CN105740714A - Method and device for repairing system library bug on Android platform - Google Patents

Method and device for repairing system library bug on Android platform Download PDF

Info

Publication number
CN105740714A
CN105740714A CN201610068998.8A CN201610068998A CN105740714A CN 105740714 A CN105740714 A CN 105740714A CN 201610068998 A CN201610068998 A CN 201610068998A CN 105740714 A CN105740714 A CN 105740714A
Authority
CN
China
Prior art keywords
intended application
system library
leak
execution environment
file
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201610068998.8A
Other languages
Chinese (zh)
Inventor
梁彬
游伟
石文昌
龚伟刚
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Renmin University of China
Original Assignee
Renmin University of China
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Renmin University of China filed Critical Renmin University of China
Priority to CN201610068998.8A priority Critical patent/CN105740714A/en
Publication of CN105740714A publication Critical patent/CN105740714A/en
Pending legal-status Critical Current

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
    • G06F21/577Assessing vulnerabilities and evaluating computer system security

Abstract

The invention relates to a method and a device for repairing a system library bug on an Android platform. The method comprises the following steps: 1) constructing a repaired system library file, and introducing the repaired system library file into Android equipment; 2) regulating a target application, importing an execution environment reconstruction module, and causing an application entry class to appoint to the execution environment reconstruction module; and 3) reconstructing an execution environment in a process that the regulated target application is loaded, wherein the new execution environment uses the repaired system library. The device comprises a system library bug repairing module, a target application regulation module and the execution environment reconstruction module. The invention provides a feasible system library bug repairing scheme, and does not need to flash or carry out ROOT on target terminal equipment, and the system class library which has bugs platform can be repaired on the Android to protect a specific target application.

