Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

A certain module is crashing an app #7

Closed
1 task done
Rtizer-9 opened this issue Aug 29, 2024 · 32 comments
Closed
1 task done

A certain module is crashing an app #7

Rtizer-9 opened this issue Aug 29, 2024 · 32 comments
Labels
question Further information is requested

Comments

@Rtizer-9
Copy link

Steps to reproduce/复现步骤

  1. Install Android Faker module
  2. Select instagram under scope and reboot.
  3. Open instagram.

Expected behaviour/预期行为

  1. Instagram should open.

Actual behaviour/实际行为

  1. App crashes with crash information with lsposed logs complaining about something.

Xposed Module List/Xposed 模块列表

Android Faker

Magisk Module List/Magisk 模块列表

Shamiko, Zygisk-Next, Zygisk-Assitant, Zygisk-Lsposed and some audio modules.

LSPosed version/LSPosed 版本

1.10.0 (7082)

Android version/Android 版本

14

Magisk version/Magisk 版本

Magisk alpha 27006

Riru version/Riru 版本

N/A

Version requirement/版本要求

  • I am using latest debug CI version of LSPosed and enable verbose log/我正在使用最新 CI 调试版本且启用详细日志

Logs/日志

LSPosed_2024-08-29T19_35_47.817727.zip
LSPosed_2024-08-29T19_35_52.300657.zip

@Rtizer-9 Rtizer-9 added the bug Something isn't working label Aug 29, 2024
@Rtizer-9 Rtizer-9 changed the title A certain module is crashing the app A certain module is crashing an app Aug 29, 2024
@Rtizer-9
Copy link
Author

Rtizer-9 commented Aug 29, 2024

Some info that might be helpful for you:

I've frequently faced this app crash error with android faker, geergit and ssl-killer modules with instagram or whatever is under scope with almost all releases of mywalkb. The pumpcin fork worked perfectly with all these modules except the last release which was incompatible with waenhancer.

I'm telling you this because I think all these problems are linked to a common thing for which pumpcin already had patched his fork.

PS: Thanks for picking up the development of LSPosed, really appreciate it.

@Dev4Mod
Copy link

Dev4Mod commented Aug 29, 2024

On Android Faker, there is an option to fake the device (model name and Android version). From Android 14, it is necessary to specify RECEIVER_EXPORT or RECEIVER_NOT_EXPORT. If Android Faker is faking for a version lower than 14 and the App's target SDK (Instagram) is 14, it will throw this exception.

@Dev4Mod
Copy link

Dev4Mod commented Aug 29, 2024

more info here

@Rtizer-9
Copy link
Author

@Dev4Mod Working after turning off that option. Should I close the issue now. From what I understand lsposed can't/shouldn't do anything about and android faker itself should have prop available for a14 first (I checked it only has a13 and below).

@JingMatrix JingMatrix added question Further information is requested and removed bug Something isn't working labels Aug 29, 2024
@Rtizer-9
Copy link
Author

@JingMatrix ssl killer module is still crashing.

@JingMatrix
Copy link
Owner

JingMatrix commented Aug 29, 2024

ssl killer module is still crashing.

Please provide some necessary logs.

It is not an open source App, which further requires root permission to run.
Hence, I won't test it on my device, and you should provide the crashing logs for analysis.

@JingMatrix JingMatrix reopened this Aug 29, 2024
@Dev4Mod
Copy link

Dev4Mod commented Aug 30, 2024

I know the Dev of this module, apparently it seems to be a problem in a hook of the module. But I did a shallow investigation, but this is not a problem of LSPosed. Besides, there's a strange lib on Instagram "libaborthooks.so" this might be a protection for hooks, I'm not sure. But I repeat, it's not a problem of LSPosed.

@Rtizer-9
Copy link
Author

@JingMatrix fyi, the latest build in actions allows usage of ssl killer without any app crash. It's a different thing if it works on an application or not, and whether it's completely crashing the app.

The latest build doesn't crash the apps outright on launch.

@Dev4Mod
Copy link

Dev4Mod commented Aug 30, 2024

This is the crash log.

*** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
Revision: '0'
ABI: 'arm64'
Timestamp: 2024-08-29 21:58:16.430365871-0300
Process uptime: 1s
Cmdline: com.instagram.android
pid: 17920, tid: 17996, name: SIMPLE_WORKER3  >>> com.instagram.android <<<
uid: 10275
tagged_addr_ctrl: 0000000000000001 (PR_TAGGED_ADDR_ENABLE)
pac_enabled_keys: 000000000000000f (PR_PAC_APIAKEY, PR_PAC_APIBKEY, PR_PAC_APDAKEY, PR_PAC_APDBKEY)
signal 6 (SIGABRT), code -6 (SI_TKILL), fault addr --------
Abort message: 'java.lang.IllegalArgumentException: Required method checkServerTrusted(X509Certificate[], String, String, String) missing
	at android.net.http.X509TrustManagerExtensions.<init>(X509TrustManagerExtensions.java:71)
	at X.0XP.<init>(:7)
	at X.0T1.<init>(:11)
	at X.1Dw.<init>(:1)
	at com.facebook.mobilenetwork.internal.certificateverifier.CertificateVerifier.<init>(:12)
	at com.facebook.tigon.tigonmns.TigonMNSServiceHolder.initHybrid(Native Method)
	at com.facebook.tigon.tigonmns.TigonMNSServiceHolder.<init>(:268435473)
	at com.instagram.service.tigon.IGTigonService.getTigonService(:1414)
	at X.19G.get(:539)
	at X.19I.run(:47)
	at X.0rG.run(:25)
	at X.0rD.run(:34)
	at X.0rG.run(:25)
	at X.0rG.run(:25)
	at X.0mY.run(:95)'
    x0  0000000000000000  x1  000000000000464c  x2  0000000000000006  x3  0000007e9f92c2ef
    x4  75722e596d302e58  x5  000a2935393a286e  x6  0000000000008080  x7  8080808080808080
    x8  0000000000000083  x9  0000000000000009  x10 fefefefefefefeff  x11 7f7f7f7f7f7f7f7f
    x12 0101010101010101  x13 0000000013f47010  x14 0000007ac0169430  x15 0000000000000038
    x16 0000007ac8cc3ba8  x17 0000007e9b1fd868  x18 0000007a35928000  x19 0000000000004600
    x20 0000007ac8d37000  x21 b400007c602614f0  x22 0000000000000000  x23 b400007ba03604c0
    x24 0000007ac016c000  x25 0000007a2253c000  x26 0000007a2253c190  x27 0000000000000000
    x28 0000000000000000  x29 0000007ac016c000
    lr  0000007a3aa61ba0  sp  0000007ac016ace0  pc  0000007a3aa61c70  pst 0000000000001000
backtrace:
  NOTE: Function names and BuildId information is missing for some frames due
  NOTE: to unreadable libraries. For unwinds of apps, only shared libraries
  NOTE: found under the lib/ directory are readable.
  NOTE: On this device, run setenforce 0 to make the libraries readable.
  NOTE: Unreadable libraries:
  NOTE:   /data/data/com.instagram.android/lib-compressed/libaborthooks.so
  NOTE:   /data/data/com.instagram.android/lib-compressed/libmobilenetworkstack.so
  NOTE:   /data/data/com.instagram.android/lib-compressed/libquic.so
  NOTE:   /data/data/com.instagram.android/lib-compressed/libtigon.so
      #00 pc 0000000000002c70  /data/data/com.instagram.android/lib-compressed/libaborthooks.so
      #01 pc 0000000000002b9c  /data/data/com.instagram.android/lib-compressed/libaborthooks.so
      #02 pc 0000000000016b40  /data/app/~~XH43YBKgJyygHfsO-mR4fg==/com.instagram.android-LUVDx-iaFIXbbdX9p0APIw==/lib/arm64/libbreakpad.so (abortWithReason_JNI_OnLoad+64) (BuildId: 220909654bfbd25a3750f5ba96f93d5f306a306c)
      #03 pc 00000000001210ec  /data/data/com.instagram.android/lib-compressed/libquic.so
