageName);\n }\n\n @Test\n public void givenAPackageNameWithAnEmptyFieldBetweenTwoDots_whenIsAValidPackageName_thenReturnFalse() {\n // WHEN\n boolean isAValidPackageName = isAValidPackageName(\n TEST_INVALID_PACKAGE_NAME_WITH_AN_EMPTY_FIELD_BETWEEN_TWO_DOTS);\n\n // THEN\n assertFalse(isAValidPackageName);\n }\n\n @Test\n public void givenAPackageNameEndingWithADot_whenIsAValidPackageName_thenReturnFalse() {\n // WHEN\n boolean isAValidPackageName = isAValidPackageName(TEST_INVALID_PACKAGE_NAME_ENDING_WITH_A_DOT);\n\n // THEN\n assertFalse(isAValidPackageName);\n }\n\n @Test\n public void givenAPackageNameWithOnlyOneField_whenIsAValidPackageName_thenReturnFalse() {\n // WHEN\n boolean isAValidPackageName = isAValidPackageName(TEST_INVALID_PACKAGE_NAME_WITH_ONLY_ONE_FIELD);\n\n // THEN\n assertFalse(isAValidPackageName);\n }\n\n @Test\n public void givenAPackageNameWithAtLeastTwoFieldsSeparatedByASingleDot_whenIsAValidPackageName_thenReturnTrue() {\n // WHEN\n boolean isAValidPackageName = isAValidPackageName(TEST_VALID_PACKAGE_NAME_WITH_TWO_FIELDS);\n\n // THEN\n assertTrue(isAValidPackageName);\n }\n\n @Test (expected = IllegalArgumentException.class)\n public void givenANotValidPackageName_whenRevertPackageNameToURL_thenThrows() throws Exception {\n // WHEN\n revertPackageNameToURL(TEST_INVALID_PACKAGE_NAME_WITH_ONLY_ONE_FIELD);\n }\n\n @Test\n public void givenAValidPackageNameWithTwoFields_whenRevertPackageNameToURL_thenReturnsTheRevertedPackageNameAsDomainName() throws Exception {\n // WHEN\n URL revertPackageNameToURL = revertPackageNameToURL(TEST_VALID_PACKAGE_NAME_WITH_TWO_FIELDS);\n\n // THEN\n assertThat(\n revertPackageNameToURL,\n is(equalTo(new URL(TEST_EXPECTED_URL_STRING_WITH_VALID_PACKAGE_NAME_WITH_TWO_FIELDS))));\n }\n\n @Test\n public void givenAValidPackageNameWithThreeOrMoreFields_whenRevertPackageNameToURL_thenReturnsTheRevertedTwoFieldsOfPackageNameAsDomainNameAndTheRestAsFilePart() throws Exception {\n // WHEN\n URL revertPackageNameToURL = revertPackageNameToURL(TEST_VALID_PACKAGE_NAME_WITH_FOUR_FIELDS);\n\n // THEN\n assertThat(\n revertPackageNameToURL,\n is(equalTo(new URL(TEST_EXPECTED_URL_STRING_WITH_VALID_PACKAGE_NAME_WITH_FOUR_FIELDS))));\n }\n}\n"
},
{
"path": "gnr/app/src/test/java/it/necst/grabnrun/PackageNameTrieTest.java",
"content": "package it.necst.grabnrun;\n\nimport static org.hamcrest.MatcherAssert.assertThat;\nimport static org.hamcrest.Matchers.equalTo;\n\nimport com.google.common.base.Optional;\n\nimport org.junit.Before;\nimport org.junit.Test;\nimport org.junit.runner.RunWith;\nimport org.mockito.runners.MockitoJUnitRunner;\n\n@RunWith(MockitoJUnitRunner.class)\npublic class PackageNameTrieTest {\n private static final String PREFIX_OF_TEST_PACKAGE_NAME = \"com.example\";\n private static final String TEST_PACKAGE_NAME =\n PREFIX_OF_TEST_PACKAGE_NAME + \".polimi.application\";\n\n private static final String ANOTHER_TEST_PACKAGE_NAME_WITH_NO_COMMON_PREFIX =\n \"it.test.system.application\";\n private static final String ANOTHER_TEST_PACKAGE_NAME_WITH_A_COMMON_PREFIX =\n PREFIX_OF_TEST_PACKAGE_NAME + \".system.myapplication\";\n\n private PackageNameTrie testPackageNameTrie;\n\n @Before\n public void initializePackageNameTrie() {\n testPackageNameTrie = new PackageNameTrie();\n }\n\n @Test\n public void givenNoEntriesForPackageNameWereGenerated_whenGetPackageNameWithAssociatedCertificate_thenReturnsAnAbsentOptional() {\n // WHEN\n final Optional optionalPackageNameWithAssociatedCertificate =\n testPackageNameTrie.getPackageNameWithAssociatedCertificate(TEST_PACKAGE_NAME);\n\n // THEN\n assertThat(optionalPackageNameWithAssociatedCertificate, equalTo(Optional.absent()));\n }\n\n @Test\n public void givenEntriesForTestPackageNameWereGeneratedButNoPackageNameWasSetToHaveACertificate_whenGetPackageNameWithAssociatedCertificate_thenReturnsAnAbsentOptional() {\n // GIVEN\n testPackageNameTrie.generateEntriesForPackageName(TEST_PACKAGE_NAME);\n\n // WHEN\n final Optional optionalPackageNameWithAssociatedCertificate =\n testPackageNameTrie.getPackageNameWithAssociatedCertificate(TEST_PACKAGE_NAME);\n\n // THEN\n assertThat(optionalPackageNameWithAssociatedCertificate, equalTo(Optional.absent()));\n }\n\n @Test\n public void givenNoEntriesForTestPackageNameWereGeneratedButPackageNameWasSetToHaveACertificate_whenGetPackageNameWithAssociatedCertificate_thenReturnsAnAbsentOptional() {\n // GIVEN\n testPackageNameTrie.setPackageNameHasAssociatedCertificate(TEST_PACKAGE_NAME);\n\n // WHEN\n final Optional optionalPackageNameWithAssociatedCertificate =\n testPackageNameTrie.getPackageNameWithAssociatedCertificate(TEST_PACKAGE_NAME);\n\n // THEN\n assertThat(optionalPackageNameWithAssociatedCertificate, equalTo(Optional.absent()));\n }\n\n @Test\n public void givenEntriesForTestPackageNameWereGeneratedAndTestPackageNameWasSetToHaveACertificate_whenGetPackageNameWithAssociatedCertificate_thenReturnsAnOptionalOfTestPackageName() {\n // GIVEN\n testPackageNameTrie.generateEntriesForPackageName(TEST_PACKAGE_NAME);\n testPackageNameTrie.setPackageNameHasAssociatedCertificate(TEST_PACKAGE_NAME);\n\n // WHEN\n final Optional optionalPackageNameWithAssociatedCertificate =\n testPackageNameTrie.getPackageNameWithAssociatedCertificate(TEST_PACKAGE_NAME);\n\n // THEN\n assertThat(\n optionalPackageNameWithAssociatedCertificate,\n equalTo(Optional.of(TEST_PACKAGE_NAME)));\n }\n\n @Test\n public void givenEntriesForTestPackageNameWereGeneratedAndPrefixOfTestPackageNameWasSetToHaveACertificate_whenGetPackageNameWithAssociatedCertificateWithTestPackageName_thenReturnsAnOptionalOfPrefixOfTestPackageName() {\n // GIVEN\n testPackageNameTrie.generateEntriesForPackageName(TEST_PACKAGE_NAME);\n testPackageNameTrie.setPackageNameHasAssociatedCertificate(PREFIX_OF_TEST_PACKAGE_NAME);\n\n // WHEN\n final Optional optionalPackageNameWithAssociatedCertificate =\n testPackageNameTrie.getPackageNameWithAssociatedCertificate(TEST_PACKAGE_NAME);\n\n // THEN\n assertThat(\n optionalPackageNameWithAssociatedCertificate,\n equalTo(Optional.of(PREFIX_OF_TEST_PACKAGE_NAME)));\n }\n\n @Test\n public void givenEntriesForTestPackageNameWereGeneratedAndTestPackageNameWasSetToHaveACertificate_whenGetPackageNameWithAssociatedCertificateWithPrefixOfTestPackageName_thenReturnsAnAbsentOptional() {\n // GIVEN\n testPackageNameTrie.generateEntriesForPackageName(TEST_PACKAGE_NAME);\n testPackageNameTrie.setPackageNameHasAssociatedCertificate(TEST_PACKAGE_NAME);\n\n // WHEN\n final Optional optionalPackageNameWithAssociatedCertificate =\n testPackageNameTrie.getPackageNameWithAssociatedCertificate(PREFIX_OF_TEST_PACKAGE_NAME);\n\n // THEN\n assertThat(optionalPackageNameWithAssociatedCertificate, equalTo(Optional.absent()));\n }\n\n @Test\n public void givenEntriesForTestPackageNameAndAnotherPackageNameWithNoCommonPrefixWereGeneratedAndPrefixOfTestPackageNameWasSetToHaveACertificate_whenGetPackageNameWithAssociatedCertificateWithTheOtherTestPackageName_thenReturnsAnAbsentOptional() {\n // GIVEN\n testPackageNameTrie.generateEntriesForPackageName(TEST_PACKAGE_NAME);\n testPackageNameTrie.generateEntriesForPackageName(ANOTHER_TEST_PACKAGE_NAME_WITH_NO_COMMON_PREFIX);\n testPackageNameTrie.setPackageNameHasAssociatedCertificate(PREFIX_OF_TEST_PACKAGE_NAME);\n\n // WHEN\n final Optional optionalPackageNameWithAssociatedCertificate =\n testPackageNameTrie.getPackageNameWithAssociatedCertificate(\n ANOTHER_TEST_PACKAGE_NAME_WITH_NO_COMMON_PREFIX);\n\n // THEN\n assertThat(optionalPackageNameWithAssociatedCertificate, equalTo(Optional.absent()));\n }\n\n @Test\n public void givenEntriesForTestPackageNameAndAnotherPackageNameWithACommonPrefixWereGeneratedAndPrefixOfTestPackageNameWasSetToHaveACertificate_whenGetPackageNameWithAssociatedCertificateWithTheOtherTestPackageName_thenReturnsAnOptionalOfPrefixOfTestPackageName() {\n // GIVEN\n testPackageNameTrie.generateEntriesForPackageName(TEST_PACKAGE_NAME);\n testPackageNameTrie.generateEntriesForPackageName(ANOTHER_TEST_PACKAGE_NAME_WITH_A_COMMON_PREFIX);\n testPackageNameTrie.setPackageNameHasAssociatedCertificate(PREFIX_OF_TEST_PACKAGE_NAME);\n\n // WHEN\n final Optional optionalPackageNameWithAssociatedCertificate =\n testPackageNameTrie.getPackageNameWithAssociatedCertificate(\n ANOTHER_TEST_PACKAGE_NAME_WITH_A_COMMON_PREFIX);\n\n // THEN\n assertThat(\n optionalPackageNameWithAssociatedCertificate,\n equalTo(Optional.of(PREFIX_OF_TEST_PACKAGE_NAME)));\n }\n}\n"
},
{
"path": "gnr/app/src/test/java/it/necst/grabnrun/SecureDexClassLoaderTest.java",
"content": "package it.necst.grabnrun;\n\nimport static android.content.Context.CONNECTIVITY_SERVICE;\nimport static android.content.Context.MODE_PRIVATE;\nimport static it.necst.grabnrun.FileHelper.extractFileNameFromFilePath;\nimport static it.necst.grabnrun.SecureDexClassLoader.IMPORTED_CERTIFICATE_PRIVATE_DIRECTORY_NAME;\nimport static it.necst.grabnrun.SecureLoaderFactory.IMPORTED_CONTAINERS_PRIVATE_DIRECTORY_NAME;\nimport static it.necst.grabnrun.SecureLoaderFactory.X_509_CERTIFICATE;\nimport static junit.framework.Assert.assertNotNull;\nimport static junit.framework.Assert.assertTrue;\nimport static org.hamcrest.CoreMatchers.equalTo;\nimport static org.hamcrest.CoreMatchers.is;\nimport static org.hamcrest.CoreMatchers.notNullValue;\nimport static org.hamcrest.CoreMatchers.nullValue;\nimport static org.hamcrest.MatcherAssert.assertThat;\nimport static org.mockito.Matchers.any;\nimport static org.mockito.Matchers.endsWith;\nimport static org.mockito.Matchers.eq;\nimport static org.mockito.Mockito.mock;\nimport static org.mockito.Mockito.verify;\nimport static org.mockito.Mockito.when;\n\nimport android.content.Context;\nimport android.content.pm.PackageManager;\nimport android.net.ConnectivityManager;\nimport android.net.NetworkInfo;\n\nimport com.google.common.collect.ImmutableMap;\nimport com.google.common.collect.ImmutableSet;\n\nimport org.junit.Before;\nimport org.junit.Rule;\nimport org.junit.Test;\nimport org.junit.rules.TemporaryFolder;\nimport org.junit.runner.RunWith;\nimport org.mockito.Mock;\nimport org.robolectric.RobolectricGradleTestRunner;\nimport org.robolectric.annotation.Config;\n\nimport java.io.File;\nimport java.io.FileFilter;\nimport java.io.FileInputStream;\nimport java.io.InputStream;\nimport java.net.URL;\nimport java.security.cert.CertificateException;\nimport java.security.cert.CertificateFactory;\nimport java.security.cert.X509Certificate;\nimport java.util.Collections;\nimport java.util.Map;\n\nimport dalvik.system.DexClassLoader;\nimport dalvik.system.DexFile;\nimport it.necst.grabnrun.shadows.BaseDexClassLoaderShadow;\nimport it.necst.grabnrun.shadows.DexFileShadow;\nimport it.polimi.necst.gnr.BuildConfig;\n\n@RunWith(RobolectricGradleTestRunner.class)\n@Config(constants = BuildConfig.class, shadows={BaseDexClassLoaderShadow.class, DexFileShadow.class})\npublic class SecureDexClassLoaderTest {\n\n private static final String EMPTY_CLASS_NAME = \"\";\n private static final String TEST_REMOTE_CONTAINER_EXTENSION = \".jar\";\n private static final String TEST_REMOTE_CONTAINER_FILE_NAME_WITHOUT_EXTENSION = \"componentModifier\";\n private static final String TEST_REMOTE_CONTAINER_FILE_NAME =\n TEST_REMOTE_CONTAINER_FILE_NAME_WITHOUT_EXTENSION + TEST_REMOTE_CONTAINER_EXTENSION;\n\n private static final String TEST_REMOTE_DOMAIN_URL = \"https://dl.dropboxusercontent.com/u/28681922/\";\n\n private static final String TEST_REMOTE_CONTAINER_URL_AS_STRING =\n TEST_REMOTE_DOMAIN_URL + TEST_REMOTE_CONTAINER_FILE_NAME;\n // This container is a repack of the one above. One of its entries was modified,\n // and now it breaks the signature verification\n private static final String TEST_REMOTE_REPACK_CONTAINER_FILE_NAME = \"componentModifierRepack\";\n private static final String TEST_REMOTE_REPACK_CONTAINER_URL_AS_STRING =\n TEST_REMOTE_DOMAIN_URL + TEST_REMOTE_REPACK_CONTAINER_FILE_NAME + TEST_REMOTE_CONTAINER_EXTENSION;\n\n private static final FileFilterByNameMatch TEST_FILE_FILTER_MATCHING_FILE_NAMED_AS_THE_TEST_CONTAINER =\n new FileFilterByNameMatch(\n TEST_REMOTE_CONTAINER_FILE_NAME_WITHOUT_EXTENSION, TEST_REMOTE_CONTAINER_EXTENSION);\n\n private static final FileFilterByNameMatch TEST_FILE_FILTER_MATCHING_FILE_NAMED_AS_THE_TEST_REPACK_CONTAINER =\n new FileFilterByNameMatch(TEST_REMOTE_REPACK_CONTAINER_FILE_NAME, TEST_REMOTE_CONTAINER_EXTENSION);\n\n private static final String TEST_PACKAGE_NAME = \"it.polimi.componentmodifier\";\n private static final String TEST_A_PACKAGE_NAME_NOT_IN_THE_CONTAINER = \"com.example.application\";\n\n private static final String TEST_CERTIFICATE_FILE_NAME = \"test_cert\";\n private static final String TEST_CERTIFICATE_EXTENSION = \".pem\";\n private static final String TEST_REMOTE_CERTIFICATE_URL_AS_STRING =\n TEST_REMOTE_DOMAIN_URL + TEST_CERTIFICATE_FILE_NAME + TEST_CERTIFICATE_EXTENSION;\n private static final String TEST_A_REMOTE_CERTIFICATE_NOT_USED_TO_SIGN_THE_CONTAINER_URL_AS_STRING =\n TEST_REMOTE_DOMAIN_URL + \"wm\" + TEST_CERTIFICATE_EXTENSION;\n\n // Internally certificates are renamed as the package name they are associated with..\n private static final FileFilterByNameMatch TEST_FILE_FILTER_MATCHING_CERTIFICATE_NAMED_AS_THE_PACKAGE_NAME =\n new FileFilterByNameMatch(TEST_PACKAGE_NAME, TEST_CERTIFICATE_EXTENSION);\n\n private static final String TEST_CLASS_TO_LOAD =\n \"it.polimi.componentmodifier.FirstComponentModifierImpl\";\n // This class is not contained in the remote test container, although it has the same package name\n private static final String TEST_A_CLASS_TO_LOAD_NOT_IN_THE_CONTAINER =\n \"it.polimi.componentmodifier.NotPresentComponentModifierImpl\";\n\n private static final ImmutableSet TEST_SET_OF_CLASSES_IN_THE_REMOTE_CONTAINER = ImmutableSet.of(\n \"it.polimi.componentmodifier.FirstComponentModifierImpl\",\n \"it.polimi.componentmodifier.SecondComponentModifierImpl\",\n \"it.polimi.componentmodifier.SecondComponentModifierImpl$1\");\n\n private static final boolean EAGER_EVALUATION = false;\n private static final boolean LAZY_EVALUATION = true;\n\n @Rule public TemporaryFolder temporaryImportedContainersFolder = new TemporaryFolder();\n @Rule public TemporaryFolder temporaryImportedCertificatesFolder = new TemporaryFolder();\n @Rule public TemporaryFolder temporaryTrustedCertificateFolder = new TemporaryFolder();\n\n @Mock Context mockContext = mock(Context.class);\n @Mock ConnectivityManager mockConnectivityManager = mock(ConnectivityManager.class);\n @Mock NetworkInfo mockNetworkInfo = mock(NetworkInfo.class);\n @Mock PackageManager mockPackageManager = mock(PackageManager.class);\n @Mock ContainerSignatureVerifier mockContainerSignatureVerifier =\n mock(ContainerSignatureVerifier.class);\n\n @Mock DexFile mockDexFile = mock(DexFile.class);\n @Mock DexClassLoader mockDexClassLoader = mock(DexClassLoader.class);\n\n @Before\n public void setupMocksForSecureDexClassLoader() throws Exception {\n when(mockContext.getSystemService(CONNECTIVITY_SERVICE))\n .thenReturn(mockConnectivityManager);\n when(mockConnectivityManager.getActiveNetworkInfo()).thenReturn(mockNetworkInfo);\n when(mockNetworkInfo.isConnected()).thenReturn(true);\n\n when(mockContext.getDir(eq(IMPORTED_CONTAINERS_PRIVATE_DIRECTORY_NAME), eq(MODE_PRIVATE)))\n .thenReturn(temporaryImportedContainersFolder.getRoot());\n when(mockContext.getDir(eq(IMPORTED_CERTIFICATE_PRIVATE_DIRECTORY_NAME), eq(MODE_PRIVATE)))\n .thenReturn(temporaryImportedCertificatesFolder.getRoot());\n\n DexFileShadow.setDexFileShadow(mockDexFile);\n\n // IMPORTANT: Always create a new enumeration for this set!\n // Otherwise, the iterator will return all the objects only for the first test case.\n when(mockDexFile.entries()).thenReturn(\n Collections.enumeration(TEST_SET_OF_CLASSES_IN_THE_REMOTE_CONTAINER));\n\n when(mockContainerSignatureVerifier\n .verifyContainerSignatureAgainstCertificate(\n any(String.class),\n any(X509Certificate.class)))\n .thenReturn(false);\n // IMPORTANT: Do not inline this variable!\n // Otherwise, Mockito will complaint.\n X509Certificate trustedCertificate =\n retrieveAndGenerateTrustedCertificate(TEST_REMOTE_CERTIFICATE_URL_AS_STRING);\n when(mockContainerSignatureVerifier\n .verifyContainerSignatureAgainstCertificate(\n endsWith(TEST_REMOTE_CONTAINER_FILE_NAME),\n eq(trustedCertificate)))\n .thenReturn(true);\n\n when(mockDexClassLoader.loadClass(eq(TEST_A_CLASS_TO_LOAD_NOT_IN_THE_CONTAINER)))\n .thenThrow(new ClassNotFoundException());\n when(mockDexClassLoader.loadClass(eq(TEST_CLASS_TO_LOAD)))\n .thenReturn((Class) \"notRelevantForTheTest\".getClass());\n }\n\n @Test (expected = IllegalArgumentException.class)\n public void givenASecureDexClassLoaderWithAContainerAndACertificateForVerification_whenLoadClassWithAnEmptyClassName_thenThrows() throws Exception {\n // GIVEN\n SecureDexClassLoader secureDexClassLoader = initializeSecureDexClassLoaderWithTestValues(\n downloadRemoteContainerIntoTemporaryImportedContainersFolder(\n TEST_REMOTE_CONTAINER_URL_AS_STRING),\n ImmutableMap.of(TEST_PACKAGE_NAME, new URL(TEST_REMOTE_CERTIFICATE_URL_AS_STRING)),\n EAGER_EVALUATION);\n\n // WHEN\n secureDexClassLoader.loadClass(EMPTY_CLASS_NAME);\n }\n\n @Test\n public void givenASecureDexClassLoaderWithAContainerAndNoCertificateForItsPackageNameForVerification_whenLoadClassInTheContainerWithEagerEvaluation_thenRemovesRetrievedContainerAndReturnsNull() throws Exception {\n // GIVEN\n SecureDexClassLoader secureDexClassLoader = initializeSecureDexClassLoaderWithTestValues(\n downloadRemoteContainerIntoTemporaryImportedContainersFolder(\n TEST_REMOTE_CONTAINER_URL_AS_STRING),\n ImmutableMap.of(\n TEST_A_PACKAGE_NAME_NOT_IN_THE_CONTAINER,\n new URL(TEST_REMOTE_CERTIFICATE_URL_AS_STRING)),\n EAGER_EVALUATION);\n\n // WHEN\n Class loadedClass = secureDexClassLoader.loadClass(TEST_CLASS_TO_LOAD);\n\n // THEN\n assertThatNoFileIsPresentInTheImportedContainersFolderMatchingTheFilter(\n TEST_FILE_FILTER_MATCHING_FILE_NAMED_AS_THE_TEST_CONTAINER);\n assertThat(loadedClass, is(nullValue()));\n }\n\n @Test\n public void givenASecureDexClassLoaderWithAContainerAndNoCertificateForItsPackageNameForVerification_whenLoadClassInTheContainerWithLazyEvaluation_thenImportsRetrievedContainerButReturnsNull() throws Exception {\n // GIVEN\n SecureDexClassLoader secureDexClassLoader = initializeSecureDexClassLoaderWithTestValues(\n downloadRemoteContainerIntoTemporaryImportedContainersFolder(\n TEST_REMOTE_CONTAINER_URL_AS_STRING),\n ImmutableMap.of(\n TEST_A_PACKAGE_NAME_NOT_IN_THE_CONTAINER,\n new URL(TEST_REMOTE_CERTIFICATE_URL_AS_STRING)),\n LAZY_EVALUATION);\n\n // WHEN\n Class loadedClass = secureDexClassLoader.loadClass(TEST_CLASS_TO_LOAD);\n\n // THEN\n assertThatOnlyOneFileIsPresentInTheImportedContainersFolderMatchingTheFilter(\n TEST_FILE_FILTER_MATCHING_FILE_NAMED_AS_THE_TEST_CONTAINER);\n assertThat(loadedClass, is(nullValue()));\n }\n\n @Test\n public void givenASecureDexClassLoaderWithARepackedContainerAndACertificateUsedToSignThatContainerForItsPackageNameForVerification_whenLoadClassInTheContainerWithEagerEvaluation_thenRemovesRetrievedContainerAndReturnsNull() throws Exception {\n // GIVEN\n SecureDexClassLoader secureDexClassLoader = initializeSecureDexClassLoaderWithTestValues(\n downloadRemoteContainerIntoTemporaryImportedContainersFolder(\n TEST_REMOTE_REPACK_CONTAINER_URL_AS_STRING),\n ImmutableMap.of(TEST_PACKAGE_NAME, new URL(TEST_REMOTE_CERTIFICATE_URL_AS_STRING)),\n EAGER_EVALUATION);\n\n // WHEN\n Class loadedClass = secureDexClassLoader.loadClass(TEST_CLASS_TO_LOAD);\n\n // THEN\n assertThatNoFileIsPresentInTheImportedContainersFolderMatchingTheFilter(\n TEST_FILE_FILTER_MATCHING_FILE_NAMED_AS_THE_TEST_REPACK_CONTAINER);\n assertThat(loadedClass, is(nullValue()));\n }\n\n @Test\n public void givenASecureDexClassLoaderWithARepackedContainerAndACertificateUsedToSignThatContainerForItsPackageNameForVerification_whenLoadClassInTheContainerWithLazyEvaluation_thenRemovesRetrievedContainerAndReturnsNull() throws Exception {\n // GIVEN\n SecureDexClassLoader secureDexClassLoader = initializeSecureDexClassLoaderWithTestValues(\n downloadRemoteContainerIntoTemporaryImportedContainersFolder(\n TEST_REMOTE_REPACK_CONTAINER_URL_AS_STRING),\n ImmutableMap.of(TEST_PACKAGE_NAME, new