Xposed源码剖析——hook具体实现

最新推荐文章于 2022-10-17 15:05:32 发布
最新推荐文章于 2022-10-17 15:05:32 发布
阅读量789 收藏
点赞数
分类专栏： Android Hook 文章标签： Android Android Hook XPosed

之前我们看到了xposed各种初始化的工作，其实都是完成了针对系统中各种method的hook和替换工作。

那么具体如何替换，其实都是调用了其中的。XposedBridge_hookMethodNative函数。这里，我们详细的看看XposedBridge_hookMethodNative函数中，做了一些什么操作。

<code class="hljs java has-numbering" style="display: block; padding: 0px; color: inherit; box-sizing: border-box; font-family: 'Source Code Pro', monospace;font-size:undefined; white-space: pre; border-radius: 0px; word-wrap: normal; background: transparent;"><span class="hljs-javadoc" style="color:#8800;box-sizing: border-box;">/**
  *
  * 将输入的Class中的Method方法的nativeFunc替换为xposedCallHandler 
  * 
  *<span class="hljs-javadoctag" style="color:#66066;box-sizing: border-box;"> @param</span> env JniEnv
  *<span class="hljs-javadoctag" style="color:#66066;box-sizing: border-box;"> @param</span> reflectedMethodIndirect 待反射的函数
  *<span class="hljs-javadoctag" style="color:#66066;box-sizing: border-box;"> @param</span> declaredClassIndirect 定义的class
  *<span class="hljs-javadoctag" style="color:#66066;box-sizing: border-box;"> @param</span> slot 函数偏移量
  *<span class="hljs-javadoctag" style="color:#66066;box-sizing: border-box;"> @param</span> additionalInfoIndirect 添加的函数
  * 
  */</span>
<span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">void</span> XposedBridge_hookMethodNative(JNIEnv* env, jclass clazz, jobject reflectedMethodIndirect,
            jobject declaredClassIndirect, jint slot, jobject additionalInfoIndirect) {
    <span class="hljs-comment" style="color:#8800;box-sizing: border-box;">// 容错</span>
    <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">if</span> (declaredClassIndirect == NULL || reflectedMethodIndirect == NULL) {
        dvmThrowIllegalArgumentException(<span class="hljs-string" style="color:#0880;box-sizing: border-box;">"method and declaredClass must not be null"</span>);
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">return</span>;
    }

    <span class="hljs-comment" style="color:#8800;box-sizing: border-box;">// 根据函数的偏移量，从classloader中找到准备替换的函数。</span>
    ClassObject* declaredClass = (ClassObject*) dvmDecodeIndirectRef(dvmThreadSelf(), declaredClassIndirect);
    Method* method = dvmSlotToMethod(declaredClass, slot);
    <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">if</span> (method == NULL) {
        dvmThrowNoSuchMethodError(<span class="hljs-string" style="color:#0880;box-sizing: border-box;">"Could not get internal representation for method"</span>);
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">return</span>;
    }

    <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">if</span> (isMethodHooked(method)) {
        <span class="hljs-comment" style="color:#8800;box-sizing: border-box;">// already hooked</span>
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">return</span>;
    }

    <span class="hljs-comment" style="color:#8800;box-sizing: border-box;">// 保存替换前的数据信息</span>
    XposedHookInfo* hookInfo = (XposedHookInfo*) calloc(<span class="hljs-number" style="color:#06666;box-sizing: border-box;">1</span>, sizeof(XposedHookInfo));
    memcpy(hookInfo, method, sizeof(hookInfo->originalMethodStruct));
    hookInfo->reflectedMethod = dvmDecodeIndirectRef(dvmThreadSelf(), env->NewGlobalRef(reflectedMethodIndirect));
    hookInfo->additionalInfo = dvmDecodeIndirectRef(dvmThreadSelf(), env->NewGlobalRef(additionalInfoIndirect));

