MiJack
commented
7 years ago The code is below:
package com.mijack.sootdemo;
import soot.*;
import soot.jimple.*;
import soot.options.Options;
import java.util.Collections;
import java.util.Iterator;
import java.util.Map;
public class Main {
public static final String APK = ...;
public static final String ANDROID_JAR = ...;
public static void main(String[] args) {
init();
Scene.v().addBasicClass("java.io.PrintStream", SootClass.SIGNATURES);
Scene.v().addBasicClass("java.lang.System", SootClass.SIGNATURES);
PackManager.v().getPack("jtp").add(new Transform("jtp.demo", new BodyTransformer() {
@Override
protected void internalTransform(final Body b, String s, Map<String, String> map) {
final PatchingChain<Unit> units = b.getUnits();
System.out.println(b.getMethod().getSignature());
//important to use snapshotIterator here
for (Iterator<Unit> iter = units.snapshotIterator(); iter.hasNext(); ) {
final Unit u = iter.next();
u.apply(/*new PrintStmtSwitch() {}*/ new AbstractStmtSwitch() {
@Override
public void caseIfStmt(IfStmt stmt) {
System.out.println("find a if statement");
Local tmpRef = addTmpRef(b);
Local tmpString = addTmpString(b);
// insert "tmpRef = java.lang.System.out;"
units.insertBefore(Jimple.v().newAssignStmt(
tmpRef, Jimple.v().newStaticFieldRef(
Scene.v().getField("<java.lang.System: java.io.PrintStream out>").makeRef())), u);
// insert "tmpLong = 'HELLO';"
units.insertBefore(Jimple.v().newAssignStmt(tmpString,
StringConstant.v("GotoStmt")), u);
// insert "tmpRef.println(tmpString);"
SootMethod toCall = Scene.v().getSootClass("java.io.PrintStream").getMethod("void println(java.lang.String)");
units.insertBefore(Jimple.v().newInvokeStmt(
Jimple.v().newVirtualInvokeExpr(tmpRef, toCall.makeRef(), tmpString)), u);
//check that we did not mess up the Jimple
b.validate();
}
} );
}
}
}));
PackManager.v().runPacks();
PackManager.v().writeOutput();
}
private static Local addTmpRef(Body body) {
Local tmpRef = Jimple.v().newLocal("tmpRef", RefType.v("java.io.PrintStream"));
body.getLocals().add(tmpRef);
return tmpRef;
}
private static Local addTmpString(Body body) {
Local tmpString = Jimple.v().newLocal("tmpString", RefType.v("java.lang.String"));
body.getLocals().add(tmpString);
return tmpString;
}
private static void init() {
Options.v().set_allow_phantom_refs(true);
Options.v().set_prepend_classpath(true);
Options.v().set_validate(true);
Options.v().set_whole_program(true);
Options.v().set_force_overwrite(true);
Options.v().set_output_format(Options.output_format_dex);
Options.v().set_process_dir(Collections.singletonList(APK));
Options.v().set_android_jars(ANDROID_JAR);
Options.v().set_src_prec(Options.src_prec_apk);
Options.v().set_soot_classpath(ANDROID_JAR);
Scene.v().loadNecessaryClasses();
}
}
lorinbeer
wishma2013
ericbodden
codeMinter
mbenz89
Hi,guys! I met some problem about instrumented Android app.After instrumenting Android app using Soot and signing it, I got an app named app-after-soot.apk, but got the error named INSTALL_PARSE_FAILED_UNEXPECTED_EXCEPTION using adb to install it.However , after decompiling and repackaging the apk
app-after-soot.apkusing ApkTool and signing the output apk ,I can install the output apk. So ,does Soot have some bugs on the dex output format or my code have some errors? Thanks!