├── .gitignore ├── .idea ├── .gitignore ├── compiler.xml ├── deploymentTargetDropDown.xml ├── gradle.xml └── misc.xml ├── README.md ├── app ├── .gitignore ├── build.gradle ├── proguard-rules.pro └── src │ ├── androidTest │ └── java │ │ └── com │ │ └── ptrain │ │ └── nativebitmap │ │ └── ExampleInstrumentedTest.kt │ ├── main │ ├── AndroidManifest.xml │ ├── java │ │ └── com │ │ │ └── ptrain │ │ │ └── nativebitmap │ │ │ └── MainActivity.kt │ └── res │ │ ├── drawable-v24 │ │ └── ic_launcher_foreground.xml │ │ ├── drawable │ │ ├── android_app.png │ │ └── ic_launcher_background.xml │ │ ├── layout │ │ └── activity_main.xml │ │ ├── mipmap-anydpi-v26 │ │ ├── ic_launcher.xml │ │ └── ic_launcher_round.xml │ │ ├── mipmap-hdpi │ │ ├── ic_launcher.webp │ │ └── ic_launcher_round.webp │ │ ├── mipmap-mdpi │ │ ├── ic_launcher.webp │ │ └── ic_launcher_round.webp │ │ ├── mipmap-xhdpi │ │ ├── ic_launcher.webp │ │ └── ic_launcher_round.webp │ │ ├── mipmap-xxhdpi │ │ ├── ic_launcher.webp │ │ └── ic_launcher_round.webp │ │ ├── mipmap-xxxhdpi │ │ ├── ic_launcher.webp │ │ └── ic_launcher_round.webp │ │ ├── values-night │ │ └── themes.xml │ │ ├── values │ │ ├── colors.xml │ │ ├── strings.xml │ │ └── themes.xml │ │ └── xml │ │ ├── backup_rules.xml │ │ └── data_extraction_rules.xml │ └── test │ └── java │ └── com │ └── ptrain │ └── nativebitmap │ └── ExampleUnitTest.kt ├── build.gradle ├── gradle.properties ├── gradle └── wrapper │ ├── gradle-wrapper.jar │ └── gradle-wrapper.properties ├── gradlew ├── gradlew.bat ├── nativebitmap ├── .gitignore ├── build.gradle ├── consumer-rules.pro ├── proguard-rules.pro └── src │ └── main │ ├── AndroidManifest.xml │ ├── cpp │ ├── CMakeLists.txt │ ├── hook │ │ ├── bitmap_hook.cpp │ │ └── bitmap_hook.h │ ├── log │ │ └── logger.h │ └── native_bitmap.cpp │ └── java │ └── com │ └── ptrain │ └── nativebitmap │ └── NativeBitmap.kt └── settings.gradle /.gitignore: -------------------------------------------------------------------------------- 1 | *.iml 2 | .gradle 3 | /local.properties 4 | /.idea/caches 5 | /.idea/libraries 6 | /.idea/modules.xml 7 | /.idea/workspace.xml 8 | /.idea/navEditor.xml 9 | /.idea/assetWizardSettings.xml 10 | .DS_Store 11 | /build 12 | /captures 13 | .externalNativeBuild 14 | .cxx 15 | local.properties 16 | -------------------------------------------------------------------------------- /.idea/.gitignore: -------------------------------------------------------------------------------- 1 | # Default ignored files 2 | /shelf/ 3 | /workspace.xml 4 | -------------------------------------------------------------------------------- /.idea/compiler.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | -------------------------------------------------------------------------------- /.idea/deploymentTargetDropDown.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | -------------------------------------------------------------------------------- /.idea/gradle.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 19 | 20 | -------------------------------------------------------------------------------- /.idea/misc.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 10 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # Allocate Bitmap In Native Heap 2 | 3 | support Android 6.x - 7.x 4 | 5 | 参考 https://juejin.cn/post/7096059314233671694 6 | 7 | 但是原文有各种问题，比如 Android5.x 的释放逻辑并不如文中所说 8 | 9 | 此版本适配 Andorid 6.0 - 7.1 10 | 11 | 具体原理和原文大差不差，有一些细节问题 12 | 13 | 目前还在测试中，不确定是否存在稳定性问题，如要线上使用，需自测(顺便 star 一下呗) 14 | 15 | 注意 `shadowhook 只支持 armeabi-v7a arm64-v8a` 16 | -------------------------------------------------------------------------------- /app/.gitignore: -------------------------------------------------------------------------------- 1 | /build -------------------------------------------------------------------------------- /app/build.gradle: -------------------------------------------------------------------------------- 1 | plugins { 2 | id 'com.android.application' 3 | id 'org.jetbrains.kotlin.android' 4 | } 5 | 6 | android { 7 | namespace 'com.ptrain.nativebitmap' 8 | compileSdk 32 9 | 10 | defaultConfig { 11 | applicationId "com.ptrain.nativebitmap" 12 | minSdk 21 13 | targetSdk 32 14 | versionCode 1 15 | versionName "1.0" 16 | 17 | testInstrumentationRunner "androidx.test.runner.AndroidJUnitRunner" 18 | } 19 | 20 | buildTypes { 21 | release { 22 | minifyEnabled false 23 | proguardFiles getDefaultProguardFile('proguard-android-optimize.txt'), 'proguard-rules.pro' 24 | } 25 | } 26 | compileOptions { 27 | sourceCompatibility JavaVersion.VERSION_1_8 28 | targetCompatibility JavaVersion.VERSION_1_8 29 | } 30 | kotlinOptions { 31 | jvmTarget = '1.8' 32 | } 33 | } 34 | 35 | dependencies { 36 | implementation project(":nativebitmap") 37 | implementation 'androidx.core:core-ktx:1.7.0' 38 | implementation 'androidx.appcompat:appcompat:1.5.1' 39 | implementation 'com.google.android.material:material:1.7.0' 40 | implementation 'androidx.constraintlayout:constraintlayout:2.1.4' 41 | testImplementation 'junit:junit:4.13.2' 42 | androidTestImplementation 'androidx.test.ext:junit:1.1.4' 43 | androidTestImplementation 'androidx.test.espresso:espresso-core:3.5.0' 44 | } -------------------------------------------------------------------------------- /app/proguard-rules.pro: -------------------------------------------------------------------------------- 1 | # Add project specific ProGuard rules here. 2 | # You can control the set of applied configuration files using the 3 | # proguardFiles setting in build.gradle. 4 | # 5 | # For more details, see 6 | # http://developer.android.com/guide/developing/tools/proguard.html 7 | 8 | # If your project uses WebView with JS, uncomment the following 9 | # and specify the fully qualified class name to the JavaScript interface 10 | # class: 11 | #-keepclassmembers class fqcn.of.javascript.interface.for.webview { 12 | # public *; 13 | #} 14 | 15 | # Uncomment this to preserve the line number information for 16 | # debugging stack traces. 