    <span class="hljs-comment" style="color:#8800;box-sizing: border-box;">// 替换函数方法 , 让nativeFunction指向本地的hookedMethodCallback</span>
    SET_METHOD_FLAG(method, ACC_NATIVE);
    method->nativeFunc = &hookedMethodCallback;
    method->insns = (<span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">const</span> u2*) hookInfo;
    method->registersSize = method->insSize;
    method->outsSize = <span class="hljs-number" style="color:#06666;box-sizing: border-box;">0</span>;

    <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">if</span> (PTR_gDvmJit != NULL) {
        <span class="hljs-comment" style="color:#8800;box-sizing: border-box;">// reset JIT cache</span>
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">char</span> currentValue = *((<span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">char</span>*)PTR_gDvmJit + MEMBER_OFFSET_VAR(DvmJitGlobals,codeCacheFull));
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">if</span> (currentValue == <span class="hljs-number" style="color:#06666;box-sizing: border-box;">0</span> || currentValue == <span class="hljs-number" style="color:#06666;box-sizing: border-box;">1</span>) {
            MEMBER_VAL(PTR_gDvmJit, DvmJitGlobals, codeCacheFull) = <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">true</span>;
        } <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">else</span> {
            ALOGE(<span class="hljs-string" style="color:#0880;box-sizing: border-box;">"Unexpected current value for codeCacheFull: %d"</span>, currentValue);
        }
    }
}</code><ul class="pre-numbering" style="box-sizing: border-box; position: absolute; width: 50px; top: 0px; left: 0px; margin: 0px; padding: 6px 0px 40px; border-right-width: 1px; border-right-style: solid; border-right-color: rgb(221, 221, 221); list-style: none; text-align: right; background-color: rgb(238, 238, 238);"><li style="box-sizing: border-box; padding: 0px 5px;">1</li><li style="box-sizing: border-box; padding: 0px 5px;">2</li><li style="box-sizing: border-box; padding: 0px 5px;">3</li><li style="box-sizing: border-box; padding: 0px 5px;">4</li><li style="box-sizing: border-box; padding: 0px 5px;">5</li><li style="box-sizing: border-box; padding: 0px 5px;">6</li><li style="box-sizing: border-box; padding: 0px 5px;">7</li><li style="box-sizing: border-box; padding: 0px 5px;">8</li><li style="box-sizing: border-box; padding: 0px 5px;">9</li><li style="box-sizing: border-box; padding: 0px 5px;">10</li><li style="box-sizing: border-box; padding: 0px 5px;">11</li><li style="box-sizing: border-box; padding: 0px 5px;">12</li><li style="box-sizing: border-box; padding: 0px 5px;">13</li><li style="box-sizing: border-box; padding: 0px 5px;">14</li><li style="box-sizing: border-box; padding: 0px 5px;">15</li><li style="box-sizing: border-box; padding: 0px 5px;">16</li><li style="box-sizing: border-box; padding: 0px 5px;">17</li><li style="box-sizing: border-box; padding: 0px 5px;">18</li><li style="box-sizing: border-box; padding: 0px 5px;">19</li><li style="box-sizing: border-box; padding: 0px 5px;">20</li><li style="box-sizing: border-box; padding: 0px 5px;">21</li><li style="box-sizing: border-box; padding: 0px 5px;">22</li><li style="box-sizing: border-box; padding: 0px 5px;">23</li><li style="box-sizing: border-box; padding: 0px 5px;">24</li><li style="box-sizing: border-box; padding: 0px 5px;">25</li><li style="box-sizing: border-box; padding: 0px 5px;">26</li><li style="box-sizing: border-box; padding: 0px 5px;">27</li><li style="box-sizing: border-box; padding: 0px 5px;">28</li><li style="box-sizing: border-box; padding: 0px 5px;">29</li><li style="box-sizing: border-box; padding: 0px 5px;">30</li><li style="box-sizing: border-box; padding: 0px 5px;">31</li><li style="box-sizing: border-box; padding: 0px 5px;">32</li><li style="box-sizing: border-box; padding: 0px 5px;">33</li><li style="box-sizing: border-box; padding: 0px 5px;">34</li><li style="box-sizing: border-box; padding: 0px 5px;">35</li><li style="box-sizing: border-box; padding: 0px 5px;">36</li><li style="box-sizing: border-box; padding: 0px 5px;">37</li><li style="box-sizing: border-box; padding: 0px 5px;">38</li><li style="box-sizing: border-box; padding: 0px 5px;">39</li><li style="box-sizing: border-box; padding: 0px 5px;">40</li><li style="box-sizing: border-box; padding: 0px 5px;">41</li><li style="box-sizing: border-box; padding: 0px 5px;">42</li><li style="box-sizing: border-box; padding: 0px 5px;">43</li><li style="box-sizing: border-box; padding: 0px 5px;">44</li><li style="box-sizing: border-box; padding: 0px 5px;">45</li><li style="box-sizing: border-box; padding: 0px 5px;">46</li><li style="box-sizing: border-box; padding: 0px 5px;">47</li><li style="box-sizing: border-box; padding: 0px 5px;">48</li><li style="box-sizing: border-box; padding: 0px 5px;">49</li><li style="box-sizing: border-box; padding: 0px 5px;">50</li><li style="box-sizing: border-box; padding: 0px 5px;">51</li><li style="box-sizing: border-box; padding: 0px 5px;">52</li><li style="box-sizing: border-box; padding: 0px 5px;">53</li><li style="box-sizing: border-box; padding: 0px 5px;">54</li><li style="box-sizing: border-box; padding: 0px 5px;">55</li></ul>