      #04 pc 00000000000779a0  /data/data/com.instagram.android/lib-compressed/libquic.so
      #05 pc 00000000000749d4  /data/data/com.instagram.android/lib-compressed/libquic.so
      #06 pc 0000000000070d18  /data/data/com.instagram.android/lib-compressed/libquic.so
      #07 pc 00000000000735bc  /data/data/com.instagram.android/lib-compressed/libquic.so
      #08 pc 000000000005d208  /data/data/com.instagram.android/lib-compressed/libmobilenetworkstack.so
      #09 pc 0000000000096d68  /data/data/com.instagram.android/lib-compressed/libtigon.so
      #10 pc 0000000000603b48  /data/app/~~XH43YBKgJyygHfsO-mR4fg==/com.instagram.android-LUVDx-iaFIXbbdX9p0APIw==/oat/arm64/base.odex (art_jni_trampoline+168)
      #11 pc 0000000000d12f54  /data/app/~~XH43YBKgJyygHfsO-mR4fg==/com.instagram.android-LUVDx-iaFIXbbdX9p0APIw==/oat/arm64/base.odex (com.facebook.tigon.tigonmns.TigonMNSServiceHolder.<init>+164)
      #12 pc 0000000000cfdf18  /data/app/~~XH43YBKgJyygHfsO-mR4fg==/com.instagram.android-LUVDx-iaFIXbbdX9p0APIw==/oat/arm64/base.odex (com.instagram.service.tigon.IGTigonService.getTigonService+6424)
      #13 pc 0000000000ce2ae0  /data/app/~~XH43YBKgJyygHfsO-mR4fg==/com.instagram.android-LUVDx-iaFIXbbdX9p0APIw==/oat/arm64/base.odex (X.19G.get+3216)
      #14 pc 0000000000ce42f0  /data/app/~~XH43YBKgJyygHfsO-mR4fg==/com.instagram.android-LUVDx-iaFIXbbdX9p0APIw==/oat/arm64/base.odex (X.19I.run+320)
      #15 pc 0000000000beae0c  /data/app/~~XH43YBKgJyygHfsO-mR4fg==/com.instagram.android-LUVDx-iaFIXbbdX9p0APIw==/oat/arm64/base.odex (X.0rG.run+268)
      #16 pc 0000000000bea578  /data/app/~~XH43YBKgJyygHfsO-mR4fg==/com.instagram.android-LUVDx-iaFIXbbdX9p0APIw==/oat/arm64/base.odex (X.0rD.run+232)
      #17 pc 0000000000beae0c  /data/app/~~XH43YBKgJyygHfsO-mR4fg==/com.instagram.android-LUVDx-iaFIXbbdX9p0APIw==/oat/arm64/base.odex (X.0rG.run+268)
      #18 pc 0000000000beae0c  /data/app/~~XH43YBKgJyygHfsO-mR4fg==/com.instagram.android-LUVDx-iaFIXbbdX9p0APIw==/oat/arm64/base.odex (X.0rG.run+268)
      #19 pc 0000000000bc4c04  /data/app/~~XH43YBKgJyygHfsO-mR4fg==/com.instagram.android-LUVDx-iaFIXbbdX9p0APIw==/oat/arm64/base.odex (X.0mY.run+900)
      #20 pc 000000000033a7a4  /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+612) (BuildId: 2452917c4ff69cbb6e75e5512260946b)
      #21 pc 000000000023a01c  /apex/com.android.art/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+144) (BuildId: 2452917c4ff69cbb6e75e5512260946b)
      #22 pc 0000000000539108  /apex/com.android.art/lib64/libart.so (art::Thread::CreateCallback(void*)+1600) (BuildId: 2452917c4ff69cbb6e75e5512260946b)
      #23 pc 0000000000538ab8  /apex/com.android.art/lib64/libart.so (art::Thread::CreateCallbackWithUffdGc(void*)+8) (BuildId: 2452917c4ff69cbb6e75e5512260946b)
      #24 pc 00000000000ba7a8  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+208) (BuildId: f0df01936414d414e2859ea476c90934)
      #25 pc 0000000000054158  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+68) (BuildId: f0df01936414d414e2859ea476c90934)

