Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

关于unidbg模拟执行mtguard.so之mt3.0问题 #602

Open
myVison opened this issue Feb 5, 2024 · 0 comments
Open

关于unidbg模拟执行mtguard.so之mt3.0问题 #602

myVison opened this issue Feb 5, 2024 · 0 comments

Comments

@myVison
Copy link

myVison commented Feb 5, 2024

你好,我在构建mtgsig3.0版本时,遇见main(120)调用时,传递的是IIVTQYOSF$1类型对象数组,在unidbg上模拟参数传递的时候,似乎传递不正确,想咨询下有什么办法可以处理该参数传递?
我在unidbg中如下构建参数:
mytemp变量则是自定义的java类IIVTQYOSF$1
DvmObject dvmObject1 = vm.resolveClass("com.meituan.android.common.mtguard.wtscore.plugin.sign.core.IIVTQYOSF$1").newObject(mytemp); ArrayObject initSo_arg=new ArrayObject(dvmObject1); DvmObject dvmObject_initSo = ShellBridge.callStaticJniMethodObject(emulator, "main(I[Ljava/lang/Object;)[Ljava/lang/Object;", 120,initSo_arg);
我在使用frida hook得到的结果如下:
[120] - arg0:com.meituan.android.common.mtguard.wtscore.plugin.sign.core.IIVTQYOSF$1@2a2d510
在unidbg模拟执行时,报如下错误:
TAG Vison ------------------- [call]inti2 -------------------
Find native function Java_com_meituan_android_common_mtguard_ShellBridge_main => RX@0x40025d48[libmtguard.so]0x25d48
Exception in thread "main" java.lang.NullPointerException
at com.sankuai.MT3.myMeituan3.Funtion2(myMeituan3.java:192)
at com.sankuai.MT3.myMeituan3.main(myMeituan3.java:139)
所以我猜测还是参数没有构造好,不知道各位可否有更好的解决办法?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant