漏洞分析

0

高危漏洞

7

中危漏洞

6

低危漏洞

8

警告

文件名 com.xiaomi.mico.apk
上传者 2271150345@qq.com
文件大小 17.547905921936MB
MD5 01ca031b5c7840042e878b30c778b679
包名 com.xiaomi.mico
Main Activity com.xiaomi.mico.splash.SplashActivity
Min SDK 19
Target SDK 26

权限列表

# 名称 说明 提示
0 android.permission.CALL_PHONE 允许应用程序在您不介入的情况下拨打电话。恶意应用程序可借此在您的话费单上产生意外通话费。请注意,此权限不允许应用程序拨打紧急呼救电话。 警告
1 android.permission.READ_SMS 允许应用程序读取您的手机或SIM卡中存储的短信。恶意应用程序可借此读取您的机密信息。 警告
2 android.permission.SEND_SMS 允许应用程序发送短信。恶意应用程序可能会不经您的确认就发送信息,给您带来费用。 警告
3 android.permission.ACCESS_COARSE_LOCATION 访问大概的位置源(例如蜂窝网络数据库)以确定手机的大概位置(如果可以)。恶意应用程序可借此确定您所处的大概位置。 注意
4 android.permission.ACCESS_FINE_LOCATION 访问精准的位置源,例如手机上的全球定位系统(如果有)。恶意应用程序可能会借此确定您所处的位置,并可能消耗额外的电池电量。 注意
5 android.permission.BLUETOOTH 允许应用程序查看本地蓝牙手机的配置,以及建立或接受与配对设备的连接。 注意
6 android.permission.CHANGE_WIFI_MULTICAST_STATE 允许应用程序接收并非直接向您的设备发送的数据包。这样在查找附近提供的服务时很有用。这种操作所耗电量大于非多播模式。 注意
7 android.permission.GET_TASKS 允许应用程序检索有关当前和最近运行的任务的信息。恶意应用程序可借此发现有关其他应用程序的保密信息。 注意
8 android.permission.READ_PHONE_STATE 允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号,是否正在通话,以及对方的号码等。 注意
9 android.permission.RECEIVE_SMS 允许应用程序接收和处理短信。恶意应用程序可借此监视您的信息,或者将信息删除而不向您显示。 注意
10 android.permission.RECORD_AUDIO 允许应用程序访问录音路径。 注意
11 android.permission.SYSTEM_ALERT_WINDOW 允许应用程序显示系统警报窗口。恶意应用程序可借此掌控整个手机屏幕。 注意
12 android.permission.WRITE_SETTINGS 允许应用程序修改系统设置方面的数据。恶意应用程序可借此破坏您的系统配置。 注意
13 android.permission.ACCESS_NETWORK_STATE 允许应用程序查看所有网络的状态。 提示
14 android.permission.ACCESS_WIFI_STATE 允许应用程序查看有关WLAN状态的信息。 提示
15 android.permission.AUTHENTICATE_ACCOUNTS 允许应用程序使用AccountManager的帐户身份验证程序功能,包括创建帐户以及获取和设置其密码。 提示
16 android.permission.BLUETOOTH_ADMIN 允许应用程序配置本地蓝牙手机,以及发现远程设备并与其配对。 提示
17 android.permission.CAMERA 允许应用程序使用相机拍照,这样应用程序可随时收集进入相机镜头的图像。 提示
18 android.permission.CHANGE_NETWORK_STATE 允许应用程序更改网络连接的状态。 提示
19 android.permission.CHANGE_WIFI_STATE 允许应用程序连接到WLAN接入点以及与WLAN接入点断开连接,并对配置的WLAN网络进行更改。 提示
20 android.permission.FLASHLIGHT 允许应用程序控制闪光灯。 提示
21 android.permission.GET_ACCOUNTS 允许应用程序获取手机已知的帐户列表。 提示
22 android.permission.INTERNET 允许程序访问网络. 提示
23 android.permission.MANAGE_ACCOUNTS 允许应用程序执行添加、删除帐户及删除其密码之类的操作。 提示
24 android.permission.USE_CREDENTIALS 允许应用程序请求身份验证标记。 提示
25 android.permission.VIBRATE 允许应用程序控制振动器。 提示
26 android.permission.WAKE_LOCK 允许应用程序防止手机进入休眠状态。 提示
27 android.permission.WRITE_EXTERNAL_STORAGE 允许应用程序写入SD卡。 提示

四大组件

组件名称

com.xiaomi.mico.splash.SplashActivity
com.xiaomi.mico.login.LoginActivity
com.xiaomi.mico.login.MiAuthWebActivity
com.xiaomi.account.openauth.AuthorizeActivity
com.xiaomi.mico.main.MainActivity
com.xiaomi.mico.main.DevActivity
com.xiaomi.mico.main.FactoryScanDeviceActivity
com.xiaomi.mico.main.FactoryInitDeviceActivity
com.xiaomi.mico.bluetooth.BindDeviceScanActivity
com.xiaomi.mico.bluetooth.BindDeviceInitActivity
com.xiaomi.mico.bluetooth.QQMusicInitActivity
com.xiaomi.mico.bluetooth.InitSettingActivity
com.xiaomi.mico.bluetooth.HelpActivity
com.xiaomi.mico.music.section.SectionDetailActivity
com.xiaomi.mico.music.patchwall.PatchWallActivity
com.xiaomi.mico.music.patchwall.BlockDetailActivity
com.xiaomi.mico.music.player.PlayerActivity
com.xiaomi.mico.music.detail.AlbumDetailActivity
com.xiaomi.mico.music.detail.SheetDetailActivity
com.xiaomi.mico.music.detail.ArtistDetailActivity
com.xiaomi.mico.music.detail.StationDetailActivity
com.xiaomi.mico.music.detail.ChannelDetailActivity
com.xiaomi.mico.music.detail.RecentDetailActivity
com.xiaomi.mico.music.favourite.FavouriteActivity
com.xiaomi.mico.music.search.SearchActivity
com.xiaomi.mico.device.MiotDeviceCmdActivityV2
com.xiaomi.mico.device.MiotDeviceCmdActivity
com.xiaomi.mico.tool.embedded.activity.CommonWebActivity
com.xiaomi.mico.tool.embedded.activity.CampaignWebActivity
com.xiaomi.mico.tool.embedded.activity.ClockActivity
com.xiaomi.mico.tool.embedded.activity.TimerActivity
com.xiaomi.mico.tool.embedded.activity.TimeSettingActivity
com.xiaomi.mico.tool.embedded.activity.MemoActivity
com.xiaomi.mico.tool.embedded.activity.AITrainWebActivity
com.xiaomi.mico.tool.embedded.activity.KuwoActivity
com.xiaomi.mico.tool.embedded.debug.DebugActivity
com.xiaomi.mico.tool.embedded.debug.FeedbackHistoryActivity
com.xiaomi.mico.tool.embedded.voip.VOIPActivity
com.xiaomi.mico.tool.embedded.activity.TTSActivity
com.xiaomi.mico.tool.embedded.activity.XiaomiTVActivity
com.xiaomi.mico.tool.embedded.activity.CommonAuthActivity
com.xiaomi.mico.tool.embedded.voip.CallingActivity
com.xiaomi.mico.tool.embedded.activity.SkillDetailActivity
com.xiaomi.mico.tool.embedded.activity.SkillRatingActivity
com.xiaomi.mico.module.update.UpdateAssistantActivity
com.xiaomi.mico.module.feedback.FeedbackInputActivity
com.xiaomi.mico.setting.PersonalInfoActivity
com.xiaomi.mico.setting.BluetoothSettingActivity
com.xiaomi.mico.setting.WifiSettingActivity
com.xiaomi.mico.setting.TrafficSettingActivity
com.xiaomi.mico.setting.AddressSelectionActivity
com.xiaomi.mico.setting.CitySelectActivity
com.xiaomi.mico.setting.SelectMusicGenreActivity
com.xiaomi.mico.tool.SkillCategoryActivity
com.xiaomi.mico.setting.SelectSingerActivity
com.xiaomi.mico.setting.QQMusicAccountActivity
com.xiaomi.mico.setting.ChildrenProfileActivity
com.xiaomi.mico.setting.ChildrenProfileEditActivity
com.xiaomi.mico.wxapi.WXEntryActivity
com.xiaomi.mico.login.OAuthActivity
com.tencent.tauth.AuthActivity
com.tencent.connect.common.AssistActivity
com.xiaomi.mico.common.schema.SchemaActivity
com.xiaomi.passport.ui.LoginActivity
com.xiaomi.passport.ui.QuickLoginActivity
com.xiaomi.passport.ui.NotificationActivity
com.xiaomi.passport.ui.RegisterAccountActivity
com.xiaomi.passport.ui.AreaCodePickerActivity
com.xiaomi.passport.ui.AccountUnactivatedActivity
com.xiaomi.passport.ui.LicenseActivity
com.xiaomi.passport.LocalFeatures.GetStsUrlActivity
com.xiaomi.passport.LocalFeatures.GetStsUrlNotificationActivity
com.xiaomi.passport.ui.LoginQRCodeScanResultActivity
com.xiaomi.passport.v2.ui.SetPasswordActivity
com.facebook.react.devsupport.DevSettingsActivity
com.xiaomi.miot.store.ui.MiotStoreMainActivity
com.xiaomi.miot.store.ui.MiotTakeMediaActivity
com.alipay.sdk.app.H5PayActivity
com.alipay.sdk.app.H5AuthActivity
com.alipay.sdk.auth.AuthActivity
com.mipay.sdk.app.MipayWebActivity
com.unionpay.uppay.PayActivity
com.unionpay.UPPayWapActivity
com.xiaomi.qrcode2.BarcodeGenActivity
com.xiaomi.qrcode2.ScanBarcodeActivity
com.github.pedrovgs.lynx.LynxActivity

com.inuker.bluetooth.library.BluetoothService
com.xiaomi.push.service.XMPushService
com.xiaomi.push.service.XMJobService
com.xiaomi.mipush.sdk.PushMessageHandler
com.xiaomi.mipush.sdk.MessageHandleService
com.xiaomi.passport.MiPassportUIControllerService
com.xiaomi.passport.accountmanager.MiAuthenticatorService
com.xiaomi.smarthome.authlib.AuthService

com.xiaomi.push.service.receivers.NetworkStatusReceiver
com.xiaomi.push.service.receivers.PingReceiver
com.xiaomi.mico.module.push.MicoMessageReceiver

android.support.v4.content.FileProvider

第三方库

# 库名 介绍
0 com.facebook.cache.common An image management library by FaceBook.
1 okhttp3 An HTTP+SPDY client for Android and Java applications.
2 com.alipay.sdk 支付宝移动支付功能
3 android.support.transition A backport of the new Transitions API for Android.
4 com.facebook.imagepipeline An image management library by FaceBook.
5 com.sina.weibo 新浪微博开放平台(Weibo Open Platform)是基于新浪微博海量用户和强大的传播能力,接入第三方合作伙伴服务,向用户提供丰富应用和完善服务的开放平台。将你的服务接入微博平台,有助于推广产品,增加网站/应用的流量、拓展新用户,获得收益。
6 com.squareup.picasso A powerful image downloading and caching library for Android.
7 com.github.pedrovgs Android library used to create an awesome Android UI based on a draggable element similar to the last YouTube graphic component.
8 rx RxJava – Reactive Extensions for the JVM – a library for composing asynchronous and event-based programs using observable sequences for the Java VM.
9 com.github.ksoichiro.android.observablescrollview This project aims to provide a simple and customizable pull to refresh implementation. Made in Yalantis
10 com.xiaomi.mipush.sdk 小米推送(MiPush)是小米公司为开发者提供的消息推送服务,通过在云端和客户端之间建立一条稳定、可靠的长连接,为开发者提供向客户端应用推送实时消息的服务,帮助开发者有效地拉动用户活跃。
11 io.realm Realm is a mobile database=> a replacement for SQLite & ORMs.
12 retrofit2 Type-safe REST client for Android and Java by Square, Inc.
13 com.tencent.connect 腾讯开放平台
14 com.tencent.tauth 腾讯QQ互联平台为广大开发者整理了SDK列表,辅助开发者快速接入QQ登录、分享等功能。QQ互联是腾讯旗下的开放平台,通过QQ互联,网站主和开发者可以申请接入QQ登录、用户可以使用QQ账号登录接入的站点,通过添加分享和赞组件,将站点内容分享到QQ空间和朋友网,通过获取API授权,网站主还可以将用户操作同步到QQ空间和朋友网。
15 in.srain.cube.views.ptr Ultra Pull to Refresh for Android. Support all the views.
16 android.support.multidex DEPRECATED
17 com.unionpay.uppay 银联支付
18 com.google.protobuf Protocol Buffers - Google's data interchange format https://developers.google.com/protocol-buffers/
19 com.pedrogomez.renderers Renderers is an Android library that avoids all the boilerplate needed to create a new ListView adapter.
20 butterknife View "injection" library for Android.
21 com.google.gson A Java serialization library that can convert Java Objects into JSON and back.
22 com.unionpay.mobile 银联支付涵盖便民服务、金融服务、商旅出行、休闲娱乐、电子商城等多种应用。可轻松为手机充值、购买保险、查询银行卡余额、预订酒店机票、代购火车票和购买时令商品。随时随地提供“一站式”移动支付生活服务。
23 io.realm Realm is a mobile database=> a replacement for SQLite & ORMs.
24 org.apache.thrift Apache Thrift 是 Facebook 实现的一种高效的、支持多种编程语言的远程服务调用的框架。
25 rx RxJava – Reactive Extensions for the JVM – a library for composing asynchronous and event-based programs using observable sequences for the Java VM.
26 okhttp3 An HTTP+SPDY client for Android and Java applications.
27 in.srain.cube.views.ptr Ultra Pull to Refresh for Android. Support all the views.
28 retrofit2 Type-safe REST client for Android and Java by Square, Inc.
29 com.xiaomi.mipush.sdk 小米推送(MiPush)是小米公司为开发者提供的消息推送服务,通过在云端和客户端之间建立一条稳定、可靠的长连接,为开发者提供向客户端应用推送实时消息的服务,帮助开发者有效地拉动用户活跃。
30 org.json 根据Gson库使用的要求,将JSONObject格式的String 解析成实体