@JingMatrix
Copy link
Owner

@Dev4Mod Hi, thank you for the information. Could you please confirm that the lastest CI build no longer causes crashes?
I was working on implement native_api today. According to the remark of @Rtizer-9 , the previous crashes might be caused by native_api.

@Rtizer-9
Copy link
Author

Rtizer-9 commented Sep 1, 2024

@JingMatrix can you please check if corepatch is working for you on latest action build.

@JingMatrix
Copy link
Owner

can you please check if corepatch is working for you on latest action build.

Surely working, I am using it daily. Please also provide the build's link you would like to refer to, in case you meant another one.

@Rtizer-9
Copy link
Author

Rtizer-9 commented Sep 2, 2024

I installed the latest action build of both of your lsposed and core patch and it's not working. Earlier I was obviously using the official one provided in the lsposed repo itself.

LSPosed_2024-09-02T12_38_18.846840.zip
LSPosed_2024-09-02T12_38_22.742578.zip

@Rtizer-9
Copy link
Author

Rtizer-9 commented Sep 2, 2024

I installed another lsposed fork (lsposed npm) and on that it works.

@Stillhard
Copy link

I installed the latest action build of both of your lsposed and core patch and it's not working. Earlier I was obviously using the official one provided in the lsposed repo itself.

Try using this with no LSPlant update like in npm-open:
https://github.com/JingMatrix/LSPosed/actions/runs/10642143768

@JingMatrix
Copy link
Owner

@Rtizer-9 Did you disable logs in the LSPosed settings ?
Please always use build from the main/master branch if you want to report issues.
If possible, disable other modules to see it if works.

By the way, is there a version of LSPosed or/and CorePatch that once worked for you?

@Rtizer-9
Copy link
Author

Rtizer-9 commented Sep 2, 2024

Did you disable logs in the LSPosed settings ?

Disabling logs functionality was only present in pumpcin fork and the now active lsposed-npm and afaik your fork can only disable verbose logs not normal logs (sorry if I remember incorrectly).

Please always use build from the main/master branch if you want to report issues.

I'll keep that in mind from now on.

By the way, is there a version of LSPosed or/and CorePatch that once worked for you?

Version of your fork or others? In others, no other fork/version ever gave this problem so it's just some temporary error introduced in one of your action build. I only needed that functionality right now so I don't remember which earlier version was working.

Except this time I've never installed a fork of corepatch. And as I mentioned npm fork latest build is working (they've some huge patches from your builds as they give credit in every release).

@Rtizer-9
Copy link
Author

Rtizer-9 commented Sep 2, 2024

Update: I tried both latest action build from master branch as well as the build suggested by @Stillhard but both do not work.

@JingMatrix
Copy link
Owner

Update: I tried both latest action build from master branch

Could you please provide logs for this test?
By the way, if you are using Magisk, then it has built-in zygisk support (in the settings), please don't use ZygiskNext with it.
It is more like a problem with your local configurations of Magisk modules.

@Rtizer-9
Copy link
Author

Rtizer-9 commented Sep 2, 2024

I disabled zygisk-next > got some errors in other modules > installed them again but shamiko 357 clearly says unsupported environment.

I took the logs though on latest master branch build
LSPosed_2024-09-02T23_26_26.328585.zip
LSPosed_2024-09-02T23_26_21.212735.zip

Aren't the devs of shamiko same as the devs of magisk alpha then how come shamiko isn't compatible with alpha inbuilt zygisk?

The reason I use zygisk-next is because of it's great changelogs describing how compatible and more undetectable it becomes release by release. I've also installed rezygisk but shamiko release after a certain version is completely incompatible with it according to its dev.

All my modules are working fine so which module is causing errors with zygisk-next? I can see iamnotdeveloper not playing great with whatsapp but that's probably because whatsapp do not need it at all I guess.

PS: These Lsposed npm guys seems to be doing some interesting work here https://t.me/rormzhstjxm and their fork is making lots of noises in communities probably because of being more undetectable probably solely because of that mywalkb patch of disabling watchdog log which you already seem to be implementing in your own fork. At the moment it seems like they've just merged different patches from devs who have already commited to your repo.

