();\n\n /**\n * Add primitive type abbreviation to maps of abbreviations.\n *\n * @param primitive Canonical name of primitive type\n * @param abbreviation Corresponding abbreviation of primitive type\n */\n private static void addAbbreviation(String primitive, String abbreviation) {\n abbreviationMap.put(primitive, abbreviation);\n reverseAbbreviationMap.put(abbreviation, primitive);\n }\n\n /**\n * Feed abbreviation maps\n */\n static {\n addAbbreviation(\"int\", \"I\");\n addAbbreviation(\"boolean\", \"Z\");\n addAbbreviation(\"float\", \"F\");\n addAbbreviation(\"long\", \"J\");\n addAbbreviation(\"short\", \"S\");\n addAbbreviation(\"byte\", \"B\");\n addAbbreviation(\"double\", \"D\");\n addAbbreviation(\"char\", \"C\");\n }\n\n /**\n * ClassUtils instances should NOT be constructed in standard programming.\n * Instead, the class should be used as\n * {@code ClassUtils.getShortClassName(cls)}.
\n *\n * This constructor is public to permit tools that require a JavaBean\n * instance to operate.
\n */\n public ClassUtils() {\n super();\n }\n\n // Short class name\n // ----------------------------------------------------------------------\n /**\n * Gets the class name minus the package name for an {@code Object}.
\n *\n * @param object the class to get the short name for, may be null\n * @param valueIfNull the value to return if null\n * @return the class name of the object without the package name, or the null value\n */\n public static String getShortClassName(Object object, String valueIfNull) {\n if (object == null) {\n return valueIfNull;\n }\n return getShortClassName(object.getClass());\n }\n\n /**\n * Gets the class name minus the package name from a {@code Class}.
\n * \n * Consider using the Java 5 API {@link Class#getSimpleName()} instead. \n * The one known difference is that this code will return {@code \"Map.Entry\"} while \n * the {@code java.lang.Class} variant will simply return {@code \"Entry\"}.
\n *\n * @param cls the class to get the short name for.\n * @return the class name without the package name or an empty string\n */\n public static String getShortClassName(Class cls) {\n if (cls == null) {\n return \"\";\n }\n return getShortClassName(cls.getName());\n }\n\n /**\n * Gets the class name minus the package name from a String.
\n *\n * The string passed in is assumed to be a class name - it is not checked.
\n\n * Note that this method differs from Class.getSimpleName() in that this will \n * return {@code \"Map.Entry\"} whilst the {@code java.lang.Class} variant will simply \n * return {@code \"Entry\"}.
\n *\n * @param className the className to get the short name for\n * @return the class name of the class without the package name or an empty string\n */\n public static String getShortClassName(String className) {\n if (className == null) {\n return STRING_EMPTY;\n }\n if (className.length() == 0) {\n return STRING_EMPTY;\n }\n\n StringBuilder arrayPrefix = new StringBuilder();\n\n // Handle array encoding\n if (className.startsWith(\"[\")) {\n while (className.charAt(0) == '[') {\n className = className.substring(1);\n arrayPrefix.append(\"[]\");\n }\n // Strip Object type encoding\n if (className.charAt(0) == 'L' && className.charAt(className.length() - 1) == ';') {\n className = className.substring(1, className.length() - 1);\n }\n }\n\n if (reverseAbbreviationMap.containsKey(className)) {\n className = reverseAbbreviationMap.get(className);\n }\n\n int lastDotIdx = className.lastIndexOf(PACKAGE_SEPARATOR_CHAR);\n int innerIdx = className.indexOf(\n INNER_CLASS_SEPARATOR_CHAR, lastDotIdx == -1 ? 0 : lastDotIdx + 1);\n String out = className.substring(lastDotIdx + 1);\n if (innerIdx != -1) {\n out = out.replace(INNER_CLASS_SEPARATOR_CHAR, PACKAGE_SEPARATOR_CHAR);\n }\n return out + arrayPrefix;\n }\n\n /**\n * Null-safe version of aClass.getSimpleName()
\n *\n * @param cls the class for which to get the simple name.\n * @return the simple class name.\n * @since 3.0\n * @see Class#getSimpleName()\n */\n public static String getSimpleName(Class cls) {\n if (cls == null) {\n return STRING_EMPTY;\n }\n return cls.getSimpleName();\n }\n\n /**\n * Null-safe version of aClass.getSimpleName()
\n *\n * @param object the object for which to get the simple class name.\n * @param valueIfNull the value to return if object is null\n * @return the simple class name.\n * @since 3.0\n * @see Class#getSimpleName()\n */\n public static String getSimpleName(Object object, String valueIfNull) {\n if (object == null) {\n return valueIfNull;\n }\n return getSimpleName(object.getClass());\n }\n\n // Package name\n // ----------------------------------------------------------------------\n /**\n * Gets the package name of an {@code Object}.
\n *\n * @param object the class to get the package name for, may be null\n * @param valueIfNull the value to return if null\n * @return the package name of the object, or the null value\n */\n public static String getPackageName(Object object, String valueIfNull) {\n if (object == null) {\n return valueIfNull;\n }\n return getPackageName(object.getClass());\n }\n\n /**\n * Gets the package name of a {@code Class}.
\n *\n * @param cls the class to get the package name for, may be {@code null}.\n * @return the package name or an empty string\n */\n public static String getPackageName(Class cls) {\n if (cls == null) {\n return STRING_EMPTY;\n }\n return getPackageName(cls.getName());\n }\n\n /**\n * Gets the package name from a {@code String}.
\n *\n * The string passed in is assumed to be a class name - it is not checked.
\n * If the class is unpackaged, return an empty string.
\n *\n * @param className the className to get the package name for, may be {@code null}\n * @return the package name or an empty string\n */\n public static String getPackageName(String className) {\n if (className == null || className.length() == 0) {\n return STRING_EMPTY;\n }\n\n // Strip array encoding\n while (className.charAt(0) == '[') {\n className = className.substring(1);\n }\n // Strip Object type encoding\n if (className.charAt(0) == 'L' && className.charAt(className.length() - 1) == ';') {\n className = className.substring(1);\n }\n\n int i = className.lastIndexOf(PACKAGE_SEPARATOR_CHAR);\n if (i == -1) {\n return STRING_EMPTY;\n }\n return className.substring(0, i);\n }\n\n // Superclasses/Superinterfaces\n // ----------------------------------------------------------------------\n /**\n * Gets a {@code List} of superclasses for the given class.
\n *\n * @param cls the class to look up, may be {@code null}\n * @return the {@code List} of superclasses in order going up from this one\n * {@code null} if null input\n */\n public static List> getAllSuperclasses(Class cls) {\n if (cls == null) {\n return null;\n }\n List> classes = new ArrayList>();\n Class superclass = cls.getSuperclass();\n while (superclass != null) {\n classes.add(superclass);\n superclass = superclass.getSuperclass();\n }\n return classes;\n }\n\n /**\n * Gets a {@code List} of all interfaces implemented by the given\n * class and its superclasses.
\n *\n * The order is determined by looking through each interface in turn as\n * declared in the source file and following its hierarchy up. Then each\n * superclass is considered in the same way. Later duplicates are ignored,\n * so the order is maintained.
\n *\n * @param cls the class to look up, may be {@code null}\n * @return the {@code List} of interfaces in order,\n * {@code null} if null input\n */\n public static List> getAllInterfaces(Class cls) {\n if (cls == null) {\n return null;\n }\n\n LinkedHashSet> interfacesFound = new LinkedHashSet>();\n getAllInterfaces(cls, interfacesFound);\n\n return new ArrayList>(interfacesFound);\n }\n\n /**\n * Get the interfaces for the specified class.\n *\n * @param cls the class to look up, may be {@code null}\n * @param interfacesFound the {@code Set} of interfaces for the class\n */\n private static void getAllInterfaces(Class cls, HashSet> interfacesFound) {\n while (cls != null) {\n Class[] interfaces = cls.getInterfaces();\n\n for (Class i : interfaces) {\n if (interfacesFound.add(i)) {\n getAllInterfaces(i, interfacesFound);\n }\n }\n\n cls = cls.getSuperclass();\n }\n }\n\n // Convert list\n // ----------------------------------------------------------------------\n /**\n * Given a {@code List} of class names, this method converts them into classes.
\n *\n * A new {@code List} is returned. If the class name cannot be found, {@code null}\n * is stored in the {@code List}. If the class name in the {@code List} is\n * {@code null}, {@code null} is stored in the output {@code List}.
\n *\n * @param classNames the classNames to change\n * @return a {@code List} of Class objects corresponding to the class names,\n * {@code null} if null input\n * @throws ClassCastException if classNames contains a non String entry\n */\n public static List> convertClassNamesToClasses(List classNames) {\n if (classNames == null) {\n return null;\n }\n List> classes = new ArrayList>(classNames.size());\n for (String className : classNames) {\n try {\n classes.add(Class.forName(className));\n } catch (Exception ex) {\n classes.add(null);\n }\n }\n return classes;\n }\n\n /**\n * Given a {@code List} of {@code Class} objects, this method converts\n * them into class names.
\n *\n * A new {@code List} is returned. {@code null} objects will be copied into\n * the returned list as {@code null}.
\n *\n * @param classes the classes to change\n * @return a {@code List} of class names corresponding to the Class objects,\n * {@code null} if null input\n * @throws ClassCastException if {@code classes} contains a non-{@code Class} entry\n */\n public static List convertClassesToClassNames(List> classes) {\n if (classes == null) {\n return null;\n }\n List classNames = new ArrayList(classes.size());\n for (Class cls : classes) {\n if (cls == null) {\n classNames.add(null);\n } else {\n classNames.add(cls.getName());\n }\n }\n return classNames;\n }\n\n // Class loading\n // ----------------------------------------------------------------------\n /**\n * Returns the class represented by {@code className} using the\n * {@code classLoader}. This implementation supports the syntaxes\n * \"{@code java.util.Map.Entry[]}\", \"{@code java.util.Map$Entry[]}\",\n * \"{@code [Ljava.util.Map.Entry;}\", and \"{@code [Ljava.util.Map$Entry;}\".\n *\n * @param classLoader the class loader to use to load the class\n * @param className the class name\n * @param initialize whether the class must be initialized\n * @return the class represented by {@code className} using the {@code classLoader}\n * @throws ClassNotFoundException if the class is not found\n */\n public static Class getClass(\n ClassLoader classLoader, String className, boolean initialize) throws ClassNotFoundException {\n try {\n Class clazz;\n if (abbreviationMap.containsKey(className)) {\n String clsName = \"[\" + abbreviationMap.get(className);\n clazz = Class.forName(clsName, initialize, classLoader).getComponentType();\n } else {\n clazz = Class.forName(toCanonicalName(className), initialize, classLoader);\n }\n return clazz;\n } catch (ClassNotFoundException ex) {\n // allow path separators (.) as inner class name separators\n int lastDotIndex = className.lastIndexOf(PACKAGE_SEPARATOR_CHAR);\n\n if (lastDotIndex != -1) {\n try {\n return getClass(classLoader, className.substring(0, lastDotIndex) +\n INNER_CLASS_SEPARATOR_CHAR + className.substring(lastDotIndex + 1),\n initialize);\n } catch (ClassNotFoundException ex2) { // NOPMD\n // ignore exception\n }\n }\n\n throw ex;\n }\n }\n\n /**\n * Returns the (initialized) class represented by {@code className}\n * using the {@code classLoader}. This implementation supports\n * the syntaxes \"{@code java.util.Map.Entry[]}\",\n * \"{@code java.util.Map$Entry[]}\", \"{@code [Ljava.util.Map.Entry;}\",\n * and \"{@code [Ljava.util.Map$Entry;}\".\n *\n * @param classLoader the class loader to use to load the class\n * @param className the class name\n * @return the class represented by {@code className} using the {@code classLoader}\n * @throws ClassNotFoundException if the class is not found\n */\n public static Class getClass(ClassLoader classLoader, String className) throws ClassNotFoundException {\n return getClass(classLoader, className, true);\n }\n\n /**\n * Returns the (initialized) class represented by {@code className}\n * using the current thread's context class loader. This implementation\n * supports the syntaxes \"{@code java.util.Map.Entry[]}\",\n * \"{@code java.util.Map$Entry[]}\", \"{@code [Ljava.util.Map.Entry;}\",\n * and \"{@code [Ljava.util.Map$Entry;}\".\n *\n * @param className the class name\n * @return the class represented by {@code className} using the current thread's context class loader\n * @throws ClassNotFoundException if the class is not found\n */\n public static Class getClass(String className) throws ClassNotFoundException {\n return getClass(className, true);\n }\n\n /**\n * Returns the class represented by {@code className} using the\n * current thread's context class loader. This implementation supports the\n * syntaxes \"{@code java.util.Map.Entry[]}\", \"{@code java.util.Map$Entry[]}\",\n * \"{@code [Ljava.util.Map.Entry;}\", and \"{@code [Ljava.util.Map$Entry;}\".\n *\n * @param className the class name\n * @param initialize whether the class must be initialized\n * @return the class represented by {@code className} using the current thread's context class loader\n * @throws ClassNotFoundException if the class is not found\n */\n public static Class getClass(String className, boolean initialize) throws ClassNotFoundException {\n ClassLoader contextCL = Thread.currentThread().getContextClassLoader();\n ClassLoader loader = contextCL == null ? ClassUtils.class.getClassLoader() : contextCL;\n return getClass(loader, className, initialize);\n }\n\n // ----------------------------------------------------------------------\n /**\n * Converts a class name to a JLS style class name.\n *\n * @param className the class name\n * @return the converted name\n */\n private static String toCanonicalName(String className) {\n className = deleteWhitespace(className);\n if (className == null) {\n throw new NullPointerException(\"className must not be null.\");\n } else if (className.endsWith(\"[]\")) {\n StringBuilder classNameBuffer = new StringBuilder();\n while (className.endsWith(\"[]\")) {\n className = className.substring(0, className.length() - 2);\n classNameBuffer.append(\"[\");\n }\n String abbreviation = abbreviationMap.get(className);\n if (abbreviation != null) {\n classNameBuffer.append(abbreviation);\n } else {\n classNameBuffer.append(\"L\").append(className).append(\";\");\n }\n className = classNameBuffer.toString();\n }\n return className;\n }\n\n /**\n * Converts an array of {@code Object} in to an array of {@code Class} objects.\n * If any of these objects is null, a null element will be inserted into the array.
\n *\n * This method returns {@code null} for a {@code null} input array.
\n *\n * @param array an {@code Object} array\n * @return a {@code Class} array, {@code null} if null array input\n * @since 2.4\n */\n public static Class[] toClass(Object... array) {\n if (array == null) {\n return null;\n } else if (array.length == 0) {\n return new Class[0];\n }\n Class[] classes = new Class[array.length];\n for (int i = 0; i < array.length; i++) {\n classes[i] = array[i] == null ? null : array[i].getClass();\n }\n return classes;\n }\n \n // Delete\n //-----------------------------------------------------------------------\n /**\n * Deletes all whitespaces from a String as defined by\n * {@link Character#isWhitespace(char)}.
\n *\n * \n * StringUtils.deleteWhitespace(null) = null\n * StringUtils.deleteWhitespace(\"\") = \"\"\n * StringUtils.deleteWhitespace(\"abc\") = \"abc\"\n * StringUtils.deleteWhitespace(\" ab c \") = \"abc\"\n *
\n *\n * @param str the String to delete whitespace from, may be null\n * @return the String without whitespaces, {@code null} if null String input\n */\n public static String deleteWhitespace(String str) {\n if (isEmpty(str)) {\n return str;\n }\n int sz = str.length();\n char[] chs = new char[sz];\n int count = 0;\n for (int i = 0; i < sz; i++) {\n if (!Character.isWhitespace(str.charAt(i))) {\n chs[count++] = str.charAt(i);\n }\n }\n if (count == sz) {\n return str;\n }\n return new String(chs, 0, count);\n }\n \n // Empty checks\n //-----------------------------------------------------------------------\n /**\n * Checks if a CharSequence is empty (\"\") or null.
\n *\n * \n * StringUtils.isEmpty(null) = true\n * StringUtils.isEmpty(\"\") = true\n * StringUtils.isEmpty(\" \") = false\n * StringUtils.isEmpty(\"bob\") = false\n * StringUtils.isEmpty(\" bob \") = false\n *
\n *\n * NOTE: This method changed in Lang version 2.0.\n * It no longer trims the CharSequence.\n * That functionality is available in isBlank().