对vm不熟悉的，解释一下几个不怎么常用的函数。

名称 说明
dvmDecodeIndirectRef 将间接引用jobject转换为对象引用Object*
dvmSlotToMethod 根据偏移量，从ClassLoader中获取函数指针
<code class="hljs objectivec has-numbering" style="display: block; padding: 0px; color: inherit; box-sizing: border-box; font-family: 'Source Code Pro', monospace;font-size:undefined; white-space: pre; border-radius: 0px; word-wrap: normal; background: transparent;"><span class="hljs-comment" style="color:#8800;box-sizing: border-box;">/** 
  * hook方法调用时的回调
  */</span>
<span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">void</span> hookedMethodCallback(<span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">const</span> u4* args, JValue* pResult, <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">const</span> Method* method, ::Thread* <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">self</span>) {
    <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">if</span> (!isMethodHooked(method)) {
        dvmThrowNoSuchMethodError(<span class="hljs-string" style="color:#0880;box-sizing: border-box;">"Could not find Xposed original method - how did you even get here?"</span>);
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">return</span>;
    }

    XposedHookInfo* hookInfo = (XposedHookInfo*) method->insns;
    Method* original = (Method*) hookInfo;
    Object* originalReflected = hookInfo->reflectedMethod;
    Object* additionalInfo = hookInfo->additionalInfo;

    <span class="hljs-comment" style="color:#8800;box-sizing: border-box;">// convert/box arguments</span>
    <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">const</span> <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">char</span>* desc = &method->shorty[<span class="hljs-number" style="color:#06666;box-sizing: border-box;">1</span>]; <span class="hljs-comment" style="color:#8800;box-sizing: border-box;">// [0] is the return type.</span>
    Object* thisObject = <span class="hljs-literal" style="color:#06666;box-sizing: border-box;">NULL</span>;
    size_t srcIndex = <span class="hljs-number" style="color:#06666;box-sizing: border-box;">0</span>;
    size_t dstIndex = <span class="hljs-number" style="color:#06666;box-sizing: border-box;">0</span>;