@JingMatrix
Copy link
Owner

@Rtizer-9 From your logs, there is always this line:

[ 2024-09-02T23:25:01.898    10234: 11792: 11792 E/Magisk          ] zygisk64: plt_hook failed

And then LSPosed stops to work, the log also ends.
This is not a log from LSPosed, and it indicates that your environment of zygisk is problematic, which I cannot know at all.
You have to figure out the best configuration by yourself.
I personally don't recommand you to use Magisk-alpha, as it means unstable.
If my LSPosed still doesn't work for you with the official Magisk build under the condition that only the LSPosed module is enabled, then it is meaningful for me to take care your issue because currently nobody can reproduce your problem.

For your P.S, my passion concentrates on open source world. My pleasure comes from my contributions to the project, and I don't care that much of fame or others' behaviors. For people who are involving in this community, I suppose they know how to appriciate and respect open source projects properly. Their engagements and aesthetic tastes motivate me to maintian this repo.

@Rtizer-9
Copy link
Author

Rtizer-9 commented Sep 2, 2024

I completely agree with and understand everything you said above.

The reason I'm using this setup is only because of its stability and best root detection bypass and nothing else. A normal user only cares about that irrespective of how big the error log becomes because all the apps/modules are working fine for me.

For the npm thing if you look at my comment edit history, I'd actually written for you to collaborate with these guys but from what it looks like they've just merged the hiding patches and that new parasitic manager so obviously you're the guy doing main development so it's stupid to ask you to take some "inspiration" from them and that's why I deleted that. So that's all I meant by mentioning their fork.

I guess I'll trouble you the day about that core patch issue when I'll be left with no choice because I can't lose the root detection bypass alpha and shamiko provides because my bank apps do need that.

As I already mentioned I did try to do what you suggested but shamiko is incompatible (even to me it's surprising) so I'm left with no choice other than use zygisk-next and alpha.

Thanks for assisting. I'll keep testing your latest builds meanwhile 👍

@JingMatrix
Copy link
Owner

@Rtizer-9 Did you use the debug version of LSPosed when you sent the logs? If not, please do it.

@Rtizer-9
Copy link
Author

Rtizer-9 commented Sep 3, 2024

I installed both the latest debug build of corepatch and lsposed and phone is stuck on boot; it's not a bootloop but it's just stuck there. I'll update if I manage to boot or if you've some advice to make it boot then I'm all ears.

Update: No luck, it won't boot.

@JingMatrix
Copy link
Owner

I installed both the latest debug build of corepatch and lsposed and phone is stuck on boot;

Okay, next time, do use the debug version. As you have said in the issue,

I am using latest debug CI version of LSPosed and enable verbose log

, otherwise it was wasting my time since I supposed that you already knew it.

if you've some advice to make it boot then I'm all ears.

If you cannot boot your phone at all, try enter the safe mode.

For debugging the issue, I need logs for that, you may try run the following command from a computer since the moment that your screen is on:

adb logcat -s AndroidRuntime LSPosed  LSPosed-Bridge LSPlant LSPosedContext zygisk64 LSPlt Dobby LSPosedService '*:F'

I guess there were conflicts between modules.

@Rtizer-9
Copy link
Author

Rtizer-9 commented Sep 3, 2024

Sure. I recovered the phone and booted somehow and will update with debug logs if I manage to boot it in debug when I get some time.

@Qing0731

This comment was marked as outdated.

@JingMatrix

This comment was marked as outdated.

@Qing0731
Copy link

Qing0731 commented Sep 9, 2024

The core hack also doesn't work on my device

Please use the debug version, and upload new logs for it.

I am now using the debug version of the core path
LSPosed_2024-09-09T23_41_43.952034.zip

@JingMatrix
Copy link
Owner

@Nimpip Core Patch seems working well on your device, which functions of it doesn't work as expected ?

@Qing0731
Copy link

Qing0731 commented Sep 9, 2024

@Nimpip Core Patch seems working well on your device, which functions of it doesn't work as expected ?

Applications with different signatures cannot be overwritten

@Qing0731
Copy link

Qing0731 commented Sep 9, 2024

And when I used the core of the Lucky cracker to crack the magik module, the function worked, so I guess it's not a problem with my system

JingMatrix pushed a commit that referenced this issue Sep 12, 2024
build(fix): patch wrong build configurations of submodule `fmt`
privacyguy123 added a commit to privacyguy123/LSPosed that referenced this issue Sep 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

5 participants