Android，Proguard究竟做了什么？

我正在使用Proguard来混淆我的代码。所以，我在project.propertise文件中激活它。Android，Proguard究竟做了什么？

之后，我通过apktool反编译APK文件。

反编译文件中有三个项目，res，smali和AndroidManifest。在res文件夹中，我可以清楚地看到我的图像:) 在smali中，这并不容易理解，但我仍然可以找到我的代码。它是这样的：

.method public static u()Ljava/lang/String; 
    .locals 1 

    const/4 v0, 0x1 

    packed-switch v0, :pswitch_data_0 

    const-string v0, "https://uat.somewhere.com/ebroking/wecos/mobiletrader/aboutus.html" 

    :goto_0 
    return-object v0 

    :pswitch_0 
    const-string v0, "https://www2.somewhere.com/ebroking/wecos/mobiletrader/aboutus.html" 

    goto :goto_0 

    :pswitch_data_0 
    .packed-switch 0x1 
     :pswitch_0 
    .end packed-switch

如果我去包名（活动），有几个文件，如a.smali，aa.smali，ab.smali，ac.smali等。另外，在此我可以看到我所有的活动。例如，在我的应用程序中，我有一个名为MSAboutUs的活动。在smali文件夹中，其名称是MSAboutUs.smali。当我打开它时，我可以看到以下代码：

.class public Lcom/pbb/mystock/activities/MSAboutUs; 
.super Lcom/pbb/mystock/activities/ay; 


# instance fields 
.field private j:Landroid/widget/Button; 

.field private k:Landroid/webkit/WebView; 


# direct methods 
.method public constructor <init>()V 
    .locals 0 

    invoke-direct {p0}, Lcom/pbb/mystock/activities/ay;-><init>()V 

    return-void 
.end method 


# virtual methods 
.method public onCreate(Landroid/os/Bundle;)V 
    .locals 3 

    invoke-super {p0, p1}, Lcom/pbb/mystock/activities/ay;->onCreate(Landroid/os/Bundle;)V 

    const v0, 0x7f030004 

    invoke-virtual {p0, v0}, Lcom/pbb/mystock/activities/MSAboutUs;->setContentView(I)V 

    const-string v0, "" 

    const-string v1, "Loading..." 

    const/4 v2, 0x1 

    invoke-static {p0, v0, v1, v2}, Landroid/app/ProgressDialog;->show(Landroid/content/Context;Ljava/lang/CharSequence;Ljava/lang/CharSequence;Z)Landroid/app/ProgressDialog; 

    move-result-object v0 

    iput-object v0, p0, Lcom/pbb/mystock/activities/MSAboutUs;->a:Landroid/app/ProgressDialog; 

    const v0, 0x7f060008 

    invoke-virtual {p0, v0}, Lcom/pbb/mystock/activities/MSAboutUs;->findViewById(I)Landroid/view/View; 

    move-result-object v0 

    check-cast v0, Landroid/webkit/WebView; 

    iput-object v0, p0, Lcom/pbb/mystock/activities/MSAboutUs;->k:Landroid/webkit/WebView; 

    iget-object v0, p0, Lcom/pbb/mystock/activities/MSAboutUs;->k:Landroid/webkit/WebView; 

    new-instance v1, Lcom/pbb/mystock/activities/a; 

    invoke-direct {v1, p0}, Lcom/pbb/mystock/activities/a;-><init>(Lcom/pbb/mystock/activities/MSAboutUs;)V 

    invoke-virtual {v0, v1}, Landroid/webkit/WebView;->setWebViewClient(Landroid/webkit/WebViewClient;)V 

    iget-object v0, p0, Lcom/pbb/mystock/activities/MSAboutUs;->k:Landroid/webkit/WebView; 

    invoke-static {}, Lcom/pbb/mystock/a/b;->u()Ljava/lang/String; 

    move-result-object v1 

    invoke-virtual {v0, v1}, Landroid/webkit/WebView;->loadUrl(Ljava/lang/String;)V 

    const v0, 0x7f060007 

    invoke-virtual {p0, v0}, Lcom/pbb/mystock/activities/MSAboutUs;->findViewById(I)Landroid/view/View; 

    move-result-object v0 

    check-cast v0, Landroid/widget/Button; 

    iput-object v0, p0, Lcom/pbb/mystock/activities/MSAboutUs;->j:Landroid/widget/Button; 

    iget-object v0, p0, Lcom/pbb/mystock/activities/MSAboutUs;->j:Landroid/widget/Button; 

    new-instance v1, Lcom/pbb/mystock/activities/b; 

    invoke-direct {v1, p0}, Lcom/pbb/mystock/activities/b;-><init>(Lcom/pbb/mystock/activities/MSAboutUs;)V 

    invoke-virtual {v0, v1}, Landroid/widget/Button;->setOnClickListener(Landroid/view/View$OnClickListener;)V 

    const v0, 0x7f060009 

    invoke-virtual {p0, v0}, Lcom/pbb/mystock/activities/MSAboutUs;->findViewById(I)Landroid/view/View; 

    move-result-object v0 

    check-cast v0, Landroid/widget/Button; 

    const v1, 0x7f06000a 

    invoke-virtual {p0, v1}, Lcom/pbb/mystock/activities/MSAboutUs;->findViewById(I)Landroid/view/View; 

