1
0
mirror of https://github.com/topjohnwu/Magisk.git synced 2024-12-28 20:27:38 +00:00

289 lines
10 KiB
Python
Raw Normal View History

2021-08-02 03:20:19 -07:00
#!/usr/bin/env python3
primitives = ['jint', 'jboolean', 'jlong']
class JType:
2021-08-20 23:40:57 -07:00
def __init__(self, cpp, jni):
self.cpp = cpp
self.jni = jni
2021-08-02 03:20:19 -07:00
class JArray(JType):
2021-08-20 23:40:57 -07:00
def __init__(self, type):
if type.cpp in primitives:
name = type.cpp + 'Array'
2021-08-02 03:20:19 -07:00
else:
name = 'jobjectArray'
2021-08-20 23:40:57 -07:00
super().__init__(name, '[' + type.jni)
2021-08-02 03:20:19 -07:00
class Argument:
2021-08-20 23:40:57 -07:00
def __init__(self, name, type, set_arg = False):
2021-08-02 03:20:19 -07:00
self.name = name
self.type = type
self.set_arg = set_arg
def cpp(self):
2021-08-20 23:40:57 -07:00
return f'{self.type.cpp} {self.name}'
# Args we don't care, give it an auto generated name
class Anon(Argument):
cnt = 0
def __init__(self, type):
super().__init__(f'_{Anon.cnt}', type)
Anon.cnt += 1
class Return:
def __init__(self, value, type):
self.value = value
self.type = type
2021-08-02 03:20:19 -07:00
class Method:
2021-08-20 23:40:57 -07:00
def __init__(self, name, ret, args):
2021-08-02 03:20:19 -07:00
self.name = name
2021-08-20 23:40:57 -07:00
self.ret = ret
2021-08-02 03:20:19 -07:00
self.args = args
def cpp(self):
2021-08-20 23:40:57 -07:00
return ', '.join(map(lambda x: x.cpp(), self.args))
2021-08-02 03:20:19 -07:00
def name_list(self):
2021-08-20 23:40:57 -07:00
return ', '.join(map(lambda x: x.name, self.args))
2021-08-02 03:20:19 -07:00
def jni(self):
2021-08-20 23:40:57 -07:00
args = ''.join(map(lambda x: x.type.jni, self.args))
return f'({args}){self.ret.type.jni}'
def body(self):
return ''
class JNIHook(Method):
def __init__(self, ver, ret, args):
name = f'{self.base_name()}_{ver}'
super().__init__(name, ret, args)
def base_name(self):
return ''
2021-08-02 03:20:19 -07:00
2021-08-20 23:40:57 -07:00
def orig_method(self):
return f'reinterpret_cast<decltype(&{self.name})>({self.base_name()}_orig)'
def ind(i):
return '\n' + ' ' * i
2021-08-02 03:20:19 -07:00
# Common types
jint = JType('jint', 'I')
jintArray = JArray(jint)
jstring = JType('jstring', 'Ljava/lang/String;')
jboolean = JType('jboolean', 'Z')
jlong = JType('jlong', 'J')
2021-08-20 23:40:57 -07:00
void = JType('void', 'V')
class ForkAndSpec(JNIHook):
def __init__(self, ver, args):
super().__init__(ver, Return('ctx.pid', jint), args)
def base_name(self):
return 'nativeForkAndSpecialize'
def init_args(self):
2021-10-05 03:53:11 -07:00
return 'AppSpecializeArgsImpl args(uid, gid, gids, runtime_flags, mount_external, se_info, nice_name, instruction_set, app_data_dir);'
2021-08-20 23:40:57 -07:00
def body(self):
decl = ''
decl += ind(1) + self.init_args()
for a in self.args:
if a.set_arg:
decl += ind(1) + f'args.{a.name} = &{a.name};'
decl += ind(1) + 'HookContext ctx;'