17 | #-keepattributes SourceFile,LineNumberTable 18 | 19 | # If you keep the line number information, uncomment this to 20 | # hide the original source file name. 21 | #-renamesourcefileattribute SourceFile -------------------------------------------------------------------------------- /app/src/androidTest/java/com/ptrain/nativebitmap/ExampleInstrumentedTest.kt: -------------------------------------------------------------------------------- 1 | package com.ptrain.nativebitmap 2 | 3 | import androidx.test.platform.app.InstrumentationRegistry 4 | import androidx.test.ext.junit.runners.AndroidJUnit4 5 | 6 | import org.junit.Test 7 | import org.junit.runner.RunWith 8 | 9 | import org.junit.Assert.* 10 | 11 | /** 12 | * Instrumented test, which will execute on an Android device. 13 | * 14 | * See [testing documentation](http://d.android.com/tools/testing). 15 | */ 16 | @RunWith(AndroidJUnit4::class) 17 | class ExampleInstrumentedTest { 18 | @Test 19 | fun useAppContext() { 20 | // Context of the app under test. 21 | val appContext = InstrumentationRegistry.getInstrumentation().targetContext 22 | assertEquals("com.ptrain.nativebitmap", appContext.packageName) 23 | } 24 | } -------------------------------------------------------------------------------- /app/src/main/AndroidManifest.xml: -------------------------------------------------------------------------------- 1 | 2 | 4 | 5 | 15 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 27 | 28 | 29 | 30 | -------------------------------------------------------------------------------- /app/src/main/java/com/ptrain/nativebitmap/MainActivity.kt: -------------------------------------------------------------------------------- 1 | package com.ptrain.nativebitmap 2 | 3 | import android.graphics.BitmapFactory 4 | import android.os.Bundle 5 | import android.view.View 6 | import android.view.ViewGroup 7 | import android.widget.ImageView 8 | import androidx.appcompat.app.AppCompatActivity 9 | import androidx.appcompat.widget.LinearLayoutCompat 10 | 11 | 12 | class MainActivity : AppCompatActivity() { 13 | 14 | override fun onCreate(savedInstanceState: Bundle?) { 15 | super.onCreate(savedInstanceState) 16 | setContentView(R.layout.activity_main) 17 | 18 | NativeBitmap.init(true) 19 | val imageContainer = findViewById(R.id.image_container) 20 | 21 | val img = ImageView(this) 22 | val bitmap = BitmapFactory.decodeResource(resources, R.drawable.android_app) 23 | img.scaleType = ImageView.ScaleType.CENTER_CROP 24 | img.setImageBitmap(bitmap) 25 | imageContainer.addView( 26 | img, LinearLayoutCompat.LayoutParams( 27 | LinearLayoutCompat.LayoutParams.MATCH_PARENT, 28 | 600 29 | ) 30 | ) 31 | 32 | 33 | findViewById(R.id.release_btn).setOnClickListener { 34 | imageContainer.removeAllViews() 35 | } 36 | 37 | findViewById(R.id.add_btn).setOnClickListener { 38 | val img = ImageView(this) 39 | val bitmap = BitmapFactory.decodeResource(resources, R.drawable.android_app) 40 | // bitmaps.add(bitmap) 41 | img.scaleType = ImageView.ScaleType.CENTER_CROP 42 | img.setImageBitmap(bitmap) 43 | imageContainer.addView( 44 | img, LinearLayoutCompat.LayoutParams( 45 | LinearLayoutCompat.LayoutParams.MATCH_PARENT, 46 | 600 47 | ) 48 | ) 49 | } 50 | } 51 | 52 | } -------------------------------------------------------------------------------- /app/src/main/res/drawable-v24/ic_launcher_foreground.xml: -------------------------------------------------------------------------------- 1 | 7 | 8 | 9 | 15 | 18 | 21 | 22 | 23 | 24 | 30 | -------------------------------------------------------------------------------- /app/src/main/res/drawable/android_app.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PTrainbow/NativeBitmap/394041b80356e8013e3b28af151f9949b2b4b6b8/app/src/main/res/drawable/android_app.png -------------------------------------------------------------------------------- /app/src/main/res/drawable/ic_launcher_background.xml: -------------------------------------------------------------------------------- 1 | 2 | 7 | 10 | 15 | 20 | 25 | 30 | 35 | 40 | 45 | 50 | 55 | 60 | 65 | 70 | 75 | 80 | 85 | 90 | 95 | 100 | 105 | 110 | 115 | 120 | 125 | 130 | 135 | 140 | 145 | 150 | 155 | 160 | 165 | 170 | 171 | -------------------------------------------------------------------------------- /app/src/main/res/layout/activity_main.xml: -------------------------------------------------------------------------------- 1 | 2 | 8 | 9 | 16 | 17 | 23 | 24 | 32 | 33 | 38 | 39 | 40 | -------------------------------------------------------------------------------- /app/src/main/res/mipmap-anydpi-v26/ic_launcher.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | -------------------------------------------------------------------------------- /app/src/main/res/mipmap-anydpi-v26/ic_launcher_round.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | -------------------------------------------------------------------------------- /app/src/main/res/mipmap-hdpi/ic_launcher.webp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PTrainbow/NativeBitmap/394041b80356e8013e3b28af151f9949b2b4b6b8/app/src/main/res/mipmap-hdpi/ic_launcher.webp -------------------------------------------------------------------------------- /app/src/main/res/mipmap-hdpi/ic_launcher_round.webp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PTrainbow/NativeBitmap/394041b80356e8013e3b28af151f9949b2b4b6b8/app/src/main/res/mipmap-hdpi/ic_launcher_round.webp -------------------------------------------------------------------------------- /app/src/main/res/mipmap-mdpi/ic_launcher.webp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PTrainbow/NativeBitmap/394041b80356e8013e3b28af151f9949b2b4b6b8/app/src/main/res/mipmap-mdpi/ic_launcher.webp -------------------------------------------------------------------------------- /app/src/main/res/mipmap-mdpi/ic_launcher_round.webp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PTrainbow/NativeBitmap/394041b80356e8013e3b28af151f9949b2b4b6b8/app/src/main/res/mipmap-mdpi/ic_launcher_round.webp -------------------------------------------------------------------------------- /app/src/main/res/mipmap-xhdpi/ic_launcher.webp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PTrainbow/NativeBitmap/394041b80356e8013e3b28af151f9949b2b4b6b8/app/src/main/res/mipmap-xhdpi/ic_launcher.webp -------------------------------------------------------------------------------- /app/src/main/res/mipmap-xhdpi/ic_launcher_round.webp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PTrainbow/NativeBitmap/394041b80356e8013e3b28af151f9949b2b4b6b8/app/src/main/res/mipmap-xhdpi/ic_launcher_round.webp -------------------------------------------------------------------------------- /app/src/main/res/mipmap-xxhdpi/ic_launcher.webp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PTrainbow/NativeBitmap/394041b80356e8013e3b28af151f9949b2b4b6b8/app/src/main/res/mipmap-xxhdpi/ic_launcher.webp -------------------------------------------------------------------------------- /app/src/main/res/mipmap-xxhdpi/ic_launcher_round.webp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PTrainbow/NativeBitmap/394041b80356e8013e3b28af151f9949b2b4b6b8/app/src/main/res/mipmap-xxhdpi/ic_launcher_round.webp -------------------------------------------------------------------------------- /app/src/main/res/mipmap-xxxhdpi/ic_launcher.webp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PTrainbow/NativeBitmap/394041b80356e8013e3b28af151f9949b2b4b6b8/app/src/main/res/mipmap-xxxhdpi/ic_launcher.webp -------------------------------------------------------------------------------- /app/src/main/res/mipmap-xxxhdpi/ic_launcher_round.webp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PTrainbow/NativeBitmap/394041b80356e8013e3b28af151f9949b2b4b6b8/app/src/main/res/mipmap-xxxhdpi/ic_launcher_round.webp -------------------------------------------------------------------------------- /app/src/main/res/values-night/themes.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 16 | -------------------------------------------------------------------------------- /app/src/main/res/values/colors.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | #FFBB86FC 4 | #FF6200EE 5 | #FF3700B3 6 | #FF03DAC5 7 | #FF018786 8 | #FF000000 9 | #FFFFFFFF 10 | -------------------------------------------------------------------------------- /app/src/main/res/values/strings.xml: -------------------------------------------------------------------------------- 1 | 2 | nativebitmap 3 | -------------------------------------------------------------------------------- /app/src/main/res/values/themes.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 16 | -------------------------------------------------------------------------------- /app/src/main/res/xml/backup_rules.xml: -------------------------------------------------------------------------------- 1 | 8 | 9 | 13 | -------------------------------------------------------------------------------- /app/src/main/res/xml/data_extraction_rules.xml: -------------------------------------------------------------------------------- 1 | 6 | 7 | 8 | 12 | 13 | 19 | -------------------------------------------------------------------------------- /app/src/test/java/com/ptrain/nativebitmap/ExampleUnitTest.kt: -------------------------------------------------------------------------------- 1 | package com.ptrain.nativebitmap 2 | 3 | import org.junit.Test 4 | 5 | import org.junit.Assert.* 6 | 7 | /** 8 | * Example local unit test, which will execute on the development machine (host). 9 | * 10 | * See [testing documentation](http://d.android.com/tools/testing). 11 | */ 12 | class ExampleUnitTest { 13 | @Test 14 | fun addition_isCorrect() { 15 | assertEquals(4, 2 + 2) 16 | } 17 | } -------------------------------------------------------------------------------- /build.gradle: -------------------------------------------------------------------------------- 1 | // Top-level build file where you can add configuration options common to all sub-projects/modules. 2 | plugins { 3 | id 'com.android.application' version '7.3.1' apply false 4 | id 'com.android.library' version '7.3.1' apply false 5 | id 'org.jetbrains.kotlin.android' version '1.7.20' apply false 6 | } -------------------------------------------------------------------------------- /gradle.properties: -------------------------------------------------------------------------------- 1 | # Project-wide Gradle settings. 2 | # IDE (e.g. Android Studio) users: 3 | # Gradle settings configured through the IDE *will override* 4 | # any settings specified in this file. 5 | # For more details on how to configure your build environment visit 6 | # http://www.gradle.org/docs/current/userguide/build_environment.html 7 | # Specifies the JVM arguments used for the daemon process. 8 | # The setting is particularly useful for tweaking memory settings. 9 | org.gradle.jvmargs=-Xmx2048m -Dfile.encoding=UTF-8 10 | # When configured, Gradle will run in incubating parallel mode. 11 | # This option should only be used with decoupled projects. More details, visit 12 | # http://www.gradle.org/docs/current/userguide/multi_project_builds.html#sec:decoupled_projects 13 | # org.gradle.parallel=true 14 | # AndroidX package structure to make it clearer which packages are bundled with the 15 | # Android operating system, and which are packaged with your app's APK 16 | # https://developer.android.com/topic/libraries/support-library/androidx-rn 17 | android.useAndroidX=true 18 | # Kotlin code style for this project: "official" or "obsolete": 19 | kotlin.code.style=official 20 | # Enables namespacing of each library's R class so that its R class includes only the 21 | # resources declared in the library itself and none from the library's dependencies, 22 | # thereby reducing the size of the R class for that library 23 | android.nonTransitiveRClass=true -------------------------------------------------------------------------------- /gradle/wrapper/gradle-wrapper.