URL(TEST_REMOTE_CERTIFICATE_URL_AS_STRING)),\n LAZY_EVALUATION);\n\n // WHEN\n Class loadedClass = secureDexClassLoader.loadClass(TEST_CLASS_TO_LOAD);\n\n // THEN\n assertThatNoFileIsPresentInTheImportedContainersFolderMatchingTheFilter(\n TEST_FILE_FILTER_MATCHING_FILE_NAMED_AS_THE_TEST_REPACK_CONTAINER);\n assertThat(loadedClass, is(nullValue()));\n }\n\n @Test\n public void givenASecureDexClassLoaderWithAContainerAndACertificateNotUsedForSigningTheContainerForItsPackageNameForVerification_whenLoadClassInTheContainerWithEagerEvaluation_thenRemovesRetrievedContainerAndReturnsNull() throws Exception {\n // GIVEN\n SecureDexClassLoader secureDexClassLoader = initializeSecureDexClassLoaderWithTestValues(\n downloadRemoteContainerIntoTemporaryImportedContainersFolder(\n TEST_REMOTE_CONTAINER_URL_AS_STRING),\n ImmutableMap.of(\n TEST_PACKAGE_NAME,\n new URL(TEST_A_REMOTE_CERTIFICATE_NOT_USED_TO_SIGN_THE_CONTAINER_URL_AS_STRING)),\n EAGER_EVALUATION);\n\n // WHEN\n Class loadedClass = secureDexClassLoader.loadClass(TEST_CLASS_TO_LOAD);\n\n // THEN\n assertThatNoFileIsPresentInTheImportedContainersFolderMatchingTheFilter(\n TEST_FILE_FILTER_MATCHING_FILE_NAMED_AS_THE_TEST_CONTAINER);\n assertThat(loadedClass, is(nullValue()));\n }\n\n @Test\n public void givenASecureDexClassLoaderWithAContainerAndACertificateNotUsedForSigningTheContainerForItsPackageNameForVerification_whenLoadClassInTheContainerWithLazyEvaluation_thenRemovesRetrievedContainerAndReturnsNull() throws Exception {\n // GIVEN\n SecureDexClassLoader secureDexClassLoader = initializeSecureDexClassLoaderWithTestValues(\n downloadRemoteContainerIntoTemporaryImportedContainersFolder(\n TEST_REMOTE_CONTAINER_URL_AS_STRING),\n ImmutableMap.of(\n TEST_PACKAGE_NAME,\n new URL(TEST_A_REMOTE_CERTIFICATE_NOT_USED_TO_SIGN_THE_CONTAINER_URL_AS_STRING)),\n LAZY_EVALUATION);\n\n // WHEN\n Class loadedClass = secureDexClassLoader.loadClass(TEST_CLASS_TO_LOAD);\n\n // THEN\n assertThatNoFileIsPresentInTheImportedContainersFolderMatchingTheFilter(\n TEST_FILE_FILTER_MATCHING_FILE_NAMED_AS_THE_TEST_CONTAINER);\n assertThat(loadedClass, is(nullValue()));\n }\n\n @Test (expected = ClassNotFoundException.class)\n public void givenASecureDexClassLoaderWithAContainerAndACertificateUsedToSignThatContainerForItsPackageNameForVerification_whenLoadClassNotInTheContainerWithEagerEvaluation_thenImportRetrievedContainerButThrows() throws Exception {\n // GIVEN\n SecureDexClassLoader secureDexClassLoader = initializeSecureDexClassLoaderWithTestValues(\n downloadRemoteContainerIntoTemporaryImportedContainersFolder(\n TEST_REMOTE_CONTAINER_URL_AS_STRING),\n ImmutableMap.of(\n TEST_PACKAGE_NAME,\n new URL(TEST_REMOTE_CERTIFICATE_URL_AS_STRING)),\n EAGER_EVALUATION);\n\n // WHEN + THEN\n assertThatOnlyOneFileIsPresentInTheImportedContainersFolderMatchingTheFilter(\n TEST_FILE_FILTER_MATCHING_FILE_NAMED_AS_THE_TEST_CONTAINER);\n secureDexClassLoader.loadClass(TEST_A_CLASS_TO_LOAD_NOT_IN_THE_CONTAINER);\n }\n\n @Test (expected = ClassNotFoundException.class)\n public void givenASecureDexClassLoaderWithAContainerAndACertificateUsedToSignThatContainerForItsPackageNameForVerification_whenLoadClassNotInTheContainerWithLazyEvaluation_thenImportRetrievedContainerButThrows() throws Exception {\n // GIVEN\n SecureDexClassLoader secureDexClassLoader = initializeSecureDexClassLoaderWithTestValues(\n downloadRemoteContainerIntoTemporaryImportedContainersFolder(\n TEST_REMOTE_CONTAINER_URL_AS_STRING),\n ImmutableMap.of(\n TEST_PACKAGE_NAME,\n new URL(TEST_REMOTE_CERTIFICATE_URL_AS_STRING)),\n LAZY_EVALUATION);\n\n // WHEN + THEN\n assertThatOnlyOneFileIsPresentInTheImportedContainersFolderMatchingTheFilter(\n TEST_FILE_FILTER_MATCHING_FILE_NAMED_AS_THE_TEST_CONTAINER);\n secureDexClassLoader.loadClass(TEST_A_CLASS_TO_LOAD_NOT_IN_THE_CONTAINER);\n }\n\n @Test\n public void givenASecureDexClassLoaderWithAContainerAndACertificateUsedToSignThatContainerForItsPackageNameForVerification_whenLoadClassInTheContainerWithEagerEvaluation_thenImportRetrievedContainerAndReturnsAClassInstance() throws Exception {\n // GIVEN\n SecureDexClassLoader secureDexClassLoader = initializeSecureDexClassLoaderWithTestValues(\n downloadRemoteContainerIntoTemporaryImportedContainersFolder(\n TEST_REMOTE_CONTAINER_URL_AS_STRING),\n ImmutableMap.of(\n TEST_PACKAGE_NAME,\n new URL(TEST_REMOTE_CERTIFICATE_URL_AS_STRING)),\n EAGER_EVALUATION);\n\n // WHEN\n Class loadedClass = secureDexClassLoader.loadClass(TEST_CLASS_TO_LOAD);\n\n // THEN\n assertThatOnlyOneFileIsPresentInTheImportedContainersFolderMatchingTheFilter(\n TEST_FILE_FILTER_MATCHING_FILE_NAMED_AS_THE_TEST_CONTAINER);\n verify(mockDexClassLoader).loadClass(eq(TEST_CLASS_TO_LOAD));\n assertThat(loadedClass, is(notNullValue()));\n }\n\n @Test\n public void givenASecureDexClassLoaderWithAContainerAndACertificateUsedToSignThatContainerForItsPackageNameForVerification_whenLoadClassInTheContainerWithLazyEvaluation_thenImportRetrievedContainerAndReturnsAClassInstance() throws Exception {\n // GIVEN\n SecureDexClassLoader secureDexClassLoader = initializeSecureDexClassLoaderWithTestValues(\n downloadRemoteContainerIntoTemporaryImportedContainersFolder(\n TEST_REMOTE_CONTAINER_URL_AS_STRING),\n ImmutableMap.of(\n TEST_PACKAGE_NAME,\n new URL(TEST_REMOTE_CERTIFICATE_URL_AS_STRING)),\n LAZY_EVALUATION);\n\n // WHEN\n Class loadedClass = secureDexClassLoader.loadClass(TEST_CLASS_TO_LOAD);\n\n // THEN\n assertThatOnlyOneFileIsPresentInTheImportedContainersFolderMatchingTheFilter(\n TEST_FILE_FILTER_MATCHING_FILE_NAMED_AS_THE_TEST_CONTAINER);\n verify(mockDexClassLoader).loadClass(eq(TEST_CLASS_TO_LOAD));\n assertThat(loadedClass, is(notNullValue()));\n }\n\n @Test\n public void givenASecureDexClassLoaderWithAnAPKContainerAndACertificateUsedToSignThatContainerForItsPackageNameForVerification_whenLoadMultipleClassesInTheContainerWhosePackageNameHasTheVerifiedOneAsPrefix_thenReturnsMultipleNotNullClassInstances() throws Exception {\n // GIVEN\n final String testRemoteContainerName = \"CardReaderApplication-release.apk\";\n final String testRemoteApkContainerUrlAsString =\n \"https://dl.dropboxusercontent.com/s/8s840gb9qhhr843/\" + testRemoteContainerName;\n final String testRemoteCertificateUrlAsString =\n \"https://dl.dropboxusercontent.com/s/ala85tq3ocimgi9/cardReaderTestCertificate.pem\";\n\n final String testCommonPrefixPackageName = \"com.example.android\";\n final String testFirstActivityClassToLoad = \"com.example.android.cardreader.MainActivity\";\n final String testSecondActivityClassToLoad = \"com.example.android.common.activities.SampleActivityBase\";\n\n // When reading the classes stored in the Dex file, return\n // the set with the two classes to load\n when(mockDexFile.entries()).thenReturn(\n Collections.enumeration(\n ImmutableSet.of(testFirstActivityClassToLoad, testSecondActivityClassToLoad)));\n when(mockDexClassLoader.loadClass(eq(testFirstActivityClassToLoad)))\n .thenReturn((Class) \"notRelevantForTheTest\".getClass());\n when(mockDexClassLoader.loadClass(eq(testSecondActivityClassToLoad)))\n .thenReturn((Class) \"notRelevantForTheTest\".getClass());\n\n // IMPORTANT: Do not inline this variable!\n // Otherwise, Mockito will complaint.\n X509Certificate trustedCertificate =\n retrieveAndGenerateTrustedCertificate(testRemoteCertificateUrlAsString);\n when(mockContainerSignatureVerifier\n .verifyContainerSignatureAgainstCertificate(\n endsWith(testRemoteContainerName),\n eq(trustedCertificate)))\n .thenReturn(true);\n\n SecureDexClassLoader secureDexClassLoader = initializeSecureDexClassLoaderWithTestValues(\n downloadRemoteContainerIntoTemporaryImportedContainersFolder(\n testRemoteApkContainerUrlAsString),\n ImmutableMap.of(\n testCommonPrefixPackageName,\n new URL(testRemoteCertificateUrlAsString)),\n LAZY_EVALUATION);\n\n // WHEN\n Class firstLoadedActivityClass = secureDexClassLoader.loadClass(testFirstActivityClassToLoad);\n Class secondLoadedActivityClass = secureDexClassLoader.loadClass(testSecondActivityClassToLoad);\n\n // THEN\n verify(mockDexClassLoader).loadClass(eq(testFirstActivityClassToLoad));\n assertThat(firstLoadedActivityClass, is(notNullValue()));\n verify(mockDexClassLoader).loadClass(eq(testSecondActivityClassToLoad));\n assertThat(secondLoadedActivityClass, is(notNullValue()));\n }\n\n @Test\n public void givenASecureDexClassLoaderWithAContainerAndACertificateAssociatedToIt_whenWipeOutPrivateAppCachedDataForNoneContainersAndCertificates_thenAllImportedFilesAreNotErasedAndLoadClassReturnsAClass() throws Exception {\n // GIVEN\n SecureDexClassLoader secureDexClassLoader = initializeSecureDexClassLoaderWithTestValues(\n downloadRemoteContainerIntoTemporaryImportedContainersFolder(\n TEST_REMOTE_CONTAINER_URL_AS_STRING),\n ImmutableMap.of(\n TEST_PACKAGE_NAME,\n new URL(TEST_REMOTE_CERTIFICATE_URL_AS_STRING)),\n EAGER_EVALUATION);\n\n // WHEN\n secureDexClassLoader.wipeOutPrivateAppCachedData(false, false);\n\n // THEN\n assertThatOnlyOneFileIsPresentInTheImportedContainersFolderMatchingTheFilter(\n TEST_FILE_FILTER_MATCHING_FILE_NAMED_AS_THE_TEST_CONTAINER);\n assertThatOnlyOneFileIsPresentInTheImportedCertificateFolderMatchingTheFilter(\n TEST_FILE_FILTER_MATCHING_CERTIFICATE_NAMED_AS_THE_PACKAGE_NAME);\n assertThat(secureDexClassLoader.loadClass(TEST_CLASS_TO_LOAD), is(notNullValue()));\n }\n\n @Test\n public void givenASecureDexClassLoaderWithAContainerAndACertificateAssociatedToIt_whenWipeOutPrivateAppCachedDataForContainers_thenAllImportedContainersAreErasedAndLoadClassReturnsNull() throws Exception {\n // GIVEN\n SecureDexClassLoader secureDexClassLoader = initializeSecureDexClassLoaderWithTestValues(\n downloadRemoteContainerIntoTemporaryImportedContainersFolder(\n TEST_REMOTE_CONTAINER_URL_AS_STRING),\n ImmutableMap.of(\n TEST_PACKAGE_NAME,\n new URL(TEST_REMOTE_CERTIFICATE_URL_AS_STRING)),\n EAGER_EVALUATION);\n\n // WHEN\n secureDexClassLoader.wipeOutPrivateAppCachedData(true, false);\n\n // THEN\n assertThatNoFileIsPresentInTheImportedContainersFolderMatchingTheFilter(\n TEST_FILE_FILTER_MATCHING_FILE_NAMED_AS_THE_TEST_CONTAINER);\n assertThatOnlyOneFileIsPresentInTheImportedCertificateFolderMatchingTheFilter(\n TEST_FILE_FILTER_MATCHING_CERTIFICATE_NAMED_AS_THE_PACKAGE_NAME);\n assertThat(secureDexClassLoader.loadClass(TEST_CLASS_TO_LOAD), is(nullValue()));\n }\n\n @Test\n public void givenASecureDexClassLoaderWithAContainerAndACertificateAssociatedToIt_whenWipeOutPrivateAppCachedDataForCertificates_thenAllImportedCertificatesAreErasedAndLoadClassReturnsNull() throws Exception {\n // GIVEN\n SecureDexClassLoader secureDexClassLoader = initializeSecureDexClassLoaderWithTestValues(\n downloadRemoteContainerIntoTemporaryImportedContainersFolder(\n TEST_REMOTE_CONTAINER_URL_AS_STRING),\n ImmutableMap.of(\n TEST_PACKAGE_NAME,\n new URL(TEST_REMOTE_CERTIFICATE_URL_AS_STRING)),\n EAGER_EVALUATION);\n\n // WHEN\n secureDexClassLoader.wipeOutPrivateAppCachedData(false, true);\n\n // THEN\n assertThatOnlyOneFileIsPresentInTheImportedContainersFolderMatchingTheFilter(\n TEST_FILE_FILTER_MATCHING_FILE_NAMED_AS_THE_TEST_CONTAINER);\n assertThatNoFileIsPresentInTheImportedCertificateFolderMatchingTheFilter(\n TEST_FILE_FILTER_MATCHING_CERTIFICATE_NAMED_AS_THE_PACKAGE_NAME);\n assertThat(secureDexClassLoader.loadClass(TEST_CLASS_TO_LOAD), is(nullValue()));\n }\n\n @Test\n public void givenASecureDexClassLoaderWithAContainerAndACertificateAssociatedToIt_whenWipeOutPrivateAppCachedDataForBothContainersAndCertificates_thenAllImportedFilesAreErasedAndLoadClassReturnsNull() throws Exception {\n // GIVEN\n SecureDexClassLoader secureDexClassLoader = initializeSecureDexClassLoaderWithTestValues(\n downloadRemoteContainerIntoTemporaryImportedContainersFolder(\n TEST_REMOTE_CONTAINER_URL_AS_STRING),\n ImmutableMap.of(\n TEST_PACKAGE_NAME,\n new URL(TEST_REMOTE_CERTIFICATE_URL_AS_STRING)),\n EAGER_EVALUATION);\n\n // WHEN\n secureDexClassLoader.wipeOutPrivateAppCachedData(true, true);\n\n // THEN\n assertThatNoFileIsPresentInTheImportedContainersFolderMatchingTheFilter(\n TEST_FILE_FILTER_MATCHING_FILE_NAMED_AS_THE_TEST_CONTAINER);\n assertThatNoFileIsPresentInTheImportedCertificateFolderMatchingTheFilter(\n TEST_FILE_FILTER_MATCHING_CERTIFICATE_NAMED_AS_THE_PACKAGE_NAME);\n assertThat(secureDexClassLoader.loadClass(TEST_CLASS_TO_LOAD), is(nullValue()));\n }\n\n private SecureDexClassLoader initializeSecureDexClassLoaderWithTestValues(\n String dexPathWithLocalContainers,\n Map sanitizedPackageNameToCertificateURLMap,\n boolean performLazyEvaluation) throws CertificateException {\n return new SecureDexClassLoader(\n dexPathWithLocalContainers,\n mockDexClassLoader,\n mockContext,\n sanitizedPackageNameToCertificateURLMap,\n performLazyEvaluation,\n mockContainerSignatureVerifier,\n CertificateFactory.getInstance(X_509_CERTIFICATE));\n }\n\n private String downloadRemoteContainerIntoTemporaryImportedContainersFolder(\n String remoteContainerURLAsString) throws Exception {\n return downloadRemoteResourceIntoTemporaryFolder(\n remoteContainerURLAsString, temporaryImportedContainersFolder);\n }\n\n private X509Certificate retrieveAndGenerateTrustedCertificate(\n String remoteCertificateURLAsString) throws Exception {\n String trustedCertificatePath = downloadRemoteResourceIntoTemporaryFolder(\n remoteCertificateURLAsString, temporaryTrustedCertificateFolder);\n\n InputStream inStream = new FileInputStream(trustedCertificatePath);\n X509Certificate trustedCertificate = (X509Certificate) CertificateFactory\n .getInstance(X_509_CERTIFICATE)\n .generateCertificate(inStream);\n\n assertNotNull(inStream);\n inStream.close();\n\n return trustedCertificate;\n }\n\n private String downloadRemoteResourceIntoTemporaryFolder(\n String remoteURLAsString,\n TemporaryFolder temporaryFolder) throws Exception {\n URL remoteURL = new URL(remoteURLAsString);\n\n String localContainerURI = temporaryFolder.getRoot().toString()\n + File.separator + extractFileNameFromFilePath(remoteURL.getPath());\n\n boolean isRemoteResourceSuccessful = new FileDownloader(mockContext).downloadRemoteResource(\n remoteURL,\n localContainerURI,\n false);\n\n assertTrue(isRemoteResourceSuccessful);\n return localContainerURI;\n }\n\n private void assertThatNoFileIsPresentInTheImportedContainersFolderMatchingTheFilter(\n FileFilter testFileFilter) {\n assertThatFileIsPresentInTheTemporaryFolderMatchingTheFilterInQuantity(\n temporaryImportedContainersFolder, testFileFilter, 0);\n }\n\n private void assertThatOnlyOneFileIsPresentInTheImportedContainersFolderMatchingTheFilter(\n FileFilter testFileFilter) {\n assertThatFileIsPresentInTheTemporaryFolderMatchingTheFilterInQuantity(\n temporaryImportedContainersFolder, testFileFilter, 1);\n }\n\n private void assertThatNoFileIsPresentInTheImportedCertificateFolderMatchingTheFilter(\n FileFilterByNameMatch testFileFilter) {\n assertThatFileIsPresentInTheTemporaryFolderMatchingTheFilterInQuantity(\n temporaryImportedCertificatesFolder, testFileFilter, 0);\n }\n\n private void assertThatOnlyOneFileIsPresentInTheImportedCertificateFolderMatchingTheFilter(\n FileFilterByNameMatch testFileFilter) {\n assertThatFileIsPresentInTheTemporaryFolderMatchingTheFilterInQuantity(\n temporaryImportedCertificatesFolder, testFileFilter, 1);\n }\n\n private void assertThatFileIsPresentInTheTemporaryFolderMatchingTheFilterInQuantity(\n TemporaryFolder temporaryFolder, FileFilter testFileFilter, int numberOfMatches) {\n assertThat(\n temporaryFolder\n .getRoot()\n .listFiles(testFileFilter)\n .length,\n is(equalTo(numberOfMatches)));\n }\n}\n"
},
{
"path": "gnr/app/src/test/java/it/necst/grabnrun/SecureLoaderFactoryTest.java",
"content": "package it.necst.grabnrun;\n\nimport static android.content.Context.CONNECTIVITY_SERVICE;\nimport static android.content.Context.MODE_PRIVATE;\nimport static it.necst.grabnrun.SecureLoaderFactory.IMPORTED_CONTAINERS_PRIVATE_DIRECTORY_NAME;\nimport static it.necst.grabnrun.SecureLoaderFactory.OUTPUT_DEX_CLASSES_DIRECTORY_NAME;\nimport static junit.framework.Assert.assertTrue;\nimport static org.hamcrest.CoreMatchers.is;\nimport static org.hamcrest.CoreMatchers.notNullValue;\nimport static org.hamcrest.MatcherAssert.assertThat;\nimport static org.mockito.Matchers.eq;\nimport static org.mockito.Mockito.mock;\nimport static org.mockito.Mockito.when;\n\nimport android.content.Context;\nimport android.content.pm.PackageManager;\nimport android.net.ConnectivityManager;\nimport android.net.NetworkInfo;\n\nimport com.google.common.collect.ImmutableMap;\nimport com.google.common.collect.ImmutableSet;\nimport com.google.common.collect.Maps;\n\nimport org.junit.Before;\nimport org.junit.Rule;\nimport org.junit.Test;\nimport org.junit.rules.TemporaryFolder;\nimport org.junit.runner.RunWith;\nimport org.mockito.Mock;\nimport org.robolectric.RobolectricGradleTestRunner;\nimport org.robolectric.annotation.Config;\n\nimport java.io.File;\nimport java.net.URL;\nimport java.util.Collections;\nimport java.util.Enumeration;\nimport java.util.Map;\n\nimport dalvik.system.DexFile;\nimport it.necst.grabnrun.shadows.BaseDexClassLoaderShadow;\nimport it.necst.grabnrun.shadows.DexFileShadow;\nimport it.polimi.necst.gnr.BuildConfig;\n\n@RunWith(RobolectricGradleTestRunner.class)\n@Config(constants = BuildConfig.class, shadows={BaseDexClassLoaderShadow.class, DexFileShadow.class})\npublic class SecureLoaderFactoryTest {\n\n private static final String EMPTY_DEX_PATH = \"\";\n private static final String TEST_REMOTE_CONTAINER_URL_AS_STRING =\n \"https://dl.dropboxusercontent.com/u/28681922/componentModifier.jar\";\n private static final String TEST_PACKAGE_NAME = \"com.example.application\";\n\n private static final String TEST_REMOTE_CERTIFICATE_URL_AS_STRING =\n \"https://dl.dropboxusercontent.com/u/28681922/test_cert.pem\";\n\n private static final ImmutableSet TEST_SET_OF_CLASSES_IN_THE_REMOTE_CONTAINER = ImmutableSet.of(\n \"it.polimi.componentmodifier.FirstComponentModifierImpl\",\n \"it.polimi.componentmodifier.SecondComponentModifierImpl\",\n \"it.polimi.componentmodifier.SecondComponentModifierImpl$1\");\n\n @Rule public TemporaryFolder temporaryImportedContainersFolder = new TemporaryFolder();\n @Rule public TemporaryFolder temporaryOutputDexFolder = new TemporaryFolder();\n @Rule public TemporaryFolder temporaryFolderHoldingALocalContainer = new TemporaryFolder();\n\n @Mock Context mockContext = mock(Context.class);\n @Mock ConnectivityManager mockConnectivityManager = mock(ConnectivityManager.class);\n @Mock NetworkInfo mockNetworkInfo = mock(NetworkInfo.class);\n @Mock ClassLoader mockClassLoader = mock(ClassLoader.class);\n @Mock PackageManager mockPackageManager = mock(PackageManager.class);\n\n @Mock DexFile mockDexFile = mock(DexFile.class);\n\n SecureLoaderFactory testSecureLoaderFactory;\n\n @Before\n public void setupMocksForSecureLoaderFactory() {\n when(mockContext.getSystemService(CONNECTIVITY_SERVICE))\n .thenReturn(mockConnectivityManager);\n when(mockConnectivityManager.getActiveNetworkInfo()).thenReturn(mockNetworkInfo);\n when(mockNetworkInfo.isConnected()).thenReturn(true);\n\n when(mockContext.getPackageManager())\n .thenReturn(mockPackageManager);\n\n when(mockContext.getDir(eq(IMPORTED_CONTAINERS_PRIVATE_DIRECTORY_NAME), eq(MODE_PRIVATE)))\n .thenReturn(temporaryImportedContainersFolder.getRoot());\n when(mockContext.getDir(eq(OUTPUT_DEX_CLASSES_DIRECTORY_NAME), eq(MODE_PRIVATE)))\n .thenReturn(temporaryOutputDexFolder.getRoot());\n\n testSecureLoaderFactory = new SecureLoaderFactory(mockContext);\n\n // IMPORTANT: Always create a new enumeration for this set!\n // Otherwise, the iterator will return all the objects only for the first test case.