0

高危漏洞

8

中危漏洞

7

低危漏洞

10

警告

文件名 apk001.apk
上传者 admin
文件大小 89.579008102417MB
MD5 a76a839b914b026a9b48e38a06ca34e9
包名 com.ecitic.bank.mobile
Main Activity com.ecitic.bank.mobile.ui.SplashActivity
Min SDK 19
Target SDK 26

权限列表

# 名称 说明 提示
0 android.permission.ACCESS_COARSE_LOCATION 访问大概的位置源(例如蜂窝网络数据库)以确定手机的大概位置(如果可以)。恶意应用程序可借此确定您所处的大概位置。 注意
1 android.permission.ACCESS_COARSE_LOCATION 访问大概的位置源(例如蜂窝网络数据库)以确定手机的大概位置(如果可以)。恶意应用程序可借此确定您所处的大概位置。 注意
2 android.permission.ACCESS_FINE_LOCATION 访问精准的位置源,例如手机上的全球定位系统(如果有)。恶意应用程序可能会借此确定您所处的位置,并可能消耗额外的电池电量。 注意
3 android.permission.ACCESS_FINE_LOCATION 访问精准的位置源,例如手机上的全球定位系统(如果有)。恶意应用程序可能会借此确定您所处的位置,并可能消耗额外的电池电量。 注意
4 android.permission.ACCESS_LOCATION_EXTRA_COMMANDS 访问额外的位置信息提供程序命令。恶意应用程序可借此干扰GPS或其他位置源的正常工作。 注意
5 android.permission.BLUETOOTH 允许应用程序查看本地蓝牙手机的配置,以及建立或接受与配对设备的连接。 注意
6 android.permission.BROADCAST_STICKY 允许应用程序发送顽固广播,这些广播在结束后仍会保留。恶意应用程序可能会借此使手机耗用太多内存,从而降低其速度或稳定性。 注意
7 android.permission.GET_TASKS 允许应用程序检索有关当前和最近运行的任务的信息。恶意应用程序可借此发现有关其他应用程序的保密信息。 注意
8 android.permission.READ_CONTACTS 允许应用程序读取您手机上存储的所有联系人(地址)数据。恶意应用程序可借此将您的数据发送给其他人。 注意
9 android.permission.READ_PHONE_STATE 允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号,是否正在通话,以及对方的号码等。 注意
10 android.permission.READ_PHONE_STATE 允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号,是否正在通话,以及对方的号码等。 注意
11 android.permission.READ_PHONE_STATE 允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号,是否正在通话,以及对方的号码等。 注意
12 android.permission.READ_PHONE_STATE 允许应用程序访问设备的手机功能。有此权限的应用程序可确定此手机的号码和序列号,是否正在通话,以及对方的号码等。 注意
13 android.permission.RECEIVE_BOOT_COMPLETED 允许应用程序在系统完成启动后即自行启动。这样会延长手机的启动时间,而且如果应用程序一直运行,会降低手机的整体速度。 注意
14 android.permission.RECORD_AUDIO 允许应用程序访问录音路径。 注意
15 android.permission.RECORD_AUDIO 允许应用程序访问录音路径。 注意
16 android.permission.SYSTEM_ALERT_WINDOW 允许应用程序显示系统警报窗口。恶意应用程序可借此掌控整个手机屏幕。 注意
17 android.permission.SYSTEM_ALERT_WINDOW 允许应用程序显示系统警报窗口。恶意应用程序可借此掌控整个手机屏幕。 注意
18 android.permission.WRITE_SETTINGS 允许应用程序修改系统设置方面的数据。恶意应用程序可借此破坏您的系统配置。 注意
19 android.permission.WRITE_SETTINGS 允许应用程序修改系统设置方面的数据。恶意应用程序可借此破坏您的系统配置。 注意
20 android.permission.ACCESS_NETWORK_STATE 允许应用程序查看所有网络的状态。 提示
21 android.permission.ACCESS_WIFI_STATE 允许应用程序查看有关WLAN状态的信息。 提示
22 android.permission.ACCESS_WIFI_STATE 允许应用程序查看有关WLAN状态的信息。 提示
23 android.permission.AUTHENTICATE_ACCOUNTS 允许应用程序使用AccountManager的帐户身份验证程序功能,包括创建帐户以及获取和设置其密码。 提示
24 android.permission.BLUETOOTH_ADMIN 允许应用程序配置本地蓝牙手机,以及发现远程设备并与其配对。 提示
25 android.permission.CAMERA 允许应用程序使用相机拍照,这样应用程序可随时收集进入相机镜头的图像。 提示
26 android.permission.CAMERA 允许应用程序使用相机拍照,这样应用程序可随时收集进入相机镜头的图像。 提示
27 android.permission.CHANGE_NETWORK_STATE 允许应用程序更改网络连接的状态。 提示
28 android.permission.CHANGE_WIFI_STATE 允许应用程序连接到WLAN接入点以及与WLAN接入点断开连接,并对配置的WLAN网络进行更改。 提示
29 android.permission.GET_ACCOUNTS 允许应用程序获取手机已知的帐户列表。 提示
30 android.permission.INTERNET 允许程序访问网络. 提示
31 android.permission.INTERNET 允许程序访问网络. 提示
32 android.permission.MANAGE_ACCOUNTS 允许应用程序执行添加、删除帐户及删除其密码之类的操作。 提示
33 android.permission.MODIFY_AUDIO_SETTINGS 允许应用程序修改整个系统的音频设置,如音量和路由。 提示
34 android.permission.MOUNT_UNMOUNT_FILESYSTEMS 允许应用程序装载和卸载可移动存储器的文件系统。 提示
35 android.permission.READ_LOGS 允许应用程序从系统的各日志文件中读取信息。这样应用程序可以发现您的手机使用情况,但这些信息不应包含任何个人信息或保密信息。 提示
36 android.permission.USE_CREDENTIALS 允许应用程序请求身份验证标记。 提示
37 android.permission.VIBRATE 允许应用程序控制振动器。 提示
38 android.permission.WAKE_LOCK 允许应用程序防止手机进入休眠状态。 提示
39 android.permission.WAKE_LOCK 允许应用程序防止手机进入休眠状态。 提示
40 android.permission.WRITE_EXTERNAL_STORAGE 允许应用程序写入SD卡。 提示
41 android.permission.WRITE_EXTERNAL_STORAGE 允许应用程序写入SD卡。 提示

四大组件

组件名称

com.igexin.sdk.PushActivity
com.igexin.getuiext.activity.GetuiExtActivity
com.ecitic.bank.mobile.ui.SplashActivity
com.ecitic.bank.mobile.ui.MainActivity
com.ecitic.bank.mobile.ui.CBWebviewActivity
com.ecitic.bank.mobile.ui.WebviewActivity
com.ecitic.bank.mobile.ui.FirstGuildActivity
com.ecitic.bank.mobile.ui.AllMenuActivity
com.ecitic.bank.mobile.ui.ITAllMenuActivity
com.ecitic.bank.mobile.ui.activity.fund.CompanyListActivity
com.ecitic.bank.mobile.ui.activity.fund.FundTypeListActivity
com.ecitic.bank.mobile.ui.activity.MyQrCodeActivity
com.ecitic.bank.mobile.ui.activity.SeleteItemActivity
com.ecitic.bank.mobile.function.user.activity.AboutUsActivity
com.ecitic.bank.mobile.function.user.activity.VersonInfoActivity
com.ecitic.bank.mobile.ui.ScannerActivity
com.ecitic.bank.mobile.function.user.activity.MessageCenterActivity
com.ecitic.bank.mobile.function.user.activity.MessageListActivity
com.ecitic.bank.mobile.payeemanager.activity.AddBankCardActivity
com.ecitic.bank.mobile.payeemanager.activity.AddOverseasPayeeActivity
com.ecitic.bank.mobile.payeemanager.activity.AddPayeeActivity
com.ecitic.bank.mobile.payeemanager.activity.BankCardActivity
com.ecitic.bank.mobile.payeemanager.activity.OverseaPayeeHMessageTypeActivtiy
com.ecitic.bank.mobile.payeemanager.activity.PayeeManagementActivity
com.ecitic.bank.mobile.payeemanager.activity.SelectOverseaPayeeCountryActivity
com.ecitic.bank.mobile.payeemanager.activity.SelectOverseaPayeeHCountryActivity
com.ecitic.bank.mobile.ui.SelectConditionActivity
com.ecitic.bank.mobile.function.user.activity.NoticeDetailsActivity
com.ecitic.bank.mobile.function.user.activity.YxActivityDetailActivity
com.ecitic.bank.mobile.function.user.activity.YxActivityListActivity
com.ecitic.bank.mobile.ui.activity.account.AreaQueryActivity
com.ecitic.bank.mobile.ui.activity.account.AssetQureyMenuActivity
com.ecitic.bank.mobile.ui.activity.account.BigMoneyMenuActivity
com.ecitic.bank.mobile.ui.activity.account.DealDetailSearchActivity
com.ecitic.bank.mobile.ui.activity.account.ElectronAccountYzActivity
com.ecitic.bank.mobile.ui.activity.account.ElectronAccountYzActivityCopy
com.ecitic.bank.mobile.ui.activity.account.ElectronAccountYzGuideActivity
com.ecitic.bank.mobile.ui.activity.account.RegisterYzActivity
com.ecitic.bank.mobile.ui.activity.account.Safe_IdentityInputInfoActivity
com.ecitic.bank.mobile.ui.login.UnifiedUserSetGesturePwdActivity
com.ecitic.bank.mobile.ui.activity.account.Safe_IdentityInputInfoActivityCopy
com.ecitic.bank.mobile.ui.activity.account.Safe_IdentitySelectCityActivity
com.ecitic.bank.mobile.ui.activity.account.Safe_IdentitySelectOccupationActivity
com.ecitic.bank.mobile.ui.activity.account.Safe_IdentityTakePhotoActivity
com.ecitic.bank.mobile.ui.activity.fund.FundTypeSelectActivity
com.ecitic.bank.mobile.ui.activity.DetailQueryActivity
com.ecitic.bank.mobile.ui.activity.DetailResultListActivity
com.ecitic.bank.mobile.ui.activity.DetailsQueryResultActivity
com.ecitic.bank.mobile.ui.activity.NativeBottomMenuActivity
com.ecitic.bank.mobile.ui.megvii.activity.LivenessActivity
com.ecitic.bank.mobile.ui.megvii.activity.ReadyActivity
com.ecitic.bank.mobile.ui.megvii.activity.ResultActivity
com.ecitic.bank.mobile.payeemanager.activity.BankAndCardActivity
com.ecitic.bank.mobile.ui.CommonItemListActivity
com.ecitic.bank.mobile.ui.NativeBottomMenuActivity
com.ecitic.bank.mobile.ui.HtmlBottomMenuActivity
com.ecitic.bank.mobile.ui.KuahangRemitActivity
com.ecitic.bank.mobile.ui.LinkManActivity
com.ecitic.bank.mobile.ui.PaymentCityActivity
com.ecitic.bank.mobile.ui.SelectClockActivity
com.ecitic.bank.mobile.ui.SelectPhotoActivity
com.ecitic.bank.mobile.ui.SelectPlaceArea
com.ecitic.bank.mobile.ui.XinjinbaoActivity
com.ecitic.bank.mobile.ui.map.BaiduMapMarkerActivity
com.ecitic.bank.mobile.ui.map.BaiduMapRouteActivity
com.ecitic.bank.mobile.ui.investment.Calendar_Day_Actiivty
com.ecitic.bank.mobile.ui.investment.Calendar_Alert_Activty
com.ecitic.bank.mobile.ui.investment.Calendar_Month_Actiivty
com.ecitic.bank.mobile.ui.investment.Calendar_TwelveYear_Activity
com.ecitic.bank.mobile.payeemanager.activity.CGJRAddOverseaPayeeActivity
com.ecitic.bank.mobile.ui.investment.CurrencyListActivity
com.ecitic.bank.mobile.ui.investment.DeadlineListActivity
com.ecitic.bank.mobile.ui.investment.FundAreaListActivity
com.ecitic.bank.mobile.ui.investment.FundStateListActivity
com.ecitic.bank.mobile.ui.investment.InnvestmentQueryActivity
com.ecitic.bank.mobile.ui.login.UnifiedUserAddPhoneNumberActivity
com.ecitic.bank.mobile.ui.login.UnifiedUserBindDeviceActivity
com.ecitic.bank.mobile.ui.login.UnifiedUserErrorLoginTimeActivity
com.ecitic.bank.mobile.ui.login.UnifiedUserFirstResultActivity
com.ecitic.bank.mobile.ui.login.LoginActivity
com.ecitic.bank.mobile.ui.login.UnifiedUserModifyPasswordActivity
com.ecitic.bank.mobile.ui.login.UnifiedUserSetLoginPassword
com.ecitic.bank.mobile.ui.authname.AuthNameCardEditActivity
com.ecitic.bank.mobile.ui.authname.AuthNameEnteringActivity
com.ecitic.bank.mobile.ui.authname.AuthNameSetPasswordActivity
com.ecitic.bank.mobile.ui.authname.AuthNameGuideActivity
com.ecitic.bank.mobile.ui.authname.AuthNameResultActivity
com.ecitic.bank.mobile.ui.authname.AuthTypeActivity
com.ecitic.bank.mobile.ui.activity.account.CgJrMenuActivity
com.ecitic.bank.mobile.ui.activity.account.GoldMyOrderMenuActivity
com.ecitic.bank.mobile.ui.activity.account.JshTjSearchActivity
com.ecitic.bank.mobile.ui.activity.account.XyGjMenuActivity
com.ecitic.bank.mobile.ui.BankTransferResultActivity
com.ecitic.bank.mobile.ui.setting.BankTransferSearchActivity
com.ecitic.bank.mobile.ui.FinancialTradeDetailActivity
com.ecitic.bank.mobile.ui.FinancialTradeDetailResultActivity
com.ecitic.bank.mobile.ui.FinancialTransferDemandActivity
com.ecitic.bank.mobile.ui.FinancialTransferDemandResultActivity
com.ecitic.bank.mobile.ui.InsuranceDetailQueryActivity
com.ecitic.bank.mobile.ui.InsuranceMenuActivity
com.ecitic.bank.mobile.ui.InsuranceProductQueryActivity
com.ecitic.bank.mobile.ui.InsuranceProductQueryResultActivity
com.ecitic.bank.mobile.ui.MyPayrollQueryActivity
com.ecitic.bank.mobile.ui.MyPayrollQueryTypeResultActivity
com.ecitic.bank.mobile.ui.OverseaPayeeQueryActivity
com.ecitic.bank.mobile.ui.OverseaPayeeQueryResultActivity
com.ecitic.bank.mobile.ui.PensionQueryActivity
com.ecitic.bank.mobile.ui.WebViewForSlideActivity
com.ecitic.bank.mobile.ui.setting.SettingOpenGesturePwdActivity
com.ecitic.bank.mobile.ui.setting.DateQueryActivity
com.ecitic.bank.mobile.ui.setting.SettingSetGesturePwdActivity
com.ecitic.bank.mobile.ui.setting.SettingCloseGesturePwdActivity
com.ecitic.bank.mobile.ui.setting.ResultGesturePwdActivity
com.ecitic.bank.mobile.ui.activity.OpinionFeedBackActivity
com.ecitic.bank.mobile.ui.activity.OpinionFeedBackResultActivity
com.ecitic.bank.mobile.ui.activity.ServiceHelperActivity
com.ecitic.bank.mobile.assetqurey.activity.PieActivity
com.ecitic.bank.mobile.assetqurey.activity.PieLiabilitieActivity
com.ecitic.bank.mobile.assetqurey.activity.PieAssetsActivity
com.ecitic.bank.mobile.payeemanager.activity.SelectPayeeActivity
com.ecitic.bank.mobile.payeemanager.activity.PayeeDetailActivity
com.ecitic.bank.mobile.payeemanager.activity.MotifyPayeeActivity
com.ecitic.bank.mobile.payeemanager.activity.SelectOverseaPayeeActivity
com.ecitic.bank.mobile.payeemanager.activity.CityListActivity
com.ecitic.bank.mobile.payeemanager.activity.AddOverseasPayeeDetailActivity
com.ecitic.bank.mobile.payeemanager.activity.AddOverseasPayeeUpdateActivity
com.ecitic.bank.mobile.ui.activity.fund.OPenPDFActivity
com.ecitic.bank.mobile.ui.investment.Calendar_Year_Activity
com.ecitic.bank.mobile.ui.activity.account.EaccBankActivity
com.ecitic.bank.mobile.ui.AuthorityLoginConfirmActivity
com.ecitic.bank.mobile.ui.CreditSearchActivity
com.ecitic.bank.mobile.ui.CreditResultActivity
com.ecitic.bank.mobile.ui.AuthorityLoginResultActivity
com.ecitic.bank.mobile.payeemanager.activity.PhoneNumberSelectActivity
com.ecitic.bank.mobile.ui.AdvDetailActivity
com.ecitic.bank.mobile.allmenusearch.AllMenuSearchActivity
com.ecitic.bank.mobile.scan.CameraActivity
com.gmrz.appsdk.commlib.IntentHelperActivity
com.ecitic.bank.mobile.helloar.view.activitys.MainActivityAR
com.gmrz.asm.fp.authui.FpActivity
com.ecitic.bank.mobile.ui.activity.account.ElectronAccountYzActivityNew
com.megvii.idcardlib.IDCardScanActivity
com.ecitic.bank.mobile.ui.activity.ListSelectorActivity
com.ecitic.bank.mobile.ui.BlueToothUKeyActivity
com.ecitic.bank.mobile.ui.activity.EditAppCompActivity
com.ecitic.bank.mobile.dialog.DialogActivity
com.ecitic.bank.mobile.voicebank.activity.VoiceBankActivity
com.ecitic.bank.mobile.helloar.view.activitys.NewArActivity
com.ecitic.bank.mobile.helloar.view.activitys.NewArWebActivity
com.ecitic.bank.mobile.main_search.VoiceSearchResultActivityNew
com.ecitic.bank.mobile.main_search.AllSearchReslutActivity
com.ecitic.bank.mobile.hwvideo.activity.HwVideoActivity
com.ecitic.bank.mobile.hwvideo.activity.PDFActivity
com.ecitic.bank.mobile.vrmodel.ModelActivity
com.ecitic.bank.mobile.wxapi.WXEntryActivity
me.weyye.hipermission.PermissionActivity
com.jhworks.library.ui.ImageSelectActivity
com.jhworks.library.ui.ImageActivity
com.citicbank.unionplugin.activity.WebViewActivity
com.citicbank.unionplugin.activity.RegisterActivity
com.citicbank.unionplugin.activity.PluginWebviewActivity
com.citicbank.unionplugin.sst.sstcamera.SSTCemareActivity