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PTrainbow/NativeBitmap/394041b80356e8013e3b28af151f9949b2b4b6b8/gradle/wrapper/gradle-wrapper.jar -------------------------------------------------------------------------------- /gradle/wrapper/gradle-wrapper.properties: -------------------------------------------------------------------------------- 1 | #Wed Jan 04 11:00:38 CST 2023 2 | distributionBase=GRADLE_USER_HOME 3 | distributionUrl=https\://services.gradle.org/distributions/gradle-7.4-bin.zip 4 | distributionPath=wrapper/dists 5 | zipStorePath=wrapper/dists 6 | zipStoreBase=GRADLE_USER_HOME 7 | -------------------------------------------------------------------------------- /gradlew: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env sh 2 | 3 | # 4 | # Copyright 2015 the original author or authors. 5 | # 6 | # Licensed under the Apache License, Version 2.0 (the "License"); 7 | # you may not use this file except in compliance with the License. 8 | # You may obtain a copy of the License at 9 | # 10 | # https://www.apache.org/licenses/LICENSE-2.0 11 | # 12 | # Unless required by applicable law or agreed to in writing, software 13 | # distributed under the License is distributed on an "AS IS" BASIS, 14 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 15 | # See the License for the specific language governing permissions and 16 | # limitations under the License. 17 | # 18 | 19 | ############################################################################## 20 | ## 21 | ## Gradle start up script for UN*X 22 | ## 23 | ############################################################################## 24 | 25 | # Attempt to set APP_HOME 26 | # Resolve links: $0 may be a link 27 | PRG="$0" 28 | # Need this for relative symlinks. 29 | while [ -h "$PRG" ] ; do 30 | ls=`ls -ld "$PRG"` 31 | link=`expr "$ls" : '.*-> \(.*\)$'` 32 | if expr "$link" : '/.*' > /dev/null; then 33 | PRG="$link" 34 | else 35 | PRG=`dirname "$PRG"`"/$link" 36 | fi 37 | done 38 | SAVED="`pwd`" 39 | cd "`dirname \"$PRG\"`/" >/dev/null 40 | APP_HOME="`pwd -P`" 41 | cd "$SAVED" >/dev/null 42 | 43 | APP_NAME="Gradle" 44 | APP_BASE_NAME=`basename "$0"` 45 | 46 | # Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. 47 | DEFAULT_JVM_OPTS='"-Xmx64m" "-Xms64m"' 48 | 49 | # Use the maximum available, or set MAX_FD != -1 to use that value. 50 | MAX_FD="maximum" 51 | 52 | warn () { 53 | echo "$*" 54 | } 55 | 56 | die () { 57 | echo 58 | echo "$*" 59 | echo 60 | exit 1 61 | } 62 | 63 | # OS specific support (must be 'true' or 'false'). 64 | cygwin=false 65 | msys=false 66 | darwin=false 67 | nonstop=false 68 | case "`uname`" in 69 | CYGWIN* ) 70 | cygwin=true 71 | ;; 72 | Darwin* ) 73 | darwin=true 74 | ;; 75 | MINGW* ) 76 | msys=true 77 | ;; 78 | NONSTOP* ) 79 | nonstop=true 80 | ;; 81 | esac 82 | 83 | CLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar 84 | 85 | 86 | # Determine the Java command to use to start the JVM. 87 | if [ -n "$JAVA_HOME" ] ; then 88 | if [ -x "$JAVA_HOME/jre/sh/java" ] ; then 89 | # IBM's JDK on AIX uses strange locations for the executables 90 | JAVACMD="$JAVA_HOME/jre/sh/java" 91 | else 92 | JAVACMD="$JAVA_HOME/bin/java" 93 | fi 94 | if [ ! -x "$JAVACMD" ] ; then 95 | die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME 96 | 97 | Please set the JAVA_HOME variable in your environment to match the 98 | location of your Java installation." 99 | fi 100 | else 101 | JAVACMD="java" 102 | which java >/dev/null 2>&1 || die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. 103 | 104 | Please set the JAVA_HOME variable in your environment to match the 105 | location of your Java installation." 106 | fi 107 | 108 | # Increase the maximum file descriptors if we can. 109 | if [ "$cygwin" = "false" -a "$darwin" = "false" -a "$nonstop" = "false" ] ; then 110 | MAX_FD_LIMIT=`ulimit -H -n` 111 | if [ $? -eq 0 ] ; then 112 | if [ "$MAX_FD" = "maximum" -o "$MAX_FD" = "max" ] ; then 113 | MAX_FD="$MAX_FD_LIMIT" 114 | fi 115 | ulimit -n $MAX_FD 116 | if [ $? -ne 0 ] ; then 117 | warn "Could not set maximum file descriptor limit: $MAX_FD" 118 | fi 119 | else 120 | warn "Could not query maximum file descriptor limit: $MAX_FD_LIMIT" 121 | fi 122 | fi 123 | 124 | # For Darwin, add options to specify how the application appears in the dock 125 | if $darwin; then 126 | GRADLE_OPTS="$GRADLE_OPTS \"-Xdock:name=$APP_NAME\" \"-Xdock:icon=$APP_HOME/media/gradle.icns\"" 127 | fi 128 | 129 | # For Cygwin or MSYS, switch paths to Windows format before running java 130 | if [ "$cygwin" = "true" -o "$msys" = "true" ] ; then 131 | APP_HOME=`cygpath --path --mixed "$APP_HOME"` 132 | CLASSPATH=`cygpath --path --mixed "$CLASSPATH"` 133 | 134 | JAVACMD=`cygpath --unix "$JAVACMD"` 135 | 136 | # We build the pattern for arguments to be converted via cygpath 137 | ROOTDIRSRAW=`find -L / -maxdepth 1 -mindepth 1 -type d 2>/dev/null` 138 | SEP="" 139 | for dir in $ROOTDIRSRAW ; do 140 | ROOTDIRS="$ROOTDIRS$SEP$dir" 141 | SEP="|" 142 | done 143 | OURCYGPATTERN="(^($ROOTDIRS))" 144 | # Add a user-defined pattern to the cygpath arguments 145 | if [ "$GRADLE_CYGPATTERN" != "" ] ; then 146 | OURCYGPATTERN="$OURCYGPATTERN|($GRADLE_CYGPATTERN)" 147 | fi 148 | # Now convert the arguments - kludge to limit ourselves to /bin/sh 149 | i=0 150 | for arg in "$@" ; do 151 | CHECK=`echo "$arg"|egrep -c "$OURCYGPATTERN" -` 152 | CHECK2=`echo "$arg"|egrep -c "^-"` ### Determine if an option 153 | 154 | if [ $CHECK -ne 0 ] && [ $CHECK2 -eq 0 ] ; then ### Added