\n when(mockDexFile.entries()).thenReturn(\n Collections.enumeration(TEST_SET_OF_CLASSES_IN_THE_REMOTE_CONTAINER));\n\n DexFileShadow.setDexFileShadow(mockDexFile);\n }\n\n @Test (expected = IllegalArgumentException.class)\n public void givenANonPositiveNumberOfDaysBeforeContainerCacheExpiration_whenCreateSecureLoaderFactory_thenThrows() {\n // GIVEN\n int notPositiveNumberOfDaysBeforeContainerCacheExpiration = 0;\n\n // WHEN\n new SecureLoaderFactory(mockContext, notPositiveNumberOfDaysBeforeContainerCacheExpiration);\n }\n\n @Test (expected = IllegalArgumentException.class)\n public void givenAnEmptyDexPath_whenCreateDexClassLoader_thenThrows() throws Exception {\n // WHEN\n testSecureLoaderFactory.createDexClassLoader(\n EMPTY_DEX_PATH,\n null,\n mockClassLoader,\n ImmutableMap.of(TEST_PACKAGE_NAME, new URL(TEST_REMOTE_CERTIFICATE_URL_AS_STRING)));\n }\n\n @Test (expected = IllegalArgumentException.class)\n public void givenADexPathPointingToARemoteResourceButThePackageNameToCertificateMapIsEmpty_whenCreateDexClassLoader_thenThrows() throws Exception {\n // GIVEN\n ImmutableMap emptyPackageNameToCertificateMap = ImmutableMap.of();\n\n // WHEN\n testSecureLoaderFactory.createDexClassLoader(\n TEST_REMOTE_CONTAINER_URL_AS_STRING,\n null,\n mockClassLoader,\n emptyPackageNameToCertificateMap);\n }\n\n @Test\n public void givenADexPathPointingToARemoteResourceAndThePackageNameToCertificateMapContainsPackageNamesAssociatedToNullValues_whenCreateDexClassLoader_thenReturnsASecureDexClassLoaderObject() throws Exception {\n // GIVEN\n Map packageNamePointingToNullCertificateMap = Maps.newHashMap();\n packageNamePointingToNullCertificateMap.put(TEST_PACKAGE_NAME, null);\n\n // WHEN\n SecureDexClassLoader secureDexClassLoader = testSecureLoaderFactory.createDexClassLoader(\n TEST_REMOTE_CONTAINER_URL_AS_STRING,\n null,\n mockClassLoader,\n packageNamePointingToNullCertificateMap);\n\n // THEN\n assertThat(secureDexClassLoader, is(notNullValue()));\n }\n\n @Test\n public void givenADexPathPointingToARemoteResourceAndThePackageNameOfTheTargetClassHasACertificate_whenCreateDexClassLoader_thenReturnsASecureDexClassLoaderObject() throws Exception {\n // WHEN\n SecureDexClassLoader secureDexClassLoader = testSecureLoaderFactory.createDexClassLoader(\n TEST_REMOTE_CONTAINER_URL_AS_STRING,\n null,\n mockClassLoader,\n ImmutableMap.of(TEST_PACKAGE_NAME, new URL(TEST_REMOTE_CERTIFICATE_URL_AS_STRING)));\n\n // THEN\n assertThat(secureDexClassLoader, is(notNullValue()));\n }\n\n @Test\n public void givenADexPathPointingToALocalResourceAndThePackageNameOfTheTargetClassHasACertificate_whenCreateDexClassLoader_thenReturnsASecureDexClassLoaderObject() throws Exception {\n // GIVEN\n String testRemoteContainerURI =\n downloadRemoteContainerIntoTemporaryFolderHoldingALocalContainer();\n\n // WHEN\n SecureDexClassLoader secureDexClassLoader = testSecureLoaderFactory.createDexClassLoader(\n testRemoteContainerURI,\n null,\n mockClassLoader,\n ImmutableMap.of(TEST_PACKAGE_NAME, new URL(TEST_REMOTE_CERTIFICATE_URL_AS_STRING)));\n\n // THEN\n assertThat(secureDexClassLoader, is(notNullValue()));\n }\n\n private String downloadRemoteContainerIntoTemporaryFolderHoldingALocalContainer() throws Exception {\n String localContainerURI = temporaryFolderHoldingALocalContainer.getRoot().toString()\n + File.separator + \"componentModifier.jar\";\n\n boolean isRemoteResourceSuccessful = new FileDownloader(mockContext).downloadRemoteResource(\n new URL(TEST_REMOTE_CONTAINER_URL_AS_STRING),\n localContainerURI,\n false);\n\n assertTrue(isRemoteResourceSuccessful);\n return localContainerURI;\n }\n}\n"
},
{
"path": "gnr/app/src/test/java/it/necst/grabnrun/shadows/BaseDexClassLoaderShadow.java",
"content": "package it.necst.grabnrun.shadows;\n\nimport org.robolectric.annotation.Implements;\nimport org.robolectric.internal.Shadow;\n\nimport java.io.File;\n\nimport dalvik.system.BaseDexClassLoader;\n\n@Implements(BaseDexClassLoader.class)\npublic class BaseDexClassLoaderShadow extends Shadow {\n\n private String dexPath;\n private File optimizedDirectory;\n private String libraryPath;\n private ClassLoader parent;\n\n public void __constructor__(\n String dexPath,\n File optimizedDirectory,\n String libraryPath,\n ClassLoader parent) {\n this.dexPath = dexPath;\n this.optimizedDirectory = optimizedDirectory;\n this.libraryPath = libraryPath;\n this.parent = parent;\n }\n}\n"
},
{
"path": "gnr/app/src/test/java/it/necst/grabnrun/shadows/DexFileShadow.java",
"content": "package it.necst.grabnrun.shadows;\n\nimport org.robolectric.annotation.Implementation;\nimport org.robolectric.annotation.Implements;\n\nimport java.io.IOException;\nimport java.util.Enumeration;\n\nimport dalvik.system.DexFile;\n\n@Implements(DexFile.class)\npublic class DexFileShadow {\n private static DexFile dexFile;\n\n public static void setDexFileShadow(DexFile dexFile) {\n DexFileShadow.dexFile = dexFile;\n }\n\n @Implementation\n public static DexFile loadDex(String sourcePathName, String outputPathName, int flags) throws IOException {\n return dexFile;\n }\n\n @Implementation\n public Enumeration entries() {\n return dexFile.entries();\n }\n}\n"
},
{
"path": "gnr/build.gradle",
"content": "// Top-level build file where you can add configuration options common to all sub-projects/modules.\nbuildscript {\n repositories {\n jcenter()\n }\n dependencies {\n classpath 'com.android.tools.build:gradle:1.3.0'\n }\n}\n\nallprojects {\n repositories {\n jcenter()\n mavenCentral()\n }\n}\n"
},
{
"path": "gnr/gradle/wrapper/gradle-wrapper.properties",
"content": "#Wed Apr 10 15:27:10 PDT 2013\ndistributionBase=GRADLE_USER_HOME\ndistributionPath=wrapper/dists\nzipStoreBase=GRADLE_USER_HOME\nzipStorePath=wrapper/dists\ndistributionUrl=https\\://services.gradle.org/distributions/gradle-2.2.1-all.zip\n"
},
{
"path": "gnr/gradle-app.setting",
"content": "\n\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n"
},
{
"path": "gnr/gradlew",
"content": "#!/usr/bin/env bash\n\n##############################################################################\n##\n## Gradle start up script for UN*X\n##\n##############################################################################\n\n# Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script.\nDEFAULT_JVM_OPTS=\"\"\n\nAPP_NAME=\"Gradle\"\nAPP_BASE_NAME=`basename \"$0\"`\n\n# Use the maximum available, or set MAX_FD != -1 to use that value.\nMAX_FD=\"maximum\"\n\nwarn ( ) {\n echo \"$*\"\n}\n\ndie ( ) {\n echo\n echo \"$*\"\n echo\n exit 1\n}\n\n# OS specific support (must be 'true' or 'false').\ncygwin=false\nmsys=false\ndarwin=false\ncase \"`uname`\" in\n CYGWIN* )\n cygwin=true\n ;;\n Darwin* )\n darwin=true\n ;;\n MINGW* )\n msys=true\n ;;\nesac\n\n# For Cygwin, ensure paths are in UNIX format before anything is touched.\nif $cygwin ; then\n [ -n \"$JAVA_HOME\" ] && JAVA_HOME=`cygpath --unix \"$JAVA_HOME\"`\nfi\n\n# Attempt to set APP_HOME\n# Resolve links: $0 may be a link\nPRG=\"$0\"\n# Need this for relative symlinks.\nwhile [ -h \"$PRG\" ] ; do\n ls=`ls -ld \"$PRG\"`\n link=`expr \"$ls\" : '.*-> \\(.*\\)$'`\n if expr \"$link\" : '/.*' > /dev/null; then\n PRG=\"$link\"\n else\n PRG=`dirname \"$PRG\"`\"/$link\"\n fi\ndone\nSAVED=\"`pwd`\"\ncd \"`dirname \\\"$PRG\\\"`/\" >&-\nAPP_HOME=\"`pwd -P`\"\ncd \"$SAVED\" >&-\n\nCLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar\n\n# Determine the Java command to use to start the JVM.\nif [ -n \"$JAVA_HOME\" ] ; then\n if [ -x \"$JAVA_HOME/jre/sh/java\" ] ; then\n # IBM's JDK on AIX uses strange locations for the executables\n JAVACMD=\"$JAVA_HOME/jre/sh/java\"\n else\n JAVACMD=\"$JAVA_HOME/bin/java\"\n fi\n if [ ! -x \"$JAVACMD\" ] ; then\n die \"ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME\n\nPlease set the JAVA_HOME variable in your environment to match the\nlocation of your Java installation.\"\n fi\nelse\n JAVACMD=\"java\"\n which java >/dev/null 2>&1 || die \"ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH.\n\nPlease set the JAVA_HOME variable in your environment to match the\nlocation of your Java installation.\"\nfi\n\n# Increase the maximum file descriptors if we can.\nif [ \"$cygwin\" = \"false\" -a \"$darwin\" = \"false\" ] ; then\n MAX_FD_LIMIT=`ulimit -H -n`\n if [ $? -eq 0 ] ; then\n if [ \"$MAX_FD\" = \"maximum\" -o \"$MAX_FD\" = \"max\" ] ; then\n MAX_FD=\"$MAX_FD_LIMIT\"\n fi\n ulimit -n $MAX_FD\n if [ $? -ne 0 ] ; then\n warn \"Could not set maximum file descriptor limit: $MAX_FD\"\n fi\n else\n warn \"Could not query maximum file descriptor limit: $MAX_FD_LIMIT\"\n fi\nfi\n\n# For Darwin, add options to specify how the application appears in the dock\nif $darwin; then\n GRADLE_OPTS=\"$GRADLE_OPTS \\\"-Xdock:name=$APP_NAME\\\" \\\"-Xdock:icon=$APP_HOME/media/gradle.icns\\\"\"\nfi\n\n# For Cygwin, switch paths to Windows format before running java\nif $cygwin ; then\n APP_HOME=`cygpath --path --mixed \"$APP_HOME\"`\n CLASSPATH=`cygpath --path --mixed \"$CLASSPATH\"`\n\n # We build the pattern for arguments to be converted via cygpath\n ROOTDIRSRAW=`find -L / -maxdepth 1 -mindepth 1 -type d 2>/dev/null`\n SEP=\"\"\n for dir in $ROOTDIRSRAW ; do\n ROOTDIRS=\"$ROOTDIRS$SEP$dir\"\n SEP=\"|\"\n done\n OURCYGPATTERN=\"(^($ROOTDIRS))\"\n # Add a user-defined pattern to the cygpath arguments\n if [ \"$GRADLE_CYGPATTERN\" != \"\" ] ; then\n OURCYGPATTERN=\"$OURCYGPATTERN|($GRADLE_CYGPATTERN)\"\n fi\n # Now convert the arguments - kludge to limit ourselves to /bin/sh\n i=0\n for arg in \"$@\" ; do\n CHECK=`echo \"$arg\"|egrep -c \"$OURCYGPATTERN\" -`\n CHECK2=`echo \"$arg\"|egrep -c \"^-\"` ### Determine if an option\n\n if [ $CHECK -ne 0 ] && [ $CHECK2 -eq 0 ] ; then ### Added a condition\n eval `echo args$i`=`cygpath --path --ignore --mixed \"$arg\"`\n else\n eval `echo args$i`=\"\\\"$arg\\\"\"\n fi\n i=$((i+1))\n done\n case $i in\n (0) set -- ;;\n (1) set -- \"$args0\" ;;\n (2) set -- \"$args0\" \"$args1\" ;;\n (3) set -- \"$args0\" \"$args1\" \"$args2\" ;;\n (4) set -- \"$args0\" \"$args1\" \"$args2\" \"$args3\" ;;\n (5) set -- \"$args0\" \"$args1\" \"$args2\" \"$args3\" \"$args4\" ;;\n (6) set -- \"$args0\" \"$args1\" \"$args2\" \"$args3\" \"$args4\" \"$args5\" ;;\n (7) set -- \"$args0\" \"$args1\" \"$args2\" \"$args3\" \"$args4\" \"$args5\" \"$args6\" ;;\n (8) set -- \"$args0\" \"$args1\" \"$args2\" \"$args3\" \"$args4\" \"$args5\" \"$args6\" \"$args7\" ;;\n (9) set -- \"$args0\" \"$args1\" \"$args2\" \"$args3\" \"$args4\" \"$args5\" \"$args6\" \"$args7\" \"$args8\" ;;\n esac\nfi\n\n# Split up the JVM_OPTS And GRADLE_OPTS values into an array, following the shell quoting and substitution rules\nfunction splitJvmOpts() {\n JVM_OPTS=(\"$@\")\n}\neval splitJvmOpts $DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS\nJVM_OPTS[${#JVM_OPTS[*]}]=\"-Dorg.gradle.appname=$APP_BASE_NAME\"\n\nexec \"$JAVACMD\" \"${JVM_OPTS[@]}\" -classpath \"$CLASSPATH\" org.gradle.wrapper.GradleWrapperMain \"$@\"\n"
},
{
"path": "gnr/gradlew.bat",
"content": "@if \"%DEBUG%\" == \"\" @echo off\r\n@rem ##########################################################################\r\n@rem\r\n@rem Gradle startup script for Windows\r\n@rem\r\n@rem ##########################################################################\r\n\r\n@rem Set local scope for the variables with windows NT shell\r\nif \"%OS%\"==\"Windows_NT\" setlocal\r\n\r\n@rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script.\r\nset DEFAULT_JVM_OPTS=\r\n\r\nset DIRNAME=%~dp0\r\nif \"%DIRNAME%\" == \"\" set DIRNAME=.\r\nset APP_BASE_NAME=%~n0\r\nset APP_HOME=%DIRNAME%\r\n\r\n@rem Find java.exe\r\nif defined JAVA_HOME goto findJavaFromJavaHome\r\n\r\nset JAVA_EXE=java.exe\r\n%JAVA_EXE% -version >NUL 2>&1\r\nif \"%ERRORLEVEL%\" == \"0\" goto init\r\n\r\necho.\r\necho ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH.\r\necho.\r\necho Please set the JAVA_HOME variable in your environment to match the\r\necho location of your Java installation.\r\n\r\ngoto fail\r\n\r\n:findJavaFromJavaHome\r\nset JAVA_HOME=%JAVA_HOME:\"=%\r\nset JAVA_EXE=%JAVA_HOME%/bin/java.exe\r\n\r\nif exist \"%JAVA_EXE%\" goto init\r\n\r\necho.\r\necho ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME%\r\necho.\r\necho Please set the JAVA_HOME variable in your environment to match the\r\necho location of your Java installation.\r\n\r\ngoto fail\r\n\r\n:init\r\n@rem Get command-line arguments, handling Windowz variants\r\n\r\nif not \"%OS%\" == \"Windows_NT\" goto win9xME_args\r\nif \"%@eval[2+2]\" == \"4\" goto 4NT_args\r\n\r\n:win9xME_args\r\n@rem Slurp the command line arguments.\r\nset CMD_LINE_ARGS=\r\nset _SKIP=2\r\n\r\n:win9xME_args_slurp\r\nif \"x%~1\" == \"x\" goto execute\r\n\r\nset CMD_LINE_ARGS=%*\r\ngoto execute\r\n\r\n:4NT_args\r\n@rem Get arguments from the 4NT Shell from JP Software\r\nset CMD_LINE_ARGS=%$\r\n\r\n:execute\r\n@rem Setup the command line\r\n\r\nset CLASSPATH=%APP_HOME%\\gradle\\wrapper\\gradle-wrapper.jar\r\n\r\n@rem Execute Gradle\r\n\"%JAVA_EXE%\" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% \"-Dorg.gradle.appname=%APP_BASE_NAME%\" -classpath \"%CLASSPATH%\" org.gradle.wrapper.GradleWrapperMain %CMD_LINE_ARGS%\r\n\r\n:end\r\n@rem End local scope for the variables with windows NT shell\r\nif \"%ERRORLEVEL%\"==\"0\" goto mainEnd\r\n\r\n:fail\r\nrem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of\r\nrem the _cmd.exe /c_ return code!\r\nif not \"\" == \"%GRADLE_EXIT_CONSOLE%\" exit 1\r\nexit /b 1\r\n\r\n:mainEnd\r\nif \"%OS%\"==\"Windows_NT\" endlocal\r\n\r\n:omega\r\n"
},
{
"path": "gnr/settings.gradle",
"content": "include ':app'\n"
},
{
"path": "grabandrun.bib",
"content": "@InProceedings{falsina15:grabandrun,\n author = {Luca Falsina and Yanick Fratantonio and Stefano Zanero and Christopher Kruegel and Giovanni Vigna and Federico Maggi},\n title = {{Grab'n Run: Secure and Practical Dynamic Code Loading for Android Applications}},\n booktitle = {Proceedings of the Annual Computer Security Applications Conference (ACSAC)},\n month = {December},\n year = {2015},\n address = {Los Angeles, CA}\n}\n"
},
{
"path": "repackPOC/.gitignore",
"content": "/previousExperiments/\n/RepackInputSelector/.gitignore\n"
},
{
"path": "repackPOC/RepackInputSelector/.classpath",
"content": "\n\n\t\n\t\n\t\n\n"
},
{
"path": "repackPOC/RepackInputSelector/.project",
"content": "\n\n\tRepackInputSelector\n\t\n\t\n\t\n\t\n\t\t\n\t\t\torg.eclipse.jdt.core.javabuilder\n\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n\t\torg.eclipse.jdt.core.javanature\n\t\n\n"
},
{
"path": "repackPOC/RepackInputSelector/src/it/necst/grabnrun/selector/LinkContainerDialog.java",
"content": "package it.necst.grabnrun.selector;\n\nimport java.awt.BorderLayout;\nimport java.awt.Button;\nimport java.awt.CardLayout;\nimport java.awt.Dialog;\nimport java.awt.Frame;\nimport java.awt.GridLayout;\nimport java.awt.Label;\nimport java.awt.Panel;\nimport java.awt.TextField;\nimport java.awt.event.ActionEvent;\nimport java.awt.event.ActionListener;\nimport java.awt.event.ItemEvent;\nimport java.awt.event.ItemListener;\nimport java.awt.event.KeyEvent;\nimport java.awt.event.WindowAdapter;\nimport java.awt.event.WindowEvent;\nimport java.io.BufferedWriter;\nimport java.io.File;\nimport java.io.FileWriter;\nimport java.io.IOException;\nimport java.net.MalformedURLException;\nimport java.net.URL;\nimport java.util.ArrayList;\nimport java.util.HashMap;\nimport java.util.Iterator;\nimport java.util.List;\nimport java.util.Map;\nimport java.util.Set;\n\nimport javax.swing.BoxLayout;\nimport javax.swing.JCheckBox;\nimport javax.swing.JComboBox;\nimport javax.swing.JLabel;\nimport javax.swing.JOptionPane;\nimport javax.swing.JSeparator;\n\npublic class LinkContainerDialog extends Dialog {\n\n\tprivate static final long serialVersionUID = 4683700510412528166L;\n\tprivate int MAX_NUMBER_OF_MAP_ENTRIES;\n\n\tprivate static final String DEFAULT_VALUE = \"default\";\n\t\n\tprivate CardLayout cardLayout;\n\tprivate Panel cardPanel, valOneCertPan, valManyCertPan, valWithAssocMapPan, comboBoxPanel;\n\n\tprivate TextField oneCertPathField, defInManyCertsField;\n\tprivate List manyCertPathTextFieldList;\n\tprivate List assocMapTextFieldList;\n\t\n\tprivate Button finish;\n\tprivate JComboBox comboBox;\n\t\n\tprivate String apkPath;\n\tprivate Set validURLContSet;\n\tprivate JCheckBox allowDefault;\n\t\n\tprivate static final String VAL_ONE_CERT = \"Validate all containers with one certificate\";\n\tprivate static final String VAL_MANY_CERTS = \"Link each container with a certificate\";\n\tprivate static final String VAL_ASS_MAP = \"Provide associative map\";\n\t\n\tpublic LinkContainerDialog(\tFrame owner, \n\t\t\t\t\t\t\t\tString title, \n\t\t\t\t\t\t\t\tString apkPath, \n\t\t\t\t\t\t\t\tSet validURLContSet) {\n\t\n\t\tsuper(owner, title, true);\n\t\t\n\t\tthis.addWindowListener(new WindowAdapter() {\n\t\t\tpublic void windowClosing(final WindowEvent e) {\n setVisible(false);\n dispose();\n }\n\t\t});\n\t\t\n\t\tthis.MAX_NUMBER_OF_MAP_ENTRIES = validURLContSet.size() + 3;\n\t\t\n\t\tthis.apkPath = apkPath;\n\t\tthis.validURLContSet = validURLContSet;\n\t\t\n\t\t// setSize(100, 100);\n\t\t\n\t\tcardPanel = new Panel();\n\t\tcomboBoxPanel = new Panel();\n\t\t\n\t\t// Setup cards layout\n\t\tcardLayout = new CardLayout();\n\t\tcardPanel.setLayout(cardLayout);\n\t\t\n\t\tvalOneCertPan = new Panel();\n\t\tvalManyCertPan = new Panel();\n\t\tvalWithAssocMapPan = new Panel();\n\t\t\n\t\t// Setup of the first card:\n\t\t// One certificate to validate all the containers.\n\t\tvalOneCertPan.setLayout(new BorderLayout());\n\t\tallowDefault = new JCheckBox(\"Allow the tool to patch also containers not listed in the previous dialog with the same remote certificate.\");\n\t\tallowDefault.setMnemonic(KeyEvent.VK_A);\n JLabel explValOneCertLabel = new JLabel(\"Here all the containers will be evaluated against a certificate located at the provided not empty remote URL.
Please also note that HTTPS protocol is required for this entry.\", JLabel.CENTER);\n oneCertPathField = new TextField(MainFrame.MAX_NUM_COLUMNS);\n valOneCertPan.add(explValOneCertLabel, BorderLayout.CENTER);\n valOneCertPan.add(allowDefault, BorderLayout.NORTH);\n valOneCertPan.add(oneCertPathField, BorderLayout.SOUTH);\n\n // Setup of the second card:\n \t// Each container is linked to a certificate.\n valManyCertPan.setLayout(new BorderLayout());\n JLabel explValManyCertLabel = new JLabel(\"Here each container must be linked with a not empty URL pointing to a remote certificate.
HTTPS protocol is required for all the provided entries.
There is also an optional final entry in case you want to validate all the other found
containers with a default remote certificate.\", JLabel.CENTER);\n valManyCertPan.add(explValManyCertLabel, BorderLayout.NORTH);\n Panel contAndCertPan = new Panel();\n contAndCertPan.setLayout(new GridLayout(0, 2));\n contAndCertPan.add(new JLabel(\"Container Remote URL / Local File Path\", JLabel.CENTER));\n contAndCertPan.add(new JLabel(\"Remote certificate URL [HTTPS]\", JLabel.CENTER));\n \n // Insert two entries for each valid container URL\n // First show the container URL, while the second asks for the certificate URL.\n Iterator validContainerURLIterator = validURLContSet.iterator();\n manyCertPathTextFieldList = new ArrayList();\n\t\t\n\t\twhile (validContainerURLIterator.hasNext()) {\n\t\t\t\n\t\t\t// Add the label for the container URL\n\t\t\tcontAndCertPan.add(new Label(validContainerURLIterator.next()));\n\t\t\t\n\t\t\t// Create and add the TextField for the remote certificate URL\n\t\t\tTextField oneCertPathTextField = new TextField(MainFrame.MAX_NUM_COLUMNS);\n\t\t\tmanyCertPathTextFieldList.add(oneCertPathTextField);\n\t\t\tcontAndCertPan.add(oneCertPathTextField);\n\t\t}\n\t\t\n\t\t// Finally add the default TextField in case the user wants to enable the default value..\n\t\tcontAndCertPan.add(new Label(\"Other containers [This field is OPTIONAL]\"));\n\t\tdefInManyCertsField = new TextField(MainFrame.MAX_NUM_COLUMNS);\n\t\tcontAndCertPan.add(defInManyCertsField);\n\t\t\n\t\t// Fill in the remaining entries to match the third card size\n\t\tfor (int i=0; i < MAX_NUMBER_OF_MAP_ENTRIES - validURLContSet.size() - 1; i ++) {\n\t\t\t\n\t\t\t// Fill in a line with two labels.\n\t\t\tcontAndCertPan.add(new Label());\n\t\t\tcontAndCertPan.add(new Label());\n\t\t}\n \n valManyCertPan.add(contAndCertPan, BorderLayout.CENTER);\n \n // Setup of the third card:\n \t// Provide an associative map between package names and certificates.\n valWithAssocMapPan.setLayout(new BorderLayout());\n JLabel explAssMapLabel = new JLabel(\"Here you can directly provide an associative map which links package names to not empty URL location pointing
to remote certificates (HTTPS protocol is required for all entries).