com.baidu.location.f
com.igexin.sdk.PushService
com.igexin.getuiext.service.GetuiExtService
com.igexin.download.DownloadService
com.ecitic.bank.mobile.service.UpdateDownloadServer

com.igexin.sdk.PushReceiver
com.igexin.sdk.PushManagerReceiver
com.igexin.getuiext.service.PayloadReceiver
com.ecitic.bank.mobile.service.GetuiPushReceiver
com.igexin.download.DownloadReceiver

com.igexin.download.DownloadProvider
android.support.v4.content.FileProvider

第三方库

# 库名 介绍
0 android.support.transition A backport of the new Transitions API for Android.
1 retrofit2 Type-safe REST client for Android and Java by Square, Inc.
2 com.igexin 通过个推的技术,APP可主动向用户推送新闻动态、版本更新、优惠活动、生活服务等各类信息,并通过多维度用户群组分析进行智能匹配,给合适的人群合适的场景推送合适的内容,大幅度提升消息点击率、用户活跃度和留存率
3 com.baidu.mapapi 百度地图 Android SDK是一套基于Android 2.1及以上版本设备的应用程序接口。 您可以使用该套 SDK开发适用于Android系统移动设备的地图应用,通过调用地图SDK接口,您可以轻松访问百度地图服务和数据,构建功能丰富、交互性强的地图类应用程序。
4 com.google.protobuf Protocol Buffers - Google's data interchange format https://developers.google.com/protocol-buffers/
5 okhttp3 An HTTP+SPDY client for Android and Java applications.
6 com.bumptech.glide An image loading and caching library for Android focused on smooth scrolling
7 com.google.gson A Java serialization library that can convert Java Objects into JSON and back.
8 org.apache.http The Apache HttpComponents™ project is responsible for creating and maintaining a toolset of low level Java components focused on HTTP and associated protocols.
9 android.support.multidex DEPRECATED
10 org.json 根据Gson库使用的要求,将JSONObject格式的String 解析成实体
11 android.support.transition A backport of the new Transitions API for Android.
12 retrofit2 Type-safe REST client for Android and Java by Square, Inc.
13 com.igexin 通过个推的技术,APP可主动向用户推送新闻动态、版本更新、优惠活动、生活服务等各类信息,并通过多维度用户群组分析进行智能匹配,给合适的人群合适的场景推送合适的内容,大幅度提升消息点击率、用户活跃度和留存率
14 com.google.protobuf Protocol Buffers - Google's data interchange format https://developers.google.com/protocol-buffers/
15 okhttp3 An HTTP+SPDY client for Android and Java applications.
16 com.google.zxing Official ZXing ("Zebra Crossing") project home
17 com.baidu.lbsapi 百度Android全景SDK是为Android移动平台提供的一套全景图服务接口,面向广大开发者提供全景图的检索、显示和交互功能,从而更加清晰方便地展示目标位置的周边环境。
18 com.google.gson A Java serialization library that can convert Java Objects into JSON and back.
19 org.apache.http The Apache HttpComponents™ project is responsible for creating and maintaining a toolset of low level Java components focused on HTTP and associated protocols.
20 com.baidu.mapapi 百度地图 Android SDK是一套基于Android 2.1及以上版本设备的应用程序接口。 您可以使用该套 SDK开发适用于Android系统移动设备的地图应用,通过调用地图SDK接口,您可以轻松访问百度地图服务和数据,构建功能丰富、交互性强的地图类应用程序。
21 android.support.multidex DEPRECATED
22 org.json 根据Gson库使用的要求,将JSONObject格式的String 解析成实体
23 android.support.transition A backport of the new Transitions API for Android.
24 com.tencent.mm.sdk 微信支付
25 com.iflytek 讯飞开放平台作为全球首个开放的智能交互技术服务平台,致力于为开发者打造一站式智能人机交互解决方案。用户可通过互联网、移动互联网,使用任何设备、在任何时间、任何地点,随时随地享受讯飞开放平台提供的“听、说、读、写……”等全方位的人工智能服务。目前,开放平台以“云+端”的形式向开发者提供语音合成、语音识别、语音唤醒、语义理解、人脸识别、个性化彩铃、移动应用分析等多项服务。
26 com.igexin 通过个推的技术,APP可主动向用户推送新闻动态、版本更新、优惠活动、生活服务等各类信息,并通过多维度用户群组分析进行智能匹配,给合适的人群合适的场景推送合适的内容,大幅度提升消息点击率、用户活跃度和留存率
27 okhttp3 An HTTP+SPDY client for Android and Java applications.
28 com.bumptech.glide An image loading and caching library for Android focused on smooth scrolling
29 cn.sharesdk ShareSDK是中国最大的APP内分享服务提供商,ShareSDK社会化分享全面支持微信,微博,QQ空间,来往,易信,Facebook等国内外40个平台,帮助开发者轻松实现社会化分享、第三方登录、好友关系运用、一键分享、短链转换、评论和赞功能,还有强大的社会化统计分析管理后台,可以实时了解用户、信息流、回流率、传播效率等数据,有效地指导移动APP的日常运营与推广,同时为APP引入更多的社会化流量。
30 org.apache.harmony Apache Harmony software is a modular Java runtime with class libraries and associated tools.
31 net.sourceforge.pinyin4j Pinyin4j is a popular Java library supporting convertion between Chinese characters and most popular Pinyin systems. The output format of pinyin could be customized.
32 android.support.multidex DEPRECATED
33 com.joanzapata.pdfview A fast PDF reader component for Android development

静态扫描发现风险点

风险等级 风险名称

中危

检测到8处证书弱校验漏洞。

位置: classes2.dex
com.baidu.location.b.v;
com.baidu.lbsapi.auth.e;
com.csii.csiitracker.network.HttpTransport$1;
com.baidu.lbsapi.auth.h;
m.framework.network.SSLSocketFactoryEx$1;
com.citicbank.unionplugin.http.NoX509TrustManager;
com.citicbank.cbframework.communication.b;

位置: classes3.dex
com.ecitic.bank.mobile.hwvideo.service.ics.ICSService$MyTrustManager;

当移动App客户端使用https或ssl/tls进行通信时,如果不校验证书的可信性,将存在中间人攻击漏洞,可导致信息泄露,传输数据被篡改,甚至通过中间人劫持将原有信息替换成恶意链接或恶意代码程序,以达到远程控制等攻击意图。建议:
对SSL证书进行强校验,包括签名CA是否合法、证书是否是自签名、主机域名是否匹配、证书是否过期等。

参考案例:
www.wooyun.org/bugs/wooyun-2014-079358

参考资料:
http://drops.wooyun.org/tips/3296
http://wolfeye.baidu.com/blog/webview-ignore-ssl-error/
https://jaq.alibaba.com/blog.htm?id=60

中危

检测到debug模式被打开。如果该项被打开,app存在被恶意程序调试的风险,可能导致泄露敏感信息等问题,建议关闭debug模式。

中危

检测到4处中间人攻击漏洞。

位置: classes2.dex
com.baidu.lbsapi.auth.c;->a()Lorg.apache.http.client.HttpClient;
com.baidu.lbsapi.auth.f;->a()Lorg.apache.http.client.HttpClient;
m.framework.network.NetworkHelper;->getSSLHttpClient()Lorg.apache.http.client.HttpClient;
com.baidu.location.b.m;->if(Lorg.apache.http.params.HttpParams;)Lorg.apache.http.client.HttpClient;

setHostnameVerifier方法设置ALLOW_ALL_HOSTNAME_VERIFIER,直接接受任意域名,可能造成中间人攻击漏洞。建议:
对SSL证书进行强校验,包括签名CA是否合法、证书是否是自签名、主机域名是否匹配、证书是否过期等。

参考案例:
http://www.wooyun.org/bugs/wooyun-2010-042710
http://www.wooyun.org/bugs/wooyun-2010-052339
http://www.wooyun.org/bugs/wooyun-2016-0190773

参考资料:
http://wolfeye.baidu.com/blog/webview-ignore-ssl-error/
https://jaq.alibaba.com/blog.htm?id=60

中危

该app需要移除大部分日志打印代码。
经扫描该包仍存在大量打日志代码,共发现684处打日志代码.(此处扫描的日志打印代码,是指调用android.util.Log.* 打印的.)
详情如下:

