Android热补丁动态修复实践，android0基础方法类

public class BugClass {

public String bug() {

return “bug class”;

}

}

package com.devilwwj.hotfixdemo;

/**

• com.devilwwj.hotfixdemo

• Created by devilwwj on 16/3/8.

*/

public class LoadBugClass {

public String getBugString() {

BugClass bugClass = new BugClass();

return bugClass.bug();

}

}

我们需要做的是在这两个类的class文件的构造方法中插入一段代码：

System.out.println(AntilazyLoad.class);

创建hackdex模块并创建AntilazyLoad类

---

看图就好了：

将AntilazyLoad单独打成hack_dex.jar包

---

通过以下命令来实现：

jar cvf hack.jar com.devilwwj.hackdex/*

这个命令会将AntilazyLoad类打包成hack.jar文件

dx --dex --output hack_dex.jar hack.jar

这个命令使用dx工具对hack.jar进行转化，生成hack_dex.jar文件

dx工具在我们的sdk/build-tools下

最终我们把hack_dex.jar文件放到项目的assets目录下：

使用javassist实现动态代码注入

---

创建buildSrc模块，这个项目是使用Groovy开发的，需要配置Groovy SDK才可以编译成功。

在这里下载Groovy SDK：http://groovy-lang.org/download.html，下载之后，配置项目user Library即可。

它里面提供了一个方法，用来向指定类的构造函数注入代码：

/**

• 植入代码

• @param buildDir 是项目的build class目录，就是我们需要注入的class所在地

• @param lib 这个是hackdex的目录，就是AntilazyLoad类的class文件所在地

*/

public static void process(String buildDir, String lib) {

println(lib);

ClassPool classes = ClassPool.getDefault()

classes.appendClassPath(buildDir)

classes.appendClassPath(lib)

// 将需要关联的类的构造方法中插入引用代码

CtClass c = classes.getCtClass(“com.devilwwj.hotfixdemo.BugClass”)

if (c.isFrozen()) {

c.defrost()

}

println(“添加构造方法”)

def constructor = c.getConstructors()[0];

constructor.insertBefore(“System.out.println(com.devilwwj.hackdex.AntilazyLoad.class);”)

c.writeFile(buildDir)

CtClass c1 = classes.getCtClass(“com.devilwwj.hotfixdemo.LoadBugClass”)

if (c1.isFrozen()) {

c1.defrost()

}

println(“添加构造方法”)

def constructor1 = c1.getConstructors()[0];

constructor1.insertBefore(“System.out.println(com.devilwwj.hackdex.AntilazyLoad.class);”)

c1.writeFile(buildDir)

}

配置app项目的build.gradle

---

上一小节创建的module提供相应的方法来让我们对项目的类进行代码注入，我们需要在build.gradle来配置让它自动来做这件事：

apply plugin: ‘com.android.application’

task(‘processWithJavassist’) << {

String classPath = file(‘build/intermediates/classes/debug’)// 项目编译class所在目录

com.devilwwj.patch.PatchClass.process(classPath, project(’:hackdex’).buildDir.absolutePath + “/intermediates/classes/debug”) // 第二个参数是hackdex的class所在目录

}

android {

compileSdkVersion 23

buildToolsVersion “23.0.1”

defaultConfig {

applicationId “com.devilwwj.hotfixdemo”

minSdkVersion 14

targetSdkVersion 23

versionCode 1

versionName “1.0”

}

buildTypes {

debug {

minifyEnabled false

proguardFiles getDefaultProguardFile(‘proguard-android.txt’), ‘proguard-rules.pro’

}

release {

minifyEnabled false

proguardFiles getDefaultProguardFile(‘proguard-android.txt’), ‘proguard-rules.pro’

}

}

applicationVariants.all { variant ->

variant.dex.dependsOn << processWithJavassist // 在执行dx命令之前将代码打入到class中

}

}

dependencies {

compile fileTree(dir: ‘libs’, include: [’*.jar’])

testCompile ‘junit:junit:4.12’

compile ‘com.android.support:appcompat-v7:23.1.1’

compile ‘com.android.support:design:23.1.1’

compile project(’:hotfixlib’)