a condition 155 | eval `echo args$i`=`cygpath --path --ignore --mixed "$arg"` 156 | else 157 | eval `echo args$i`="\"$arg\"" 158 | fi 159 | i=`expr $i + 1` 160 | done 161 | case $i in 162 | 0) set -- ;; 163 | 1) set -- "$args0" ;; 164 | 2) set -- "$args0" "$args1" ;; 165 | 3) set -- "$args0" "$args1" "$args2" ;; 166 | 4) set -- "$args0" "$args1" "$args2" "$args3" ;; 167 | 5) set -- "$args0" "$args1" "$args2" "$args3" "$args4" ;; 168 | 6) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" ;; 169 | 7) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" "$args6" ;; 170 | 8) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" "$args6" "$args7" ;; 171 | 9) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" "$args6" "$args7" "$args8" ;; 172 | esac 173 | fi 174 | 175 | # Escape application args 176 | save () { 177 | for i do printf %s\\n "$i" | sed "s/'/'\\\\''/g;1s/^/'/;\$s/\$/' \\\\/" ; done 178 | echo " " 179 | } 180 | APP_ARGS=`save "$@"` 181 | 182 | # Collect all arguments for the java command, following the shell quoting and substitution rules 183 | eval set -- $DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS "\"-Dorg.gradle.appname=$APP_BASE_NAME\"" -classpath "\"$CLASSPATH\"" org.gradle.wrapper.GradleWrapperMain "$APP_ARGS" 184 | 185 | exec "$JAVACMD" "$@" 186 | -------------------------------------------------------------------------------- /gradlew.bat: -------------------------------------------------------------------------------- 1 | @rem 2 | @rem Copyright 2015 the original author or authors. 3 | @rem 4 | @rem Licensed under the Apache License, Version 2.0 (the "License"); 5 | @rem you may not use this file except in compliance with the License. 6 | @rem You may obtain a copy of the License at 7 | @rem 8 | @rem https://www.apache.org/licenses/LICENSE-2.0 9 | @rem 10 | @rem Unless required by applicable law or agreed to in writing, software 11 | @rem distributed under the License is distributed on an "AS IS" BASIS, 12 | @rem WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13 | @rem See the License for the specific language governing permissions and 14 | @rem limitations under the License. 15 | @rem 16 | 17 | @if "%DEBUG%" == "" @echo off 18 | @rem ########################################################################## 19 | @rem 20 | @rem Gradle startup script for Windows 21 | @rem 22 | @rem ########################################################################## 23 | 24 | @rem Set local scope for the variables with windows NT shell 25 | if "%OS%"=="Windows_NT" setlocal 26 | 27 | set DIRNAME=%~dp0 28 | if "%DIRNAME%" == "" set DIRNAME=. 29 | set APP_BASE_NAME=%~n0 30 | set APP_HOME=%DIRNAME% 31 | 32 | @rem Resolve any "." and ".." in APP_HOME to make it shorter. 33 | for %%i in ("%APP_HOME%") do set APP_HOME=%%~fi 34 | 35 | @rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. 36 | set DEFAULT_JVM_OPTS="-Xmx64m" "-Xms64m" 37 | 38 | @rem Find java.exe 39 | if defined JAVA_HOME goto findJavaFromJavaHome 40 | 41 | set JAVA_EXE=java.exe 42 | %JAVA_EXE% -version >NUL 2>&1 43 | if "%ERRORLEVEL%" == "0" goto execute 44 | 45 | echo. 46 | echo ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. 47 | echo. 48 | echo Please set the JAVA_HOME variable in your environment to match the 49 | echo location of your Java installation. 50 | 51 | goto fail 52 | 53 | :findJavaFromJavaHome 54 | set JAVA_HOME=%JAVA_HOME:"=% 55 | set JAVA_EXE=%JAVA_HOME%/bin/java.exe 56 | 57 | if exist "%JAVA_EXE%" goto execute 58 | 59 | echo. 60 | echo ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME% 61 | echo. 62 | echo Please set the JAVA_HOME variable in your environment to match the 63 | echo location of your Java installation. 64 | 65 | goto fail 66 | 67 | :execute 68 | @rem Setup the command line 69 | 70 | set CLASSPATH=%APP_HOME%\gradle\wrapper\gradle-wrapper.jar 71 | 72 | 73 | @rem Execute Gradle 74 | "%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %* 75 | 76 | :end 77 | @rem End local scope for the variables with windows NT shell 78 | if "%ERRORLEVEL%"=="0" goto mainEnd 79 | 80 | :fail 81 | rem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of 82 | rem the _cmd.exe /c_ return code! 83 | if not "" == "%GRADLE_EXIT_CONSOLE%" exit 1 84 | exit /b 1 85 | 86 | :mainEnd 87 | if "%OS%"=="Windows_NT" endlocal 88 | 89 | :omega 90 | -------------------------------------------------------------------------------- /nativebitmap/.gitignore: -------------------------------------------------------------------------------- 1 | /build -------------------------------------------------------------------------------- /nativebitmap/build.gradle: -------------------------------------------------------------------------------- 1 | plugins { 2 | id 'com.android.library' 3 | id 'org.jetbrains.kotlin.android' 4 | } 5 | 6 | android { 7 | namespace 'com.ptrain.nativebitmap' 8 | compileSdk 32 9 | 10 | defaultConfig { 11 | minSdk 21 12 | targetSdk 32 13 | 14 | testInstrumentationRunner "android.support.test.runner.AndroidJUnitRunner" 15 | consumerProguardFiles "consumer-rules.pro" 16 | externalNativeBuild { 17 | cmake { 18 | abiFilters 'armeabi-v7a', 'arm64-v8a' 19 | } 20 | } 21 | } 22 | 23 | buildTypes { 24 | release { 25 | minifyEnabled false 26 | proguardFiles getDefaultProguardFile('proguard-android-optimize.txt'), 'proguard-rules.pro' 27 | } 28 | } 29 | externalNativeBuild { 30 | cmake { 31 | path "src/main/cpp/CMakeLists.txt" 32 | version "3.18.1" 33 | } 34 | } 35 | 36 | packagingOptions { 37 | doNotStrip '**/libnativebitmap.so' 38 | exclude '**/libshadowhook.so' 39 | } 40 | 41 | buildFeatures { 42 | prefab true 43 | } 44 | 45 | compileOptions { 46 | sourceCompatibility JavaVersion.VERSION_1_8 47 | targetCompatibility JavaVersion.VERSION_1_8 48 | } 49 | kotlinOptions { 50 | jvmTarget = '1.8' 51 | } 52 | } 53 | 54 | dependencies { 55 | implementation 'com.bytedance.android:shadowhook:1.0.5' 56 | } -------------------------------------------------------------------------------- /nativebitmap/consumer-rules.pro: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PTrainbow/NativeBitmap/394041b80356e8013e3b28af151f9949b2b4b6b8/nativebitmap/consumer-rules.pro -------------------------------------------------------------------------------- /nativebitmap/proguard-rules.pro: -------------------------------------------------------------------------------- 1 | # Add project specific ProGuard rules here. 2 | # You can control the set of applied configuration files using the 3 | # proguardFiles setting in build.gradle. 