位置: classes.dex
com.ecitic.bank.mobile.common.util.LoggerUtil;->warn(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.resource.bitmap.TransformationUtils;->fitCenter(Landroid/graphics/Bitmap; Lcom/bumptech/glide/load/engine/bitmap_recycle/BitmapPool; I I)Landroid/graphics/Bitmap;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.Glide;->getPhotoCacheDir(Landroid/content/Context; Ljava/lang/String;)Ljava/io/File;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.library.iconbadge.IconBadger;->getLaunchIntent(Landroid/content/Context;)Landroid/content/ComponentName;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.util.LoggerUtil;->logStack(Ljava/lang/String; [Ljava/lang/StackTraceElement;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.navi.BaiduMapNavigation;->openBaiduMapBikeNavi(Lcom/baidu/mapapi/navi/NaviParaOption; Landroid/content/Context;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.navi.BaiduMapNavigation;->openBaiduMapWalkNavi(Lcom/baidu/mapapi/navi/NaviParaOption; Landroid/content/Context;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.view.b;->n()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.Glide;->buildModelLoader(Ljava/lang/Class; Ljava/lang/Class; Landroid/content/Context;)Lcom/bumptech/glide/load/model/ModelLoader;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.j.i;->b(F)F==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.ui.ScannerActivity;->seletQrStatus()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.view.CaptureView$a;->a([B I I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.j.i;->a(Landroid/content/Context;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.j.i;->c(F)F==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.view.CaptureView;->capture(Landroid/graphics/Rect;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.view.b;->b(I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.util.DeviceCheckUtil;->CheckEmulatorBuild()Z==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.util.LoggerUtil;->logStack(Ljava/lang/String; Ljava/lang/Throwable;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.util.LoggerUtil;->e(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.navi.BaiduMapNavigation;->openBaiduMapNavi(Lcom/baidu/mapapi/navi/NaviParaOption; Landroid/content/Context;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.util.DeviceCheckUtil;->isWifiProxy(Landroid/content/Context;)Ljava/lang/String;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.util.LoggerUtil;->logStack(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

位置: classes2.dex
com.baidu.location.a.a;->dP()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.map.TileOverlay;->a(I I I)Lcom/baidu/mapapi/map/Tile;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.ocr.a;->f()I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.igexin.push.core.a.f;->l()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.favorite.FavoriteManager;->getAllFavPois()Ljava/util/List;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.util.FileUtil;->copyTemplatesFromAssets(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.citicbank.cbframework.log.appender.CBConsoleAppender;->doAppend(Lcom/citicbank/cbframework/log/CBLoggingEvent;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.bangcle.everisk.logic.CheckQemudAndQemu_pipe;->checkPipes(Lorg/json/JSONObject;)Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.unionplugin.base.imageloader.L;->i(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.ocr.a;->a(Lcom/sinovoice/hciocrcapture/entity/OcrResult;)Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.location.b.q;->run()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.bangcle.everisk.logic.MainCheckLogic;->checkEmulator()Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.citicbank.unionplugin.log.L;->d(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.c.c;->setHardwareAccelerationEnabled(Z)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.location.b.s;->run()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.watchdata.android.utils.Utils;->LogE(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.citicbank.unionplugin.util.BitmapDecoder;->calculateInSmall(Landroid/graphics/BitmapFactory$Options; I I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.citicbank.cbframework.log.appender.CBConsoleAppender;->doAppend(Lcom/citicbank/cbframework/log/CBLoggingEvent;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.utils.route.BaiduMapRoutePlan;->openBaiduMapTransitRoute(Lcom/baidu/mapapi/utils/route/RouteParaOption; Landroid/content/Context;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.ocr.a;->d()Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.noknok.android.client.utils.Logger;->d(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.citicbank.unionplugin.sst.sstcamera.CameraUtils;->open()Landroid/hardware/Camera;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.ocr.a;->a(Landroid/content/Context; Lcom/sinovoice/hciocrcapture/entity/OcrType;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.unionplugin.base.imageloader.L;->v(Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.erayt.android.libtc.a.a;->b(Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.utils.poi.BaiduMapPoiSearch;->openBaiduMapPoiNearbySearch(Lcom/baidu/mapapi/utils/poi/PoiParaOption; Landroid/content/Context;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
common.Log;->v(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.citicbank.cbframework.bugreporter.a;->uncaughtException(Ljava/lang/Thread; Ljava/lang/Throwable;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.ocr.RecognizeHandler;->handleMessage(Landroid/os/Message;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.citicbank.unionplugin.sst.sstcamera.CameraUtils;->open()Landroid/hardware/Camera;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.csii.csiitracker.utils.LogUtils;->w(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.gmrz.asm.fp.util.Logger;->e(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.tts.TtsController$WorkingThread;->processProtocolBufferStream(Ljava/io/InputStream;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
cn.easyar.engine.PermissionFragment;->onRequestPermissionsResult(I [Ljava/lang/String; [I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.utils.TLog;->e(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.utils.a;->j()Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.unionplugin.base.imageloader.L;->e(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.utils.c;->onServiceConnected(Landroid/content/ComponentName; Landroid/os/IBinder;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.favorite.FavoriteManager;->getFavPoi(Ljava/lang/String;)Lcom/baidu/mapapi/favorite/FavoritePoiInfo;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.igexin.a.a.c.a;->a(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.utils.a;->l()Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.unionplugin.base.imageloader.L;->i(Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.view.a;->(Landroid/hardware/Camera;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.ocr.a;->d()Z==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.csii.csiitracker.utils.LogUtils;->w(Ljava/lang/String; Ljava/lang/String; [Ljava/lang/Object;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.utils.a;->k()Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.common.Logger;->logI(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
a.a.d;->d()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.ocr.a;->a(Landroid/content/Context; Lcom/sinovoice/hciocrcapture/entity/OcrType;)Z==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
a.a.d;->b()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.unionplugin.base.imageloader.L;->w(Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.csii.csiitracker.utils.LogUtils;->d(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.citicbank.cbframework.log.appender.CBConsoleAppender;->doAppend(Lcom/citicbank/cbframework/log/CBLoggingEvent;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
a.a.d;->()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.asr.task.handler.AudioFlowRetryHandler;->start()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.utils.b;->a(Landroid/os/IBinder;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.ocr.HciOcrEngine;->init(Landroid/content/Context; Lcom/sinovoice/hciocrcapture/entity/OcrAccountInfo; Z)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.gmrz.asm.fp.util.Logger;->e(Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bangcle.everisk.logic.CheckEmulator;->CheckBuild(Lorg/json/JSONObject; Lorg/json/JSONObject;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.tts.TtsController$WorkingThread;->processProtocolBufferStream(Ljava/io/InputStream;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.gmrz.asm.fp.util.Logger;->v(Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.ocr.a;->b()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.asr.task.handler.AudioFlowRetryHandler;->start()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.view.a;->a()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.unionplugin.base.imageloader.diskcache.disklrucache.DiskLruCacheHelper;->get(Ljava/lang/String;)Ljava/io/InputStream;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.tts.pcm.PcmPlayer;->play([S)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.utils.d;->a(Landroid/os/IBinder;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.gmrz.asm.fp.util.Logger;->i(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.location.f.a.b$a;->a(Landroid/content/Context;)Lcom/baidu/location/f/a/b$a;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.h.a;->onDoubleTap(Landroid/view/MotionEvent;)Z==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
wd.watchdata.com.WDUsbKeyTool.api.l;->handleMessage(Landroid/os/Message;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.view.a;->onAutoFocus(Z Landroid/hardware/Camera;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.csii.csiitracker.utils.LogUtils;->wtf(Ljava/lang/String; Ljava/lang/String; [Ljava/lang/Object;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.utils.route.BaiduMapRoutePlan;->openBaiduMapWalkingRoute(Lcom/baidu/mapapi/utils/route/RouteParaOption; Landroid/content/Context;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.location.g.b$a;->int(Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.c.b;->i()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.gmrz.asm.fp.util.Logger;->v(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.favorite.FavoriteManager;->updateFavPoi(Ljava/lang/String; Lcom/baidu/mapapi/favorite/FavoritePoiInfo;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.unionplugin.base.imageloader.L;->e(Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bangcle.everisk.logic.MainCheckLogic;->checkEmulator()Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.platform.comapi.util.PermissionCheck;->init(Landroid/content/Context;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
a.a.i;->(Landroid/os/Handler; Ljava/nio/channels/SocketChannel; La/a/h; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.unionplugin.base.imageloader.L;->d(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.noknok.android.client.utils.Logger;->startTimer(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.unionplugin.base.imageloader.L;->w(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
wd.watchdata.com.WDUsbKeyTool.api.k;->a(Landroid/app/Activity; Landroid/view/View; Z)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.e.c;->a(F)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.unionplugin.base.imageloader.L;->d(Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.erayt.android.libtc.chart.data.b;->a([Ljava/lang/String; I Ljava/lang/String;)F==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.citicbank.unionplugin.sst.sstcamera.manager.AutoFocusManager;->(Landroid/hardware/Camera;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
wd.watchdata.com.a.d;->c(Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.csii.csiitracker.utils.LogUtils;->i(Ljava/lang/String; Ljava/lang/String; [Ljava/lang/Object;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.c.a;->a(D D)La/a/a/a/a/j/d;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.c.d;->a(F F)La/a/a/a/a/j/d;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.view.a;->b()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.utils.a;->g()Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.map.TileOverlayOptions;->setPositionFromBounds(Lcom/baidu/mapapi/model/LatLngBounds;)Lcom/baidu/mapapi/map/TileOverlayOptions;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.utils.a;->h()Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.tts.pcm.PcmPlayer;->prepare(I I I I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.noknok.android.client.utils.Logger;->d(Ljava/lang/String; Ljava/lang/String; [B)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.location.a.a;->m(Landroid/os/Message;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.c.b;->g()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
common.Log;->i(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.location.BDNotifyListener;->onNotify(Lcom/baidu/location/BDLocation; F)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.aai.audio.AudioRecognizer;->stop()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.csii.csiitracker.utils.LogUtils;->wtf(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.c.c;->a()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.platform.comapi.a;->a(Lcom/baidu/platform/comapi/util/PermissionCheck$b;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.c.c;->onSizeChanged(I I I I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
a.a.d$1;->handleMessage(Landroid/os/Message;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.erayt.android.libtc.chart.data.a;->a(Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.view.b$1;->a()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bangcle.everisk.util.PropInfo;->getPropInfo()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.favorite.FavoriteManager;->clearAllFavPois()Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.ocr.a;->e()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
a.a.j;->handleMessage(Landroid/os/Message;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
common.TupCallBackBaseNotify;->onConfNotify(I Lobject/Conf;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.tts.pcm.PcmPlayer;->prepare(I I I I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
common.Log;->e(Ljava/lang/String; Ljava/lang/String; Ljava/lang/Throwable;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.erayt.android.libtc.chart.data.a;->a(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bangcle.everisk.logic.MainCheckLogic;->CheckEnum()Lorg/json/JSONObject;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
wd.watchdata.com.a.d;->b(Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
common.Log;->w(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.utils.TLog;->i(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.opensdk.utils.Log;->w(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.noknok.android.client.utils.Logger;->endTimer(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
a.a.d;->e()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.noknok.android.client.utils.Logger;->v(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.c.b;->k()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.c.b;->j()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.noknok.android.client.utils.Logger;->w(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.ocr.a;->a(Landroid/content/Context; Lcom/sinovoice/hciocrcapture/entity/OcrAccountInfo; Z)Lcom/sinovoice/hcicloudsdk/common/InitParam;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.opensdk.utils.Log;->v(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.c.b;->onDraw(Landroid/graphics/Canvas;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.c.d;->j()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
a.a.i;->run()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.opensdk.utils.Log;->i(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.opensdk.utils.Log;->d(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.opensdk.utils.Log;->e(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.citicbank.unionplugin.activity.RegisterActivity$4;->onFinish(Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.c.c;->a(La/a/a/a/a/j/d;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.c.b;->a(F F)La/a/a/a/a/j/d;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.map.n;->run()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.tts.pcm.PcmPlayer;->play([B)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bangcle.everisk.logic.CheckEmulator;->GetAndroidBuildProp(Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.location.a.a;->onDestroy()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.noknok.android.client.utils.Logger;->endTimer(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.ocr.a;->c()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
me.weyye.hipermission.PermissionActivity;->onActivityResult(I I Landroid/content/Intent;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.location.b.r;->run()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.erayt.android.libtc.chart.data.b;->a(Ljava/lang/String;)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
common.Log;->e(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.gmrz.asm.fp.util.Logger;->i(Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.view.b$2;->onPreviewFrame([B Landroid/hardware/Camera;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.jhworks.library.ui.ImageActivity;->onCreate(Landroid/os/Bundle;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.unionplugin.base.imageloader.L;->v(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.aai.audio.AudioRecognizer$RecognizeRunnable;->stop()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.map.TileOverlayOptions;->tileProvider(Lcom/baidu/mapapi/map/TileProvider;)Lcom/baidu/mapapi/map/TileOverlayOptions;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.erayt.android.libtc.chart.data.ChartDataFunc;->decodeKChartData(Ljava/io/InputStream; Lcom/erayt/android/libtc/chart/data/ChartDataDecodeAttrs; Lcom/erayt/android/libtc/chart/data/ChartDataFunc$KChartDataDecodeDelegate;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.utils.poi.BaiduMapPoiSearch;->openBaiduMapPoiDetialsPage(Lcom/baidu/mapapi/utils/poi/PoiParaOption; Landroid/content/Context;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.ocr.RecognizeHandler;->handleMessage(Landroid/os/Message;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.map.PolylineOptions;->customTextureList(Ljava/util/List;)Lcom/baidu/mapapi/map/PolylineOptions;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.noknok.android.client.utils.Logger;->i(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.erayt.android.libtc.a.a;->a(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.gmrz.asm.fp.authui.FpActivity;->triggerCallback(Lcom/noknok/android/client/asm/sdk/IMatcher$RESULT; Landroid/hardware/fingerprint/FingerprintManager$AuthenticationResult;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.location.a.a;->onCreate(Landroid/content/Context;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.location.b;->onServiceConnected(Landroid/content/ComponentName; Landroid/os/IBinder;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.aai.audio.utils.WavCache$1;->run()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.utils.a;->f()Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.e.i;->addEntry(La/a/a/a/a/e/k; I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.citicbank.unionplugin.view.webview.UnionWebView;->initWebViewSettings()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
a.a.j;->(Landroid/os/Looper; Landroid/os/Handler; Ljava/nio/channels/SocketChannel; La/a/h;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.ocr.HciOcrEngine;->init(Landroid/content/Context; Lcom/sinovoice/hciocrcapture/entity/OcrAccountInfo; Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.common.Logger;->logE(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
common.Log;->d(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.aai.audio.AudioRecognizer$RecognizeRunnable;->run()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.utils.c;->onServiceDisconnected(Landroid/content/ComponentName;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.utils.TLog;->d(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.platform.comapi.util.f;->b(Landroid/content/Context;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.ocr.a;->e()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.watchdata.android.utils.Utils;->LogD(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bangcle.everisk.logic.CheckQEmu;->CheckQEmuDriverFile(Lorg/json/JSONObject;)Z==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.noknok.android.client.utils.Logger;->startTimer(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.c.a;->a(F F)La/a/a/a/a/j/d;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.common.Logger;->logW(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.map.Polyline;->a(Landroid/os/Bundle;)Landroid/os/Bundle;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.citicbank.unionplugin.log.L;->e(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.igexin.getuiext.activity.GetuiExtActivity;->d()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
a.a.d;->a(La/a/d; I Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.lbsapi.auth.a;->a(Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.csii.csiitracker.utils.LogUtils;->i(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.util.FileUtil;->copyTemplatesFromAssets(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.favorite.FavoriteManager;->add(Lcom/baidu/mapapi/favorite/FavoritePoiInfo;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.c.c;->setData(La/a/a/a/a/e/i;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.sinovoice.hciocrcapture.ocr.a;->f()I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.favorite.FavoriteManager;->deleteFavPoi(Ljava/lang/String;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.csii.csiitracker.utils.LogUtils;->d(Ljava/lang/String; Ljava/lang/String; [Ljava/lang/Object;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.utils.route.BaiduMapRoutePlan;->openBaiduMapDrivingRoute(Lcom/baidu/mapapi/utils/route/RouteParaOption; Landroid/content/Context;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.utils.a;->i()Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.location.b.t;->run()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.noknok.android.client.utils.Logger;->e(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.gmrz.asm.fp.util.Logger;->d(Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.bangcle.everisk.logic.CheckPhoneNumber;->CheckCurPhoneNumber(Landroid/content/Context; Lorg/json/JSONObject;)Ljava/lang/Boolean;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
a.a.a.a.a.c.c;->setData(La/a/a/a/a/e/i;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.common.Logger;->logV(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.location.b.u;->run()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.utils.TLog;->w(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.csii.csiitracker.utils.LogUtils;->v(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.csii.csiitracker.utils.LogUtils;->v(Ljava/lang/String; Ljava/lang/String; [Ljava/lang/Object;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.mapapi.utils.poi.BaiduMapPoiSearch;->dispatchPoiToBaiduMap(Ljava/util/List; Landroid/content/Context;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.gmrz.asm.fp.util.Logger;->d(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.unionplugin.base.imageloader.diskcache.disklrucache.DiskLruCacheHelper;->editor(Ljava/lang/String;)Lcom/unionplugin/base/imageloader/diskcache/disklrucache/DiskLruCache$Editor;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.csii.csiitracker.utils.LogUtils;->e(Ljava/lang/String; Ljava/lang/String; [Ljava/lang/Object;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.tts.pcm.PcmPlayer;->release()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.baidu.location.b.p;->run()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.csii.csiitracker.utils.LogUtils;->e(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