\n *\n * @param cs the CharSequence to check, may be null\n * @return {@code true} if the CharSequence is empty or null\n * @since 3.0 Changed signature from isEmpty(String) to isEmpty(CharSequence)\n */\n public static boolean isEmpty(CharSequence cs) {\n return cs == null || cs.length() == 0;\n }\n\n}\n"
},
{
"path": "library/src/main/java/com/taobao/android/dexposed/DeviceCheck.java",
"content": "/*\n * Original work Copyright (c) 2005-2008, The Android Open Source Project\n * Modified work Copyright (c) 2013, rovo89 and Tungstwenty\n * Modified work Copyright (c) 2015, Alibaba Mobile Infrastructure (Android) Team\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\npackage com.taobao.android.dexposed;\n\nimport android.annotation.SuppressLint;\nimport android.content.Context;\nimport android.util.Log;\n\nimport java.io.BufferedReader;\nimport java.io.InputStreamReader;\nimport java.lang.reflect.InvocationTargetException;\nimport java.lang.reflect.Method;\n\npublic class DeviceCheck {\n\t\n\tprivate static final String SELECT_RUNTIME_PROPERTY = \"persist.sys.dalvik.vm.lib\";\n\tprivate static final String LIB_DALVIK = \"libdvm.so\";\n\tprivate static final String LIB_ART = \"libart.so\";\n\tprivate static final String LIB_ART_D = \"libartd.so\";\n\t\n\tprivate static boolean isCheckedDeviceSupport = false; \n\tprivate static boolean isDeviceSupportable = false;\n\t\n\tprivate static boolean isDalvikMode() {\n String vmMode = getCurrentRuntimeValue();\n if(\"Dalvik\".equals(vmMode)){\n return true;\n } \n return false;\n }\n \n\tprivate static String getCurrentRuntimeValue() {\n\t\ttry {\n\t\t\tClass systemProperties = Class\n\t\t\t\t\t.forName(\"android.os.SystemProperties\");\n\t\t\ttry {\n\t\t\t\tMethod get = systemProperties.getMethod(\"get\", String.class,\n\t\t\t\t\t\tString.class);\n\t\t\t\tif (get == null) {\n\t\t\t\t\treturn \"WTF?!\";\n\t\t\t\t}\n\t\t\t\ttry {\n\t\t\t\t\tfinal String value = (String) get.invoke(systemProperties,\n\t\t\t\t\t\t\tSELECT_RUNTIME_PROPERTY,\n\t\t\t\t\t\t\t/* Assuming default is */\"Dalvik\");\n\t\t\t\t\tif (LIB_DALVIK.equals(value)) {\n\t\t\t\t\t\treturn \"Dalvik\";\n\t\t\t\t\t} else if (LIB_ART.equals(value)) {\n\t\t\t\t\t\treturn \"ART\";\n\t\t\t\t\t} else if (LIB_ART_D.equals(value)) {\n\t\t\t\t\t\treturn \"ART debug build\";\n\t\t\t\t\t}\n\n\t\t\t\t\treturn value;\n\t\t\t\t} catch (IllegalAccessException e) {\n\t\t\t\t\treturn \"IllegalAccessException\";\n\t\t\t\t} catch (IllegalArgumentException e) {\n\t\t\t\t\treturn \"IllegalArgumentException\";\n\t\t\t\t} catch (InvocationTargetException e) {\n\t\t\t\t\treturn \"InvocationTargetException\";\n\t\t\t\t}\n\t\t\t} catch (NoSuchMethodException e) {\n\t\t\t\treturn \"SystemProperties.get(String key, String def) method is not found\";\n\t\t\t}\n\t\t} catch (ClassNotFoundException e) {\n\t\t\treturn \"SystemProperties class is not found\";\n\t\t}\n\t}\n \n private static boolean isSupportSDKVersion() {\n if (android.os.Build.VERSION.SDK_INT >= 14 && android.os.Build.VERSION.SDK_INT < 20) {\n return true;\n } else if(android.os.Build.VERSION.SDK_INT == 10 || android.os.Build.VERSION.SDK_INT == 9){\n \treturn true;\n }\n return false;\n }\n\n\tprivate static boolean isX86CPU() {\n\t\tProcess process = null;\n\t\tString abi = null;\n\t\tInputStreamReader ir = null;\n\t\tBufferedReader input = null;\n\t\ttry {\n\t\t\tprocess = Runtime.getRuntime().exec(\"getprop ro.product.cpu.abi\");\n\t\t\tir = new InputStreamReader(process.getInputStream());\n\t\t\tinput = new BufferedReader(ir);\n\t\t\tabi = input.readLine();\n\t\t\tif (abi.contains(\"x86\")) {\n\t\t\t\treturn true;\n\t\t\t}\n\t\t} catch (Exception e) {\n\t\t} finally {\n\t\t\tif (input != null) {\n\t\t\t\ttry {\n\t\t\t\t\tinput.close();\n\t\t\t\t} catch (Exception e) {\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (ir != null) {\n\t\t\t\ttry {\n\t\t\t\t\tir.close();\n\t\t\t\t} catch (Exception e) {\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (process != null) {\n\t\t\t\ttry {\n\t\t\t\t\tprocess.destroy();\n\t\t\t\t} catch (Exception e) {\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\treturn false;\n\t}\n\t\n\tpublic static synchronized boolean isDeviceSupport(Context context) {\n\t\t// return memory checked value.\n\t\ttry {\n\t\t\tif (isCheckedDeviceSupport)\n\t\t\t\treturn isDeviceSupportable;\n\n\t\t\tif (!isX86CPU() && !isYunOS()) {\n\t\t\t\tisDeviceSupportable = true;\n\t\t\t} else {\n\t\t\t\tisDeviceSupportable = false;\n\t\t\t}\n\t\t} finally {\n\t\t\tLog.d(\"hotpatch\", \"device support is \" + isDeviceSupportable + \"checked\" + isCheckedDeviceSupport);\n\t\t\tisCheckedDeviceSupport = true;\n\t\t}\n\t\treturn isDeviceSupportable;\n\t}\n\n\t@SuppressLint(\"DefaultLocale\")\n\tpublic static boolean isYunOS() {\n\t\tString s1 = null;\n\t\tString s2 = null;\n\t\ttry {\n\t\t\tMethod m = Class.forName(\"android.os.SystemProperties\").getMethod(\n\t\t\t\t\t\"get\", String.class);\n\t\t\ts1 = (String) m.invoke(null, \"ro.yunos.version\");\n\t\t\ts2 = (String) m.invoke(null, \"java.vm.name\");\n\t\t} catch (NoSuchMethodException a) {\n\t\t} catch (ClassNotFoundException b) {\n\t\t} catch (IllegalAccessException c) {\n\t\t} catch (InvocationTargetException d) {\n\t\t}\n\t\tif ((s2 != null && s2.toLowerCase().contains(\"lemur\")) || (s1 != null && s1.trim().length() > 0)) {\n\t\t\treturn true;\n\t\t} else {\n\t\t\treturn false;\n\t\t}\n\t}\n}\n"
},
{
"path": "library/src/main/java/com/taobao/android/dexposed/utility/Debug.java",
"content": "/*\n * Original work Copyright (c) 2014-2015, Marvin Wißfeld\n * Modified work Copyright (c) 2016, Alibaba Mobile Infrastructure (Android) Team\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\npackage com.taobao.android.dexposed.utility;\n\nimport android.util.Log;\n\nimport java.io.BufferedReader;\nimport java.io.FileReader;\nimport java.io.IOException;\nimport java.lang.reflect.Method;\n\nimport me.weishu.epic.BuildConfig;\nimport me.weishu.epic.art.method.ArtMethod;\n\npublic final class Debug {\n private static final String TAG = \"Dexposed\";\n\n public static final boolean DEBUG = BuildConfig.DEBUG;\n\n private static final String RELASE_WRAN_STRING = \"none in release mode.\";\n private Debug() {\n }\n\n public static String addrHex(long i) {\n if (!DEBUG) {\n return RELASE_WRAN_STRING;\n }\n\n if (Runtime.is64Bit()) {\n return longHex(i);\n } else {\n return intHex((int) i);\n }\n }\n\n public static String longHex(long i) {\n return String.format(\"0x%016X\", i);\n }\n\n public static String intHex(int i) {\n return String.format(\"0x%08X\", i);\n }\n\n public static String byteHex(byte b) {\n return String.format(\"%02X\", b);\n }\n\n public static String dump(byte[] b, long start) {\n StringBuffer sb = new StringBuffer();\n for (int i = 0; i < b.length; i++) {\n if (i % 8 == 0) {\n sb.append(addrHex(start + i)).append(\":\");\n }\n sb.append(byteHex(b[i])).append(\" \");\n if (i % 8 == 7) {\n sb.append(\"\\n\");\n }\n }\n return sb.toString();\n }\n public static String hexdump(byte[] bytes, long start) {\n if (!DEBUG) {\n return RELASE_WRAN_STRING;\n }\n StringBuffer sb = new StringBuffer();\n for (int i = 0; i < bytes.length; i++) {\n if (i % 8 == 0) {\n sb.append(addrHex(start + i)).append(\":\");\n }\n sb.append(byteHex(bytes[i])).append(\" \");\n if (i % 8 == 7) {\n sb.append(\"\\n\");\n }\n }\n return sb.toString();\n }\n\n public static String methodDescription(Method method) {\n return method.getDeclaringClass().getName() + \"->\" + method.getName() + \" @\" +\n addrHex(ArtMethod.of(method).getEntryPointFromQuickCompiledCode()) +\n \" +\" + addrHex(ArtMethod.of(method).getAddress());\n }\n\n public static void dumpMaps() {\n BufferedReader br = null;\n try {\n br = new BufferedReader(new FileReader(\"/proc/self/maps\"));\n String line;\n while ((line = br.readLine()) != null) {\n Log.i(TAG, line);\n }\n } catch (IOException e) {\n Log.e(TAG, \"dumpMaps error\");\n } finally {\n if (br != null) {\n try {\n br.close();\n } catch (IOException e) {\n // ignore.\n }\n }\n }\n }\n}\n"
},
{
"path": "library/src/main/java/com/taobao/android/dexposed/utility/Logger.java",
"content": "package com.taobao.android.dexposed.utility;\n\nimport android.util.Log;\n\n/**\n * Created by weishu on 17/11/10.\n */\npublic class Logger {\n\n private static final boolean DEBUG = Debug.DEBUG;\n\n public static final String preFix = \"epic.\";\n\n public static void i(String tag, String msg) {\n if (DEBUG) {\n Log.i(preFix + tag, msg);\n }\n }\n\n public static void d(String tagSuffix, String msg) {\n if (DEBUG) {\n Log.d(preFix + tagSuffix, msg);\n }\n }\n\n public static void w(String tag, String msg) {\n Log.w(preFix + tag, msg);\n }\n\n public static void e(String tag, String msg) {\n if (DEBUG) {\n Log.e(preFix + tag, msg);\n }\n }\n\n public static void e(String tag, String msg, Throwable e) {\n if (DEBUG) {\n Log.e(preFix + tag, msg, e);\n }\n }\n\n}\n"
},
{
"path": "library/src/main/java/com/taobao/android/dexposed/utility/NeverCalled.java",
"content": "package com.taobao.android.dexposed.utility;\n\nimport android.util.Log;\n\n/**\n * This Class is used for get the art_quick_to_interpreter_bridge address\n * Do not call this forever!!!\n */\npublic class NeverCalled {\n private void fake(int a) {\n Log.i(getClass().getSimpleName(), a + \"Do not inline me!!\");\n }\n}\n"
},
{
"path": "library/src/main/java/com/taobao/android/dexposed/utility/NougatPolicy.java",
"content": "package com.taobao.android.dexposed.utility;\n\nimport android.content.Context;\nimport android.os.SystemClock;\nimport android.util.Log;\n\nimport java.lang.reflect.Method;\n\npublic class NougatPolicy {\n\n private static class TraceLogger {\n static void i(String tag, String msg) {\n Log.i(tag, msg);\n }\n static void e(String tag, String msg) {\n Log.i(tag, msg);\n }\n static void e(String tag, String msg, Throwable e) {\n Log.i(tag, msg, e);\n }\n }\n\n private static final String TAG = \"NougatPolicy\";\n\n public static boolean fullCompile(Context context) {\n try {\n long t1 = SystemClock.elapsedRealtime();\n Object pm = getPackageManagerBinderProxy();\n if (pm == null) {\n TraceLogger.e(TAG, \"can not found package service\");\n return false;\n }\n /*\n @Override\n public boolean performDexOptMode(String packageName,\n boolean checkProfiles, String targetCompilerFilter, boolean force) {\n int dexOptStatus = performDexOptTraced(packageName, checkProfiles,\n targetCompilerFilter, force);\n return dexOptStatus != PackageDexOptimizer.DEX_OPT_FAILED;\n */\n\n final Method performDexOptMode = pm.getClass().getDeclaredMethod(\"performDexOptMode\",\n String.class, boolean.class, String.class, boolean.class);\n boolean ret = (boolean) performDexOptMode.invoke(pm, context.getPackageName(), false, \"speed\", true);\n long cost = SystemClock.elapsedRealtime() - t1;\n Log.i(TAG, \"full Compile cost: \" + cost + \" result:\" + ret);\n return ret;\n } catch (Throwable e) {\n TraceLogger.e(TAG, \"fullCompile failed:\", e);\n return false;\n }\n }\n\n public static boolean clearCompileData(Context context) {\n boolean ret;\n try {\n Object pm = getPackageManagerBinderProxy();\n final Method performDexOpt = pm.getClass().getDeclaredMethod(\"performDexOpt\", String.class,\n boolean.class, int.class, boolean.class);\n ret = (Boolean) performDexOpt.invoke(pm, context.getPackageName(), false, 2 /*install*/, true);\n } catch (Throwable e) {\n TraceLogger.e(TAG, \"clear compile data failed\", e);\n ret = false;\n }\n return ret;\n }\n\n private static Object getPackageManagerBinderProxy() throws Exception {\n Class activityThread = Class.forName(\"android.app.ActivityThread\");\n final Method getPackageManager = activityThread.getDeclaredMethod(\"getPackageManager\");\n return getPackageManager.invoke(null);\n }\n}\n"
},
{
"path": "library/src/main/java/com/taobao/android/dexposed/utility/Platform.java",
"content": "/*\n * Original work Copyright (c) 2016, Lody\n * Modified work Copyright (c) 2016, Alibaba Mobile Infrastructure (Android) Team\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\npackage com.taobao.android.dexposed.utility;\n\nimport java.nio.ByteBuffer;\nimport java.nio.ByteOrder;\n\npublic abstract class Platform {\n\n /*package*/ static Platform PLATFORM_INTERNAL;\n\n static {\n if (Runtime.is64Bit()) {\n PLATFORM_INTERNAL = new Platform64Bit();\n }else {\n PLATFORM_INTERNAL = new Platform32Bit();\n }\n }\n\n public static Platform getPlatform() {\n return PLATFORM_INTERNAL;\n }\n\n /**\n * Convert a byte array to int,\n * Use this function to get address from memory.\n *\n * @param data byte array\n * @return long\n */\n public abstract int orderByteToInt(byte[] data);\n\n /**\n * Convert a byte array to long,\n * Use this function to get address from memory.\n *\n * @param data byte array\n * @return long\n */\n public abstract long orderByteToLong(byte[] data);\n\n public abstract byte[] orderLongToByte(long serial, int length);\n\n public abstract byte[] orderIntToByte(int serial);\n\n public abstract int getIntSize();\n\n\n static class Platform32Bit extends Platform {\n\n @Override\n public int orderByteToInt(byte[] data) {\n return ByteBuffer.wrap(data).order(ByteOrder.LITTLE_ENDIAN).getInt();\n }\n\n @Override\n public long orderByteToLong(byte[] data) {\n return ByteBuffer.wrap(data).order(ByteOrder.LITTLE_ENDIAN).getInt() & 0xFFFFFFFFL;\n }\n\n @Override\n public byte[] orderLongToByte(long serial, int length) {\n return ByteBuffer.allocate(length).order(ByteOrder.LITTLE_ENDIAN).putInt((int) serial).array();\n }\n\n @Override\n public byte[] orderIntToByte(int serial) {\n return ByteBuffer.allocate(4).order(ByteOrder.LITTLE_ENDIAN).putInt(serial).array();\n }\n\n @Override\n public int getIntSize() {\n return 4;\n }\n\n\n }\n\n static class Platform64Bit extends Platform {\n\n @Override\n public int orderByteToInt(byte[] data) {\n return ByteBuffer.wrap(data).order(ByteOrder.LITTLE_ENDIAN).getInt();\n }\n\n @Override\n public long orderByteToLong(byte[] data) {\n return ByteBuffer.wrap(data).order(ByteOrder.LITTLE_ENDIAN).getLong();\n }\n\n @Override\n public byte[] orderLongToByte(long serial, int length) {\n return ByteBuffer.allocate(length).order(ByteOrder.LITTLE_ENDIAN).putLong(serial).array();\n }\n\n @Override\n public byte[] orderIntToByte(int serial) {\n return ByteBuffer.allocate(4).order(ByteOrder.LITTLE_ENDIAN).putInt(serial).array();\n }\n\n @Override\n public int getIntSize() {\n return 8;\n }\n }\n\n}\n"
},
{
"path": "library/src/main/java/com/taobao/android/dexposed/utility/Runtime.java",
"content": "/*\n * Original work Copyright (c) 2016, Lody\n * Modified work Copyright (c) 2016, Alibaba Mobile Infrastructure (Android) Team\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\npackage com.taobao.android.dexposed.utility;\n\nimport android.util.Log;\n\nimport java.lang.reflect.Method;\n\nimport me.weishu.epic.art.method.ArtMethod;\n\npublic class Runtime {\n\n private static final String TAG = \"Runtime\";\n\n private volatile static Boolean isThumb = null;\n\n private volatile static boolean g64 = false;\n private volatile static boolean isArt = true;\n\n static {\n try {\n g64 = (boolean) Class.forName(\"dalvik.system.VMRuntime\").getDeclaredMethod(\"is64Bit\").invoke(Class.forName(\"dalvik.system.VMRuntime\").getDeclaredMethod(\"getRuntime\").invoke(null));\n } catch (Exception e) {\n Log.e(TAG, \"get is64Bit failed, default not 64bit!\", e);\n g64 = false;\n }\n isArt = System.getProperty(\"java.vm.version\").startsWith(\"2\");\n Log.i(TAG, \"is64Bit: \" + g64 + \", isArt: \" + isArt);\n }\n\n public static boolean is64Bit() {\n return g64;\n }\n\n public static boolean isArt() {\n return isArt;\n }\n\n public static boolean isThumb2() {\n if (isThumb != null) {\n return isThumb;\n }\n\n try {\n Method method = String.class.getDeclaredMethod(\"hashCode\");\n ArtMethod artMethodStruct = ArtMethod.of(method);\n long entryPointFromQuickCompiledCode = artMethodStruct.getEntryPointFromQuickCompiledCode();\n Logger.w(\"Runtime\", \"isThumb2, entry: \" + Long.toHexString(entryPointFromQuickCompiledCode));\n isThumb = ((entryPointFromQuickCompiledCode & 1) == 1);\n return isThumb;\n } catch (Throwable e) {\n Logger.w(\"Runtime\", \"isThumb2, error: \" + e);\n return true; // Default Thumb2.\n }\n }\n}\n"
},
{
"path": "library/src/main/java/com/taobao/android/dexposed/utility/Unsafe.java",
"content": "/*\n * Copyright 2014-2015 Marvin Wißfeld\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\npackage com.taobao.android.dexposed.utility;\n\nimport android.util.Log;\n\nimport java.lang.reflect.Field;\n\npublic final class Unsafe {\n private static final String TAG = \"Unsafe\";\n\n private static Object unsafe;\n private static Class unsafeClass;\n\n static {\n try {\n unsafeClass = Class.forName(\"sun.misc.Unsafe\");\n Field theUnsafe = unsafeClass.getDeclaredField(\"theUnsafe\");\n theUnsafe.setAccessible(true);\n unsafe = theUnsafe.get(null);\n } catch (Exception e) {\n try {\n final Field theUnsafe = unsafeClass.getDeclaredField(\"THE_ONE\");\n theUnsafe.setAccessible(true);\n unsafe = theUnsafe.get(null);\n } catch (Exception e2) {\n Log.w(TAG, \"Unsafe not found o.O\");\n }\n }\n }\n\n private Unsafe() {\n }\n\n @SuppressWarnings(\"unchecked\")\n public static int arrayBaseOffset(Class cls) {\n try {\n return (int) unsafeClass.getDeclaredMethod(\"arrayBaseOffset\", Class.class).invoke(unsafe, cls);\n } catch (Exception e) {\n Log.w(TAG, e);\n return 0;\n }\n }\n\n @SuppressWarnings(\"unchecked\")\n public static int arrayIndexScale(Class cls) {\n try {\n return (int) unsafeClass.getDeclaredMethod(\"arrayIndexScale\", Class.class).invoke(unsafe, cls);\n } catch (Exception e) {\n Log.w(TAG, e);\n return 0;\n }\n }\n\n @SuppressWarnings(\"unchecked\")\n public static long objectFieldOffset(Field field) {\n try {\n return (long) unsafeClass.getDeclaredMethod(\"objectFieldOffset\", Field.class).invoke(unsafe, field);\n } catch (Exception e) {\n Log.w(TAG, e);\n return 0;\n }\n }\n\n @SuppressWarnings(\"unchecked\")\n public static int getInt(Object array, long offset) {\n try {\n return (int) unsafeClass.getDeclaredMethod(\"getInt\", Object.class, long.class).invoke(unsafe, array, offset);\n } catch (Exception e) {\n Log.w(TAG, e);\n return 0;\n }\n }\n\n @SuppressWarnings(\"unchecked\")\n public static long getLong(Object array, long offset) {\n try {\n return (long) unsafeClass.getDeclaredMethod(\"getLong\", Object.class, long.class).invoke(unsafe, array, offset);\n } catch (Exception e) {\n Log.w(TAG, e);\n return 0;\n }\n }\n\n @SuppressWarnings(\"unchecked\")\n public static void putLong(Object array, long offset, long value) {\n try {\n unsafeClass.getDeclaredMethod(\"putLongVolatile\", Object.class, long.class, long.class).invoke(unsafe, array, offset, value);\n } catch (Exception e) {\n try {\n unsafeClass.getDeclaredMethod(\"putLong\", Object.class, long.class, long.class).invoke(unsafe, array, offset, value);\n } catch (Exception e1) {\n Log.w(TAG, e);\n }\n }\n }\n\n @SuppressWarnings(\"unchecked\")\n public static void putInt(Object array, long offset, int value) {\n try {\n unsafeClass.getDeclaredMethod(\"putIntVolatile\", Object.class, long.class, int.class).invoke(unsafe, array, offset, value);\n } catch (Exception e) {\n try {\n unsafeClass.getDeclaredMethod(\"putIntVolatile\", Object.class, long.class, int.class).invoke(unsafe, array, offset, value);\n } catch (Exception e1) {\n Log.w(TAG, e);\n }\n }\n }\n\n public static long getObjectAddress(Object obj) {\n try {\n Object[] array = new Object[]{obj};\n if (arrayIndexScale(Object[].class) == 8) {\n return getLong(array, arrayBaseOffset(Object[].class));\n } else {\n return 0xffffffffL & getInt(array, arrayBaseOffset(Object[].class));\n }\n } catch (Exception e) {\n Log.w(TAG, e);\n return -1;\n }\n }\n\n /**\n * get Object from address, refer: http://mishadoff.com/blog/java-magic-part-4-sun-dot-misc-dot-unsafe/\n * @param address the address of a object.\n * @return\n */\n public static Object getObject(long address) {\n Object[] array = new Object[]{null};\n long baseOffset = arrayBaseOffset(Object[].class);\n if (Runtime.is64Bit()) {\n putLong(array, baseOffset, address);\n } else {\n putInt(array, baseOffset, (int) address);\n }\n return array[0];\n }\n}\n"