静态扫描发现风险点

风险等级 风险名称

中危

检测到当前标志被设置成true或没设置,这会导致adb调试备份允许恶意攻击者复制应用程序数据,造成数据泄露。

中危

检测到2个未移除的敏感Test或Debug组件

com.xiaomi.mico.tool.embedded.debug.DebugActivity
com.xiaomi.mico.tool.embedded.debug.FeedbackHistoryActivity

建议:
在正式发布app前移除敏感的Test或Debug组件

中危

该app需要移除大部分日志打印代码。
经扫描该包仍存在大量打日志代码,共发现360处打日志代码.(此处扫描的日志打印代码,是指调用android.util.Log.* 打印的.)
详情如下:

位置: classes.dex
com.xiaomi.miot.store.module.SystemUIModule;->setTranslucentStatus(Z Lcom/facebook/react/bridge/Callback;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.accountsdk.activate.ActivateStatusReceiver;->internalUpdateActivateInfo(Landroid/content/Context; I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.facebook.soloader.UnpackingSoSource;->regenerate(B Lcom/facebook/soloader/UnpackingSoSource$DsoManifest; Lcom/facebook/soloader/UnpackingSoSource$InputDsoIterator;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.mistatistic.sdk.f;->a(Landroid/content/Context;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.a.c;->a(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.inuker.bluetooth.library.e.a$1;->a(Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.c.aw;->b([Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
org.greenrobot.eventbus.c;->c(Ljava/lang/Object;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.airbnb.lottie.d$a;->a(Lorg/json/JSONObject; Lcom/airbnb/lottie/ax;)Lcom/airbnb/lottie/d;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->a(Landroid/accounts/Account;)Ljava/lang/String;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.accountsdk.activate.ActivateStatusReceiver;->getActivateStatus(I)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.c.a;->a(Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.module.MipayModule;->pay(Ljava/lang/String; Lcom/facebook/react/bridge/Callback;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->a(Lcom/xiaomi/a/f$g; Landroid/accounts/Account; Ljava/lang/String; Landroid/os/Bundle;)Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.a.b;->a(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.airbnb.lottie.c$b;->a(Ljava/lang/Object; F)Lcom/airbnb/lottie/ai;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->a(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.airbnb.lottie.LottieAnimationView;->setComposition(Lcom/airbnb/lottie/ax;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->a(Landroid/accounts/Account; Ljava/lang/String; Landroid/os/Bundle;)Z==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->b(Lcom/xiaomi/a/f$g;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.c.aw;->a([Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.airbnb.lottie.j$a;->a(Lorg/json/JSONObject; Lcom/airbnb/lottie/ax;)Lcom/airbnb/lottie/j;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.c.af;->onSensorChanged(Landroid/hardware/SensorEvent;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.mobile.android.pboctransaction.simapdu.b;->a(Lcom/unionpay/mobile/android/pboctransaction/e;)Ljava/util/ArrayList;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.module.SystemUIModule;->getNavigationBarHeight()I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.a.a.a.c;->invoke(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.c.aw;->a(Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.module.AppInfoModule;->getAppVersionCode()I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.b;->a()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f$e;->f()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.e;->a()V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.mobile.android.pboctransaction.sdapdu.a;->b(Lcom/unionpay/mobile/android/pboctransaction/e;)Ljava/util/ArrayList;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->b(Landroid/accounts/Account; Ljava/lang/String; I)Z==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->a(Lcom/xiaomi/a/j; Ljava/lang/String; [Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.sina.weibo.sdk.d.c;->c(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.b.a.j;->a()Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->a(Lcom/xiaomi/a/j; Landroid/accounts/Account; Ljava/lang/String; Z Landroid/os/Bundle;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.sina.weibo.sdk.d.c;->a(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->c(Landroid/accounts/Account; Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.mobile.android.utils.j;->a(I Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.a$a;->a(Lcom/xiaomi/a/i; Landroid/accounts/Account; Ljava/lang/String; Landroid/os/Bundle;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.uppay.PayActivity;->onNewIntent(Landroid/content/Intent;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.mipay.sdk.Mipay$d;->g()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.c;->a()V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.mobile.android.pboctransaction.simapdu.b;->a(Lcom/unionpay/mobile/android/pboctransaction/c; Landroid/content/Context;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
butterknife.ButterKnife;->a(Ljava/lang/Class;)Ljava/lang/reflect/Constructor;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.airbnb.lottie.ay;->a(Ljava/lang/String; Landroid/graphics/Bitmap;)Landroid/graphics/Bitmap;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->a(Lcom/xiaomi/a/j; Landroid/accounts/Account; Landroid/os/Bundle; Z)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.a.b;->a(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Lcom/d/a/a;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->d(Landroid/accounts/Account;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->b(Landroid/accounts/Account; Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.account.utils.ParcelableAttackGuardian;->safeCheck(Landroid/app/Activity;)Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.facebook.soloader.ApkSoSource$ApkUnpacker;->shouldExtract(Ljava/util/zip/ZipEntry; Ljava/lang/String;)Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.module.AppInfoModule;->getPackageName()Ljava/lang/String;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.pddstudio.highlightjs.HighlightJsView;->setSource(Ljava/io/File;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.inuker.bluetooth.library.e.a$1;->c(Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.module.AlipayModule;->pay(Ljava/lang/String; Lcom/facebook/react/bridge/Callback;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.accountsdk.activate.ActivateSdkHelper;->checkAndFillHostPackage(Landroid/content/Intent; Landroid/content/Context; Lcom/xiaomi/accountsdk/activate/ActivateSdkHelper$IntentType;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.a$a;->b(Lcom/xiaomi/a/i; Landroid/accounts/Account; Ljava/lang/String; Landroid/os/Bundle;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.module.AppInfoModule;->getOsVersion()Ljava/lang/String;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.mipay.sdk.permission.PermissionManager;->a(Landroid/content/Context; Ljava/lang/String;)Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.facebook.imagepipeline.memory.NativeMemoryChunk;->copy(I Lcom/facebook/imagepipeline/memory/NativeMemoryChunk; I I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.facebook.soloader.UnpackingSoSource;->prepare(I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.mipay.sdk.app.MipayWebActivity;->a(I Ljava/lang/String; Ljava/lang/String;)Landroid/content/Intent;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.airbnb.lottie.o;->a(Lcom/airbnb/lottie/Layer; Lcom/airbnb/lottie/ay; Lcom/airbnb/lottie/ax;)Lcom/airbnb/lottie/o;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.module.AppInfoModule;->getIMEI()Ljava/lang/String;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.account.openauth.XiaomiOAuthorize;->startGetAccessToken(Landroid/app/Activity; J Ljava/lang/String; Landroid/os/Bundle; I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.lwansbrough.RCTCamera.RCTCameraModule;->getOutputFile(I Ljava/io/File;)Ljava/io/File;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.utils.g;->a(I Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.a$a;->a(Lcom/xiaomi/a/i; Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.c.a;->a(Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.mipay.sdk.permission.d;->a(Ljava/lang/Class; Ljava/lang/String; [Ljava/lang/Class;)Ljava/lang/reflect/Method;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.youth.banner.Banner;->setImageList(Ljava/util/List;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.inuker.bluetooth.library.e.a$1;->b(Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.airbnb.lottie.ao;->(Landroid/graphics/drawable/Drawable$Callback; Ljava/lang/String; Lcom/airbnb/lottie/ap; Ljava/util/Map;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.airbnb.lottie.bu;->a(Lorg/json/JSONObject; Lcom/airbnb/lottie/ax;)Ljava/lang/Object;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.module.WxpayModule;->pay(Ljava/lang/String; Lcom/facebook/react/bridge/Callback;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f$f;->a(Landroid/os/Bundle;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.facebook.react.views.scroll.ReactScrollView;->(Lcom/facebook/react/bridge/ReactContext; Lcom/facebook/react/views/scroll/FpsListener;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.facebook.soloader.UnpackingSoSource;->deleteUnmentionedFiles([Lcom/facebook/soloader/UnpackingSoSource$Dso;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f$e;->f()V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.opensdk.utils.Log;->d(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.a.c;->a(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.b.a.f;->a(Landroid/content/Context;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.accountsdk.activate.ActivateStatusReceiver;->internalUpdateActivateInfo(Landroid/content/Context; I)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.mobile.android.pboctransaction.d.h;->b()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.pedrogomez.renderers.c;->f()Lcom/pedrogomez/renderers/c;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.a.c;->b(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)J==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.a.b;->b(Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.mobile.android.utils.j;->a(I Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.lwansbrough.RCTCamera.RCTCameraModule;->getTempMediaFile(I)Ljava/io/File;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.pddstudio.highlightjs.HighlightJsView;->setSource(Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->a(Lcom/xiaomi/a/f$g;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.mobile.android.widgets.aa;->a(Landroid/view/View;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sina.weibo.sdk.d.c;->b(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.module.UCashierModule;->pay(Ljava/lang/String; Lcom/facebook/react/bridge/Callback;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->a([Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.account.openauth.XiaomiOAuthorize;->startGetOAuthCode(Landroid/app/Activity; J Ljava/lang/String; Landroid/os/Bundle; I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f$b;->b()V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.facebook.soloader.UnpackingSoSource;->extractDso(Lcom/facebook/soloader/UnpackingSoSource$InputDso; [B)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.a.b$a;->run()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.account.utils.OAuthUrlPaser;->parseUrl(Ljava/lang/String;)Landroid/os/Bundle;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->e(I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.mobile.android.upviews.b;->handleMessage(Landroid/os/Message;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.mipay.sdk.Mipay$d;->onServiceConnected(Landroid/content/ComponentName; Landroid/os/IBinder;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
org.greenrobot.eventbus.c;->a(Ljava/lang/Object; Lorg/greenrobot/eventbus/c$b;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.a.c;->a(Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.b.a.f;->c(Landroid/content/Context;)Landroid/net/ConnectivityManager;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.module.UnionPayModule;->pay(Ljava/lang/String; Lcom/facebook/react/bridge/Callback;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.opensdk.utils.Log;->w(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.a.b;->a(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.facebook.soloader.UnpackingSoSource$1;->run()V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.inuker.bluetooth.library.e.a$1;->e(Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.facebook.soloader.UnpackingSoSource;->prepare(I)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.sina.weibo.sdk.d.c;->d(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f$d;->a(Landroid/os/Bundle;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.a.c;->a(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.c.a;->a(Ljava/lang/String; Ljava/lang/Object;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.utils.g;->a(I Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.mobile.android.utils.j;->a(I Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.opensdk.utils.Log;->v(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->a(Lcom/xiaomi/a/j; Landroid/accounts/Account; [Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.a.b$a;->run()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.opensdk.utils.Log;->i(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.airbnb.lottie.aa;->(Lcom/airbnb/lottie/ay; Lcom/airbnb/lottie/o; Lcom/airbnb/lottie/bu;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.c;->a(Landroid/os/Bundle;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.opensdk.utils.Log;->e(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.inuker.bluetooth.library.e.a$1;->d(Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f$e;->a(Ljava/lang/String;)Z==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.utils.g;->a(I Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.mobile.android.utils.j;->a(I Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.lwansbrough.RCTCamera.RCTCameraModule;->getOutputMediaFile(I)Ljava/io/File;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.mipay.sdk.Mipay$d;->f()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.airbnb.lottie.b$a;->a(Lorg/json/JSONObject; Lcom/airbnb/lottie/ax; Z)Lcom/airbnb/lottie/b;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.squareup.picasso.y;->a()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.accountsdk.activate.ActivateStatusReceiver;->onReceive(Landroid/content/Context; Landroid/content/Intent;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.lwansbrough.RCTCamera.RCTCameraViewFinder;->parseBarCodeString(Ljava/lang/String;)Lcom/google/zxing/BarcodeFormat;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.a.a;->a(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Lcom/d/a/a;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.module.AppInfoModule;->getDeviceId()Ljava/lang/String;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f$e;->a(I Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->a(Lcom/xiaomi/a/j; Landroid/accounts/Account;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.e;->a(I Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.mipay.sdk.permission.d;->a(Ljava/lang/Class; Ljava/lang/String;)Ljava/lang/reflect/Field;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.module.AppInfoModule;->getAppVersion()Ljava/lang/String;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.a.a;->b(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.airbnb.lottie.ay;->a(Z)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f$a;->onUpgrade(Landroid/database/sqlite/SQLiteDatabase; I I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.squareup.picasso.ad;->a(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.github.pedrovgs.lynx.LynxView;->k()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.accountsdk.activate.ActivateStatusReceiver;->getActivateInfo(I)Landroid/os/Bundle;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->a(Lcom/xiaomi/a/j; Ljava/lang/String; Ljava/lang/String; [Ljava/lang/String; Z Landroid/os/Bundle;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.mobile.android.pro.a.a.b;->a(Landroid/os/Handler; Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.c.ao;->b()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.mistatistic.sdk.f;->a(Landroid/content/Context;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->a(Lcom/xiaomi/a/j; Landroid/os/Bundle;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.facebook.soloader.UnpackingSoSource;->refreshLocked(Lcom/facebook/soloader/FileLocker; I [B)Z==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.accountsdk.activate.ActivateStatusReceiver;->isSimInserted(I)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->a(Lcom/xiaomi/a/j; Ljava/lang/String; Z)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.mobile.android.utils.j;->a(I Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.mobile.android.pboctransaction.b.a;->a(Ljava/lang/String; Ljava/util/HashMap;)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.mipay.sdk.Mipay$d;->onServiceDisconnected(Landroid/content/ComponentName;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.b.a.f;->b(Landroid/content/Context;)Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.a.a;->a(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f$e;->a(Landroid/os/Bundle;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->a(Lcom/xiaomi/a/f$g; Landroid/accounts/Account; Ljava/lang/CharSequence; Landroid/content/Intent;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->a(Landroid/accounts/Account; Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.b.a.f;->b(Landroid/content/Context;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sina.weibo.sdk.d.c;->e(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.a$a;->a(Lcom/xiaomi/a/i; Ljava/lang/String; Ljava/lang/String; [Ljava/lang/String; Landroid/os/Bundle;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.c.aw;->b(Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.c;->a(I Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->a(Ljava/lang/String;)[Landroid/accounts/Account;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.a.c;->b(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)J==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.d;->a(Landroid/accounts/Account; Ljava/lang/String; Z)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->a(Lcom/xiaomi/a/j; Landroid/accounts/Account; Ljava/lang/String; Z Z Landroid/os/Bundle;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.mobile.android.pro.a.a.b;->a(I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.e;->a(Landroid/os/Bundle;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f$a;->onOpen(Landroid/database/sqlite/SQLiteDatabase;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.d;->a(Landroid/accounts/OnAccountsUpdateListener;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->d(Landroid/accounts/Account;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.a.b;->b(Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->a(Landroid/accounts/Account; Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->b()[Landroid/accounts/AuthenticatorDescription;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.facebook.imagepipeline.memory.NativeMemoryChunk;->finalize()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f$b;->c()V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.youth.banner.Banner;->setBannerAnimation(Ljava/lang/Class;)Lcom/youth/banner/Banner;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.youth.banner.Banner;->initViewPagerScroll()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.a$a;->a(Lcom/xiaomi/a/i; Landroid/accounts/Account; Landroid/os/Bundle;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->a([Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->b(Landroid/accounts/Account; Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.c.a.b.a.k;->a(J I)Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.utils.g;->a(I Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.facebook.react.flat.FlatARTSurfaceViewShadowNode;->drawOutput()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.utils.g;->a(I Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
butterknife.ButterKnife;->b(Ljava/lang/Object; Landroid/view/View;)Lbutterknife/Unbinder;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.mobile.android.pboctransaction.b.b$b;->a([B)Lcom/unionpay/mobile/android/pboctransaction/b/b$a;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.mistatistic.sdk.f;->a(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Z)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.a.f;->c(Landroid/accounts/Account;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.unionpay.mobile.android.pboctransaction.d.e;->a(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