位置: classes3.dex
com.tencent.a.a.a.a.h;->b(Landroid/content/Context;)Ljava/lang/String;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.manager.ChartServlet$HideAct;->act(Lcom/erayt/android/tc/extras/CBServletRequest; Ljava/lang/Object;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.d$a;->a(Ljava/lang/String; [B)Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.share.Util;->extractThumbNail(Ljava/lang/String; I I Z)Landroid/graphics/Bitmap;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.b;->onQrcodeScanned()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->createSurfaceTexureForCamera(I)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.manager.ChartServlet$HideAct;->act(Lcom/erayt/android/tc/extras/CBServletRequest; Ljava/lang/Object;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.sunflower.c.g;->a(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureDeviceInfoAndroid;->reInit()I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.speech.SpeechModuleAidl;->getService(Landroid/os/IBinder;)Landroid/os/IInterface;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->sendMessage(I I I Ljava/lang/Object;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.H264Decoder;->surfaceDestroyed(Landroid/view/SurfaceHolder;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->test(Landroid/content/Context;)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.AudioDeviceAndroidService;->onCreate()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->startCapture(I I I I I)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->deleteVideoCaptureAndroid(Lcom/huawei/videoengine/VideoCaptureAndroid;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->requestKeyFrame()I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->init(I Landroid/view/SurfaceView; I I)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.a.a.a.a.b;->b()Ljava/lang/String;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.customview.WheelView;->createView(Ljava/lang/String;)Landroid/widget/TextView;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.KirinMediaCodecEncoder$1;->onOutputBufferAvailable(Landroid/media/MediaCodec; I Landroid/media/MediaCodec$BufferInfo;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.d;->q()Z==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.FpsStatistic;->add()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.speech.SpeechModuleAidl;->destory()Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
org.vudroid.core.DecodeServiceBase;->performDecode(Lorg/vudroid/core/DecodeServiceBase$DecodeTask;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureDeviceInfoAndroid;->allocateCamera(I J Ljava/lang/String;)Lcom/huawei/videoengine/VideoCaptureAndroid;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->handleProcessFunc_stopDecoder()I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.d;->doInBackground([Ljava/lang/Object;)Ljava/lang/Object;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->surfaceDestroyed(Landroid/view/SurfaceHolder;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.engine.DecodeJob;->logWithTimeAndKey(Ljava/lang/String; J)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.wxop.stat.common.StatLogger;->debug(Ljava/lang/Object;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.H264Decoder;->release()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.manager.ChartServlet$RelayoutAct;->act(Lcom/erayt/android/tc/extras/CBServletRequest; Ljava/lang/Object;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.d$a;->a(Ljava/lang/String; [B)Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.permission.PermissionsFragment;->log(Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.AudioDeviceAndroidService;->onStartCommand(Landroid/content/Intent; I I)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.speech.SpeechModuleAidl$1;->onServiceConnected(Landroid/content/ComponentName; Landroid/os/IBinder;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.a;->auth(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Lcom/tencent/mm/sdk/diffdev/OAuthListener;)Z==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.H264Decoder;->onDecodeAndRander()I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.GlUtil;->checkGlError(Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.manager.ChartServlet$RelayoutAct;->act(Lcom/erayt/android/tc/extras/CBServletRequest; Ljava/lang/Object;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.resource.bitmap.BitmapEncoder;->encode(Lcom/bumptech/glide/load/engine/Resource; Ljava/io/OutputStream;)Z==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.AudioDeviceAndroid$1;->onReceive(Landroid/content/Context; Landroid/content/Intent;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.engine.bitmap_recycle.LruBitmapPool;->dumpUnchecked()V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViEAndroidGLES20;->onDrawFrame(Ljavax/microedition/khronos/opengles/GL10;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.gmrz.appsdk.util.Logger;->d(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.GlUtil;->createProgram(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android$2;->onOpened(Landroid/hardware/camera2/CameraDevice;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->backUpdatePreViewSf(Landroid/view/Surface; I I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.gifencoder.AnimatedGifEncoder;->getImagePixels()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.b;->h(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.b.c;->h(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ScreenCaptureImageActivity$ImageAvailableListener;->onImageAvailable(Landroid/media/ImageReader;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder$1;->onOutputBufferAvailable(Landroid/media/MediaCodec; I Landroid/media/MediaCodec$BufferInfo;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.share.Util;->readFromFile(Ljava/lang/String; I I)[B==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->updateWinowSurface(Lcom/huawei/videoengine/WindowSurface; Landroid/view/Surface; Ljava/lang/Object; Ljava/lang/String;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->setRenderScaleRate(F F F)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.DiffDevOAuthFactory;->getDiffDevOAuth(I)Lcom/tencent/mm/sdk/diffdev/IDiffDevOAuth;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.f;->doInBackground([Ljava/lang/Object;)Ljava/lang/Object;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.EglCore;->makeNothingCurrent()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViERenderer;->getLocalRenderer()Landroid/view/SurfaceHolder;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VtNativeDecoder$1;->run()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->updatePreview()I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.Texture2dProgram;->setKernel([F F)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureDeviceInfoAndroid;->getOrientation(Ljava/lang/String;)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ScreenCaptureImageActivity;->setScreenCapParameters(I I I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViESurfaceRenderer;->createBitmap(I I)Landroid/graphics/Bitmap;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->openFlashLight(Z)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->startCapture(I I I I I)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.b;->a(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.d$a;->d([B)Lcom/tencent/mm/sdk/diffdev/a/d$a;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->updateWinowSurface(Lcom/huawei/videoengine/WindowSurface; Landroid/view/Surface; Ljava/lang/Object; Ljava/lang/String;)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.engine.CacheLoader;->load(Lcom/bumptech/glide/load/Key; Lcom/bumptech/glide/load/ResourceDecoder; I I)Lcom/bumptech/glide/load/engine/Resource;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViEAndroidGLES20;->getRemoteSurface()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.d;->onPostExecute(Ljava/lang/Object;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ScaledDrawable2d;->setScale(F)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.engine.bitmap_recycle.LruBitmapPool;->trimToSize(I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->setPreviewCallback()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.megvii.idcardlib.util.IDUtil;->getUUIDString(Landroid/content/Context;)Ljava/lang/String;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.e;->b(Ljava/lang/String; I)[B==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.EglSurfaceBase;->swapBuffers()Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.manager.ChartServlet$ChartContext;->clean()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.util.ByteArrayPool;->getBytes()[B==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.resource.bitmap.RecyclableBufferedInputStream;->fillbuf(Ljava/io/InputStream; [B)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.b;->e(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->configureCameraEncoder(I I)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android$2;->onDisconnected(Landroid/hardware/camera2/CameraDevice;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android$7;->onFrameAvailable(Landroid/graphics/SurfaceTexture;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.share.Util;->extractThumbNail(Ljava/lang/String; I I Z)Landroid/graphics/Bitmap;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.openapi.WXApiImplV10$ActivityLifecycleCb$2;->run()V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.openapi.WXApiImplV10$ActivityLifecycleCb;->onActivityPaused(Landroid/app/Activity;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.helloar.view.activitys.NewArActivity$6;->onResourceReady(Lcom/bumptech/glide/load/resource/drawable/GlideDrawable; Ljava/lang/String; Lcom/bumptech/glide/request/target/Target; Z Z)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->handleProcessFunc_ResetDecoder()I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.manager.ChartServlet$ShowAct;->act(Lcom/erayt/android/tc/extras/CBServletRequest; Ljava/lang/Object;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->startBackgroundThread()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->backUpdatePreViewSf(Landroid/view/Surface; I I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VtNativeDecoder;->()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->stopCapture(I)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.share.Util;->extractThumbNail(Ljava/lang/String; I I Z)Landroid/graphics/Bitmap;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.EglCore;->(Landroid/opengl/EGLContext; I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.Camera2Characteristic;->getOrientation(Ljava/lang/String;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android$7;->onFrameAvailable(Landroid/graphics/SurfaceTexture;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.Camera2Characteristic;->getDeviceUniqueName(I)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->setAspectMode(I Z)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.a;->b(Landroid/content/Context;)Ljava/io/File;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.engine.bitmap_recycle.LruBitmapPool;->put(Landroid/graphics/Bitmap;)Z==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.b;->e(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)Z==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.wxop.stat.common.StatLogger;->info(Ljava/lang/Object;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.common.c;->a()Lcom/iflytek/cloud/thirdparty/aB;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.H264Decoder;->start(Landroid/view/SurfaceHolder;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViESurfaceRenderer;->surfaceChanged(Landroid/view/SurfaceHolder; I I I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.gmrz.appsdk.util.Logger;->e(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.engine.bitmap_recycle.LruBitmapPool;->getDirty(I I Landroid/graphics/Bitmap$Config;)Landroid/graphics/Bitmap;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->startCapture()I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.f$a;->e([B)Lcom/tencent/mm/sdk/diffdev/a/f$a;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.b;->a(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->updateWinowSurface(Landroid/view/Surface;)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureDeviceInfoAndroid;->getCapabilityArray(Ljava/lang/String;)[Lcom/huawei/videoengine/CaptureCapabilityAndroid;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->prepareImageReader(I I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.speech.SpeakerVerifierAidl;->register(Ljava/lang/String; Ljava/lang/String; Lcom/iflytek/speech/VerifierListener;)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.helloar.view.ARModel$3;->invoke(Lcn/easyar/Target; Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->createCaptureSession()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->getMVPP([F I Lcom/huawei/videoengine/MediaCodecDecoder$EAspectRatio; I I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.helloar.view.HelloAR$2;->invoke(Lcn/easyar/Target; Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureDeviceInfoAndroid;->addDeviceInfo(Lcom/huawei/videoengine/VideoCaptureDeviceInfoAndroid$AndroidVideoCaptureDevice; Landroid/hardware/Camera$Parameters;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViEAndroidGLES20;->checkEglError(Ljava/lang/String; Ljavax/microedition/khronos/egl/EGL10;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.Texture2dProgram;->(Lcom/huawei/videoengine/Texture2dProgram$ProgramType;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViERenderer;->createRenderer(Landroid/content/Context; Z)Landroid/view/SurfaceView;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->setAspectMode(I Z)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureDeviceInfoAndroid;->searchOldFrontFacingCameras(Lcom/huawei/videoengine/VideoCaptureDeviceInfoAndroid$AndroidVideoCaptureDevice;)Landroid/hardware/Camera$Parameters;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.EglCore;->createOffscreenSurface(I I)Landroid/opengl/EGLSurface;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.SpeechUtility;->getPlusLocalInfo(Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViESurfaceRenderer;->(Landroid/view/SurfaceView;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.b;->d(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.EglSurfaceBase;->saveFrame(Ljava/io/File;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureDeviceInfoAndroid;->numberOfDevices()I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->setEncRotation(I I)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureDeviceInfoAndroid;->init()I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.AudioDeviceAndroid;->onReceive(Landroid/content/Context; Landroid/content/Intent;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.wxop.stat.common.q;->a(Landroid/content/Context; I)Lorg/json/JSONArray;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.a.a.a.a.e;->a(Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->createSurfaceTexureForDecoder(I)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->startBackgroundThread()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.speech.SpeakerVerifierAidl;->verify(Ljava/lang/String; Ljava/lang/String; Lcom/iflytek/speech/VerifierListener;)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->handleProcessFunc_stopDecoder()I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->surfaceCreated(Landroid/view/SurfaceHolder;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->startBackgroundThread()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.manager.ChartServlet$StartAct;->kChartDataDecodeError(Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.Camera2Characteristic;->init()I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.engine.EngineRunnable;->decodeFromCache()Lcom/bumptech/glide/load/engine/Resource;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.Texture2dProgram;->(Lcom/huawei/videoengine/Texture2dProgram$ProgramType;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->setupCameraParam(I I I)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.FpsStatistic;->(Ljava/lang/String; I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViERenderer;->getSurfaceFromIndex(I)Ljava/lang/Object;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->deleteVideoCaptureAndroid(Lcom/huawei/videoengine/VideoCaptureAndroid;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.customview.WheelView;->init(Landroid/content/Context;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.GlUtil;->logVersionInfo()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->setDisplayMode(I)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.EglSurfaceBase;->createOffscreenSurface(I I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.b;->f(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)Z==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.vrmodel.Camera;->MoveCameraZImpl(F)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.util.Util;->unifiedUserLoginResultHandle(Landroid/content/Context; Z)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.KirinMediaCodecEncoder;->uninit()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->setFrameReceiver(Lcom/huawei/videoengine/SurfaceEncoder;)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.vrmodel.GLUtil;->loadTexture(Ljava/io/InputStream;)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->setDstSf([Landroid/view/Surface; I)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.gmrz.appsdk.util.Logger;->v(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.helloar.view.HelloAR$1;->invoke(Lcn/easyar/Target; Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.b.c;->i(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.request.GenericRequest;->logV(Ljava/lang/String;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.helloar.view.HelloAR$3;->invoke(Lcn/easyar/Target; Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.speech.SpeakerVerifierAidl;->endSpeak()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->initEGl(Landroid/view/Surface; Landroid/view/Surface; I I I I)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.H264Decoder;->init()I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.wxop.stat.common.q;->a(Landroid/content/Context;)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.f$a;->e([B)Lcom/tencent/mm/sdk/diffdev/a/f$a;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.a;->stopAuth()Z==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.Texture2dProgram;->release()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.H264Decoder;->stop()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureDeviceInfoAndroid;->addDeviceInfo(Lcom/huawei/videoengine/VideoCaptureDeviceInfoAndroid$AndroidVideoCaptureDevice; Landroid/hardware/Camera$Parameters;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->postMessage(I I I Lcom/huawei/videoengine/MediaCodecDecoder$MsgBase;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android$4;->onConfigured(Landroid/hardware/camera2/CameraCaptureSession;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ScreenCaptureImageActivity$OrientationChangeCallback;->onOrientationChanged(I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android$4;->onConfigureFailed(Landroid/hardware/camera2/CameraCaptureSession;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.Camera2Characteristic;->getOrientation(Ljava/lang/String;)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.manager.ChartServlet$StartAct;->start(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.KirinMediaCodecEncoder;->()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.engine.bitmap_recycle.LruBitmapPool;->trimToSize(I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->backUpdateEncSf(Landroid/view/Surface;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureDeviceInfoAndroid;->getCapabilityArray(Ljava/lang/String;)[Lcom/huawei/videoengine/CaptureCapabilityAndroid;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.KirinMediaCodecEncoder;->reinit(I I I I I I I)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.H264Decoder;->stop()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViESurfaceRenderer;->getRemoteSurface()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.gmrz.appsdk.util.Logger;->i(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.H264Decoder;->init()I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->startPreview()I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->initEGl(Landroid/view/Surface; Landroid/view/Surface; I I I I)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->startCapture(I I I I I)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->destroy()I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.hwvideo.utils.LogUtil;->writeLog(Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.helloar.view.ARModel;->dispose()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.manager.ChartServlet$CreateAct;->act(Lcom/erayt/android/tc/extras/CBServletRequest; Ljava/lang/Object;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.EglCore;->logCurrent(Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.manager.ChartServlet;->findChartContext(Lorg/json/JSONObject;)Lcom/ecitic/bank/mobile/common/manager/ChartServlet$ChartContext;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VtNativeDecoder;->init(Landroid/view/SurfaceView; J)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.engine.bitmap_recycle.LruBitmapPool;->trimMemory(I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.gmrz.appsdk.util.HttpUtil;->doTlsPost(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.KirinMediaCodecEncoder;->onFrame()I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.O;->d(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->stopPreview()I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViERenderer$ListenThread;->run()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ScreenCaptureImageActivity;->startProjection()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.KirinMediaCodecEncoder;->onFrame()I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViERenderer;->freeLocalRenderResource()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.Camera2Characteristic;->init()I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.ui.setting.SettingCloseGesturePwdActivity;->bussnessHandlerMassage(Landroid/os/Message;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.helloar.view.ARModel$1;->invoke(Lcn/easyar/Target; Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->startDecoder()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.wxop.stat.common.StatLogger;->warn(Ljava/lang/Object;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.vrmodel.Camera;->translateCamera(F F)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.FpsStatistic;->(Ljava/lang/String; I