},
{
"path": "library/src/main/java/de/robv/android/xposed/DexposedBridge.java",
"content": "/*\n * Original work Copyright (c) 2005-2008, The Android Open Source Project\n * Modified work Copyright (c) 2013, rovo89 and Tungstwenty\n * Modified work Copyright (c) 2015, Alibaba Mobile Infrastructure (Android) Team\n * Modified work Copyright (c) 2017, weishu\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\npackage de.robv.android.xposed;\n\nimport android.app.AndroidAppHelper;\nimport android.os.Build;\nimport android.util.Log;\n\nimport com.taobao.android.dexposed.utility.Logger;\nimport com.taobao.android.dexposed.utility.Runtime;\n\nimport java.lang.reflect.AccessibleObject;\nimport java.lang.reflect.Constructor;\nimport java.lang.reflect.InvocationTargetException;\nimport java.lang.reflect.Member;\nimport java.lang.reflect.Method;\nimport java.util.ArrayList;\nimport java.util.Arrays;\nimport java.util.HashMap;\nimport java.util.HashSet;\nimport java.util.Map;\nimport java.util.Set;\n\nimport me.weishu.epic.art.Epic;\nimport me.weishu.epic.art.method.ArtMethod;\nimport me.weishu.reflection.Reflection;\n\nimport static de.robv.android.xposed.XposedHelpers.getIntField;\n\npublic final class DexposedBridge {\n\n\tstatic {\n\t\ttry {\n\t\t\tif (android.os.Build.VERSION.SDK_INT > Build.VERSION_CODES.KITKAT) {\n\t\t\t\tSystem.loadLibrary(\"epic\");\n\t\t\t} else if (android.os.Build.VERSION.SDK_INT > Build.VERSION_CODES.ICE_CREAM_SANDWICH){\n\t\t\t\tSystem.loadLibrary(\"dexposed\");\n\t\t\t} else {\n\t\t\t\tthrow new RuntimeException(\"unsupported api level: \" + Build.VERSION.SDK_INT);\n\t\t\t}\n\t\t\tReflection.unseal(AndroidAppHelper.currentApplication());\n\t\t} catch (Throwable e) {\n\t\t\tlog(e);\n\t\t}\n\t}\n\n\tprivate static final String TAG = \"DexposedBridge\";\n\n\tprivate static final Object[] EMPTY_ARRAY = new Object[0];\n\tpublic static final ClassLoader BOOTCLASSLOADER = ClassLoader.getSystemClassLoader();\n\n\n\t// built-in handlers\n\tprivate static final Map> hookedMethodCallbacks\n\t\t\t\t\t\t\t\t\t= new HashMap>();\n\n\tprivate static final ArrayList allUnhookCallbacks = new ArrayList();\n\n\n\t/**\n\t * Writes a message to BASE_DIR/log/debug.log (needs to have chmod 777)\n\t * @param text log message\n\t */\n\tpublic synchronized static void log(String text) {\n\t\tLog.i(TAG, text);\n\t}\n\n\t/**\n\t * Log the stack trace\n\t * @param t The Throwable object for the stacktrace\n\t * @see DexposedBridge#log(String)\n\t */\n\tpublic synchronized static void log(Throwable t) {\n\t\tlog(Log.getStackTraceString(t));\n\t}\n\n\t/**\n\t * Hook any method with the specified callback\n\t *\n\t * @param hookMethod The method to be hooked\n\t * @param callback\n\t */\n\tpublic static XC_MethodHook.Unhook hookMethod(Member hookMethod, XC_MethodHook callback) {\n\t\tif (!(hookMethod instanceof Method) && !(hookMethod instanceof Constructor)) {\n\t\t\tthrow new IllegalArgumentException(\"only methods and constructors can be hooked\");\n\t\t}\n\n\t\tboolean newMethod = false;\n\t\tCopyOnWriteSortedSet callbacks;\n\t\tsynchronized (hookedMethodCallbacks) {\n\t\t\tcallbacks = hookedMethodCallbacks.get(hookMethod);\n\t\t\tif (callbacks == null) {\n\t\t\t\tcallbacks = new CopyOnWriteSortedSet();\n\t\t\t\thookedMethodCallbacks.put(hookMethod, callbacks);\n\t\t\t\tnewMethod = true;\n\t\t\t}\n\t\t}\n\n\t\tLogger.w(TAG, \"hook: \" + hookMethod + \", newMethod ? \" + newMethod);\n\n\t\tcallbacks.add(callback);\n\t\tif (newMethod) {\n\t\t\tif (Runtime.isArt()) {\n\t\t\t\tif (hookMethod instanceof Method) {\n\t\t\t\t\tEpic.hookMethod(((Method) hookMethod));\n\t\t\t\t} else {\n\t\t\t\t\tEpic.hookMethod(((Constructor) hookMethod));\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tClass declaringClass = hookMethod.getDeclaringClass();\n\t\t\t\tint slot = getIntField(hookMethod, \"slot\");\n\n\t\t\t\tClass[] parameterTypes;\n\t\t\t\tClass returnType;\n\t\t\t\tif (hookMethod instanceof Method) {\n\t\t\t\t\tparameterTypes = ((Method) hookMethod).getParameterTypes();\n\t\t\t\t\treturnType = ((Method) hookMethod).getReturnType();\n\t\t\t\t} else {\n\t\t\t\t\tparameterTypes = ((Constructor) hookMethod).getParameterTypes();\n\t\t\t\t\treturnType = null;\n\t\t\t\t}\n\n\t\t\t\tAdditionalHookInfo additionalInfo = new AdditionalHookInfo(callbacks, parameterTypes, returnType);\n\t\t\t\thookMethodNative(hookMethod, declaringClass, slot, additionalInfo);\n\t\t\t}\n\t\t}\n\t\treturn callback.new Unhook(hookMethod);\n\t}\n\n\t/**\n\t * Removes the callback for a hooked method\n\t * @param hookMethod The method for which the callback should be removed\n\t * @param callback The reference to the callback as specified in {@link #hookMethod}\n\t */\n\tpublic static void unhookMethod(Member hookMethod, XC_MethodHook callback) {\n\t\tCopyOnWriteSortedSet callbacks;\n\t\tsynchronized (hookedMethodCallbacks) {\n\t\t\tcallbacks = hookedMethodCallbacks.get(hookMethod);\n\t\t\tif (callbacks == null)\n\t\t\t\treturn;\n\t\t}\n\t\tcallbacks.remove(callback);\n\t}\n\n\tpublic static Set hookAllMethods(Class hookClass, String methodName, XC_MethodHook callback) {\n\t\tSet unhooks = new HashSet();\n\t\tfor (Member method : hookClass.getDeclaredMethods())\n\t\t\tif (method.getName().equals(methodName))\n\t\t\t\tunhooks.add(hookMethod(method, callback));\n\t\treturn unhooks;\n\t}\n\n\tpublic static XC_MethodHook.Unhook findAndHookMethod(Class clazz, String methodName, Object... parameterTypesAndCallback) {\n\t\tif (parameterTypesAndCallback.length == 0 || !(parameterTypesAndCallback[parameterTypesAndCallback.length-1] instanceof XC_MethodHook))\n\t\t\tthrow new IllegalArgumentException(\"no callback defined\");\n\n\t\tXC_MethodHook callback = (XC_MethodHook) parameterTypesAndCallback[parameterTypesAndCallback.length-1];\n\t\tMethod m = XposedHelpers.findMethodExact(clazz, methodName, parameterTypesAndCallback);\n\t\tXC_MethodHook.Unhook unhook = hookMethod(m, callback);\n\t\tsynchronized (allUnhookCallbacks) {\n\t\t\tallUnhookCallbacks.add(unhook);\n\t\t}\n\t\treturn unhook;\n\t}\n\n\tpublic static void unhookAllMethods() {\n\t\tsynchronized (allUnhookCallbacks) {\n\t\t\tfor (int i = 0; i < allUnhookCallbacks.size(); i++) {\n\t\t\t\t((XC_MethodHook.Unhook) allUnhookCallbacks.get(i)).unhook();\n\t\t\t}\n\t\t\tallUnhookCallbacks.clear();\n\t\t}\n\t}\n\n\tpublic static Set hookAllConstructors(Class hookClass, XC_MethodHook callback) {\n\t\tSet unhooks = new HashSet();\n\t\tfor (Member constructor : hookClass.getDeclaredConstructors())\n\t\t\tunhooks.add(hookMethod(constructor, callback));\n\t\treturn unhooks;\n\t}\n\n\n\tpublic static Object handleHookedArtMethod(Object artMethodObject, Object thisObject, Object[] args) {\n\n\t\tCopyOnWriteSortedSet callbacks;\n\n\t\tArtMethod artmethod = (ArtMethod ) artMethodObject;\n\t\tsynchronized (hookedMethodCallbacks) {\n\t\t\tcallbacks = hookedMethodCallbacks.get(artmethod.getExecutable());\n\t\t}\n\t\tObject[] callbacksSnapshot = callbacks.getSnapshot();\n\t\tfinal int callbacksLength = callbacksSnapshot.length;\n\t\t//Logger.d(TAG, \"callbacksLength:\" + callbacksLength + \", this:\" + thisObject + \", args:\" + Arrays.toString(args));\n\t\tif (callbacksLength == 0) {\n\t\t\ttry {\n\t\t\t\tArtMethod method = Epic.getBackMethod(artmethod);\n\t\t\t\treturn method.invoke(thisObject, args);\n\t\t\t} catch (Exception e) {\n\t\t\t\tlog(e.getCause());\n\t\t\t}\n\t\t}\n\n\t\tXC_MethodHook.MethodHookParam param = new XC_MethodHook.MethodHookParam();\n\t\tparam.method = (Member) (artmethod).getExecutable();\n\t\tparam.thisObject = thisObject;\n\t\tparam.args = args;\n\n\t\t// call \"before method\" callbacks\n\t\tint beforeIdx = 0;\n\t\tdo {\n\t\t\ttry {\n\t\t\t\t((XC_MethodHook) callbacksSnapshot[beforeIdx]).beforeHookedMethod(param);\n\t\t\t} catch (Throwable t) {\n\t\t\t\tlog(t);\n\n\t\t\t\t// reset result (ignoring what the unexpectedly exiting callback did)\n\t\t\t\tparam.setResult(null);\n\t\t\t\tparam.returnEarly = false;\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\tif (param.returnEarly) {\n\t\t\t\t// skip remaining \"before\" callbacks and corresponding \"after\" callbacks\n\t\t\t\tbeforeIdx++;\n\t\t\t\tbreak;\n\t\t\t}\n\t\t} while (++beforeIdx < callbacksLength);\n\n\t\t// call original method if not requested otherwise\n\t\tif (!param.returnEarly) {\n\t\t\ttry {\n\t\t\t\tArtMethod method = Epic.getBackMethod(artmethod);\n\t\t\t\tObject result = method.invoke(thisObject, args);\n\t\t\t\tparam.setResult(result);\n\t\t\t} catch (Exception e) {\n\t\t\t\t// log(e); origin throw exception is normal.\n\t\t\t\tparam.setThrowable(e);\n\t\t\t}\n\t\t}\n\n\t\t// call \"after method\" callbacks\n\t\tint afterIdx = beforeIdx - 1;\n\t\tdo {\n\t\t\tObject lastResult = param.getResult();\n\t\t\tThrowable lastThrowable = param.getThrowable();\n\n\t\t\ttry {\n\t\t\t\t((XC_MethodHook) callbacksSnapshot[afterIdx]).afterHookedMethod(param);\n\t\t\t} catch (Throwable t) {\n\t\t\t\tDexposedBridge.log(t);\n\n\t\t\t\t// reset to last result (ignoring what the unexpectedly exiting callback did)\n\t\t\t\tif (lastThrowable == null)\n\t\t\t\t\tparam.setResult(lastResult);\n\t\t\t\telse\n\t\t\t\t\tparam.setThrowable(lastThrowable);\n\t\t\t}\n\t\t} while (--afterIdx >= 0);\n\n\t\tif (param.hasThrowable()) {\n\t\t\tfinal Throwable throwable = param.getThrowable();\n\t\t\tif (throwable instanceof IllegalAccessException || throwable instanceof InvocationTargetException\n\t\t\t\t\t|| throwable instanceof InstantiationException) {\n\t\t\t\t// reflect exception, get the origin cause\n\t\t\t\tfinal Throwable cause = throwable.getCause();\n\n\t\t\t\t// We can not change the exception flow of origin call, rethrow\n\t\t\t\t// Logger.e(TAG, \"origin call throw exception (not a real crash, just record for debug):\", cause);\n\t\t\t\tDexposedBridge.throwNoCheck(param.getThrowable().getCause(), null);\n\t\t\t\treturn null; //never reach.\n\t\t\t} else {\n\t\t\t\t// the exception cause by epic self, just log.\n\t\t\t\tLogger.e(TAG, \"epic cause exception in call bridge!!\", throwable);\n\t\t\t}\n\t\t\treturn null; // never reached.\n\t\t} else {\n\t\t\tfinal Object result = param.getResult();\n\t\t\t//Logger.d(TAG, \"return :\" + result);\n\t\t\treturn result;\n\t\t}\n\t}\n\n\t/**\n\t * Just for throw an checked exception without check\n\t * @param exception The checked exception.\n\t * @param dummy dummy.\n\t * @param fake type\n\t * @throws T the checked exception.\n\t */\n\t@SuppressWarnings(\"unchecked\")\n\tprivate static void throwNoCheck(Throwable exception, Object dummy) throws T {\n\t\tthrow (T) exception;\n\t}\n\n\t/**\n\t * This method is called as a replacement for hooked methods.\n\t */\n\tprivate static Object handleHookedMethod(Member method, int originalMethodId, Object additionalInfoObj,\n\t\t\tObject thisObject, Object[] args) throws Throwable {\n\t\tAdditionalHookInfo additionalInfo = (AdditionalHookInfo) additionalInfoObj;\n\n\t\tObject[] callbacksSnapshot = additionalInfo.callbacks.getSnapshot();\n\t\tfinal int callbacksLength = callbacksSnapshot.length;\n\t\tif (callbacksLength == 0) {\n\t\t\ttry {\n\t\t\t\treturn invokeOriginalMethodNative(method, originalMethodId, additionalInfo.parameterTypes,\n\t\t\t\t\t\tadditionalInfo.returnType, thisObject, args);\n\t\t\t} catch (InvocationTargetException e) {\n\t\t\t\tthrow e.getCause();\n\t\t\t}\n\t\t}\n\n\t\tXC_MethodHook.MethodHookParam param = new XC_MethodHook.MethodHookParam();\n\t\tparam.method = method;\n\t\tparam.thisObject = thisObject;\n\t\tparam.args = args;\n\n\t\t// call \"before method\" callbacks\n\t\tint beforeIdx = 0;\n\t\tdo {\n\t\t\ttry {\n\t\t\t\t((XC_MethodHook) callbacksSnapshot[beforeIdx]).beforeHookedMethod(param);\n\t\t\t} catch (Throwable t) {\n\t\t\t\tlog(t);\n\n\t\t\t\t// reset result (ignoring what the unexpectedly exiting callback did)\n\t\t\t\tparam.setResult(null);\n\t\t\t\tparam.returnEarly = false;\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\tif (param.returnEarly) {\n\t\t\t\t// skip remaining \"before\" callbacks and corresponding \"after\" callbacks\n\t\t\t\tbeforeIdx++;\n\t\t\t\tbreak;\n\t\t\t}\n\t\t} while (++beforeIdx < callbacksLength);\n\n\t\t// call original method if not requested otherwise\n\t\tif (!param.returnEarly) {\n\t\t\ttry {\n\t\t\t\tparam.setResult(invokeOriginalMethodNative(method, originalMethodId,\n\t\t\t\t\t\tadditionalInfo.parameterTypes, additionalInfo.returnType, param.thisObject, param.args));\n\t\t\t} catch (InvocationTargetException e) {\n\t\t\t\tparam.setThrowable(e.getCause());\n\t\t\t}\n\t\t}\n\n\t\t// call \"after method\" callbacks\n\t\tint afterIdx = beforeIdx - 1;\n\t\tdo {\n\t\t\tObject lastResult = param.getResult();\n\t\t\tThrowable lastThrowable = param.getThrowable();\n\n\t\t\ttry {\n\t\t\t\t((XC_MethodHook) callbacksSnapshot[afterIdx]).afterHookedMethod(param);\n\t\t\t} catch (Throwable t) {\n\t\t\t\tDexposedBridge.log(t);\n\n\t\t\t\t// reset to last result (ignoring what the unexpectedly exiting callback did)\n\t\t\t\tif (lastThrowable == null)\n\t\t\t\t\tparam.setResult(lastResult);\n\t\t\t\telse\n\t\t\t\t\tparam.setThrowable(lastThrowable);\n\t\t\t}\n\t\t} while (--afterIdx >= 0);\n\n\t\t// return\n\t\tif (param.hasThrowable())\n\t\t\tthrow param.getThrowable();\n\t\telse\n\t\t\treturn param.getResult();\n\t}\n\n\n\n\tprivate native static Object invokeSuperNative(Object obj, Object[] args, Member method, Class declaringClass,\n Class[] parameterTypes, Class returnType, int slot)\n throws IllegalAccessException, IllegalArgumentException,\n InvocationTargetException;\n\n\tpublic static Object invokeSuper(Object obj, Member method, Object... args) throws NoSuchFieldException {\n\n\t\ttry {\n\t\t\tint slot = 0;\n\t\t\tif(!Runtime.isArt()) {\n\t\t\t\t//get the super method slot\n\t\t\t\tMethod m = XposedHelpers.findMethodExact(obj.getClass().getSuperclass(), method.getName(), ((Method) method).getParameterTypes());\n\t\t\t\tslot = (int) getIntField(m, \"slot\");\n\t\t\t}\n\n\t\t\treturn invokeSuperNative(obj, args, method, method.getDeclaringClass(), ((Method) method).getParameterTypes(), ((Method) method).getReturnType(), slot);\n\n\t\t} catch (IllegalAccessException e) {\n\t\t\tthrow new IllegalAccessError(e.getMessage());\n\t\t} catch (IllegalArgumentException e) {\n\t\t\tthrow e;\n\t\t} catch (InvocationTargetException e) {\n\t\t\tthrow new XposedHelpers.InvocationTargetError(e.getCause());\n\t\t}\n\t}\n\n\t/**\n\t * Intercept every call to the specified method and call a handler function instead.\n\t * @param method The method to intercept\n\t */\n\tprivate native synchronized static void hookMethodNative(Member method, Class declaringClass, int slot, Object additionalInfo);\n\n\tprivate native static Object invokeOriginalMethodNative(Member method, int methodId,\n\t\t\tClass[] parameterTypes, Class returnType, Object thisObject, Object[] args)\n\t\t\tthrows IllegalAccessException, IllegalArgumentException, InvocationTargetException;\n\n\n\t/**\n\t * Basically the same as {@link Method#invoke}, but calls the original method\n\t * as it was before the interception by Xposed. Also, access permissions are not checked.\n\t *\n\t * @param method Method to be called\n\t * @param thisObject For non-static calls, the \"this\" pointer\n\t * @param args Arguments for the method call as Object[] array\n\t * @return The result returned from the invoked method\n\t * @throws NullPointerException\n\t * if {@code receiver == null} for a non-static method\n\t * @throws IllegalAccessException\n\t * if this method is not accessible (see {@link AccessibleObject})\n\t * @throws IllegalArgumentException\n\t * if the number of arguments doesn't match the number of parameters, the receiver\n\t * is incompatible with the declaring class, or an argument could not be unboxed\n\t * or converted by a widening conversion to the corresponding parameter type\n\t * @throws InvocationTargetException\n\t * if an exception was thrown by the invoked method\n\n\t */\n\tpublic static Object invokeOriginalMethod(Member method, Object thisObject, Object[] args)\n\t\t\tthrows NullPointerException, IllegalAccessException, IllegalArgumentException, InvocationTargetException {\n\t\tif (args == null) {\n\t\t\targs = EMPTY_ARRAY;\n\t\t}\n\n\t\tClass[] parameterTypes;\n\t\tClass returnType;\n\t\tif (method instanceof Method) {\n\t\t\tparameterTypes = ((Method) method).getParameterTypes();\n\t\t\treturnType = ((Method) method).getReturnType();\n\t\t} else if (method instanceof Constructor) {\n\t\t\tparameterTypes = ((Constructor) method).getParameterTypes();\n\t\t\treturnType = null;\n\t\t} else {\n\t\t\tthrow new IllegalArgumentException(\"method must be of type Method or Constructor\");\n\t\t}\n\n\t\tif (Runtime.isArt()) {\n\t\t\tArtMethod artMethod;\n\t\t\tif (method instanceof Method) {\n\t\t\t\tartMethod = ArtMethod.of((Method) method);\n\t\t\t} else {\n\t\t\t\tartMethod = ArtMethod.of((Constructor)method);\n\t\t\t}\n\t\t\ttry {\n return Epic.getBackMethod(artMethod).invoke(thisObject, args);\n\t\t\t} catch (InstantiationException e) {\n DexposedBridge.throwNoCheck(e, null);\n\t\t\t}\n\t\t}\n\t\treturn invokeOriginalMethodNative(method, 0, parameterTypes, returnType, thisObject, args);\n\t}\n\n\tpublic static class CopyOnWriteSortedSet {\n\t\tprivate transient volatile Object[] elements = EMPTY_ARRAY;\n\n\t\tpublic synchronized boolean add(E e) {\n\t\t\tint index = indexOf(e);\n\t\t\tif (index >= 0)\n\t\t\t\treturn false;\n\n\t\t\tObject[] newElements = new Object[elements.length + 1];\n\t\t\tSystem.arraycopy(elements, 0, newElements, 0, elements.length);\n\t\t\tnewElements[elements.length] = e;\n\t\t\tArrays.sort(newElements);\n\t\t\telements = newElements;\n\t\t\treturn true;\n\t\t}\n\n\t\tpublic synchronized boolean remove(E e) {\n\t\t\tint index = indexOf(e);\n\t\t\tif (index == -1)\n\t\t\t\treturn false;\n\n\t\t\tObject[] newElements = new Object[elements.length - 1];\n\t\t\tSystem.arraycopy(elements, 0, newElements, 0, index);\n\t\t\tSystem.arraycopy(elements, index + 1, newElements, index, elements.length - index - 1);\n\t\t\telements = newElements;\n\t\t\treturn true;\n\t\t}\n\n\t\tpublic synchronized void clear(){\n\t\t\telements = EMPTY_ARRAY;\n\t\t}\n\n\t\tprivate int indexOf(Object o) {\n\t\t\tfor (int i = 0; i < elements.length; i++) {\n\t\t\t\tif (o.equals(elements[i]))\n\t\t\t\t\treturn i;\n\t\t\t}\n\t\t\treturn -1;\n\t\t}\n\n\t\tpublic Object[] getSnapshot() {\n\t\t\treturn elements;\n\t\t}\n\t}\n\n\tprivate static class AdditionalHookInfo {\n\t\tfinal CopyOnWriteSortedSet callbacks;\n\t\tfinal Class[] parameterTypes;\n\t\tfinal Class returnType;\n\n\t\tprivate AdditionalHookInfo(CopyOnWriteSortedSet callbacks, Class[] parameterTypes, Class returnType) {\n\t\t\tthis.callbacks = callbacks;\n\t\t\tthis.parameterTypes = parameterTypes;\n\t\t\tthis.returnType = returnType;\n\t\t}\n\t}\n}\n"