decl += ind(1) + 'ctx.env = env;'
decl += ind(1) + 'ctx.raw_args = &args;'
decl += ind(1) + f'ctx.{self.base_name()}_pre();'
decl += ind(1) + self.orig_method() + '('
decl += ind(2) + f'env, clazz, {self.name_list()}'
decl += ind(1) + ');'
decl += ind(1) + f'ctx.{self.base_name()}_post();'
return decl
class SpecApp(ForkAndSpec):
def __init__(self, ver, args):
super().__init__(ver, args)
self.ret = Return('', void)
def base_name(self):
return 'nativeSpecializeAppProcess'
class ForkServer(ForkAndSpec):
def base_name(self):
return 'nativeForkSystemServer'
def init_args(self):
2021-10-05 03:53:11 -07:00
return 'ServerSpecializeArgsImpl args(uid, gid, gids, runtime_flags, permitted_capabilities, effective_capabilities);'
2021-08-02 03:20:19 -07:00
# Common args
uid = Argument('uid', jint)
gid = Argument('gid', jint)
gids = Argument('gids', jintArray)
runtime_flags = Argument('runtime_flags', jint)
rlimits = Argument('rlimits', JArray(jintArray))
mount_external = Argument('mount_external', jint)
se_info = Argument('se_info', jstring)
nice_name = Argument('nice_name', jstring)
fds_to_close = Argument('fds_to_close', jintArray)
instruction_set = Argument('instruction_set', jstring)
app_data_dir = Argument('app_data_dir', jstring)
# o
fds_to_ignore = Argument('fds_to_ignore', jintArray)
# p
is_child_zygote = Argument('is_child_zygote', jboolean, True)
# q_alt
is_top_app = Argument('is_top_app', jboolean, True)
# r
pkg_data_info_list = Argument('pkg_data_info_list', JArray(jstring), True)
whitelisted_data_info_list = Argument('whitelisted_data_info_list', JArray(jstring), True)
mount_data_dirs = Argument('mount_data_dirs', jboolean, True)
mount_storage_dirs = Argument('mount_storage_dirs', jboolean, True)
# server
permitted_capabilities = Argument('permitted_capabilities', jlong)
effective_capabilities = Argument('effective_capabilities', jlong)
# Method definitions
2021-08-20 23:40:57 -07:00
fas_l = ForkAndSpec('l', [uid, gid, gids, runtime_flags, rlimits, mount_external,
2021-08-02 03:20:19 -07:00
se_info, nice_name, fds_to_close, instruction_set, app_data_dir])
2021-08-20 23:40:57 -07:00
fas_o = ForkAndSpec('o', [uid, gid, gids, runtime_flags, rlimits, mount_external,
2021-08-02 03:20:19 -07:00
se_info, nice_name, fds_to_close, fds_to_ignore, instruction_set, app_data_dir])
2021-08-20 23:40:57 -07:00
fas_p = ForkAndSpec('p', [uid, gid, gids, runtime_flags, rlimits, mount_external, se_info,
2021-08-02 03:20:19 -07:00
nice_name, fds_to_close, fds_to_ignore, is_child_zygote, instruction_set, app_data_dir])
2021-08-20 23:40:57 -07:00
fas_q_alt = ForkAndSpec('q_alt', [uid, gid, gids, runtime_flags, rlimits, mount_external, se_info,
2021-08-02 03:20:19 -07:00
nice_name, fds_to_close, fds_to_ignore, is_child_zygote, instruction_set, app_data_dir, is_top_app])
2021-08-20 23:40:57 -07:00
fas_r = ForkAndSpec('r', [uid, gid, gids, runtime_flags, rlimits, mount_external, se_info,
2021-08-02 03:20:19 -07:00
nice_name, fds_to_close, fds_to_ignore, is_child_zygote, instruction_set, app_data_dir, is_top_app,
pkg_data_info_list, whitelisted_data_info_list, mount_data_dirs, mount_storage_dirs])
2021-08-20 23:40:57 -07:00
fas_samsung_m = ForkAndSpec('samsung_m', [uid, gid, gids, runtime_flags, rlimits, mount_external,
se_info, Anon(jint), Anon(jint), nice_name, fds_to_close, instruction_set, app_data_dir])
2021-08-02 03:20:19 -07:00
2021-08-20 23:40:57 -07:00
fas_samsung_n = ForkAndSpec('samsung_n', [uid, gid, gids, runtime_flags, rlimits, mount_external,
se_info, Anon(jint), Anon(jint), nice_name, fds_to_close, instruction_set, app_data_dir, Anon(jint)])
2021-08-02 03:20:19 -07:00
2021-08-20 23:40:57 -07:00
fas_samsung_o = ForkAndSpec('samsung_o', [uid, gid, gids, runtime_flags, rlimits, mount_external,
se_info, Anon(jint), Anon(jint), nice_name, fds_to_close, fds_to_ignore, instruction_set, app_data_dir])
2021-08-02 03:20:19 -07:00
2021-08-20 23:40:57 -07:00
fas_samsung_p = ForkAndSpec('samsung_p', [uid, gid, gids, runtime_flags, rlimits, mount_external,
se_info, Anon(jint), Anon(jint), nice_name, fds_to_close, fds_to_ignore, is_child_zygote,
instruction_set, app_data_dir])
2021-08-02 03:20:19 -07:00
2021-08-20 23:40:57 -07:00
spec_q = SpecApp('q', [uid, gid, gids, runtime_flags, rlimits, mount_external, se_info,
2021-08-02 03:20:19 -07:00
nice_name, is_child_zygote, instruction_set, app_data_dir])
2021-08-20 23:40:57 -07:00
spec_q_alt = SpecApp('q_alt', [uid, gid, gids, runtime_flags, rlimits, mount_external, se_info,
2021-08-02 03:20:19 -07:00
nice_name, is_child_zygote, instruction_set, app_data_dir, is_top_app])
2021-08-20 23:40:57 -07:00
spec_r = SpecApp('r', [uid, gid, gids, runtime_flags, rlimits, mount_external, se_info, nice_name,
2021-08-02 03:20:19 -07:00
is_child_zygote, instruction_set, app_data_dir, is_top_app, pkg_data_info_list,
whitelisted_data_info_list, mount_data_dirs, mount_storage_dirs])
2021-08-20 23:40:57 -07:00
spec_samsung_q = SpecApp('samsung_q', [uid, gid, gids, runtime_flags, rlimits, mount_external,
se_info, Anon(jint), Anon(jint), nice_name, is_child_zygote, instruction_set, app_data_dir])
2021-08-02 03:20:19 -07:00
2021-08-20 23:40:57 -07:00
server_l = ForkServer('l', [uid, gid, gids, runtime_flags, rlimits,
2021-08-02 03:20:19 -07:00
permitted_capabilities, effective_capabilities])
2021-08-20 23:40:57 -07:00
server_samsung_q = ForkServer('samsung_q', [uid, gid, gids, runtime_flags, Anon(jint), Anon(jint), rlimits,
2021-08-02 03:20:19 -07:00
permitted_capabilities, effective_capabilities])
2021-08-20 23:40:57 -07:00
hook_map = {}
2021-08-02 03:20:19 -07:00
2021-08-20 23:40:57 -07:00
def gen_jni_def(clz, methods):
if clz not in hook_map:
hook_map[clz] = []
2021-08-02 03:20:19 -07:00
decl = ''
for m in methods:
2021-08-20 23:40:57 -07:00
decl += ind(0) + f'{m.ret.type.cpp} {m.name}(JNIEnv *env, jclass clazz, {m.cpp()}) {{'
decl += m.body()
if m.ret.value:
