mirror of
https://github.com/feicong/rom-course.git
synced 2025-08-29 02:35:20 +00:00
/home绝对路径改为~/
This commit is contained in:
feiocng
parent
001a20be0c
commit
dfa7362039
@ -501,7 +501,7 @@ make bootimage
|
||||
adb reboot bootloader
|
||||
|
||||
// 设置刷机包的路径到环境变量
|
||||
export ANDROID_PRODUCT_OUT=/home/king/android_src/mikrom_out/target/product/blueline
|
||||
export ANDROID_PRODUCT_OUT=~/android_src/mikrom_out/target/product/blueline
|
||||
|
||||
// 查询fastboot是否能成功看到设备
|
||||
fastboot devices
|
||||
@ -520,7 +520,7 @@ fastboot flashall -w
|
||||
adb reboot bootloader
|
||||
|
||||
// 进入编译结果的目录
|
||||
cd /home/king/android_src/mikrom_out/target/product/blueline
|
||||
cd ~/android_src/mikrom_out/target/product/blueline
|
||||
|
||||
// 单独刷入内核
|
||||
fastboot flash boot ./boot.img
|
||||
@ -1039,7 +1039,7 @@ LOG_FILE_PATH = os.path.join(ROOT, "push.log")
|
||||
MANIFEST_XML_PATH_NAME_RE = re.compile(r"<project\s+path=\"(?P<path>[^\"]+)\"\s+name=\"(?P<name>[^\"]+)\"\s+",
|
||||
re.DOTALL)
|
||||
# 设置源码路径
|
||||
SOURCE_CODE_ROOT = "/home/king/android_src/android12_r3/"
|
||||
SOURCE_CODE_ROOT = "~/android_src/android12_r3/"
|
||||
# 设置gitlab仓库的根目录分组
|
||||
REMOTE = "git@192.168.2.189:android12_r3/"
|
||||
manifest_xml_project_paths = []
|
||||
|
||||
@ -1603,7 +1603,7 @@ lunch aosp_blueline-userdebug
|
||||
// 多线程编译
|
||||
make -j$(nproc --all)
|
||||
// 设置刷机目录
|
||||
export ANDROID_PRODUCT_OUT=/home/king/android_src/mikrom_out/target/product/blueline
|
||||
export ANDROID_PRODUCT_OUT=~/android_src/mikrom_out/target/product/blueline
|
||||
// 手机重启进入bootloader
|
||||
adb reboot bootloader
|
||||
// 查看手机是否已经进入bootloader了
|
||||
|
||||
@ -665,14 +665,14 @@ adb reboot bootloader
|
||||
flashflash all -w
|
||||
|
||||
// 等待刷机完成，开始检查内置结果
|
||||
adb shell
|
||||
|
||||
adb shell
|
||||
|
||||
ls -all /system/lib |grep libmy
|
||||
|
||||
-rw-r--r-- 1 root root 153056 2023-03-09 21:25:52.000000000 +0800 libmysodemo.so
|
||||
|
||||
cd /system/framework/mysodemo/
|
||||
|
||||
|
||||
ls -all
|
||||
|
||||
-rw-r--r-- 1 root root 7937264 2023-03-09 20:58:40.000000000 +0800 mysodemo.jar
|
||||
@ -688,7 +688,7 @@ mysodemo.jar: Zip archive data
|
||||
protected void onCreate(Bundle savedInstanceState) {
|
||||
super.onCreate(savedInstanceState);
|
||||
setContentView(R.layout.activity_main);
|
||||
|
||||
|
||||
// 加载jar文件
|
||||
String jarPath = "/system/framework/mysodemo/mysodemo.jar";
|
||||
ClassLoader systemClassLoader=ClassLoader.getSystemClassLoader();
|
||||
@ -773,7 +773,7 @@ fKzQVKiWNTnDew==
|
||||
openssl x509 -inform DER -in chls.cer -text > d37a53cc.0
|
||||
|
||||
// 将证书拷贝到源码的系统证书目录
|
||||