},
{
"path": "library/src/main/java/me/weishu/epic/art/Epic.java",
"content": "/*\n * Copyright (c) 2017, weishu\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\npackage me.weishu.epic.art;\n\nimport android.os.Build;\n\nimport com.taobao.android.dexposed.utility.Debug;\nimport com.taobao.android.dexposed.utility.Logger;\nimport com.taobao.android.dexposed.utility.Runtime;\n\nimport java.lang.reflect.Constructor;\nimport java.lang.reflect.Method;\nimport java.lang.reflect.Modifier;\nimport java.nio.ByteBuffer;\nimport java.nio.ByteOrder;\nimport java.util.HashMap;\nimport java.util.Map;\nimport java.util.concurrent.ConcurrentHashMap;\n\nimport me.weishu.epic.art.arch.Arm64;\nimport me.weishu.epic.art.arch.ShellCode;\nimport me.weishu.epic.art.arch.Thumb2;\nimport me.weishu.epic.art.method.ArtMethod;\n\n/**\n * Hook Center.\n */\npublic final class Epic {\n\n private static final String TAG = \"Epic\";\n\n private static final Map backupMethodsMapping = new ConcurrentHashMap<>();\n\n private static final Map originSigs = new ConcurrentHashMap<>();\n\n private static final Map scripts = new HashMap<>();\n private static ShellCode ShellCode;\n\n static {\n boolean isArm = true; // TODO: 17/11/21 TODO\n int apiLevel = Build.VERSION.SDK_INT;\n boolean thumb2 = true;\n if (isArm) {\n if (Runtime.is64Bit()) {\n ShellCode = new Arm64();\n } else if (Runtime.isThumb2()) {\n ShellCode = new Thumb2();\n } else {\n thumb2 = false;\n ShellCode = new Thumb2();\n Logger.w(TAG, \"ARM32, not support now.\");\n }\n }\n if (ShellCode == null) {\n throw new RuntimeException(\"Do not support this ARCH now!! API LEVEL:\" + apiLevel + \" thumb2 ? : \" + thumb2);\n }\n Logger.i(TAG, \"Using: \" + ShellCode.getName());\n }\n\n public static boolean hookMethod(Constructor origin) {\n return hookMethod(ArtMethod.of(origin));\n }\n\n public static boolean hookMethod(Method origin) {\n ArtMethod artOrigin = ArtMethod.of(origin);\n return hookMethod(artOrigin);\n }\n\n private static boolean hookMethod(ArtMethod artOrigin) {\n\n MethodInfo methodInfo = new MethodInfo();\n methodInfo.isStatic = Modifier.isStatic(artOrigin.getModifiers());\n final Class[] parameterTypes = artOrigin.getParameterTypes();\n if (parameterTypes != null) {\n methodInfo.paramNumber = parameterTypes.length;\n methodInfo.paramTypes = parameterTypes;\n } else {\n methodInfo.paramNumber = 0;\n methodInfo.paramTypes = new Class[0];\n }\n methodInfo.returnType = artOrigin.getReturnType();\n methodInfo.method = artOrigin;\n originSigs.put(artOrigin.getAddress(), methodInfo);\n\n if (!artOrigin.isAccessible()) {\n artOrigin.setAccessible(true);\n }\n\n artOrigin.ensureResolved();\n\n long originEntry = artOrigin.getEntryPointFromQuickCompiledCode();\n if (originEntry == ArtMethod.getQuickToInterpreterBridge()) {\n Logger.i(TAG, \"this method is not compiled, compile it now. current entry: 0x\" + Long.toHexString(originEntry));\n boolean ret = artOrigin.compile();\n if (ret) {\n originEntry = artOrigin.getEntryPointFromQuickCompiledCode();\n Logger.i(TAG, \"compile method success, new entry: 0x\" + Long.toHexString(originEntry));\n } else {\n Logger.e(TAG, \"compile method failed...\");\n return false;\n // return hookInterpreterBridge(artOrigin);\n }\n }\n\n ArtMethod backupMethod = artOrigin.backup();\n\n Logger.i(TAG, \"backup method address:\" + Debug.addrHex(backupMethod.getAddress()));\n Logger.i(TAG, \"backup method entry :\" + Debug.addrHex(backupMethod.getEntryPointFromQuickCompiledCode()));\n\n ArtMethod backupList = getBackMethod(artOrigin);\n if (backupList == null) {\n setBackMethod(artOrigin, backupMethod);\n }\n\n final long key = originEntry;\n final EntryLock lock = EntryLock.obtain(originEntry);\n //noinspection SynchronizationOnLocalVariableOrMethodParameter\n synchronized (lock) {\n if (!scripts.containsKey(key)) {\n scripts.put(key, new Trampoline(ShellCode, originEntry));\n }\n Trampoline trampoline = scripts.get(key);\n boolean ret = trampoline.install(artOrigin);\n // Logger.d(TAG, \"hook Method result:\" + ret);\n return ret;\n }\n }\n\n /*\n private static boolean hookInterpreterBridge(ArtMethod artOrigin) {\n\n String identifier = artOrigin.getIdentifier();\n ArtMethod backupMethod = artOrigin.backup();\n\n Logger.d(TAG, \"backup method address:\" + Debug.addrHex(backupMethod.getAddress()));\n Logger.d(TAG, \"backup method entry :\" + Debug.addrHex(backupMethod.getEntryPointFromQuickCompiledCode()));\n\n List backupList = backupMethodsMapping.get(identifier);\n if (backupList == null) {\n backupList = new LinkedList();\n backupMethodsMapping.put(identifier, backupList);\n }\n backupList.add(backupMethod);\n\n long originalEntryPoint = ShellCode.toMem(artOrigin.getEntryPointFromQuickCompiledCode());\n Logger.d(TAG, \"originEntry Point(bridge):\" + Debug.addrHex(originalEntryPoint));\n\n originalEntryPoint += 16;\n Logger.d(TAG, \"originEntry Point(offset8):\" + Debug.addrHex(originalEntryPoint));\n\n if (!scripts.containsKey(originalEntryPoint)) {\n scripts.put(originalEntryPoint, new Trampoline(ShellCode, artOrigin));\n }\n Trampoline trampoline = scripts.get(originalEntryPoint);\n\n boolean ret = trampoline.install();\n Logger.i(TAG, \"hook Method result:\" + ret);\n return ret;\n\n }*/\n\n public synchronized static ArtMethod getBackMethod(ArtMethod origin) {\n String identifier = origin.getIdentifier();\n return backupMethodsMapping.get(identifier);\n }\n\n public static synchronized void setBackMethod(ArtMethod origin, ArtMethod backup) {\n String identifier = origin.getIdentifier();\n backupMethodsMapping.put(identifier, backup);\n }\n\n public static MethodInfo getMethodInfo(long address) {\n return originSigs.get(address);\n }\n\n public static int getQuickCompiledCodeSize(ArtMethod method) {\n\n long entryPoint = ShellCode.toMem(method.getEntryPointFromQuickCompiledCode());\n long sizeInfo1 = entryPoint - 4;\n byte[] bytes = EpicNative.get(sizeInfo1, 4);\n int size = ByteBuffer.wrap(bytes).order(ByteOrder.LITTLE_ENDIAN).getInt();\n Logger.d(TAG, \"getQuickCompiledCodeSize: \" + size);\n return size;\n }\n\n\n public static class MethodInfo {\n public boolean isStatic;\n public int paramNumber;\n public Class[] paramTypes;\n public Class returnType;\n public ArtMethod method;\n\n @Override\n public String toString() {\n return method.toGenericString();\n }\n }\n\n private static class EntryLock {\n static Map sLockPool = new HashMap<>();\n\n static synchronized EntryLock obtain(long entry) {\n if (sLockPool.containsKey(entry)) {\n return sLockPool.get(entry);\n } else {\n EntryLock entryLock = new EntryLock();\n sLockPool.put(entry, entryLock);\n return entryLock;\n }\n }\n }\n}\n"
},
{
"path": "library/src/main/java/me/weishu/epic/art/EpicNative.java",
"content": "/*\n * Copyright (c) 2017, weishu twsxtd@gmail.com\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\npackage me.weishu.epic.art;\n\nimport android.util.Log;\n\nimport com.taobao.android.dexposed.DeviceCheck;\nimport com.taobao.android.dexposed.utility.Debug;\nimport com.taobao.android.dexposed.utility.Logger;\nimport com.taobao.android.dexposed.utility.Unsafe;\n\nimport java.lang.reflect.Member;\n\nimport de.robv.android.xposed.XposedHelpers;\n\nimport static com.taobao.android.dexposed.utility.Debug.addrHex;\n\n\npublic final class EpicNative {\n\n private static final String TAG = \"EpicNative\";\n private static volatile boolean useUnsafe = false;\n static {\n try {\n System.loadLibrary(\"epic\");\n useUnsafe = DeviceCheck.isYunOS() || !isGetObjectAvailable();\n Log.i(TAG, \"use unsafe ? \" + useUnsafe);\n } catch (Throwable e) {\n Log.e(TAG, \"init EpicNative error\", e);\n }\n }\n\n public static native long mmap(int length);\n\n public static native boolean munmap(long address, int length);\n\n public static native void memcpy(long src, long dest, int length);\n\n public static native void memput(byte[] bytes, long dest);\n\n public static native byte[] memget(long src, int length);\n\n public static native boolean munprotect(long addr, long len);\n\n public static native long getMethodAddress(Member method);\n\n public static native void MakeInitializedClassVisibilyInitialized(long self);\n\n public static native boolean cacheflush(long addr, long len);\n\n public static native long malloc(int sizeOfPtr);\n\n public static native Object getObjectNative(long self, long address);\n\n private static native boolean isGetObjectAvailable();\n\n public static Object getObject(long self, long address) {\n if (useUnsafe) {\n return Unsafe.getObject(address);\n } else {\n return getObjectNative(self, address);\n }\n }\n\n public static native boolean compileMethod(Member method, long self);\n\n /**\n * suspend all running thread momently\n * @return a handle to resume all thread, used by {@link #resumeAll(long)}\n */\n public static native long suspendAll();\n\n /**\n * resume all thread which are suspend by {@link #suspendAll()}\n * only work abobe Android N\n * @param cookie the cookie return by {@link #suspendAll()}\n */\n public static native void resumeAll(long cookie);\n\n /**\n * stop jit compiler in runtime.\n * Warning: Just for experiment Do not call this now!!!\n * @return cookie use by {@link #startJit(long)}\n */\n public static native long stopJit();\n\n /**\n * start jit compiler stop by {@link #stopJit()}\n * Warning: Just for experiment Do not call this now!!!\n * @param cookie the cookie return by {@link #stopJit()}\n */\n public static native void startJit(long cookie);\n\n // FIXME: 17/12/29 reimplement it with pure native code.\n static native boolean activateNative(long jumpToAddress, long pc, long sizeOfTargetJump, long sizeOfBridgeJump, byte[] code);\n\n /**\n * Disable the moving gc of runtime.\n * Warning: Just for experiment Do not call this now!!!\n * @param api the api level\n */\n public static native void disableMovingGc(int api);\n\n\n private EpicNative() {\n }\n\n public static boolean compileMethod(Member method) {\n final long nativePeer = XposedHelpers.getLongField(Thread.currentThread(), \"nativePeer\");\n return compileMethod(method, nativePeer);\n }\n\n public static Object getObject(long address) {\n final long nativePeer = XposedHelpers.getLongField(Thread.currentThread(), \"nativePeer\");\n return getObject(nativePeer, address);\n }\n\n public static void MakeInitializedClassVisibilyInitialized() {\n final long nativePeer = XposedHelpers.getLongField(Thread.currentThread(), \"nativePeer\");\n MakeInitializedClassVisibilyInitialized(nativePeer);\n }\n\n public static long map(int length) {\n long m = mmap(length);\n Logger.i(TAG, \"Mapped memory of size \" + length + \" at \" + addrHex(m));\n return m;\n }\n\n public static boolean unmap(long address, int length) {\n Logger.d(TAG, \"Removing mapped memory of size \" + length + \" at \" + addrHex(address));\n return munmap(address, length);\n }\n\n public static void put(byte[] bytes, long dest) {\n if (Debug.DEBUG) {\n Logger.d(TAG, \"Writing memory to: \" + addrHex(dest));\n Logger.d(TAG, Debug.hexdump(bytes, dest));\n }\n memput(bytes, dest);\n }\n\n public static byte[] get(long src, int length) {\n Logger.d(TAG, \"Reading \" + length + \" bytes from: \" + addrHex(src));\n byte[] bytes = memget(src, length);\n Logger.d(TAG, Debug.hexdump(bytes, src));\n return bytes;\n }\n\n public static boolean unprotect(long addr, long len) {\n Logger.d(TAG, \"Disabling mprotect from \" + addrHex(addr));\n return munprotect(addr, len);\n }\n\n public static void copy(long src, long dst, int length) {\n Logger.d(TAG, \"Copy \" + length + \" bytes form \" + addrHex(src) + \" to \" + addrHex(dst));\n memcpy(src, dst, length);\n }\n\n}\n\n\n\n"
},
{
"path": "library/src/main/java/me/weishu/epic/art/Trampoline.java",
"content": "/*\n * Copyright (c) 2017, weishu twsxtd@gmail.com\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\npackage me.weishu.epic.art;\n\nimport com.taobao.android.dexposed.utility.Debug;\nimport com.taobao.android.dexposed.utility.Logger;\nimport com.taobao.android.dexposed.utility.Runtime;\n\nimport java.lang.reflect.Method;\nimport java.util.HashSet;\nimport java.util.Set;\n\nimport me.weishu.epic.art.arch.ShellCode;\nimport me.weishu.epic.art.entry.Entry;\nimport me.weishu.epic.art.entry.Entry64;\nimport me.weishu.epic.art.method.ArtMethod;\n\nclass Trampoline {\n private static final String TAG = \"Trampoline\";\n\n private final ShellCode shellCode;\n private final long jumpToAddress;\n private final byte[] originalCode;\n private int trampolineSize;\n private long trampolineAddress;\n private boolean active;\n\n // private ArtMethod artOrigin;\n private Set segments = new HashSet<>();\n\n Trampoline(ShellCode shellCode, long entryPoint) {\n this.shellCode = shellCode;\n this.jumpToAddress = shellCode.toMem(entryPoint);\n this.originalCode = EpicNative.get(jumpToAddress, shellCode.sizeOfDirectJump());\n }\n\n public boolean install(ArtMethod originMethod){\n boolean modified = segments.add(originMethod);\n if (!modified) {\n // Already hooked, ignore\n Logger.d(TAG, originMethod + \" is already hooked, return.\");\n return true;\n }\n\n byte[] page = create();\n EpicNative.put(page, getTrampolineAddress());\n\n int quickCompiledCodeSize = Epic.getQuickCompiledCodeSize(originMethod);\n int sizeOfDirectJump = shellCode.sizeOfDirectJump();\n if (quickCompiledCodeSize < sizeOfDirectJump) {\n Logger.w(TAG, originMethod.toGenericString() + \" quickCompiledCodeSize: \" + quickCompiledCodeSize);\n originMethod.setEntryPointFromQuickCompiledCode(getTrampolinePc());\n return true;\n }\n // 这里是绝对不能改EntryPoint的，碰到GC就挂(GC暂停线程的时候，遍历所有线程堆栈，如果被hook的方法在堆栈上，那就GG)\n // source.setEntryPointFromQuickCompiledCode(script.getTrampolinePc());\n return activate();\n }\n\n private long getTrampolineAddress() {\n if (getSize() != trampolineSize) {\n alloc();\n }\n return trampolineAddress;\n }\n\n private long getTrampolinePc() {\n return shellCode.toPC(getTrampolineAddress());\n }\n\n private void alloc() {\n if (trampolineAddress != 0) {\n free();\n }\n trampolineSize = getSize();\n trampolineAddress = EpicNative.map(trampolineSize);\n Logger.d(TAG, \"Trampoline alloc:\" + trampolineSize + \", addr: 0x\" + Long.toHexString(trampolineAddress));\n }\n\n private void free() {\n if (trampolineAddress != 0) {\n EpicNative.unmap(trampolineAddress, trampolineSize);\n trampolineAddress = 0;\n trampolineSize = 0;\n }\n\n if (active) {\n EpicNative.put(originalCode, jumpToAddress);\n }\n }\n\n private int getSize() {\n int count = 0;\n count += shellCode.sizeOfBridgeJump() * segments.size();\n count += shellCode.sizeOfCallOrigin();\n return count;\n }\n\n private byte[] create() {\n Logger.d(TAG, \"create trampoline.\" + segments);\n byte[] mainPage = new byte[getSize()];\n\n int offset = 0;\n for (ArtMethod method : segments) {\n byte[] bridgeJump = createTrampoline(method);\n int length = bridgeJump.length;\n System.arraycopy(bridgeJump, 0, mainPage, offset, length);\n offset += length;\n }\n\n byte[] callOriginal = shellCode.createCallOrigin(jumpToAddress, originalCode);\n System.arraycopy(callOriginal, 0, mainPage, offset, callOriginal.length);\n\n return mainPage;\n }\n\n private boolean activate() {\n long pc = getTrampolinePc();\n Logger.d(TAG, \"Writing direct jump entry \" + Debug.addrHex(pc) + \" to origin entry: 0x\" + Debug.addrHex(jumpToAddress));\n synchronized (Trampoline.class) {\n return EpicNative.activateNative(jumpToAddress, pc, shellCode.sizeOfDirectJump(),\n shellCode.sizeOfBridgeJump(), shellCode.createDirectJump(pc));\n }\n }\n\n @Override\n protected void finalize() throws Throwable {\n free();\n super.finalize();\n }\n\n private byte[] createTrampoline(ArtMethod source){\n final Epic.MethodInfo methodInfo = Epic.getMethodInfo(source.getAddress());\n final Class returnType = methodInfo.returnType;\n\n// Method bridgeMethod = Runtime.is64Bit() ? (Build.VERSION.SDK_INT == 23 ? Entry64_2.getBridgeMethod(methodInfo) : Entry64.getBridgeMethod(returnType))\n// : Entry.getBridgeMethod(returnType);\n Method bridgeMethod = Runtime.is64Bit() ? Entry64.getBridgeMethod(returnType)\n : Entry.getBridgeMethod(returnType);\n\n final ArtMethod target = ArtMethod.of(bridgeMethod);\n long targetAddress = target.getAddress();\n long targetEntry = target.getEntryPointFromQuickCompiledCode();\n long sourceAddress = source.getAddress();\n long structAddress = EpicNative.malloc(4);\n\n Logger.d(TAG, \"targetAddress:\"+ Debug.longHex(targetAddress));\n Logger.d(TAG, \"sourceAddress:\"+ Debug.longHex(sourceAddress));\n Logger.d(TAG, \"targetEntry:\"+ Debug.longHex(targetEntry));\n Logger.d(TAG, \"structAddress:\"+ Debug.longHex(structAddress));\n\n return shellCode.createBridgeJump(targetAddress, targetEntry, sourceAddress, structAddress);\n }\n}\n"
},
{
"path": "library/src/main/java/me/weishu/epic/art/arch/Arm64.java",
"content": "/*\n * Copyright (c) 2017, weishu twsxtd@gmail.com\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\npackage me.weishu.epic.art.arch;\n\nimport java.nio.ByteOrder;\n\npublic class Arm64 extends ShellCode {\n\n @Override\n public int sizeOfDirectJump() {\n return 4 * 4;\n }\n\n @Override\n public byte[] createDirectJump(long targetAddress) {\n byte[] instructions = new byte[]{\n 0x50, 0x00, 0x00, 0x58, // ldr x9, _targetAddress\n 0x00, 0x02, 0x1F, (byte) 0xD6, // br x9\n 0x00, 0x00, 0x00, 0x00, // targetAddress\n 0x00, 0x00, 0x00, 0x00 // targetAddress\n };\n writeLong(targetAddress, ByteOrder.LITTLE_ENDIAN, instructions, instructions.length - 8);\n return instructions;\n }\n\n @Override\n public byte[] createBridgeJump(long targetAddress, long targetEntry, long srcAddress, long structAddress) {\n\n byte[] instructions = new byte[]{\n 0x1f, 0x20, 0x03, (byte) 0xd5, // nop\n 0x69, 0x02, 0x00, 0x58, // ldr x9, source_method\n 0x1f, 0x00, 0x09, (byte) 0xeb, // cmp x0, x9\n (byte) 0xa1, 0x02, 0x00, 0x54, // bne 5f\n (byte) 0x80, 0x01, 0x00, 0x58, // ldr x0, target_method\n\n 0x29, 0x02, 0x00, 0x58, // ldr x9, struct\n (byte) 0xea, 0x03, 0x00, (byte) 0x91, // mov x10, sp\n\n 0x2a, 0x01, 0x00, (byte) 0xf9, // str x10, [x9, #0]\n 0x22, 0x05, 0x00, (byte) 0xf9, // str x2, [x9, #8]\n\n 0x23, 0x09, 0x00, (byte) 0xf9, // str x3, [x9, #16]\n (byte) 0xe3, 0x03, 0x09, (byte) 0xaa, // mov x3, x9\n 0x22, 0x01, 0x00, 0x58, // ldr x2, source_method\n 0x22, 0x0d, 0x00, (byte) 0xf9, // str x2, [x9, #24]\n (byte) 0xe2, 0x03, 0x13, (byte) 0xaa, // mov x2, x19\n (byte) 0x89, 0x00, 0x00, 0x58, // ldr x9, target_method_entry\n 0x20, 0x01, 0x1f, (byte) 0xd6, // br x9\n\n 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, // target_method_address\n 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, // target_method_entry\n 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, // source_method\n 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 // struct\n\n };\n\n\n writeLong(targetAddress, ByteOrder.LITTLE_ENDIAN, instructions,\n instructions.length - 32);\n writeLong(targetEntry, ByteOrder.LITTLE_ENDIAN, instructions,\n instructions.length - 24);\n writeLong(srcAddress,\n ByteOrder.LITTLE_ENDIAN, instructions, instructions.length - 16);\n writeLong(structAddress, ByteOrder.LITTLE_ENDIAN, instructions,\n instructions.length - 8);\n\n return instructions;\n }\n\n @Override\n public int sizeOfBridgeJump() {\n return 24 * 4;\n }\n\n\n @Override\n public long toPC(long code) {\n return code;\n }\n\n @Override\n public long toMem(long pc) {\n return pc;\n }\n\n @Override\n public String getName() {\n return \"64-bit ARM\";\n }\n}\n"