I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.wxop.stat.common.q;->f(Landroid/content/Context;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.d;->onPostExecute(Ljava/lang/Object;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->startBackgroundThread()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViEAndroidGLES20;->(Landroid/content/Context;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.helloar.view.ARModel;->loadAllFromJsonFile(Lcn/easyar/ImageTracker; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->handleProcessFunc_startDecoder()I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->setPreviewRotation(I I)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureDeviceInfoAndroid;->allocateCamera(I J Ljava/lang/String;)Lcom/huawei/videoengine/VideoCaptureAndroid;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureDeviceInfoAndroid;->createVideoCaptureDeviceInfoAndroid(I Landroid/content/Context;)Lcom/huawei/videoengine/VideoCaptureDeviceInfoAndroid;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android$1;->process(Landroid/hardware/camera2/CaptureResult;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.EglCore;->createWindowSurface(Ljava/lang/Object;)Landroid/opengl/EGLSurface;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.data.HttpUrlFetcher;->getStreamForSuccessfulRequest(Ljava/net/HttpURLConnection;)Ljava/io/InputStream;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->setPreviewRotation(I)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder$2;->handleMessage(Landroid/os/Message;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.O;->c(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViEAndroidGLES20;->onSurfaceDestory(Ljavax/microedition/khronos/opengles/GL10; Ljavax/microedition/khronos/egl/EGLConfig;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.vrmodel.Object3DBuilder;->generateArrays(Landroid/content/res/AssetManager; Lcom/ecitic/bank/mobile/vrmodel/Object3DData;)Lcom/ecitic/bank/mobile/vrmodel/Object3DData;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->onPreviewFrame([B Landroid/hardware/Camera;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.openapi.WXApiImplV10$ActivityLifecycleCb$1;->run()V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ScreenCaptureImageActivity$MediaProjectionStopCallback;->onStop()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.openapi.WXApiImplV10$ActivityLifecycleCb;->onActivityResumed(Landroid/app/Activity;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.a.a.a.a.b;->a(Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.gifdecoder.GifDecoder;->getNextFrame()Landroid/graphics/Bitmap;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.AudioDeviceAndroid;->DoLogErr(Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.a.a.a.a.d;->b()Ljava/lang/String;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.f;->doInBackground([Ljava/lang/Object;)Ljava/lang/Object;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViERenderer;->setLocalRenderInfo(Landroid/view/SurfaceView;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->updatePreViewSf(Landroid/view/Surface; I I)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder$1;->onOutputFormatChanged(Landroid/media/MediaCodec; Landroid/media/MediaFormat;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->addAsyncCallback()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android$1;->process(Landroid/hardware/camera2/CaptureResult;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.wxop.stat.common.q;->f(Landroid/content/Context;)Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder$1;->onOutputBufferAvailable(Landroid/media/MediaCodec; I Landroid/media/MediaCodec$BufferInfo;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VtNativeDecoder$SurfaceListener;->surfaceCreated(Landroid/view/SurfaceHolder;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->(J)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.KirinMediaCodecEncoder;->init(J I I I I I I I)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->updateEncSf(Landroid/view/Surface;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.engine.bitmap_recycle.LruBitmapPool;->getDirty(I I Landroid/graphics/Bitmap$Config;)Landroid/graphics/Bitmap;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.AudioDeviceAndroidService;->onDestroy()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.speech.SpeechModuleAidl$1;->onServiceDisconnected(Landroid/content/ComponentName;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.O;->b(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->freeCaptureResource()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViESurfaceRenderer;->getRemoteSurface()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.b;->b(Landroid/content/Context; Ljava/lang/String;)Z==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.speech.SpeakerVerifierAidl;->stopSpeak()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.vrmodel.ModelActivity$1$1;->onFinish()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.megvii.livenessdeteciton.obf.d;->b(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViEAndroidGLES20;->onSurfaceCreated(Ljavax/microedition/khronos/opengles/GL10; Ljavax/microedition/khronos/egl/EGLConfig;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureDeviceInfoAndroid;->(I Landroid/content/Context;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.Camera2Characteristic;->getDeviceUniqueName(Landroid/content/Context; I)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->createCaptureSession()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.wxop.stat.common.q;->b(Landroid/content/Context;)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.engine.cache.MemorySizeCalculator;->(Landroid/content/Context; Landroid/app/ActivityManager; Lcom/bumptech/glide/load/engine/cache/MemorySizeCalculator$ScreenDimensions;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->surfaceChanged(Landroid/view/SurfaceHolder; I I I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureDeviceInfoAndroid;->allocateHTCFrontCamera()Landroid/hardware/Camera;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.EglCore;->finalize()V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureDeviceInfoAndroid$CameraThread;->run()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.EglCore;->makeCurrent(Landroid/opengl/EGLSurface;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->stopCapture(I)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViEAndroidGLES20;->onSurfaceChanged(Ljavax/microedition/khronos/opengles/GL10; I I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.util.CompareMenuUtil;->checkTemplateHtml(Landroid/content/Context;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.manager.ChartServlet$UpdateAct;->kChartDataDecodeDone(Lcom/erayt/android/libtc/chart/candle/CandleCombinedData;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.b;->onAuthFinish(Lcom/tencent/mm/sdk/diffdev/OAuthErrCode; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.EglCore;->checkEglError(Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.a.a.a.a.e;->b()Ljava/lang/String;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.a;->stopAuth()Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder$3;->onFrameAvailable(Landroid/graphics/SurfaceTexture;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->setEncRotation(I I)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.c;->a(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViESurfaceRenderer;->surfaceDestroyed(Landroid/view/SurfaceHolder;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViESurfaceRenderer;->setCoordinates(F F F F I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->setPreviewCallback()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.Camera2Characteristic;->isFaceFront(Landroid/hardware/camera2/CameraManager; Ljava/lang/String;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.d;->run()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.resource.bitmap.ImageHeaderParser;->parseExifSegment(Lcom/bumptech/glide/load/resource/bitmap/ImageHeaderParser$RandomAccessReader;)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->stopCapture()I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.b;->a(Landroid/content/Context; Ljava/lang/String;)Z==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViERenderer;->reSetLocalRender()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.vrmodel.GLUtil;->createAndLinkProgram(I I [Ljava/lang/String;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->handleProcessFunc_startDecoder()I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.request.target.ViewTarget$SizeDeterminer$SizeDeterminerLayoutListener;->onPreDraw()Z==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.H264Decoder;->config(Landroid/view/SurfaceView; I I)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.sunflower.c.g;->c(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->stopBackgroundThread()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->backInitEGl(Landroid/view/Surface; Landroid/view/Surface; I I)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.WindowSurface;->recreate(Lcom/huawei/videoengine/EglCore;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->initCaptureSession(I I)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.helloar.view.HelloAR;->loadAllFromJsonFile(Lcn/easyar/ImageTracker; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->surfaceCreated(Landroid/view/SurfaceHolder;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.a.a.a.a.h;->a(Landroid/content/Context;)Ljava/lang/String;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.KirinMediaCodecEncoder;->reinit(I I I I I I I)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.helloar.view.HelloAR;->dispose()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureDeviceInfoAndroid;->init()I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android$2;->onError(Landroid/hardware/camera2/CameraDevice; I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.EglSurfaceBase;->createWindowSurface(Ljava/lang/Object;)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.EglCore;->getConfig(I I)Landroid/opengl/EGLConfig;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.b.c;->g(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->init(I Landroid/view/SurfaceView; I I)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->getMVPP([F [F [F Z I Lcom/huawei/videoengine/VideoCapture2Android$EAspectRatio; I I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.GlUtil;->loadShader(I Ljava/lang/String;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->prepareImageReader(I I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->openFlashLight(Z)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.GlUtil;->cameraTextureRotate([F I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.FlatShadedProgram;->()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.KirinMediaCodecEncoder;->addAsyncCallback()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder$SurfaceListener;->surfaceDestroyed(Landroid/view/SurfaceHolder;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VtNativeDecoder;->uninit()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.manager.ChartServlet$StartAct$2;->run()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViEAndroidGLES20;->getRemoteSurface()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.Camera2Characteristic;->numberOfDevices()I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.H264Decoder;->surfaceChanged(Landroid/view/SurfaceHolder; I I I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.wxop.stat.common.StatLogger;->error(Ljava/lang/Object;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.AudioDeviceAndroid;->DoLog(Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.engine.Engine;->logWithTimeAndKey(Ljava/lang/String; J Lcom/bumptech/glide/load/Key;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->updatePreViewSf(Landroid/view/Surface; I I)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.f;->doInBackground([Ljava/lang/Object;)Ljava/lang/Object;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViERenderer;->getIndexOfSurface(Landroid/view/SurfaceView;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.b;->f(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.EglCore;->makeCurrent(Landroid/opengl/EGLSurface;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.vrmodel.GLUtil;->checkGlError(Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureDeviceInfoAndroid;->getOrientation(Ljava/lang/String;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.Camera2Characteristic;->addDeviceInfo(Lcom/huawei/videoengine/VideoCaptureDeviceInfoAndroid$AndroidVideoCaptureDevice; I)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.sunflower.c.g;->e(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.manager.ChartServlet$DismissAct;->act(Lcom/erayt/android/tc/extras/CBServletRequest; Ljava/lang/Object;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.h;->c(Landroid/content/Context;)Ljava/lang/String;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.customview.WheelView;->onSizeChanged(I I I I)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->setPreviewRotation(I I)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->backInitEGl(Landroid/view/Surface; Landroid/view/Surface; I I)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder$SurfaceListener;->surfaceCreated(Landroid/view/SurfaceHolder;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.resource.bitmap.ImageHeaderParser;->getExifSegment()[B==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder$3;->onFrameAvailable(Landroid/graphics/SurfaceTexture;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->updateEncSf(Landroid/view/Surface;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.speech.SpeechModuleAidl$1;->onServiceDisconnected(Landroid/content/ComponentName;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.H264Decoder;->config(Landroid/view/SurfaceView; I I)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.manager.RequestManagerRetriever;->handleMessage(Landroid/os/Message;)Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VtNativeDecoder$SurfaceListener;->surfaceChanged(Landroid/view/SurfaceHolder; I I I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.h;->g(Landroid/content/Context;)Ljava/lang/String;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.O;->a(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.sunflower.c.g;->d(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.engine.bitmap_recycle.LruBitmapPool;->clearMemory()V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.SurfaceEncoder;->(J)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->handleProcessFunc_startDecoder()I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.customview.WheelView;->setBackgroundDrawable(Landroid/graphics/drawable/Drawable;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder$SurfaceListener;->surfaceChanged(Landroid/view/SurfaceHolder; I I I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.vrmodel.Camera;->RotateImpl(F)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->setCaptureEncoderRate(I)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->handleProcessFunc_putFrame()I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.a;->detach()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.aE;->b(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViESurfaceRenderer;->surfaceCreated(Landroid/view/SurfaceHolder;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.Drawable2d;->(Lcom/huawei/videoengine/Drawable2d$Prefab;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.helloar.view.activitys.MainActivityAR;->setData()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->allocateCamera(I Landroid/content/Context; Ljava/lang/String;)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ScreenCaptureImageActivity;->setParameters(I Landroid/content/Intent; Landroid/media/projection/MediaProjectionManager; Landroid/util/DisplayMetrics; Landroid/view/Display;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.b;->c(Landroid/content/Context; Ljava/lang/String;)Z==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViERenderer;->createLocalRenderer(Landroid/content/Context;)Landroid/view/SurfaceView;==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.aE;->a(Ljava/lang/String; Ljava/lang/String;)I==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.b;->a(Landroid/content/Context; Ljava/lang/String; I)Z==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.d;->doInBackground([Ljava/lang/Object;)Ljava/lang/Object;==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.H264Decoder;->surfaceChanged(Landroid/view/SurfaceHolder; I I I)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.b.c;->f(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->onPreviewFrame([B Landroid/hardware/Camera;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.resource.gif.GifResourceEncoder;->encode(Lcom/bumptech/glide/load/engine/Resource; Ljava/io/OutputStream;)Z==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->setDisplayOrientation(I)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->surfaceChanged(Landroid/view/SurfaceHolder; I I I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.H264Decoder;->start(Landroid/view/SurfaceHolder;)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.manager.ChartServlet$StartAct;->kChartDataDecodeDone(Lcom/erayt/android/libtc/chart/candle/CandleCombinedData;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->uninit()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.FlatShadedProgram;->()V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.common.manager.ChartServlet$StartAct;->act(Lcom/erayt/android/tc/extras/CBServletRequest; Ljava/lang/Object;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.gmrz.appsdk.a.a;->a(S)Lcom/gmrz/appsdk/commlib/api/FidoStatus;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.a.a.a.a.d;->a(Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.megvii.livenessdeteciton.obf.d;->a(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->createSurfaceTexureForDecoder(I)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->handleProcessFunc_InitEGL(Landroid/view/Surface;)I==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->setDisplayMirror(I I)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->handleProcessFunc_ResetDecoder()I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.a;->auth(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Lcom/tencent/mm/sdk/diffdev/OAuthListener;)Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.Texture2dProgram;->draw([F Ljava/nio/FloatBuffer; I I I I [F Ljava/nio/FloatBuffer; I I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.GlUtil;->checkLocation(I Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.H264Decoder;->onFrame()I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.bumptech.glide.load.engine.prefill.BitmapPreFillRunner;->allocate()Z==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViESurfaceRenderer;->setSurfaceViewDisplayParas()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureDeviceInfoAndroid;->allocateCamera(I J Ljava/lang/String;)Lcom/huawei/videoengine/VideoCaptureAndroid;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->initCaptureSession(I I)I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViESurfaceRenderer;->surfaceCreated(Landroid/view/SurfaceHolder;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.share.Util;->readFromFile(Ljava/lang/String; I I)[B==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.DiffDevOAuthFactory;->getDiffDevOAuth(I)Lcom/tencent/mm/sdk/diffdev/IDiffDevOAuth;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViESurfaceRenderer;->createByteBuffer(I I)Ljava/nio/ByteBuffer;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->createSurfaceTexureForDecoder(I)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.wxop.stat.common.StatLogger;->verbose(Ljava/lang/Object;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.b;->onAuthGotQrcode(Ljava/lang/String; [B)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->handleProcessFunc_InitEGL(Landroid/view/Surface;)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.share.Util;->readFromFile(Ljava/lang/String; I I)[B==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.payeemanager.activity.CGJRSelectOverseaPayeeActivity$MyOverseasAdapter;->getView(I Landroid/view/View; Landroid/view/ViewGroup;)Landroid/view/View;==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
com.tencent.mm.sdk.diffdev.a.d$a;->d([B)Lcom/tencent/mm/sdk/diffdev/a/d$a;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.h;->h(Landroid/content/Context;)Ljava/lang/String;==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.h;->i(Landroid/content/Context;)Ljava/lang/String;==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->(I J Landroid/hardware/Camera; Lcom/huawei/videoengine/VideoCaptureDeviceInfoAndroid$AndroidVideoCaptureDevice;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.KirinMediaCodecEncoder;->init(J I I I I I I I)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.cloud.thirdparty.b;->d(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.MediaCodecDecoder;->stopBackgroundThread()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.EglCore;->makeCurrent(Landroid/opengl/EGLSurface; Landroid/opengl/EGLSurface;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.ViEAndroidGLES20;->onDrawFrame(Ljavax/microedition/khronos/opengles/GL10;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.ui.setting.SettingSetGesturePwdActivity;->bussnessHandlerMassage(Landroid/os/Message;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.sunflower.c.g;->b(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VtNativeDecoder$SurfaceListener;->surfaceDestroyed(Landroid/view/SurfaceHolder;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->()V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.iflytek.sunflower.c.g;->f(Ljava/lang/String; Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.H264Decoder;->surfaceCreated(Landroid/view/SurfaceHolder;)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->allocateCamera(I Landroid/content/Context; Ljava/lang/String;)I==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.Camera2Characteristic;->(Landroid/content/Context;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCaptureAndroid;->(I J Landroid/hardware/Camera; Lcom/huawei/videoengine/VideoCaptureDeviceInfoAndroid$AndroidVideoCaptureDevice;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.EglSurfaceBase;->saveFrame(Ljava/io/File;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.hwvideo.utils.LogUtil;->writeLog(Ljava/lang/String;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.EglCore;->makeCurrent(Landroid/opengl/EGLSurface; Landroid/opengl/EGLSurface;)V==>android.util.Log;->d(Ljava/lang/String; Ljava/lang/String;)I
com.huawei.videoengine.VideoCapture2Android;->startCapture()I==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
com.ecitic.bank.mobile.helloar.view.ARModel$2;->invoke(Lcn/easyar/Target; Z)V==>android.util.Log;->i(Ljava/lang/String; Ljava/lang/String;)I

