Comments (5)
pig837
commented on August 29, 2024
1
In my case,
- Use Magisk + Zygisk + Shamiko (~ Android13: Worked, Android 14: Need to test)
- Use KernelSU (GKI Only, Android 12 or 12.1(12L) Only)
: KernelSU + Android 13+ (App Crashed)
: Non-GKI: Unpredictable
- APatch: I didn't use it, so i don't know.
from frida-java-bridge.
matbrik
commented on August 29, 2024
It looks like is is a problem related to the garbage collector, with frida disabling GarbageCollector::Run() prevents the crashes
from frida-java-bridge.
TheDauntless
commented on August 29, 2024
Adding that two of my devices (Android 12 and Android 14) have the same issue, both of them have /apex/com.android.art@341711000 and did not have issues before.
from frida-java-bridge.
matbrik
commented on August 29, 2024
Currently the only working workaround is hooking the onLeave of the RunPhases of the art GC and refresh all the hooks.
I've tried to do some debugging and commit diffing in libart but I couldn't find anything
edit: this solution crashes the process after a while
from frida-java-bridge.
matbrik
commented on August 29, 2024
I have tried to test frida-java-bridge but on a Pixel 6 (14.0.0 (AP2A.240605.024, Jun 2024) ) with the latest Google Play system update( open settings->search "Play system"->Google Play system update->check for update)
with the latest frida-server and frida-tools(both 16.4.2) on my mac
this repo cloned
exported the correct env variables
$ make check
[*] Running the test suite with optimizations disabled (interpreter mode).
/Users/foo/Downloads/Xcode.app/Contents/Developer/usr/bin/make -C test deploy
d8 \
--output build/tests.zip \
--classpath /Users/foo/Library/Android/sdk/platforms/android-33/android.jar \
--min-api 33 \
build/tests.jar
cd build && unzip tests.zip classes.dex
Archive: tests.zip
inflating: classes.dex
mv build/classes.dex build/tests.dex
adb shell "rm -rf /data/local/tmp/frida-java-bridge-tests && mkdir -p /data/local/tmp/frida-java-bridge-tests"
adb push build/arm64-v8a/runner build/tests.dex build/frida-java-bridge.js build/arm64-v8a/libartpalette.so /data/local/tmp/frida-java-bridge-tests
build/arm64-v8a/runner: 1 file pushed, 0 skipped. 90.3 MB/s (6644256 bytes in 0.070s)
build/tests.dex: 1 file pushed, 0 skipped. 270.4 MB/s (312744 bytes in 0.001s)
build/frida-java-bridge.js: 1 file pushed, 0 skipped. 318.0 MB/s (352730 bytes in 0.001s)
build/arm64-v8a/libartpalette.so: 1 file pushed, 0 skipped. 66.0 MB/s (4680 bytes in 0.000s)
4 files pushed, 0 skipped. 49.0 MB/s (7314410 bytes in 0.142s)
/Users/foo/Downloads/Xcode.app/Contents/Developer/usr/bin/make -C test run
adb shell "LD_PRELOAD=libart.so LD_LIBRARY_PATH='/apex/com.android.runtime/lib64:/apex/com.android.art/lib64:/data/local/tmp/frida-java-bridge-tests' /data/local/tmp/frida-java-bridge-tests/runner "
CANNOT LINK EXECUTABLE "/data/local/tmp/frida-java-bridge-tests/runner": cannot locate symbol "_ZN3fmt2v76detail7vformatENS0_17basic_string_viewIcEENS0_11format_argsE" referenced by "/apex/com.android.art/lib64/libart.so"...
make[2]: *** [run] Error 1
make[1]: *** [check-run] Error 2
make: *** [check] Error 2
from frida-java-bridge.
Related Issues (20)
- hook openjdk 17 on linux will carsh HOT 2
- Error in Java.deoptimizeEverything "no Instrumentation" HOT 1
- Java method hook do not take effect in Android 14
- Efficient way to get a class reference from a given instance
- [Android] Method Instrumentation Causes StackOverflow and App Crash HOT 2
- Error: java.lang.ClassNotFoundException: Didn't find class on path HOT 1
- art_quick_trampolines are not intercepted (Android 14, S22) when using optimized tests
- bug in function recompileExceptionClearForArm
- bug in function instrumentArtMethodInvocationFromInterpreter HOT 2
- enable_spawn_gating occasionally crashes
- global references used in enumerateLoadedClassesArt HOT 1
- Method with argument of type array of array cannot be instrumented HOT 2
- An error occurred when starting frida-server on Android HOT 3
- Function previously hooked then no longer intercepted HOT 2
- Unable to make thread_from_jni_environment() helper for the current architecture HOT 1
- The application freezes after replacing the method implementation HOT 1
- [Feature] Add annotations to Java.registerClass
- Error: Unable to parse ART internals
- Hooking functions on JDK17 (HotSpot) crashes the instrumented application
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from frida-java-bridge.