Description

A kind of Android platform repair system storehouse leak method and device
Technical field
The present invention relates to method and device that a kind of leak is repaired, especially with regard to a kind of Android platform repair system storehouse leak method and device.
Background technology
At present, Android is as the operation system of smart phone of a main flow, and its safety enjoys the concern of users.In the many factors affecting Android safety, system library leak is especially prominent.The a large amount of high-risk system library leak exposed in recent years, brings huge challenge to Android safety.For the application layer leak only affecting certain application-specific, the impact of whole system more greatly and is more difficult to repair by system library leak.On the one hand, the operation of application program need to rely on system library and provides corresponding support, if a system library exists leak, then can affect the application program of all this system libraries of use;On the other hand, the reparation of system library leak in application layer reparation, currently cannot be depended on Google or equipment vendors provides patch support by system library leak.
Due to the fragmentation of android system version, many system library leaks can not get patch support timely and effectively.After a system vulnerability is found, Google is devoted to provide patch for the android system of current Major Epidemic, does not but promise to undertake that the android system even refused as old version provides patch.Under this patch strategy, for Android user, the most reliable and practicable leak repair mode is exactly system upgrade.Most of equipment vendors only provide the upgrading support of a period of time for the mobile phone of its production, and its mobile phone being carrier customization is not even provided system upgrade support by some equipment vendors.Even if additionally, Mobile phone can obtain the support of system update, update equipment vendors from Google delivery system and update the most at last and be distributed to user mobile phone, still have the interval of several months.For these reasons, the Android phone being currently in use in a large number contains many high-risk system vulnerabilities being exposed.
Existing Third party system storehouse leak recovery technique needs user that mobile phone carries out brush machine or ROOT operation, in order to be implanted to by patch containing in leaky system library.But, there is certain risk in brush machine and ROOT operation, it is difficult to is accepted by user.Therefore, need a kind of new leak recovery technique badly, it is possible to when not brush machine, not ROOT equipment, provide for system library leak and repair.
Summary of the invention
For the problems referred to above, it is an object of the invention to provide a kind of Android platform repair system storehouse leak method and device, it is possible to provide for system library leak when not brush machine, not ROOT equipment and repair timely and effectively.
For achieving the above object, the present invention takes techniques below scheme: a kind of Android platform repair system storehouse leak method, it is characterized in that comprising the following steps: 1) build the system library file after repairing, the system library file after repairing is imported in Android device;2) adjust intended application, introduce and perform environment reconstructed module, and make entrance class point to execution environment reconstructed module;3) in intended application loading process after the adjustment, reconstruct performs environment, and the new environment that performs uses the system library after repairing.
Preferably, described step 1) in the step in repair system storehouse as follows: 1.1) by patch installing or rewriting system library file mode on source code, generate the system library file after repairing;1.2) the system library file after reparation is imported in Android device.
Preferably, described step 2) in, perform environment reconstructed module introducing method as follows: 2.1) unpack intended application, the file directory of generation comprises intended application code file and intended application configuration file;2.2) in intended application code file, execution environment reconstructed module is introduced;2.3) in intended application configuration file, revise entrance class declaration, make entrance class point to and perform environment reconstructed module;2.4) file directory unpacking generation is repacked, generate the intended application after adjusting.
Preferably, described step 3) in, execution environment reconstructing method is as follows: when 3.1) intended application loads, and removes the original execution environment of intended application;3.2) set, it is intended that embed the searching route as system library of the path, system library file place after repairing;3.3) setting up new execution environment for intended application, this execution environment is Load System storehouse from newly-installed system library searching route;3.4), after intended application of reloading, intended application quotes the system library embedded after repairing.
A kind of Android platform repair system storehouse leak device, it is characterised in that it includes system library leak repair module, intended application adjusting module and performs environment reconstructed module;Described system library leak repair module is repaired containing leaky system library file, is imported in Android device by the system library file after repairing;Described intended application adjusting module introduces and performs environment reconstructed module, makes intended application embed the system library after repairing in described execution environment reconstructed module.
Preferably, described system library leak repair module includes leak reparation unit and system library importing unit;Repair unit containing leaky system library file through described leak and carry out patch reparation, import unit by described system library and system library file is imported in Android device.
Preferably, described intended application adjusting module includes application program unwrapper unit, entrance class amendment unit and application program packaged unit;Described application program unwrapper unit unpacks intended application, and described entrance class amendment unit introduces and performs environment reconstructed module and revise entrance class declaration, and described application program packaged unit repacks file directory.
Preferably, described execution environment reconstructed module includes performing environment clearing cell, environmental variable arranges unit, perform the newly-built unit of environment and intended application load units;Described execution environment clearing cell removes original execution environment, described environmental variable arranges unit and arranges the environmental variable of intended application, the described newly-built unit of execution environment is that intended application sets up new execution environment, and described intended application load units is reloaded intended application.
Due to the fact that and take above technical scheme, it has the advantage that 1, the invention provides a kind of practicable system library leak recovery scenario so that user also can carry out leak reparation without relying on Google or equipment vendors.2, the present invention is without brush machine and ROOT terminal unit, just in Android platform, the system library that there is leak can be repaired, to protect specific intended application.
Accompanying drawing explanation
Fig. 1 is the overall flow schematic diagram of the inventive method;
Fig. 2 is the schematic flow sheet that the present invention builds the system library after reparation;
Fig. 3 is the schematic flow sheet that the present invention adjusts intended application;
Fig. 4 is the schematic flow sheet that intended application of the present invention reconstruct performs environment;
Fig. 5 is the principle schematic of single unit system of the present invention.
Detailed description of the invention
Below in conjunction with drawings and Examples, the present invention is described in detail.
As it is shown in figure 1, the present invention provides a kind of Android platform repair system storehouse leak method, comprise the following steps:
1) build the system library file after repairing, the system library file after repairing is imported in Android device;
Wherein, as in figure 2 it is shown, the step in repair system storehouse is as follows:
(1) by the mode such as patch installing or rewriting system library file on source code, the system library file after repairing is generated;
(2) the system library file after reparation is imported in Android device.
2) adjust intended application, introduce and perform environment reconstructed module, and make entrance class point to execution environment reconstructed module;
Wherein, as it is shown on figure 3, execution environment reconstructed module introducing method step is as follows:
(1) unpacking intended application, the file directory of generation comprises intended application code file and intended application configuration file;
(2) in intended application code file, execution environment reconstructed module is introduced;
(3) in intended application configuration file, revise entrance class declaration, make entrance class point to and perform environment reconstructed module;
(4) file directory unpacking generation is repacked, generate the intended application after adjusting.
3) in intended application loading process after the adjustment, reconstruct performs environment, removes original execution environment by performing environment reconstructed module, and reconstructs a new execution environment, and new performs the system library that environment will use after repairing;
Wherein, as shown in Figure 4, environment reconstructing method step is performed as follows:
(1), when intended application loads, the original execution environment of intended application is removed, thus cutting off intended application quoting primal system storehouse;
(2) set, it is intended that embed the searching route as system library of the path, system library file place after repairing;
(3) setting up new execution environment for intended application, this execution environment is Load System storehouse from newly-installed system library searching route;
(4) after intended application of reloading, then intended application quotes the system library after reparation.
As it is shown in figure 5, the present invention also provides for a kind of Android platform repair system storehouse leak device, it includes system library leak repair module 1, intended application adjusting module 2 and performs environment reconstructed module 3.Containing leaky system library file after system library leak repair module 1 is repaired, the system library file after repairing is imported in Android device;Intended application imports execution environment reconstructed module 3 in intended application adjusting module 2, and makes application entrance class point to execution environment reconstructed module 3.Intended application after adjustment, performing reconstruct execution environment in environment reconstructed module 3, makes intended application embed the system library after repairing.
In above-described embodiment, system library leak repair module 1 includes leak and repairs unit 4 and system library importing unit 5.Repair unit 4 containing leaky system library file through leak and carry out patch reparation;After reparation completes, import unit 5 by system library and system library file is imported in Android device.
In the various embodiments described above, intended application adjusting module 2 includes application program unwrapper unit 6, entrance class amendment unit 7 and application program packaged unit 8.After application program unwrapper unit 6 unpacks intended application, the file directory of generation comprises intended application code file and intended application configuration file.Intended application code file is revised unit 7 through entrance class and is introduced execution environment reconstructed module 3, revises entrance class declaration in intended application configuration file, makes entrance class point to and performs environment reconstructed module 3.Repack file directory through application program packaged unit 8, generate the intended application after adjusting.
In the various embodiments described above, execution environment reconstructed module 3 includes performing environment clearing cell 9, environmental variable arranges unit 10, perform the newly-built unit 11 of environment and intended application load units 12.Intended application after adjustment operationally removes original execution environment through execution environment clearing cell 9, for cutting off intended application quoting primal system storehouse, then pass through environmental variable to arrange unit 10 and arrange the environmental variable of intended application, and specify the searching route embedding the path, system library file place after repairing as system library.Perform the newly-built unit of environment 11 and set up new execution environment for intended application, this execution environment can from environmental variable arrange unit 10 arrange system library searching route Load System storehouse, intended application load units 12 is reloaded intended application, and the intended application after heavy cartridges quotes the system library embedded after repairing.
The various embodiments described above are merely to illustrate the present invention; the structure of each parts, size, position is set and shape all can be varied from; on the basis of technical solution of the present invention; all improvement individual part carried out according to the principle of the invention and equivalents, all should not get rid of outside protection scope of the present invention.