位置: classes2.dex
com.xiaomi.miot.store.api.AppStoreApiManager;->initialReact(Lcom/xiaomi/miot/store/api/AppStoreApiManager$OnInitialCompleteListener;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
in.srain.cube.views.ptr.b.a;->b(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.d;->f()Landroid/graphics/Rect;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.c.d.a;->b()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.mico.api.b.b;->e(Ljava/lang/String; [Ljava/lang/Object;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.module.CommonEventModule$EventBroadcastReceiver;->onReceive(Landroid/content/Context; Landroid/content/Intent;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.ui.MiotStoreRootViewManager$1;->onReceive(Landroid/content/Context; Landroid/content/Intent;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.mico.api.b.b;->d(Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.ui.MiotStoreRootViewManager;->resume(Landroid/app/Activity; Lcom/facebook/react/modules/core/DefaultHardwareBackBtnHandler;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.c;->a(Landroid/hardware/Camera$Parameters; Landroid/graphics/Point;)Landroid/graphics/Point;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.g;->a(Landroid/content/Intent;)Ljava/util/Map;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.c;->a(Ljava/lang/String; Ljava/util/Collection; [Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
in.srain.cube.views.ptr.b.a;->e(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.ui.MiotStoreRootViewManager;->sendPageSize(I I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.api.AppStoreApiManager;->initialReactInstanceManager(Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.accountsdk.utils.AccountLog$1;->logI(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.d;->a(I I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.module.WxpayModule$1;->callback(Ljava/util/Map;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.api.AppStoreApiManager;->getBrowserUserAgent()Ljava/lang/String;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
org.greenrobot.eventbus.b.f;->a(Ljava/lang/Throwable;)Ljava/lang/Integer;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.c;->a(Landroid/hardware/Camera$Parameters; Landroid/graphics/Point;)Landroid/graphics/Point;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.passport.utils.CUserIdUtil;->getCUserId()Ljava/lang/String;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.ScanBarcodeActivity;->surfaceCreated(Landroid/view/SurfaceHolder;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.channel.commonutils.d.d;->a(Landroid/content/Context; Ljava/net/URL; Z Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.mico.api.b.b;->c(Ljava/lang/String; [Ljava/lang/Object;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.phonenum.utils.c$1;->a(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.utils.Utils;->copyFile(Ljava/io/File; Ljava/lang/String;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.ui.MiotStoreRootViewManager;->createRootView(Landroid/content/Context; Ljava/lang/String; Landroid/os/Bundle;)Lcom/xiaomi/miot/store/ui/MiotStoreRootView;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.mico.api.b.b;->a(Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.c.a.a;->e()Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.ui.MiotStoreRootViewManager;->resumeReact(Lcom/facebook/react/modules/core/DefaultHardwareBackBtnHandler;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.ui.MiotStoreRootView;->onPause()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
io.agora.rtc.video.ViESurfaceRenderer;->surfaceDestroyed(Landroid/view/SurfaceHolder;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.ScanBarcodeActivity;->a(Landroid/view/SurfaceHolder;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.c;->e(Landroid/hardware/Camera$Parameters;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.statistic.StatApi$2;->onResponse(Lokhttp3/e; Lokhttp3/af;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.api.AppStoreApiManager;->getDefaultUserAgent()Ljava/lang/String;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.phonenum.utils.c$1;->b(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.statistic.StatManager;->addTouchRecord(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Z)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
io.agora.rtc.audio.MediaCodecAudioDecoder;->createStreaming(Ljava/lang/String;)Z==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.c;->b(Landroid/hardware/Camera$Parameters; Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.phonenum.utils.c$2;->a(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.mico.api.b.a;->logV(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.api.AppStoreApiManager$UpdateJSTask$1$1;->run()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.c;->f(Landroid/hardware/Camera$Parameters;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.g;->a(Landroid/net/Uri;)Ljava/util/Map;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.b;->a(Lcom/xiaomi/qrcode2/camera/open/a;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.c.d.a;->a(Landroid/content/Context; D D F J Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.c.a.a;->d()Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.c.d.a;->a(Landroid/content/Context;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.statistic.StatManager;->addViewEndRecord(Z)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.c;->a(Landroid/hardware/Camera$Parameters; Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.accountsdk.utils.AccountLog$1;->logW(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
io.agora.rtc.video.ViESurfaceRenderer;->(Landroid/view/SurfaceView;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.push.a.g;->b()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.c.d.a;->a(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.c.a.a;->f()Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.ui.MiotStoreRootView;->onResume()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.channel.commonutils.d.d;->a(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String; Ljava/util/Map; Ljava/lang/String;)Lcom/xiaomi/channel/commonutils/d/b;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.passport.servicetoken.ServiceTokenUIResponse;->onRequestContinued()V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.mico.api.b.b;->c(Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
io.agora.rtc.video.ViESurfaceRenderer;->saveBitmapToJPEG(I I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.accountsdk.utils.AccountLog$1;->logV(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.j;->b()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.statistic.StatApi$2;->onFailure(Lokhttp3/e; Ljava/io/IOException;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.c;->b(Landroid/hardware/Camera$Parameters; D)Ljava/lang/Integer;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.j;->c()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.mico.api.b.b;->b(Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.c.d.a;->a()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.c.h;->handleMessage(Landroid/os/Message;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.e;->onPreviewFrame([B Landroid/hardware/Camera;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.c.d.b;->onServiceConnected(Landroid/content/ComponentName; Landroid/os/IBinder;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.push.a.f;->b()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.ui.MiotStoreRootViewManager;->sendEvent(Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.j$a;->doInBackground([Ljava/lang/Object;)Ljava/lang/Object;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.c;->a(Landroid/hardware/Camera$Parameters; I I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.d;->a(Landroid/view/SurfaceHolder;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.mico.api.b.a;->logD(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.ui.MiotStoreRootViewManager$2;->onInitialFail()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.api.AppStoreApiManager;->initialReactInstanceManager(Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.a;->(Landroid/content/Context; Landroid/hardware/Camera;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.ui.MiotStoreRootViewManager;->pause(Landroid/app/Activity;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
io.agora.rtc.video.ViESurfaceRenderer;->CreateBitmap(I I)Landroid/graphics/Bitmap;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.g;->a(Landroid/content/Intent;)Ljava/util/Map;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.statistic.StatManager;->addPayRecord(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Z)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.c.d.a;->b()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.c;->b(Landroid/hardware/Camera$Parameters;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.zxing.a.a.a$1;->onClick(Landroid/content/DialogInterface; I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.d;->a(Landroid/view/SurfaceHolder;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.mico.api.b.b;->d(Ljava/lang/String; [Ljava/lang/Object;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.youth.banner.Banner$BannerPagerAdapter$1;->onClick(Landroid/view/View;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
io.agora.rtc.video.ViESurfaceRenderer;->SetCoordinates(F F F F)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.d;->e()Landroid/graphics/Rect;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
org.greenrobot.eventbus.b.b;->a(Ljava/lang/Throwable;)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.passport.servicetoken.ServiceTokenUIResponse;->onError(I Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.open.b;->a(I)Lcom/xiaomi/qrcode2/camera/open/a;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.c.d.a;->a()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.utils.NetworkUtils;->downloadFile(Ljava/lang/String; Ljava/io/File;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.c.a.a;->a()Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.smarthome.authlib.a;->a(Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.c.a.a;->c()Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.c;->c(Landroid/hardware/Camera$Parameters;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.mico.api.b.b;->e(Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.api.AppStoreApiManager$2$1;->run()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.mico.api.b.a;->logE(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
in.srain.cube.views.ptr.b.a;->c(Ljava/lang/String; Ljava/lang/String; [Ljava/lang/Object;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
io.agora.rtc.video.ViESurfaceRenderer;->changeDestRect(I I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.phonenum.utils.c$2;->b(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.c;->a(Landroid/hardware/Camera$Parameters; Z Z Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.accountsdk.utils.AccountLog$1;->logD(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.CaptureActivityHandler;->handleMessage(Landroid/os/Message;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
io.github.douglasjunior.androidSimpleTooltip.d$1;->run()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.ui.MiotStoreRootViewManager;->destroyView()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
in.srain.cube.views.ptr.b.a;->e(Ljava/lang/String; Ljava/lang/String; [Ljava/lang/Object;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.CaptureActivityHandler;->handleMessage(Landroid/os/Message;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.api.AppStoreApiManager;->onReactInited(Lcom/facebook/react/bridge/ReactContext; Z)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.channel.commonutils.d.d;->a(Ljava/util/Map;)Ljava/lang/String;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.mico.music.player.lrc.c;->a(Ljava/lang/String;)Ljava/util/List;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.c;->d(Landroid/hardware/Camera$Parameters;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.c.d.b;->onServiceDisconnected(Landroid/content/ComponentName;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.utils.Utils;->isVersionSupport(Landroid/content/Context;)Z==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.channel.commonutils.b.b;->b(Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
io.agora.rtc.video.ViESurfaceRenderer;->surfaceCreated(Landroid/view/SurfaceHolder;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.mico.api.b.a;->logI(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.accountsdk.utils.AccountLog$1;->logE(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
io.agora.rtc.video.VideoCaptureFactory$AndroidCameraInfo;->getNumberOfCameras(Landroid/content/Context;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.ui.MiotStoreRootViewManager;->pauseReact()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.api.AppStoreApiManager$UpdateJSTask$1;->onResult(Ljava/util/Map;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.mico.api.b.a;->logW(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.f;->a([B I I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
io.agora.rtc.video.ViESurfaceRenderer;->CreateByteBuffer(I I)Ljava/nio/ByteBuffer;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
in.srain.cube.views.ptr.b.a;->a(Ljava/lang/String; Ljava/lang/String; [Ljava/lang/Object;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
in.srain.cube.views.ptr.b.a;->d(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.ui.MiotStoreRootViewManager$2;->onInitialSuccess()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
in.srain.cube.views.ptr.b.a;->d(Ljava/lang/String; Ljava/lang/String; [Ljava/lang/Object;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.passport.servicetoken.ServiceTokenUIResponse;->onResult(Landroid/os/Bundle;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.api.AppStoreApiManager;->getUserAgent()Ljava/lang/String;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.c.b.d;->handleMessage(Landroid/os/Message;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.statistic.StatApi;->uploadStat(Lorg/json/JSONArray; Lcom/xiaomi/miot/store/statistic/StatApi$CallBack;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.passport.LocalFeatures.GetStsUrlFragment;->onViewCreated(Landroid/view/View; Landroid/os/Bundle;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.h;->(Lcom/xiaomi/qrcode2/ScanBarcodeActivity; Ljava/util/Collection; Ljava/util/Map; Ljava/lang/String; Lcom/xiaomi/zxing/o;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
in.srain.cube.views.ptr.b.a;->a(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.c;->a(Landroid/hardware/Camera$Parameters; D)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
io.agora.rtc.video.ViESurfaceRenderer;->DrawByteBuffer()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.b;->a(Lcom/xiaomi/qrcode2/camera/open/a; Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
in.srain.cube.views.ptr.b.a;->b(Ljava/lang/String; Ljava/lang/String; [Ljava/lang/Object;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
io.agora.rtc.video.MediaCodecVideoDecoder;->disableVp8HwCodec()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.mico.api.b.b;->b(Ljava/lang/String; [Ljava/lang/Object;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.miot.store.api.AppStoreApiManager;->reloadRN()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.mico.api.b.b;->a(Ljava/lang/String; [Ljava/lang/Object;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.c.c.m;->a(Ljava/lang/String; I I Ljava/util/HashMap;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.c.d.a$a;->handleMessage(Landroid/os/Message;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.g;->a(Landroid/net/Uri;)Ljava/util/Map;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.b;->a(Lcom/xiaomi/qrcode2/camera/open/a; Z)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
in.srain.cube.views.ptr.b.a;->c(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.c;->b(Landroid/hardware/Camera$Parameters; D)Ljava/lang/Integer;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.HttpHelper;->a(Ljava/net/URL;)Ljava/net/HttpURLConnection;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.qrcode2.camera.open.b;->a(I)Lcom/xiaomi/qrcode2/camera/open/a;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.phonenum.utils.c$1;->c(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.c.d.a;->a(Landroid/content/Context;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.xiaomi.c.c.m;->c()Ljava/util/HashMap;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I