cp d37a53cc.0 /home/king/android_src/mikrom12_gitlab/system/ca-certificates/files
|
||||
cp d37a53cc.0 ~/android_src/mikrom12_gitlab/system/ca-certificates/files
|
||||
```
|
||||
|
||||
除了这种转换方式，还有另一种更加简便的办法，首先将证书作为用户证书安装，直接将Charles导出的证书上传到手机，在手机中找到`Setting->Security->Encryption & credentials-> install a certificate`最后选中证书完成安装，然后来到用户证书目录` /data/misc/user/0/cacerts-added`中，刚刚导入的证书会被转换好作为用户证书放在这里，将其从手机中传出来，放入源码中的系统证书目录即可。如果你不知道哪个证书名对应你刚刚手动安装的证书，可以直接将全部证书都放入系统证书目录。
|
||||
@ -817,7 +817,7 @@ extracting public keys for embedding
|
||||
|
||||
```
|
||||
// 生成release.pk8
|
||||
/home/king/android_src/mikrom12_gitlab/development/tools/make_key releasekey '/C=US/ST=California/L=Mountain View/O=Android/OU=Android/CN=Android/emailAddress=android@android.com'
|
||||
~/android_src/mikrom12_gitlab/development/tools/make_key releasekey '/C=US/ST=California/L=Mountain View/O=Android/OU=Android/CN=Android/emailAddress=android@android.com'
|
||||
|
||||
// 将 DER 格式的 releasekey.pk8 私钥文件转换为 PEM 格式，并输出到 releasekey.pem 文件中
|
||||
openssl pkcs8 -inform DER -nocrypt -in releasekey.pk8 -out releasekey.pem
|
||||
@ -863,7 +863,7 @@ endif
|
||||
adb shell
|
||||
|
||||
// 切换到root权限
|
||||
su
|
||||
su
|
||||
|
||||
//查看设备信息内容中包括-key的
|
||||
cat /system/build.prop |grep "\-key"
|
||||
@ -956,7 +956,7 @@ int adb_commandline(int argc, const char** argv) {
|
||||
argv++;
|
||||
}
|
||||
...
|
||||
|
||||
|
||||
if (is_server) {
|
||||
// 首先检查是否要启用守护进程模式
|
||||
if (no_daemon || is_daemon) {
|
||||
@ -1063,7 +1063,7 @@ int adb_commandline(int argc, const char** argv) {
|
||||
return adb_send_emulator_command(argc, argv, serial);
|
||||
} else if (!strcmp(argv[0], "shell")) {
|
||||
return adb_shell(argc, argv);
|
||||
}
|
||||
}
|
||||
...
|
||||
}
|
||||
|
||||
@ -1116,7 +1116,7 @@ int main(int argc, char** argv) {
|
||||
int adbd_main(int server_port) {
|
||||
umask(0);
|
||||
signal(SIGPIPE, SIG_IGN);
|
||||
|
||||
|
||||
#if defined(__BIONIC__)
|
||||
...
|
||||
#endif
|
||||
@ -1314,6 +1314,6 @@ bool adbd_auth_verify(const char* token, size_t token_size, const std::string& s
|
||||
|
||||
将这个函数改为一律返回true，同样可以做到默认开启调试，无需再进行手动的授权。
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
@ -321,7 +321,7 @@ const void* ClassLinker::RegisterNative(
|
||||
前文简单介绍ROM插桩其实就是输出日志，找到了合适的时机，以及要输出的内容，最后就是输出日志即可。在函数`ClassLinker::RegisterNative`调用结束时插入日志输出如下
|
||||
|
||||
```c++
|
||||
#inclue
|
||||
#inclue
|
||||
const void* ClassLinker::RegisterNative(
|
||||
Thread* self, ArtMethod* method, const void* native_method) {
|
||||
...
|
||||
@ -536,7 +536,7 @@ public final class MikRomManager {
|
||||
|
||||
```java
|
||||
private void startOtherServices(@NonNull TimingsTraceAndSlog t) {
|
||||
|
||||
|
||||
...