Refer to GNR documentation to learn how to populate this map; otherwise use one of the previous two options!\", JLabel.CENTER);\n valWithAssocMapPan.add(explAssMapLabel, BorderLayout.NORTH);\n Panel assocMapPan = new Panel();\n assocMapPan.setLayout(new GridLayout(0, 2));\n assocMapPan.add(new JLabel(\"Package name\", JLabel.CENTER));\n assocMapPan.add(new JLabel(\"Remote certificate URL [HTTPS]\", JLabel.CENTER));\n \n // Insert two TextFields for each line.\n // First asks for the package name, while the second for the certificate URL.\n assocMapTextFieldList = new ArrayList();\n\t\t\n for (int i = 0; i < MAX_NUMBER_OF_MAP_ENTRIES; i++) {\n \t\n \t// Create and add the TextField for a package name entry.\n \tTextField packageNameTextField = new TextField(MainFrame.MAX_NUM_COLUMNS);\n \tassocMapTextFieldList.add(packageNameTextField);\n \tassocMapPan.add(packageNameTextField);\n \t\n \t// Create and add the TextField for a remote certificate URL entry.\n \tTextField oneCertPathTextField = new TextField(MainFrame.MAX_NUM_COLUMNS);\n \tassocMapTextFieldList.add(oneCertPathTextField);\n \tassocMapPan.add(oneCertPathTextField);\n }\n \n\t\tvalWithAssocMapPan.add(assocMapPan, BorderLayout.CENTER);\n \n // Setup of the combo box to show different cards\n cardPanel.add(valOneCertPan, VAL_ONE_CERT);\n cardPanel.add(valManyCertPan, VAL_MANY_CERTS);\n cardPanel.add(valWithAssocMapPan, VAL_ASS_MAP);\n \n String comboBoxItems[] = { VAL_ONE_CERT, VAL_MANY_CERTS, VAL_ASS_MAP };\n \n comboBox = new JComboBox(comboBoxItems);\n comboBox.setEditable(false);\n comboBox.addItemListener(new ItemListener() {\n\t\t\t\n\t\t\t@Override\n\t\t\tpublic void itemStateChanged(ItemEvent e) {\n\t\t\t\t\n\t\t\t\tCardLayout cl = (CardLayout) cardPanel.getLayout();\n\t\t\t\tcl.show(cardPanel, (String) e.getItem());\n\t\t\t}\n\t\t});\n comboBoxPanel.add(comboBox);\n \n Panel centerPanel = new Panel();\n centerPanel.setLayout(new BoxLayout(centerPanel, BoxLayout.Y_AXIS));\n centerPanel.add(new JSeparator());\n centerPanel.add(cardPanel);\n centerPanel.add(new JSeparator());\n \n // Setup of the finish button\n finish = new Button(\"Finish\");\n finish.addActionListener(new ActionListener() {\n\t\t\t\n\t\t\t@Override\n\t\t\tpublic void actionPerformed(ActionEvent e) {\n\t\t\t\t\n\t\t\t\tLinkContainerDialog.this.validateInput();\n\t\t\t}\n\t\t});\n \n add(comboBoxPanel, BorderLayout.NORTH);\n add(centerPanel, BorderLayout.CENTER);\n add(finish, BorderLayout.SOUTH);\n\t\t\n\t\t// Show dialog\n this.setResizable(false);\n\t\tthis.pack();\n\t\tthis.setLocationRelativeTo(owner);\n\t\tthis.setVisible(true);\n\t\t\n\t}\n\n\tprivate void validateInput() {\n\t\t\n\t\t// Depending on which card is currently shown,\n\t\t// the verification process changes..\n\t\tString chosenCard = (String) comboBox.getSelectedItem();\n\t\t\n\t\tMap keyToCertificateURLMap = new HashMap ();\n\t\t\n\t\tswitch(chosenCard) {\n\t\t\n\t\tcase VAL_ONE_CERT:\n\t\t\t\n\t\t\tString certificateURL = oneCertPathField.getText();\n\t\t\t\n\t\t\tif (isValidRemoteCertURL(certificateURL)) {\n\t\t\t\t\n\t\t\t\tIterator validContainerURLIterator = validURLContSet.iterator();\n\t\t\t\t\n\t\t\t\twhile (validContainerURLIterator.hasNext()) {\n\t\t\t\t\t\n\t\t\t\t\t// Populate a map which links container URL with \n\t\t\t\t\t// the same certificate URL..\n\t\t\t\t\tkeyToCertificateURLMap.put(validContainerURLIterator.next(), certificateURL);\n\t\t\t\t}\n\t\t\t\t\n\t\t\t\tif (allowDefault.isSelected()) {\n\t\t\t\t\t\n\t\t\t\t\t// If the user allow the tool to patch all the found containers\n\t\t\t\t\t// add a special default entry as well..\n\t\t\t\t\tkeyToCertificateURLMap.put(DEFAULT_VALUE, certificateURL);\n\t\t\t\t}\n\t\t\t\t\n\t\t\t\t// Store all the preferences into an helper file\n\t\t\t\t// and then exit.\n\t\t\t\tsaveAndFinish(keyToCertificateURLMap, false);\n\t\t\t\t\n\t\t\t} else\n\t\t\t\tJOptionPane.showMessageDialog(this, \"The provided URL was empty or did not match a remote URL using HTTPS!\", \"Invalid certificate URL\", JOptionPane.ERROR_MESSAGE);\n\t\t\tbreak;\n\t\t\n\t\tcase VAL_MANY_CERTS:\n\t\t\t\n\t\t\tboolean isUserInputValid = true;\n\t\t\t\n\t\t\t// Check that all the entries are not empty and\n\t\t\t// valid remote URL with HTTPS protocol.\n\t\t\tfor (TextField currentTextField : manyCertPathTextFieldList) {\n\t\t\t\t\n\t\t\t\tif (!isValidRemoteCertURL(currentTextField.getText())) {\n\t\t\t\t\tisUserInputValid = false;\n\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t}\n\t\t\t\n\t\t\tif (isUserInputValid) {\n\t\t\t\t\n\t\t\t\tIterator validContainerURLIterator = validURLContSet.iterator();\n\t\t\t\tint indexToPickTextField = 0;\n\t\t\t\t\n\t\t\t\twhile (validContainerURLIterator.hasNext()) {\n\t\t\t\t\t\n\t\t\t\t\t// Populate a map which links container URL with \n\t\t\t\t\t// the same certificate URL..\n\t\t\t\t\tkeyToCertificateURLMap.put(\tvalidContainerURLIterator.next(), \n\t\t\t\t\t\t\t\t\t\t\t\tmanyCertPathTextFieldList.get(indexToPickTextField).getText());\n\t\t\t\t\tindexToPickTextField++;\n\t\t\t\t}\n\t\t\t\t\n\t\t\t\t// Validation of the default value, if present..\n\t\t\t\tString defaultRemoteCertURL = defInManyCertsField.getText();\n\t\t\t\t\n\t\t\t\tif (defaultRemoteCertURL.isEmpty()) {\n\t\t\t\t\t\n\t\t\t\t\t// Store all the preferences into an helper file\n\t\t\t\t\t// and then exit.\n\t\t\t\t\tsaveAndFinish(keyToCertificateURLMap, false);\n\t\t\t\t\t\n\t\t\t\t} else {\n\t\t\t\t\t\n\t\t\t\t\tif (isValidRemoteCertURL(defaultRemoteCertURL)) {\n\t\t\t\t\t\t\n\t\t\t\t\t\t// Add also the default entry since its certificate it's valid..\n\t\t\t\t\t\tkeyToCertificateURLMap.put(DEFAULT_VALUE, defaultRemoteCertURL);\n\t\t\t\t\t\t\n\t\t\t\t\t\t// Store all the preferences into an helper file\n\t\t\t\t\t\t// and then exit.\n\t\t\t\t\t\tsaveAndFinish(keyToCertificateURLMap, false);\n\t\t\t\t\t\t\n\t\t\t\t\t} else {\n\t\t\t\t\t\tJOptionPane.showMessageDialog(this, \"The default entry used for not listed containers must be either empty or match a remote URL using HTTPS!\", \"Invalid certificate URL\", JOptionPane.ERROR_MESSAGE);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\t\n\t\t\t} else {\n\t\t\t\tJOptionPane.showMessageDialog(this, \"At least one of the required entries was empty or did not match a remote URL using HTTPS!\", \"Invalid certificate URL\", JOptionPane.ERROR_MESSAGE);\n\t\t\t}\n\t\t\t\n\t\t\tbreak;\n\t\t\t\n\t\tcase VAL_ASS_MAP:\n\t\t\t\n\t\t\tboolean areUserPackagesValid = true;\n\t\t\tboolean areUserCertURLsValid = true;\n\t\t\tboolean inputCheckActive = false;\n\t\t\tIterator assocMapTextFieldIterator = assocMapTextFieldList.iterator();\n\t\t\tMap partialAssociativeMap = new HashMap();\n\t\t\t\n\t\t\twhile (assocMapTextFieldIterator.hasNext()) {\n\t\t\t\t\n\t\t\t\t// Retrieve elements from the table in couples..\n\t\t\t\tString currentPackageName = assocMapTextFieldIterator.next().getText();\n\t\t\t\tString currentCertURL = assocMapTextFieldIterator.next().getText();\n\t\t\t\t\n\t\t\t\tif (currentPackageName != null & !currentPackageName.isEmpty()) {\n\t\t\t\t\t\n\t\t\t\t\tinputCheckActive = true;\n\t\t\t\t\t\n\t\t\t\t\tif (isValidPackageName(currentPackageName)) {\n\t\t\t\t\t\tif (isValidRemoteCertURL(currentCertURL)) {\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t// Valid couple of package name and certificate.\n\t\t\t\t\t\t\t// Add this couple to the partial map\n\t\t\t\t\t\t\tpartialAssociativeMap.put(currentPackageName, currentCertURL);\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\tareUserCertURLsValid = false;\n\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t}\n\t\t\t\t\t\t\n\t\t\t\t\t} else {\n\t\t\t\t\t\tareUserPackagesValid = false;\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t\t\n\t\t\t// If at least a left not null entry is present then evaluate the\n\t\t\t// correctness of the input data.\n\t\t\tif (inputCheckActive) {\n\t\t\t\t\n\t\t\t\tif (areUserPackagesValid) {\n\t\t\t\t\tif (areUserCertURLsValid) {\n\t\t\t\t\t\t\n\t\t\t\t\t\t// In this case all the entries were valid so\n\t\t\t\t\t\t// store them in the preference file.\n\t\t\t\t\t\tsaveAndFinish(partialAssociativeMap, true);\n\t\t\t\t\t\t\n\t\t\t\t\t} else\n\t\t\t\t\t\tJOptionPane.showMessageDialog(this, \"At least one of the right entries linked to a valid package name was empty or did not match a remote URL using HTTPS!\", \"Invalid certificate URL\", JOptionPane.ERROR_MESSAGE);\n\t\t\t\t\t\n\t\t\t\t} else\n\t\t\t\t\tJOptionPane.showMessageDialog(this, \"At least one of the not empty left entries was not a valid package name!
If you are in doubts please check out the definiton of package name at this link:
http://grab-n-run.readthedocs.org/en/latest/tutorial.html#using-standard-dexclassloader-to-load-code-dynamically\", \"Invalid package name\", JOptionPane.ERROR_MESSAGE);\n\t\t\t}\n\t\t\t\n\t\t\tbreak;\n\t\t\t\n\t\tdefault:\n\t\t\tthrow new RuntimeException(\"An invalid value was returned from the combo box\");\n\t\t}\n\t\t\n\t}\n\t\n\tprivate void saveAndFinish(Map keyToCertificateURLMap,\n\t\t\tboolean isKeyPackageName) {\n\t\t\n\t\tFile helperFile = new File(\"./preferences\");\n\t\t\n\t\t// At first erase any copy of an older pref file, if any..\n\t\tif (helperFile.exists())\n\t\t\thelperFile.delete();\n\t\t\n\t\tBufferedWriter writer = null;\n\t\t\n\t\ttry {\n\t\t\t\n\t\t\twriter = new BufferedWriter(new FileWriter(helperFile));\n\t\t\tString newline = System.getProperty(\"line.separator\");\n\t\t\t\n\t\t\t// First write the path to the APK to patch\n\t\t\twriter.write(apkPath + newline);\n\t\t\t\n\t\t\t// Then write whether the following keys of the map are \n\t\t\t// going to be package names or container URLs\n\t\t\twriter.write(isKeyPackageName + newline);\n\t\t\t\n\t\t\t// Finally write for each key the related URL\n\t\t\t// of the remote certificate to validate it.\n\t\t\tIterator keyIterator = keyToCertificateURLMap.keySet().iterator();\n\t\t\t\n\t\t\twhile (keyIterator.hasNext()) {\n\t\t\t\t\n\t\t\t\tString keyToWrite = keyIterator.next();\n\t\t\t\twriter.write(keyToWrite + \" | \" + keyToCertificateURLMap.get(keyToWrite) + newline);\n\t\t\t}\n\t\t\n\t\t} catch (IOException e) {\n\t\t\te.printStackTrace();\n\t\t\tfinish(false);\n\t\t} finally {\n\t\t\t\n\t\t\tif (writer != null) {\n\t\t\t\ttry {\n\t\t\t\t\twriter.close();\n\t\t\t\t} catch (IOException e) {\n\t\t\t\t\te.printStackTrace();\n\t\t\t\t\tfinish(false);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\t\n\t\t// Everything went smoothly..\n\t\tfinish(true);\n\t\t\n\t}\n\t\n\tprivate void finish(boolean isCorrectTermination) {\n\t\t\n\t\t// Hide and release this dialog.\n\t\tsetVisible(false);\n dispose();\n \n if (isCorrectTermination)\n \tSystem.exit(0);\n \n // An abnormal termination occurred..\n System.exit(1);\n\t}\n\n\tprivate boolean isValidRemoteCertURL(String candidateURLString) {\n\t\t\n\t\tif (candidateURLString == null || candidateURLString.isEmpty())\n\t\t\treturn false;\n\t\t\n\t\tURL candidateURL = null;\n\t\t\n\t\ttry {\n\t\t\t\n\t\t\tcandidateURL = new URL(candidateURLString);\n\t\t\t\n\t\t\tif (!candidateURL.getProtocol().equals(\"https\"))\n\t\t\t\tthrow new MalformedURLException();\n\t\t\t\n\t\t\t// We have a valid URL\n\t\t\treturn true;\n\t\t\t\n\t\t} catch (MalformedURLException e) {\n\t\t\t// When this exception is raised the URL is invalid..\n\t\t\treturn false;\n\t\t}\n\t}\n\t\n\tprivate boolean isValidPackageName(String candidatePackNameString) {\n\t\t\n\t\tif (candidatePackNameString == null || candidatePackNameString.isEmpty())\n\t\t\treturn false;\n\t\t\n\t\tString[] packStrings = candidatePackNameString.split(\"\\\\.\");\n\t\t\n\t\tfor (String packString : packStrings) {\n\t\t\t\n\t\t\t// Requirement: all the subfields should contain at least one char..\n\t\t\tif (packString.isEmpty())\n\t\t\t\treturn false;\n\t\t}\n\t\t\n\t\t// Package names should not be too general..\n\t\t// At least two strings dot separated.\n\t\t// Example: \"com\" is rejected, while \"com.polimi\" is not.\n\t\tif (packStrings.length < 2)\n\t\t\treturn false;\n\t\t\n\t\t// Otherwise we have a valid package name.\n\t\treturn true;\n\t}\n}\n"
},
{
"path": "repackPOC/RepackInputSelector/src/it/necst/grabnrun/selector/MainFrame.java",
"content": "package it.necst.grabnrun.selector;\n\nimport java.awt.BorderLayout;\nimport java.awt.Button;\nimport java.awt.Choice;\nimport java.awt.FileDialog;\nimport java.awt.Frame;\nimport java.awt.Label;\nimport java.awt.Panel;\nimport java.awt.SystemColor;\nimport java.awt.TextField;\nimport java.awt.event.ActionEvent;\nimport java.awt.event.ActionListener;\nimport java.awt.event.ItemEvent;\nimport java.awt.event.ItemListener;\nimport java.awt.event.WindowAdapter;\nimport java.awt.event.WindowEvent;\nimport java.io.File;\nimport java.net.MalformedURLException;\nimport java.net.URL;\nimport java.util.HashSet;\nimport java.util.Set;\n\nimport javax.swing.BoxLayout;\nimport javax.swing.JOptionPane;\nimport javax.swing.JSeparator;\n\npublic class MainFrame extends Frame {\n\n\tprivate static final long serialVersionUID = -3423546282965389324L;\n\n\tprivate boolean isValidApkToPatch;\n\tprivate TextField apkField;\n\tprivate Button apkButton;\n\tprivate Button quit;\n\tprivate Button next;\n\t\n\tprivate Panel contSelectPanel;\n\n\tstatic final int MAX_NUM_COLUMNS = 50;\n\tprivate static final int MAX_NUM_CONT = 7;\n\t\n\tprivate TextField[] contURLFields;\n\t\n\tprivate Set validURIContSet;\n\t\n\t/**\n\t * @param args\n\t */\n\tpublic static void main(String[] args) {\n\t\t\n\t\tnew MainFrame();\n\t\t\n\t}\n\t\n\tprivate MainFrame() {\n\t\tsuper(\"Grab'n Run: Repackaging Tool\");\n\t\t\n\t\t// Initialize array for containers URL TextFields\n\t\tcontURLFields = new TextField[MAX_NUM_CONT];\n\t\t\n\t\t// Graphical setup\n\t\tthis.buildContent();\n\t\tthis.addWindowListener(new WindowAdapter() {\n\t\t\tpublic void windowClosing(final WindowEvent e) {\n MainFrame.this.quit();\n }\n\t\t});\n\t\t\n\t\tthis.pack();\n\t\tthis.setLocationRelativeTo(null);\n\t\tthis.setResizable(false);\n\t\tthis.setVisible(true);\n\t}\n\n\tprivate void buildContent() {\n\t\t\n\t\tthis.setBackground(SystemColor.control);\n\t\tthis.apkField = new TextField(MAX_NUM_COLUMNS);\n\t\tthis.apkField.setEditable(false);\n\t\tthis.apkButton = new Button(\"Browse..\");\n\t\tthis.isValidApkToPatch = false;\n\t\tthis.quit = new Button(\"Quit\");\n\t\tthis.next = new Button(\"Next..\");\n\t\t\n\t\tthis.quit.addActionListener(new ActionListener() {\n\t\t\t\n\t\t\t@Override\n\t\t\tpublic void actionPerformed(ActionEvent e) {\n\t\t\t\t\n\t\t\t\tMainFrame.this.quit();\n\t\t\t}\n\t\t});\n\t\t\n\t\tthis.next.addActionListener(new ActionListener() {\n\t\t\t\n\t\t\t@Override\n\t\t\tpublic void actionPerformed(ActionEvent e) {\n\t\t\t\t\n\t\t\t\tMainFrame.this.next();\n\t\t\t}\n\t\t});\n\t\t\n\t\tthis.apkButton.addActionListener(new ActionListener() {\n\t\t\t\n\t\t\t@Override\n\t\t\tpublic void actionPerformed(ActionEvent e) {\n\t\t\t\t\n\t\t\t\tMainFrame.this.apkChoose();\n\t\t\t}\n\t\t});\n\t\t\n\t\tPanel pageEndPanel = new Panel();\n\t\tpageEndPanel.setLayout(new BoxLayout(pageEndPanel, BoxLayout.X_AXIS));\n\t\tpageEndPanel.add(quit);\n\t\tpageEndPanel.add(next);\n\t\tthis.add(BorderLayout.PAGE_END, pageEndPanel);\n\t\t\n\t\tPanel apkTextPanel = new Panel();\n\t\tapkTextPanel.setLayout(new BoxLayout(apkTextPanel, BoxLayout.PAGE_AXIS));\n\t\tapkTextPanel.add(new Label(\"Select an APK container to patch:\"));\n\t\tapkTextPanel.add(apkField);\n\t\t\n\t\tPanel apkButtonPanel = new Panel();\n\t\tapkButtonPanel.setLayout(new BoxLayout(apkButtonPanel, BoxLayout.Y_AXIS));\n\t\tapkButtonPanel.add(new Label());\n\t\tapkButtonPanel.add(apkButton);\n\t\t\n\t\tPanel apkChoosePanel = new Panel();\n\t\tapkChoosePanel.add(BorderLayout.WEST, apkTextPanel);\n\t\tapkChoosePanel.add(BorderLayout.EAST, apkButtonPanel);\n\t\tthis.add(BorderLayout.PAGE_START, apkChoosePanel);\n\t\t\n\t\tcontSelectPanel = new Panel();\n\t\tcontSelectPanel.setLayout(new BoxLayout(contSelectPanel, BoxLayout.Y_AXIS));\n\t\tPanel contNumberPanel = new Panel();\n\t\tcontNumberPanel.setLayout(new BoxLayout(contNumberPanel, BoxLayout.X_AXIS));\n\t\tcontNumberPanel.add(new Label(\"Select the number of JAR/APK containers to use as sources: \"));\n\t\tfinal Choice numberOfCont = new Choice();\n\t\t\n\t\tfor (Integer i = 1; i <= MAX_NUM_CONT ; i ++) {\n\t\t\tnumberOfCont.add(i.toString());\n\t\t}\n\t\t\n\t\tnumberOfCont.addItemListener(new ItemListener() {\n\t\t\t\n\t\t\tpublic void itemStateChanged(ItemEvent ie) {\n\t\t\t\t\n\t\t\t\tupdateContainerBoxes(Integer.valueOf(numberOfCont.getSelectedItem()));\n\t }\n\n\t\t});\n\t\t\n\t\tcontNumberPanel.add(numberOfCont);\n\t\tcontSelectPanel.add(new JSeparator());\n\t\tcontSelectPanel.add(contNumberPanel);\n\t\t\n\t\tcontSelectPanel.add(new Label(\"Write down for each white line below either the remote URL or\"));\n\t\tcontSelectPanel.add(new Label(\"the local path of a JAR/APK container that you intend to use as\"));\n\t\tcontSelectPanel.add(new Label(\"a possible source for classes to dynamically load at runtime.\"));\n\t\t\n\t\t// TextFields for containers URL are initialized..\n\t\tfor (int i = 0; i < MAX_NUM_CONT; i++) {\n\t\t\t\n\t\t\tcontURLFields[i] = new TextField(MAX_NUM_COLUMNS);\n\t\t\tcontURLFields[i].setVisible(true);\n\t\t\tcontSelectPanel.add(contURLFields[i]);\n\t\t}\n\t\t\n\t\tupdateContainerBoxes(Integer.valueOf(0));\n\t\t\n\t\tcontSelectPanel.add(new JSeparator());\n\t\t\n\t\tthis.add(BorderLayout.CENTER, contSelectPanel);\n\t\t//contSelectPanel.setVisible(false);\n\t\t\n\t}\n\n\tprivate void updateContainerBoxes(Integer boxToShow) {\n\t\t\n\t\tfor (int i = 0; i < MAX_NUM_CONT; i ++) {\n\t\t\t\n\t\t\tif (isValidApkToPatch) {\n\t\t\t\t\n\t\t\t\tif (i < boxToShow) {\n\t\t\t\t\t\n\t\t\t\t\t//contURLFields[i].setVisible(true);\n\t\t\t\t\tcontURLFields[i].setBackground(SystemColor.WHITE);\n\t\t\t\t\tcontURLFields[i].setEditable(true);\n\t\t\t\t\t\n\t\t\t\t} else {\n\t\t\t\t\t\n\t\t\t\t\t//contURLFields[i].setVisible(false);\n\t\t\t\t\t//contURLFields[i] = new TextField(MAX_NUM_COLUMNS);\n\t\t\t\t\tcontURLFields[i].setBackground(SystemColor.control);\n\t\t\t\t\tcontURLFields[i].setEditable(false);\n\t\t\t\t\t//contURLFields[i].setVisible(true);\n\t\t\t\t\t\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t\n\t\t\t\tcontURLFields[i].setBackground(SystemColor.control);\n\t\t\t\tcontURLFields[i].setEditable(false);\n\t\t\t}\n\t\t}\n\t\t\n\t\tthis.pack();\n\t\t//this.setLocationRelativeTo(null);\n\t}\n\n\tprivate void apkChoose() {\n\t\t\n\t\tfinal FileDialog fileDialog = new FileDialog(this, \"Choose an APK container..\", FileDialog.LOAD);\n\t\t// fileDialog.setFile(\"*.apk\");\n\t\tfileDialog.setAlwaysOnTop(true);\n\t\tfileDialog.setVisible(true);\n\t\t\n\t\t// Select an APK from \"Recent tabs..\" does not work.\n\t\t// This is a known issue of current JDK.. Oracle should fix it..\n\t\tif (fileDialog.getDirectory() != null && fileDialog.getFiles() != null && fileDialog.getFiles().length == 1) {\n\t\t\t\n\t\t\tString apkPath = fileDialog.getFiles()[0].getAbsolutePath();\n\t\t\tif (apkPath.toLowerCase().endsWith(\".apk\")) {\n\t\t\t\t\n\t\t\t\tthis.apkField.setBackground(SystemColor.GREEN);\n\t\t\t\tthis.apkField.setText(apkPath);\n\t\t\t\t\n\t\t\t\tcontSelectPanel.setVisible(true);\n\t\t\t\tthis.pack();\n\t\t\t\t// this.setLocationRelativeTo(null);\n\t\t\t\t\n\t\t\t\tthis.isValidApkToPatch = true;\n\t\t\t\t\n\t\t\t\tupdateContainerBoxes(1);\n\t\t\t}\n\t\t\telse {\n\t\t\t\t\n\t\t\t\tthis.apkField.setBackground(SystemColor.control);\n\t\t\t\tthis.apkField.setText(\"Invalid file! Choose an apk container!\");\n\t\t\t\t\n\t\t\t\t//contSelectPanel.setVisible(false);\n\t\t\t\t//this.pack();\n\t\t\t\t//this.setLocationRelativeTo(null);\n\t\t\t\t\n\t\t\t\tthis.isValidApkToPatch = false;\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate void next() {\n\t\t\n\t\tboolean openDialog = false;\n\t\t\n\t\tif (isValidApkToPatch) {\n\t\t\t\n\t\t\tvalidURIContSet = new HashSet();\n\t\t\t\n\t\t\tfor (TextField textField : contURLFields) {\n\t\t\t\n\t\t\t\tString containerURLString = null;\n\t\t\t\t\n\t\t\t\tif (textField.isEditable())\n\t\t\t\t\tcontainerURLString = textField.getText();\n\t\t\t\t\n\t\t\t\tif (containerURLString != null && !containerURLString.isEmpty()) {\n\t\t\t\t\t\n\t\t\t\t\t// Try to parse this container location and see if\n\t\t\t\t\t// it is a valid remote URL\n\t\t\t\t\tURL containerURL = null;\n\t\t\t\t\t\n\t\t\t\t\ttry {\n\t\t\t\t\t\t\n\t\t\t\t\t\tcontainerURL = new URL(containerURLString);\n\t\t\t\t\t\t\n\t\t\t\t\t\tif (\tcontainerURL.getProtocol().equals(\"http\") || \n\t\t\t\t\t\t\t\tcontainerURL.getProtocol().equals(\"https\")) {\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tvalidURIContSet.add(containerURL.toString());\n\t\t\t\t\t\t}\n\t\t\t\t\t\t\n\t\t\t\t\t} catch (MalformedURLException e) {\n\t\t\t\t\t\t\n\t\t\t\t\t\t// Not a valid remote URL.. Test if at least this string \n\t\t\t\t\t\t// matches a valid local container file on the system\n\t\t\t\t\t\tif (\tcontainerURLString.toLowerCase().endsWith(\".apk\") ||\n\t\t\t\t\t\t\t\tcontainerURLString.toLowerCase().endsWith(\".jar\")) {\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\tFile testForAFile = new File(containerURLString);\n\t\t\t\t\t\t\tif (testForAFile.exists() && testForAFile.isFile())\n\t\t\t\t\t\t\t\tvalidURIContSet.add(containerURLString);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t\t\n\t\t\tif (!validURIContSet.isEmpty())\n\t\t\t\topenDialog = true;\n\t\t\t\n\t\t\tif (openDialog) {\n\t\t\t\t\n\t\t\t\tnew LinkContainerDialog(this, \"Select validation method..\", apkField.getText(), validURIContSet);\n\t\t\t\t//System.out.println(\"Found \" + validURLContSet.size() + \" valid distinct container URL.\");\n\t\t\t} else {\n\t\t\t\t\n\t\t\t\tJOptionPane.showMessageDialog(this, \"Insert at least one valid remote URL or local file path pointing to an APK/JAR container in one of the white enabled fields!\", \"No valid container remote URL or local path\", JOptionPane.ERROR_MESSAGE);\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate void quit() {\n this.setVisible(false);\n System.exit(1);\n }\n}\n"