位置: assets/tdrBTCITICBank.jar
tendyron.provider.b.b.c.b;->onReceive(Landroid/content/Context; Landroid/content/Intent;)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
tendyron.provider.b.b.c.b;->onReceive(Landroid/content/Context; Landroid/content/Intent;)V==>android.util.Log;->v(Ljava/lang/String; Ljava/lang/String;)I
tendyron.provider.sdk.h.y;->a(Landroid/content/Context; [Ljava/lang/String;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
tendyron.provider.sdk.h.y;->b(Landroid/content/Context; [Ljava/lang/String;)Z==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I
tendyron.provider.b.b.b.a.d;->onServicesDiscovered(Landroid/bluetooth/BluetoothGatt; I)V==>android.util.Log;->w(Ljava/lang/String; Ljava/lang/String;)I
tendyron.provider.b.b.b.a.d;->onCharacteristicRead(Landroid/bluetooth/BluetoothGatt; Landroid/bluetooth/BluetoothGattCharacteristic; I)V==>android.util.Log;->e(Ljava/lang/String; Ljava/lang/String;)I

中危

检测到3个WebView远程执行漏洞。

位置: classes2.dex
com.citicbank.cbframework.webview.CBJSCommonWebView;->addJavascriptInterface(Ljava.lang.Object;)V
com.citicbank.unionplugin.activity.PluginWebviewActivity;->initWebview()V
com.citicbank.cbframework.webview.bridge.impl.CBJSBridgeJavaInterfaceImp;->(Landroid.webkit.WebView; Lcom.citicbank.cbframework.webview.bridge.CBJSBridge$JSBridgeListener;)V

Android API < 17之前版本存在远程代码执行安全漏洞,该漏洞源于程序没有正确限制使用addJavaScriptInterface方法,攻击者可以通过Java反射利用该漏洞执行任意Java对象的方法,导致远程代码执行安全漏洞。
(1)API等于高于17的Android系统。出于安全考虑,为了防止Java层的函数被随意调用,Google在4.2版本之后,规定允许被调用的函数必须以@JavascriptInterface进行注解。
(2)API等于高于17的Android系统。建议不要使用addJavascriptInterface接口,以免带来不必要的安全隐患,如果一定要使用该接口,建议使用证书校验。
(3)使用removeJavascriptInterface移除Android系统内部的默认内置接口:searchBoxJavaBridge_、accessibility、accessibilityTraversal。

参考案例:
www.wooyun.org/bugs/wooyun-2015-0140708
www.wooyun.org/bugs/wooyun-2016-0188252
http://drops.wooyun.org/papers/548

参考资料:
http://jaq.alibaba.com/blog.htm?id=48
http://blog.nsfocus.net/android-webview-remote-code-execution-vulnerability-analysis
https://developer.android.com/reference/android/webkit/WebView.html

中危

检测到161条敏感明文信息,建议移除。

位置: classes.dex
'http://ac.jsfund.cn/campaign/zhongxin/investname.jsp?fudmngrise=' used in: Lcom/ecitic/bank/mobile/ui/WebviewActivity;->initShare()V
'http://app.navi.baidu.com/mobile/#navi/naving/' used in: Lcom/baidu/mapapi/navi/BaiduMapNavigation;->a(Lcom/baidu/mapapi/navi/NaviParaOption; Landroid/content/Context;)V
'http://daohang.map.baidu.com/mobile/#navi/naving/start=' used in: Lcom/baidu/mapapi/navi/BaiduMapNavigation;->openWebBaiduMapNavi(Lcom/baidu/mapapi/navi/NaviParaOption; Landroid/content/Context;)V
'http://daohang.map.baidu.com/mobile/#search/search/qt=nav&sn=2$$$$$$' used in: Lcom/baidu/mapapi/navi/BaiduMapNavigation;->openWebBaiduMapNavi(Lcom/baidu/mapapi/navi/NaviParaOption; Landroid/content/Context;)V
'http://localhost/' used in: Lretrofit2/Response;->error(I Lokhttp3/ResponseBody;)Lretrofit2/Response;
'http://localhost/' used in: Lretrofit2/Response;->success(Ljava/lang/Object;)Lretrofit2/Response;
'http://localhost/' used in: Lretrofit2/Response;->success(Ljava/lang/Object; Lokhttp3/Headers;)Lretrofit2/Response;
'http://payment.chinapay.com' used in: Lcom/ecitic/bank/mobile/ui/WebviewActivity;->onKeyDown(I Landroid/view/KeyEvent;)Z
'http://schemas.android.com/apk/res/android' used in: Landroid/support/v4/content/res/TypedArrayUtils;->hasAttribute(Lorg/xmlpull/v1/XmlPullParser; Ljava/lang/String;)Z
'http://www.jsfund.cn/activity/16042001/share.jpg' used in: Lcom/ecitic/bank/mobile/ui/WebviewActivity;->initShare()V
'https://mcashier.95516.com/mobile/zh_CN' used in: Lcom/ecitic/bank/mobile/ui/WebviewActivity;->onKeyDown(I Landroid/view/KeyEvent;)Z
'https://qr.95516.com/' used in: Lcom/ecitic/bank/mobile/ui/ScannerActivity;->parseQrcode(Ljava/lang/String;)V
'https://wap.bank.ecitic.com/CyberpayFOServer/qr/' used in: Lcom/ecitic/bank/mobile/ui/ScannerActivity;->parseQrcode(Ljava/lang/String;)V
'https://wap.bank.ecitic.com/NMBFOServer/qr/' used in: Lcom/ecitic/bank/mobile/ui/ScannerActivity;->parseQrcode(Ljava/lang/String;)V