|
||||
t.traceBegin("StartNetworkStatsService");
|
||||
try {
|
||||
@ -546,8 +546,8 @@ private void startOtherServices(@NonNull TimingsTraceAndSlog t) {
|
||||
reportWtf("starting NetworkStats Service", e);
|
||||
}
|
||||
t.traceEnd();
|
||||
|
||||
|
||||
|
||||
|
||||
t.traceBegin("StartMikRomManagerService");
|
||||
try {
|
||||
MikRomManagerService mikromService = new MikRomManagerService(context);
|
||||
@ -681,9 +681,9 @@ allow untrusted_app_25 mikrom_service:service_manager find;
|
||||
这时如果直接编译会出现下面的错误。
|
||||
|
||||
```
|
||||
FAILED: /home/king/android_src/mikrom_out/target/product/blueline/obj/FAKE/sepolicy_freeze_test_intermediates/sepolicy_freeze_test
|
||||
FAILED: ~/android_src/mikrom_out/target/product/blueline/obj/FAKE/sepolicy_freeze_test_intermediates/sepolicy_freeze_test
|
||||
/bin/bash -c "(diff -rq -x bug_map system/sepolicy/prebuilts/api/31.0/public system/sepolicy/public ) && (diff -rq -x bug_map system/sepolicy/prebui
|
||||
lts/api/31.0/private system/sepolicy/private ) && (touch /home/king/android_src/mikrom_out/target/product/blueline/obj/FAKE/sepolicy_freeze_test_int
|
||||
lts/api/31.0/private system/sepolicy/private ) && (touch ~/android_src/mikrom_out/target/product/blueline/obj/FAKE/sepolicy_freeze_test_int
|
||||
ermediates/sepolicy_freeze_test )"
|
||||
```
|
||||
|
||||
@ -699,7 +699,7 @@ SELinux: The following public types were found added to the policy without an en
|
||||
```
|
||||
adb shell
|
||||
|
||||
service list|grep mikrom
|
||||
service list|grep mikrom
|
||||
|
||||
// 成功查询到自定义的系统服务
|
||||
120 mikrom: [android.os.IMikRomManager]
|
||||
@ -1317,7 +1317,7 @@ private ParseResult<ParsingPackage> parseBaseApplication(ParseInput input,
|
||||
List<String> requestedPermissions = pkg.getRequestedPermissions();
|
||||
String addPermissionName = "android.permission.INTERNET";
|
||||
if (!requestedPermissions.contains(addPermissionName)){
|
||||
|
||||
|
||||
pkg.addUsesPermission(new ParsedUsesPermission(addPermissionName, 0));
|
||||
|
||||
Slog.w("mikrom","parseBaseApplication add android.permission.INTERNET " );
|
||||
|
||||
@ -117,7 +117,7 @@ bool initialize(bool zygote, bool startSystemServer, const char* className, int
|
||||
// 是否禁用xposed
|
||||
if (zygote && !isSafemodeDisabled() && detectSafemodeTrigger(shouldSkipSafemodeDelay()))
|
||||
disableXposed();
|
||||
|
||||
|
||||
if (isDisabled() || (!zygote && shouldIgnoreCommand(argc, argv)))
|
||||
return false;
|
||||
// 将Xposed JAR文件添加到应用程序或服务的类路径中
|
||||
@ -160,7 +160,7 @@ public final class XposedBridge {
|
||||
XposedBridge.main(args);
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
protected static void main(String[] args) {
|
||||
// 初始化Xposed框架和模块
|
||||
try {
|
||||