Claims (8)

1. an Android platform repair system storehouse leak method, it is characterised in that comprise the following steps:
1) build the system library file after repairing, the system library file after repairing is imported in Android device;
2) adjust intended application, introduce and perform environment reconstructed module, and make entrance class point to execution environment reconstructed module;
3) in intended application loading process after the adjustment, reconstruct performs environment, and the new environment that performs uses the system library after repairing.
2. a kind of Android platform repair system storehouse as claimed in claim 1 leak method, it is characterised in that: described step 1) in, repair system storehouse step is as follows:
1.1) by patch installing or rewriting system library file mode on source code, the system library file after repairing is generated;
1.2) the system library file after reparation is imported in Android device.
3. a kind of Android platform repair system storehouse as claimed in claim 1 or 2 leak method, it is characterised in that: described step 2) in, perform environment reconstructed module introducing method as follows:
2.1) unpacking intended application, the file directory of generation comprises intended application code file and intended application configuration file;
2.2) in intended application code file, execution environment reconstructed module is introduced;
2.3) in intended application configuration file, revise entrance class declaration, make entrance class point to and perform environment reconstructed module;
2.4) file directory unpacking generation is repacked, generate the intended application after adjusting.
4. a kind of Android platform repair system storehouse as claimed in claim 1 or 2 leak method, it is characterised in that: described step 3) in, perform environment reconstructing method as follows:
3.1), when intended application loads, the original execution environment of intended application is removed;
3.2) set, it is intended that embed the searching route as system library of the path, system library file place after repairing;
3.3) setting up new execution environment for intended application, this execution environment is Load System storehouse from newly-installed system library searching route;
3.4), after intended application of reloading, intended application quotes the system library embedded after repairing.
5. the Android platform repair system storehouse leak device based on method as described in any one of claim 1-4, it is characterised in that: it includes system library leak repair module, intended application adjusting module and performs environment reconstructed module;Described system library leak repair module is repaired containing leaky system library file, is imported in Android device by the system library file after repairing;Described intended application adjusting module introduces and performs environment reconstructed module, makes intended application embed the system library after repairing in described execution environment reconstructed module.
6. a kind of Android platform repair system storehouse as claimed in claim 5 leak device, it is characterised in that: described system library leak repair module includes leak and repairs unit and system library importing unit;Repair unit containing leaky system library file through described leak and carry out patch reparation, import unit by described system library and system library file is imported in Android device.
7. a kind of Android platform repair system storehouse as claimed in claim 5 leak device, it is characterised in that: described intended application adjusting module includes application program unwrapper unit, entrance class amendment unit and application program packaged unit;Described application program unwrapper unit unpacks intended application, and described entrance class amendment unit introduces and performs environment reconstructed module and revise entrance class declaration, and described application program packaged unit repacks file directory.
8. a kind of Android platform repair system storehouse as claimed in claim 5 leak device, it is characterised in that: described execution environment reconstructed module includes performing environment clearing cell, environmental variable arranges unit, perform the newly-built unit of environment and intended application load units;Described execution environment clearing cell removes original execution environment, described environmental variable arranges unit and arranges the environmental variable of intended application, the described newly-built unit of execution environment is that intended application sets up new execution environment, and described intended application load units is reloaded intended application.
CN201610068998.8A 2016-02-01 2016-02-01 Method and device for repairing system library bug on Android platform Pending CN105740714A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201610068998.8A CN105740714A (en) 2016-02-01 2016-02-01 Method and device for repairing system library bug on Android platform