    move-result-object v1 

    check-cast v1, Landroid/widget/HorizontalScrollView; 

    invoke-virtual {p0, v0, v1}, Lcom/pbb/mystock/activities/MSAboutUs;->a(Landroid/widget/Button;Landroid/widget/HorizontalScrollView;)V 

    invoke-virtual {p0}, Lcom/pbb/mystock/activities/MSAboutUs;->d()V 

    return-void 
.end method 

.method public onKeyDown(ILandroid/view/KeyEvent;)Z 
    .locals 1 

    const/4 v0, 0x4 

    if-ne p1, v0, :cond_0 

    const/high16 v0, 0x7f04 

    invoke-virtual {p0, v0}, Lcom/pbb/mystock/activities/MSAboutUs;->getString(I)Ljava/lang/String; 

    move-result-object v0 

    invoke-virtual {p0, v0}, Lcom/pbb/mystock/activities/MSAboutUs;->b(Ljava/lang/String;)V 

    :cond_0 
    const/4 v0, 0x0 

    return v0 
.end method

这与其他活动相同。我可以看到登录活动EditTexts和按钮。我确信花几个小时才能理解什么是架构，然后操纵代码。

所以我的问题是Progaurd究竟在做什么？我认为它改变了类，方法和变量的名称，但似乎没有任何改变。

在应用prject.properties我已经加入这一行：

proguard.config=proguard.cfg

和proguard.cfg包括这些行：

# This is a configuration file for ProGuard. 
# http://proguard.sourceforge.net/index.html#manual/usage.html 

-dontusemixedcaseclassnames 
-dontskipnonpubliclibraryclasses 
-verbose 

# Optimization is turned off by default. Dex does not like code run 
# through the ProGuard optimize and preverify steps (and performs some 
# of these optimizations on its own). 
-dontoptimize 
-dontpreverify 
# Note that if you want to enable optimization, you cannot just 
# include optimization flags in your own project configuration file; 
# instead you will need to point to the 
# "proguard-android-optimize.txt" file instead of this one from your 
# project.properties file. 

-keepattributes *Annotation* 
-keep public class com.google.vending.licensing.ILicensingService 
-keep public class com.android.vending.licensing.ILicensingService 

# For native methods, see http://proguard.sourceforge.net/manual/examples.html#native 
-keepclasseswithmembernames class * { 
    native <methods>; 
} 

# keep setters in Views so that animations can still work. 
# see http://proguard.sourceforge.net/manual/examples.html#beans 
-keepclassmembers public class * extends android.view.View { 
    void set*(***); 
    *** get*(); 
} 

# We want to keep methods in Activity that could be used in the XML attribute onClick 
-keepclassmembers class * extends android.app.Activity { 
    public void *(android.view.View); 
} 

# For enumeration classes, see http://proguard.sourceforge.net/manual/examples.html#enumerations 
-keepclassmembers enum * { 
    public static **[] values(); 
    public static ** valueOf(java.lang.String); 
} 

-keep class * implements android.os.Parcelable { 
    public static final android.os.Parcelable$Creator *; 
} 

-keepclassmembers class **.R$* { 
    public static <fields>; 
} 

# The support library contains references to newer platform versions. 
# Don't warn about those in case this app is linking against an older 
# platform version. We know about them, and they are safe. 
-dontwarn android.support.** 

# Remove all logs 
-assumenosideeffects class android.util.Log { 
    public static *** v(...); 
    public static *** d(...); 
    public static *** i(...); 
    public static *** w(...); 
    public static *** e(...); 
} 

-keepattributes JavascriptInterface 
-keep public class com.pbb.mystock.activities.MSLogin2$MyJavaScriptInterface 
-keep public class * implements com.pbb.mystock.activities.MSLogin2$JavaScriptInterface 
-keepclassmembers class com.pbb.mystock.activities.MSLogin2$JavaScriptInterface { 
    void processHTML(***); 
}

来源

2012-12-18 Hesam

你的标题问“...... Proguard究竟做了什么？并在你的问题中陈述“我正在使用Proguard来混淆我的代码”。 - 尽管我怀疑你不理解混淆的含义，但你基本上已经回答了你自己的问题。混淆意味着“隐藏”或“混淆”。换句话说，Proguard只是简单地直接解释apk中的代码而已。这并不意味着它会加密或使其100％安全。 – Squonk

谢谢Squonk，是的你是对的，但我期望当我隐藏或混淆某些事物时我再也看不清楚了。这就是为什么我问它是什么。如果它是混淆因此我不应该看清楚我的班级名称。那么，它在做什么？可能尼古拉的答案是对的。 – Hesam

它做同样的事情，因为它在其他平台上，看到FAQ为细节。在Andorid上，您必须保留清单中定义的活动，服务和其他组件的名称，因为操作系统按名称引用它们。生命周期方法也是如此，例如onCreate()。资源不会以任何方式修改。非组件类（POJO）将被重命名，其方法和字段也将被重命名。它最终取决于您使用的配置文件的内容。

正如您已经注意到的那样，这并不完全隐藏您的代码，没有任何作用。反编译时只会让阅读变得更加困难。你可以尝试DexGuard，它可以做更多的事情，但最终如果有人足够肯定，他们可以反转你的代码（本地代码也是如此）

来源

2012-12-18 07:06:46

Android，Proguard究竟做了什么？

回答

相关问题