    <span class="hljs-comment" style="color:#8800;box-sizing: border-box;">// for non-static methods determine the "this" pointer</span>
    <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">if</span> (!dvmIsStaticMethod(original)) {
        thisObject = (Object*) args[<span class="hljs-number" style="color:#06666;box-sizing: border-box;">0</span>];
        srcIndex++;
    }

    ArrayObject* argsArray = dvmAllocArrayByClass(objectArrayClass, strlen(method->shorty) - <span class="hljs-number" style="color:#06666;box-sizing: border-box;">1</span>, ALLOC_DEFAULT);
    <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">if</span> (argsArray == <span class="hljs-literal" style="color:#06666;box-sizing: border-box;">NULL</span>) {
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">return</span>;
    }

    <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">while</span> (*desc != <span class="hljs-string" style="color:#0880;box-sizing: border-box;">'\0'</span>) {
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">char</span> descChar = *(desc++);
        JValue value;
        Object* obj;

        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">switch</span> (descChar) {
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">case</span> <span class="hljs-string" style="color:#0880;box-sizing: border-box;">'Z'</span>:
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">case</span> <span class="hljs-string" style="color:#0880;box-sizing: border-box;">'C'</span>:
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">case</span> <span class="hljs-string" style="color:#0880;box-sizing: border-box;">'F'</span>:
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">case</span> <span class="hljs-string" style="color:#0880;box-sizing: border-box;">'B'</span>:
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">case</span> <span class="hljs-string" style="color:#0880;box-sizing: border-box;">'S'</span>:
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">case</span> <span class="hljs-string" style="color:#0880;box-sizing: border-box;">'I'</span>:
            value<span class="hljs-variable" style="color:#66066;box-sizing: border-box;">.i</span> = args[srcIndex++];
            obj = (Object*) dvmBoxPrimitive(value, dvmFindPrimitiveClass(descChar));
            dvmReleaseTrackedAlloc(obj, <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">self</span>);
            <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">break</span>;
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">case</span> <span class="hljs-string" style="color:#0880;box-sizing: border-box;">'D'</span>:
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">case</span> <span class="hljs-string" style="color:#0880;box-sizing: border-box;">'J'</span>:
            value<span class="hljs-variable" style="color:#66066;box-sizing: border-box;">.j</span> = dvmGetArgLong(args, srcIndex);
            srcIndex += <span class="hljs-number" style="color:#06666;box-sizing: border-box;">2</span>;
            obj = (Object*) dvmBoxPrimitive(value, dvmFindPrimitiveClass(descChar));
            dvmReleaseTrackedAlloc(obj, <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">self</span>);
            <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">break</span>;
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">case</span> <span class="hljs-string" style="color:#0880;box-sizing: border-box;">'['</span>:
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">case</span> <span class="hljs-string" style="color:#0880;box-sizing: border-box;">'L'</span>:
            obj  = (Object*) args[srcIndex++];
            <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">break</span>;
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">default</span>:
            ALOGE(<span class="hljs-string" style="color:#0880;box-sizing: border-box;">"Unknown method signature description character: %c"</span>, descChar);
            obj = <span class="hljs-literal" style="color:#06666;box-sizing: border-box;">NULL</span>;
            srcIndex++;
        }
        setObjectArrayElement(argsArray, dstIndex++, obj);
    }

    <span class="hljs-comment" style="color:#8800;box-sizing: border-box;">// 调用Java中的对应方法，即之前我们用到，的handleHookedMethod</span>
    JValue result;
    dvmCallMethod(<span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">self</span>, xposedHandleHookedMethod, <span class="hljs-literal" style="color:#06666;box-sizing: border-box;">NULL</span>, &result,
        originalReflected, (<span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">int</span>) original, additionalInfo, thisObject, argsArray);

    dvmReleaseTrackedAlloc(argsArray, <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">self</span>);

    <span class="hljs-comment" style="color:#8800;box-sizing: border-box;">// exceptions are thrown to the caller</span>
    <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">if</span> (dvmCheckException(<span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">self</span>)) {
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">return</span>;
    }