中危

检测到6个WebView远程执行漏洞。

位置: classes.dex
com.facebook.react.views.webview.ReactWebViewManager$ReactWebView;->setMessagingEnabled(Z)V
com.mipay.sdk.app.MipayHybridActivity;->a(Landroid.webkit.WebView;)V
com.mipay.sdk.app.MipayWebActivity;->b()V
com.unionpay.WebViewJavascriptBridge;->(Landroid.app.Activity; Landroid.webkit.WebView; Lcom.unionpay.d;)V
com.xiaomi.mistatistic.sdk.g;->a(Landroid.webkit.WebView; Ljava.lang.String;)V
com.xiaomi.miot.store.component.webview.ReactWebViewManager$ReactWebView;->setMessagingEnabled(Z)V

Android API < 17之前版本存在远程代码执行安全漏洞,该漏洞源于程序没有正确限制使用addJavaScriptInterface方法,攻击者可以通过Java反射利用该漏洞执行任意Java对象的方法,导致远程代码执行安全漏洞。
(1)API等于高于17的Android系统。出于安全考虑,为了防止Java层的函数被随意调用,Google在4.2版本之后,规定允许被调用的函数必须以@JavascriptInterface进行注解。
(2)API等于高于17的Android系统。建议不要使用addJavascriptInterface接口,以免带来不必要的安全隐患,如果一定要使用该接口,建议使用证书校验。
(3)使用removeJavascriptInterface移除Android系统内部的默认内置接口:searchBoxJavaBridge_、accessibility、accessibilityTraversal。

参考案例:
www.wooyun.org/bugs/wooyun-2015-0140708
www.wooyun.org/bugs/wooyun-2016-0188252
http://drops.wooyun.org/papers/548

参考资料:
http://jaq.alibaba.com/blog.htm?id=48
http://blog.nsfocus.net/android-webview-remote-code-execution-vulnerability-analysis
https://developer.android.com/reference/android/webkit/WebView.html