},
{
"path": "repackPOC/repackagingTool.py",
"content": "import sys, argparse, shutil, os\n\n# This variable matches the local folder in the repo \n# where the submodule of Androguard is located\nandroguard_location = 'androguard/' \nsys.path.insert(1, androguard_location)\n\n# Modules imported from Androguard.\nimport androguard.core.bytecodes.jvm as jvm\nimport androguard.core.bytecodes.dvm as dvm\nimport androguard.core.bytecodes.apk as apk\nimport androguard.core.analysis.analysis as analysis\n\n# Library used for download of remote container\nimport urllib, urlparse, os.path\n\n# Libary used for digest computation\nimport hashlib, base64, zipfile\n\n# Library used to create grammars and parse files\nfrom pyparsing import *\n\n# Library used to launch and check results on command line\nimport subprocess\n\n# Library used to parse the Android Manifest.\nimport xml.etree.ElementTree as ET\n\n# Androguard script which automatizes collection of useful information\n# on JAR and APK.\nimport androlyze\n\n# Grammar elements for smali code (Used for smali parsing)\nINTEGER = Word( nums, max = 1 )\nALPHABET = alphanums + '_-'\nCLASS_PATH = Combine( Word( alphas ) + ZeroOrMore( \"/\" + Word( ALPHABET )) + ZeroOrMore( OneOrMore(\"$\") + Word( ALPHABET ) ) )\nCLASS_STRING = Group(\"L\" + CLASS_PATH + \";\")\nRETURN_TYPE = Word( alphas, max = 1 )\nOPERAND = Or( RETURN_TYPE + CLASS_STRING )\nMETHOD_NAME = Or( \"\" + Word( alphas ))\nMETHOD_DECL = Group(METHOD_NAME + \"(\" + ZeroOrMore(OPERAND) + \")\" + OPERAND)\nNUMBER_EXA = Group(\"(\" + Combine( \"0x\" + Word( \"0123456789abcdef\" )) + \")\")\nACCESS_ATTR = Optional(oneOf(\"private protected public synthetic\"))\nRESERVED_KEYWORDS = ZeroOrMore(oneOf(\"final interface abstract enum annotation synthetic\"))\nVAR = Combine( Word('pv', max = 1) + Word( nums ) ) \n\n# Required standard permission\nrequired_permissions = ['android.permission.ACCESS_NETWORK_STATE', 'android.permission.INTERNET', 'android.permission.READ_EXTERNAL_STORAGE']\n\n# Output code for subprogramms\nSUCCESS = 0\nFAILURE = 1\n\n# Apktool lib path\nAPKTOOL_JAR = \"libs\" + os.sep + \"apktool.jar\"\n\ndef isAValidContainer(containerPath, onlyAPKallowed = False):\n\n\tif containerPath:\n\n\t\tif os.path.exists(containerPath) and os.path.isfile(containerPath):\n\t\t\t# Try to open this as an APK container..\n\t\t\ttry:\n\t\t\t\ta = apk.APK(containerPath)\n\n\t\t\t\tif a.is_valid_APK():\n\t\t\t\t\treturn True\n\t\t\texcept zipfile.BadZipfile:\n\t\t\t\t# This is not a valid APK container..\n\t\t\t\tpass\n\n\t\t\tif not onlyAPKallowed:\n\t\t\t\t# Try to open this as a JAR container..\n\t\t\t\ttry:\n\t\t\t\t\tj = jvm.JAR(containerPath)\n\n\t\t\t\t\t# Check that in this JAR there is the\n\t\t\t\t\t# required 'classes.dex' entry.\n\t\t\t\t\tif 'classes.dex' in j.zip.namelist():\n\t\t\t\t\t\treturn True\n\n\t\t\t\texcept zipfile.BadZipfile:\n\t\t\t\t\t# This is not even a valid JAR container..\n\t\t\t\t\tpass\n\n\t# If the file reaches this branch, it means that \n\t# this is not a valid container\n\treturn False\n\ndef isARemoteURL(candidateRemoteURL, onlyHTTPSrequired = False):\n\n\t# Parse and check this remote URL\n\tparsePath = urlparse.urlparse(candidateRemoteURL)\n\n\tif onlyHTTPSrequired:\n\t\tif parsePath.scheme == \"https\":\n\t\t\treturn True\n\telse:\n\t\tif parsePath.scheme == \"http\" or parsePath.scheme == \"https\":\n\t\t\treturn True\n\n\treturn False\n\ndef isAValidPackageName(candidatePackageName):\n\n\tif candidatePackageName:\n\n\t\tif len(candidatePackageName.split('.')) < 2:\n\t\t\t# Too general package name: at least two fields dot separated..\n\t\t\treturn False\n\n\t\t# Each subfield must be not empty..\n\t\tfor subString in candidatePackageName.split('.'):\n\t\t\tif not subString:\n\t\t\t\treturn False\n\n\t\t# If previous conditions are valid than the package name is OK.\n\t\treturn True\n\n\treturn False\n\ndef downloadRemoteContainer(containerRemoteURL):\n\n\tif containerRemoteURL:\n\t\t# Check this remote URL\n\t\tif isARemoteURL(containerRemoteURL):\n\n\t\t\t# Download the remote file and store it in the current directory\n\t\t\tdownloadResult = urllib.urlretrieve(containerRemoteURL, os.path.basename(containerRemoteURL))\n\n\t\t\tif isAValidContainer(downloadResult[0]):\n\n\t\t\t\t# Return final local path of the valid container\n\t\t\t\tprint \"[In progress] Found a valid container at \" + containerRemoteURL\n\t\t\t\treturn downloadResult[0]\n\n\t\t\telse:\n\n\t\t\t\t# Remove this resource and skip it\n\t\t\t\tprint \"[Warning] Found an invalid container at \" + containerRemoteURL + \". This resource will be skipped!\"\n\t\t\t\tos.remove(downloadResult[0])\n\t\t\t\treturn None\n\n\t# If any of the previous steps fail, return None\n\tprint \"[Warning] Impossible to retrieve a resource at \" + containerRemoteURL\n\treturn None\n\ndef extractPackageNamesFromLocalContainer(containerPath):\n\n\tif containerPath:\n\n\t\tif os.path.exists(containerPath) and os.path.isfile(containerPath):\n\n\t\t\t# Initialize package name list\n\t\t\tpackageNamesList = list()\n\n\t\t\tif isAValidContainer(containerPath):\n\n\t\t\t\ta = apk.APK(containerPath)\n\t\n\t\t\t\tif a.is_valid_APK():\n\t\t\t\t\t# In case of an APK it is pretty easy to extract the app package name\n\t\t\t\t\tpackageNamesList.append(str(a.get_package()))\n\t\t\t\t\treturn packageNamesList\n\n\t\t\t\telse:\n\t\t\t\t\t# In case of a JAR at first retrieve the dex translation of the classes\n\t\t\t\t\td = dvm.DalvikVMFormat(a.get_dex())\n\n\t\t\t\t\t# Then extract the list of the full class names\n\t\t\t\t\tclassNamesList = d.get_classes_names()\n\n\t\t\t\t\tfor fullClassName in classNamesList:\n\n\t\t\t\t\t\t# Retrieve simple class name and package name\n\t\t\t\t\t\tsimpleClassName = os.path.basename(fullClassName)\n\t\t\t\t\t\tpackageName = fullClassName.lstrip(\"L\").replace(\"/\", \".\").rstrip(simpleClassName).rstrip(\".\")\n\t\t\t\t\n\t\t\t\t\t\t# Filter out all packages which comes from standard Android libraries\n\t\t\t\t\t\tif not(packageName.startswith(\"android\")) and len(packageName.split(\".\")) > 1:\n\t\t\t\t\t\t\tpackageNamesList.append(packageName)\n\n\t\t\t\t\t# Remove duplicates from this set and order it in a list\n\t\t\t\t\tpackageNamesList = list(sorted(set(packageNamesList)))\n\n\t\t\t\t\t# Analyze couples of adjacent package names\n\t\t\t\t\tcounter = 0\n\n\t\t\t\t\twhile (counter < len(packageNamesList) - 1):\n\n\t\t\t\t\t\tcouple = list([packageNamesList[counter], packageNamesList[counter + 1]])\n\t\t\t\t\t\tcommon = os.path.commonprefix(couple)\n\n\t\t\t\t\t\tif not(common) or len(common.split(\".\")) <= 1:\n\t\t\t\t\t\t\t# There is no common path among the two packages\n\t\t\t\t\t\t\t# so the first one is valid\n\t\t\t\t\t\t\tcounter = counter + 1\n\n\t\t\t\t\t\telse:\n\t\t\t\t\t\t\t# There is a common prefix so only the shortest among the \n\t\t\t\t\t\t\t# two packages should be kept\n\t\t\t\t\t\t\t# Could also simply be:\n\t\t\t\t\t\t\t# del packageNamesList[counter + 1]\n\t\t\t\t\t\t\t# since following strings are always longer in this scenario.. \n\t\t\t\t\t\t\tif (len(packageNamesList[counter]) > len(packageNamesList[counter + 1])):\n\t\t\t\t\t\t\t\tdel packageNamesList[counter]\n\t\t\t\t\t\t\telse:\n\t\t\t\t\t\t\t\tdel packageNamesList[counter + 1]\n\n\t\t\t\t\t# Finally the returned the purged and final package list\n\t\t\t\t\treturn packageNamesList\n\n\t# If this branch is reached than the package extraction failed\n\tprint \"[Warning] Impossible to extract package names for \" + containerPath\n\treturn None\n\ndef computeDigestEncode(filePath):\n\n\tif filePath:\n\n\t\tif os.path.exists(filePath) and os.path.isfile(filePath):\n\t\t\t\t# Initialize sha1 hash object\n\t\t\t\tsha1 = hashlib.sha1()\n\n\t\t\t\t# Try to open local file in read byte mode\n\t\t\t\twith open(filePath, 'rb') as fileToDigest:\n\n\t\t\t\t\t# Insert the byte of the file to digest\n\t\t\t\t\tsha1.update(fileToDigest.read())\n\n\t\t\t\t\t# Recover the base64 safe URL encode of the\n\t\t\t\t\t# digested file\n\t\t\t\t\treturn base64.urlsafe_b64encode(sha1.digest())\n\n\tprint \"[Warning] Impossible to compute digest for \" + filePath\n\treturn None\n\ndef decodeTargetAPK(apkPath):\n\n\tif apkPath:\n\n\t\tprint \"[In progress] Decode target APK..\"\n\t\tdecodeAPK = subprocess.call([\"java\",\"-jar\", APKTOOL_JAR, \"d\", \"-f\", apkPath])\n\n\t\tdecodeDirName = os.path.splitext(os.path.basename(apkPath))[0]\n\n\t\tif (decodeAPK == SUCCESS):\n\n\t\t\t# Check that the actual directory exists after this operation\n\t\t\tif (os.path.isdir(decodeDirName)):\n\n\t\t\t\t# In this case the operation was successful so return the directory name\n\t\t\t\tprint \"[In progress] APK decoding was successful.\"\n\t\t\t\treturn decodeDirName\n\n\t\t# Here the decode of the APK fails so remove any partial files generated\n\t\t# during the APK decoding.\n\t\tshutil.rmtree(decodeDirName)\n\t\t#subprocess.call([\"rm\", \"-rf\", decodeDirName])\n\n\tprint \"[Exit] An error occured while decoding target APK.\"\n\tsys.exit(FAILURE)\n\ndef buildRepackagedAPK(decodeDirName):\n\n\tif decodeDirName and os.path.isdir(decodeDirName):\n\n\t\tprint \"[In progress] Rebuilding patched APK..\"\n\t\trebuildAPKcommand = subprocess.call([\"java\",\"-jar\", APKTOOL_JAR, \"b\", decodeDirName])\n\n\t\tif (rebuildAPKcommand == SUCCESS):\n\n\t\t\t# An APK is expected now in dist folder\n\t\t\trebuiltAPKpath = decodeDirName + os.sep + \"dist\" + os.sep + decodeDirName + \".apk\"\n\t\t\t\n\t\t\tif os.path.isfile(rebuiltAPKpath):\n\n\t\t\t\t# In this case the operation was successful so return the built APK path\n\t\t\t\tprint \"[In progress] APK rebuilding was successful.\"\n\t\t\t\treturn rebuiltAPKpath\n\n\tprint \"[Exit] An error occured while rebuilding APK from patched resources.\"\n\tsys.exit(FAILURE)\n\ndef performAnalysis(apkPath):\n\n\t# Perform the analysis by recalling public method of androlyze.py\n\ta, d, dx = androlyze.AnalyzeAPK(apkPath)\n\n\tif not a.is_valid_APK():\n\t\tprint \"[Exit] The selected resource is not a valid APK!\"\n\t\treturn sys.exit(FAILURE)\n\n\tif not analysis.is_dyn_code(dx):\n\t\tprint \"[Exit] No DexClassLoader use in this APK and so there is nothing to patch!\"\n\t\treturn sys.exit(SUCCESS)\n\n\tprint \"[In progress] Analyze target APK..\"\n\n\t# Store app permissions (used later on while patching Android Manifest)\n\tapp_permissions = set(a.get_permissions())\n\n\t#app_permissions.add('android.permission.ACCESS_NETWORK_STATE')\n\t#app_permissions.add('android.permission.BLABLABLA')\n\n\t# Reference to global variable\n\tmissing_permissions = list()\n\n\tfor current_perm in required_permissions:\n\t\tif not(current_perm in app_permissions):\n\t\t\tmissing_permissions.append(current_perm)\n\n\t#print missing_permissions\n\n\t# Flag variable for later use\n\tdynamicCallsWhereTraced = False\n\n\t# Save a reference for standard output\n\tstdout = sys.stdout\n\n\t# Redirect output to an helper variable\n\t# sys.stdout = open('./dynamicCalls', 'w')\n\tdynamicCallsFilePath = os.curdir + os.sep + \"dynamicCalls\"\n\n\twith open(dynamicCallsFilePath, 'w') as dynamicCallsFile:\n\t\t# Redirect output to an helper variable\n\t\tsys.stdout = dynamicCallsFile\n\n\t\t# Highlight dynamic calls linked to a DexClassLoader.\n\t\tanalysis.show_DynCode(dx)\n\n\t\t# Set back usual stdout\n\t\tsys.stdout = stdout\n\n\twith open(dynamicCallsFilePath, 'r') as dynamicCallsFile:\n\n\t\t#print INTEGER.parseString(\"1\")\n\t\t#print CLASS_STRING.parseString(\"Lcom/example/extractapp/MainActivity;\")\n\t\t#print METHOD_DECL.parseString(\"setUpNormal()V\")\n\t\t#print NUMBER_EXA.parseString(\"(0x66)\")\n\t\t#print CLASS_STRING.parseString(\"Ldalvik/system/DexClassLoader;\")\n\n\t\t# Define a grammar to parse line of the input file.\n\t\tparsing_format = INTEGER + CLASS_STRING + \"->\" + METHOD_DECL + NUMBER_EXA + \"--->\" + CLASS_STRING + \"->\" + METHOD_DECL\n\n\t\t# Reference to global variable\n\t\tclassesWithDynCodeLoad = list()\n\n\t\tfor line in dynamicCallsFile:\n\t\t\t# print line\n\t\t\ttokens = parsing_format.parseString( line )\n\n\t\t\t# This is a sort specific parsing constant(magic numbers)..\n\t\t\tclassName = tokens[1][1]\n\n\t\t\t# Extract only name of classes to patch which are not the ones of Grab'n Run\n\t\t\tif className != \"it/necst/grabnrun/SecureDexClassLoader\":\n\t\t\t\tclassesWithDynCodeLoad.append(className)\n\n\t\t# In the end remove duplicates from this list (use a set)\n\t\tclassesWithDynCodeLoad = set(classesWithDynCodeLoad)\n\n\t\t# print classesWithDynCodeLoad\n\n\t\t# Raise flag variable\n\t\tprint \"[In progress] Dynamic calls have been detected..\"\n\t\tdynamicCallsWhereTraced = True\n\n\t# Now the helper file should be closed and erased.\n\tos.remove(dynamicCallsFilePath)\n\n\tif dynamicCallsWhereTraced:\n\t\t# This APK should be patched!\n\t\treturn missing_permissions, classesWithDynCodeLoad\n\n\t# Something went wrong..\n\tprint \"[Exit] Dynamic calls have not been detected!\"\n\treturn sys.exit(FAILURE)\n\ndef addMissingPermsToAndroidManifest(decodeDirName, missingPerms):\n\t\n\tif not decodeDirName or not(os.path.isdir(decodeDirName)):\n\t\tprint \"[Exit] Invalid folder was provided!\"\n\t\tsys.exit(FAILURE)\n\n\tprint \"[In progress] Adding missing permission to AndroidManifest.xml..\"\n\n\tandroidManifestPath = decodeDirName + os.sep + \"AndroidManifest.xml\"\n\n\tif not os.path.exists(androidManifestPath):\n\t\tprint \"[Exit] Decoded APK does not have an AndroidManifest.xml entry!\"\n\t\tsys.exit(FAILURE)\n\n\t# Generate an XML tree from the Manifest\n\ttree = ET.parse(androidManifestPath)\n\t# Get the root entry which is manifest tag\n\troot = tree.getroot()\n\t# Add the scheme attibute for namespace\n\troot.set('xmlns:android', 'http://schemas.android.com/apk/res/android')\n\n\t# For each permission add an entry to the manifest\n\tfor perm in missingPerms:\n\n\t\t# Setup a new Element under the root\n\t\tnewPermNode = ET.Element('uses-permission')\n\t\t# And fix the required permission as a property\n\t\tnewPermNode.set('android:name', perm)\n\t\t# Append this node to the root element\n\t\troot.insert(0, newPermNode)\n\n\t# Finally write the modifications on the original manifest\n\ttree.write(androidManifestPath, encoding='utf-8')\n\ndef addBlankPadding(line):\n\n\tpadding = ''\n\tblanks = len(line) - len(line.lstrip())\n\n\tpadding = padding + blanks * ' '\n\n\treturn padding\n\ndef patchSmaliClasses(decodeDirName, classesWithDynCodeLoad):\n\n\tif not decodeDirName or not(os.path.isdir(decodeDirName)):\n\t\tprint \"[Exit] Invalid folder was provided!\"\n\t\tsys.exit(FAILURE)\n\n\tprint \"[In progress] Patching .smali classes..\"\n\n\tsmaliFolder = decodeDirName + os.sep + \"smali\"\n\n\tfirstLineFormat = \".class\" + ACCESS_ATTR + RESERVED_KEYWORDS + CLASS_STRING\n\trepackHandler = \"Lit/necst/grabnrun/RepackHandler;\"\n\tlabelNumber = 0\n\n\t# Analyze all the elements inside the smali folder incrementally.. \n\tfor root, dirs, files in os.walk(smaliFolder):\n\t\t\n\t\tif root == smaliFolder:\n\t\t\t# Remove from analysis smali classes in \"android\" folder\n\t\t\tindex = 0\n\t\t\twhile(index < len(dirs)):\n\t\t\t\tif dirs[index] == 'android':\n\t\t\t\t\tdel dirs[index]\n\t\t\t\t\tbreak\n\t\t\t\tindex = index + 1\n\n\t\tfor smaliFile in files:\n\n\t\t\tsmaliFilePath = os.path.join(root, smaliFile)\n\n\t\t\t# A couple of flags to see if the target file needs\n\t\t\t# to be patched\n\t\t\tmayBeAnActivity = False\n\t\t\tcontainDynCode = False\n\n\t\t\tsmaliClassName = ''\n\t\t\tsuperClassName = ''\n\n\t\t\twith open(smaliFilePath, 'r') as smaliFileDesc:\n\t\t\t\t\n\t\t\t\t# Extract class name from first line of the smali file\n\t\t\t\t# and check whether this is in the classes set\n\t\t\t\tfirstLine = smaliFileDesc.readline()\n\t\t\t\t#print firstLine\n\t\t\t\ttokens = firstLineFormat.parseString( firstLine )\n\t\t\t\t#print tokens\n\t\t\t\tsmaliClassName = tokens[len(tokens) - 1][1]\n\t\t\t\tif smaliClassName in classesWithDynCodeLoad:\n\t\t\t\t\tcontainDynCode = True\n\n\t\t\t\t# Extract the superclass name and if it ends with Activity then mark\n\t\t\t\t# this class as a possible activity [Heuristic!!!]\n\t\t\t\tsecondLine = smaliFileDesc.readline()\n\t\t\t\tsuperClassName = secondLine.lstrip(\".super L\").rstrip().rstrip(\";\")\n\t\t\t\t# print secondLine\n\t\t\t\tif superClassName.endswith(\"Activity\"):\n\t\t\t\t\tmayBeAnActivity = True\n\n\t\t\t# Check whether one of the two flags was raised..\n\t\t\tif mayBeAnActivity or containDynCode:\n\n\t\t\t\t# This smali file needs to be patched\n\t\t\t\tprint \"[In progress] Patching \" + smaliFilePath + \"..\"\n\n\t\t\t\tfileName, extension = os.path.splitext(smaliFilePath)\n\t\t\t\tsmaliPatchedFilePath = fileName + \"Patch\" + extension\n\n\t\t\t\twith open(smaliFilePath, 'r') as original:\n\t\t\t\t\twith open(smaliPatchedFilePath, 'w') as patched:\n\n\t\t\t\t\t\t# Different grammars for the relevant lines to patch\n\t\t\t\t\t\tonCreateFormat = \"invoke-super {\" + VAR + \",\" + VAR + \"},\" + \"L\" + superClassName + \";->onCreate(Landroid/os/Bundle;)V\"\n\t\t\t\t\t\tnewInstanceDexClassLoader = \"new-instance\" + VAR + \", Ldalvik/system/DexClassLoader;\"\n\t\t\t\t\t\tinitDexClassLoader = \"invoke-direct {\" + delimitedList(VAR, delim = ',') + \"}, Ldalvik/system/DexClassLoader;->(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/ClassLoader;)V\"\n\t\t\t\t\t\tloadClass = \"invoke-virtual {\" + VAR + \",\" + VAR + \"}, Ldalvik/system/DexClassLoader;->loadClass(Ljava/lang/String;)Ljava/lang/Class;\"\n\t\t\t\t\t\tmovResAfterLoad = \"move-result-object\" + VAR\n\n\t\t\t\t\t\t# Flag variable..\n\t\t\t\t\t\tafterDynLoadInstruction = False\n\n\t\t\t\t\t\t# Read each line in the original file and if necessary\n\t\t\t\t\t\t# write changes in the patched version..\n\t\t\t\t\t\tfor line in original:\n\n\t\t\t\t\t\t\tif afterDynLoadInstruction:\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\tif line.strip():\n\t\t\t\t\t\t\t\t\tafterDynLoadInstruction = False\n\t\t\t\t\t\t\t\t\ttry:\n\t\t\t\t\t\t\t\t\t\t# Read and patch also next line since the move result \n\t\t\t\t\t\t\t\t\t\t# must be integrated with a check on not null values \n\t\t\t\t\t\t\t\t\t\ttokens = movResAfterLoad.parseString(line)\n\t\t\t\t\t\t\t\t\t\tpatched.write(line + \"\\n\")\n\t\t\t\t\t\t\t\t\t\tsecGNRlabel = \":sec_checkgnr_\" + str(labelNumber)\n\t\t\t\t\t\t\t\t\t\tlabelNumber = labelNumber + 1\n\t\t\t\t\t\t\t\t\t\t# Write down sanity check on the final object..\n\t\t\t\t\t\t\t\t\t\tpadding = addBlankPadding(line)\n\t\t\t\t\t\t\t\t\t\tpatched.write(padding + \"if-nez \" + tokens[1] + \", \" + secGNRlabel + \"\\n\")\n\t\t\t\t\t\t\t\t\t\tpatched.write(padding + \"invoke-static {}, \" + repackHandler + \"->raiseSecurityException()V\" + \"\\n\")\n\t\t\t\t\t\t\t\t\t\tpatched.write(padding + secGNRlabel + \"\\n\")\n\t\t\t\t\t\t\t\t\t\tprint \"Added sanity check\"\n\t\t\t\t\t\t\t\t\t\tcontinue\n\t\t\t\t\t\t\t\t\texcept ParseException:\n\t\t\t\t\t\t\t\t\t\tprint \"[Warning] A dynamically loaded instance was not assigned to any variable!\"\n\t\t\t\t\t\t\t\t\t\t#sys.exit(FAILURE)\n\n\t\t\t\t\t\t\t\telse:\n\t\t\t\t\t\t\t\t\tpatched.write(line)\n\n\t\t\t\t\t\t\ttry:\n\t\t\t\t\t\t\t\ttokens = onCreateFormat.parseString(line)\n\t\t\t\t\t\t\t\tpatched.write(line + \"\\n\")\n\t\t\t\t\t\t\t\tonCreatePatch = addBlankPadding(line) + \"invoke-static {\" + tokens[1] + \"}, \" + repackHandler + \"->enqueRunningActivity(Landroid/app/Activity;)V\" + \"\\n\"\n\t\t\t\t\t\t\t\tpatched.write(onCreatePatch)\n\t\t\t\t\t\t\t\tprint onCreatePatch\n\t\t\t\t\t\t\t\tcontinue\n\t\t\t\t\t\t\texcept ParseException:\n\t\t\t\t\t\t\t\tpass\n\n\t\t\t\t\t\t\tif 'Ldalvik/system/DexClassLoader;' in line:\n\n\t\t\t\t\t\t\t\ttry:\n\t\t\t\t\t\t\t\t\ttokens = newInstanceDexClassLoader.parseString(line)\n\t\t\t\t\t\t\t\t\t# If no exception is raised do not write anything back\n\t\t\t\t\t\t\t\t\t# since this line should be erased\n\t\t\t\t\t\t\t\t\tprint \"Line removed\"\n\t\t\t\t\t\t\t\t\tcontinue\n\t\t\t\t\t\t\t\texcept ParseException:\n\t\t\t\t\t\t\t\t\tpass\n\n\t\t\t\t\t\t\t\ttry:\n\t\t\t\t\t\t\t\t\ttokens = initDexClassLoader.parseString(line)\n\t\t\t\t\t\t\t\t\tif len(tokens) != 7:\n\t\t\t\t\t\t\t\t\t\tprint \"[Exit] Unexpected line while patching smali file!\"\n\t\t\t\t\t\t\t\t\t\tsys.exit(FAILURE)\n\n\t\t\t\t\t\t\t\t\tinitSecDex = addBlankPadding(line) + \"invoke-static {\" + tokens[2] + \", \" + tokens[3] + \", \" + tokens[4] + \", \" + tokens[5] + \"}, \" + repackHandler + \"->generateSecureDexClassLoader(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/ClassLoader;)Lit/necst/grabnrun/SecureDexClassLoader;\" + \"\\n\"\n\t\t\t\t\t\t\t\t\tmoveRes = addBlankPadding(line) + \"move-result-object \" + tokens[1] + \"\\n\"\n\t\t\t\t\t\t\t\t\tpatched.write(initSecDex + \"\\n\")\n\t\t\t\t\t\t\t\t\tpatched.write(moveRes)\n\t\t\t\t\t\t\t\t\tprint initSecDex\n\t\t\t\t\t\t\t\t\tprint moveRes\n\t\t\t\t\t\t\t\t\tcontinue\n\t\t\t\t\t\t\t\texcept ParseException:\n\t\t\t\t\t\t\t\t\tpass\n\n\t\t\t\t\t\t\t\ttry:\n\t\t\t\t\t\t\t\t\tloadClass.parseString(line)\n\t\t\t\t\t\t\t\t\tloadSecLine = line.replace('Ldalvik/system/DexClassLoader;', 'Lit/necst/grabnrun/SecureDexClassLoader;')\n\t\t\t\t\t\t\t\t\tpatched.write(loadSecLine)\n\t\t\t\t\t\t\t\t\t# Inform that the next instruction must be a move-result-object..