本帖最后由 新手957695 于 2026-10-14 16:06 编辑
财务共享应用(com.tyj.cwgx)在 vivo 设备(Android 16, SDK 36)上启动时闪退,进程存活仅 1 秒,连续崩溃 3 次。
最终调用到libsangforsdk.so,hook时出现崩溃。
android.app.Application.attach()
↓
android.app.Instrumentation.newApplication()
↓
com.sangfor.classloaderhook.HookedApplication.attachBaseContext()
↓
com.sangfor.sdk.MobileSecuriyHolder.init()
↓
com.sangfor.sdk.SFSecuritySDK.loadSDK()
↓
com.sangfor.sdk.SFSecuritySDK.loadNative()
↓
com.sangfor.sdk.sandbox.SandboxManager.initSandbox()
↓
com.sangfor.sdk.sandbox.business.file.jni.CryptoFilesManager.installFileHook()
↓
com.sangfor.sdk.sandbox.business.file.jni.CryptoFilesManager.nativeInitCryptoFiles() JNI
↓
art::JNI::FindClass("Landroid/media/MediaPlayer;")
↓
❌ NoSuchMethodError: MediaPlayer._setDataSource(FileDescriptor, long, long)
↓
- PC 000000000007be9c/apex/com.android.runtime/1ib64/bionic/libc.so (abort+156) (BuildId: 1e9472d6601a493e5706aa0852e720d8)pc 0000000000946fd4apex/com.android.art/1ib64/1ibart.so(art::Runtime:tAbort(char const*)+1460) (BuildId:40f1bb71£767e8fee32750036e9e2b38)PC000000000001a5f0/apex/com.android.art/lib64/libbase.so(android::base::SetAborter(std:: 1::function<void (char const*)>&&)::$ 0::invoke (charPo00000000000103ac/apex/com.android.art/lib64/libbase.so(android::base::LogMessage::~LogMessage()+940)(BuildId:ea741a8d7de142b783c83b60c7739bb6)PC 0000000000244828/apex/com.android.art/lib64/libart.so(art::Thread::AssertNoPendingException()const+584) (BuildId:40f1bb71f767e8fee32750036e9e2b38)05PC 00000000003b7a84/apex/com.android.art/lib64/libart.so(art::ClassLinker::FindClass(art::Thread*, charconstunsignedlong, art::Handle<art::mirror::cla#06PC 00000000003dd524/apex/com.android.art/lib64/libart.so(art::JNI<false>::Findclass(_JNIEnv*,char co+1204) (BuiTd: 40f1bb71£767e8fee32750036e9e2b38)0PC 0000000001668290data/app/~~mhFnfm7QTkxzMsSBg8ynSg==/com.tyj.cwgx-Xw_hVRpROUW8zd77UaCWng=ib/ar/libsangforsdk.soBuildId: 282354898ba52c52c3=828fc0628b79ab373c6b8)#08PC0000000001667ee0/data/app/~~mhFnfm7QTkxzMsSBg6ynSg==/com.tyj.cwgx-Xw_hVRpROUW8zd77U=CWng==/lib/arm64beang(BuildId: 282354898ba52c52c3=828fc0628b79ab373c6b8)#09 pc 000000000164c304/data/app/~mhFnfm7QTkxzMsSBg8ynSg==/com.tyj.cwgx-Xw_hVRpROUW8zd77UaCWng==/lib/arm64/libsar(BuildId:282354898ba52c52c3e828fc0628b79ab373c6b8)
复制代码 |