seandroid 调用apk过程

frameworks/base/core/java/com/android/internal/os/ZygoteConnection.java

1. void run() throws ZygoteInit.MethodAndArgsCaller ：始终从socket读命令行。（ void run() throws ZygoteInit.MethodAndArgsCaller ）

2. pid = Zygote.forkAndSpecialize(parsedArgs.uid, parsedArgs.gid, parsedArgs.gids,
                    parsedArgs.debugFlags, rlimits, parsedArgs.mountExternal, parsedArgs.seInfo,
                    parsedArgs.niceName);

3.

./frameworks/base/cmds/app_process/app_main.cpp

frameworks/base/core/java/android/os/Process.java socket的客户端

startActivity

startActivityAsUser

handleIncomingUser

getContentProvider

getContentProviderImpl

startProcessLocked

Process.start

startViaZygote

zygoteSendArgsAndGetResult     发命令到readArgumentList()