    <span class="hljs-comment" style="color:#8800;box-sizing: border-box;">// return result with proper type</span>
    ClassObject* returnType = dvmGetBoxedReturnType(method);
    <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">if</span> (returnType->primitiveType == PRIM_VOID) {
        <span class="hljs-comment" style="color:#8800;box-sizing: border-box;">// ignored</span>
    } <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">else</span> <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">if</span> (result<span class="hljs-variable" style="color:#66066;box-sizing: border-box;">.l</span> == <span class="hljs-literal" style="color:#06666;box-sizing: border-box;">NULL</span>) {
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">if</span> (dvmIsPrimitiveClass(returnType)) {
            dvmThrowNullPointerException(<span class="hljs-string" style="color:#0880;box-sizing: border-box;">"null result when primitive expected"</span>);
        }
        pResult->l = <span class="hljs-literal" style="color:#06666;box-sizing: border-box;">NULL</span>;
    } <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">else</span> {
        <span class="hljs-keyword" style="color:#0088;box-sizing: border-box;">if</span> (!dvmUnboxPrimitive(result<span class="hljs-variable" style="color:#66066;box-sizing: border-box;">.l</span>, returnType, pResult)) {
            dvmThrowClassCastException(result<span class="hljs-variable" style="color:#66066;box-sizing: border-box;">.l</span>->clazz, returnType);
        }
    }
}</code><ul class="pre-numbering" style="box-sizing: border-box; position: absolute; width: 50px; top: 0px; left: 0px; margin: 0px; padding: 6px 0px 40px; border-right-width: 1px; border-right-style: solid; border-right-color: rgb(221, 221, 221); list-style: none; text-align: right; background-color: rgb(238, 238, 238);"><li style="box-sizing: border-box; padding: 0px 5px;">1</li><li style="box-sizing: border-box; padding: 0px 5px;">2</li><li style="box-sizing: border-box; padding: 0px 5px;">3</li><li style="box-sizing: border-box; padding: 0px 5px;">4</li><li style="box-sizing: border-box; padding: 0px 5px;">5</li><li style="box-sizing: border-box; padding: 0px 5px;">6</li><li style="box-sizing: border-box; padding: 0px 5px;">7</li><li style="box-sizing: border-box; padding: 0px 5px;">8</li><li style="box-sizing: border-box; padding: 0px 5px;">9</li><li style="box-sizing: border-box; padding: 0px 5px;">10</li><li style="box-sizing: border-box; padding: 0px 5px;">11</li><li style="box-sizing: border-box; padding: 0px 5px;">12</li><li style="box-sizing: border-box; padding: 0px 5px;">13</li><li style="box-sizing: border-box; padding: 0px 5px;">14</li><li style="box-sizing: border-box; padding: 0px 5px;">15</li><li style="box-sizing: border-box; padding: 0px 5px;">16</li><li style="box-sizing: border-box; padding: 0px 5px;">17</li><li style="box-sizing: border-box; padding: 0px 5px;">18</li><li style="box-sizing: border-box; padding: 0px 5px;">19</li><li style="box-sizing: border-box; padding: 0px 5px;">20</li><li style="box-sizing: border-box; padding: 0px 5px;">21</li><li style="box-sizing: border-box; padding: 0px 5px;">22</li><li style="box-sizing: border-box; padding: 0px 5px;">23</li><li style="box-sizing: border-box; padding: 0px 5px;">24</li><li style="box-sizing: border-box; padding: 0px 5px;">25</li><li style="box-sizing: border-box; padding: 0px 5px;">26</li><li style="box-sizing: border-box; padding: 0px 5px;">27</li><li style="box-sizing: border-box; padding: 0px 5px;">28</li><li style="box-sizing: border-box; padding: 0px 5px;">29</li><li style="box-sizing: border-box; padding: 0px 5px;">30</li><li style="box-sizing: border-box; padding: 0px 5px;">31</li><li style="box-sizing: border-box; padding: 0px 5px;">32</li><li style="box-sizing: border-box; padding: 0px 5px;">33</li><li style="box-sizing: border-box; padding: 0px 5px;">34</li><li style="box-sizing: border-box; padding: 0px 5px;">35</li><li style="box-sizing: border-box; padding: 0px 5px;">36</li><li style="box-sizing: border-box; padding: 0px 5px;">37</li><li style="box-sizing: border-box; padding: 0px 5px;">38</li><li style="box-sizing: border-box; padding: 0px 5px;">39</li><li style="box-sizing: border-box; padding: 0px 5px;">40</li><li style="box-sizing: border-box; padding: 0px 5px;">41</li><li style="box-sizing: border-box; padding: 0px 5px;">42</li><li style="box-sizing: border-box; padding: 0px 5px;">43</li><li style="box-sizing: border-box; padding: 0px 5px;">44</li><li style="box-sizing: border-box; padding: 0px 5px;">45</li><li style="box-sizing: border-box; padding: 0px 5px;">46</li><li style="box-sizing: border-box; padding: 0px 5px;">47</li><li style="box-sizing: border-box; padding: 0px 5px;">48</li><li style="box-sizing: border-box; padding: 0px 5px;">49</li><li style="box-sizing: border-box; padding: 0px 5px;">50</li><li style="box-sizing: border-box; padding: 0px 5px;">51</li><li style="box-sizing: border-box; padding: 0px 5px;">52</li><li style="box-sizing: border-box; padding: 0px 5px;">53</li><li style="box-sizing: border-box; padding: 0px 5px;">54</li><li style="box-sizing: border-box; padding: 0px 5px;">55</li><li style="box-sizing: border-box; padding: 0px 5px;">56</li><li style="box-sizing: border-box; padding: 0px 5px;">57</li><li style="box-sizing: border-box; padding: 0px 5px;">58</li><li style="box-sizing: border-box; padding: 0px 5px;">59</li><li style="box-sizing: border-box; padding: 0px 5px;">60</li><li style="box-sizing: border-box; padding: 0px 5px;">61</li><li style="box-sizing: border-box; padding: 0px 5px;">62</li><li style="box-sizing: border-box; padding: 0px 5px;">63</li><li style="box-sizing: border-box; padding: 0px 5px;">64</li><li style="box-sizing: border-box; padding: 0px 5px;">65</li><li style="box-sizing: border-box; padding: 0px 5px;">66</li><li style="box-sizing: border-box; padding: 0px 5px;">67</li><li style="box-sizing: border-box; padding: 0px 5px;">68</li><li style="box-sizing: border-box; padding: 0px 5px;">69</li><li style="box-sizing: border-box; padding: 0px 5px;">70</li><li style="box-sizing: border-box; padding: 0px 5px;">71</li><li style="box-sizing: border-box; padding: 0px 5px;">72</li><li style="box-sizing: border-box; padding: 0px 5px;">73</li><li style="box-sizing: border-box; padding: 0px 5px;">74</li><li style="box-sizing: border-box; padding: 0px 5px;">75</li><li style="box-sizing: border-box; padding: 0px 5px;">76</li><li style="box-sizing: border-box; padding: 0px 5px;">77</li><li style="box-sizing: border-box; padding: 0px 5px;">78</li><li style="box-sizing: border-box; padding: 0px 5px;">79</li><li style="box-sizing: border-box; padding: 0px 5px;">80</li><li style="box-sizing: border-box; padding: 0px 5px;">81</li><li style="box-sizing: border-box; padding: 0px 5px;">82</li><li style="box-sizing: border-box; padding: 0px 5px;">83</li><li style="box-sizing: border-box; padding: 0px 5px;">84</li><li style="box-sizing: border-box; padding: 0px 5px;">85</li><li style="box-sizing: border-box; padding: 0px 5px;">86</li><li style="box-sizing: border-box; padding: 0px 5px;">87</li><li style="box-sizing: border-box; padding: 0px 5px;">88</li><li style="box-sizing: border-box; padding: 0px 5px;">89</li><li style="box-sizing: border-box; padding: 0px 5px;">90</li><li style="box-sizing: border-box; padding: 0px 5px;">91</li><li style="box-sizing: border-box; padding: 0px 5px;">92</li><li style="box-sizing: border-box; padding: 0px 5px;">93</li></ul>


