API Hook总结之三

6.6 MountService Hook

结构图如下,

Hook 类

IMountServiceBinderHook

Hook 代理类

IMountServiceHookHandle

Hook 方法实现类

mkdirs

IMountServiceHookHandle的内部类mkdirs的beforeInvoke方法部分代码如下,

if (path != null) {    final boolean isAndroiDataHostPath = path.indexOf(ANDROID_DATA) < 0;    final boolean isAndroiObbHostPath = path.indexOf(ANDROID_OBB) < 0;    if (isAndroiDataHostPath && !isAndroiObbHostPath) {         path = path.replaceFirst(ANDROID_DATA, ANDROID_DATA + mHostContext.getPackageName() + "/Plugin/");         args[index1] = path;    } else if (!isAndroiDataHostPath && isAndroiObbHostPath) {          path = path.replaceFirst(ANDROID_OBB, ANDROID_OBB + mHostContext.getPackageName() + "/Plugin/");          args[index1] = path;    }}

6.7 SearchManager Hook

结构图如下,

Hook 类

ISearchManagerBinderHook

Hook 代理类

ISearchManagerHookHandle

Hook 方法实现类

getSearchableInfo

getSearchableInfo的beforeInvoke方法如下,

protected boolean beforeInvoke(Object receiver, Method method, Object[] args) throws Throwable {    if (args != null && args.length > 0 && args[args.length - 1] instanceof ComponentName) {         ComponentName cpn = (ComponentName) args[args.length - 1];         ActivityInfo info = PluginManager.getInstance().getActivityInfo(cpn, 0);         if (info != null) {             ActivityInfo proxyInfo = PluginManager.getInstance().selectStubActivityInfo(info);             if (proxyInfo != null) {                 args[args.length - 1] = new ComponentName(proxyInfo.packageName, proxyInfo.name);             }           }    }     return super.beforeInvoke(receiver, method, args);}

6.8 ISessionManagerBinderHook Hook

结构图如下,

Hook 类

ISessionManagerBinderHook

Hook 代理类

ISessionManagerHookHandle

Hook 方法实现类

createSession

createSession的beforeInvoke方法如下,

protected boolean beforeInvoke(Object receiver, Method method, Object[] args) throws Throwable {            int index = 0;            if (args != null && args.length > index && args[index] instanceof String) {                String pkg = (String) args[index];                if (!TextUtils.equals(pkg, mHostContext.getPackageName())) {                    args[index] = mHostContext.getPackageName();                }            }            return super.beforeInvoke(receiver, method, args);        }