}

这时候我们run项目，反编译build/output/apk下的app-debug.apk文件，你就可以看到代码已经成功植入了。

mac下的反编译工具：

https://sourceforge.net/projects/jadx/?source=typ_redirect

反编译的结果如下图：

其实你也可以直接在项目中看：

创建hotfixlib模块，并关联到项目中

---

这差不多是最后一步了，也是最核心的一步，提供将heck_dex.jar动态插入到dexElements的方法。

核心代码：

package com.devilwwj.hotfixlib;

import android.annotation.TargetApi;

import android.content.Context;

import java.io.File;

import java.lang.reflect.Array;

import java.lang.reflect.Field;

import java.lang.reflect.InvocationTargetException;

import dalvik.system.DexClassLoader;

import dalvik.system.PathClassLoader;

/**

• com.devilwwj.hotfixlib

• Created by devilwwj on 16/3/9.

*/

public final class HotFix {

public static void patch(Context context, String patchDexFile, String patchClassName) {

if (patchDexFile != null && new File(patchDexFile).exists()) {

try {

if (hasLexClassLoader()) {

injectAliyunOs(context, patchDexFile, patchClassName);

} else if (hasDexClassLoader()) {

injectAboveEqualApiLevel14(context, patchDexFile, patchClassName);

} else {

injectBelowApiLevel14(context, patchDexFile, patchClassName);

}

} catch (Throwable th) {

}

}

}

private static boolean hasLexClassLoader() {

try {

Class.forName(“dalvik.system.LexClassLoader”);

return true;

} catch (ClassNotFoundException e) {

e.printStackTrace();

return false;

}

}

private static boolean hasDexClassLoader() {

try {

Class.forName(“dalvik.system.BaseDexClassLoader”);

return true;

} catch (ClassNotFoundException e) {

e.printStackTrace();

return false;

}

}

private static void injectAliyunOs(Context context, String patchDexFile, String patchClassName) throws ClassNotFoundException, NoSuchMethodException, IllegalAccessException, InvocationTargetException, InstantiationException, NoSuchFieldException {

PathClassLoader obj = (PathClassLoader) context.getClassLoader();

String replaceAll = new File(patchDexFile).getName().replaceAll("\.[a-zA-Z0-9]+", “.lex”);

Class cls = Class.forName(“dalvik.system.LexClassLoader”);

Object newInstance = cls.getConstructor(new Class[]{String.class, String.class, String.class, ClassLoader.class}).newInstance(

new Object[]{context.getDir(“dex”, 0).getAbsolutePath()

• File.separator + replaceAll, context.getDir(“dex”, 0).getAbsolutePath(), patchDexFile, obj});

cls.getMethod(“loadClass”, new Class[]{String.class}).invoke(newInstance, new Object[]{patchClassName});

setField(obj, PathClassLoader.class, “mPaths”, appendArray(getField(obj, PathClassLoader.class, “mPaths”), getField(newInstance, cls, “mRawDexPath”)));

setField(obj, PathClassLoader.class, “mFiles”, combineArray(getField(obj, PathClassLoader.class, “mFiles”), getField(newInstance, cls, “mFiles”)));

setField(obj, PathClassLoader.class, “mZips”, combineArray(getField(obj, PathClassLoader.class, “mZips”), getField(newInstance, cls, “mZips”)));

setField(obj, PathClassLoader.class, “mLexs”, combineArray(getField(obj, PathClassLoader.class, “mLexs”), getField(newInstance, cls, “mDexs”)));

}

@TargetApi(14)

private static void injectBelowApiLevel14(Context context, String str, String str2) throws ClassNotFoundException, NoSuchFieldException, IllegalAccessException {

PathClassLoader obj = (PathClassLoader) context.getClassLoader();