\n\t\t\t\t\t\t\t\t\tafterDynLoadInstruction = True\n\t\t\t\t\t\t\t\t\tprint loadSecLine\n\t\t\t\t\t\t\t\t\tcontinue\n\t\t\t\t\t\t\t\texcept ParseException:\n\t\t\t\t\t\t\t\t\tpass\n\n\t\t\t\t\t\t\t\t# All the particular cases have been handled. If the line reaches this part of the code,\n\t\t\t\t\t\t\t\t# simply replace standard DexClassLoader string..\n\t\t\t\t\t\t\t\tpatchedLine = line.replace('Ldalvik/system/DexClassLoader;', 'Lit/necst/grabnrun/SecureDexClassLoader;')\n\t\t\t\t\t\t\t\tpatched.write(patchedLine)\n\t\t\t\t\t\t\t\tprint patchedLine\n\n\t\t\t\t\t\t\telse:\n\t\t\t\t\t\t\t\t# Those lines which reach this flow are the ones that do not match any relevant case.\n\t\t\t\t\t\t\t\t# Simply copy them in the patched file as they were in the original version.\n\t\t\t\t\t\t\t\tpatched.write(line)\n\n\t\t\t\t\t\t# Here the process of patching the smali file is finished\n\t\t\t\t\t\tprint \"[In progress] \" + smaliFilePath + \" has been patched..\"\t\t\t\t\t\t\n\n\t\t\t\t# Erase the old copy and rename the patched version to the original name\n\t\t\t\tos.remove(smaliFilePath)\n\t\t\t\tos.rename(smaliPatchedFilePath, smaliFilePath)\n\n\ndef setUpRepackHandler(decodeDirName, hasStaticAssociativeMap, entriesDictionary):\n\n\tif not decodeDirName or not(os.path.isdir(decodeDirName)):\n\t\tprint \"[Exit] Invalid folder was provided!\"\n\t\tsys.exit(FAILURE)\n\n\tprint \"[In progress] Copying Grab'n Run .smali classes\"\n\tpathGNRparentFolder = decodeDirName + os.sep + \"smali\" + os.sep + \"it\" + os.sep + \"necst\"\n\tpathGNRfolder = pathGNRparentFolder + os.sep + \"grabnrun\"\n\n\t# Create parent folder if necessry..\n\tif not os.path.exists(pathGNRparentFolder):\n\t\tos.makedirs(pathGNRparentFolder)\n\n\t# Remove already present copy of GNR library, if any..\n\tif os.path.exists(pathGNRfolder):\n\t\tshutil.rmtree(pathGNRfolder)\n\n\tresourceGNRfolder = \"smaliRes\" + os.sep + \"grabnrun\"\n\n\t# Copy from the smaliRes folder GNR smali classes\n\tshutil.copytree(resourceGNRfolder, pathGNRfolder)\n\n\tprint \"[In progress] Creating RepackHandler.smali class\"\n\n\trepackHandlerFilePath = pathGNRfolder + os.sep + \"RepackHandler.smali\"\n\trepackHandlerTailPath = pathGNRfolder + os.sep + \"RepackHandlerTail.smali\"\n\n\twith open(repackHandlerFilePath, 'a') as repackHandlerFile:\n\n\t\tif hasStaticAssociativeMap:\n\t\t\t# Simply consider all the entries as tuples of package names\n\t\t\t# and certificate remote URL. Populate the final map accordingly..\n\t\t\tfor packageName in entriesDictionary.keys():\n\n\t\t\t\t# Get the certificate remote URL.\n\t\t\t\tremoteCertificateURL = entriesDictionary[packageName]\n\n\t\t\t\tif isAValidPackageName(packageName):\n\t\t\t\t\tif isARemoteURL(remoteCertificateURL, True):\n\t\t\t\t\t\tlinkPackageNameToCertURL(repackHandlerFile, packageName, entriesDictionary[packageName])\n\t\t\t\t\telse:\n\t\t\t\t\t\tprint \"[Warning] Found an invalid remote certificate URL \" + remoteCertificateURL + \". The linked package name will be skipped!\"\n\t\t\t\telse:\n\t\t\t\t\tprint \"[Warning] Found an invalid package name \" + packageName + \". It will be skipped!\"\n\n\t\t\t# Finally set the hasStaticAssociativeMap attribute to True\n\t\t\tsetHasStaticAssociativeMapBool(repackHandlerFile, True)\n\n\t\telse:\n\n\t\t\t# Flag initialization variable for package names set\n\t\t\tneedToReinitializePackageNameSet = False\n\n\t\t\t# Each entry contains a container and a remote certificate URL that should be used\n\t\t\t# to validate all classes in its package names\n\t\t\tfor containerPath in entriesDictionary.keys():\n\n\t\t\t\t# Get the certificate remote URL.\n\t\t\t\tremoteCertificateURL = entriesDictionary[containerPath]\n\n\t\t\t\t# Check that the remote URL of the certificate is valid..\n\t\t\t\tif isARemoteURL(remoteCertificateURL, True):\n\t\t\t\t\t\n\t\t\t\t\t# Check whether this entry is the special one used for default case\n\t\t\t\t\tif containerPath == 'default':\n\t\t\t\t\t\tlinkPackageNameToCertURL(repackHandlerFile, containerPath, remoteCertificateURL)\n\n\t\t\t\t\telse:\n\t\t\t\t\t\t# Check whether this container path is a remote URL..\n\t\t\t\t\t\tif isARemoteURL(containerPath):\n\n\t\t\t\t\t\t\t# If remote, download the remote container at first..\n\t\t\t\t\t\t\tlocalContPath = downloadRemoteContainer(containerPath)\n\n\t\t\t\t\t\t\tif localContPath:\n\n\t\t\t\t\t\t\t\t# Make a write iteration to RepackHandler smali file\n\t\t\t\t\t\t\t\tmakeOneWriteIteration(repackHandlerFile, needToReinitializePackageNameSet, localContPath, remoteCertificateURL, containerPath)\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t# Reinitialize always after the first population of the set.\n\t\t\t\t\t\t\t\tif not needToReinitializePackageNameSet:\n\t\t\t\t\t\t\t\t\tneedToReinitializePackageNameSet = True\n\n\t\t\t\t\t\t\t\t# Remove downloaded container at local path\n\t\t\t\t\t\t\t\tos.remove(localContPath)\n\n\t\t\t\t\t\telse:\n\t\t\t\t\t\t\t# Check that the local file is a valid container\n\t\t\t\t\t\t\tif isAValidContainer(containerPath):\n\n\t\t\t\t\t\t\t\t# Make a write iteration to RepackHandler smali file\n\t\t\t\t\t\t\t\tmakeOneWriteIteration(repackHandlerFile, needToReinitializePackageNameSet, containerPath, remoteCertificateURL)\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t# Reinitialize always after the first population of the set.\n\t\t\t\t\t\t\t\tif not needToReinitializePackageNameSet:\n\t\t\t\t\t\t\t\t\tneedToReinitializePackageNameSet = True\n\t\t\t\t\t\t\n\t\t\t\t\t\t\telse:\n\t\t\t\t\t\t\t\tprint \"[Warning] Found an invalid container \" + containerPath + \". This resource will be skipped!\"\n\n\t\t\t\telse:\n\t\t\t\t\tprint \"[Warning] Found an invalid remote certificate URL \" + remoteCertificateURL + \". The linked resource will be skipped!\"\n\n\t\t\t# Finally set the hasStaticAssociativeMap attribute to False\n\t\t\tsetHasStaticAssociativeMapBool(repackHandlerFile, False)\n\n\t\t# In the end append the content of RepackHandlerTail.smali to RepackHandler.smali\n\t\twith open(repackHandlerTailPath, 'r') as repackHandlerTail:\n\n\t\t\t# Copy the whole content..\n\t\t\tlinesToAppend = repackHandlerTail.read()\n\t\t\t# ..and append it.\n\t\t\trepackHandlerFile.write(linesToAppend)\n\n\t\t# Finally remove the helper tail file\n\t\tos.remove(repackHandlerTailPath)\n\n\tprint \"[In progress] RepackHandler.smali class successfully created.\"\n\ndef makeOneWriteIteration(repackHandlerFile, needToReinitializePackageNameSet, containerPath, remoteCertificateURL, remoteContReference = ''):\n\n\t# A valid container was found. At first extract the package names\n\t# list from this container\n\tpackageNamesList = extractPackageNamesFromLocalContainer(containerPath)\n\n\tif needToReinitializePackageNameSet:\n\t\treinitializeSet(repackHandlerFile)\n\n\t# Insert all package names in a set in the smali class. \n\tfor packageName in packageNamesList:\n\t\tinsertPackageNameInSet(repackHandlerFile, packageName)\n\n\t# Link the extracted package names to its remote container, if provided..\n\tif remoteContReference: \n\t\tlinkContainerToCurrentPackageNameSet(repackHandlerFile, remoteContReference)\n\n\t# Compute digest on the downloaded local copy of the file.\n\tcontainerDigest = computeDigestEncode(containerPath)\n\n\tif containerDigest:\n\t\t# Link the extracted package names to the digest as well.\n\t\tlinkContainerToCurrentPackageNameSet(repackHandlerFile, containerDigest)\n\n\t# Finally associate each package name to the remote URL of the certificate\n\tfor packageName in packageNamesList:\n\t\tlinkPackageNameToCertURL(repackHandlerFile, packageName, remoteCertificateURL)\n\ndef reinitializeSet(repackHandlerFile):\n\n\trepackHandlerFile.write(' new-instance v1, Ljava/util/HashSet;' + 2 * '\\n')\n\trepackHandlerFile.write(' .end local v1 # \"packageNamesSet\":Ljava/util/Set;, \"Ljava/util/Set;\"' + '\\n')\n\trepackHandlerFile.write(' invoke-direct {v1}, Ljava/util/HashSet;->()V' + 2 * '\\n')\n\trepackHandlerFile.write(' .restart local v1 # \"packageNamesSet\":Ljava/util/Set;, \"Ljava/util/Set;\"' + 2 * '\\n')\n\n\tprint '[DEBUG] Set of package names reinitialized.'\n\ndef insertPackageNameInSet(repackHandlerFile, packageName):\n\n\trepackHandlerFile.write(' const-string v2, \"' + packageName + '\"' + 2 * '\\n')\n\trepackHandlerFile.write(' invoke-interface {v1, v2}, Ljava/util/Set;->add(Ljava/lang/Object;)Z' + 2 * '\\n')\n\n\tprint '[DEBUG] Added package name ' + packageName + ' to set.'\n\ndef linkContainerToCurrentPackageNameSet(repackHandlerFile, container):\n\n\trepackHandlerFile.write(' sget-object v2, Lit/necst/grabnrun/RepackHandler;->containerToPackageNamesMap:Ljava/util/Map;' + 2 * '\\n')\n\trepackHandlerFile.write(' const-string v3, \"' + container + '\"' + 2 * '\\n')\n\trepackHandlerFile.write(' invoke-interface {v2, v3, v1}, Ljava/util/Map;->put(Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;' + 2 * '\\n')\n\n\tprint '[DEBUG] Linked container ' + container + ' to current set of package names.'\t\n\ndef linkPackageNameToCertURL(repackHandlerFile, packageName, certificateURL):\n\n\trepackHandlerFile.write(' sget-object v2, Lit/necst/grabnrun/RepackHandler;->packageNameToCertificateURLMap:Ljava/util/Map;' + 2 * '\\n')\n\trepackHandlerFile.write(' const-string v3, \"' + packageName + '\"' + 2 * '\\n')\n\trepackHandlerFile.write(' const-string v4, \"' + certificateURL + '\"' + 2 * '\\n')\n\trepackHandlerFile.write(' invoke-interface {v2, v3, v4}, Ljava/util/Map;->put(Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;' + 2 * '\\n')\n\n\tprint '[DEBUG] Linked package name ' + packageName + ' to remote certificate at ' + certificateURL\n\ndef setHasStaticAssociativeMapBool(repackHandlerFile, boolValue):\n\n\tif boolValue:\n\t\trepackHandlerFile.write(' const/4 v2, 0x1' + 2 * '\\n')\n\telse:\n\t\trepackHandlerFile.write(' const/4 v2, 0x0' + 2 * '\\n')\n\n\tprint '[DEBUG] Set attribute hasStaticAssociativeMap to ' + str(boolValue)\n\ndef main(argv):\n\n\t# An argument parser is set up to handle user command line input.\n\tparser = argparse.ArgumentParser(description='Process an APK to automatically port it to use GNR secure API for dynamic code loading.')\n\tparser.add_argument('-p', '--preference-file', metavar = 'local file path', help='local path pointing to the preference file used to choose how the repackaging operation will be handled. If missing, a GUI will be shown to configure the required parameters')\n\tparser.add_argument('-k', '--keep-resources', action='store_true', help='avoid temporary files being erased at the end of the process')\n\n\targs = parser.parse_args()\n\n\t# Default path for the preference file in case that the GUI is used to\n\t# select preferences.\n\tuserPrefsFilePath = os.curdir + os.sep + \"preferences\"\n\n\tif args.preference_file:\n\n\t\t# The user provide the location of a preference file so check that this\n\t\t# file actually exists..\n\t\tuserPrefsFilePath = args.preference_file\n\n\t\tif os.path.exists(userPrefsFilePath) and os.path.isfile(userPrefsFilePath):\n\t\t\t# The provided preference path seems acceptable. Start the program\n\t\t\tprint \"[Start] User provided a preference file located at \" + userPrefsFilePath\n\t\telse:\n\t\t\t# The provided preference path is invalid\n\t\t\tprint \"[Error] No preference file was found at the provided location! Aborting..\"\n\t\t\tsys.exit(FAILURE)\n\n\telse:\n\n\t\t# Invoke the Java GUI to recover user preferences on the \n\t\t# repackaging operation\n\t\tprint \"[Start] A GUI is shown to select repackaging options.\"\n\t\tinputSelector = subprocess.call([\"java\", \"-jar\", \"libs\" + os.sep + \"RepackInputSelector.jar\"])\n\n\n\t\tif inputSelector != SUCCESS:\n\t\t\t# User aborted the process. No repackaging will be done\n\t\t\tprint \"[Exit] User aborted the parameter selection steps. No repackaging..\"\n\t\t\tsys.exit(FAILURE)\n\n\t# User completes successfully the preferences \n\t# selection step. Now the repackaging operation starts..\n\trebuiltAPK = \"\"\n\n\twith open(userPrefsFilePath, 'r') as userPrefsFile:\n\t\t\n\t\t# First line must be the apk path.\n\t\tapkPath = userPrefsFile.readline().rstrip();\n\n\t\t# Check that this path is actually pointing to\n\t\t# a valid APK container. \n\t\tif isAValidContainer(apkPath, True):\n\n\t\t\t# Start Androguard analysis on this APK\n\t\t\t# Here we also check whether this APK needs to be patched\n\t\t\tmissingPerms, classesWithDynCodeLoad = performAnalysis(apkPath)\n\n\t\t\t# print missingPerms\n\t\t\t# print classesWithDynCodeLoad\n\n\t\t\t# At first this APK should be decoded with apktool.\n\t\t\tdecodeDirName = decodeTargetAPK(apkPath)\n\n\t\t\t# Then missing permissions, if any, must be added.\n\t\t\taddMissingPermsToAndroidManifest(decodeDirName, missingPerms)\n\n\t\t\t# Next all extension classes of Activities and classes\n\t\t\t# which uses dynamic code loading must be patched.\n\t\t\tpatchSmaliClasses(decodeDirName, classesWithDynCodeLoad)\n\n\t\t\t# In the end the RepackHandler should be set up\n\t\t\t# depending on user preferences. Here smali classes from GNR\n\t\t\t# library will be copied as well.\n\n\t\t\t## Retrieve user preferences (first the boolean value)\n\t\t\thasStaticAssociativeMap = userPrefsFile.readline().rstrip().lower().capitalize();\n\t\t\t\n\t\t\t## Required casting from String to bool value\n\t\t\tif hasStaticAssociativeMap == 'True':\n\t\t\t\thasStaticAssociativeMap = True\n\t\t\telse:\n\t\t\t\tif hasStaticAssociativeMap == 'False':\n\t\t\t\t\thasStaticAssociativeMap = False\n\t\t\t\telse:\n\t\t\t\t\tprint \"[Error] Invalid format of the preference file! Second line should be a True/False choice. Aborting..\"\n\t\t\t\t\tif not args.keep_resources:\n\t\t\t\t\t\tshutil.rmtree(decodeDirName)\n\t\t\t\t\tsys.exit(FAILURE)\n\n\t\t\t## Initialize dictionary and add entries in the file to it\n\t\t\tentriesDictionary = {}\n\n\t\t\tfor line in userPrefsFile:\n\n\t\t\t\t# Split the line according to the separator..\n\t\t\t\tsubfields = line.split(\"|\")\n\n\t\t\t\t# Sanity check on the preference file format\n\t\t\t\tif len(subfields) != 2:\n\t\t\t\t\tprint \"[Error] Invalid format of the preference file! Aborting..\"\n\t\t\t\t\tif not args.keep_resources:\n\t\t\t\t\t\tshutil.rmtree(decodeDirName)\n\t\t\t\t\tsys.exit(FAILURE)\n\n\t\t\t\tentriesDictionary[subfields[0].strip()] = subfields[1].strip()\n\n\t\t\t#print entriesDictionary\n\n\t\t\tsetUpRepackHandler(decodeDirName, hasStaticAssociativeMap, entriesDictionary)\n\n\t\t\t# Finally rebuild the APK with the patched resources\n\t\t\trebuiltAPK = buildRepackagedAPK(decodeDirName)\n\n\t\t\t# Copy repackaged APK in main folder\n\t\t\tshutil.copy(rebuiltAPK, os.getcwd())\n\n\t\t\t# Raise success flag\n\t\t\trepackageSuccessful = True\n\n\t\telse:\n\n\t\t\t# The preference file did not point to a valid APK container\n\t\t\tprint \"[Error] Invalid format of the preference file! First line should point to a valid APK. Aborting..\"\n\t\t\tsys.exit(FAILURE)\n\n\t# Clean up of all the resources\n\t# os.remove(userPrefsFilePath)\n\tif not args.keep_resources:\n\t\tshutil.rmtree(decodeDirName)\n\n\t# The repackaging process is finished with no errors :)\n\tfinalPath = os.getcwd() + os.sep + os.path.basename(rebuiltAPK)\n\tprint \"[Success] Target APK was successfully patched! Result container can be found at \" + finalPath\n\tsys.exit(SUCCESS)\n\nif __name__ == \"__main__\":\n\tmain(sys.argv[1:])"
},
{
"path": "repackPOC/requirements.txt",
"content": "# Required modules you will need on your machine in order to run\n# 'Grab'n Run repackaging tool\".\n# Type in a terminal the following command:\n# pip install -r //repack/requirements.txt\n\n# You will also need to setup a local copy of Androguard to run this tool\n# and to link its local folder to the variable \"androguard_location\" \n# at the beginning of the file named \"repackagingTool.py\".\n\n# For further details on Androguard installation see:\n# https://code.google.com/p/androguard/wiki/Installation\n\n# Finally notice that this script requires a Python version >= 2.6 and <= 3.\n# To run the script simply type:\n# python repackagingTool.py\n\nargparse>=1.2.1\npyparsing>=2.0.1\n"
},
{
"path": "repackPOC/smaliRes/grabnrun/CacheLogger.smali",
"content": ".class final Lit/necst/grabnrun/CacheLogger;\n.super Ljava/lang/Object;\n.source \"CacheLogger.java\"\n\n\n# static fields\n.field private static final CREATION_TIMESTAMP:I = 0x2\n\n.field private static final ELEMENTS_PER_LOG_LINE:I = 0x3\n\n.field private static final LOCAL_FILE_NAME:I = 0x1\n\n.field private static final REMOTE_URL:I = 0x0\n\n.field private static final TAG_FILE_CACHE_LOGGER:Ljava/lang/String;\n\n.field private static final helperFileName:Ljava/lang/String; = \"helper.txt\"\n\n\n# instance fields\n.field private cacheDirectoryPath:Ljava/lang/String;\n\n.field private hasBeenAlreadyFinalized:Z\n\n.field private helperFile:Ljava/io/File;\n\n.field private remoteURLToCreationTimestamp:Ljava/util/Map;\n .annotation system Ldalvik/annotation/Signature;\n value = {\n \"Ljava/util/Map\",\n \"<\",\n \"Ljava/lang/String;\",\n \"Ljava/lang/Long;\",\n \">;\"\n }\n .end annotation\n.end field\n\n.field private remoteURLToLocalFileMap:Ljava/util/Map;\n .annotation system Ldalvik/annotation/Signature;\n value = {\n \"Ljava/util/Map\",\n \"<\",\n \"Ljava/lang/String;\",\n \"Ljava/lang/String;\",\n \">;\"\n }\n .end annotation\n.end field\n\n\n# direct methods\n.method static constructor ()V\n .locals 1\n\n .prologue\n .line 44\n const-class v0, Lit/necst/grabnrun/CacheLogger;\n\n invoke-virtual {v0}, Ljava/lang/Class;->getSimpleName()Ljava/lang/String;\n\n move-result-object v0\n\n sput-object v0, Lit/necst/grabnrun/CacheLogger;->TAG_FILE_CACHE_LOGGER:Ljava/lang/String;\n\n .line 62\n return-void\n.end method\n\n.method constructor (Ljava/lang/String;I)V\n .locals 14\n .param p1, \"cacheDirectoryPath\" # Ljava/lang/String;\n .param p2, \"daysTillConsideredFresh\" # I\n\n .prologue\n .line 81\n invoke-direct {p0}, Ljava/lang/Object;->()V\n\n .line 85\n new-instance v7, Ljava/util/HashMap;\n\n invoke-direct {v7}, Ljava/util/HashMap;->()V\n\n iput-object v7, p0, Lit/necst/grabnrun/CacheLogger;->remoteURLToLocalFileMap:Ljava/util/Map;\n\n .line 86\n new-instance v7, Ljava/util/HashMap;\n\n invoke-direct {v7}, Ljava/util/HashMap;->()V\n\n iput-object v7, p0, Lit/necst/grabnrun/CacheLogger;->remoteURLToCreationTimestamp:Ljava/util/Map;\n\n .line 88\n iput-object p1, p0, Lit/necst/grabnrun/CacheLogger;->cacheDirectoryPath:Ljava/lang/String;\n\n .line 90\n const/4 v7, 0x0\n\n iput-boolean v7, p0, Lit/necst/grabnrun/CacheLogger;->hasBeenAlreadyFinalized:Z\n\n .line 95\n new-instance v7, Ljava/io/File;\n\n new-instance v10, Ljava/lang/StringBuilder;\n\n invoke-static {p1}, Ljava/lang/String;->valueOf(Ljava/lang/Object;)Ljava/lang/String;\n\n move-result-object v11\n\n invoke-direct {v10, v11}, Ljava/lang/StringBuilder;->(Ljava/lang/String;)V\n\n sget-object v11, Ljava/io/File;->separator:Ljava/lang/String;\n\n invoke-virtual {v10, v11}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;\n\n move-result-object v10\n\n const-string v11, \"helper.txt\"\n\n invoke-virtual {v10, v11}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;\n\n move-result-object v10\n\n invoke-virtual {v10}, Ljava/lang/StringBuilder;->toString()Ljava/lang/String;\n\n move-result-object v10\n\n invoke-direct {v7, v10}, Ljava/io/File;->(Ljava/lang/String;)V\n\n iput-object v7, p0, Lit/necst/grabnrun/CacheLogger;->helperFile:Ljava/io/File;\n\n .line 97\n iget-object v7, p0, Lit/necst/grabnrun/CacheLogger;->helperFile:Ljava/io/File;\n\n invoke-virtual {v7}, Ljava/io/File;->exists()Z\n\n move-result v7\n\n if-eqz v7, :cond_1\n\n .line 99\n const/4 v5, 0x0\n\n .line 105\n .local v5, \"in\":Ljava/util/Scanner;\n :try_start_0\n new-instance v7, Ljava/util/Scanner;\n\n iget-object v10, p0, Lit/necst/grabnrun/CacheLogger;->helperFile:Ljava/io/File;\n\n invoke-direct {v7, v10}, Ljava/util/Scanner;->(Ljava/io/File;)V\n\n const-string v10, \";\\n\"\n\n invoke-virtual {v7, v10}, Ljava/util/Scanner;->useDelimiter(Ljava/lang/String;)Ljava/util/Scanner;\n\n move-result-object v5\n\n .line 107\n :cond_0\n :goto_0\n invoke-virtual {v5}, Ljava/util/Scanner;->hasNext()Z\n :try_end_0\n .catch Ljava/io/FileNotFoundException; {:try_start_0 .. :try_end_0} :catch_0\n .catchall {:try_start_0 .. :try_end_0} :catchall_0\n\n move-result v7\n\n if-nez v7, :cond_2\n\n .line 146\n if-eqz v5, :cond_1\n\n .line 147\n invoke-virtual {v5}, Ljava/util/Scanner;->close()V\n\n .line 151\n .end local v5 # \"in\":Ljava/util/Scanner;\n :cond_1\n :goto_1\n return-void\n\n .line 110\n .restart local v5 # \"in\":Ljava/util/Scanner;\n :cond_2\n :try_start_1\n invoke-virtual {v5}, Ljava/util/Scanner;->next()Ljava/lang/String;\n\n move-result-object v1\n\n .line 111\n .local v1, \"currentLine\":Ljava/lang/String;\n const-string v7, \" \"\n\n invoke-virtual {v1, v7}, Ljava/lang/String;->split(Ljava/lang/String;)[Ljava/lang/String;\n\n move-result-object v6\n\n .line 113\n .local v6, \"lineTokens\":[Ljava/lang/String;\n array-length v7, v6\n\n const/4 v10, 0x3\n\n if-ne v7, v10, :cond_0\n\n .line 115\n new-instance v0, Ljava/io/File;\n\n new-instance v7, Ljava/lang/StringBuilder;\n\n invoke-static {p1}, Ljava/lang/String;->valueOf(Ljava/lang/Object;)Ljava/lang/String;\n\n move-result-object v10\n\n invoke-direct {v7, v10}, Ljava/lang/StringBuilder;->(Ljava/lang/String;)V\n\n sget-object v10, Ljava/io/File;->separator:Ljava/lang/String;\n\n invoke-virtual {v7, v10}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;\n\n move-result-object v7\n\n const/4 v10, 0x1\n\n aget-object v10, v6, v10\n\n invoke-virtual {v7, v10}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;\n\n move-result-object v7\n\n invoke-virtual {v7}, Ljava/lang/StringBuilder;->toString()Ljava/lang/String;\n\n move-result-object v7\n\n invoke-direct {v0, v7}, Ljava/io/File;->(Ljava/lang/String;)V\n\n .line 117\n .local v0, \"checkContainerFile\":Ljava/io/File;\n invoke-virtual {v0}, Ljava/io/File;->exists()Z\n\n move-result v7\n\n if-eqz v7, :cond_0\n\n .line 121\n invoke-static {}, Ljava/lang/System;->currentTimeMillis()J\n\n move-result-wide v10\n\n const/4 v7, 0x2\n\n aget-object v7, v6, v7\n\n invoke-static {v7}, Ljava/lang/Long;->valueOf(Ljava/lang/String;)Ljava/lang/Long;\n\n move-result-object v7\n\n invoke-virtual {v7}, Ljava/lang/Long;->longValue()J\n\n move-result-wide v12\n\n sub-long v2, v10, v12\n\n .line 124\n .local v2, \"currentLivedTime\":J\n mul-int/lit8 v7, p2, 0x18\n\n mul-int/lit8 v7, v7, 0x3c\n\n mul-int/lit16 v7, v7, 0x3e8\n\n int-to-long v8, v7\n\n .line 126\n .local v8, \"maximumTimeToLive\":J\n cmp-long v7, v2, v8\n\n if-gez v7, :cond_3\n\n .line 129\n iget-object v7, p0, Lit/necst/grabnrun/CacheLogger;->remoteURLToLocalFileMap:Ljava/util/Map;\n\n const/4 v10, 0x0\n\n aget-object v10, v6, v10\n\n const/4 v11, 0x1\n\n aget-object v11, v6, v11\n\n invoke-interface {v7, v10, v11}, Ljava/util/Map;->put(Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;\n\n .line 130\n iget-object v7, p0, Lit/necst/grabnrun/CacheLogger;->remoteURLToCreationTimestamp:Ljava/util/Map;\n\n const/4 v10, 0x0\n\n aget-object v10, v6, v10\n\n const/4 v11, 0x2\n\n aget-object v11, v6, v11\n\n invoke-static {v11}, Ljava/lang/Long;->valueOf(Ljava/lang/String;)Ljava/lang/Long;\n\n move-result-object v11\n\n invoke-interface {v7, v10, v11}, Ljava/util/Map;->put(Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;\n :try_end_1\n .catch Ljava/io/FileNotFoundException; {:try_start_1 .. :try_end_1} :catch_0\n .catchall {:try_start_1 .. :try_end_1} :catchall_0\n\n goto :goto_0\n\n .line 142\n .end local v0 # \"checkContainerFile\":Ljava/io/File;\n .end local v1 # \"currentLine\":Ljava/lang/String;\n .end local v2 # \"currentLivedTime\":J\n .end local v6 # \"lineTokens\":[Ljava/lang/String;\n .end local v8 # \"maximumTimeToLive\":J\n :catch_0\n move-exception v4\n\n .line 143\n .local v4, \"e\":Ljava/io/FileNotFoundException;\n :try_start_2\n sget-object v7, Lit/necst/grabnrun/CacheLogger;->TAG_FILE_CACHE_LOGGER:Ljava/lang/String;\n\n const-string v10, \"Issue while opening helper file!