中危

检测到223条敏感明文信息,建议移除。

位置: classes.dex
'10.0.2.2:8081' used in: Lcom/facebook/react/modules/systeminfo/AndroidInfoHelpers;->getServerHost()Ljava/lang/String;
'10.0.3.2:8081' used in: Lcom/facebook/react/modules/systeminfo/AndroidInfoHelpers;->getServerHost()Ljava/lang/String;
'file:///android_asset/' used in: Lcom/squareup/picasso/b;->()V
'file:///android_asset/' used in: Lcom/pddstudio/highlightjs/HighlightJsView;->setSource(Ljava/lang/String;)V
'http://%s/%s' used in: Lcom/facebook/react/devsupport/DevServerHelper;->createResourceURL(Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;
'http://%s/%s.bundle?platform=android&dev=%s&hot=%s&minify=%s' used in: Lcom/facebook/react/devsupport/DevServerHelper;->getSourceUrl(Ljava/lang/String;)Ljava/lang/String;
'http://%s/%s.bundle?platform=android&dev=%s&hot=%s&minify=%s' used in: Lcom/facebook/react/devsupport/DevServerHelper;->createBundleURL(Ljava/lang/String; Ljava/lang/String; Z Z Z)Ljava/lang/String;
'http://%s/%s.bundle?platform=android&dev=%s&hot=%s&minify=%s' used in: Lcom/facebook/react/devsupport/DevServerHelper;->()V
'http://%s/inspector/device?name=%s' used in: Lcom/facebook/react/devsupport/DevServerHelper;->getInspectorDeviceUrl()Ljava/lang/String;
'http://%s/jscheapcaptureupload' used in: Lcom/facebook/react/devsupport/DevServerHelper;->getHeapCaptureUploadUrl()Ljava/lang/String;
'http://%s/launch-js-devtools' used in: Lcom/facebook/react/devsupport/DevServerHelper;->createLaunchJSDevtoolsCommandUrl()Ljava/lang/String;
'http://%s/onchange' used in: Lcom/facebook/react/devsupport/DevServerHelper;->createOnChangeEndpointUrl()Ljava/lang/String;
'http://%s/status' used in: Lcom/facebook/react/devsupport/DevServerHelper;->createPackagerStatusURL(Ljava/lang/String;)Ljava/lang/String;
'http://140.207.168.45/g/d' used in: Lcom/unionpay/c/ao;->()V
'http://account.preview.n.xiaomi.net' used in: Lcom/xiaomi/account/auth/AuthorizeHelper;->()V
'http://account.preview.n.xiaomi.net' used in: Lcom/xiaomi/accountsdk/account/XMPassport$URLs;->()V
'http://account.preview.n.xiaomi.net/oauth2/' used in: Lcom/xiaomi/accountsdk/account/XMPassport$URLs;->()V
'http://account.preview.n.xiaomi.net/pass' used in: Lcom/xiaomi/accountsdk/account/XMPassport$URLs;->()V
'http://api.account.preview.n.xiaomi.net/pass' used in: Lcom/xiaomi/accountsdk/account/XMPassport$URLs;->()V
'http://api.account.preview.n.xiaomi.net/pass/v2' used in: Lcom/xiaomi/accountsdk/account/XMPassport$URLs;->()V
'http://api.account.preview.n.xiaomi.net/pass/v2/safe' used in: Lcom/xiaomi/accountsdk/account/XMPassport$URLs;->()V
'http://api.account.preview.n.xiaomi.net/pass/v3' used in: Lcom/xiaomi/accountsdk/account/XMPassport$URLs;->()V
'http://api.account.xiaomi.com/pass' used in: Lcom/xiaomi/accountsdk/account/XMPassport$URLs;->()V
'http://api.account.xiaomi.com/pass/v2/safe' used in: Lcom/xiaomi/accountsdk/account/XMPassport$URLs;->()V
'http://api.device.preview.n.xiaomi.net' used in: Lcom/xiaomi/accountsdk/account/XMPassport$URLs;->()V
'http://api.device.xiaomi.net' used in: Lcom/xiaomi/accountsdk/account/XMPassport$URLs;->()V
'http://app.sina.cn/appdetail.php?appID=84560' used in: Lcom/sina/weibo/sdk/a/a/p;->b(Landroid/content/Context;)V
'http://appsupport.qq.com/cgi-bin/appstage/mstats_batch_report' used in: Lcom/tencent/open/b/g$5;->run()V
'http://appsupport.qq.com/cgi-bin/qzapps/mapp_addapp.cgi' used in: Lcom/tencent/connect/b/a$b;->(Lcom/tencent/connect/b/a; Lcom/tencent/tauth/b;)V
'http://appsupport.qq.com/cgi-bin/qzapps/mapp_addapp.cgi' used in: Lcom/tencent/connect/b/a$b;->a()V
'http://c.id.mi.com/pass' used in: Lcom/xiaomi/accountsdk/account/XMPassport$URLs;->()V
'http://c.isdspeed.qq.com/code.cgi' used in: Lcom/tencent/open/b/d;->a(I Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/Long; I I Ljava/lang/String;)V
'http://cgi.connect.qq.com/qqconnectopen/openapi/policy_conf' used in: Lcom/tencent/open/utils/e$1;->run()V
'http://data.gorouter.info/log/crash/micoApp' used in: Lcom/xiaomi/mico/common/c/a;->()V
'http://dummyurl/' used in: Lcom/xiaomi/accountsdk/account/stat/AccountStatInterface;->dropUnusedUrlParams(Ljava/lang/String;)Ljava/lang/String;
'http://dummyurl/%s/_ver=%s&hdid=%s' used in: Lcom/xiaomi/accountsdk/account/stat/CustomizedUrlStatUtil;->(Ljava/lang/String; Ljava/lang/String;)V
'http://dummyurl/getTokenDiagnosis?_ver=%s&_time=%s&_result=%s&hdid=%s' used in: Lcom/xiaomi/accountsdk/account/PassportCATokenManager$getTokenStatHelper;->buildDummyUrl(Lcom/xiaomi/account/data/PassportCAToken; Ljava/lang/Object; Ljava/lang/Object;)Ljava/lang/String;
'http://fusion.qq.com/cgi-bin/qzapps/unified_jump?appid=%1$s&from=%2$s&isOpenAppID=1' used in: Lcom/tencent/connect/c/c;->b(Landroid/app/Activity; Landroid/os/Bundle; Lcom/tencent/tauth/b;)V
'http://fusion.qq.com/cgi-bin/qzapps/unified_jump?appid=%1$s&from=%2$s&isOpenAppID=1' used in: Lcom/tencent/connect/c/a;->b(Landroid/app/Activity; Landroid/os/Bundle; Lcom/tencent/tauth/b;)V
'http://h5.m.taobao.com/trade/paySuccess.html?bizOrderId=$OrderId$&' used in: Lcom/alipay/sdk/data/a;->a(Lcom/alipay/sdk/data/a; Ljava/lang/String;)V
'http://h5.m.taobao.com/trade/paySuccess.html?bizOrderId=$OrderId$&' used in: Lcom/alipay/sdk/data/a;->d()V
'http://h5.m.taobao.com/trade/paySuccess.html?bizOrderId=$OrderId$&' used in: Lcom/alipay/sdk/data/a;->b(Ljava/lang/String;)V
'http://h5.m.taobao.com/trade/paySuccess.html?bizOrderId=$OrderId$&' used in: Lcom/alipay/sdk/data/b;->run()V
'http://h5.m.taobao.com/trade/paySuccess.html?bizOrderId=$OrderId$&' used in: Lcom/alipay/sdk/data/a;->a(Ljava/lang/String;)V
'http://h5.m.taobao.com/trade/paySuccess.html?bizOrderId=$OrderId$&' used in: Lcom/alipay/sdk/data/a;->b()Lcom/alipay/sdk/data/a;
'http://h5.m.taobao.com/trade/paySuccess.html?bizOrderId=$OrderId$&' used in: Lcom/alipay/sdk/data/a;->()V
'http://home.mi.com/shop/main' used in: Lcom/xiaomi/miot/store/module/CommonBridgeModule;->openActivity(Ljava/lang/String;)V
'http://home.mi.com/shop/main' used in: Lcom/xiaomi/mico/a/b;->a(Landroid/content/Context; Ljava/lang/String;)V
'http://hydra.alibaba.com/' used in: Lcom/c/a/a/b;->b(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;
'http://m.alipay.com/?action=h5quit' used in: Lcom/alipay/sdk/util/l;->a(Landroid/webkit/WebView; Ljava/lang/String; Landroid/app/Activity;)Z
'http://mcgw.alipay.com/sdklog.do' used in: Lcom/alipay/sdk/packet/impl/c;->a(Landroid/content/Context; Ljava/lang/String;)Lcom/alipay/sdk/packet/b;
'http://mobile.unionpay.com/getclient?platform=android&type=securepayplugin' used in: Lcom/unionpay/a;->()V
'http://mobilegw-1-64.test.alipay.net/mgw.htm' used in: Lcom/alipay/apmobilesecuritysdk/b/a;->c()Ljava/lang/String;
'http://mobilegw-1-64.test.alipay.net/mgw.htm' used in: Lcom/alipay/apmobilesecuritysdk/b/a;->c()Ljava/lang/String;
'http://mobilegw.aaa.alipay.net/mgw.htm' used in: Lcom/alipay/apmobilesecuritysdk/b/a;->c()Ljava/lang/String;
'http://mobilegw.aaa.alipay.net/mgw.htm' used in: Lcom/alipay/apmobilesecuritysdk/b/a;->c()Ljava/lang/String;
'http://mobilegw.alipay.com/mgw.htm' used in: Lcom/alipay/sdk/cons/a;->()V
'http://mobilegw.stable.alipay.net/mgw.htm' used in: Lcom/alipay/apmobilesecuritysdk/b/a;->c()Ljava/lang/String;
'http://mobilegw.stable.alipay.net/mgw.htm' used in: Lcom/alipay/apmobilesecuritysdk/b/a;->c()Ljava/lang/String;
'http://open.account.preview.n.xiaomi.net/third/' used in: Lcom/xiaomi/accountsdk/account/XMPassport$URLs;->()V
'http://open.weixin.qq.com/connect/sdk/qrconnect?appid=%s&noncestr=%s×tamp=%s&scope=%s&signature=%s' used in: Lcom/tencent/mm/opensdk/diffdev/a/d;->()V
'http://openmobile.qq.com/oauth2.0/m_jump_by_version?' used in: Lcom/tencent/connect/common/a;->a(Ljava/lang/String;)Ljava/lang/String;
'http://qzs.qq.com' used in: Lcom/tencent/open/b;->a(Landroid/content/Context;)V
'http://qzs.qq.com/open/mobile/invite/sdk_invite.html?' used in: Lcom/tencent/open/b;->d(Landroid/app/Activity; Landroid/os/Bundle; Lcom/tencent/tauth/b;)V
'http://qzs.qq.com/open/mobile/login/qzsjump.html?' used in: Lcom/tencent/connect/common/a;->a(Landroid/app/Activity; Landroid/os/Bundle; Lcom/tencent/tauth/b;)V
'http://qzs.qq.com/open/mobile/login/qzsjump.html?' used in: Lcom/tencent/connect/b/c;->a()Ljava/lang/String;
'http://qzs.qq.com/open/mobile/login/qzsjump.html?' used in: Lcom/tencent/connect/b/c$a;->onReceivedError(Landroid/webkit/WebView; I Ljava/lang/String; Ljava/lang/String;)V
'http://qzs.qq.com/open/mobile/request/sdk_request.html?' used in: Lcom/tencent/open/b;->a(Landroid/app/Activity; Ljava/lang/String; Landroid/os/Bundle; Lcom/tencent/tauth/b;)V
'http://qzs.qq.com/open/mobile/sendstory/sdk_sendstory_v1.3.html?' used in: Lcom/tencent/open/b;->e(Landroid/app/Activity; Landroid/os/Bundle; Lcom/tencent/tauth/b;)V
'http://schemas.android.com/apk/res/android' used in: Landroid/support/v4/content/b/d;->a(Lorg/xmlpull/v1/XmlPullParser; Ljava/lang/String;)Z
'http://wspeed.qq.com/w.cgi' used in: Lcom/tencent/open/b/g$4;->run()V
'http://www.android.com/' used in: Lcom/facebook/soloader/SoLoader;->loadLibrary(Ljava/lang/String;)V
'http://www.qq.com/s?' used in: Lcom/tencent/mm/opensdk/openapi/WXApiImplV10;->handleWxInternalRespType(Ljava/lang/String; Lcom/tencent/mm/opensdk/openapi/IWXAPIEventHandler;)Z
'http://xmlpull.org/v1/doc/features.html#indent-output' used in: Lcom/c/a/c/a/e;->a(Ljava/util/List; Ljava/io/OutputStream;)V
'http://xmlpull.org/v1/doc/features.html#indent-output' used in: Lcom/c/a/c/a/e;->a(Ljava/util/Map; Ljava/io/OutputStream;)V
'http://xmlpull.org/v1/doc/features.html#indent-output' used in: Lcom/c/a/c/a/a;->setFeature(Ljava/lang/String; Z)V
'https://%s/ca/getTokenCA' used in: Lcom/xiaomi/accountsdk/account/PassportCATokenManager;->getCATokenOnline(Ljava/lang/String;)Lcom/xiaomi/account/data/PassportCAToken;
'https://account.xiaomi.com' used in: Lcom/xiaomi/account/auth/AuthorizeHelper;->()V
'https://account.xiaomi.com' used in: Lcom/xiaomi/accountsdk/account/XMPassport$URLs;->()V
'https://account.xiaomi.com/oauth2/' used in: Lcom/xiaomi/accountsdk/account/XMPassport$URLs;->()V
'https://account.xiaomi.com/pass' used in: Lcom/xiaomi/accountsdk/account/XMPassport$URLs;->()V
'https://api.account.xiaomi.com/pass' used in: Lcom/xiaomi/accountsdk/account/XMPassport$URLs;->()V
'https://api.account.xiaomi.com/pass/v2' used in: Lcom/xiaomi/accountsdk/account/XMPassport$URLs;->()V
'https://api.account.xiaomi.com/pass/v3' used in: Lcom/xiaomi/accountsdk/account/XMPassport$URLs;->()V
'https://c.id.mi.com' used in: Lcom/xiaomi/accountsdk/account/XMPassport$URLs;->()V
'https://home.mi.com/about' used in: Lcom/xiaomi/miot/store/module/CommonBridgeModule;->installYoupin()V
'https://long.open.weixin.qq.com/connect/l/qrconnect?f=json&uuid=%s' used in: Lcom/tencent/mm/opensdk/diffdev/a/f;->(Ljava/lang/String; Lcom/tencent/mm/opensdk/diffdev/OAuthListener;)V
'https://mobilegw.alipay.com/mgw.htm' used in: Lcom/alipay/apmobilesecuritysdk/b/a;->c()Ljava/lang/String;
'https://open.account.xiaomi.com' used in: Lcom/xiaomi/account/auth/AuthorizeApi;->doHttpGet(Ljava/lang/String; J Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;
'https://open.account.xiaomi.com/third/' used in: Lcom/xiaomi/accountsdk/account/XMPassport$URLs;->()V
'https://open.weibo.cn/oauth2/authorize?' used in: Lcom/sina/weibo/sdk/b/b;->b(Lcom/sina/weibo/sdk/b/c; I)V
'https://openmobile.qq.com/' used in: Lcom/tencent/open/utils/HttpUtils;->a(Lcom/tencent/connect/b/b; Landroid/content/Context; Ljava/lang/String; Landroid/os/Bundle; Ljava/lang/String;)Lorg/json/JSONObject;
'https://openmobile.qq.com/oauth2.0/m_authorize?' used in: Lcom/tencent/connect/b/a;->a(Z Lcom/tencent/tauth/b;)I
'https://openmobile.qq.com/user/user_login_statis' used in: Lcom/tencent/connect/b/a;->a(Lcom/tencent/tauth/b;)V
'https://openmobile.qq.com/v3/user/get_info' used in: Lcom/tencent/connect/b/a;->b(Lcom/tencent/tauth/b;)V
"javascript:(document.dispatchEvent(new MessageEvent('message', " used in: Lcom/xiaomi/miot/store/component/webview/ReactWebViewManager;->receiveCommand(Landroid/webkit/WebView; I Lcom/facebook/react/bridge/ReadableArray;)V
'javascript:(function () {var event;var data = ' used in: Lcom/facebook/react/views/webview/ReactWebViewManager;->receiveCommand(Landroid/webkit/WebView; I Lcom/facebook/react/bridge/ReadableArray;)V
'javascript:(function() {\n' used in: Lcom/xiaomi/miot/store/component/webview/ReactWebViewManager$ReactWebView;->callInjectedJavaScript()V
'javascript:(function() {\n' used in: Lcom/facebook/react/views/webview/ReactWebViewManager$ReactWebView;->callInjectedJavaScript()V
'javascript:(window.originalPostMessage = window.postMessage,window.postMessage = function(data) {__REACT_WEB_VIEW_BRIDGE.postMessage(String(data));})' used in: Lcom/facebook/react/views/webview/ReactWebViewManager$ReactWebView;->linkBridge()V
'javascript:(window.originalPostMessage = window.postMessage,window.postMessage = function(data) {__REACT_WEB_VIEW_BRIDGE.postMessage(String(data));})' used in: Lcom/xiaomi/miot/store/component/webview/ReactWebViewManager$ReactWebView;->linkBridge()V
"javascript:WebViewJavascriptBridge._handleMessageFromJava('%s');" used in: Lcom/unionpay/WebViewJavascriptBridge;->a(Ljava/util/Map;)V
'javascript:window.JsBridge&&JsBridge.callback(' used in: Lcom/tencent/open/d$a;->a(Ljava/lang/Object;)V
'javascript:window.JsBridge&&JsBridge.callback(' used in: Lcom/tencent/open/d$a;->a()V