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201610068998.8A CN105740714A (en) 2016-02-01 2016-02-01 Method and device for repairing system library bug on Android platform

Publications (1)

Publication Number Publication Date
CN105740714A true CN105740714A (en) 2016-07-06

Family

ID=56242015

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201610068998.8A Pending CN105740714A (en) 2016-02-01 2016-02-01 Method and device for repairing system library bug on Android platform

Country Status (1)

Country Link
CN (1) CN105740714A (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106778103A (en) * 2016-12-30 2017-05-31 上海掌门科技有限公司 Reinforcement means, system and decryption method that a kind of Android application program anti-reversing is cracked

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106778103A (en) * 2016-12-30 2017-05-31 上海掌门科技有限公司 Reinforcement means, system and decryption method that a kind of Android application program anti-reversing is cracked
CN106778103B (en) * 2016-12-30 2020-03-13 上海掌门科技有限公司 Reinforcement method, system and decryption method for preventing reverse cracking of android application program

Similar Documents

Publication Publication Date Title
CN105573780B (en) A kind of mobile terminal operating system upgrade method and device based on container
CN109491695A (en) A kind of increment updating method of integrated Android application
CN102609328B (en) System difference upgrade method and device and mobile terminal
CN106933609B (en) Android application program installation package generation method and device
CN102156643A (en) Software integration method and system thereof
CN107506219A (en) A kind of general version upgrade method based on android system
CN104484585A (en) Application program installation package processing method and device, and mobile apparatus
CN106022130A (en) Shelling method and device for reinforced application program
CN107291447B (en) A method of it automatically generates and issues SDK codes
CN103701930A (en) Mobile application program real-time updating method and system
CN103514006A (en) Method and system of upgrade of pre-installed applications of Android system
CN104298534B (en) Programmed method and device based on Lua language
CN106227568A (en) Terminal unit start, upgrade method and equipment
CN103226484A (en) On-orbit update method for satellite-borne integrated electronic system program
CN104133699B (en) Device system software upgrade method and system
CN105487907A (en) Difference package manufacturing method and device
US20190095187A1 (en) Incremental updates in static libraries
CN106406872B (en) A kind of production method and device of the difference upgrade package based on specific file
CN103838584A (en) Development method and device for mobile terminal application
CN105468395A (en) Updating method, device and system
CN104484201A (en) Method and device for updating software tool development package of IOS (Internetwork Operating System) equipment
CN109960511B (en) Dynamic library issuing method based on virtualization technology, storage medium and intelligent terminal
CN102156649B (en) Patch installation method and device thereof
CN111142922B (en) Application program updating method, device, terminal and server
CN105740714A (en) Method and device for repairing system library bug on Android platform

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication

Application publication date: 20160706

RJ01 Rejection of invention patent application after publication