原文地址： http://blog.csdn.net/yzzst/article/details/47913867

Omni-Space
关注
专栏目录
Android热更新技术的研究与实现(一)
Tomcat的Tom
10-18 3万+
1——必备引言——本文因为篇幅较长，可能会有错别字出现，望见谅。第一部分重点是将当下热门的热更新方案实现之后再研究，第二部分则是自己动手实现一个自己的热更新框架。Android热更新技术的研究与实现之研究篇———概念讲解——–热更新 相关概念这个词出现的时间已经很久了，感觉现在要找工作才来看是晚了不少，但是好东西什么时候学习都不晚的。 今天看到一句话，和大家分享下，人一生有三样东西是别人抢不走
20道Android工程师面试必问题，看这一篇就够了！
m0_56228922的博客
05-11 722
前言 最近，有同学参加阿里云的面试，被问到：如果是MySQL引起的CPU消耗过大，你会如何优化？他说，这个问题他第一次遇到，当时一头雾水，不知道该如何回答，还好他当时机制，说MySQL底层不是他研究的重点，所以面试官没有再深入这块~~~ 因此，我们在网上找到一篇能够解答该问题的文章，希望能够帮助到各位同学。 第一阶段：Android 基础知识回顾： 回顾Android 开发编程，深入理解Android系统原理和层次结构，深入分析Handler源码和原理； 回顾Java，C/C++，Kotlin、dar
Xposed初试——Hook方法
lemisky的博客
08-28 3195
接着昨天的，上一篇 Xposed入门教程 public void handleLoadPackage(XC_LoadPackage.LoadPackageParam lpparam) throws Throwable { String pack = lpparam.packageName; if ("org.foyou.bbb".equals(pack)...
XposedHookMethods
03-05 275
public class Main implements IXposedHookLoadPackage { /* 拦截方法一： 实现hook操作：使用hook类的名称进行内部查找 hook_method(类型，类加载器，方法名，参数类型和调用 ) 类加载器 作用：将java类加载到java虚拟机 Object... 作用：...
Android逆向分析之Xposed的hook技术
jiaonizuoren的博客
04-29 806
Android逆向工程里常用到的工具除了的dex2jar，jd-gui, Apktool之外还有一个Xposed。 这个工具是一个在不修改APK的情况下，影响其运行过程的服务框架。可以根据自己的需求编写模块，让模块控制目标应用的运行。 因为本人也是新手，对于Xposed用法还有很多的不熟悉，所以只对其hook技术进行简单的介绍，并让hook技术应用到以后的逆向分析工程中。 至于什么是hook...
Xposed Hook不到类报错以及Xposed的Hook方法讲解
最新发布
qq_42356008的博客
10-17 3766
介绍了Xposed hook不到类方法的解决方案，和Xposed的常用hook类的介绍
xposed hook 静态函数_开源Hook框架-epic-实现浅析
weixin_39916355的博客
11-24 402
epic是weishu大神开源的一个Hook框架，支持ART上的Java方法HOOK。实现原理：http://weishu.me/2017/11/23/dexposed-on-art/本文走马观花一下。epic相当于ART上的Dexposed，所以也是Xposed-Style Method Hook。从DexposedBridge.findAndHookMethod开始跟踪代码：取出最后一个参数c...
安卓开发陀螺仪！首发10万字Android开发实战文档，进阶学习资料！
chayel123的博客
01-16 463
Gradle是什么？ Gradle是一种构建语言，目前是Android的默认构建工具，我们编写的编译脚本，其实就是玩Gradle的API，所以从它更底层的意义上看，是一个编程框架。 因为涉及的内容很多没法一两篇文章就介绍详细清楚，方便起见我用PPT图片的形式简单介绍一下。如果需要更详细了解学习的朋友可以看文末。 第一阶段：Android 基础知识回顾： 回顾Android 开发编程，深入理解Android系统原理和层次结构，深入分析Handler源码和原理； 回顾Java，C/C++，Kotlin、dar