位置: classes2.dex
'10.0.0.172' used in: Lcom/xiaomi/mistatistic/sdk/a/l;->a(Ljava/net/URL;)Ljava/lang/String;
'10.0.0.200' used in: Lcom/xiaomi/mistatistic/sdk/a/l;->a(Landroid/content/Context; Ljava/net/URL;)Ljava/net/HttpURLConnection;
'10.0.0.200' used in: Lcom/xiaomi/channel/commonutils/d/d;->b(Landroid/content/Context; Ljava/net/URL;)Ljava/net/HttpURLConnection;
'10.237.14.141' used in: Lcom/xiaomi/channel/commonutils/c/d;->()V
'http://%1$s/gslb/?ver=4.0' used in: Lcom/xiaomi/network/f;->a(Ljava/util/ArrayList; Ljava/lang/String; Ljava/lang/String; Z)Ljava/lang/String;
'http://%s/conn/echo' used in: Lcom/xiaomi/accountsdk/request/IPStrategy;->ping(Ljava/lang/String; [Ljava/lang/String; Lcom/xiaomi/accountsdk/request/IPStrategy$CachedIpStatHelper;)Landroid/util/Pair;
'http://10.235.124.13:8097/mistats' used in: Lcom/xiaomi/mistatistic/sdk/a/a/c;->a()V
'http://10.235.124.13:8097/mistats' used in: Lcom/xiaomi/mistatistic/sdk/a/a/c;->a()V
'http://10.99.168.145:8097/micrash' used in: Lcom/xiaomi/mistatistic/sdk/b$1;->run()V
'http://10.99.168.145:8097/micrash' used in: Lcom/xiaomi/mistatistic/sdk/b$1;->run()V
'http://10.99.168.145:8097/realtime_network' used in: Lcom/xiaomi/mistatistic/sdk/a/i;->f()Ljava/lang/String;
'http://10.99.168.145:8097/realtime_network' used in: Lcom/xiaomi/mistatistic/sdk/a/i;->f()Ljava/lang/String;
'http://abtest.mistat.xiaomi.com/experiments' used in: Lcom/xiaomi/mistatistic/sdk/a/i;->a(Ljava/lang/String;)Z
'http://abtest.mistat.xiaomi.com/experiments' used in: Lcom/xiaomi/mistatistic/sdk/a/c;->b(Landroid/content/Context; Lcom/xiaomi/mistatistic/sdk/a/l$b;)V
'http://act.preview.account.xiaomi.com/pass/activator' used in: Lcom/xiaomi/phonenum/a;->()V
'http://api.account.xiaomi.com/pass/usersCard?ids=%s' used in: Lcom/xiaomi/mico/common/util/al$1;->a(Lrx/l;)V
'http://api.miwifi.com/rs/grayupgrade/v2/micoApp' used in: Lcom/xiaomi/mico/api/d;->c(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)Lrx/e;
'http://api.miwifi.com/rs/grayupgrade/v2/s12' used in: Lcom/xiaomi/mico/api/d;->a(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)Lrx/e;
'http://api.miwifi.com/upgrade/mico' used in: Lcom/xiaomi/mico/api/d;->a(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/util/List;)Lrx/e;
'http://bbs.xiaomi.cn/t-14755234' used in: Lcom/xiaomi/mico/bluetooth/step/StepSaveFail$1;->onClick(Landroid/view/View;)V
'http://books.google.' used in: Lcom/xiaomi/qrcode2/m;->a(Ljava/lang/String;)Z
'http://c.id.mi.com/conn/getParams' used in: Lcom/xiaomi/accountsdk/request/IPStrategy;->updateStrategyConfigOnline()V
'http://ccc.sys.miui.com' used in: Lcom/xiaomi/c/a/f;->a()Ljava/lang/String;
'http://ci-miwifi.pt.xiaomi.com/jenkins/view/mico/job/MICO-Android-Daily/lastSuccessfulBuild/artifact/Archive/app.json' used in: Lcom/xiaomi/mico/api/d;->b(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)Lrx/e;
'http://commons.apache.org/proper/commons-compress/limitations.html#7Z' used in: Lorg/apache/commons/compress/archivers/sevenz/g$a;->a(Ljava/lang/String; Ljava/io/InputStream; J Lorg/apache/commons/compress/archivers/sevenz/e; [B)Ljava/io/InputStream;
'http://data.mistat.xiaomi.com/mistats/v2' used in: Lcom/xiaomi/mistatistic/sdk/a/i;->a(Ljava/lang/String;)Z
'http://data.mistat.xiaomi.com/mistats/v2' used in: Lcom/xiaomi/mistatistic/sdk/a/a/c;->a()V
'http://dummyurl/IpDiagonose?_ver=%s&_ips=%s&_nets=%s&_ipResult=%s' used in: Lcom/xiaomi/accountsdk/request/IPDiagnosisStatHelper;->statAllIps(Z)V
'http://dummyurl/backupIpDiagonose?_ver=%s&_ips=%s&_nets=%s' used in: Lcom/xiaomi/accountsdk/request/IPStrategy$BackupIpStatHelper;->onPullingBackupIpsSucceeded(Ljava/util/List;)V
'http://dummyurl/caLoginDiagnosis?' used in: Lcom/xiaomi/accountsdk/request/CALoginStatHelper;->buildDummyUrl()Ljava/lang/String;
'http://dummyurl/cachedIpDiagonose?_ver=%s&cacheipnet=%s&cachedip=%s&dnsipnet=%s&dnsip=%s&finalnet=%s' used in: Lcom/xiaomi/accountsdk/request/IPDiagnosisStatHelper;->onDnsIp0Succeed()V
'http://dummyurl/cachedipDiagonis?_ver=%s&_coef=%d&cachedip=%s&cachediptime=%d&dnsip=%s&dnsiptime=%d&backupip0=%s&backupip0time=%d' used in: Lcom/xiaomi/accountsdk/request/IPStrategy$CachedIpStatHelper;->onAllIpPingFinishes(J)V
'http://dummyurl/cachedipDiagonis?_ver=%s&_netOld=%s&_netNew=%s' used in: Lcom/xiaomi/accountsdk/request/IPStrategy$CachedIpStatHelper;->onNetworkChanged(Ljava/lang/String; Ljava/lang/String;)V
'http://dummyurl/cachedipDiagonis?_ver=%s&_time=%d&_thres=%d' used in: Lcom/xiaomi/accountsdk/request/IPStrategy$CachedIpStatHelper;->onLessThenPingThreshold(J J)V
'http://google.com/books' used in: Lcom/xiaomi/qrcode2/m;->a(Ljava/lang/String;)Z
'http://home.mi.com/shop/main' used in: Lcom/xiaomi/miot/store/api/AppStoreApiManager;->openStore()V
'http://home.mi.com/shop/main' used in: Lcom/xiaomi/miot/store/ui/MiotStoreMainActivity;->onCreate(Landroid/os/Bundle;)V
'http://home.mi.com/shop/main' used in: Lcom/xiaomi/miot/store/api/AppStoreApiManager;->openPage()V
'http://home.mi.com/shop/main' used in: Lcom/xiaomi/miot/store/ui/MiotStoreRootView;->onNewIntent(Landroid/content/Intent;)Z
'http://home.mi.com/shop/main' used in: Lcom/xiaomi/miot/store/ui/MiotStoreRootView;->initial()V
'http://home.mi.com/shop/main' used in: Lcom/xiaomi/mico/a/c;->navigateBack(Landroid/app/Activity; Ljava/lang/String;)V
'http://home.mi.com/shop/main' used in: Lcom/xiaomi/miot/store/ui/MiotStoreRootViewManager$1;->onReceive(Landroid/content/Context; Landroid/content/Intent;)V
'http://i-staging.ai.mi.com/mico' used in: Lcom/xiaomi/mico/common/schema/a/i;->a(Landroid/content/Context; Ljava/lang/String; Landroid/net/Uri;)V
'http://i-staging.ai.mi.com/mico' used in: Lcom/xiaomi/mico/tool/a;->c(Landroid/content/Context;)V
'http://localhost/' used in: Lretrofit2/l;->a(Ljava/lang/Object; Lokhttp3/u;)Lretrofit2/l;
'http://localhost/' used in: Lretrofit2/l;->a(I Lokhttp3/ag;)Lretrofit2/l;
'http://localhost/' used in: Lretrofit2/l;->a(Ljava/lang/Object;)Lretrofit2/l;
'http://maps.google.com/maps?q=loc:' used in: Lcom/xiaomi/mico/common/util/i;->a(Landroid/app/Activity; D D Ljava/lang/String; Ljava/lang/String;)V
'http://oauth.sim-c.luojilab.com/oauth2/access_token' used in: Lcom/xiaomi/mico/tool/embedded/activity/a/b;->c()Ljava/lang/String;
'http://oauth.sim-c.luojilab.com/oauth2/authorize' used in: Lcom/xiaomi/mico/tool/embedded/activity/a/b;->e()Ljava/lang/String;
'http://openapi.baidu.com/oauth/2.0/authorize' used in: Lcom/xiaomi/mico/tool/embedded/activity/a/a;->e()Ljava/lang/String;
'http://preview.api.mina.mi.com/' used in: Lcom/xiaomi/mico/api/b;->f()[Lcom/xiaomi/mico/api/b$a;
'http://preview.api.mina.mi.com/' used in: Lcom/xiaomi/mico/api/b;->d()Ljava/lang/String;
'http://preview.hd.mina.mi.com/' used in: Lcom/xiaomi/mico/api/b;->f()[Lcom/xiaomi/mico/api/b$a;
'http://preview.userprofile.mina.mi.com/' used in: Lcom/xiaomi/mico/api/b;->f()[Lcom/xiaomi/mico/api/b$a;
'http://resolver.msg.xiaomi.net/gslb/?ver=3.0&list=%s' used in: Lcom/xiaomi/accountsdk/request/IPStrategy;->getBackupIpListOnline(Ljava/lang/String;)Ljava/util/List;
'http://resolver.msg.xiaomi.net/psc/?t=a' used in: Lcom/xiaomi/push/service/ac;->b()V
'http://visitor.preview.n.xiaomi.net/visitor/login' used in: Lcom/xiaomi/accountsdk/guestaccount/GuestAccountOnlineFetcher;->getLoginUrl(Landroid/content/Context;)Ljava/lang/String;
'http://visitor.preview.n.xiaomi.net/visitor/register' used in: Lcom/xiaomi/accountsdk/guestaccount/GuestAccountOnlineFetcher;->getRegisterUrl(Landroid/content/Context;)Ljava/lang/String;
'http://www.' used in: Lcom/xiaomi/passport/ui/AccountUnactivatedFragment;->onClick(Landroid/view/View;)V
'http://www.kuwo.cn/' used in: Lcom/xiaomi/mico/tool/embedded/activity/KuwoActivity$CategoryFragment;->onActivityCreated(Landroid/os/Bundle;)V
'http://www.kuwo.cn/' used in: Lcom/xiaomi/mico/tool/embedded/activity/KuwoActivity;->onCreate(Landroid/os/Bundle;)V
'http://www.miui.com/res/doc/eula/%s.html' used in: Lcom/xiaomi/passport/ui/LicenseActivity;->()V
'http://www.miui.com/res/doc/privacy/%s.html' used in: Lcom/xiaomi/passport/ui/LicenseActivity;->()V
'http://www1.miwifi.com/act/20180314/html/%s.html' used in: Lcom/xiaomi/mico/bluetooth/f;->b(Ljava/lang/String;)Ljava/lang/String;
'http://www1.miwifi.com/act/20180314/html/init_help.html' used in: Lcom/xiaomi/mico/bluetooth/f;->()V
'http://xmlpull.org/v1/doc/features.html#process-namespaces' used in: Lcom/xiaomi/g/e;->()V
'http://xmlpull.org/v1/doc/features.html#process-namespaces' used in: Lcom/xiaomi/smack/d/a;->a([B)V
'http://xmlpull.org/v1/doc/features.html#process-namespaces' used in: Lcom/xiaomi/smack/c/c;->b()V
'http://xmlpull.org/v1/doc/features.html#process-namespaces' used in: Lcom/xiaomi/smack/g;->()V
'https://.*\\.account\\.xiaomi\\.com/longPolling/login\\?.*' used in: Lcom/xiaomi/passport/utils/SysHelper;->isMiAccountLoginQRCodeScanResult(Ljava/lang/String;)Z
'https://account.xiaomi.com/appConf/getWhiteList' used in: Lcom/xiaomi/passport/appwhitelist/AppWhiteListOnlineFetcher;->fetch()Lcom/xiaomi/passport/appwhitelist/pojo/AppWhiteListResponse;
'https://account.xiaomi.com/pass/auth/resetPassword?user=' used in: Lcom/xiaomi/passport/ui/RegisteredNotRecycledPhoneLoginFragment;->onForgotPassword()V
'https://act.account.xiaomi.com/pass/activator' used in: Lcom/xiaomi/phonenum/a;->()V
'https://api.ai.xiaomi.com/' used in: Lcom/xiaomi/mico/api/c/a$a$1;->a(Ljava/lang/String;)Lrx/e;
'https://api.ai.xiaomi.com/' used in: Lcom/xiaomi/mico/api/c/a$a;->a()Lrx/e;
'https://api.mina.mi.com/' used in: Lcom/xiaomi/mico/api/b;->f()[Lcom/xiaomi/mico/api/b$a;
'https://api.mina.mi.com/' used in: Lcom/xiaomi/mico/api/b;->d()Ljava/lang/String;
'https://api.mina.mi.com/help/calendar/index.html' used in: Lcom/xiaomi/mico/tool/embedded/a;->c(Landroid/content/Context;)V
'https://api.mina.mi.com/help/news/index.html' used in: Lcom/xiaomi/mico/tool/embedded/e;->c(Landroid/content/Context;)V
'https://api.mina.mi.com/help/usage/index.html' used in: Lcom/xiaomi/mico/tool/embedded/g;->c(Landroid/content/Context;)V
'https://app.yinxiang.com/OAuth.action?oauth_token=%s' used in: Lcom/xiaomi/mico/tool/embedded/activity/a/c;->a(Lcom/github/scribejava/core/model/OAuth1RequestToken;)Ljava/lang/String;
'https://app.yinxiang.com/oauth' used in: Lcom/xiaomi/mico/tool/embedded/activity/a/c;->s_()Ljava/lang/String;
'https://app.yinxiang.com/oauth' used in: Lcom/xiaomi/mico/tool/embedded/activity/a/c;->k()Ljava/lang/String;
'https://cdn.cnbj1.fds.api.mi-img.com/mico/ee5667af-4ba7-49bf-9f69-ef37ac4cbd48' used in: Lcom/xiaomi/mico/device/DeviceFragment$6$1;->a(Lcom/xiaomi/mico/api/model/Remote$Response$MiTvResponse;)V
'https://cdn.cnbj1.fds.api.mi-img.com/mico/html/bluetooth_help.html' used in: Lcom/xiaomi/mico/setting/BluetoothSettingActivity$2;->n_()V
'https://data.mistat.xiaomi.com/micrash' used in: Lcom/xiaomi/mistatistic/sdk/b$1;->run()V
'https://data.mistat.xiaomi.com/micrash' used in: Lcom/xiaomi/mistatistic/sdk/a/i;->a(Ljava/lang/String;)Z
'https://data.mistat.xiaomi.com/mistats' used in: Lcom/xiaomi/mistatistic/sdk/a/i;->a(Ljava/lang/String;)Z
'https://data.mistat.xiaomi.com/realtime_network' used in: Lcom/xiaomi/mistatistic/sdk/a/i;->f()Ljava/lang/String;
'https://dev.mi.com/mistats/xmstats/event/dynamic/upload' used in: Lcom/xiaomi/mistatistic/sdk/a/q$2;->a()V
'https://file.ai.xiaomi.com/file' used in: Lcom/xiaomi/mico/tool/embedded/activity/b/c;->b()Z
'https://file.ai.xiaomi.com/file' used in: Lcom/xiaomi/mico/tool/embedded/activity/b/c;->a(Landroid/content/Context; Landroid/webkit/WebView; Ljava/io/File; Landroid/net/Uri;)V
'https://graph.qq.com/oauth2.0/authorize' used in: Lcom/xiaomi/mico/tool/embedded/activity/a/e;->e()Ljava/lang/String;
'https://graph.qq.com/oauth2.0/token' used in: Lcom/xiaomi/mico/tool/embedded/activity/a/e;->c()Ljava/lang/String;
'https://hd.mina.mi.com/' used in: Lcom/xiaomi/mico/api/b;->f()[Lcom/xiaomi/mico/api/b$a;
'https://i.ai.mi.com/mico' used in: Lcom/xiaomi/mico/common/schema/a/i;->a(Landroid/content/Context; Ljava/lang/String; Landroid/net/Uri;)V
'https://i.ai.mi.com/mico' used in: Lcom/xiaomi/mico/tool/b;->c(Landroid/content/Context;)V
'https://i.ai.mi.com/skills/account_link' used in: Lcom/xiaomi/mico/tool/embedded/activity/CommonAuthActivity$CommonWebOauthFragment;->onViewClicked()V
'https://log.miwifi.com/log/common/micoApp' used in: Lcom/xiaomi/mico/common/d/b;->()V
'https://log.miwifi.com/log/image/batch/micoApp' used in: Lcom/xiaomi/mico/common/d/a;->()V
'https://metok.sys.miui.com' used in: Lcom/xiaomi/c/b;->d()V
'https://metok.sys.miui.com' used in: Lcom/xiaomi/c/b;->e()Ljava/lang/String;
'https://mina.mi.com/privacy_policy/' used in: Lcom/xiaomi/mico/login/LoginStartFragment;->onActivityCreated(Landroid/os/Bundle;)V
'https://mina.mi.com/qq' used in: Lcom/xiaomi/mico/tool/embedded/activity/a/e;->i()Ljava/lang/String;
'https://mina.mi.com/user_agreement/' used in: Lcom/xiaomi/mico/login/LoginStartFragment;->onActivityCreated(Landroid/os/Bundle;)V
'https://openapi.baidu.com/oauth/2.0/token' used in: Lcom/xiaomi/mico/tool/embedded/activity/a/a;->c()Ljava/lang/String;
'https://register.xmpush.global.xiaomi.com/pass/register' used in: Lcom/xiaomi/push/service/bo;->b(Landroid/content/Context;)Ljava/lang/String;
'https://shopapi.io.mi.com/app/shopv3/rsync2?local=' used in: Lcom/xiaomi/miot/store/common/MiotJSUpdateManager;->init()V
'https://shopapi.io.mi.com/app/stat/visit' used in: Lcom/xiaomi/miot/store/statistic/StatApi;->uploadStat(Lorg/json/JSONArray; Lcom/xiaomi/miot/store/statistic/StatApi$CallBack;)V
'https://shopapi.io.mi.com/app/stat/visit :' used in: Lcom/xiaomi/miot/store/statistic/StatApi;->uploadStat(Lorg/json/JSONArray; Lcom/xiaomi/miot/store/statistic/StatApi$CallBack;)V
'https://staging.api.mina.mi.com/' used in: Lcom/xiaomi/mico/api/b;->d()Ljava/lang/String;
'https://userprofile.mina.mi.com/' used in: Lcom/xiaomi/mico/api/b;->f()[Lcom/xiaomi/mico/api/b$a;
'https://v.id.mi.com/visitor/login' used in: Lcom/xiaomi/accountsdk/guestaccount/GuestAccountOnlineFetcher;->getLoginUrl(Landroid/content/Context;)Ljava/lang/String;
'https://v.id.mi.com/visitor/register' used in: Lcom/xiaomi/accountsdk/guestaccount/GuestAccountOnlineFetcher;->getRegisterUrl(Landroid/content/Context;)Ljava/lang/String;
'https://www.shuidi.com' used in: Lcom/xiaomi/mico/login/c;->b()Lcom/xiaomi/account/openauth/XiaomiOAuthorize;
'javascript:%s(%s)' used in: Lcom/xiaomi/mico/common/util/aj;->a(Landroid/webkit/WebView; Ljava/lang/String; [Ljava/lang/Object;)V
'www.baidu.com:80' used in: Lcom/xiaomi/push/service/m;->run()V
'www.xiaomi.com' used in: Lcom/xiaomi/mistatistic/sdk/h;->a()Z