位置: classes2.dex
'10.0.0.172' used in: Lcom/baidu/lbsapi/auth/f;->a(Lorg/apache/http/client/HttpClient;)Z
'10.0.0.172' used in: Lcom/baidu/location/b/m;->if(Landroid/content/Context; Landroid/net/NetworkInfo;)I
'10.0.0.172' used in: Lcom/baidu/location/b/m;->()V
'10.0.0.172' used in: Lcom/baidu/lbsapi/auth/c;->a(Lorg/apache/http/client/HttpClient;)Z
'10.0.0.172' used in: Lcom/baidu/platform/comapi/util/c;->a(Landroid/content/Context;)V
'10.0.0.200' used in: Lcom/baidu/lbsapi/auth/f;->a(Lorg/apache/http/client/HttpClient;)Z
'10.0.0.200' used in: Lcom/baidu/location/b/m;->if(Landroid/content/Context; Landroid/net/NetworkInfo;)I
'10.0.0.200' used in: Lcom/baidu/lbsapi/auth/c;->a(Lorg/apache/http/client/HttpClient;)Z
'10.0.0.200' used in: Lcom/baidu/platform/comapi/util/c;->a(Landroid/content/Context;)V
'data:image/jpeg;base64,' used in: Lcom/citicbank/unionplugin/activity/PluginWebviewActivity$MyAsyncTask;->onPostExecute(Ljava/lang/String;)V
'data:image/png;base64,' used in: Lcom/noknok/android/client/asm/core/uaf/AuthenticatorCore;->initialize(Landroid/content/Context; Ljava/lang/String;)V
'feedback-crypto@bouncycastle.org' used in: Lorg/bouncycastle/jce/examples/PKCS12Example;->createCert(Ljava/security/PublicKey; Ljava/security/PrivateKey; Ljava/security/PublicKey;)Ljava/security/cert/Certificate;
'feedback-crypto@bouncycastle.org' used in: Lorg/bouncycastle/x509/examples/AttrCertExample;->createClientCert(Ljava/security/PublicKey; Ljava/security/PrivateKey; Ljava/security/PublicKey;)Ljava/security/cert/X509Certificate;
'feedback-crypto@bouncycastle.org' used in: Lorg/bouncycastle/jce/examples/PKCS12Example;->createIntermediateCert(Ljava/security/PublicKey; Ljava/security/PrivateKey; Ljava/security/cert/X509Certificate;)Ljava/security/cert/Certificate;
'file:///android_asset/' used in: Lcom/citicbank/cbframework/common/util/CBFileOperator;->getFileStream(Ljava/lang/String;)Ljava/io/InputStream;
'file:///android_asset/data.zip' used in: Lcom/citicbank/cbframework/templatemanager/CBResourceManager;->unpackResource()V
'http://%s/%s' used in: Lcom/baidu/location/c/a$b;->a(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String;)V
'http://api.map.baidu.com/direction?' used in: Lcom/baidu/mapapi/utils/route/BaiduMapRoutePlan;->a(Lcom/baidu/mapapi/utils/route/RouteParaOption; Landroid/content/Context; I)V
'http://api.map.baidu.com/place/detail?' used in: Lcom/baidu/mapapi/utils/poi/BaiduMapPoiSearch;->a(Lcom/baidu/mapapi/utils/poi/PoiParaOption; Landroid/content/Context;)V
'http://api.map.baidu.com/place/search?' used in: Lcom/baidu/mapapi/utils/poi/BaiduMapPoiSearch;->b(Lcom/baidu/mapapi/utils/poi/PoiParaOption; Landroid/content/Context;)V
'http://app.mi.com/detail/163525?ref=search' used in: Lcom/citicbank/unionplugin/util/DeviceUtil;->openApplicationMarket(Landroid/content/Context; Ljava/lang/String;)V
'http://itsdata.map.baidu.com/long-conn-gps/sdk.php' used in: Lcom/baidu/location/e/t;->run()V
'http://lba.baidu.com/' used in: Lcom/baidu/location/BDLocation;->getAdUrl(Ljava/lang/String;)Ljava/lang/String;
'http://lm-citic.oss-cn-beijing.aliyuncs.com/lml/icon/200240.png' used in: Lcom/citicbank/unionplugin/view/UnionPluginView;->(Landroid/content/Context; Landroid/util/AttributeSet; I)V
'http://loc.map.baidu.com/cc.php' used in: Lcom/baidu/location/e/h$a;->au()V
'http://loc.map.baidu.com/iofd.php' used in: Lcom/baidu/location/b/k;->()V
'http://loc.map.baidu.com/offline_loc' used in: Lcom/baidu/location/c/d;->()V
'http://loc.map.baidu.com/oqur.php' used in: Lcom/baidu/location/b/k;->()V
'http://loc.map.baidu.com/sdk.php' used in: Lcom/baidu/location/b/k;->()V
'http://loc.map.baidu.com/sdk_ep.php' used in: Lcom/baidu/location/b/k;->()V
'http://loc.map.baidu.com/statloc' used in: Lcom/baidu/location/b/o$a;->au()V
'http://loc.map.baidu.com/tcu.php' used in: Lcom/baidu/location/b/k;->()V
'http://loc.map.baidu.com/user_err.php' used in: Lcom/baidu/location/b/k;->()V
'http://loc.map.baidu.com/wloc' used in: Lcom/baidu/location/b/k;->()V
'http://mo.baidu.com/map/' used in: Lcom/baidu/mapapi/utils/OpenClientUtil;->getLatestBaiduMapApp(Landroid/content/Context;)V
'http://schemas.android.com/apk/res/android' used in: Lcom/citicbank/cbframework/securitykeyboard/impl/CBDefaultSecurityEditText;->(Landroid/content/Context; Landroid/util/AttributeSet;)V
'http://sdk.open.inc2.igexin.com/api.php' used in: Lcom/igexin/getuiext/a/c;->a(Landroid/content/Context; J)V
'http://sdk.open.inc2.igexin.com/api.php' used in: Lcom/igexin/getuiext/a/c;->a(Landroid/content/Context; Landroid/content/Intent;)V
'http://sdk.open.inc2.igexin.com/api.php' used in: Lcom/igexin/getuiext/a/m;->a([Lorg/json/JSONObject;)Ljava/lang/Void;
'http://sdk.open.phone.igexin.com/api.php?format=json&t=1' used in: Lcom/igexin/getuiext/service/i;->a(Ljava/lang/String;)Z
'http://www.w3.org/2000/xmlns/' used in: Lorg/jaxen/dom/DocumentNavigator$AttributeIterator;->next()Ljava/lang/Object;
'http://www.w3.org/2000/xmlns/' used in: Lorg/jaxen/dom/DocumentNavigator$AttributeIterator;->(Lorg/w3c/dom/Node;)V
'http://www.w3.org/2000/xmlns/' used in: Lorg/jaxen/dom/DocumentNavigator;->isAttribute(Ljava/lang/Object;)Z
'http://www.w3.org/2000/xmlns/' used in: Lorg/jaxen/dom/DocumentNavigator;->getNamespaceAxisIterator(Ljava/lang/Object;)Ljava/util/Iterator;
'http://www.w3.org/2001/XMLSchema' used in: Lorg/dom4j/datatype/SchemaParser;->()V
'http://www.w3.org/2001/XMLSchema-instance' used in: Lorg/dom4j/datatype/DatatypeDocumentFactory;->()V
'http://www.w3.org/XML/1998/namespace' used in: Lorg/dom4j/Namespace;->()V
'http://www.w3.org/XML/1998/namespace' used in: Lorg/jaxen/dom/DocumentNavigator;->getNamespaceAxisIterator(Ljava/lang/Object;)Ljava/util/Iterator;
'http://www.w3.org/XML/1998/namespace' used in: Lorg/jaxen/xom/DocumentNavigator;->getNamespaceAxisIterator(Ljava/lang/Object;)Ljava/util/Iterator;
'http://www.w3.org/XML/1998/namespace' used in: Lorg/jaxen/ContextSupport;->translateNamespacePrefixToUri(Ljava/lang/String;)Ljava/lang/String;
'http://www.w3.org/XML/1998/namespace' used in: Lorg/jaxen/function/LangFunction;->evaluate(Ljava/lang/Object; Ljava/lang/String; Lorg/jaxen/Navigator;)Z
'http://xml.org/sax/features/namespace-prefixes' used in: Lorg/dom4j/io/SAXWriter;->setFeature(Ljava/lang/String; Z)V
'http://xml.org/sax/features/namespace-prefixes' used in: Lorg/dom4j/io/SAXValidator;->configureReader()V
'http://xml.org/sax/features/namespace-prefixes' used in: Lorg/dom4j/io/SAXWriter;->()V
'http://xml.org/sax/features/namespace-prefixes' used in: Lorg/dom4j/io/SAXReader;->configureReader(Lorg/xml/sax/XMLReader; Lorg/xml/sax/helpers/DefaultHandler;)V
'http://xml.org/sax/features/namespaces' used in: Lorg/dom4j/io/SAXValidator;->configureReader()V
'http://xml.org/sax/features/namespaces' used in: Lorg/dom4j/io/SAXReader;->configureReader(Lorg/xml/sax/XMLReader; Lorg/xml/sax/helpers/DefaultHandler;)V
'http://xml.org/sax/features/string-interning' used in: Lorg/dom4j/io/SAXReader;->configureReader(Lorg/xml/sax/XMLReader; Lorg/xml/sax/helpers/DefaultHandler;)V
'http://xml.org/sax/features/use-locator2' used in: Lorg/dom4j/io/SAXReader;->configureReader(Lorg/xml/sax/XMLReader; Lorg/xml/sax/helpers/DefaultHandler;)V
'http://xml.org/sax/features/validation' used in: Lorg/dom4j/io/SAXValidator;->configureReader()V
'http://xml.org/sax/features/validation' used in: Lorg/dom4j/io/SAXReader;->configureReader(Lorg/xml/sax/XMLReader; Lorg/xml/sax/helpers/DefaultHandler;)V
'http://xml.org/sax/handlers/LexicalHandler' used in: Lorg/dom4j/io/XMLWriter;->()V
'http://xml.org/sax/handlers/LexicalHandler' used in: Lorg/dom4j/io/SAXWriter;->()V
'http://xml.org/sax/handlers/LexicalHandler' used in: Lorg/dom4j/io/SAXReader;->configureReader(Lorg/xml/sax/XMLReader; Lorg/xml/sax/helpers/DefaultHandler;)V
'http://xml.org/sax/properties/declaration-handler' used in: Lorg/dom4j/io/SAXReader;->configureReader(Lorg/xml/sax/XMLReader; Lorg/xml/sax/helpers/DefaultHandler;)V
'http://xml.org/sax/properties/lexical-handler' used in: Lorg/dom4j/io/XMLWriter;->()V
'http://xml.org/sax/properties/lexical-handler' used in: Lorg/dom4j/io/SAXWriter;->()V
'http://xml.org/sax/properties/lexical-handler' used in: Lorg/dom4j/io/SAXReader;->configureReader(Lorg/xml/sax/XMLReader; Lorg/xml/sax/helpers/DefaultHandler;)V
'http://xmlpull.org/v1/doc/features.html#process-namespaces' used in: Lorg/dom4j/io/XPP3Reader;->parseDocument()Lorg/dom4j/Document;
'https://api.c.citic/citiccloud/st/free/v1/imageFile' used in: Lcom/citicbank/unionplugin/sst/sstManager/SSTManager;->uploadCloud(Ljava/lang/String; Lcom/citicbank/unionplugin/sst/sstManager/SSTCallBack;)V
'https://api.c.citic/citiccloud/st/free/v1/imageUrl?data=' used in: Lcom/citicbank/unionplugin/sst/sstManager/SSTManager;->uploadCloudByUrl(Ljava/lang/String; Lcom/citicbank/unionplugin/sst/sstManager/SSTCallBack;)V
'https://api.c.citic/citiccloud/st/id/v1/idnumber_verification?idnumber=' used in: Lcom/citicbank/unionplugin/sst/sstManager/SSTManager;->idNumCloudImgVeri(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Lcom/citicbank/unionplugin/sst/sstManager/SSTCallBack;)V
'https://api.c.citic/citiccloud/st/id/v1/stateless/idnumber_verification?idnumber=' used in: Lcom/citicbank/unionplugin/sst/sstManager/SSTManager;->idNumImgVeri(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Lcom/citicbank/unionplugin/sst/sstManager/SSTCallBack;)V
'https://api.c.citic/citiccloud/st/id/v1/validity/idnumber_verification?idnumber=' used in: Lcom/citicbank/unionplugin/sst/sstManager/SSTManager;->idnumVerification(Ljava/lang/String; Ljava/lang/String; Lcom/citicbank/unionplugin/sst/sstManager/SSTCallBack;)V
'https://api.c.citic/citiccloud/st/ocr/v1/stateless/bankcard?auto_rotate=true' used in: Lcom/citicbank/unionplugin/sst/sstManager/SSTManager;->ocrStatelessBankCard(Ljava/lang/String; Lcom/citicbank/unionplugin/sst/sstManager/SSTCallBack;)V
'https://api.c.citic/citiccloud/st/ocr/v1/stateless/idcard?auto_rotate=true' used in: Lcom/citicbank/unionplugin/sst/sstManager/SSTManager;->ocrStatelessIdcard(Ljava/lang/String; Lcom/citicbank/unionplugin/sst/sstManager/SSTCallBack;)V
'https://api.c.citic/citiccloud/st/verification/v1/image_verification?first_image_id=' used in: Lcom/citicbank/unionplugin/sst/sstManager/SSTManager;->faceIdImages(Ljava/lang/String; Ljava/lang/String; Lcom/citicbank/unionplugin/sst/sstManager/SSTCallBack;)V
'https://api.c.citic/citiccloud/st/verification/v1/stateless/image_verification' used in: Lcom/citicbank/unionplugin/sst/sstManager/SSTManager;->faceNativeImages(Ljava/lang/String; Ljava/lang/String; Lcom/citicbank/unionplugin/sst/sstManager/SSTCallBack;)V
'https://long.open.weixin.qq.com/connect/l/qrconnect?f=json&uuid=%s' used in: Lcom/tencent/mm/opensdk/diffdev/a/f;->(Ljava/lang/String; Lcom/tencent/mm/opensdk/diffdev/OAuthListener;)V
'https://mcashier.95516.com/mobile/zh_CN' used in: Lcom/citicbank/unionplugin/activity/PluginWebviewActivity;->doClose(Z)V
'https://one.citic.com/' used in: Lcom/citicbank/unionplugin/UPConstant;->()V
'https://onetest.citic.com/mis/wx/union/bank/apps?pageNo=%d&pageSize=%d' used in: Lcom/citicbank/unionplugin/fragment/FragmentApplication;->loadData(I)V
'https://onetest.citic.com/mis/wx/union/bank/images?pageNo=%d&pageSize=%d' used in: Lcom/citicbank/unionplugin/view/BannerView;->loadData()V
'https://onetest.citic.com/mis/wx/union/bank/infos?pageNo=%d&pageSize=%d' used in: Lcom/citicbank/unionplugin/fragment/FragmentInfomation;->loadData(I)V
'https://onetest.citic.com/mis/wx/union/bank/products?pageNo=%d&pageSize=%d' used in: Lcom/citicbank/unionplugin/fragment/FragmentServices;->loadData(I)V
'https://onetest.citic.com/mis/wx/union/bank/query' used in: Lcom/citicbank/unionplugin/fragment/FragmentRightsUnLogin;->login()V
'https://onetest.citic.com/mis/wx/union/bank/query' used in: Lcom/citicbank/unionplugin/activity/RegisterActivity;->doRegister()V
'https://onetest.citic.com/mis/wx/union/bank/querySMS?phone=%s' used in: Lcom/citicbank/unionplugin/fragment/FragmentRightsUnLogin;->onClick(Landroid/view/View;)V
'https://onetest.citic.com/mis/wx/union/bank/rights?pageNo=%d&pageSize=%d' used in: Lcom/citicbank/unionplugin/fragment/FragmentRightsLogin;->loadData(I)V
'https://open.weixin.qq.com/connect/sdk/qrconnect?appid=%s&noncestr=%s×tamp=%s&scope=%s&signature=%s' used in: Lcom/tencent/mm/opensdk/diffdev/a/d;->()V
'https://sapi.map.baidu.com/sdkcs/verify' used in: Lcom/baidu/lbsapi/auth/LBSAuthManager;->sendAuthRequest(Z Ljava/lang/String; Ljava/util/Hashtable; Ljava/lang/String;)V
'https://sapi.map.baidu.com/sdkcs/verify' used in: Lcom/baidu/lbsapi/auth/LBSAuthManager;->sendAuthRequests(Z Ljava/lang/String; Ljava/util/Hashtable; [Ljava/lang/String; Ljava/lang/String;)V
'https://sapi.skyhookwireless.com/wps2/location' used in: Lcom/baidu/location/b/k;->()V
'https://sapi.skyhookwireless.com/wps2/reverse-geo' used in: Lcom/baidu/location/g/b$a;->au()V
'https://wap.bank.ecitic.com' used in: Lcom/citicbank/cbframework/templatemanager/CBTemplateManager;->isProduction()Z
'javascript:%s' used in: Lcom/citicbank/cbframework/webview/bridge/impl/d;->run()V
"javascript:%s('%s')" used in: Lcom/citicbank/cbframework/webview/CBJSCommonWebView;->doCallback(Ljava/lang/String; Ljava/lang/String;)V
"javascript:sendMessage('" used in: Lcom/citicbank/unionplugin/util/JSBridge$1;->run()V
"javascript:sendMessage('" used in: Lcom/citicbank/unionplugin/util/JSBridge$2;->run()V
'www.bouncycastle.org' used in: Lorg/bouncycastle/crypto/examples/DESExample;->(Ljava/lang/String; Ljava/lang/String; Ljava/lang/String; Z)V