\"\n\n invoke-static {v7, v10}, Landroid/util/Log;->w(Ljava/lang/String;Ljava/lang/String;)I\n :try_end_2\n .catchall {:try_start_2 .. :try_end_2} :catchall_0\n\n .line 146\n if-eqz v5, :cond_1\n\n .line 147\n invoke-virtual {v5}, Ljava/util/Scanner;->close()V\n\n goto :goto_1\n\n .line 135\n .end local v4 # \"e\":Ljava/io/FileNotFoundException;\n .restart local v0 # \"checkContainerFile\":Ljava/io/File;\n .restart local v1 # \"currentLine\":Ljava/lang/String;\n .restart local v2 # \"currentLivedTime\":J\n .restart local v6 # \"lineTokens\":[Ljava/lang/String;\n .restart local v8 # \"maximumTimeToLive\":J\n :cond_3\n :try_start_3\n invoke-virtual {v0}, Ljava/io/File;->delete()Z\n\n move-result v7\n\n if-eqz v7, :cond_0\n\n .line 136\n sget-object v7, Lit/necst/grabnrun/CacheLogger;->TAG_FILE_CACHE_LOGGER:Ljava/lang/String;\n\n new-instance v10, Ljava/lang/StringBuilder;\n\n const-string v11, \"Issue while erasing \"\n\n invoke-direct {v10, v11}, Ljava/lang/StringBuilder;->(Ljava/lang/String;)V\n\n invoke-virtual {v0}, Ljava/io/File;->getAbsolutePath()Ljava/lang/String;\n\n move-result-object v11\n\n invoke-virtual {v10, v11}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;\n\n move-result-object v10\n\n invoke-virtual {v10}, Ljava/lang/StringBuilder;->toString()Ljava/lang/String;\n\n move-result-object v10\n\n invoke-static {v7, v10}, Landroid/util/Log;->w(Ljava/lang/String;Ljava/lang/String;)I\n :try_end_3\n .catch Ljava/io/FileNotFoundException; {:try_start_3 .. :try_end_3} :catch_0\n .catchall {:try_start_3 .. :try_end_3} :catchall_0\n\n goto/16 :goto_0\n\n .line 144\n .end local v0 # \"checkContainerFile\":Ljava/io/File;\n .end local v1 # \"currentLine\":Ljava/lang/String;\n .end local v2 # \"currentLivedTime\":J\n .end local v6 # \"lineTokens\":[Ljava/lang/String;\n .end local v8 # \"maximumTimeToLive\":J\n :catchall_0\n move-exception v7\n\n .line 146\n if-eqz v5, :cond_4\n\n .line 147\n invoke-virtual {v5}, Ljava/util/Scanner;->close()V\n\n .line 149\n :cond_4\n throw v7\n.end method\n\n\n# virtual methods\n.method final addCachedEntryToLog(Ljava/lang/String;Ljava/lang/String;)V\n .locals 4\n .param p1, \"remoteURL\" # Ljava/lang/String;\n .param p2, \"localFileName\" # Ljava/lang/String;\n\n .prologue\n .line 190\n iget-boolean v0, p0, Lit/necst/grabnrun/CacheLogger;->hasBeenAlreadyFinalized:Z\n\n if-eqz v0, :cond_0\n\n .line 195\n :goto_0\n return-void\n\n .line 193\n :cond_0\n iget-object v0, p0, Lit/necst/grabnrun/CacheLogger;->remoteURLToCreationTimestamp:Ljava/util/Map;\n\n invoke-static {}, Ljava/lang/System;->currentTimeMillis()J\n\n move-result-wide v2\n\n invoke-static {v2, v3}, Ljava/lang/Long;->valueOf(J)Ljava/lang/Long;\n\n move-result-object v1\n\n invoke-interface {v0, p1, v1}, Ljava/util/Map;->put(Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;\n\n .line 194\n iget-object v0, p0, Lit/necst/grabnrun/CacheLogger;->remoteURLToLocalFileMap:Ljava/util/Map;\n\n invoke-interface {v0, p1, p2}, Ljava/util/Map;->put(Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;\n\n goto :goto_0\n.end method\n\n.method final checkForCachedEntry(Ljava/lang/String;)Ljava/lang/String;\n .locals 4\n .param p1, \"remoteURL\" # Ljava/lang/String;\n\n .prologue\n const/4 v1, 0x0\n\n .line 165\n iget-boolean v0, p0, Lit/necst/grabnrun/CacheLogger;->hasBeenAlreadyFinalized:Z\n\n if-eqz v0, :cond_0\n\n move-object v0, v1\n\n .line 174\n :goto_0\n return-object v0\n\n .line 169\n :cond_0\n iget-object v0, p0, Lit/necst/grabnrun/CacheLogger;->remoteURLToLocalFileMap:Ljava/util/Map;\n\n invoke-interface {v0, p1}, Ljava/util/Map;->containsKey(Ljava/lang/Object;)Z\n\n move-result v0\n\n if-eqz v0, :cond_1\n\n .line 170\n new-instance v2, Ljava/io/File;\n\n new-instance v0, Ljava/lang/StringBuilder;\n\n iget-object v3, p0, Lit/necst/grabnrun/CacheLogger;->cacheDirectoryPath:Ljava/lang/String;\n\n invoke-static {v3}, Ljava/lang/String;->valueOf(Ljava/lang/Object;)Ljava/lang/String;\n\n move-result-object v3\n\n invoke-direct {v0, v3}, Ljava/lang/StringBuilder;->(Ljava/lang/String;)V\n\n sget-object v3, Ljava/io/File;->separator:Ljava/lang/String;\n\n invoke-virtual {v0, v3}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;\n\n move-result-object v3\n\n iget-object v0, p0, Lit/necst/grabnrun/CacheLogger;->remoteURLToLocalFileMap:Ljava/util/Map;\n\n invoke-interface {v0, p1}, Ljava/util/Map;->get(Ljava/lang/Object;)Ljava/lang/Object;\n\n move-result-object v0\n\n check-cast v0, Ljava/lang/String;\n\n invoke-virtual {v3, v0}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;\n\n move-result-object v0\n\n invoke-virtual {v0}, Ljava/lang/StringBuilder;->toString()Ljava/lang/String;\n\n move-result-object v0\n\n invoke-direct {v2, v0}, Ljava/io/File;->(Ljava/lang/String;)V\n\n invoke-virtual {v2}, Ljava/io/File;->exists()Z\n\n move-result v0\n\n if-eqz v0, :cond_1\n\n .line 171\n iget-object v0, p0, Lit/necst/grabnrun/CacheLogger;->remoteURLToLocalFileMap:Ljava/util/Map;\n\n invoke-interface {v0, p1}, Ljava/util/Map;->get(Ljava/lang/Object;)Ljava/lang/Object;\n\n move-result-object v0\n\n check-cast v0, Ljava/lang/String;\n\n goto :goto_0\n\n :cond_1\n move-object v0, v1\n\n .line 174\n goto :goto_0\n.end method\n\n.method final finalizeLog()V\n .locals 7\n\n .prologue\n .line 209\n iget-boolean v5, p0, Lit/necst/grabnrun/CacheLogger;->hasBeenAlreadyFinalized:Z\n\n if-eqz v5, :cond_1\n\n .line 255\n :cond_0\n :goto_0\n return-void\n\n .line 210\n :cond_1\n const/4 v5, 0x1\n\n iput-boolean v5, p0, Lit/necst/grabnrun/CacheLogger;->hasBeenAlreadyFinalized:Z\n\n .line 213\n iget-object v5, p0, Lit/necst/grabnrun/CacheLogger;->helperFile:Ljava/io/File;\n\n invoke-virtual {v5}, Ljava/io/File;->exists()Z\n\n move-result v5\n\n if-eqz v5, :cond_2\n\n .line 214\n iget-object v5, p0, Lit/necst/grabnrun/CacheLogger;->helperFile:Ljava/io/File;\n\n invoke-virtual {v5}, Ljava/io/File;->delete()Z\n\n move-result v5\n\n if-nez v5, :cond_2\n\n .line 215\n sget-object v5, Lit/necst/grabnrun/CacheLogger;->TAG_FILE_CACHE_LOGGER:Ljava/lang/String;\n\n const-string v6, \"Problem while erasing old copy of helper file!\"\n\n invoke-static {v5, v6}, Landroid/util/Log;->w(Ljava/lang/String;Ljava/lang/String;)I\n\n .line 217\n :cond_2\n iget-object v5, p0, Lit/necst/grabnrun/CacheLogger;->remoteURLToLocalFileMap:Ljava/util/Map;\n\n invoke-interface {v5}, Ljava/util/Map;->isEmpty()Z\n\n move-result v5\n\n if-nez v5, :cond_0\n\n .line 222\n const/4 v2, 0x0\n\n .line 226\n .local v2, \"mPrintWriter\":Ljava/io/PrintWriter;\n :try_start_0\n new-instance v3, Ljava/io/PrintWriter;\n\n iget-object v5, p0, Lit/necst/grabnrun/CacheLogger;->helperFile:Ljava/io/File;\n\n invoke-direct {v3, v5}, Ljava/io/PrintWriter;->(Ljava/io/File;)V\n :try_end_0\n .catch Ljava/io/IOException; {:try_start_0 .. :try_end_0} :catch_1\n .catchall {:try_start_0 .. :try_end_0} :catchall_1\n\n .line 228\n .end local v2 # \"mPrintWriter\":Ljava/io/PrintWriter;\n .local v3, \"mPrintWriter\":Ljava/io/PrintWriter;\n :try_start_1\n iget-object v5, p0, Lit/necst/grabnrun/CacheLogger;->remoteURLToLocalFileMap:Ljava/util/Map;\n\n invoke-interface {v5}, Ljava/util/Map;->keySet()Ljava/util/Set;\n\n move-result-object v5\n\n invoke-interface {v5}, Ljava/util/Set;->iterator()Ljava/util/Iterator;\n\n move-result-object v4\n\n .line 230\n .local v4, \"remoteURLIterator\":Ljava/util/Iterator;, \"Ljava/util/Iterator;\"\n :cond_3\n :goto_1\n invoke-interface {v4}, Ljava/util/Iterator;->hasNext()Z\n\n move-result v5\n\n if-nez v5, :cond_4\n\n .line 242\n invoke-virtual {v3}, Ljava/io/PrintWriter;->checkError()Z\n\n move-result v5\n\n if-eqz v5, :cond_6\n\n .line 243\n new-instance v5, Ljava/io/IOException;\n\n invoke-direct {v5}, Ljava/io/IOException;->()V\n\n throw v5\n :try_end_1\n .catch Ljava/io/IOException; {:try_start_1 .. :try_end_1} :catch_0\n .catchall {:try_start_1 .. :try_end_1} :catchall_0\n\n .line 247\n .end local v4 # \"remoteURLIterator\":Ljava/util/Iterator;, \"Ljava/util/Iterator;\"\n :catch_0\n move-exception v1\n\n move-object v2, v3\n\n .line 248\n .end local v3 # \"mPrintWriter\":Ljava/io/PrintWriter;\n .local v1, \"e\":Ljava/io/IOException;\n .restart local v2 # \"mPrintWriter\":Ljava/io/PrintWriter;\n :goto_2\n :try_start_2\n sget-object v5, Lit/necst/grabnrun/CacheLogger;->TAG_FILE_CACHE_LOGGER:Ljava/lang/String;\n\n const-string v6, \"Problem while updating helper file!\"\n\n invoke-static {v5, v6}, Landroid/util/Log;->w(Ljava/lang/String;Ljava/lang/String;)I\n :try_end_2\n .catchall {:try_start_2 .. :try_end_2} :catchall_1\n\n .line 251\n if-eqz v2, :cond_0\n\n .line 252\n invoke-virtual {v2}, Ljava/io/PrintWriter;->close()V\n\n goto :goto_0\n\n .line 232\n .end local v1 # \"e\":Ljava/io/IOException;\n .end local v2 # \"mPrintWriter\":Ljava/io/PrintWriter;\n .restart local v3 # \"mPrintWriter\":Ljava/io/PrintWriter;\n .restart local v4 # \"remoteURLIterator\":Ljava/util/Iterator;, \"Ljava/util/Iterator;\"\n :cond_4\n :try_start_3\n invoke-interface {v4}, Ljava/util/Iterator;->next()Ljava/lang/Object;\n\n move-result-object v0\n\n check-cast v0, Ljava/lang/String;\n\n .line 234\n .local v0, \"currentRemoteURL\":Ljava/lang/String;\n iget-object v5, p0, Lit/necst/grabnrun/CacheLogger;->remoteURLToCreationTimestamp:Ljava/util/Map;\n\n invoke-interface {v5, v0}, Ljava/util/Map;->containsKey(Ljava/lang/Object;)Z\n\n move-result v5\n\n if-eqz v5, :cond_3\n\n .line 238\n new-instance v5, Ljava/lang/StringBuilder;\n\n invoke-static {v0}, Ljava/lang/String;->valueOf(Ljava/lang/Object;)Ljava/lang/String;\n\n move-result-object v6\n\n invoke-direct {v5, v6}, Ljava/lang/StringBuilder;->(Ljava/lang/String;)V\n\n const-string v6, \" \"\n\n invoke-virtual {v5, v6}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;\n\n move-result-object v6\n\n iget-object v5, p0, Lit/necst/grabnrun/CacheLogger;->remoteURLToLocalFileMap:Ljava/util/Map;\n\n invoke-interface {v5, v0}, Ljava/util/Map;->get(Ljava/lang/Object;)Ljava/lang/Object;\n\n move-result-object v5\n\n check-cast v5, Ljava/lang/String;\n\n invoke-virtual {v6, v5}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;\n\n move-result-object v5\n\n const-string v6, \" \"\n\n invoke-virtual {v5, v6}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;\n\n move-result-object v5\n\n iget-object v6, p0, Lit/necst/grabnrun/CacheLogger;->remoteURLToCreationTimestamp:Ljava/util/Map;\n\n invoke-interface {v6, v0}, Ljava/util/Map;->get(Ljava/lang/Object;)Ljava/lang/Object;\n\n move-result-object v6\n\n invoke-virtual {v5, v6}, Ljava/lang/StringBuilder;->append(Ljava/lang/Object;)Ljava/lang/StringBuilder;\n\n move-result-object v5\n\n const-string v6, \";\"\n\n invoke-virtual {v5, v6}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;\n\n move-result-object v5\n\n invoke-virtual {v5}, Ljava/lang/StringBuilder;->toString()Ljava/lang/String;\n\n move-result-object v5\n\n invoke-virtual {v3, v5}, Ljava/io/PrintWriter;->println(Ljava/lang/String;)V\n :try_end_3\n .catch Ljava/io/IOException; {:try_start_3 .. :try_end_3} :catch_0\n .catchall {:try_start_3 .. :try_end_3} :catchall_0\n\n goto :goto_1\n\n .line 249\n .end local v0 # \"currentRemoteURL\":Ljava/lang/String;\n .end local v4 # \"remoteURLIterator\":Ljava/util/Iterator;, \"Ljava/util/Iterator;\"\n :catchall_0\n move-exception v5\n\n move-object v2, v3\n\n .line 251\n .end local v3 # \"mPrintWriter\":Ljava/io/PrintWriter;\n .restart local v2 # \"mPrintWriter\":Ljava/io/PrintWriter;\n :goto_3\n if-eqz v2, :cond_5\n\n .line 252\n invoke-virtual {v2}, Ljava/io/PrintWriter;->close()V\n\n .line 253\n :cond_5\n throw v5\n\n .line 245\n .end local v2 # \"mPrintWriter\":Ljava/io/PrintWriter;\n .restart local v3 # \"mPrintWriter\":Ljava/io/PrintWriter;\n .restart local v4 # \"remoteURLIterator\":Ljava/util/Iterator;, \"Ljava/util/Iterator;\"\n :cond_6\n :try_start_4\n sget-object v5, Lit/necst/grabnrun/CacheLogger;->TAG_FILE_CACHE_LOGGER:Ljava/lang/String;\n\n const-string v6, \"Helper file was correctly stored on the device.\"\n\n invoke-static {v5, v6}, Landroid/util/Log;->d(Ljava/lang/String;Ljava/lang/String;)I\n :try_end_4\n .catch Ljava/io/IOException; {:try_start_4 .. :try_end_4} :catch_0\n .catchall {:try_start_4 .. :try_end_4} :catchall_0\n\n .line 251\n if-eqz v3, :cond_0\n\n .line 252\n invoke-virtual {v3}, Ljava/io/PrintWriter;->close()V\n\n goto/16 :goto_0\n\n .line 249\n .end local v3 # \"mPrintWriter\":Ljava/io/PrintWriter;\n .end local v4 # \"remoteURLIterator\":Ljava/util/Iterator;, \"Ljava/util/Iterator;\"\n .restart local v2 # \"mPrintWriter\":Ljava/io/PrintWriter;\n :catchall_1\n move-exception v5\n\n goto :goto_3\n\n .line 247\n :catch_1\n move-exception v1\n\n goto :goto_2\n.end method\n"
},
{
"path": "repackPOC/smaliRes/grabnrun/CertFileFilter.smali",
"content": ".class final Lit/necst/grabnrun/CertFileFilter;\n.super Ljava/lang/Object;\n.source \"CertFileFilter.java\"\n\n# interfaces\n.implements Ljava/io/FileFilter;\n\n\n# instance fields\n.field private certificateName:Ljava/lang/String;\n\n.field private final okCertsExtensions:[Ljava/lang/String;\n\n\n# direct methods\n.method constructor (Ljava/lang/String;)V\n .locals 3\n .param p1, \"certificateName\" # Ljava/lang/String;\n\n .prologue\n .line 46\n invoke-direct {p0}, Ljava/lang/Object;->()V\n\n .line 32\n const/4 v0, 0x1\n\n new-array v0, v0, [Ljava/lang/String;\n\n const/4 v1, 0x0\n\n const-string v2, \".pem\"\n\n aput-object v2, v0, v1\n\n iput-object v0, p0, Lit/necst/grabnrun/CertFileFilter;->okCertsExtensions:[Ljava/lang/String;\n\n .line 48\n iput-object p1, p0, Lit/necst/grabnrun/CertFileFilter;->certificateName:Ljava/lang/String;\n\n .line 49\n return-void\n.end method\n\n\n# virtual methods\n.method public final accept(Ljava/io/File;)Z\n .locals 8\n .param p1, \"file\" # Ljava/io/File;\n\n .prologue\n const/4 v1, 0x0\n\n .line 56\n invoke-virtual {p1}, Ljava/io/File;->isDirectory()Z\n\n move-result v2\n\n if-eqz v2, :cond_1\n\n .line 71\n :cond_0\n :goto_0\n return v1\n\n .line 58\n :cond_1\n invoke-virtual {p1}, Ljava/io/File;->isFile()Z\n\n move-result v2\n\n if-eqz v2, :cond_0\n\n .line 63\n iget-object v3, p0, Lit/necst/grabnrun/CertFileFilter;->okCertsExtensions:[Ljava/lang/String;\n\n array-length v4, v3\n\n move v2, v1\n\n :goto_1\n if-ge v2, v4, :cond_0\n\n aget-object v0, v3, v2\n\n .line 65\n .local v0, \"extension\":Ljava/lang/String;\n invoke-virtual {p1}, Ljava/io/File;->getName()Ljava/lang/String;\n\n move-result-object v5\n\n new-instance v6, Ljava/lang/StringBuilder;\n\n iget-object v7, p0, Lit/necst/grabnrun/CertFileFilter;->certificateName:Ljava/lang/String;\n\n invoke-static {v7}, Ljava/lang/String;->valueOf(Ljava/lang/Object;)Ljava/lang/String;\n\n move-result-object v7\n\n invoke-direct {v6, v7}, Ljava/lang/StringBuilder;->(Ljava/lang/String;)V\n\n invoke-virtual {v6, v0}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;\n\n move-result-object v6\n\n invoke-virtual {v6}, Ljava/lang/StringBuilder;->toString()Ljava/lang/String;\n\n move-result-object v6\n\n invoke-virtual {v5, v6}, Ljava/lang/String;->equals(Ljava/lang/Object;)Z\n\n move-result v5\n\n if-eqz v5, :cond_2\n\n .line 66\n const/4 v1, 0x1\n\n goto :goto_0\n\n .line 63\n :cond_2\n add-int/lit8 v2, v2, 0x1\n\n goto :goto_1\n.end method\n"
},
{
"path": "repackPOC/smaliRes/grabnrun/FileDownloader$1.smali",
"content": ".class Lit/necst/grabnrun/FileDownloader$1;\n.super Ljava/lang/Thread;\n.source \"FileDownloader.java\"\n\n\n# annotations\n.annotation system Ldalvik/annotation/EnclosingMethod;\n value = Lit/necst/grabnrun/FileDownloader;->downloadRemoteUrl(Ljava/net/URL;Ljava/lang/String;Z)Z\n.end annotation\n\n.annotation system Ldalvik/annotation/InnerClass;\n accessFlags = 0x0\n name = null\n.end annotation\n\n\n# instance fields\n.field final synthetic this$0:Lit/necst/grabnrun/FileDownloader;\n\n.field private final synthetic val$isRedirectAllowed:Z\n\n.field private final synthetic val$localURI:Ljava/lang/String;\n\n.field private final synthetic val$remoteURL:Ljava/net/URL;\n\n\n# direct methods\n.method constructor (Lit/necst/grabnrun/FileDownloader;Ljava/net/URL;ZLjava/lang/String;)V\n .locals 0\n\n .prologue\n .line 1\n iput-object p1, p0, Lit/necst/grabnrun/FileDownloader$1;->this$0:Lit/necst/grabnrun/FileDownloader;\n\n iput-object p2, p0, Lit/necst/grabnrun/FileDownloader$1;->val$remoteURL:Ljava/net/URL;\n\n iput-boolean p3, p0, Lit/necst/grabnrun/FileDownloader$1;->val$isRedirectAllowed:Z\n\n iput-object p4, p0, Lit/necst/grabnrun/FileDownloader$1;->val$localURI:Ljava/lang/String;\n\n .line 93\n invoke-direct {p0}, Ljava/lang/Thread;->()V\n\n return-void\n.end method\n\n\n# virtual methods\n.method public run()V\n .locals 16\n\n .prologue\n .line 98\n const/4 v12, 0x0\n\n .line 99\n .local v12, \"urlConnection\":Ljava/net/HttpURLConnection;\n const/4 v5, 0x0\n\n .line 100\n .local v5, \"inputStream\":Ljava/io/InputStream;\n const/4 v7, 0x0\n\n .line 104\n .local v7, \"outputStream\":Ljava/io/OutputStream;\n :try_start_0\n move-object/from16 v0, p0\n\n iget-object v13, v0, Lit/necst/grabnrun/FileDownloader$1;->val$remoteURL:Ljava/net/URL;\n\n invoke-virtual {v13}, Ljava/net/URL;->getProtocol()Ljava/lang/String;\n\n move-result-object v13\n\n const-string v14, \"https\"\n\n invoke-virtual {v13, v14}, Ljava/lang/String;->equals(Ljava/lang/Object;)Z\n\n move-result v13\n\n if-eqz v13, :cond_6\n\n .line 106\n move-object/from16 v0, p0\n\n iget-object v13, v0, Lit/necst/grabnrun/FileDownloader$1;->val$remoteURL:Ljava/net/URL;\n\n invoke-virtual {v13}, Ljava/net/URL;->openConnection()Ljava/net/URLConnection;\n\n move-result-object v13\n\n move-object v0, v13\n\n check-cast v0, Ljavax/net/ssl/HttpsURLConnection;\n\n move-object v12, v0\n\n .line 113\n :goto_0\n const/16 v13, 0x3e8\n\n invoke-virtual {v12, v13}, Ljava/net/HttpURLConnection;->setConnectTimeout(I)V\n\n .line 117\n # getter for: Lit/necst/grabnrun/FileDownloader;->TAG_FILE_DOWNLOADER:Ljava/lang/String;\n invoke-static {}, Lit/necst/grabnrun/FileDownloader;->access$0()Ljava/lang/String;\n\n move-result-object v13\n\n new-instance v14, Ljava/lang/StringBuilder;\n\n const-string v15, \"A connection was set up: \"\n\n invoke-direct {v14, v15}, Ljava/lang/StringBuilder;->(Ljava/lang/String;)V\n\n move-object/from16 v0, p0\n\n iget-object v15, v0, Lit/necst/grabnrun/FileDownloader$1;->val$remoteURL:Ljava/net/URL;\n\n invoke-virtual {v15}, Ljava/net/URL;->toString()Ljava/lang/String;\n\n move-result-object v15\n\n invoke-virtual {v14, v15}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;\n\n move-result-object v14\n\n invoke-virtual {v14}, Ljava/lang/StringBuilder;->toString()Ljava/lang/String;\n\n move-result-object v14\n\n invoke-static {v13, v14}, Landroid/util/Log;->d(Ljava/lang/String;Ljava/lang/String;)I\n\n .line 120\n move-object/from16 v0, p0\n\n iget-boolean v13, v0, Lit/necst/grabnrun/FileDownloader$1;->val$isRedirectAllowed:Z\n\n if-eqz v13, :cond_2\n\n .line 122\n const/4 v10, 0x0\n\n .line 125\n .local v10, \"redirect\":Z\n invoke-virtual {v12}, Ljava/net/HttpURLConnection;->getResponseCode()I\n\n move-result v2\n\n .line 126\n .local v2, \"connection_status\":I\n const/16 v13, 0xc8\n\n if-eq v2, v13, :cond_1\n\n .line 127\n const/16 v13, 0x12e\n\n if-eq v2, v13, :cond_0\n\n .line 128\n const/16 v13, 0x12d\n\n if-eq v2, v13, :cond_0\n\n .line 129\n const/16 v13, 0x12f\n\n if-ne v2, v13, :cond_1\n\n .line 131\n :cond_0\n const/4 v10, 0x1\n\n .line 134\n :cond_1\n if-eqz v10, :cond_2\n\n .line 137\n new-instance v11, Ljava/net/URL;\n\n const-string v13, \"Location\"\n\n invoke-virtual {v12, v13}, Ljava/net/HttpURLConnection;->getHeaderField(Ljava/lang/String;)Ljava/lang/String;\n\n move-result-object v13\n\n invoke-direct {v11, v13}, Ljava/net/URL;->(Ljava/lang/String;)V\n\n .line 140\n .local v11, \"redirectedURL\":Ljava/net/URL;\n const-string v13, \"Set-Cookie\"\n\n invoke-virtual {v12, v13}, Ljava/net/HttpURLConnection;->getHeaderField(Ljava/lang/String;)Ljava/lang/String;\n\n move-result-object v3\n\n .line 143\n .local v3, \"cookies\":Ljava/lang/String;\n invoke-virtual {v11}, Ljava/net/URL;->getProtocol()Ljava/lang/String;\n\n move-result-object v13\n\n const-string v14, \"https\"\n\n invoke-virtual {v13, v14}, Ljava/lang/String;->equals(Ljava/lang/Object;)Z\n\n move-result v13\n\n if-eqz v13, :cond_7\n\n .line 145\n invoke-virtual {v11}, Ljava/net/URL;->openConnection()Ljava/net/URLConnection;\n\n move-result-object v13\n\n move-object v0, v13\n\n check-cast v0, Ljavax/net/ssl/HttpsURLConnection;\n\n move-object v12, v0\n\n .line 152\n :goto_1\n const/16 v13, 0x3e8\n\n invoke-virtual {v12, v13}, Ljava/net/HttpURLConnection;->setConnectTimeout(I)V\n\n .line 154\n const-string v13, \"Cookie\"\n\n invoke-virtual {v12, v13, v3}, Ljava/net/HttpURLConnection;->setRequestProperty(Ljava/lang/String;Ljava/lang/String;)V\n\n .line 156\n # getter for: Lit/necst/grabnrun/FileDownloader;->TAG_FILE_DOWNLOADER:Ljava/lang/String;\n invoke-static {}, Lit/necst/grabnrun/FileDownloader;->access$0()Ljava/lang/String;\n\n move-result-object v13\n\n new-instance v14, Ljava/lang/StringBuilder;\n\n const-string v15, \"The connection was redirected to: \"\n\n invoke-direct {v14, v15}, Ljava/lang/StringBuilder;->(Ljava/lang/String;)V\n\n invoke-virtual {v11}, Ljava/net/URL;->toString()Ljava/lang/String;\n\n move-result-object v15\n\n invoke-virtual {v14, v15}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;\n\n move-result-object v14\n\n invoke-virtual {v14}, Ljava/lang/StringBuilder;->toString()Ljava/lang/String;\n\n move-result-object v14\n\n invoke-static {v13, v14}, Landroid/util/Log;->d(Ljava/lang/String;Ljava/lang/String;)I\n\n .line 161\n .end local v2 # \"connection_status\":I\n .end local v3 # \"cookies\":Ljava/lang/String;\n .end local v10 # \"redirect\":Z\n .end local v11 # \"redirectedURL\":Ljava/net/URL;\n :cond_2\n move-object/from16 v0, p0\n\n iget-object v13, v0, Lit/necst/grabnrun/FileDownloader$1;->this$0:Lit/necst/grabnrun/FileDownloader;\n\n invoke-virtual {v12}, Ljava/net/HttpURLConnection;->getContentType()Ljava/lang/String;\n\n move-result-object v14\n\n invoke-static {v13, v14}, Lit/necst/grabnrun/FileDownloader;->access$1(Lit/necst/grabnrun/FileDownloader;Ljava/lang/String;)V\n\n .line 165\n new-instance v6, Ljava/io/BufferedInputStream;\n\n invoke-virtual {v12}, Ljava/net/HttpURLConnection;->getInputStream()Ljava/io/InputStream;\n\n move-result-object v13\n\n invoke-direct {v6, v13}, Ljava/io/BufferedInputStream;->(Ljava/io/InputStream;)V\n :try_end_0\n .catch Ljava/io/IOException; {:try_start_0 .. :try_end_0} :catch_7\n .catchall {:try_start_0 .. :try_end_0} :catchall_0\n\n .line 166\n .end local v5 # \"inputStream\":Ljava/io/InputStream;\n .local v6, \"inputStream\":Ljava/io/InputStream;\n :try_start_1\n new-instance v8, Ljava/io/FileOutputStream;\n\n move-object/from16 v0, p0\n\n iget-object v13, v0, Lit/necst/grabnrun/FileDownloader$1;->val$localURI:Ljava/lang/String;\n\n invoke-direct {v8, v13}, Ljava/io/FileOutputStream;->(Ljava/lang/String;)V\n :try_end_1\n .catch Ljava/io/IOException; {:try_start_1 .. :try_end_1} :catch_8\n .catchall {:try_start_1 .. :try_end_1} :catchall_1\n\n .line 168\n .end local v7 # \"outputStream\":Ljava/io/OutputStream;\n .local v8, \"outputStream\":Ljava/io/OutputStream;\n const/4 v9, 0x0\n\n .line 169\n .local v9, \"read\":I\n const/16 v13, 0x400\n\n :try_start_2\n new-array v1, v13, [B\n\n .line 171\n .local v1, \"bytes\":[B\n :goto_2\n invoke-virtual {v6, v1}, Ljava/io/InputStream;->read([B)I\n\n move-result v9\n\n if-gtz v9, :cond_8\n\n .line 175\n # getter for: Lit/necst/grabnrun/FileDownloader;->TAG_FILE_DOWNLOADER:Ljava/lang/String;\n invoke-static {}, Lit/necst/grabnrun/FileDownloader;->access$0()Ljava/lang/String;\n\n move-result-object v13\n\n new-instance v14, Ljava/lang/StringBuilder;\n\n const-string v15, \"Download complete. Container Path: \"\n\n invoke-direct {v14, v15}, Ljava/lang/StringBuilder;->(Ljava/lang/String;)V\n\n move-object/from16 v0, p0\n\n iget-object v15, v0, Lit/necst/grabnrun/FileDownloader$1;->val$localURI:Ljava/lang/String;\n\n invoke-virtual {v14, v15}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;\n\n move-result-object v14\n\n invoke-virtual {v14}, Ljava/lang/StringBuilder;->toString()Ljava/lang/String;\n\n move-result-object v14\n\n invoke-static {v13, v14}, Landroid/util/Log;->i(Ljava/lang/String;Ljava/lang/String;)I\n :try_end_2\n .catch Ljava/io/IOException; {:try_start_2 .. :try_end_2} :catch_0\n .catchall {:try_start_2 .. :try_end_2} :catchall_2\n\n .line 183\n # getter for: Lit/necst/grabnrun/FileDownloader;->TAG_FILE_DOWNLOADER:Ljava/lang/String;\n invoke-static {}, Lit/necst/grabnrun/FileDownloader;->access$0()Ljava/lang/String;\n\n move-result-object v13\n\n const-string v14, \"Clean up all pending streams..\"\n\n invoke-static {v13, v14}, Landroid/util/Log;->d(Ljava/lang/String;Ljava/lang/String;)I\n\n .line 184\n if-eqz v12, :cond_3\n\n .line 185\n invoke-virtual {v12}, Ljava/net/HttpURLConnection;->disconnect()V\n\n .line 187\n :cond_3\n if-eqz v6, :cond_4\n\n .line 189\n :try_start_3\n invoke-virtual {v6}, Ljava/io/InputStream;->close()V\n :try_end_3\n .catch Ljava/io/IOException; {:try_start_3 .. :try_end_3} :catch_5\n\n .line 194\n :cond_4\n :goto_3\n if-eqz v8, :cond_e\n\n .line 197\n :try_start_4\n invoke-virtual {v8}, Ljava/io/OutputStream;->close()V\n :try_end_4\n .catch Ljava/io/IOException; {:try_start_4 .. :try_end_4} :catch_6\n\n move-object v7, v8\n\n .end local v8 # \"outputStream\":Ljava/io/OutputStream;\n .restart local v7 # \"outputStream\":Ljava/io/OutputStream;\n move-object v5, v6\n\n .line 204\n .end local v1 # \"bytes\":[B\n .end local v6 # \"inputStream\":Ljava/io/InputStream;\n .end local v9 # \"read\":I\n .restart local v5 # \"inputStream\":Ljava/io/InputStream;\n :cond_5\n :goto_4\n return-void\n\n .line 109\n :cond_6\n :try_start_5\n move-object/from16 v0, p0\n\n iget-object v13, v0, Lit/necst/grabnrun/FileDownloader$1;->val$remoteURL:Ljava/net/URL;\n\n invoke-virtual {v13}, Ljava/net/URL;->openConnection()Ljava/net/URLConnection;\n\n move-result-object v13\n\n move-object v0, v13\n\n check-cast v0, Ljava/net/HttpURLConnection;\n\n move-object v12, v0\n\n goto/16 :goto_0\n\n .line 148\n .restart local v2 # \"connection_status\":I\n .restart local v3 # \"cookies\":Ljava/lang/String;\n .restart local v10 # \"redirect\":Z\n .restart local v11 # \"redirectedURL\":Ljava/net/URL;\n :cond_7\n invoke-virtual {v11}, Ljava/net/URL;->openConnection()Ljava/net/URLConnection;\n\n move-result-object v13\n\n move-object v0, v13\n\n check-cast v0, Ljava/net/HttpURLConnection;\n\n move-object v12, v0\n :try_end_5\n .catch Ljava/io/IOException; {:try_start_5 .. :try_end_5} :catch_7\n .catchall {:try_start_5 .. :try_end_5} :catchall_0\n\n goto/16 :goto_1\n\n .line 172\n .end local v2 # \"connection_status\":I\n .end local v3 # \"cookies\":Ljava/lang/String;\n .end local v5 # \"inputStream\":Ljava/io/InputStream;\n .end local v7 # \"outputStream\":Ljava/io/OutputStream;\n .end local v10 # \"redirect\":Z\n .end local v11 # \"redirectedURL\":Ljava/net/URL;\n .restart local v1 # \"bytes\":[B\n .restart local v6 # \"inputStream\":Ljava/io/InputStream;\n .restart local v8 # \"outputStream\":Ljava/io/OutputStream;\n .restart local v9 # \"read\":I\n :cond_8\n const/4 v13, 0x0\n\n :try_start_6\n invoke-virtual {v8, v1, v13, v9}, Ljava/io/OutputStream;->write([BII)V\n :try_end_6\n .catch Ljava/io/IOException; {:try_start_6 .. :try_end_6} :catch_0\n .catchall {:try_start_6 .. :try_end_6} :catchall_2\n\n goto :goto_2\n\n .line 177\n .end local v1 # \"bytes\":[B\n :catch_0\n move-exception v13\n\n move-object v7, v8\n\n .end local v8 # \"outputStream\":Ljava/io/OutputStream;\n .restart local v7 # \"outputStream\":Ljava/io/OutputStream;\n move-object v5, v6\n\n .line 183\n .end local v6 # \"inputStream\":Ljava/io/InputStream;\n .end local v9 # \"read\":I\n .restart local v5 # \"inputStream\":Ljava/io/InputStream;\n :goto_5\n # getter for: Lit/necst/grabnrun/FileDownloader;->TAG_FILE_DOWNLOADER:Ljava/lang/String;\n invoke-static {}, Lit/necst/grabnrun/FileDownloader;->access$0()Ljava/lang/String;\n\n move-result-object v13\n\n const-string v14, \"Clean up all pending streams..\"\n\n invoke-static {v13, v14}, Landroid/util/Log;->d(Ljava/lang/String;Ljava/lang/String;)I\n\n .line 184\n if-eqz v12, :cond_9\n\n .line 185\n invoke-virtual {v12}, Ljava/net/HttpURLConnection;->disconnect()V\n\n .line 187\n :cond_9\n if-eqz v5, :cond_a\n\n .line 189\n :try_start_7\n invoke-virtual {v5}, Ljava/io/InputStream;->close()V\n :try_end_7\n .catch Ljava/io/IOException; {:try_start_7 .. :try_end_7} :catch_2\n\n .line 194\n :cond_a\n :goto_6\n if-eqz v7, :cond_5\n\n .line 197\n :try_start_8\n invoke-virtual {v7}, Ljava/io/OutputStream;->close()V\n :try_end_8\n .catch Ljava/io/IOException; {:try_start_8 .. :try_end_8} :catch_1\n\n goto :goto_4\n\n .line 198\n :catch_1\n move-exception v4\n\n .line 199\n .local v4, \"e\":Ljava/io/IOException;\n invoke-virtual {v4}, Ljava/io/IOException;->printStackTrace()V\n\n goto :goto_4\n\n .line 190\n .end local v4 # \"e\":Ljava/io/IOException;\n :catch_2\n move-exception v4\n\n .line 191\n .restart local v4 # \"e\":Ljava/io/IOException;\n invoke-virtual {v4}, Ljava/io/IOException;->printStackTrace()V\n\n goto :goto_6\n\n .line 182\n .end local v4 # \"e\":Ljava/io/IOException;\n :catchall_0\n move-exception v13\n\n .line 183\n :goto_7\n # getter for: Lit/necst/grabnrun/FileDownloader;->TAG_FILE_DOWNLOADER:Ljava/lang/String;\n invoke-static {}, Lit/necst/grabnrun/FileDownloader;->access$0()Ljava/lang/String;\n\n move-result-object v14\n\n const-string v15, \"Clean up all pending streams..\"\n\n invoke-static {v14, v15}, Landroid/util/Log;->d(Ljava/lang/String;Ljava/lang/String;)I\n\n .line 184\n if-eqz v12, :cond_b\n\n .line 185\n invoke-virtual {v12}, Ljava/net/HttpURLConnection;->disconnect()V\n\n .line 187\n :cond_b\n if-eqz v5, :cond_c\n\n .line 189\n :try_start_9\n invoke-virtual {v5}, Ljava/io/InputStream;->close()V\n :try_end_9\n .catch Ljava/io/IOException; {:try_start_9 .. :try_end_9} :catch_3\n\n .line 194\n :cond_c\n :goto_8\n if-eqz v7, :cond_d\n\n .line 197\n :try_start_a\n invoke-virtual {v7}, Ljava/io/OutputStream;->close()V\n :try_end_a\n .catch Ljava/io/IOException; {:try_start_a .. :try_end_a} :catch_4\n\n .line 202\n :cond_d\n :goto_9\n throw v13\n\n .line 190\n :catch_3\n move-exception v4\n\n .line 191\n .restart local v4 # \"e\":Ljava/io/IOException;\n invoke-virtual {v4}, Ljava/io/IOException;->printStackTrace()V\n\n goto :goto_8\n\n .line 198\n .end local v4 # \"e\":Ljava/io/IOException;\n :catch_4\n move-exception v4\n\n .line 199\n .restart local v4 # \"e\":Ljava/io/IOException;\n invoke-virtual {v4}, Ljava/io/IOException;->printStackTrace()V\n\n goto :goto_9\n\n .line 190\n .end local v4 # \"e\":Ljava/io/IOException;\n .end local v5 # \"inputStream\":Ljava/io/InputStream;\n .end local v7 # \"outputStream\":Ljava/io/OutputStream;\n .restart local v1 # \"bytes\":[B\n .restart local v6 # \"inputStream\":Ljava/io/InputStream;\n .restart local v8 # \"outputStream\":Ljava/io/OutputStream;\n .restart local v9 # \"read\":I\n :catch_5\n move-exception v4\n\n .line 191\n .restart local v4 # \"e\":Ljava/io/IOException;\n invoke-virtual {v4}, Ljava/io/IOException;->printStackTrace()V\n\n goto :goto_3\n\n .line 198\n .end local v4 # \"e\":Ljava/io/IOException;\n :catch_6\n move-exception v4\n\n .line 199\n .restart local v4 # \"e\":Ljava/io/IOException;\n invoke-virtual {v4}, Ljava/io/IOException;->printStackTrace()V\n\n .end local v4 # \"e\":Ljava/io/IOException;\n :cond_e\n move-object v7, v8\n\n .end local v8 # \"outputStream\":Ljava/io/OutputStream;\n .restart local v7 # \"outputStream\":Ljava/io/OutputStream;\n move-object v5, v6\n\n .end local v6 # \"inputStream\":Ljava/io/InputStream;\n .restart local v5 # \"inputStream\":Ljava/io/InputStream;\n goto :goto_4\n\n .line 182\n .end local v1 # \"bytes\":[B\n .end local v5 # \"inputStream\":Ljava/io/InputStream;\n .end local v9 # \"read\":I\n .restart local v6 # \"inputStream\":Ljava/io/InputStream;\n :catchall_1\n move-exception v13\n\n move-object v5, v6\n\n .end local v6 # \"inputStream\":Ljava/io/InputStream;\n .restart local v5 # \"inputStream\":Ljava/io/InputStream;\n goto :goto_7\n\n .end local v5 # \"inputStream\":Ljava/io/InputStream;\n .end local v7 # \"outputStream\":Ljava/io/OutputStream;\n .restart local v6 # \"inputStream\":Ljava/io/InputStream;\n .restart local v8 # \"outputStream\":Ljava/io/OutputStream;\n .restart local v9 # \"read\":I\n :catchall_2\n move-exception v13\n\n move-object v7, v8\n\n .end local v8 # \"outputStream\":Ljava/io/OutputStream;\n .restart local v7 # \"outputStream\":Ljava/io/OutputStream;\n move-object v5, v6\n\n .end local v6 # \"inputStream\":Ljava/io/InputStream;\n .restart local v5 # \"inputStream\":Ljava/io/InputStream;\n goto :goto_7\n\n .line 177\n .end local v9 # \"read\":I\n :catch_7\n move-exception v13\n\n goto :goto_5\n\n .end local v5 # \"inputStream\":Ljava/io/InputStream;\n .restart local v6 # \"inputStream\":Ljava/io/InputStream;\n :catch_8\n move-exception v13\n\n move-object v5, v6\n\n .end local v6 # \"inputStream\":Ljava/io/InputStream;\n .restart local v5 # \"inputStream\":Ljava/io/InputStream;\n goto :goto_5\n.end method\n"
},
{
"path": "repackPOC/smaliRes/grabnrun/FileDownloader.smali",
"content": ".class final Lit/necst/grabnrun/FileDownloader;\n.super Ljava/lang/Object;\n.source \"FileDownloader.java\"\n\n\n# static fields\n.field private static final TAG_FILE_DOWNLOADER:Ljava/lang/String;\n\n\n# instance fields\n.field private activeNetworkInfo:Landroid/net/NetworkInfo;\n\n.field private fileMimeType:Ljava/lang/String;\n\n.field private mConnectivityManager:Landroid/net/ConnectivityManager;\n\n\n# direct methods\n.method static constructor ()V\n .locals 1\n\n .prologue\n .line 44\n const-class v0, Lit/necst/grabnrun/FileDownloader;\n\n invoke-virtual {v0}, Ljava/lang/Class;->getSimpleName()Ljava/lang/String;\n\n move-result-object v0\n\n sput-object v0, Lit/necst/grabnrun/FileDownloader;->TAG_FILE_DOWNLOADER:Ljava/lang/String;\n\n return-void\n.end method\n\n.method constructor (Landroid/content/ContextWrapper;)V\n .locals 1\n .param p1, \"parentContextWrapper\" # Landroid/content/ContextWrapper;\n\n .prologue\n .line 59\n invoke-direct {p0}, Ljava/lang/Object;->()V\n\n .line 61\n const-string v0, \"connectivity\"\n\n invoke-virtual {p1, v0}, Landroid/content/ContextWrapper;->getSystemService(Ljava/lang/String;)Ljava/lang/Object;\n\n move-result-object v0\n\n check-cast v0, Landroid/net/ConnectivityManager;\n\n iput-object v0, p0, Lit/necst/grabnrun/FileDownloader;->mConnectivityManager:Landroid/net/ConnectivityManager;\n\n .line 62\n const/4 v0, 0x0\n\n iput-object v0, p0, Lit/necst/grabnrun/FileDownloader;->fileMimeType:Ljava/lang/String;\n\n .line 63\n return-void\n.end method\n\n.method static synthetic access$0()Ljava/lang/String;\n .locals 1\n\n .prologue\n .line 44\n sget-object v0, Lit/necst/grabnrun/FileDownloader;->TAG_FILE_DOWNLOADER:Ljava/lang/String;\n\n return-object v0\n.end method\n\n.method static synthetic access$1(Lit/necst/grabnrun/FileDownloader;Ljava/lang/String;)V\n .locals 0\n\n .prologue\n .line 49\n iput-object p1, p0, Lit/necst/grabnrun/FileDownloader;->fileMimeType:Ljava/lang/String;\n\n return-void\n.end method\n\n\n# virtual methods\n.method final downloadRemoteUrl(Ljava/net/URL;Ljava/lang/String;Z)Z\n .locals 8\n .param p1, \"remoteURL\" # Ljava/net/URL;\n .param p2, \"localURI\" # Ljava/lang/String;\n .param p3, \"isRedirectAllowed\" # Z\n\n .prologue\n const/4 v3, 0x0\n\n .line 85\n iget-object v4, p0, Lit/necst/grabnrun/FileDownloader;->mConnectivityManager:Landroid/net/ConnectivityManager;\n\n invoke-virtual {v4}, Landroid/net/ConnectivityManager;->getActiveNetworkInfo()Landroid/net/NetworkInfo;\n\n move-result-object v4\n\n iput-object v4, p0, Lit/necst/grabnrun/FileDownloader;->activeNetworkInfo:Landroid/net/NetworkInfo;\n\n .line 86\n iget-object v4, p0, Lit/necst/grabnrun/FileDownloader;->activeNetworkInfo:Landroid/net/NetworkInfo;\n\n if-eqz v4, :cond_0\n\n iget-object v4, p0, Lit/necst/grabnrun/FileDownloader;->activeNetworkInfo:Landroid/net/NetworkInfo;\n\n invoke-virtual {v4}, Landroid/net/NetworkInfo;->isConnected()Z\n\n move-result v4\n\n if-nez v4, :cond_2\n\n .line 88\n :cond_0\n sget-object v4, Lit/necst/grabnrun/FileDownloader;->TAG_FILE_DOWNLOADER:Ljava/lang/String;\n\n const-string v5, \"No connectivity is available. Download failed!\"\n\n invoke-static {v4, v5}, Landroid/util/Log;->w(Ljava/lang/String;Ljava/lang/String;)I\n\n .line 223\n :cond_1\n :goto_0\n return v3\n\n .line 93\n :cond_2\n new-instance v0, Lit/necst/grabnrun/FileDownloader$1;\n\n invoke-direct {v0, p0, p1, p3, p2}, Lit/necst/grabnrun/FileDownloader$1;->(Lit/necst/grabnrun/FileDownloader;Ljava/net/URL;ZLjava/lang/String;)V\n\n .line 207\n .local v0, \"dataThread\":Ljava/lang/Thread;\n invoke-virtual {v0}, Ljava/lang/Thread;->start()V\n\n .line 211\n :try_start_0\n invoke-virtual {v0}, Ljava/lang/Thread;->join()V\n :try_end_0\n .catch Ljava/lang/InterruptedException; {:try_start_0 .. :try_end_0} :catch_0\n\n .line 217\n new-instance v2, Ljava/io/File;\n\n invoke-direct {v2, p2}, Ljava/io/File;->(Ljava/lang/String;)V\n\n .line 220\n .local v2, \"fileAtLocalURI\":Ljava/io/File;\n invoke-virtual {v2}, Ljava/io/File;->exists()Z\n\n move-result v4\n\n if-eqz v4, :cond_1\n\n invoke-virtual {v2}, Ljava/io/File;->length()J\n\n move-result-wide v4\n\n const-wide/16 v6, 0x0\n\n cmp-long v4, v4, v6\n\n if-lez v4, :cond_1\n\n .line 221\n const/4 v3, 0x1\n\n goto :goto_0\n\n .line 212\n .end local v2 # \"fileAtLocalURI\":Ljava/io/File;\n :catch_0\n move-exception v1\n\n .line 213\n .local v1, \"e\":Ljava/lang/InterruptedException;\n invoke-virtual {v1}, Ljava/lang/InterruptedException;->printStackTrace()V\n\n goto :goto_0\n.end method\n\n.method getDownloadedFileExtension()Ljava/lang/String;\n .locals 3\n\n .prologue\n const/4 v0, 0x0\n\n .line 235\n iget-object v1, p0, Lit/necst/grabnrun/FileDownloader;->fileMimeType:Ljava/lang/String;\n\n if-nez v1, :cond_1\n\n .line 254\n :cond_0\n :goto_0\n return-object v0\n\n .line 238\n :cond_1\n iget-object v1, p0, Lit/necst/grabnrun/FileDownloader;->fileMimeType:Ljava/lang/String;\n\n invoke-virtual {v1}, Ljava/lang/String;->hashCode()I\n\n move-result v2\n\n sparse-switch v2, :sswitch_data_0\n\n goto :goto_0\n\n :sswitch_0\n const-string v2, \"application/vnd.android.package-archive\"\n\n invoke-virtual {v1, v2}, Ljava/lang/String;->equals(Ljava/lang/Object;)Z\n\n move-result v1\n\n if-eqz v1, :cond_0\n\n .line 242\n const-string v0, \".apk\"\n\n goto :goto_0\n\n .line 238\n :sswitch_1\n const-string v2, \"application/octet-stream\"\n\n invoke-virtual {v1, v2}, Ljava/lang/String;->equals(Ljava/lang/Object;)Z\n\n move-result v1\n\n if-eqz v1, :cond_0\n\n .line 250\n const-string v0, \".pem\"\n\n goto :goto_0\n\n .line 238\n :sswitch_2\n const-string v2, \"application/java-archive\"\n\n invoke-virtual {v1, v2}, Ljava/lang/String;->equals(Ljava/lang/Object;)Z\n\n move-result v1\n\n if-eqz v1, :cond_0\n\n .line 246\n const-string v0, \".jar\"\n\n goto :goto_0\n\n .line 238\n nop\n\n :sswitch_data_0\n .sparse-switch\n 0x4d6213b -> :sswitch_0\n 0x463e3f9d -> :sswitch_1\n 0x7a257a76 -> :sswitch_2\n .end sparse-switch\n.end method\n"
},
{
"path": "repackPOC/smaliRes/grabnrun/FileFilterByName.smali",
"content": ".class final Lit/necst/grabnrun/FileFilterByName;\n.super Ljava/lang/Object;\n.source \"FileFilterByName.java\"\n\n# interfaces\n.implements Ljava/io/FileFilter;\n\n\n# instance fields\n.field private extension:Ljava/lang/String;\n\n.field private name:Ljava/lang/String;\n\n\n# direct methods\n.method constructor (Ljava/lang/String;Ljava/lang/String;)V\n .locals 0\n .param p1, \"name\" # Ljava/lang/String;\n .param p2, \"extension\" # Ljava/lang/String;\n\n .prologue\n .line 42\n invoke-direct {p0}, Ljava/lang/Object;->()V\n\n .line 44\n iput-object p1, p0, Lit/necst/grabnrun/FileFilterByName;->name:Ljava/lang/String;\n\n .line 45\n iput-object p2, p0, Lit/necst/grabnrun/FileFilterByName;->extension:Ljava/lang/String;\n\n .line 46\n return-void\n.end method\n\n\n# virtual methods\n.method public final accept(Ljava/io/File;)Z\n .locals 4\n .param p1, \"file\" # Ljava/io/File;\n\n .prologue\n const/4 v0, 0x0\n\n .line 53\n invoke-virtual {p1}, Ljava/io/File;->isDirectory()Z\n\n move-result v1\n\n if-eqz v1, :cond_1\n\n .line 65\n :cond_0\n :goto_0\n return v0\n\n .line 55\n :cond_1\n invoke-virtual {p1}, Ljava/io/File;->isFile()Z\n\n move-result v1\n\n if-eqz v1, :cond_0\n\n .line 60\n invoke-virtual {p1}, Ljava/io/File;->getName()Ljava/lang/String;\n\n move-result-object v1\n\n new-instance v2, Ljava/lang/StringBuilder;\n\n iget-object v3, p0, Lit/necst/grabnrun/FileFilterByName;->name:Ljava/lang/String;\n\n invoke-static {v3}, Ljava/lang/String;->valueOf(Ljava/lang/Object;)Ljava/lang/String;\n\n move-result-object v3\n\n invoke-direct {v2, v3}, Ljava/lang/StringBuilder;->