中危

检测到14处setSavePassword密码明文存储漏洞。

位置: classes.dex
com.tencent.open.b;
com.mipay.sdk.app.MipayWebActivity;
com.pddstudio.highlightjs.HighlightJsView;
com.facebook.react.views.webview.ReactWebViewManager;
com.xiaomi.miot.store.component.webview.ReactWebViewManager$ReactWebView;
com.xiaomi.miot.store.component.webview.ReactWebViewManager;
com.unionpay.mobile.android.upviews.b;
com.unionpay.WebViewJavascriptBridge;
com.facebook.react.views.webview.ReactWebViewManager$ReactWebView;

位置: classes2.dex
com.xiaomi.passport.ui.LicenseActivity;
com.xiaomi.mico.common.widget.CustomWebView;
com.xiaomi.miot.store.common.MiotStoreWebView;
com.xiaomi.miot.store.api.AppStoreApiManager$1;
com.xiaomi.passport.uicontroller.NotificationWebView;

webview的保存密码功能默认设置为true。Webview会明文保存网站上的密码到本地私有文件”databases/webview.db”中。对于可以被root的系统环境或者配合其他漏洞(如webview的同源绕过漏洞),攻击者可以获取到用户密码。
建议:显示设置webView.getSetting().setSavePassword(false)。

参考案例:
www.wooyun.org/bugs/wooyun-2010-021420
www.wooyun.org/bugs/wooyun-2013-020246

参考资料:
http://wolfeye.baidu.com/blog/
www.claudxiao.net/2013/03/android-webview-cache/

中危

检测到3使用全局可读写操作文件。

位置: classes.dex
com.unionpay.a;->a(Landroid.content.Context; Ljava.lang.String;)Ljava.lang.String;===>openFileOutput
com.unionpay.b;->onReceive(Landroid.content.Context; Landroid.content.Intent;)V===>openFileOutput
com.unionpay.a;->a(Landroid.content.Context;)Z===>openFileOutput

在使用getDir、getSharedPreferences(SharedPreference)或openFileOutput时,如果设置了全局的可读权限,攻击者恶意读取文件内容,获取敏感信息。在设置文件属性时如果设置全局可写,攻击者可能会篡改、伪造内容,可以能会进行诈骗等行为,造成用户财产损失。建议:
(1)使用MODE_PRIVATE模式创建内部存储文件。
(2)加密存储敏感数据。
(3)避免在文件中存储明文和敏感信息。

参考案例:
http://wooyun.org/bugs/wooyun-2010-047172
http://wooyun.org/bugs/wooyun-2010-054438
http://wooyun.org/bugs/wooyun-2010-0151270

参考资料:
https://jaq.alibaba.com/blog.htm?id=56
https://jaq.alibaba.com/blog.htm?id=58
http://wolfeye.baidu.com/blog/global-rw-of-file
http://wolfeye.baidu.com/blog/global-rw-of-sharepreference/

低危

检测到3处使用了DES弱加密算法。

位置: classes.dex
'DES/CBC/PKCS5Padding' used in: Lcom/unionpay/c/bd;->c([B [B)[B
'DES/CBC/PKCS5Padding' used in: Lcom/unionpay/c/bd;->b([B [B)[B
'DES/CBC/PKCS5Padding' used in: Lcom/unionpay/c/bd;->a([B [B)[B

使用弱加密算法会大大增加黑客攻击的概率,黑客可能会破解隐私数据、猜解密钥、中间人攻击等,造成隐私信息的泄漏,甚至造成财产损失。建议使用AES加密算法。

参考资料:
http://drops.wooyun.org/tips/15870
https://developer.android.com/training/articles/keystore.html
http://wolfeye.baidu.com/blog/weak-encryption/
http://www.freebuf.com/articles/terminal/99868.html

低危

检测2处Intent Scheme URI漏洞。

位置: classes2.dex
Lcom/xiaomi/mico/common/util/SystemUtil$1;->onClick(Landroid/view/View;)V
Lcom/xiaomi/mipush/sdk/q;->a(Landroid/content/Context; Ljava/lang/String; Ljava/util/Map;)Landroid/content/Intent;


Intent Scheme URI是一种特殊的URL格式,用来通过Web页面启动已安装应用的Activity组件,大多数主流浏览器都支持此功能。如果在app中,没有检查获取到的load_url的值,攻击者可以构造钓鱼网站,诱导用户点击加载,就可以盗取用户信息。所以,对Intent URI的处理不当时,就会导致基于Intent的攻击。建议:
如果使用了Intent.parseUri函数,获取的intent必须严格过滤,intent至少包含addCategory(“android.intent.category.BROWSABLE”),setComponent(null),setSelector(null)3个策略。

参考资料:
http://wolfeye.baidu.com/blog/intent-scheme-url/
http://drops.wooyun.org/papers/2893
http://drops.wooyun.org/mobile/15202

低危

检测到8处AES/DES弱加密风险。

位置: classes.dex
com.alipay.sdk.encrypt.b;->a(I Ljava.lang.String; Ljava.lang.String;)Ljava.lang.String;
Lcom/unionpay/mobile/android/utils/d;->a(I [B [B)[B
Lcom/unionpay/utils/c;->a(I [B [B)[B
Lcom/unionpay/mobile/android/e/a;->a(Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;
Lcom/unionpay/mobile/android/e/a;->b(Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;

位置: classes2.dex
Lcom/xiaomi/mistatistic/sdk/a/d;->b(Ljava/lang/String; Ljava/lang/String;)[B
Lcom/xiaomi/mistatistic/sdk/a/d;->()V
com.xiaomi.accountsdk.utils.CloudCoder;->newAESCipher([B I)Ljavax.crypto.Cipher;

使用AES/DES/DESede加密算法时,如果使用ECB模式,容易受到攻击风险,造成信息泄露。建议在使用AES/DES/DESede加密算法时,应显示指定使用CBC或CFB加密模式

参考资料:
http://blog.csdn.net/u013107656/article/details/51997957
https://developer.android.com/reference/javax/crypto/Cipher.html
http://drops.wooyun.org/tips/15870
https://developer.android.com/training/articles/keystore.html
http://wolfeye.baidu.com/blog/weak-encryption/
http://www.freebuf.com/articles/terminal/99868.html

低危

非debug包,需要通过打包平台proguard脚本,移除大部分系统输出代码。
经扫描该包仍存在大量系统输出代码,共发现22处系统输出代码.(此处扫描的系统输出代码,是指调用System.out.print*输出的,本应在打包平台移除的系统输出代码.)
各个bundle系统输出代码详情如下:

位置: classes.dex
com.jakewharton.a.a;
com.tencent.open.utils.i;
com.elvishew.xlog.d.b;
com.facebook.stetho.dumpapp.plugins.SharedPreferencesDumperPlugin;
com.sina.weibo.sdk.d.d;
com.facebook.stetho.dumpapp.DumpappHttpSocketLikeHandler$DumpappLegacyHttpHandler;
com.facebook.stetho.dumpapp.plugins.CrashDumperPlugin;
com.facebook.stetho.dumpapp.Dumper;
com.facebook.stetho.dumpapp.plugins.FilesDumperPlugin;
io.realm.internal.TableQuery;
com.facebook.stetho.dumpapp.plugins.HprofDumperPlugin;

位置: classes2.dex
com.xiaomi.smack.d.a;
rx.internal.util.e;
io.realm.internal.Util;
com.xiaomi.mistatistic.sdk.h;
com.xiaomi.smack.l;
rx.internal.util.j;
io.realm.internal.k;
com.xiaomi.smack.g;
rx.exceptions.CompositeException$b;
com.xiaomi.mico.common.util.d;
rx.d.c;

低危

检测到1处主机名弱校验检测漏洞。

位置: classes.dex
com.unionpay.c.ab;->verify(Ljava.lang.String; Ljavax.net.ssl.SSLSession;)Z

自定义HostnameVerifier类,却不实现其verify方法验证域名直接返回true,直接接受任意域名。建议:
对SSL证书进行强校验,包括签名CA是否合法、证书是否是自签名、主机域名是否匹配、证书是否过期等。

参考资料:
http://drops.wooyun.org/tips/3296
https://www.91ri.org/12534.html

低危

检测到1处地方在自定义实现的WebViewClient类在onReceivedSslError调用proceed()方法。

位置: classes.dex
com.alipay.sdk.auth.AuthActivity$b;->onReceivedSslError(Landroid.webkit.WebView; Landroid.webkit.SslErrorHandler; Landroid.net.http.SslError;)V

Android WebView组件加载网页发生证书认证错误时,会调用WebViewClient类的onReceivedSslError方法,如果该方法实现调用了handler.proceed()来忽略该证书错误,则会受到中间人攻击的威胁,可能导致隐私泄露。建议:
当发生证书认证错误时,采用默认的处理方法handler.cancel(),停止加载问题页面当发生证书认证错误时,采用默认的处理方法handler.cancel(),停止加载问题页面。

参考案例:
http://www.wooyun.org/bugs/wooyun-2010-0109266

参考资料:
https://jaq.alibaba.com/blog.htm?id=60
http://wolfeye.baidu.com/blog/webview-ignore-ssl-error/

警告

检测到24处addFlags使用Intent.FLAG_ACTIVITY_NEW_TASK。

位置: classes.dex
com.unionpay.a;->a
com.unionpay.b;->onReceive
com.xiaomi.miot.store.module.CommonBridgeModule;->installYoupin
com.xiaomi.mico.module.push.b;->a
com.facebook.react.modules.intent.IntentModule;->canOpenURL
com.tencent.open.utils.i;->a
com.tencent.connect.b.c$a;->shouldOverrideUrlLoading
com.tencent.open.TDialog$FbWebViewClient;->shouldOverrideUrlLoading
com.facebook.react.modules.intent.IntentModule;->openURL
com.tencent.mm.opensdk.channel.MMessageActV2;->send