4 | # 5 | # For more details, see 6 | # http://developer.android.com/guide/developing/tools/proguard.html 7 | 8 | # If your project uses WebView with JS, uncomment the following 9 | # and specify the fully qualified class name to the JavaScript interface 10 | # class: 11 | #-keepclassmembers class fqcn.of.javascript.interface.for.webview { 12 | # public *; 13 | #} 14 | 15 | # Uncomment this to preserve the line number information for 16 | # debugging stack traces. 17 | #-keepattributes SourceFile,LineNumberTable 18 | 19 | # If you keep the line number information, uncomment this to 20 | # hide the original source file name. 21 | #-renamesourcefileattribute SourceFile -------------------------------------------------------------------------------- /nativebitmap/src/main/AndroidManifest.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | -------------------------------------------------------------------------------- /nativebitmap/src/main/cpp/CMakeLists.txt: -------------------------------------------------------------------------------- 1 | # For more information about using CMake with Android Studio, read the 2 | # documentation: https://d.android.com/studio/projects/add-native-code.html 3 | 4 | # Sets the minimum version of CMake required to build the native library. 5 | 6 | cmake_minimum_required(VERSION 3.18.1) 7 | 8 | # Declares and names the project. 9 | 10 | project("nativebitmap") 11 | 12 | find_package(shadowhook REQUIRED CONFIG) 13 | 14 | aux_source_directory(hook/ HOOK) 15 | 16 | 17 | include_directories( 18 | "log/" 19 | "hook/") 20 | 21 | # Creates and names a library, sets it as either STATIC 22 | # or SHARED, and provides the relative paths to its source code. 23 | # You can define multiple libraries, and CMake builds them for you. 24 | # Gradle automatically packages shared libraries with your APK. 25 | 26 | add_library( # Sets the name of the library. 27 | nativebitmap 28 | 29 | # Sets the library as a shared library. 30 | SHARED 31 | 32 | ${HOOK} 33 | # Provides a relative path to your source file(s). 34 | native_bitmap.cpp) 35 | 36 | # Searches for a specified prebuilt library and stores the path as a 37 | # variable. Because CMake includes system libraries in the search path by 38 | # default, you only need to specify the name of the public NDK library 39 | # you want to add. CMake verifies that the library exists before 40 | # completing its build. 41 | 42 | find_library( # Sets the name of the path variable. 43 | log-lib 44 | 45 | # Specifies the name of the NDK library that 46 | # you want CMake to locate. 47 | log) 48 | 49 | # Specifies libraries CMake should link to your target library. You 50 | # can link multiple libraries, such as libraries you define in this 51 | # build script, prebuilt third-party libraries, or system libraries. 52 | 53 | target_link_libraries( # Specifies the target library. 54 | nativebitmap 55 | shadowhook::shadowhook 56 | # Links the target library to the log library 57 | # included in the NDK. 58 | ${log-lib}) -------------------------------------------------------------------------------- /nativebitmap/src/main/cpp/hook/bitmap_hook.cpp: -------------------------------------------------------------------------------- 1 | // 2 | // Created by ptrain on 2023/1/2. 3 | // 4 | #include 5 | #include 6 | #include "bitmap_hook.h" 7 | #include "logger.h" 8 | 9 | namespace BitmapHook { 10 | void *newNonMovableArrayOrigin = nullptr; 11 | void *addressOfOrigin = nullptr; 12 | void *deleteWeakGlobalRefOrigin = nullptr; 13 | void *allocateJavaPixelRefOrigin = nullptr; 14 | 15 | int fakeArrSelfLen = sizeof(int) + sizeof(jobject) + sizeof(void *); 16 | int magicNum = 0x13572468; 17 | pthread_key_t canHook; 18 | jclass byteClazz; 19 | jobject VMRuntime; 20 | jmethodID registerNativeAllocationId, registerNativeFreeId; 21 | 22 | typedef void (*DeleteWeakGlobalRefType)(JNIEnv *env, jweak obj); 23 | 24 | typedef jlong (*AddressOfType)(JNIEnv *env, jobject, jobject javaArray); 25 | 26 | typedef jbyteArray (*NewNonMovableArrayType)(JNIEnv *env, jobject obj, jclass javaElementClass, 27 | jint length); 28 | 29 | typedef void* (*AllocateJavaPixelRefType)(JNIEnv *env, void* param1, void* param2); 30 | 31 | bool init(JNIEnv *env) { 32 | // 创建一个 jbyteArray 获取其 jclass 33 | jbyteArray byteArray = env->NewByteArray(1); 34 | // 使用 GlobalRef 存储，不然无法引用 35 | byteClazz = reinterpret_cast(env->NewGlobalRef(env->GetObjectClass(byteArray))); 36 | env->DeleteLocalRef(byteArray); 37 | // 初始化 tls 38 | pthread_key_create(&canHook, nullptr); 39 | // 反射 VMRuntime 低版本不考虑 hidden api 40 | jclass dalvik = (jclass) env->NewGlobalRef(env->FindClass("dalvik/system/VMRuntime")); 41 | jmethodID getRuntime = env->GetStaticMethodID(dalvik, "getRuntime", 42 | "()Ldalvik/system/VMRuntime;"); 43 | VMRuntime = env->NewGlobalRef(env->CallStaticObjectMethod(dalvik, getRuntime)); 44 | registerNativeFreeId = env->GetMethodID(dalvik, "registerNativeFree", "(I)V"); 45 | registerNativeAllocationId = env->GetMethodID(dalvik, "registerNativeAllocation", "(I)V"); 46 | return true; 47 | } 48 | 49 | /** 50 | * DeleteWeakGlobalRef 代理 51 | * 判断是 bitmap 申请的 byte[]，且带有我们插入的 magic number 52 | * 处理 fake array 逻辑(还原大小)，释放 native 内存，释放 