},
{
"path": "library/src/main/java/me/weishu/epic/art/arch/Arm64_2.java",
"content": "/*\n * Copyright (c) 2017, weishu twsxtd@gmail.com\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\npackage me.weishu.epic.art.arch;\n\nimport java.nio.ByteOrder;\n\npublic class Arm64_2 extends ShellCode {\n\n @Override\n public int sizeOfDirectJump() {\n return 4 * 4;\n }\n\n @Override\n public byte[] createDirectJump(long targetAddress) {\n byte[] instructions = new byte[]{\n 0x50, 0x00, 0x00, 0x58, // ldr x16, _targetAddress\n 0x00, 0x02, 0x1F, (byte) 0xD6, // br x16\n 0x00, 0x00, 0x00, 0x00, // targetAddress\n 0x00, 0x00, 0x00, 0x00 // targetAddress\n };\n writeLong(targetAddress, ByteOrder.LITTLE_ENDIAN, instructions, instructions.length - 8);\n return instructions;\n }\n\n @Override\n public byte[] createBridgeJump(long targetAddress, long targetEntry, long srcAddress, long structAddress) {\n\n byte[] instructions = new byte[] {\n\n /*\n ldr x17, 3f\n cmp x0, x17\n bne 5f\n ldr x0, 1f\n ldr x17, 4f\n mov x16, sp\n str x16, [x17, #0]\n str x2, [x17, #8]\n ldr x16, 3f\n str x16, [x17, #16]\n mov x2, x17\n ldr x17, 2f\n br x17\n\n 1:\n .quad 0x0\n 2:\n .quad 0x0\n 3:\n .quad 0x0\n 4:\n .quad 0x0\n\n 5:\n mov x0, x17\n\n */\n 0x1f, 0x20, 0x03, (byte) 0xd5, // nop\n 0x31, 0x02, 0x00, 0x58,\n 0x1f, 0x00, 0x11, (byte)0xeb,\n (byte)0x61, 0x02, 0x00, 0x54,\n (byte)0x40, 0x01, 0x00, 0x58,\n (byte)0xf1, 0x01, 0x00, 0x58,\n (byte)0xf0, 0x03, 0x00, (byte)0x91,\n (byte)0x30, 0x02, 0x00, (byte)0xf9,\n 0x22, 0x06, 0x00, (byte)0xf9,\n 0x30, 0x01, 0x00, (byte)0x58,\n (byte)0x30, 0x0a, 0x00, (byte)0xf9,\n (byte)0xe2, 0x03, 0x11, (byte)0xaa,\n (byte)0x91, 0x00, 0x00, 0x58,\n (byte)0x20, 0x02, 0x1f, (byte)0xd6,\n\n 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, // target_method_address\n 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, // target_method_entry\n 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, // source_method\n 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 // struct\n };\n\n writeLong(targetAddress, ByteOrder.LITTLE_ENDIAN, instructions,\n instructions.length - 32);\n writeLong(targetEntry, ByteOrder.LITTLE_ENDIAN, instructions,\n instructions.length - 24);\n writeLong(srcAddress,\n ByteOrder.LITTLE_ENDIAN, instructions, instructions.length - 16);\n writeLong(structAddress, ByteOrder.LITTLE_ENDIAN, instructions,\n instructions.length - 8);\n\n return instructions;\n }\n\n @Override\n public int sizeOfBridgeJump() {\n return 22 * 4;\n }\n\n\n @Override\n public long toPC(long code) {\n return code;\n }\n\n @Override\n public long toMem(long pc) {\n return pc;\n }\n\n @Override\n public String getName() {\n return \"64-bit ARM(Android M)\";\n }\n}\n"
},
{
"path": "library/src/main/java/me/weishu/epic/art/arch/ShellCode.java",
"content": "/*\n * Copyright (c) 2017, weishu twsxtd@gmail.com\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\npackage me.weishu.epic.art.arch;\n\nimport java.nio.ByteBuffer;\nimport java.nio.ByteOrder;\n\npublic abstract class ShellCode {\n\n public abstract byte[] createDirectJump(long targetAddress);\n\n public abstract int sizeOfDirectJump();\n\n public abstract long toPC(long code);\n\n public abstract long toMem(long pc);\n\n public byte[] createCallOrigin(long originalAddress, byte[] originalPrologue) {\n byte[] callOriginal = new byte[sizeOfCallOrigin()];\n System.arraycopy(originalPrologue, 0, callOriginal, 0, sizeOfDirectJump());\n byte[] directJump = createDirectJump(toPC(originalAddress + sizeOfDirectJump()));\n System.arraycopy(directJump, 0, callOriginal, sizeOfDirectJump(), directJump.length);\n return callOriginal;\n }\n\n public int sizeOfCallOrigin() {\n return sizeOfDirectJump() * 2;\n }\n\n public abstract int sizeOfBridgeJump();\n\n public byte[] createBridgeJump(long targetAddress, long targetEntry, long srcAddress, long structAddress) {\n throw new RuntimeException(\"not impled\");\n }\n\n static void writeInt(int i, ByteOrder order, byte[] target, int pos) {\n System.arraycopy(ByteBuffer.allocate(4).order(order).putInt(i).array(), 0, target, pos, 4);\n }\n\n static void writeLong(long i, ByteOrder order, byte[] target, int pos) {\n System.arraycopy(ByteBuffer.allocate(8).order(order).putLong(i).array(), 0, target, pos, 8);\n }\n\n public abstract String getName();\n}\n"
},
{
"path": "library/src/main/java/me/weishu/epic/art/arch/Thumb2.java",
"content": "/*\n * Copyright (c) 2017, weishu twsxtd@gmail.com\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\npackage me.weishu.epic.art.arch;\n\nimport java.nio.ByteOrder;\n\n\npublic class Thumb2 extends ShellCode {\n\n @Override\n public int sizeOfDirectJump() {\n return 12;\n }\n\n @Override\n public byte[] createDirectJump(long targetAddress) {\n byte[] instructions = new byte[] {\n (byte) 0xdf, (byte) 0xf8, 0x00, (byte) 0xf0, // ldr pc, [pc]\n 0, 0, 0, 0\n };\n writeInt((int) targetAddress, ByteOrder.LITTLE_ENDIAN, instructions,\n instructions.length - 4);\n return instructions;\n }\n\n @Override\n public byte[] createBridgeJump(long targetAddress, long targetEntry, long srcAddress, long structAddress) {\n // 有问题，参数丢失。\n// byte[] instructions = new byte[] {\n// (byte) 0xdf, (byte) 0xf8, 0x18, (byte) 0xc0, // ldr ip, [pc, #24], ip = source_method_address\n//\n// (byte) 0x01, (byte) 0x91, // str r1, [sp, #4]\n// (byte) 0x02, (byte) 0x92, // str r2, [sp, #8]\n//\n// (byte) 0x03, (byte) 0x93, // str r3, [sp, #12]\n// (byte) 0x62, (byte) 0x46, // mov r2, ip\n//\n// 0x01, 0x48, // ldr r0, [pc, #4]\n// 0x6b, 0x46, // mov r3, sp\n//\n// (byte) 0xdf, (byte) 0xf8, 0x04, (byte) 0xf0, // ldr pc, [pc, #4]\n//\n// 0x0, 0x0, 0x0, 0x0, // target_method_pos_x\n// 0x0, 0x0, 0x0, 0x0, // target_method_entry_point\n// 0x0, 0x0, 0x0, 0x0, // src_method_pos_x\n// };\n// writeInt((int) targetAddress, ByteOrder.LITTLE_ENDIAN, instructions,\n// instructions.length - 12);\n// writeInt((int) targetEntry,\n// ByteOrder.LITTLE_ENDIAN, instructions, instructions.length - 8);\n// writeInt((int) srcAddress, ByteOrder.LITTLE_ENDIAN, instructions,\n// instructions.length - 4);\n\n byte[] instructions = new byte[]{\n\n (byte) 0xdf, (byte) 0xf8, (byte) 0x30, (byte) 0xc0, // ldr ip, [pc, #48] ip = source method address\n\n (byte) 0x60, (byte) 0x45, // cmp r0, ip if r0 != ip\n (byte) 0x40, (byte) 0xf0, (byte) 0x19, (byte) 0x80, // bne.w 1f jump label 1:\n (byte) 0x08, (byte) 0x48, // ldr r0, [pc, #28] r0 = target_method_address\n (byte) 0xdf, (byte) 0xf8, (byte) 0x28, (byte) 0xc0, // ldr ip, [pc, #38] ip = struct address\n (byte) 0xcc, (byte) 0xf8, (byte) 0x00, (byte) 0xd0, // str sp, [ip, #0]\n (byte) 0xcc, (byte) 0xf8, (byte) 0x04, (byte) 0x20, // str r2, [ip, #4]\n (byte) 0xcc, (byte) 0xf8, (byte) 0x08, (byte) 0x30, // str r3, [ip, #8]\n\n (byte) 0x63, (byte) 0x46, // mov r3, ip\n (byte) 0x05, (byte) 0x4a, // ldr r2, [pc, #16] r2 = source_method_address\n (byte) 0xcc, (byte) 0xf8, (byte) 0x0c, (byte) 0x20, // str r2, [ip, #12]\n (byte) 0x4a, (byte) 0x46, // move r2, r9\n (byte) 0x4a, (byte) 0x46, // move r2, r9\n\n (byte) 0xdf, (byte) 0xf8, (byte) 0x04, (byte) 0xf0, // ldr pc, [pc, #4]\n\n 0x0, 0x0, 0x0, 0x0, // target_method_pos_x\n 0x0, 0x0, 0x0, 0x0, // target_method_entry_point\n 0x0, 0x0, 0x0, 0x0, // src_method_address\n 0x0, 0x0, 0x0, 0x0, // struct address (sp, r1, r2)\n // 1:\n };\n\n writeInt((int) targetAddress, ByteOrder.LITTLE_ENDIAN, instructions,\n instructions.length - 16);\n writeInt((int) targetEntry, ByteOrder.LITTLE_ENDIAN, instructions,\n instructions.length - 12);\n writeInt((int) srcAddress,\n ByteOrder.LITTLE_ENDIAN, instructions, instructions.length - 8);\n writeInt((int) structAddress, ByteOrder.LITTLE_ENDIAN, instructions,\n instructions.length - 4);\n\n return instructions;\n }\n\n @Override\n public int sizeOfBridgeJump() {\n return 15 * 4;\n }\n\n @Override\n public long toPC(long code) {\n return toMem(code) + 1;\n }\n\n @Override\n public long toMem(long pc) {\n return pc & ~0x1;\n }\n\n @Override\n public String getName() {\n return \"Thumb2\";\n }\n}\n"
},
{
"path": "library/src/main/java/me/weishu/epic/art/entry/Entry.java",
"content": "/*\n * Copyright (c) 2017, weishu twsxtd@gmail.com\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\npackage me.weishu.epic.art.entry;\n\nimport android.os.Build;\nimport android.util.Pair;\n\nimport de.robv.android.xposed.DexposedBridge;\nimport com.taobao.android.dexposed.utility.Debug;\nimport com.taobao.android.dexposed.utility.Logger;\n\nimport java.lang.reflect.Method;\nimport java.nio.ByteBuffer;\nimport java.nio.ByteOrder;\nimport java.util.Arrays;\nimport java.util.HashMap;\nimport java.util.Map;\n\nimport me.weishu.epic.art.Epic;\nimport me.weishu.epic.art.EpicNative;\n\n@SuppressWarnings({\"unused\", \"ConstantConditions\"})\npublic class Entry {\n\n private final static String TAG = \"Entry\";\n\n private static final Object[] EMPTY_OBJECT_ARRAY = new Object[0];\n\n //region ---------------callback---------------\n private static int onHookInt(Object artmethod, Object receiver, Object[] args) {\n return (Integer) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static long onHookLong(Object artmethod, Object receiver, Object[] args) {\n return (Long) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static double onHookDouble(Object artmethod, Object receiver, Object[] args) {\n return (Double) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static char onHookChar(Object artmethod, Object receiver, Object[] args) {\n return (Character) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static short onHookShort(Object artmethod, Object receiver, Object[] args) {\n return (Short) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static float onHookFloat(Object artmethod, Object receiver, Object[] args) {\n return (Float) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static Object onHookObject(Object artmethod, Object receiver, Object[] args) {\n return DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static void onHookVoid(Object artmethod, Object receiver, Object[] args) {\n DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static boolean onHookBoolean(Object artmethod, Object receiver, Object[] args) {\n return (Boolean) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static byte onHookByte(Object artmethod, Object receiver, Object[] args) {\n return (Byte) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n //endregion\n\n //region ---------------bridge---------------\n private static void voidBridge(int r1, int self, int struct) {\n referenceBridge(r1, self, struct);\n }\n\n private static boolean booleanBridge(int r1, int self, int struct) {\n return (Boolean) referenceBridge(r1, self, struct);\n }\n\n private static byte byteBridge(int r1, int self, int struct) {\n return (Byte) referenceBridge(r1, self, struct);\n }\n\n private static short shortBridge(int r1, int self, int struct) {\n return (Short) referenceBridge(r1, self, struct);\n }\n\n private static char charBridge(int r1, int self, int struct) {\n return (Character) referenceBridge(r1, self, struct);\n }\n\n private static int intBridge(int r1, int self, int struct) {\n return (Integer) referenceBridge(r1, self, struct);\n }\n\n private static long longBridge(int r1, int self, int struct) {\n return (Long) referenceBridge(r1, self, struct);\n }\n\n private static float floatBridge(int r1, int self, int struct) {\n return (Float) referenceBridge(r1, self, struct);\n }\n\n private static double doubleBridge(int r1, int self, int struct) {\n return (Double) referenceBridge(r1, self, struct);\n }\n //endregion\n\n private static Object referenceBridge(int r1, int self, int struct) {\n Logger.i(TAG, \"enter bridge function.\");\n\n // struct {\n // void* sp;\n // void* r2;\n // void* r3;\n // void* sourceMethod\n // }\n // sp + 16 = r4\n\n Logger.i(TAG, \"struct:\" + Long.toHexString(struct));\n\n final int sp = ByteBuffer.wrap(EpicNative.get(struct, 4)).order(ByteOrder.LITTLE_ENDIAN).getInt();\n\n // Logger.i(TAG, \"stack:\" + Debug.hexdump(EpicNative.get(sp, 96), 0));\n\n final byte[] rr1 = ByteBuffer.allocate(4).order(ByteOrder.LITTLE_ENDIAN).putInt(r1).array();\n final byte[] r2 = EpicNative.get(struct + 4, 4);\n\n final byte[] r3 = EpicNative.get(struct + 8, 4);\n\n Logger.d(TAG, \"r1:\" + Debug.hexdump(rr1, 0));\n Logger.d(TAG, \"r2:\" + Debug.hexdump(r2, 0));\n Logger.d(TAG, \"r3:\" + Debug.hexdump(r3, 0));\n\n final byte[] sourceAddr = EpicNative.get(struct + 12, 4);\n\n ByteBuffer byteBuffer = ByteBuffer.wrap(new byte[8]);\n byteBuffer.put(sourceAddr);\n byteBuffer.put(new byte[] {0, 0, 0, 0});\n byteBuffer.flip();\n\n final long sourceMethod = byteBuffer.order(ByteOrder.LITTLE_ENDIAN).getLong();\n \n Logger.i(TAG, \"sourceMethod:\" + Long.toHexString(sourceMethod));\n\n Epic.MethodInfo originMethodInfo = Epic.getMethodInfo(sourceMethod);\n Logger.i(TAG, \"originMethodInfo :\" + originMethodInfo);\n\n final Pair constructArguments = constructArguments(originMethodInfo, self, rr1, r2, r3, sp);\n Object receiver = constructArguments.first;\n Object[] arguments = constructArguments.second;\n\n Logger.i(TAG, \"arguments:\" + Arrays.toString(arguments));\n\n Class returnType = originMethodInfo.returnType;\n Object artMethod = originMethodInfo.method;\n\n Logger.i(TAG, \"leave bridge function\");\n\n if (returnType == void.class) {\n onHookVoid(artMethod, receiver, arguments);\n return 0;\n } else if (returnType == char.class) {\n return onHookChar(artMethod, receiver, arguments);\n } else if (returnType == byte.class) {\n return onHookByte(artMethod, receiver, arguments);\n } else if (returnType == short.class) {\n return onHookShort(artMethod, receiver, arguments);\n } else if (returnType == int.class) {\n return onHookInt(artMethod, receiver, arguments);\n } else if (returnType == long.class) {\n return onHookLong(artMethod, receiver, arguments);\n } else if (returnType == float.class) {\n return onHookFloat(artMethod, receiver, arguments);\n } else if (returnType == double.class) {\n return onHookDouble(artMethod, receiver, arguments);\n } else if (returnType == boolean.class) {\n return onHookBoolean(artMethod, receiver, arguments);\n } else {\n return onHookObject(artMethod, receiver, arguments);\n }\n }\n\n /**\n * construct the method arguments from register r1, r2, r3 and stack\n * @param r1 register r1 value\n * @param r2 register r2 value\n * @param r3 register r3 value\n * @param sp stack pointer\n * @return arguments passed to the callee method\n */\n private static Pair constructArguments(Epic.MethodInfo originMethodInfo, int self,\n byte[] r1, byte[] r2, byte[] r3, int sp) {\n boolean isStatic = originMethodInfo.isStatic;\n\n int numberOfArgs;\n Class[] typeOfArgs;\n if (isStatic) {\n\n // static argument, r1, r2, r3, sp + 16\n\n // sp + 0 = ArtMethod (ourself)\n // sp + 4 = r1 (may be earased)\n // sp + 8 = r2 (may be earased)\n // sp + 12 = r3 (may be earased)\n // sp + 16 = r4, remain\n\n numberOfArgs = originMethodInfo.paramNumber;\n typeOfArgs = originMethodInfo.paramTypes;\n } else {\n // non-static, r1 = receiver; r2, r3, sp + 16 is arguments.\n\n // sp + 0 = ArtMethod (ourself)\n // sp + 4 = r1 = this (may be earased)\n // sp + 8 = r2 = first argument (may be earased)\n // sp + 12 = r3 = second argument (may be earased)\n // sp + 16 = third argument, remain\n numberOfArgs = 1 + originMethodInfo.paramNumber;\n typeOfArgs = new Class[numberOfArgs];\n typeOfArgs[0] = Object.class; // this\n System.arraycopy(originMethodInfo.paramTypes, 0, typeOfArgs, 1, originMethodInfo.paramTypes.length);\n }\n\n Object[] arguments = new Object[numberOfArgs];\n\n int currentStackPosition = 4; // sp + 0 = ArtMethod, sp + 4... start store arguments.\n final int argumentStackBegin = 16; // sp + 4 = r1, sp + 8 = r2, sp + 12 = r3, sp + 16 start in stack.\n\n int[] argStartPos = new int[numberOfArgs];\n\n for (int i = 0; i < numberOfArgs; i++) {\n Class typeOfArg = typeOfArgs[i];\n int typeLength = getTypeLength(typeOfArg);\n argStartPos[i] = currentStackPosition;\n currentStackPosition += typeLength;\n }\n\n int argTotalLength = currentStackPosition;\n byte[] argBytes = new byte[argTotalLength];\n\n do {\n if (argTotalLength <= 4) break;\n\n boolean align = Build.VERSION.SDK_INT >= 23 && numberOfArgs > 0 && getTypeLength(typeOfArgs[0]) == 8;\n if (align) {\n System.arraycopy(r2, 0, argBytes, 4, 4);\n System.arraycopy(r3, 0, argBytes, 8, 4);\n if (argTotalLength <= 12) break;\n System.arraycopy(EpicNative.get(sp + 12, 4), 0, argBytes, 12, 4);\n } else {\n System.arraycopy(r1, 0, argBytes, 4, 4);\n\n if (argTotalLength <= 8) break;\n System.arraycopy(r2, 0, argBytes, 8, 4);\n if (argTotalLength <= 12) break;\n System.arraycopy(r3, 0, argBytes, 12, 4);\n }\n\n if (argTotalLength <= 16) break;\n\n byte[] argInStack = EpicNative.get(sp + 16, argTotalLength - 16);\n System.arraycopy(argInStack, 0, argBytes, 16, argTotalLength - 16);\n } while (false);\n\n //region ---------------Process Arguments passing in Android M---------------\n if (Build.VERSION.SDK_INT == 23) {\n // Android M, fix sp + 12\n if (argTotalLength <= 12) {\n // Nothing\n } else {\n if (argTotalLength <= 16) {\n if (getTypeLength(typeOfArgs[0]) == 8) {\n // first is 8byte\n System.arraycopy(EpicNative.get(sp + 44, 4), 0, argBytes, 12, 4);\n } else {\n // 48, 444: normal.\n }\n } else {\n boolean isR3Grabbed = true;\n if (numberOfArgs >= 2) {\n int arg1TypeLength = getTypeLength(typeOfArgs[0]);\n int arg2TypeLength = getTypeLength(typeOfArgs[1]);\n if (arg1TypeLength == 4 && arg2TypeLength == 8) {\n isR3Grabbed = false;\n }\n\n if (numberOfArgs == 2 && arg1TypeLength == 8 && arg2TypeLength == 8) {\n // in this case, we have no reference register to local r3, just hard code now :(\n System.arraycopy(EpicNative.get(sp + 44, 4), 0, argBytes, 12, 4);\n isR3Grabbed = false;\n }\n }\n if (numberOfArgs >= 3) {\n int arg1TypeLength = getTypeLength(typeOfArgs[0]);\n int arg2TypeLength = getTypeLength(typeOfArgs[1]);\n int arg3TypeLength = getTypeLength(typeOfArgs[2]);\n if (arg1TypeLength == 4 && arg2TypeLength == 4 && arg3TypeLength == 4) {\n // in this case: r1 = arg1; r2 = arg2; r3 = arg3, normal.