位置: classes2.dex
com.xiaomi.mico.common.util.y;->a
com.xiaomi.passport.utils.SysHelper;->goToEmailPage
com.xiaomi.mico.common.schema.a.e;->a
com.xiaomi.mico.common.util.i;->v
com.xiaomi.mico.bluetooth.BindDeviceScanActivity$2;->onClick
com.xiaomi.qrcode2.CaptureActivityHandler;->handleMessage
com.xiaomi.passport.ui.GetBackPasswordExecutor$GetBackPasswordTask;->doInBackground
com.xiaomi.push.service.j;->a
com.xiaomi.mipush.sdk.q;->a
com.xiaomi.passport.ui.LicenseActivity;->onCreate
com.xiaomi.smarthome.authlib.b;->callAuth
com.xiaomi.miot.store.component.webview.ReactWebViewManager$ReactWebViewClient;->shouldOverrideUrlLoading
com.xiaomi.mico.common.util.w;->e
com.xiaomi.mico.common.util.w;->f

APP创建Intent传递数据到其他Activity,如果创建的Activity不是在同一个Task中打开,就很可能被其他的Activity劫持读取到Intent内容,跨Task的Activity通过Intent传递敏感信息是不安全的。建议:
尽量避免使用包含FLAG_ACTIVITY_NEW_TASK标志的Intent来传递敏感信息。

参考资料:
http://wolfeye.baidu.com/blog/intent-data-leak

警告

检测到6个导出的组件接收其他app的消息,这些组件会被其他app引用并导致dos攻击。

activity com.xiaomi.mico.wxapi.WXEntryActivity
activity com.tencent.tauth.AuthActivity
activity com.xiaomi.mico.common.schema.SchemaActivity
service com.xiaomi.mipush.sdk.PushMessageHandler
receiver com.xiaomi.push.service.receivers.NetworkStatusReceiver
receiver com.xiaomi.mico.module.push.MicoMessageReceiver

建议:
(1)最小化组件暴露。对不会参与跨应用调用的组件建议显示添加android:exported="false"属性。
(2)设置组件访问权限。对provider设置权限,同时将权限的protectionLevel设置为"signature"或"signatureOrSystem"。
(3)组件传输数据验证。对组件之间,特别是跨应用的组件之间的数据传入与返回做验证和增加异常处理,防止恶意调试数据传入,更要防止敏感数据返回。

参考案例:
http://www.wooyun.org/bugs/wooyun-2010-0169746
http://www.wooyun.org/bugs/wooyun-2010-0104965

参考资料:
http://jaq.alibaba.com/blog.htm?spm=0.0.0.0.Wz4OeC&id=55
《Android安全技术解密与防范》

警告

检测2处組件設置了android.intent.category.BROWSABLE属性。
com.tencent.tauth.AuthActivity
com.xiaomi.mico.common.schema.SchemaActivity


在AndroidManifest文件中定义了android.intent.category.BROWSABLE属性的组件,可以通过浏览器唤起,这会导致远程命令执行漏洞攻击。建议:
(1)APP中任何接收外部输入数据的地方都是潜在的攻击点,过滤检查来自网页的参数。
(2)不要通过网页传输敏感信息,有的网站为了引导已经登录的用户到APP上使用,会使用脚本动态的生成URL Scheme的参数,其中包括了用户名、密码或者登录态token等敏感信息,让用户打开APP直接就登录了。恶意应用也可以注册相同的URL Sechme来截取这些敏感信息。Android系统会让用户选择使用哪个应用打开链接,但是如果用户不注意,就会使用恶意应用打开,导致敏感信息泄露或者其他风险。

參考案例:
http://www.wooyun.org/bugs/wooyun-2014-073875
http://www.wooyun.org/bugs/wooyun-2014-067798

参考资料:
http://wolfeye.baidu.com/blog/intent-scheme-url/
http://www.jssec.org/dl/android_securecoding_en.pdf
http://drops.wooyun.org/mobile/15202
http://blog.csdn.net/l173864930/article/details/36951805
http://drops.wooyun.org/papers/2893

警告

检测到16潜在的XSS漏洞。

位置: classes.dex
com.alipay.sdk.auth.AuthActivity;->onCreate(Landroid.os.Bundle;)V
com.alipay.sdk.util.l;->a(Landroid.app.Activity; Ljava.lang.String; Ljava.lang.String;)Landroid.webkit.WebView;
com.mipay.sdk.app.MipayWebActivity;->b()V
com.pddstudio.highlightjs.HighlightJsView;->a(Landroid.content.Context;)V
com.sina.weibo.sdk.b.d;->c()V
com.tencent.connect.b.c;->d()V
com.tencent.open.TDialog;->b()V
com.tencent.open.b;->a(Landroid.content.Context;)V
com.tencent.open.f;->c()V
com.unionpay.WebViewJavascriptBridge;->(Landroid.app.Activity; Landroid.webkit.WebView; Lcom.unionpay.d;)V
com.unionpay.mobile.android.upviews.b;->(Landroid.content.Context; Lcom.unionpay.mobile.android.upviews.b$a;)V
com.xiaomi.account.openauth.AuthorizeActivityBase;->onCreate(Landroid.os.Bundle;)V

位置: classes2.dex
com.xiaomi.mico.common.widget.CustomWebView;->a()V
com.xiaomi.miot.store.common.MiotStoreWebView;->init(Landroid.content.Context;)V
com.xiaomi.passport.ui.LicenseActivity;->onCreate(Landroid.os.Bundle;)V
com.xiaomi.passport.ui.ScanCodeLoginFragment;->onCreateView(Landroid.view.LayoutInflater; Landroid.view.ViewGroup; Landroid.os.Bundle;)Landroid.view.View;

允许WebView执行JavaScript(setJavaScriptEnabled),有可能导致XSS攻击。建议尽量避免使用。
(1)API等于高高于17的Android系统。出于安全考虑,为了防止Java层的函数被随意调用,Google在4.2版本之后,规定允许被调用的函数必须以@JavascriptInterface进行注解。
(2)API等于高高于17的Android系统。建议不要使用addJavascriptInterface接口,以免带来不必要的安全隐患,如果一定要使用该接口,建议使用证书校验。
u(3)使用removeJavascriptInterface移除Android系统内部的默认内置接口:searchBoxJavaBridge_、accessibility、accessibilityTraversal。

参考案例:
www.wooyun.org/bugs/wooyun-2015-0140708
www.wooyun.org/bugs/wooyun-2016-0188252

参考资料:
http://jaq.alibaba.com/blog.htm?id=48
http://blog.nsfocus.net/android-webview-remote-code-execution-vulnerability-analysis

警告

检测到19处IvParameterSpec的使用。

位置: classes.dex
com.alipay.b.a.a.a.a.c;->a(Ljava.lang.String; Ljava.lang.String;)Ljava.lang.String;
com.alipay.b.a.a.a.a.c;->b(Ljava.lang.String; Ljava.lang.String;)Ljava.lang.String;
com.alipay.sdk.encrypt.e;->a(Ljava.lang.String; [B)[B
com.alipay.sdk.encrypt.e;->b(Ljava.lang.String; [B)[B
com.c.a.b.a.a;->a([B [B)[B
com.c.a.b.a.a;->b([B [B)[B
com.unionpay.c.am;->a(Ljava.lang.String;)Ljava.lang.String;
com.unionpay.c.am;->b(Ljava.lang.String;)Ljava.lang.String;
com.unionpay.c.bd;->a([B [B)[B
com.unionpay.c.bd;->b([B [B)[B
com.unionpay.c.bd;->c([B [B)[B

位置: classes2.dex
com.xiaomi.accountsdk.utils.AESCoder;->decrypt([B)[B
com.xiaomi.accountsdk.utils.AESCoder;->encrypt([B)[B
com.xiaomi.accountsdk.utils.CloudCoder;->newAESCipherWithIV(Ljava.lang.String; I [B)Ljavax.crypto.Cipher;
com.xiaomi.channel.commonutils.android.c;->a([B I)Ljavax.crypto.Cipher;
com.xiaomi.phonenum.utils.AESCoder;->a([B)[B
com.xiaomi.phonenum.utils.AESCoder;->b([B)[B
com.xiaomi.youpin.util.a;->a(Ljava.lang.String; Ljava.lang.String;)Ljava.lang.String;
com.xiaomi.youpin.util.a;->b(Ljava.lang.String; Ljava.lang.String;)Ljava.lang.String;

使用IVParameterSpec函数,如果使用了固定的初始化向量,那么密码文本可预测性高得多,容易受到字典攻击等。建议禁止使用常量初始化矢量构造IVParameterSpec,使用聚安全提供的安全组件。

参考资料:
http://drops.wooyun.org/tips/15870
https://developer.android.com/training/articles/keystore.html
http://wolfeye.baidu.com/blog/weak-encryption/
http://www.freebuf.com/articles/terminal/99868.html

警告

检测到1处provider的grantUriPermissions设置为true。
android.support.v4.content.FileProvider


grant-uri-permission若设置为true,可被其它程序员通过uri访问到content provider的内容,容易造成信息泄露。

参考资料:
https://security.tencent.com/index.php/blog/msg/6

警告

检测到 6处url没有使用安全的https链接。

位置: classes.dex
http://m.alipay.com/
http://mcgw.alipay.com/
http://mobilegw-1-64.test.alipay.net/
http://mobilegw.aaa.alipay.net/
http://mobilegw.alipay.com/
http://mobilegw.stable.alipay.net/

参考资料:
https://jaq.alibaba.com/blog.htm?id=60
https://developer.android.com/training/articles/security-ssl.html

警告

检测到27处使用了加解密算法。密钥处理不当可能会导致信息泄露。

位置: classes.dex
okio.l;->(Lokio.v; Lokio.ByteString; Ljava.lang.String;)V
com.alipay.sdk.encrypt.e;->a(Ljava.lang.String; [B)[B
com.unionpay.utils.c;->a(I [B [B)[B
okio.c;->a(Ljava.lang.String; Lokio.ByteString;)Lokio.ByteString;
com.unionpay.mobile.android.utils.d;->a(I [B [B)[B
com.alipay.sdk.encrypt.b;->a(I Ljava.lang.String; Ljava.lang.String;)Ljava.lang.String;
com.xiaomi.account.auth.AuthorizeHelper;->encryptHMACSha1([B [B)[B
com.unionpay.c.am;->c(Ljava.lang.String;)Ljavax.crypto.spec.SecretKeySpec;
com.github.scribejava.core.c.d;->a(Ljava.lang.String; Ljava.lang.String;)Ljava.lang.String;
com.c.a.b.a.a;->a([B [B)[B
com.c.a.b.a.a;->b([B [B)[B
okio.ByteString;->a(Ljava.lang.String; Lokio.ByteString;)Lokio.ByteString;
com.alipay.b.a.a.a.a.c;->b(Ljava.lang.String; Ljava.lang.String;)Ljava.lang.String;
com.c.a.d.d;->a([B)Ljava.lang.String;
com.unionpay.c.am;->b(Ljava.lang.String;)Ljava.lang.String;
com.alipay.b.a.a.a.a.c;->a(Ljava.lang.String; Ljava.lang.String;)Ljava.lang.String;
com.alipay.sdk.encrypt.e;->b(Ljava.lang.String; [B)[B

位置: classes2.dex
com.xiaomi.youpin.util.a;->a(Ljava.lang.String; Ljava.lang.String;)Ljava.lang.String;
com.xiaomi.accountsdk.utils.CloudCoder;->newRC4Cipher([B I)Ljavax.crypto.Cipher;
com.xiaomi.youpin.util.a;->b(Ljava.lang.String; Ljava.lang.String;)Ljava.lang.String;
com.xiaomi.accountsdk.utils.CloudCoder;->newAESCipherWithIV(Ljava.lang.String; I [B)Ljavax.crypto.Cipher;
com.xiaomi.channel.commonutils.android.c;->a([B I)Ljavax.crypto.Cipher;
okio.m;->(Lokio.w; Lokio.ByteString; Ljava.lang.String;)V
com.xiaomi.accountsdk.utils.CloudCoder;->newAESCipher([B I)Ljavax.crypto.Cipher;
com.xiaomi.phonenum.utils.AESCoder;->([B)V
com.xiaomi.accountsdk.utils.AESCoder;->([B)V
com.xiaomi.mistatistic.sdk.a.d;->b(Ljava.lang.String; Ljava.lang.String;)[B

参考案例:
http://www.wooyun.org/bugs/wooyun-2010-0105766
http://www.wooyun.org/bugs/wooyun-2015-0162907
http://www.wooyun.org/bugs/wooyun-2010-0187287

参考资料:
http://drops.wooyun.org/tips/15870
https://developer.android.com/training/articles/keystore.html


动态扫描发现风险点

风险等级 风险名称

服务端分析

风险等级 风险名称

警告

检测到?处XSS漏洞。
开发中...

警告

检测到?处XSS跨站漏洞。
开发中...

应用证书