newNonMovableArrayProxy 时创建的 global ref 53 | * 此时 fake array 为: 54 | * | kclass_ | uint32_t monitor_ | size(fake array 本身大小) | magic number | global ref | native byte[] pointer | 55 | * 56 | * @param env 57 | * @param obj 58 | */ 59 | void deleteWeakGlobalRefProxy(JNIEnv *env, jweak obj) { 60 | if (env->IsSameObject(obj, nullptr) || addressOfOrigin == nullptr) { 61 | ((DeleteWeakGlobalRefType) deleteWeakGlobalRefOrigin)(env, obj); 62 | return; 63 | } 64 | jlong addr = 0; 65 | if (env->IsInstanceOf(obj, byteClazz)) { 66 | addr = ((AddressOfType) addressOfOrigin)(env, VMRuntime, obj); 67 | } 68 | if (addr != 0 && *(int32_t *) (addr) == magicNum) { 69 | jobject globalRef = *(jobject *) (addr + sizeof(int)); 70 | void *bitmap = *(void **) (addr + sizeof(int) + sizeof(jobject)); 71 | int realBitmapSize = *(int *) (addr - sizeof(int)); 72 | *(int32_t *) (addr - sizeof(int)) = fakeArrSelfLen; 73 | env->DeleteGlobalRef(globalRef); 74 | if (bitmap != nullptr) { 75 | // LOGE("native bitmap free"); 76 | free(bitmap); 77 | registerNativeFree(env, realBitmapSize); 78 | } 79 | } 80 | ((DeleteWeakGlobalRefType) deleteWeakGlobalRefOrigin)(env, obj); 81 | } 82 | 83 | /** 84 | * addressOf 代理 85 | * 86 | * 判断当前是否需要 hook(是来自 allocateJavaPixelRefProxy 的调用) 87 | * 申请 native 内存，修改 fake array 88 | * 此时 fake array 为: 89 | * | kclass_ | uint32_t monitor_ | size(Java 层真实申请的大小) | magic number | global ref | native byte[] pointer | 90 | * 91 | * @param env 92 | * @param obj 93 | * @param javaArray 94 | * @return 95 | */ 96 | jlong addressOfProxy(JNIEnv *env, jobject obj, jbyteArray javaArray) { 97 | // LOGE("call addressOfProxy"); 98 | if (pthread_getspecific(canHook) == nullptr) { 99 | // LOGE("call addressOfProxy origin! bitmap allocate null"); 100 | return ((AddressOfType) addressOfOrigin)(env, obj, javaArray); 101 | } 102 | // LOGE("do addressOfProxy hook!"); 103 | pthread_setspecific(canHook, nullptr); 104 | jlong addr = ((AddressOfType) addressOfOrigin)(env, obj, javaArray); 105 | bool isNativeBitmap = addr != 0 && *(int32_t *) addr == magicNum; 106 | if (isNativeBitmap) { 107 | jint bitmapSize = *(int32_t *) (addr - sizeof(int32_t)); 108 | // LOGE("native bitmap malloc"); 109 | void *bitmap = calloc(bitmapSize, 1); 110 | registerNativeAllocation(env, bitmapSize); 111 | *(void **) (addr + sizeof(int) + sizeof(jobject)) = bitmap; 112 | addr = reinterpret_cast(bitmap); 113 | } 114 | return addr; 115 | } 116 | 117 | /** 118 | * newNonMovableArray 代理 119 | * 120 | * 判断当前是否需要 hook(是来自 allocateJavaPixelRefProxy 的调用) 121 | * 构造 fake array，global ref 存储 122 | * 此时 fake array 为: 123 | * | kclass_ | uint32_t monitor_ | size(Java 层真实申请的大小) | magic number | global ref | nullptr | 124 | * 125 | * @param env 126 | * @param obj 127 | * @param javaElementClass 128 | * @param bitmapSize 129 | * @return 130 | */ 131 | jbyteArray newNonMovableArrayProxy(JNIEnv *env, jobject obj, jclass javaElementClass, 132 | jint bitmapSize) { 133 | // LOGE("call newNonMovableArrayProxy"); 134 | if (pthread_getspecific(canHook) == nullptr || addressOfOrigin == nullptr) { 135 | // LOGE("call newNonMovableArray origin! bitmap is null"); 136 | return ((NewNonMovableArrayType) newNonMovableArrayOrigin)(env, obj, javaElementClass, bitmapSize); 137 | } 138 | int fakeArraySize = fakeArrSelfLen; 139 | jbyteArray fakeArray = ((NewNonMovableArrayType) newNonMovableArrayOrigin)(env, obj, 140 | javaElementClass, 141 | fakeArraySize); 142 | // LOGE("do newNonMovableArrayProxy hook"); 143 | jobject globalRef = env->NewGlobalRef(fakeArray); 144 | jlong fakeAddr = ((AddressOfType) addressOfOrigin)(env, VMRuntime, fakeArray); 145 | *(int32_t *) (fakeAddr - sizeof(int)) = bitmapSize; 146 | *(int32_t *) (fakeAddr) = magicNum; 147 | *(jobject *) (fakeAddr + sizeof(int)) = globalRef; 148 | if (bitmapSize != env->GetArrayLength(fakeArray)) { 149 | return ((NewNonMovableArrayType) newNonMovableArrayOrigin)(env, obj, javaElementClass, 150 | bitmapSize); 151 | } else { 152 | return fakeArray; 153 | } 154 | } 155 | 156 | void* allocateJavaPixelRefProxy(JNIEnv *env, void *param1, void *param2) { 157 | pthread_setspecific(canHook, (void *) (1)); 158 | return ((AllocateJavaPixelRefType)allocateJavaPixelRefOrigin)(env, param1, param2); 159 | } 160 | 161 | void registerNativeAllocation(JNIEnv *env, int size) { 162 | env->CallVoidMethod(VMRuntime, registerNativeAllocationId, size); 163 | } 164 | 165 | void registerNativeFree(JNIEnv *env, int size) { 166 | env->CallVoidMethod(VMRuntime, registerNativeFreeId, size); 167 | } 168 | } 169 | -------------------------------------------------------------------------------- /nativebitmap/src/main/cpp/hook/bitmap_hook.h: -------------------------------------------------------------------------------- 1 | // 2 | // Created by ptrain on 2023/1/2. 3 | // 4 | 5 | #ifndef NATIVEBITMAP_BITMAP_HOOK_H 6 | #define NATIVEBITMAP_BITMAP_HOOK_H 7 | 8 | #include 9 | #include 10 | 11 | namespace BitmapHook { 12 | 13 | extern void *newNonMovableArrayOrigin; 14 | extern void *addressOfOrigin; 15 | extern void *deleteWeakGlobalRefOrigin; 16 | extern void *allocateJavaPixelRefOrigin; 17 | 18 | bool init(JNIEnv *env); 19 | 20 | jbyteArray newNonMovableArrayProxy(JNIEnv *env, jobject obj, jclass javaElementClass, 21 | jint bitmapSize); 22 | 23 | jlong addressOfProxy(JNIEnv *env, jobject obj, jbyteArray javaArray); 24 | 25 | void deleteWeakGlobalRefProxy(JNIEnv *env, jweak obj); 26 | 27 | void* allocateJavaPixelRefProxy(JNIEnv *env, void *param1, void *param2); 28 | 29 | void registerNativeFree(JNIEnv *env, int size); 30 | 31 | void registerNativeAllocation(JNIEnv *env, int size); 32 | }; 33 | #endif //NATIVEBITMAP_BITMAP_HOOK_H 34 | -------------------------------------------------------------------------------- /nativebitmap/src/main/cpp/log/logger.h: -------------------------------------------------------------------------------- 1 | // 2 | // Created by ptrain on 2022/12/27. 