decl += ind(1) + f'return {m.ret.value};'
2021-08-02 03:20:19 -07:00
decl += ind(0) + '}'
2021-08-20 23:40:57 -07:00
decl += ind(0) + f'const JNINativeMethod {m.base_name()}_methods[] = {{'
2021-08-02 03:20:19 -07:00
for m in methods:
decl += ind(1) + '{'
2021-08-20 23:40:57 -07:00
decl += ind(2) + f'"{m.base_name()}",'
decl += ind(2) + f'"{m.jni()}",'
decl += ind(2) + f'(void *) &{m.name}'
2021-08-02 03:20:19 -07:00
decl += ind(1) + '},'
decl += ind(0) + '};'
2021-08-20 23:40:57 -07:00
decl = ind(0) + f'void *{m.base_name()}_orig = nullptr;' + decl
decl += ind(0) + f'constexpr int {m.base_name()}_methods_num = std::size({m.base_name()}_methods);'
2021-08-02 03:20:19 -07:00
decl += ind(0)
2021-08-20 23:40:57 -07:00
hook_map[clz].append(m.base_name())
return decl
def gen_jni_hook():
decl = ''
decl += ind(0) + 'unique_ptr<JNINativeMethod[]> hookAndSaveJNIMethods(const char *className, const JNINativeMethod *methods, int numMethods) {'
decl += ind(1) + 'unique_ptr<JNINativeMethod[]> newMethods;'
decl += ind(1) + 'int clz_id = -1;'
decl += ind(1) + 'int hook_cnt = 0;'
decl += ind(1) + 'do {'
for index, (clz, methods) in enumerate(hook_map.items()):
decl += ind(2) + f'if (className == "{clz}"sv) {{'
decl += ind(3) + f'clz_id = {index};'
decl += ind(3) + f'hook_cnt = {len(methods)};'
decl += ind(3) + 'break;'
decl += ind(2) + '}'
decl += ind(1) + '} while (false);'
decl += ind(1) + 'if (hook_cnt) {'
decl += ind(2) + 'newMethods = make_unique<JNINativeMethod[]>(numMethods);'
decl += ind(2) + 'memcpy(newMethods.get(), methods, sizeof(JNINativeMethod) * numMethods);'
decl += ind(1) + '}'
decl += ind(1) + 'auto &class_map = (*jni_method_map)[className];'
decl += ind(1) + 'for (int i = 0; i < numMethods; ++i) {'
for index, methods in enumerate(hook_map.values()):
2021-10-14 02:43:56 -07:00
decl += ind(2) + f'if (hook_cnt && clz_id == {index}) {{'
2021-08-20 23:40:57 -07:00
for m in methods:
decl += ind(3) + f'HOOK_JNI({m})'
decl += ind(2) + '}'
2021-10-14 02:43:56 -07:00
decl += ind(2) + 'class_map[methods[i].name][methods[i].signature] = methods[i].fnPtr;'
2021-08-20 23:40:57 -07:00
decl += ind(1) + '}'
decl += ind(1) + 'return newMethods;'
decl += ind(0) + '}'
2021-08-02 03:20:19 -07:00
return decl
2021-08-20 23:40:57 -07:00
with open('jni_hooks.hpp', 'w') as f:
f.write('// Generated by gen_jni_hooks.py\n')
zygote = 'com/android/internal/os/Zygote'
methods = [fas_l, fas_o, fas_p, fas_q_alt, fas_r, fas_samsung_m, fas_samsung_n, fas_samsung_o, fas_samsung_p]
f.write(gen_jni_def(zygote, methods))
2021-08-02 03:20:19 -07:00
methods = [spec_q, spec_q_alt, spec_r, spec_samsung_q]
2021-08-20 23:40:57 -07:00
f.write(gen_jni_def(zygote, methods))
2021-08-02 03:20:19 -07:00
2021-08-19 01:54:12 -07:00
methods = [server_l, server_samsung_q]
2021-08-20 23:40:57 -07:00
f.write(gen_jni_def(zygote, methods))
2021-08-02 03:20:19 -07:00
2021-08-20 23:40:57 -07:00
f.write(gen_jni_hook())
f.write('\n')