@ -205,7 +205,7 @@ private static final String INSTANT_RUN_CLASS = "com.android.tools.fd.runtime.Bo
|
||||
|
||||
// 加载模块列表
|
||||
static void loadModules() throws IOException {
|
||||
|
||||
|
||||
final String filename = BASE_DIR + "conf/modules.list";
|
||||
BaseService service = SELinuxHelper.getAppDataFileService();
|
||||
if (!service.checkFileExists(filename)) {
|
||||
@ -473,7 +473,7 @@ public class Module implements IHook {
|
||||
}
|
||||
return mGoal;
|
||||
}
|
||||
|
||||
|
||||
@Override
|
||||
public void onStart(Object app) {
|
||||
Log.i("dengrui", "Module is running...");
|
||||
@ -560,7 +560,7 @@ private void handleBindApplication(AppBindData data) {
|
||||
```cmake
|
||||
cmake_minimum_required(VERSION 3.18.1)
|
||||
// 设置dobby源码的目录
|
||||
set(DobbyHome /home/king/git_src/Dobby)
|
||||
set(DobbyHome ~/git_src/Dobby)
|
||||
enable_language(C ASM)
|
||||
|
||||
include_directories(
|
||||
@ -570,17 +570,17 @@ include_directories(
|
||||
|
||||
project("mydobby")
|
||||
|
||||
add_library(
|
||||
add_library(
|
||||
mydobby
|
||||
SHARED
|
||||
native-lib.cpp
|
||||
utils/parse.cpp)
|
||||
|
||||
find_library(
|
||||
find_library(
|
||||
log-lib
|
||||
log)
|
||||
|
||||
target_link_libraries(
|
||||
target_link_libraries(
|
||||
mydobby
|
||||
dobby
|
||||
${log-lib})
|
||||
@ -603,7 +603,7 @@ SET_OPTION(DOBBY_DEBUG ON)
|
||||
SET_OPTION(DOBBY_GENERATE_SHARED ON)
|
||||
SET_OPTION(Plugin.LinkerLoadCallback OFF)
|
||||
|
||||
add_subdirectory(/home/king/git_src/Dobby dobby.build)
|
||||
add_subdirectory(~/git_src/Dobby dobby.build)
|
||||
|
||||
if(${CMAKE_ANDROID_ARCH_ABI} STREQUAL "arm64-v8a")
|
||||
add_definitions(-DCORE_SO_NAME="${LIBRARY_NAME}")
|
||||
|
||||
@ -65,7 +65,7 @@ cn.mik.nativedemo D/native-lib: my ppid=1053
|
||||
然后查看该进程`id`对应哪个进程。
|
||||
|
||||
```
|
||||
adb shell
|
||||
adb shell
|
||||
ps -e|grep 1053
|
||||
|
||||
// 输出如下
|
||||
@ -152,7 +152,7 @@ ptrace_stop
|
||||
```
|
||||
// 附加前
|
||||
S 1027 1027 0 0 -1 1077952832 29093 4835 0 0 81 9 0 0 20 0 19 0 424763 15088168960 24716 18446744073709551615 1 1 0 0 0 0 4612 1 1073775864 0 0 0 17 0 0 0 0 0 0 0 0 0 0 0 0 0 0
|
||||
|
||||
|
||||
// 附加后
|
||||
t 1027 1027 0 0 -1 1077952832 29405 4835 0 0 81 9 0 0 20 0 19 0 424763 15088168960 24987 18446744073709551615 1 1 0 0 0 0 4612 1 1073775864 0 0 0 17 1 0 0 0 0 0 0 0 0 0 0 0 0 0
|
||||
```
|
||||
@ -449,7 +449,7 @@ Java_cn_mik_nativedemo_MainActivity_stringFromJNI(
|
||||
安装该测试样例后，接着将`ndk`中的`gdbserver`传入手机中。命令如下。
|
||||
|
||||
```
|
||||
adb push '/home/king/Android/Sdk/ndk/23.1.7779620/prebuilt/android-arm64/gdbserver/gdbserver' /data/local/tmp/
|
||||
adb push '~/Android/Sdk/ndk/23.1.7779620/prebuilt/android-arm64/gdbserver/gdbserver' /data/local/tmp/
|
||||
|
||||
adb shell
|
||||
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user