3 | // 4 | 5 | #ifndef NATIVEBITMAP_LOGGER_H 6 | #define NATIVEBITMAP_LOGGER_H 7 | #define TAG "nativebitmap" 8 | 9 | #include 10 | 11 | #define LOGI(...) __android_log_print(ANDROID_LOG_INFO, TAG, __VA_ARGS__) 12 | #define LOGE(...) __android_log_print(ANDROID_LOG_ERROR, TAG, __VA_ARGS__) 13 | 14 | #endif //NATIVEBITMAP_LOGGER_H 15 | -------------------------------------------------------------------------------- /nativebitmap/src/main/cpp/native_bitmap.cpp: -------------------------------------------------------------------------------- 1 | #include 2 | #include 3 | #include 4 | #include 5 | #include 6 | #include "logger.h" 7 | #include "shadowhook.h" 8 | #include "bitmap_hook.h" 9 | 10 | /** 11 | * inline hook 12 | * JavaPixelAllocator 13 | * 5.1-7.1 _ZN11GraphicsJNI20allocateJavaPixelRefEP7_JNIEnvP8SkBitmapP12SkColorTable 14 | */ 15 | static void* hookJavaPixelAllocator() { 16 | void *allocatorStub = shadowhook_hook_sym_name( 17 | "libandroid_runtime.so", "_ZN11GraphicsJNI20allocateJavaPixelRefEP7_JNIEnvP8SkBitmapP12SkColorTable", 18 | (void *) BitmapHook::allocateJavaPixelRefProxy, 19 | (void **) &BitmapHook::allocateJavaPixelRefOrigin 20 | ); 21 | return allocatorStub; 22 | } 23 | 24 | /** 25 | * inline hook 26 | * addressof 27 | * 5.1 - 7.1 _ZN3artL19VMRuntime_addressOfEP7_JNIEnvP8_jobjectS3_ 28 | */ 29 | static void* hookAddressOf() { 30 | const char *addressFunName = "_ZN3artL19VMRuntime_addressOfEP7_JNIEnvP8_jobjectS3_"; 31 | void *addressStub = shadowhook_hook_sym_name( 32 | "libart.so", addressFunName, (void *) BitmapHook::addressOfProxy, 33 | (void **) &BitmapHook::addressOfOrigin 34 | ); 35 | return addressStub; 36 | } 37 | 38 | /** 39 | * inline hook 40 | * DeleteWeakGlobalRefType 41 | * 5.1 - 7.1 _ZN3art3JNI19DeleteWeakGlobalRefEP7_JNIEnvP8_jobject 42 | */ 43 | static void* hookDeleteWeakGlobalRef() { 44 | const char *deleteFunName = "_ZN3art3JNI19DeleteWeakGlobalRefEP7_JNIEnvP8_jobject"; 45 | void *deleteStub = shadowhook_hook_sym_name( 46 | "libart.so", deleteFunName, (void *) BitmapHook::deleteWeakGlobalRefProxy, 47 | (void **) &BitmapHook::deleteWeakGlobalRefOrigin 48 | ); 49 | return deleteStub; 50 | } 51 | 52 | /** 53 | * inline hook 54 | * NewNonMovableArray 55 | * 5.1 - 7.1 _ZN3artL28VMRuntime_newNonMovableArrayEP7_JNIEnvP8_jobjectP7_jclassi 56 | */ 57 | static void* hookNewNonMovableArray() { 58 | const char *newNonMovableArraySymbol = "_ZN3artL28VMRuntime_newNonMovableArrayEP7_JNIEnvP8_jobjectP7_jclassi"; 59 | void *arrayStub = shadowhook_hook_sym_name("libart.so", newNonMovableArraySymbol, 60 | (void *) BitmapHook::newNonMovableArrayProxy, 61 | (void **) &BitmapHook::newNonMovableArrayOrigin); 62 | return arrayStub; 63 | } 64 | 65 | extern "C" JNIEXPORT void JNICALL 66 | Java_com_ptrain_nativebitmap_NativeBitmap_nInit(JNIEnv *env, jobject thiz, jboolean debug) { 67 | // hook 68 | if (BitmapHook::init(env)) { 69 | void* deleteStub = hookDeleteWeakGlobalRef(); 70 | if (deleteStub != nullptr) { 71 | LOGI("delete hook successful!"); 72 | } else { 73 | LOGE("init failed! delete hook failed!"); 74 | return; 75 | } 76 | void* addressStub = hookAddressOf(); 77 | if (addressStub != nullptr) { 78 | LOGI("addressOf hook successful!"); 79 | } else { 80 | shadowhook_unhook(deleteStub); 81 | LOGE("init failed! addressOf hook failed!"); 82 | return; 83 | } 84 | void* arrayStub = hookNewNonMovableArray(); 85 | if (arrayStub != nullptr) { 86 | LOGI("newNonMovableArray hook successful！"); 87 | } else { 88 | shadowhook_unhook(deleteStub); 89 | shadowhook_unhook(addressStub); 90 | LOGE("init failed! newNonMovableArray hook failed！"); 91 | return; 92 | } 93 | void* allocator = hookJavaPixelAllocator(); 94 | if (allocator != nullptr) { 95 | LOGI("hookJavaPixelAllocator hook successful！"); 96 | } else { 97 | shadowhook_unhook(deleteStub); 98 | shadowhook_unhook(addressStub); 99 | shadowhook_unhook(arrayStub); 100 | LOGE("init failed! hookJavaPixelAllocator hook failed！"); 101 | } 102 | } 103 | } 104 | -------------------------------------------------------------------------------- /nativebitmap/src/main/java/com/ptrain/nativebitmap/NativeBitmap.kt: -------------------------------------------------------------------------------- 1 | package com.ptrain.nativebitmap 2 | 3 | import android.os.Build 4 | import android.util.Log 5 | import com.bytedance.shadowhook.ShadowHook 6 | import java.util.concurrent.atomic.AtomicBoolean 7 | 8 | object NativeBitmap { 9 | const val TAG = "nativebitmap" 10 | private val isInitialized = AtomicBoolean(false) 11 | 12 | fun init(isDebug: Boolean) { 13 | Thread { 14 | if (Build.VERSION.SDK_INT <= Build.VERSION_CODES.LOLLIPOP_MR1 || 15 | Build.VERSION.SDK_INT >= Build.VERSION_CODES.O 16 | ) { 17 | Log.e(TAG, "init failed! unSupport os version!") 18 | return@Thread 19 | } 20 | if (isInitialized.compareAndSet(false, true)) { 21 | ShadowHook.init( 22 | ShadowHook.ConfigBuilder().setDebuggable(BuildConfig.DEBUG) 23 | .setMode(ShadowHook.Mode.UNIQUE).build() 24 | ) 25 | System.loadLibrary(TAG) 26 | nInit(isDebug) 27 | Log.i(TAG, "init done!") 28 | } else { 29 | Log.e(TAG, "has been initialized!") 30 | } 31 | }.start() 32 | } 33 | 34 | private external fun nInit(isDebug: Boolean) 35 | } -------------------------------------------------------------------------------- /settings.gradle: -------------------------------------------------------------------------------- 1 | pluginManagement { 2 | repositories { 3 | gradlePluginPortal() 4 | google() 5 | mavenCentral() 6 | } 7 | } 8 | dependencyResolutionManagement { 9 | repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS) 10 | repositories { 11 | google() 12 | mavenCentral() 13 | } 14 | } 15 | rootProject.name = "nativebitmap" 16 | include ':app' 17 | include ':nativebitmap' --------------------------------------------------------------------------------