\n isR3Grabbed = false;\n }\n if (numberOfArgs == 3 && arg1TypeLength == 8 && arg2TypeLength == 4 && arg3TypeLength == 8) {\n // strange case :)\n System.arraycopy(EpicNative.get(sp + 52, 4), 0, argBytes, 12, 4);\n isR3Grabbed = false;\n }\n }\n if (isR3Grabbed) {\n byte[] otherStoreInStack = Arrays.copyOfRange(argBytes, argumentStackBegin, argBytes.length);\n int otherStoreInStackLength = otherStoreInStack.length;\n int searchRegion = 0;\n for (int i = argumentStackBegin + otherStoreInStackLength; ; i = i + 4) {\n final byte[] bytes = EpicNative.get(sp + i, otherStoreInStackLength);\n searchRegion += otherStoreInStackLength;\n if (Arrays.equals(bytes, otherStoreInStack)) {\n int originR3Index = sp + i - 4;\n final byte[] originR3 = EpicNative.get(originR3Index, 4);\n Logger.d(TAG, \"found other arguments in stack, index:\" + i + \", origin r3:\" + Arrays.toString(originR3));\n System.arraycopy(originR3, 0, argBytes, 12, 4);\n break;\n }\n if (searchRegion > (1 << 10)) {\n throw new RuntimeException(\"can not found the modify r3 register!!!\");\n }\n }\n }\n }\n }\n }\n //endregion\n\n Logger.d(TAG, \"argBytes: \" + Debug.hexdump(argBytes, 0));\n\n for (int i = 0; i < numberOfArgs; i++) {\n final Class typeOfArg = typeOfArgs[i];\n final int startPos = argStartPos[i];\n final int typeLength = getTypeLength(typeOfArg);\n byte[] argWithBytes = Arrays.copyOfRange(argBytes, startPos, startPos + typeLength);\n arguments[i] = wrapArgument(typeOfArg, self, argWithBytes);\n// Logger.d(TAG, \"argument[\" + i + \"], startPos:\" + startPos + \", typeOfLength:\" + typeLength);\n// Logger.d(TAG, \"argWithBytes:\" + Debug.hexdump(argWithBytes, 0) + \", value:\" + arguments[i]);\n }\n\n Object thiz = null;\n Object[] parameters = EMPTY_OBJECT_ARRAY;\n if (isStatic) {\n parameters = arguments;\n } else {\n thiz = arguments[0];\n int argumentLength = arguments.length;\n if (argumentLength > 1) {\n parameters = Arrays.copyOfRange(arguments, 1, argumentLength);\n }\n }\n\n return Pair.create(thiz, parameters);\n }\n\n private static Object wrapArgument(Class type, int self, byte[] value) {\n final ByteBuffer byteBuffer = ByteBuffer.wrap(value).order(ByteOrder.LITTLE_ENDIAN);\n Logger.d(TAG, \"wrapArgument: type:\" + type);\n if (type.isPrimitive()) {\n if (type == int.class) {\n return byteBuffer.getInt();\n } else if (type == long.class) {\n return byteBuffer.getLong();\n } else if (type == float.class) {\n return byteBuffer.getFloat();\n } else if (type == short.class) {\n return byteBuffer.getShort();\n } else if (type == byte.class) {\n return byteBuffer.get();\n } else if (type == char.class) {\n return byteBuffer.getChar();\n } else if (type == double.class) {\n return byteBuffer.getDouble();\n } else if (type == boolean.class) {\n return byteBuffer.getInt() != 0;\n } else {\n throw new RuntimeException(\"unknown type:\" + type);\n }\n } else {\n int address = byteBuffer.getInt();\n Object object = EpicNative.getObject(self, address);\n // Logger.i(TAG, \"wrapArgument, address: 0x\" + Long.toHexString(address) + \", value:\" + object);\n return object;\n }\n }\n\n private static Map, String> bridgeMethodMap = new HashMap<>();\n\n static {\n Class[] primitiveTypes = new Class[]{boolean.class, byte.class, char.class, short.class,\n int.class, long.class, float.class, double.class};\n for (Class primitiveType : primitiveTypes) {\n bridgeMethodMap.put(primitiveType, primitiveType.getName() + \"Bridge\");\n }\n bridgeMethodMap.put(Object.class, \"referenceBridge\");\n bridgeMethodMap.put(void.class, \"voidBridge\");\n }\n\n public static Method getBridgeMethod(Class returnType) {\n try {\n final String bridgeMethod = bridgeMethodMap.get(returnType.isPrimitive() ? returnType : Object.class);\n Logger.i(TAG, \"bridge method:\" + bridgeMethod + \", map:\" + bridgeMethodMap);\n Method method = Entry.class.getDeclaredMethod(bridgeMethod, int.class, int.class, int.class);\n method.setAccessible(true);\n return method;\n } catch (Throwable e) {\n throw new RuntimeException(\"error\", e);\n }\n }\n\n private static int getTypeLength(Class clazz) {\n if (clazz == long.class || clazz == double.class) {\n return 8; // double & long are 8 bytes.\n } else {\n return 4;\n }\n }\n}\n"
},
{
"path": "library/src/main/java/me/weishu/epic/art/entry/Entry64.java",
"content": "/*\n * Copyright (c) 2017, weishu twsxtd@gmail.com\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\npackage me.weishu.epic.art.entry;\n\nimport com.taobao.android.dexposed.utility.Logger;\n\nimport java.lang.reflect.Method;\nimport java.nio.ByteBuffer;\nimport java.nio.ByteOrder;\nimport java.util.Arrays;\nimport java.util.HashMap;\nimport java.util.Map;\n\nimport de.robv.android.xposed.DexposedBridge;\nimport de.robv.android.xposed.XposedHelpers;\nimport me.weishu.epic.art.Epic;\nimport me.weishu.epic.art.EpicNative;\n\n@SuppressWarnings({\"unused\", \"ConstantConditions\"})\npublic class Entry64 {\n\n private final static String TAG = \"Entry64\";\n\n //region ---------------callback---------------\n private static int onHookInt(Object artmethod, Object receiver, Object[] args) {\n return (Integer) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static long onHookLong(Object artmethod, Object receiver, Object[] args) {\n return (Long) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static double onHookDouble(Object artmethod, Object receiver, Object[] args) {\n return (Double) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static char onHookChar(Object artmethod, Object receiver, Object[] args) {\n return (Character) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static short onHookShort(Object artmethod, Object receiver, Object[] args) {\n return (Short) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static float onHookFloat(Object artmethod, Object receiver, Object[] args) {\n return (Float) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static Object onHookObject(Object artmethod, Object receiver, Object[] args) {\n return DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static void onHookVoid(Object artmethod, Object receiver, Object[] args) {\n DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static boolean onHookBoolean(Object artmethod, Object receiver, Object[] args) {\n return (Boolean) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static byte onHookByte(Object artmethod, Object receiver, Object[] args) {\n return (Byte) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n //endregion\n\n //region ---------------bridge---------------\n private static void voidBridge(long r1, long self, long struct, long x4, long x5, long x6, long x7) {\n referenceBridge(r1, self, struct, x4, x5, x6, x7);\n }\n\n private static boolean booleanBridge(long r1, long self, long struct, long x4, long x5, long x6, long x7) {\n return (Boolean) referenceBridge(r1, self, struct, x4, x5, x6, x7);\n }\n\n private static byte byteBridge(long r1, long self, long struct, long x4, long x5, long x6, long x7) {\n return (Byte) referenceBridge(r1, self, struct, x4, x5, x6, x7);\n }\n\n private static short shortBridge(long r1, long self, long struct, long x4, long x5, long x6, long x7) {\n return (Short) referenceBridge(r1, self, struct, x4, x5, x6, x7);\n }\n\n private static char charBridge(long r1, long self, long struct, long x4, long x5, long x6, long x7) {\n return (Character) referenceBridge(r1, self, struct, x4, x5, x6, x7);\n }\n\n private static int intBridge(long r1, long self, long struct, long x4, long x5, long x6, long x7) {\n return (Integer) referenceBridge(r1, self, struct, x4, x5, x6, x7);\n }\n\n private static long longBridge(long r1, long self, long struct, long x4, long x5, long x6, long x7) {\n return (Long) referenceBridge(r1, self, struct, x4, x5, x6, x7);\n }\n\n private static float floatBridge(long r1, long self, long struct, long x4, long x5, long x6, long x7) {\n return (Float) referenceBridge(r1, self, struct, x4, x5, x6, x7);\n }\n\n private static double doubleBridge(long r1, long self, long struct, long x4, long x5, long x6, long x7) {\n return (Double) referenceBridge(r1, self, struct, x4, x5, x6, x7);\n }\n //endregion\n\n private static Object referenceBridge(long x1, long self, long struct, long x4, long x5, long x6, long x7) {\n Logger.i(TAG, \"enter bridge function.\");\n\n // struct {\n // void* sp;\n // void* r2;\n // void* r3;\n // void* sourceMethod\n // }\n // sp + 16 = r4\n\n Logger.d(TAG, \"self:\" + Long.toHexString(self));\n final long nativePeer = XposedHelpers.getLongField(Thread.currentThread(), \"nativePeer\");\n Logger.d(TAG, \"java thread native peer:\" + Long.toHexString(nativePeer));\n\n Logger.d(TAG, \"struct:\" + Long.toHexString(struct));\n\n final long sp = ByteBuffer.wrap(EpicNative.get(struct, 8)).order(ByteOrder.LITTLE_ENDIAN).getLong();\n\n Logger.d(TAG, \"stack:\" + sp);\n\n final byte[] rr1 = ByteBuffer.allocate(8).order(ByteOrder.LITTLE_ENDIAN).putLong(x1).array();\n final byte[] r2 = EpicNative.get(struct + 8, 8);\n\n final byte[] r3 = EpicNative.get(struct + 16, 8);\n\n final long sourceMethod = ByteBuffer.wrap(EpicNative.get(struct + 24, 8)).order(ByteOrder.LITTLE_ENDIAN).getLong();\n Logger.d(TAG, \"sourceMethod:\" + Long.toHexString(sourceMethod));\n\n Epic.MethodInfo originMethodInfo = Epic.getMethodInfo(sourceMethod);\n Logger.d(TAG, \"originMethodInfo :\" + originMethodInfo);\n\n boolean isStatic = originMethodInfo.isStatic;\n\n int numberOfArgs = originMethodInfo.paramNumber;\n Class[] typeOfArgs = originMethodInfo.paramTypes;\n Object[] arguments = new Object[numberOfArgs];\n\n Object receiver;\n\n self = nativePeer;\n\n if (isStatic) {\n receiver = null;\n do {\n if (numberOfArgs == 0) break;\n arguments[0] = wrapArgument(typeOfArgs[0], self, rr1);\n if (numberOfArgs == 1) break;\n arguments[1] = wrapArgument(typeOfArgs[1], self, r2);\n if (numberOfArgs == 2) break;\n arguments[2] = wrapArgument(typeOfArgs[2], self, r3);\n if (numberOfArgs == 3) break;\n arguments[3] = wrapArgument(typeOfArgs[3], self, x4);\n if (numberOfArgs == 4) break;\n arguments[4] = wrapArgument(typeOfArgs[4], self, x5);\n if (numberOfArgs == 5) break;\n arguments[5] = wrapArgument(typeOfArgs[5], self, x6);\n if (numberOfArgs == 6) break;\n arguments[6] = wrapArgument(typeOfArgs[6], self, x7);\n if (numberOfArgs == 7) break;\n\n for (int i = 7; i < numberOfArgs; i++) {\n byte[] argsInStack = EpicNative.get(sp + i * 8 + 8, 8);\n arguments[i] = wrapArgument(typeOfArgs[i], self, argsInStack);\n }\n } while (false);\n\n } else {\n\n receiver = EpicNative.getObject(self, x1);\n //Logger.i(TAG, \"this :\" + receiver);\n\n do {\n if (numberOfArgs == 0) break;\n arguments[0] = wrapArgument(typeOfArgs[0], self, r2);\n if (numberOfArgs == 1) break;\n arguments[1] = wrapArgument(typeOfArgs[1], self, r3);\n if (numberOfArgs == 2) break;\n arguments[2] = wrapArgument(typeOfArgs[2], self, x4);\n if (numberOfArgs == 3) break;\n arguments[3] = wrapArgument(typeOfArgs[3], self, x5);\n if (numberOfArgs == 4) break;\n arguments[4] = wrapArgument(typeOfArgs[4], self, x6);\n if (numberOfArgs == 5) break;\n arguments[5] = wrapArgument(typeOfArgs[5], self, x7);\n if (numberOfArgs == 6) break;\n\n for (int i = 6; i < numberOfArgs; i++) {\n byte[] argsInStack = EpicNative.get(sp + i * 8 + 16, 8);\n arguments[i] = wrapArgument(typeOfArgs[i], self, argsInStack);\n }\n } while (false);\n }\n\n Logger.i(TAG, \"arguments:\" + Arrays.toString(arguments));\n\n Class returnType = originMethodInfo.returnType;\n Object artMethod = originMethodInfo.method;\n\n Logger.d(TAG, \"leave bridge function\");\n\n if (returnType == void.class) {\n onHookVoid(artMethod, receiver, arguments);\n return 0;\n } else if (returnType == char.class) {\n return onHookChar(artMethod, receiver, arguments);\n } else if (returnType == byte.class) {\n return onHookByte(artMethod, receiver, arguments);\n } else if (returnType == short.class) {\n return onHookShort(artMethod, receiver, arguments);\n } else if (returnType == int.class) {\n return onHookInt(artMethod, receiver, arguments);\n } else if (returnType == long.class) {\n return onHookLong(artMethod, receiver, arguments);\n } else if (returnType == float.class) {\n return onHookFloat(artMethod, receiver, arguments);\n } else if (returnType == double.class) {\n return onHookDouble(artMethod, receiver, arguments);\n } else if (returnType == boolean.class) {\n return onHookBoolean(artMethod, receiver, arguments);\n } else {\n return onHookObject(artMethod, receiver, arguments);\n }\n }\n\n private static Object wrapArgument(Class type, long self, long value) {\n return wrapArgument(type, self, ByteBuffer.allocate(8).order(ByteOrder.LITTLE_ENDIAN).putLong(value).array());\n }\n\n private static Object wrapArgument(Class type, long self, byte[] value) {\n final ByteBuffer byteBuffer = ByteBuffer.wrap(value).order(ByteOrder.LITTLE_ENDIAN);\n if (type.isPrimitive()) {\n if (type == int.class) {\n return byteBuffer.getInt();\n } else if (type == long.class) {\n return byteBuffer.getLong();\n } else if (type == float.class) {\n return byteBuffer.getFloat();\n } else if (type == short.class) {\n return byteBuffer.getShort();\n } else if (type == byte.class) {\n return byteBuffer.get();\n } else if (type == char.class) {\n return byteBuffer.getChar();\n } else if (type == double.class) {\n return byteBuffer.getDouble();\n } else if (type == boolean.class) {\n return byteBuffer.getInt() == 0;\n } else {\n throw new RuntimeException(\"unknown type:\" + type);\n }\n } else {\n long address = byteBuffer.getLong();\n Object object = EpicNative.getObject(self, address);\n //Logger.i(TAG, \"wrapArgument, address: 0x\" + Long.toHexString(address) + \", value:\" + object);\n return object;\n }\n }\n\n private static Map, String> bridgeMethodMap = new HashMap<>();\n static {\n Class[] primitiveTypes = new Class[]{boolean.class, byte.class, char.class, short.class,\n int.class, long.class, float.class, double.class};\n for (Class primitiveType : primitiveTypes) {\n bridgeMethodMap.put(primitiveType, primitiveType.getName() + \"Bridge\");\n }\n bridgeMethodMap.put(void.class, \"voidBridge\");\n bridgeMethodMap.put(Object.class, \"referenceBridge\");\n }\n\n public static Method getBridgeMethod(Class returnType) {\n try {\n final String bridgeMethod = bridgeMethodMap.get(returnType.isPrimitive() ? returnType : Object.class);\n Logger.d(TAG, \"bridge method:\" + bridgeMethod + \", map:\" + bridgeMethodMap);\n Method method = Entry64.class.getDeclaredMethod(bridgeMethod, long.class, long.class,\n long.class, long.class, long.class, long.class, long.class);\n method.setAccessible(true);\n return method;\n } catch (Throwable e) {\n throw new RuntimeException(\"error\", e);\n }\n }\n}\n"
},
{
"path": "library/src/main/java/me/weishu/epic/art/entry/Entry64_2.java",
"content": "/*\n * Copyright (c) 2017, weishu twsxtd@gmail.com\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\npackage me.weishu.epic.art.entry;\n\nimport com.taobao.android.dexposed.utility.Debug;\nimport com.taobao.android.dexposed.utility.Logger;\n\nimport java.lang.reflect.Method;\nimport java.nio.ByteBuffer;\nimport java.nio.ByteOrder;\nimport java.util.Arrays;\nimport java.util.HashMap;\nimport java.util.Map;\n\nimport de.robv.android.xposed.DexposedBridge;\nimport de.robv.android.xposed.XposedHelpers;\nimport me.weishu.epic.art.Epic;\nimport me.weishu.epic.art.EpicNative;\n\n@SuppressWarnings({\"unused\", \"ConstantConditions\"})\npublic class Entry64_2 {\n\n private final static String TAG = \"Entry64\";\n\n //region ---------------callback---------------\n private static int onHookInt(Object artmethod, Object receiver, Object[] args) {\n return (Integer) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static long onHookLong(Object artmethod, Object receiver, Object[] args) {\n return (Long) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static double onHookDouble(Object artmethod, Object receiver, Object[] args) {\n return (Double) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static char onHookChar(Object artmethod, Object receiver, Object[] args) {\n return (Character) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static short onHookShort(Object artmethod, Object receiver, Object[] args) {\n return (Short) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static float onHookFloat(Object artmethod, Object receiver, Object[] args) {\n return (Float) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static Object onHookObject(Object artmethod, Object receiver, Object[] args) {\n return DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static void onHookVoid(Object artmethod, Object receiver, Object[] args) {\n DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static boolean onHookBoolean(Object artmethod, Object receiver, Object[] args) {\n return (Boolean) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n\n private static byte onHookByte(Object artmethod, Object receiver, Object[] args) {\n return (Byte) DexposedBridge.handleHookedArtMethod(artmethod, receiver, args);\n }\n //endregion\n\n //region ---------------voidBridge---------------\n private static void voidBridge(long x1, long struct) {\n referenceBridge(x1, struct, 0, 0, 0, 0, 0);\n }\n\n private static void voidBridge(long x1, long struct, long x3) {\n referenceBridge(x1, struct, x3, 0, 0, 0, 0);\n }\n\n private static void voidBridge(long x1, long struct, long x3, long x4) {\n referenceBridge(x1, struct, x3, x4, 0, 0, 0);\n }\n\n private static void voidBridge(long r1, long struct, long x3, long x4, long x5) {\n referenceBridge(r1, struct, x3, x4, x5, 0, 0);\n }\n\n private static void voidBridge(long r1, long struct, long x3, long x4, long x5, long x6) {\n referenceBridge(r1, struct, x3, x4, x5, x6, 0);\n }\n\n private static void voidBridge(long r1, long struct, long x3, long x4, long x5, long x6, long x7) {\n referenceBridge(r1, struct, x3, x4, x5, x6, x7);\n }\n //endregion\n\n //region ---------------booleanBridge---------------\n private static boolean booleanBridge(long x1, long struct) {\n return (Boolean) referenceBridge(x1, struct, 0, 0, 0, 0, 0);\n }\n\n private static boolean booleanBridge(long x1, long struct, long x3) {\n return (Boolean) referenceBridge(x1, struct, x3, 0, 0, 0, 0);\n }\n\n private static boolean booleanBridge(long x1, long struct, long x3, long x4) {\n return (Boolean) referenceBridge(x1, struct, x3, x4, 0, 0, 0);\n }\n\n private static boolean booleanBridge(long r1, long struct, long x3, long x4, long x5) {\n return (Boolean) referenceBridge(r1, struct, x3, x4, x5, 0, 0);\n }\n\n private static boolean booleanBridge(long r1, long struct, long x3, long x4, long x5, long x6) {\n return (Boolean) referenceBridge(r1, struct, x3, x4, x5, x6, 0);\n }\n\n private static boolean booleanBridge(long r1, long struct, long x3, long x4, long x5, long x6, long x7) {\n return (Boolean) referenceBridge(r1, struct, x3, x4, x5, x6, x7);\n }\n //endregion\n\n //region ---------------byteBridge---------------\n private static byte byteBridge(long x1, long struct) {\n return (Byte) referenceBridge(x1, struct, 0, 0, 0, 0, 0);\n }\n\n private static byte byteBridge(long x1, long struct, long x3) {\n return (Byte) referenceBridge(x1, struct, x3, 0, 0, 0, 0);\n }\n\n private static byte byteBridge(long x1, long struct, long x3, long x4) {\n return (Byte) referenceBridge(x1, struct, x3, x4, 0, 0, 0);\n }\n\n private static byte byteBridge(long r1, long struct, long x3, long x4, long x5) {\n return (Byte) referenceBridge(r1, struct, x3, x4, x5, 0, 0);\n }\n\n private static byte byteBridge(long r1, long struct, long x3, long