DexClassLoader dexClassLoader = new DexClassLoader(str, context.getDir(“dex”, 0).getAbsolutePath(), str, context.getClassLoader());

dexClassLoader.loadClass(str2);

setField(obj, PathClassLoader.class, “mPaths”,

appendArray(getField(obj, PathClassLoader.class, “mPaths”), getField(dexClassLoader, DexClassLoader.class, “mRawDexPath”)));

setField(obj, PathClassLoader.class, “mFiles”,

combineArray(getField(obj, PathClassLoader.class, “mFiles”), getField(dexClassLoader, DexClassLoader.class, “mFiles”)));

setField(obj, PathClassLoader.class, “mZips”,

combineArray(getField(obj, PathClassLoader.class, “mZips”), getField(dexClassLoader, DexClassLoader.class, “mZips”)));

setField(obj, PathClassLoader.class, “mDexs”,

combineArray(getField(obj, PathClassLoader.class, “mDexs”), getField(dexClassLoader, DexClassLoader.class, “mDexs”)));

obj.loadClass(str2);

}

/**

• 将dex注入dexElements数组中

• @param context

• @param str

• @param str2

• @throws ClassNotFoundException

• @throws NoSuchFieldException

• @throws IllegalAccessException

*/

private static void injectAboveEqualApiLevel14(Context context, String str, String str2) throws ClassNotFoundException, NoSuchFieldException, IllegalAccessException {

PathClassLoader pathClassLoader = (PathClassLoader) context.getClassLoader();

Object a = combineArray(getDexElements(getPathList(pathClassLoader)), getDexElements(getPathList(new DexClassLoader(str, context.getDir(“dex”, 0).getAbsolutePath(), str, context.getClassLoader()))));

Object a2 = getPathList(pathClassLoader);

setField(a2, a2.getClass(), “dexElements”, a);

pathClassLoader.loadClass(str2);

}

/**

• 通过PathClassLoader拿到pathList

• @param obj

• @return

• @throws ClassNotFoundException

• @throws NoSuchFieldException

• @throws IllegalAccessException

*/

private static Object getPathList(Object obj) throws ClassNotFoundException, NoSuchFieldException, IllegalAccessException {

return getField(obj, Class.forName(“dalvik.system.BaseDexClassLoader”), “pathList”);

}

/**

• 通过pathList取得dexElements对象

• @param obj

• @return

• @throws NoSuchFieldException

• @throws IllegalAccessException

*/

private static Object getDexElements(Object obj) throws NoSuchFieldException, IllegalAccessException {

return getField(obj, obj.getClass(), “dexElements”);

}

/**

• 通过反射拿到指定对象

• @param obj

• @param cls

• @param str

• @return

• @throws NoSuchFieldException

• @throws IllegalAccessException

*/

private static Object getField(Object obj, Class cls, String str) throws NoSuchFieldException, IllegalAccessException {

Field declaredField = cls.getDeclaredField(str);

declaredField.setAccessible(true);

return declaredField.get(obj);

}

/**

• 通过反射设置属性

• @param obj

• @param cls

• @p

《Android学习笔记总结+最新移动架构视频+大厂安卓面试真题+项目实战源码讲义》

【docs.qq.com/doc/DSkNLaERkbnFoS0ZF】 完整内容开源分享

aram str

• @param obj2

• @throws NoSuchFieldException

• @throws IllegalAccessException

*/

private static void setField(Object obj, Class cls, String str, Object obj2) throws NoSuchFieldException, IllegalAccessException {

Field declaredField = cls.getDeclaredField(str);

declaredField.setAccessible(true);

declaredField.set(obj, obj2);

}

/**

• 合并数组

• @param obj

• @param obj2

• @return

*/

private static Object combineArray(Object obj, Object obj2) {

Class componentType = obj2.getClass().getComponentType();

int length = Array.getLength(obj2);

int length2 = Array.getLength(obj) + length;

Object newInstance = Array.newInstance(componentType, length2);

for (int i = 0; i < length2; i++) {

if (i < length) {

Array.set(newInstance, i, Array.get(obj2, i));

} else {

Array.set(newInstance, i, Array.get(obj, i - length));

}

}

return newInstance;

}

/**