android开发常用组件和第三方库（二）
watertekhqx的博客
05-09 7191
都是在github上开源的项目，覆盖面非常之广，有它在手android开发无忧
java hot methord_Java DexposedBridge.findAndHookMethod方法代碼示例
weixin_30813385的博客
02-24 365
本文整理匯總了Java中com.taobao.android.dexposed.DexposedBridge.findAndHookMethod方法的典型用法代碼示例。如果您正苦於以下問題：Java DexposedBridge.findAndHookMethod方法的具體用法？Java DexposedBridge.findAndHookMethod怎麽用？Java DexposedBridge...
XPosed解析--XposedBridge--main分析
android菜鸟的专栏
07-02 1727
XposedBridge是Xposed框架替代ZygoteInit的文件，其中main方式是其入口，分析main方法可以更好的理解Xposed的运行模式，下面就来分析一下此函数。 [code="java"] private static void main(String[] args) { // the class the VM has been created for or nu...
Xposed学习二：实现机制
vendanner
08-31 1005
在上一篇我们学习了如何在AS中创建Xposed模块，本篇来分析下官方教程中redClock的实现原理。本系列文章基于version-51 public void handleLoadPackage(XC_LoadPackage.LoadPackageParam lpparam) throws Throwable { if(!lpparam.packageName.equals
Android Hook框架Xposed原理与源代码分析
12-17 1091
1 Introduction 1.1 概述 Xposed是GitHUB上rovo89大大设计的一个针对Android平台的动态劫持项目，通过替换/system/bin/app_process程序控制zygote进程，使得app_process在启动过程中会加载XposedBridge.jar这个jar包，从而完成对Zygote进程及其创建的Dalvik虚拟机的劫持。与采取传统的Inhook
Xposed拦截抽象方法
weixin_34258782的博客
01-03 2186
XposeHelpers提供了一些辅助方法，我们可以使用findAndHookXXX：查找并Hook方法与构造方法。而且只能Hook方法与构造方法，不能Hook接口和抽象方法。如果直接拦截抽象方法，会出现下列错误： 1、直接使用findAndHookMethod拦截抽象方法 //unregisterBiz方法为LongLinkSyncService的抽象方法 XposedHelpers.findA...
Android Hook框架Xposed详解
热门推荐
我的专栏
01-28 1万+
1 Introduction 1.1  概述 Xposed 是 GitHUB 上 rovo89 大大设计的一个针对 Android 平台的动态劫持项目，通过替换 /system/bin/app_process 程序控制 zygote 进程，使得 app_process 在启动过程中会加载 XposedBridge.jar 这个 jar 包，从而完成对系统应用的劫持。
Xposed笔记（一）Xposed初识.续
拖延癌患者自愈小记
07-20 3720
Xposed初识
Android中免Root实现Hook的Dexposed框架实现原理解析以及如何实现应用的热修复
hgfujffg的博客
02-22 1925
Android中免Root实现Hook的Dexposed框架实现原理解析以及如何实现应用的热修复
Xposed源码编译与Android系统集成指南
Xposed自3.0版本后，其安装方式发生了变化，不再直接通过apk和zip文件进行安装，而是需要通过源码编译和系统集成来实现。 首先，了解编译Xposed源码的准备工作。这包括确保你的电脑运行的是Ubuntu 14.04操作系统，...
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值