x4, long x5, long x6) {\n return (Byte) referenceBridge(r1, struct, x3, x4, x5, x6, 0);\n }\n\n private static byte byteBridge(long r1, long struct, long x3, long x4, long x5, long x6, long x7) {\n return (Byte) referenceBridge(r1, struct, x3, x4, x5, x6, x7);\n }\n //endregion\n\n //region ---------------shortBridge---------------\n private static short shortBridge(long x1, long struct) {\n return (Short) referenceBridge(x1, struct, 0, 0, 0, 0, 0);\n }\n\n private static short shortBridge(long x1, long struct, long x3) {\n return (Short) referenceBridge(x1, struct, x3, 0, 0, 0, 0);\n }\n\n private static short shortBridge(long x1, long struct, long x3, long x4) {\n return (Short) referenceBridge(x1, struct, x3, x4, 0, 0, 0);\n }\n\n private static short shortBridge(long r1, long struct, long x3, long x4, long x5) {\n return (Short) referenceBridge(r1, struct, x3, x4, x5, 0, 0);\n }\n\n private static short shortBridge(long r1, long struct, long x3, long x4, long x5, long x6) {\n return (Short) referenceBridge(r1, struct, x3, x4, x5, x6, 0);\n }\n\n private static short shortBridge(long r1, long struct, long x3, long x4, long x5, long x6, long x7) {\n return (Short) referenceBridge(r1, struct, x3, x4, x5, x6, x7);\n }\n //endregion\n\n //region ---------------charBridge---------------\n private static char charBridge(long x1, long struct) {\n return (Character) referenceBridge(x1, struct, 0, 0, 0, 0, 0);\n }\n\n private static char charBridge(long x1, long struct, long x3) {\n return (Character) referenceBridge(x1, struct, x3, 0, 0, 0, 0);\n }\n\n private static char charBridge(long x1, long struct, long x3, long x4) {\n return (Character) referenceBridge(x1, struct, x3, x4, 0, 0, 0);\n }\n\n private static char charBridge(long r1, long struct, long x3, long x4, long x5) {\n return (Character) referenceBridge(r1, struct, x3, x4, x5, 0, 0);\n }\n\n private static char charBridge(long r1, long struct, long x3, long x4, long x5, long x6) {\n return (Character) referenceBridge(r1, struct, x3, x4, x5, x6, 0);\n }\n\n private static char charBridge(long r1, long struct, long x3, long x4, long x5, long x6, long x7) {\n return (Character) referenceBridge(r1, struct, x3, x4, x5, x6, x7);\n }\n //endregion\n\n //region ---------------intBridge---------------\n private static int intBridge(long x1, long struct) {\n return (Integer) referenceBridge(x1, struct, 0, 0, 0, 0, 0);\n }\n\n private static int intBridge(long x1, long struct, long x3) {\n return (Integer) referenceBridge(x1, struct, x3, 0, 0, 0, 0);\n }\n\n private static int intBridge(long x1, long struct, long x3, long x4) {\n return (Integer) referenceBridge(x1, struct, x3, x4, 0, 0, 0);\n }\n\n private static int intBridge(long r1, long struct, long x3, long x4, long x5) {\n return (Integer) referenceBridge(r1, struct, x3, x4, x5, 0, 0);\n }\n\n private static int intBridge(long r1, long struct, long x3, long x4, long x5, long x6) {\n return (Integer) referenceBridge(r1, struct, x3, x4, x5, x6, 0);\n }\n\n private static int intBridge(long r1, long struct, long x3, long x4, long x5, long x6, long x7) {\n return (Integer) referenceBridge(r1, struct, x3, x4, x5, x6, x7);\n }\n //endregion\n\n //region ---------------longBridge---------------\n private static long longBridge(long x1, long struct) {\n return (Long) referenceBridge(x1, struct, 0, 0, 0, 0, 0);\n }\n\n private static long longBridge(long x1, long struct, long x3) {\n return (Long) referenceBridge(x1, struct, x3, 0, 0, 0, 0);\n }\n\n private static long longBridge(long x1, long struct, long x3, long x4) {\n return (Long) referenceBridge(x1, struct, x3, x4, 0, 0, 0);\n }\n\n private static long longBridge(long r1, long struct, long x3, long x4, long x5) {\n return (Long) referenceBridge(r1, struct, x3, x4, x5, 0, 0);\n }\n\n private static long longBridge(long r1, long struct, long x3, long x4, long x5, long x6) {\n return (Long) referenceBridge(r1, struct, x3, x4, x5, x6, 0);\n }\n\n private static long longBridge(long r1, long struct, long x3, long x4, long x5, long x6, long x7) {\n return (Long) referenceBridge(r1, struct, x3, x4, x5, x6, x7);\n }\n //endregion\n\n //region ---------------floatBridge---------------\n private static float floatBridge(long x1, long struct) {\n return (Float) referenceBridge(x1, struct, 0, 0, 0, 0, 0);\n }\n\n private static float floatBridge(long x1, long struct, long x3) {\n return (Float) referenceBridge(x1, struct, x3, 0, 0, 0, 0);\n }\n\n private static float floatBridge(long x1, long struct, long x3, long x4) {\n return (Float) referenceBridge(x1, struct, x3, x4, 0, 0, 0);\n }\n\n private static float floatBridge(long r1, long struct, long x3, long x4, long x5) {\n return (Float) referenceBridge(r1, struct, x3, x4, x5, 0, 0);\n }\n\n private static float floatBridge(long r1, long struct, long x3, long x4, long x5, long x6) {\n return (Float) referenceBridge(r1, struct, x3, x4, x5, x6, 0);\n }\n\n private static float floatBridge(long r1, long struct, long x3, long x4, long x5, long x6, long x7) {\n return (Float) referenceBridge(r1, struct, x3, x4, x5, x6, x7);\n }\n //endregion\n\n //region ---------------doubleBridge---------------\n private static double doubleBridge(long x1, long struct) {\n return (Double) referenceBridge(x1, struct, 0, 0, 0, 0, 0);\n }\n\n private static double doubleBridge(long x1, long struct, long x3) {\n return (Double) referenceBridge(x1, struct, x3, 0, 0, 0, 0);\n }\n\n private static double doubleBridge(long x1, long struct, long x3, long x4) {\n return (Double) referenceBridge(x1, struct, x3, x4, 0, 0, 0);\n }\n\n private static double doubleBridge(long r1, long struct, long x3, long x4, long x5) {\n return (Double) referenceBridge(r1, struct, x3, x4, x5, 0, 0);\n }\n\n private static double doubleBridge(long r1, long struct, long x3, long x4, long x5, long x6) {\n return (Double) referenceBridge(r1, struct, x3, x4, x5, x6, 0);\n }\n\n private static double doubleBridge(long r1, long struct, long x3, long x4, long x5, long x6, long x7) {\n return (Double) referenceBridge(r1, struct, x3, x4, x5, x6, x7);\n }\n //endregion\n\n //region ---------------referenceBridge---------------\n private static Object referenceBridge(long x1, long struct) {\n return referenceBridge(x1, struct, 0, 0, 0, 0, 0);\n }\n\n private static Object referenceBridge(long x1, long struct, long x3) {\n return referenceBridge(x1, struct, x3, 0, 0, 0, 0);\n }\n\n private static Object referenceBridge(long x1, long struct, long x3, long x4) {\n return referenceBridge(x1, struct, x3, x4, 0, 0, 0);\n }\n\n private static Object referenceBridge(long r1, long struct, long x3, long x4, long x5) {\n return referenceBridge(r1, struct, x3, x4, x5, 0, 0);\n }\n\n private static Object referenceBridge(long r1, long struct, long x3, long x4, long x5, long x6) {\n return referenceBridge(r1, struct, x3, x4, x5, x6, 0);\n }\n //endregion\n\n private static Object referenceBridge(long x1, long struct, long x3, long x4, long x5, long x6, long x7) {\n Logger.i(TAG, \"enter bridge function.\");\n\n // struct {\n // void* sp;\n // void* x2;\n // void* sourceMethod\n // }\n\n final long self = XposedHelpers.getLongField(Thread.currentThread(), \"nativePeer\");\n Logger.d(TAG, \"java thread native peer:\" + Long.toHexString(self));\n\n Logger.d(TAG, \"struct:\" + Long.toHexString(struct));\n Logger.d(TAG, \"struct:\" + Debug.hexdump(EpicNative.get(struct, 24), struct));\n\n final long sp = ByteBuffer.wrap(EpicNative.get(struct, 8)).order(ByteOrder.LITTLE_ENDIAN).getLong();\n\n Logger.d(TAG, \"stack:\" + sp);\n\n final byte[] rr1 = ByteBuffer.allocate(8).order(ByteOrder.LITTLE_ENDIAN).putLong(x1).array();\n final byte[] r2 = EpicNative.get(struct + 8, 8);\n\n final long sourceMethod = ByteBuffer.wrap(EpicNative.get(struct + 16, 8)).order(ByteOrder.LITTLE_ENDIAN).getLong();\n Logger.d(TAG, \"sourceMethod:\" + Long.toHexString(sourceMethod));\n\n Epic.MethodInfo originMethodInfo = Epic.getMethodInfo(sourceMethod);\n Logger.d(TAG, \"originMethodInfo :\" + originMethodInfo);\n\n boolean isStatic = originMethodInfo.isStatic;\n\n int numberOfArgs = originMethodInfo.paramNumber;\n Class[] typeOfArgs = originMethodInfo.paramTypes;\n Object[] arguments = new Object[numberOfArgs];\n\n Object receiver;\n\n if (isStatic) {\n receiver = null;\n do {\n if (numberOfArgs == 0) break;\n arguments[0] = wrapArgument(typeOfArgs[0], self, rr1);\n if (numberOfArgs == 1) break;\n arguments[1] = wrapArgument(typeOfArgs[1], self, r2);\n if (numberOfArgs == 2) break;\n arguments[2] = wrapArgument(typeOfArgs[2], self, x3);\n if (numberOfArgs == 3) break;\n arguments[3] = wrapArgument(typeOfArgs[3], self, x4);\n if (numberOfArgs == 4) break;\n arguments[4] = wrapArgument(typeOfArgs[4], self, x5);\n if (numberOfArgs == 5) break;\n arguments[5] = wrapArgument(typeOfArgs[5], self, x6);\n if (numberOfArgs == 6) break;\n arguments[6] = wrapArgument(typeOfArgs[6], self, x7);\n if (numberOfArgs == 7) break;\n\n for (int i = 7; i < numberOfArgs; i++) {\n byte[] argsInStack = EpicNative.get(sp + i * 8 + 8, 8);\n arguments[i] = wrapArgument(typeOfArgs[i], self, argsInStack);\n }\n } while (false);\n\n } else {\n\n receiver = EpicNative.getObject(self, x1);\n Logger.i(TAG, \"this :\" + receiver);\n\n do {\n if (numberOfArgs == 0) break;\n arguments[0] = wrapArgument(typeOfArgs[0], self, r2);\n if (numberOfArgs == 1) break;\n arguments[1] = wrapArgument(typeOfArgs[1], self, x3);\n if (numberOfArgs == 2) break;\n arguments[2] = wrapArgument(typeOfArgs[2], self, x4);\n if (numberOfArgs == 3) break;\n arguments[3] = wrapArgument(typeOfArgs[3], self, x5);\n if (numberOfArgs == 4) break;\n arguments[4] = wrapArgument(typeOfArgs[4], self, x6);\n if (numberOfArgs == 5) break;\n arguments[5] = wrapArgument(typeOfArgs[5], self, x7);\n if (numberOfArgs == 6) break;\n\n for (int i = 6; i < numberOfArgs; i++) {\n byte[] argsInStack = EpicNative.get(sp + i * 8 + 16, 8);\n arguments[i] = wrapArgument(typeOfArgs[i], self, argsInStack);\n }\n } while (false);\n }\n\n Logger.i(TAG, \"arguments:\" + Arrays.toString(arguments));\n\n Class returnType = originMethodInfo.returnType;\n Object artMethod = originMethodInfo.method;\n\n Logger.d(TAG, \"leave bridge function\");\n\n if (returnType == void.class) {\n onHookVoid(artMethod, receiver, arguments);\n return 0;\n } else if (returnType == char.class) {\n return onHookChar(artMethod, receiver, arguments);\n } else if (returnType == byte.class) {\n return onHookByte(artMethod, receiver, arguments);\n } else if (returnType == short.class) {\n return onHookShort(artMethod, receiver, arguments);\n } else if (returnType == int.class) {\n return onHookInt(artMethod, receiver, arguments);\n } else if (returnType == long.class) {\n return onHookLong(artMethod, receiver, arguments);\n } else if (returnType == float.class) {\n return onHookFloat(artMethod, receiver, arguments);\n } else if (returnType == double.class) {\n return onHookDouble(artMethod, receiver, arguments);\n } else if (returnType == boolean.class) {\n return onHookBoolean(artMethod, receiver, arguments);\n } else {\n return onHookObject(artMethod, receiver, arguments);\n }\n }\n\n private static Object wrapArgument(Class type, long self, long value) {\n return wrapArgument(type, self, ByteBuffer.allocate(8).order(ByteOrder.LITTLE_ENDIAN).putLong(value).array());\n }\n\n private static Object wrapArgument(Class type, long self, byte[] value) {\n final ByteBuffer byteBuffer = ByteBuffer.wrap(value).order(ByteOrder.LITTLE_ENDIAN);\n if (type.isPrimitive()) {\n if (type == int.class) {\n return byteBuffer.getInt();\n } else if (type == long.class) {\n return byteBuffer.getLong();\n } else if (type == float.class) {\n return byteBuffer.getFloat();\n } else if (type == short.class) {\n return byteBuffer.getShort();\n } else if (type == byte.class) {\n return byteBuffer.get();\n } else if (type == char.class) {\n return byteBuffer.getChar();\n } else if (type == double.class) {\n return byteBuffer.getDouble();\n } else if (type == boolean.class) {\n return byteBuffer.getInt() == 0;\n } else {\n throw new RuntimeException(\"unknown type:\" + type);\n }\n } else {\n long address = byteBuffer.getLong();\n Object object = EpicNative.getObject(self, address);\n // Logger.d(TAG, \"wrapArgument, address: 0x\" + Long.toHexString(address) + \", value:\" + object);\n return object;\n }\n }\n\n private static Map, String> bridgeMethodMap = new HashMap<>();\n static {\n Class[] primitiveTypes = new Class[]{boolean.class, byte.class, char.class, short.class,\n int.class, long.class, float.class, double.class};\n for (Class primitiveType : primitiveTypes) {\n bridgeMethodMap.put(primitiveType, primitiveType.getName() + \"Bridge\");\n }\n bridgeMethodMap.put(void.class, \"voidBridge\");\n bridgeMethodMap.put(Object.class, \"referenceBridge\");\n }\n\n public static Method getBridgeMethod(Epic.MethodInfo methodInfo) {\n try {\n Class returnType = methodInfo.returnType;\n int paramNumber = methodInfo.isStatic ? methodInfo.paramNumber : methodInfo.paramNumber + 1;\n Class[] bridgeParamTypes;\n if (paramNumber <= 2) {\n paramNumber = 2;\n }\n bridgeParamTypes = new Class[paramNumber];\n for (int i = 0; i < paramNumber; i++) {\n bridgeParamTypes[i] = long.class;\n }\n\n final String bridgeMethod = bridgeMethodMap.get(returnType.isPrimitive() ? returnType : Object.class);\n Logger.d(TAG, \"bridge method:\" + bridgeMethod + \", map:\" + bridgeMethodMap);\n Method method = Entry64_2.class.getDeclaredMethod(bridgeMethod, bridgeParamTypes);\n method.setAccessible(true);\n return method;\n } catch (Throwable e) {\n throw new RuntimeException(\"can not found bridge.\" , e);\n }\n }\n}"
},
{
"path": "library/src/main/java/me/weishu/epic/art/method/ArtMethod.java",
"content": "/*\n * Copyright (c) 2017, weishu twsxtd@gmail.com\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\npackage me.weishu.epic.art.method;\n\nimport android.os.Build;\nimport android.util.Log;\n\nimport com.taobao.android.dexposed.utility.Debug;\nimport com.taobao.android.dexposed.utility.Logger;\nimport com.taobao.android.dexposed.utility.NeverCalled;\n\nimport java.lang.reflect.AccessibleObject;\nimport java.lang.reflect.Constructor;\nimport java.lang.reflect.Field;\nimport java.lang.reflect.InvocationTargetException;\nimport java.lang.reflect.Method;\nimport java.lang.reflect.Modifier;\nimport java.nio.ByteBuffer;\nimport java.util.Arrays;\n\nimport de.robv.android.xposed.XposedHelpers;\nimport me.weishu.epic.art.EpicNative;\n\n/**\n * Object stands for a Java Method, may be a constructor or a method.\n */\npublic class ArtMethod {\n\n private static final String TAG = \"ArtMethod\";\n\n /**\n * The address of the Art method. this is not the real memory address of the java.lang.reflect.Method\n * But the address used by VM which stand for the Java method.\n * generally, it was the address of art::mirror::ArtMethod. @{link #objectAddress}\n */\n private long address;\n\n /**\n * the origin object if this is a constructor\n */\n private Constructor constructor;\n\n /**\n * the origin object if this is a method;\n */\n private Method method;\n\n /**\n * the origin ArtMethod if this method is a backup of someone, null when this is not backup\n */\n private ArtMethod origin;\n\n /**\n * The size of ArtMethod, usually the java part of ArtMethod may not stand for the whole one\n * may be some native field is placed in the end of header.\n */\n private static int artMethodSize = -1;\n\n private ArtMethod(Constructor constructor) {\n if (constructor == null) {\n throw new IllegalArgumentException(\"constructor can not be null\");\n }\n this.constructor = constructor;\n init();\n }\n\n private ArtMethod(Method method, long address) {\n if (method == null) {\n throw new IllegalArgumentException(\"method can not be null\");\n }\n this.method = method;\n if (address != -1) {\n this.address = address;\n } else {\n init();\n }\n }\n\n private void init() {\n if (constructor != null) {\n address = EpicNative.getMethodAddress(constructor);\n } else {\n address = EpicNative.getMethodAddress(method);\n }\n }\n\n public static ArtMethod of(Method method) {\n return new ArtMethod(method, -1);\n }\n\n public static ArtMethod of(Method method, long address) {\n return new ArtMethod(method, address);\n }\n\n public static ArtMethod of(Constructor constructor) {\n return new ArtMethod(constructor);\n }\n\n\n public ArtMethod backup() {\n try {\n // Before Oreo, it is: java.lang.reflect.AbstractMethod\n // After Oreo, it is: java.lang.reflect.Executable\n Class abstractMethodClass = Method.class.getSuperclass();\n\n Object executable = this.getExecutable();\n ArtMethod artMethod;\n if (Build.VERSION.SDK_INT < 23) {\n Class artMethodClass = Class.forName(\"java.lang.reflect.ArtMethod\");\n //Get the original artMethod field\n Field artMethodField = abstractMethodClass.getDeclaredField(\"artMethod\");\n if (!artMethodField.isAccessible()) {\n artMethodField.setAccessible(true);\n }\n Object srcArtMethod = artMethodField.get(executable);\n\n Constructor constructor = artMethodClass.getDeclaredConstructor();\n constructor.setAccessible(true);\n Object destArtMethod = constructor.newInstance();\n\n //Fill the fields to the new method we created\n for (Field field : artMethodClass.getDeclaredFields()) {\n if (!field.isAccessible()) {\n field.setAccessible(true);\n }\n field.set(destArtMethod, field.get(srcArtMethod));\n }\n Method newMethod = Method.class.getConstructor(artMethodClass).newInstance(destArtMethod);\n newMethod.setAccessible(true);\n artMethod = ArtMethod.of(newMethod);\n\n artMethod.setEntryPointFromQuickCompiledCode(getEntryPointFromQuickCompiledCode());\n artMethod.setEntryPointFromJni(getEntryPointFromJni());\n } else {\n Constructor constructor = Method.class.getDeclaredConstructor();\n // we can't use constructor.setAccessible(true); because Google does not like it\n // AccessibleObject.setAccessible(new AccessibleObject[]{constructor}, true);\n Field override = AccessibleObject.class.getDeclaredField(\n Build.VERSION.SDK_INT == Build.VERSION_CODES.M ? \"flag\" : \"override\");\n override.setAccessible(true);\n override.set(constructor, true);\n\n Method m = constructor.newInstance();\n m.setAccessible(true);\n for (Field field : abstractMethodClass.getDeclaredFields()) {\n field.setAccessible(true);\n field.set(m, field.get(executable));\n }\n Field artMethodField = abstractMethodClass.getDeclaredField(\"artMethod\");\n artMethodField.setAccessible(true);\n int artMethodSize = getArtMethodSize();\n long memoryAddress = EpicNative.map(artMethodSize);\n\n byte[] data = EpicNative.get(address, artMethodSize);\n EpicNative.put(data, memoryAddress);\n artMethodField.set(m, memoryAddress);\n // From Android R, getting method address may involve the jni_id_manager which uses\n // ids mapping instead of directly returning the method address. During resolving the\n // id->address mapping, it will assume the art method to be from the \"methods_\" array\n // in class. However this address may be out of the range of the methods array. Thus\n // it will cause a crash during using the method offset to resolve method array.\n artMethod = ArtMethod.of(m, memoryAddress);\n }\n artMethod.makePrivate();\n artMethod.setAccessible(true);\n artMethod.origin = this; // save origin method.\n return artMethod;\n\n\n } catch (Throwable e) {\n Log.e(TAG, \"backup method error:\", e);\n throw new IllegalStateException(\"Cannot create backup method from :: \" + getExecutable(), e);\n }\n }\n\n /**\n * @return is method/constructor accessible\n */\n public boolean isAccessible() {\n if (constructor != null) {\n return constructor.isAccessible();\n } else {\n return method.isAccessible();\n }\n }\n\n /**\n * make the constructor or method accessible\n * @param accessible accessible\n */\n public void setAccessible(boolean accessible) {\n if (constructor != null) {\n constructor.setAccessible(accessible);\n } else {\n method.setAccessible(accessible);\n }\n }\n\n /**\n * get the origin method's name\n * @return constructor name of method name\n */\n public String getName() {\n if (constructor != null) {\n return constructor.getName();\n } else {\n return method.getName();\n }\n }\n\n public Class getDeclaringClass() {\n if (constructor != null) {\n return constructor.getDeclaringClass();\n } else {\n return method.getDeclaringClass();\n }\n }\n\n /**\n * Force compile the method to avoid interpreter mode.\n * This is only used above Android N\n * @return if compile success return true, otherwise false.\n */\n public boolean compile() {\n if (constructor != null) {\n return EpicNative.compileMethod(constructor);\n } else {\n return EpicNative.compileMethod(method);\n }\n }\n\n /**\n * invoke the origin method\n * @param receiver the receiver\n * @param args origin method/constructor's parameters\n * @return origin method's return value.\n * @throws IllegalAccessException throw if no access, impossible.\n * @throws InvocationTargetException invoke target error.\n * @throws InstantiationException throw when the constructor can not create instance.\n */\n public Object invoke(Object receiver, Object... args) throws IllegalAccessException, InvocationTargetException, InstantiationException {\n\n if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.N) {\n if (origin != null) {\n byte[] currentAddress = EpicNative.get(origin.address, 4);\n byte[] backupAddress = EpicNative.get(address, 4);\n if (!Arrays.equals(currentAddress, backupAddress)) {\n if (Debug.DEBUG) {\n Logger.i(TAG, \"the address of java method was moved by gc, backup it now! origin address: 0x\"\n + Arrays.toString(currentAddress) + \" , currentAddress: 0x\" + Arrays.toString(backupAddress));\n }\n EpicNative.put(currentAddress, address);\n return invokeInternal(receiver, args);\n } else {\n Logger.i(TAG, \"the address is same with last invoke, not moved by gc\");\n }\n }\n }\n\n return invokeInternal(receiver, args);\n }\n\n private Object invokeInternal(Object receiver, Object... args) throws IllegalAccessException, InvocationTargetException, InstantiationException {\n if (constructor != null) {\n return constructor.newInstance(args);\n } else {\n return method.invoke(receiver, args);\n }\n }\n\n /**\n * get the modifiers of origin method/constructor\n * @return the modifiers\n */\n public int getModifiers() {\n if (constructor != null) {\n return constructor.getModifiers();\n } else {\n return method.getModifiers();\n }\n }\n\n /**\n * get the parameter type of origin method/constructor\n * @return the parameter types.\n */\n public Class[] getParameterTypes() {\n if (constructor != null) {\n return constructor.getParameterTypes();\n } else {\n return method.getParameterTypes();\n }\n }\n\n /**\n * get the return type of origin method/constructor\n * @return the return type, if it is a constructor, return Object.class\n */\n public Class getReturnType() {\n if (constructor != null) {\n return Object.class;\n } else {\n return method.getReturnType();\n }\n }\n\n /**\n * get the exception declared by the method/constructor\n * @return the array of declared exception.\n */\n public Class[] getExceptionTypes() {\n if (constructor != null) {\n return constructor.getExceptionTypes();\n } else {\n return method.getExceptionTypes();\n }\n }\n\n public String toGenericString() {\n if (constructor != null) {\n return constructor.toGenericString();\n } else {\n return method.toGenericString();\n }\n }\n\n /**\n * @return the origin method/constructor\n */\n public Object getExecutable() {\n if (constructor != null) {\n return constructor;\n } else {\n return method;\n }\n }\n\n /**\n * get the memory address of the inner constructor/method\n * @return the method address, in general, it was the pointer of art::mirror::ArtMethod\n */\n public long getAddress() {\n return address;\n }\n\n /**\n * get the unique identifier of the constructor/method\n * @return the method identifier\n */\n public String getIdentifier() {\n // Can we use address, may gc move it??\n return String.valueOf(getAddress());\n }\n\n /**\n * force set the private flag of the method.\n */\n public void makePrivate() {\n int accessFlags = getAccessFlags();\n accessFlags &= ~Modifier.PUBLIC;\n accessFlags |= Modifier.PRIVATE;\n setAccessFlags(accessFlags);\n }\n\n /**\n * the static method is lazy resolved, when not resolved, the entry point is a trampoline of\n * a bridge, we can not hook these entry. this method force the static method to be resolved.\n */\n public void ensureResolved() {\n if (!Modifier.isStatic(getModifiers())) {\n Logger.d(TAG, \"not static, ignore.\");\n return;\n }\n\n try {\n invoke(null);\n Logger.d(TAG, \"ensure resolved\");\n } catch (Exception ignored) {\n // we should never make a successful call.\n } finally {\n EpicNative.MakeInitializedClassVisibilyInitialized();\n }\n }\n\n /**\n * The entry point of the quick compiled code.\n * @return the entry point.\n */\n public long getEntryPointFromQuickCompiledCode() {\n return Offset.read(address, Offset.ART_QUICK_CODE_OFFSET);\n }\n\n /**\n * @param pointer_entry_point_from_quick_compiled_code the entry point.\n */\n public void setEntryPointFromQuickCompiledCode(long pointer_entry_point_from_quick_compiled_code) {\n Offset.write(address, Offset.ART_QUICK_CODE_OFFSET, pointer_entry_point_from_quick_compiled_code);\n }\n\n /**\n * @return the access flags of the method/constructor, not only stand for the modifiers.\n */\n public int getAccessFlags() {\n return (int) Offset.read(address, Offset.ART_ACCESS_FLAG_OFFSET);\n }\n\n public void setAccessFlags(int newFlags) {\n Offset.write(address, Offset.ART_ACCESS_FLAG_OFFSET, newFlags);\n }\n\n public void setEntryPointFromJni(long entryPointFromJni) {\n Offset.write(address, Offset.ART_JNI_ENTRY_OFFSET, entryPointFromJni);\n }\n\n public long getEntryPointFromJni() {\n return Offset.read(address, Offset.ART_JNI_ENTRY_OFFSET);\n }\n\n /**\n * The size of an art::mirror::ArtMethod, we use two rule method to measure the size\n * @return the size\n */\n public static int getArtMethodSize() {\n if (artMethodSize > 0) {\n return artMethodSize;\n }\n final Method rule1 = XposedHelpers.findMethodExact(ArtMethod.class, \"rule1\");\n final Method rule2 = XposedHelpers.findMethodExact(ArtMethod.class, \"rule2\");\n final long rule2Address = EpicNative.getMethodAddress(rule2);\n final long rule1Address = EpicNative.getMethodAddress(rule1);\n final long size = Math.abs(rule2Address - rule1Address);\n artMethodSize = (int) size;\n Logger.d(TAG, \"art Method size: \" + size);\n return artMethodSize;\n }\n\n private void rule1() {\n Log.i(TAG, \"do not inline me!!\");\n }\n\n private void rule2() {\n Log.i(TAG, \"do not inline me!!\");\n }\n public static long getQuickToInterpreterBridge() {\n if (Build.VERSION.SDK_INT < Build.VERSION_CODES.N) {\n return -1L;\n }\n final Method fake = XposedHelpers.findMethodExact(NeverCalled.class, \"fake\", int.class);\n return ArtMethod.of(fake).getEntryPointFromQuickCompiledCode();\n }\n\n public long getFieldOffset() {\n // searchOffset(address, )\n return 0L;\n }\n\n /**\n * search Offset in memory\n * @param base base address\n * @param range search range\n * @param value search value\n * @return the first address of value if found\n */\n public static long searchOffset(long base, long range, int value) {\n final int align = 4;\n final long step = range / align;\n for (long i = 0; i < step; i++) {\n long offset = i * align;\n final byte[] bytes = EpicNative.memget(base + i * align, align);\n final int valueInOffset = ByteBuffer.allocate(4).put(bytes).getInt();\n if (valueInOffset == value) {\n return offset;\n }\n }\n return -1;\n }\n\n public static long searchOffset(long base, long range, long value) {\n final int align = 4;\n final long step = range / align;\n for (long i = 0; i < step; i++) {\n long offset = i * align;\n final byte[] bytes = EpicNative.memget(base + i * align, align);\n final long valueInOffset = ByteBuffer.allocate(8).put(bytes).getLong();\n if (valueInOffset == value) {\n return offset;\n }\n }\n return -1;\n }\n}\n"
},
{
"path": "library/src/main/java/me/weishu/epic/art/method/Offset.java",
"content": "/*\n * Copyright (c) 2017, weishu twsxtd@gmail.com\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\npackage me.weishu.epic.art.method;\n\nimport android.os.Build;\n\nimport com.taobao.android.dexposed.utility.Debug;\nimport com.taobao.android.dexposed.utility.Logger;\nimport com.taobao.android.dexposed.utility.Runtime;\n\nimport java.nio.ByteBuffer;\nimport java.nio.ByteOrder;\n\nimport me.weishu.epic.art.EpicNative;\n\n/**\n * The Offset of field in an ArtMethod\n */\nclass Offset {\n\n private static final String TAG = \"Offset\";\n\n /**\n * the offset of the entry point\n */\n static Offset ART_QUICK_CODE_OFFSET;\n\n /**\n * the offset of the access flag\n */\n static Offset ART_ACCESS_FLAG_OFFSET;\n\n /**\n * the offset of a jni entry point\n */\n static Offset ART_JNI_ENTRY_OFFSET;\n\n static {\n initFields();\n }\n\n private enum BitWidth {\n DWORD(4),\n QWORD(8);\n\n BitWidth(int width) {\n this.width = width;\n }\n\n int width;\n }\n\n private long offset;\n private BitWidth length;\n\n public long getOffset() {\n return offset;\n }\n\n public void setOffset(long offset) {\n this.offset = offset;\n }\n\n public BitWidth getLength() {\n return length;\n }\n\n public void setLength(BitWidth length) {\n this.length = length;\n }\n\n public static long read(long base, Offset offset) {\n long address = base + offset.offset;\n byte[] bytes = EpicNative.get(address, offset.length.width);\n if (offset.length == BitWidth.DWORD) {\n return ByteBuffer.wrap(bytes).order(ByteOrder.LITTLE_ENDIAN).getInt() & 0xFFFFFFFFL;\n } else {\n return ByteBuffer.wrap(bytes).order(ByteOrder.LITTLE_ENDIAN).getLong();\n }\n }\n\n public static void write(long base, Offset offset, long value) {\n long address = base + offset.offset;\n byte[] bytes;\n if (offset.length == BitWidth.DWORD) {\n if (value > 0xFFFFFFFFL) {\n throw new IllegalStateException(\"overflow may occur\");\n } else {\n bytes = ByteBuffer.allocate(4).order(ByteOrder.LITTLE_ENDIAN).putInt((int) value).array();\n }\n } else {\n bytes = ByteBuffer.allocate(8).order(ByteOrder.LITTLE_ENDIAN).putLong(value).array();\n }\n EpicNative.put(bytes, address);\n }\n\n private static void initFields() {\n ART_QUICK_CODE_OFFSET = new Offset();\n ART_ACCESS_FLAG_OFFSET = new Offset();\n ART_JNI_ENTRY_OFFSET = new Offset();\n\n ART_ACCESS_FLAG_OFFSET.setLength(Offset.BitWidth.DWORD);\n\n final int apiLevel = Build.VERSION.SDK_INT;\n\n if (Runtime.is64Bit()) {\n ART_QUICK_CODE_OFFSET.setLength(Offset.BitWidth.QWORD);\n ART_JNI_ENTRY_OFFSET.setLength(BitWidth.QWORD);\n switch (apiLevel) {\n case Build.VERSION_CODES.S:\n // source: https://android.googlesource.com/platform/art/+/refs/heads/android12-release/runtime/art_method.h\n ART_QUICK_CODE_OFFSET.setOffset(24);\n ART_JNI_ENTRY_OFFSET.setOffset(16);\n ART_ACCESS_FLAG_OFFSET.setOffset(4);\n break;\n case Build.VERSION_CODES.R:\n case Build.VERSION_CODES.Q:\n case Build.VERSION_CODES.P:\n ART_QUICK_CODE_OFFSET.setOffset(32);\n ART_JNI_ENTRY_OFFSET.setOffset(24);\n ART_ACCESS_FLAG_OFFSET.setOffset(4);\n break;\n case Build.VERSION_CODES.O_MR1:\n case Build.VERSION_CODES.O:\n ART_QUICK_CODE_OFFSET.setOffset(40);\n ART_JNI_ENTRY_OFFSET.setOffset(32);\n ART_ACCESS_FLAG_OFFSET.setOffset(4);\n break;\n case Build.VERSION_CODES.N_MR1:\n case Build.VERSION_CODES.N:\n ART_QUICK_CODE_OFFSET.setOffset(48);\n ART_JNI_ENTRY_OFFSET.setOffset(40);\n ART_ACCESS_FLAG_OFFSET.setOffset(4);\n break;\n case Build.VERSION_CODES.M:\n ART_QUICK_CODE_OFFSET.setOffset(48);\n ART_JNI_ENTRY_OFFSET.setOffset(40);\n ART_ACCESS_FLAG_OFFSET.setOffset(12);\n break;\n case Build.VERSION_CODES.LOLLIPOP_MR1:\n ART_QUICK_CODE_OFFSET.setOffset(56);\n ART_JNI_ENTRY_OFFSET.setOffset(44);\n ART_ACCESS_FLAG_OFFSET.setOffset(20);\n break;\n case Build.VERSION_CODES.LOLLIPOP:\n ART_QUICK_CODE_OFFSET.setOffset(40);\n ART_QUICK_CODE_OFFSET.setLength(BitWidth.QWORD);\n ART_JNI_ENTRY_OFFSET.setOffset(32);\n ART_JNI_ENTRY_OFFSET.setLength(BitWidth.QWORD);\n ART_ACCESS_FLAG_OFFSET.setOffset(56);\n break;\n case Build.VERSION_CODES.KITKAT:\n ART_QUICK_CODE_OFFSET.setOffset(32);\n ART_ACCESS_FLAG_OFFSET.setOffset(28);\n break;\n default:\n throw new RuntimeException(\"API LEVEL: \" + apiLevel + \" is not supported now : (\");\n }\n } else {\n ART_QUICK_CODE_OFFSET.setLength(Offset.BitWidth.DWORD);\n ART_JNI_ENTRY_OFFSET.setLength(BitWidth.DWORD);\n switch (apiLevel) {\n case Build.VERSION_CODES.S:\n ART_QUICK_CODE_OFFSET.setOffset(20);\n ART_JNI_ENTRY_OFFSET.setOffset(16);\n ART_ACCESS_FLAG_OFFSET.setOffset(4);\n break;\n case Build.VERSION_CODES.R:\n case Build.VERSION_CODES.Q:\n case Build.VERSION_CODES.P:\n ART_QUICK_CODE_OFFSET.setOffset(24);\n ART_JNI_ENTRY_OFFSET.setOffset(20);\n ART_ACCESS_FLAG_OFFSET.setOffset(4);\n break;\n case Build.VERSION_CODES.O_MR1:\n case Build.VERSION_CODES.O:\n ART_QUICK_CODE_OFFSET.setOffset(28);\n ART_JNI_ENTRY_OFFSET.setOffset(24);\n ART_ACCESS_FLAG_OFFSET.setOffset(4);\n break;\n case Build.VERSION_CODES.N_MR1:\n case Build.VERSION_CODES.N:\n ART_QUICK_CODE_OFFSET.setOffset(32);\n ART_JNI_ENTRY_OFFSET.setOffset(28);\n ART_ACCESS_FLAG_OFFSET.setOffset(4);\n break;\n case Build.VERSION_CODES.M:\n ART_QUICK_CODE_OFFSET.setOffset(36);\n ART_JNI_ENTRY_OFFSET.setOffset(32);\n ART_ACCESS_FLAG_OFFSET.setOffset(12);\n break;\n case Build.VERSION_CODES.LOLLIPOP_MR1:\n ART_QUICK_CODE_OFFSET.setOffset(44);\n ART_JNI_ENTRY_OFFSET.setOffset(40);\n ART_ACCESS_FLAG_OFFSET.setOffset(20);\n break;\n case Build.VERSION_CODES.LOLLIPOP:\n ART_QUICK_CODE_OFFSET.setOffset(40);\n ART_QUICK_CODE_OFFSET.setLength(BitWidth.QWORD);\n ART_JNI_ENTRY_OFFSET.setOffset(32);\n ART_JNI_ENTRY_OFFSET.setLength(BitWidth.QWORD);\n ART_ACCESS_FLAG_OFFSET.setOffset(56);\n break;\n case Build.VERSION_CODES.KITKAT:\n ART_QUICK_CODE_OFFSET.setOffset(32);\n ART_ACCESS_FLAG_OFFSET.setOffset(28);\n break;\n default:\n throw new RuntimeException(\"API LEVEL: \" + apiLevel + \" is not supported now : (\");\n }\n }\n if (Debug.DEBUG) {\n Logger.i(TAG, \"quick code offset: \" + ART_QUICK_CODE_OFFSET.getOffset());\n Logger.i(TAG, \"access flag offset: \" + ART_ACCESS_FLAG_OFFSET.getOffset());\n Logger.i(TAG, \"jni code offset: \" + ART_JNI_ENTRY_OFFSET.getOffset());\n\n }\n }\n}\n"
},
{
"path": "library/src/main/res/values/strings.xml",
"content": "\n epic\n\n"
},
{
"path": "settings.gradle",
"content": "include ':app', ':library'\n"
}
]![](\"http://7xp3xc.com1.z0.glb.clouddn.com/201601/1511840542774.png\")
\n\n2. 监控 dex 文件的加载：\n\n```java\nDexposedBridge.findAndHookMethod(DexFile.class, \"loadDex\", String.class, String.class, int.class, new XC_MethodHook() {\n @Override\n protected void beforeHookedMethod(MethodHookParam param) throws Throwable {\n super.beforeHookedMethod(param);\n String dex = (String) param.args[0];\n String odex = (String) param.args[1];\n Log.i(TAG, \"load dex, input:\" + dex + \", output:\" + odex);\n }\n});\n```\n\n## 支持情况\n\n目前 Epic 支持 Android 5.0 ~ 11 的 Thumb-2/ARM64 指令集，arm32/x86/x86_64/mips/mips64 不支持。本项目被 [VirtualXposed](https://github.com/android-hacker/VirtualXposed) 和 [太极](http://taichi.cool) 以及大量企业级用户使用，经过了数千万用户的验证，已经被证明非常稳定。目前，手机 QQ 已经在产品中使用 Epic。\n\n\n## 已知问题\n\n1. 受限于 inline hook 本身，短方法 (Thumb-2 下指令小于 8 个字节，ARM64 小于 16 字节) 无法支持。\n2. 被完全内联的方法不支持。\n\n## 致谢\n\n1. [Dexposed](https://github.com/alibaba/dexposed)\n2. [Xposed](http://repo.xposed.info/module/de.robv.android.xposed.installer)\n3. [mar-v-in/ArtHook](https://github.com/mar-v-in/ArtHook)\n4. [Nougat_dlfunctions](https://github.com/avs333/Nougat_dlfunctions.git)\n\n\n## 联系我\n\ntwsxtd@gmail.com\n"
},
{
"path": "app/.gitignore",
"content": "/build\n"
},
{
"path": "app/build.gradle",
"content": "apply plugin: 'com.android.application'\n\nandroid {\n compileSdkVersion 30\n defaultConfig {\n applicationId \"me.weishu.epic.samples\"\n minSdkVersion 21\n targetSdkVersion 30\n versionCode 1\n versionName \"1.0\"\n testInstrumentationRunner \"android.support.test.runner.AndroidJUnitRunner\"\n externalNativeBuild {\n ndkBuild {\n abiFilters \"armeabi-v7a\", \"x86\"\n }\n }\n }\n buildTypes {\n release {\n minifyEnabled false\n proguardFiles getDefaultProguardFile('proguard-android.txt'), 'proguard-rules.pro'\n }\n }\n sourceSets {\n main {\n jniLibs.srcDirs = ['libs']\n }\n }\n lintOptions {\n abortOnError false\n }\n}\n\ndependencies {\n implementation fileTree(dir: 'libs', include: ['*.jar'])\n implementation project(\":library\")\n implementation 'com.qmuiteam:qmui:1.0.4'\n}\n"
},
{
"path": "app/proguard-rules.pro",
"content": "# Add project specific ProGuard rules here.\n# By default, the flags in this file are appended to flags specified\n# in /Users/weishu/Library/Android/sdk/tools/proguard/proguard-android.txt\n# You can edit the include path and order by changing the proguardFiles\n# directive in build.gradle.\n#\n# For more details, see\n# http://developer.android.com/guide/developing/tools/proguard.html\n\n# Add any project specific keep options here:\n\n# If your project uses WebView with JS, uncomment the following\n# and specify the fully qualified class name to the JavaScript interface\n# class:\n#-keepclassmembers class fqcn.of.javascript.interface.for.webview {\n# public *;\n#}\n\n# Uncomment this to preserve the line number information for\n# debugging stack traces.\n#-keepattributes SourceFile,LineNumberTable\n\n# If you keep the line number information, uncomment this to\n# hide the original source file name.\n#-renamesourcefileattribute SourceFile\n"
},
{
"path": "app/src/androidTest/java/me/weishu/epic/ExampleInstrumentedTest.java",
"content": "//package me.weishu.epic;\n//\n//import android.content.Context;\n//import android.support.test.InstrumentationRegistry;\n//import android.support.test.runner.AndroidJUnit4;\n//\n//import org.junit.Test;\n//import org.junit.runner.RunWith;\n//\n//import static junit.framework.Assert.assertEquals;\n//import static org.junit.Assert.*;\n//\n///**\n// * Instrumentation test, which will execute on an Android device.\n// *\n// * @see Testing documentation\n// */\n//@RunWith(AndroidJUnit4.class)\n//public class ExampleInstrumentedTest {\n// @Test\n// public void useAppContext() throws Exception {\n// // Context of the app under test.\n// Context appContext = InstrumentationRegistry.getTargetContext();\n//\n// assertEquals(\"me.weishu.epic\", appContext.getPackageName());\n// }\n//}\n"
},
{
"path": "app/src/main/AndroidManifest.xml",
"content": "\n