位置: classes3.dex
'10.0.0.172' used in: Lcom/tencent/wxop/stat/common/k;->a(Landroid/content/Context;)Lorg/apache/http/HttpHost;
'10.0.0.200' used in: Lcom/tencent/wxop/stat/common/k;->a(Landroid/content/Context;)Lorg/apache/http/HttpHost;
'file:///android_asset/' used in: Lcom/bumptech/glide/load/model/AssetUriParser;->()V
'file:///android_asset/' used in: Lcom/ecitic/bank/mobile/views/ImageLoader;->loadAdvImage(Landroid/widget/ImageView; Lorg/json/JSONObject; I I)V
'http://101.251.235.126:8008' used in: Lcom/ecitic/bank/mobile/ui/megvii/util/Util;->()V
'http://22.5.228.29:8080/sitemesh/queryMesOne.action' used in: Lcom/ecitic/bank/mobile/function/user/util/BranchUtil;->()V
'http://22.5.232.210:8080/sitemesh/queryMesOne.action' used in: Lcom/ecitic/bank/mobile/function/user/util/BranchUtil;->()V
'http://22.5.238.143/virtuale3rdweb/mycheckcode.html' used in: Lcom/ecitic/bank/mobile/function/user/util/BranchUtil;->()V
'http://5b0988e595225.cdn.sohucs.com/images/20181204/bfef8528ad444fe6a6cbf22da6a690ac.jpeg' used in: Lcom/ecitic/bank/mobile/function/firstpage/MainFragment;->onCreateView(Landroid/view/LayoutInflater; Landroid/view/ViewGroup; Landroid/os/Bundle;)Landroid/view/View;
'http://a.app.qq.com/o/simple.jsp?pkgname=com.baixin.mobilebank' used in: Lcom/ecitic/bank/mobile/function/user/activity/AboutUsActivity;->()V
'http://a.app.qq.com/o/simple.jsp?pkgname=com.ecitic.bank.mobile' used in: Lcom/ecitic/bank/mobile/common/manager/ActivityServlet$5;->onFinishListener(Z)V
'http://a.app.qq.com/o/simple.jsp?pkgname=com.ecitic.bank.mobile' used in: Lcom/ecitic/bank/mobile/function/user/activity/AboutUsActivity;->viewClickListener(Landroid/view/View;)V
'http://a.app.qq.com/o/simple.jsp?pkgname=com.ecitic.bank.mobile' used in: Lcom/ecitic/bank/mobile/function/user/activity/AboutUsActivity;->initView()V
'http://a.app.qq.com/o/simple.jsp?pkgname=com.ecitic.bank.mobile' used in: Lcom/ecitic/bank/mobile/common/manager/ActivityServlet;->handleRequest(Lcom/citicbank/cbframework/webview/servlet/CBServletRequest; Lcom/citicbank/cbframework/taskexecutor/CBTask;)Z
'http://da.mmarket.com/mmsdk/mmsdk?func=mmsdk:postactlog' used in: Lcom/iflytek/cloud/thirdparty/b;->a(Landroid/content/Context; Ljava/lang/String;)Z
'http://da.mmarket.com/mmsdk/mmsdk?func=mmsdk:posterrlog' used in: Lcom/iflytek/cloud/thirdparty/b;->c(Landroid/content/Context; Ljava/lang/String;)Z
'http://da.mmarket.com/mmsdk/mmsdk?func=mmsdk:posteventlog' used in: Lcom/iflytek/cloud/thirdparty/b;->e(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)Z
'http://da.mmarket.com/mmsdk/mmsdk?func=mmsdk:postsyslog' used in: Lcom/iflytek/cloud/thirdparty/b;->b(Landroid/content/Context; Ljava/lang/String;)Z
'http://da.mmarket.com/mmsdk/mmsdk?func=mmsdk:specposteventlog' used in: Lcom/iflytek/cloud/thirdparty/b;->f(Landroid/content/Context; Ljava/lang/String; Ljava/lang/String;)Z
'http://data.openspeech.cn/index.php/clientrequest/clientcollect/isCollect' used in: Lcom/iflytek/sunflower/task/a;->a()V
'http://data.openspeech.cn/index.php/clientrequest/clientcollect/isCollect' used in: Lcom/iflytek/cloud/thirdparty/Q;->e()V
'http://dev.voicecloud.cn/msc/help.html' used in: Lcom/iflytek/cloud/resource/b;->()V
'http://dev.voicecloud.cn/msc/help.html' used in: Lcom/iflytek/cloud/resource/c;->()V
'http://dev.voicecloud.cn/msc/help.html' used in: Lcom/iflytek/cloud/resource/a;->()V
'http://e.test.bank.ecitic.com/NMBFOServer/html/qrcode.html' used in: Lcom/ecitic/bank/mobile/ui/activity/MyQrCodeActivity;->bussnessHandlerMassage(Landroid/os/Message;)Z
'http://hxqd.openspeech.cn/launchconfig' used in: Lcom/iflytek/cloud/thirdparty/ax;->a()V
'http://imfv.openspeech.cn/msp.do' used in: Lcom/iflytek/cloud/thirdparty/T;->b(Landroid/content/Context; Ljava/lang/String; Lcom/iflytek/cloud/thirdparty/s;)Ljava/lang/String;
'http://iss.openspeech.cn/v?' used in: Lcom/iflytek/cloud/SpeechUtility;->getComponentUrl()Ljava/lang/String;
'http://iws.openspeech.cn/online_param/config_update.php' used in: Lcom/iflytek/sunflower/config/a;->()V
'http://open.weixin.qq.com/connect/sdk/qrconnect?appid=%s&noncestr=%s×tamp=%s&scope=%s&signature=%s' used in: Lcom/tencent/mm/sdk/diffdev/a/d;->()V
'http://openapi.openspeech.cn/webapi/wfr.do' used in: Lcom/iflytek/cloud/thirdparty/V;->(Landroid/content/Context; Lcom/iflytek/cloud/thirdparty/R;)V
'http://payment.chinapay.com' used in: Lcom/ecitic/bank/mobile/ui/WebviewActivity$4;->onClick(Landroid/view/View;)V
'http://payment.chinapay.com' used in: Lcom/ecitic/bank/mobile/ui/WebviewActivity$3;->shouldOverrideUrlLoading(Landroid/webkit/WebView; Ljava/lang/String;)Z
'http://pingma.qq.com:80/mstat/report' used in: Lcom/tencent/wxop/stat/StatConfig;->()V
'http://schemas.android.com/android/skin' used in: Lcom/ecitic/bank/mobile/library/theme/SkinInflaterFactory;->onCreateView(Landroid/view/View; Ljava/lang/String; Landroid/content/Context; Landroid/util/AttributeSet;)Landroid/view/View;
'http://scs.openspeech.cn/scs' used in: Lcom/iflytek/sunflower/config/a;->()V
'http://scs.openspeech.cn/scs' used in: Lcom/iflytek/cloud/thirdparty/Q;->a(Lorg/json/JSONObject;)V
'http://sdk.open.phone.igexin.com/api.php' used in: Lcom/igexin/push/a/k;->()V
'http://sdk.open.phone.igexin.com/api.php' used in: Lcom/igexin/push/core/g;->()V
'http://sdk.open.phone.igexin.com:8003/api.php' used in: Lcom/igexin/push/a/k;->()V
'http://www.citicbank.com/' used in: Lcom/ecitic/bank/mobile/function/user/activity/AboutUsActivity;->viewClickListener(Landroid/view/View;)V
'http://www.citicbank.com/' used in: Lcom/ecitic/bank/mobile/function/user/activity/AboutUsActivity;->()V
'https://long.open.weixin.qq.com/connect/l/qrconnect?f=json&uuid=%s' used in: Lcom/tencent/mm/sdk/diffdev/a/f;->(Ljava/lang/String; Lcom/tencent/mm/sdk/diffdev/OAuthListener;)V
'https://mcashier.95516.com/mobile/zh_CN' used in: Lcom/ecitic/bank/mobile/ui/WebviewActivity$4;->onClick(Landroid/view/View;)V
'https://mcashier.95516.com/mobile/zh_CN' used in: Lcom/ecitic/bank/mobile/ui/WebviewActivity$3;->shouldOverrideUrlLoading(Landroid/webkit/WebView; Ljava/lang/String;)Z
'https://wap.bank.ecitic.com/' used in: Lcom/ecitic/bank/mobile/function/user/util/OcrScanCardUtil;->initOcrEngine(Landroid/content/Context; I)V
'https://wap.bank.ecitic.com/NMBFOServer/qr/' used in: Lcom/ecitic/bank/mobile/ui/activity/MyQrCodeActivity;->bussnessHandlerMassage(Landroid/os/Message;)Z

中危

检测到12处setSavePassword密码明文存储漏洞。

位置: classes.dex
com.ecitic.bank.mobile.ui.WebviewActivity;
com.citicbank.cbframework.common.util.CBDeviceUtil;
com.ecitic.bank.mobile.ui.activity.fund.OPenPDFActivity;

位置: classes2.dex
com.citicbank.cbframework.webview.CBJSCommonWebView;
com.citicbank.cbframework.webview.CBBaseWebView;
com.citicbank.cbframework.webview.CBJSWebView;
com.citicbank.unionplugin.util.JSBridge;
com.citicbank.cbframework.webview.bridge.impl.CBJSBridgeBaseImp;
com.citicbank.unionplugin.activity.WebViewActivity;

位置: classes3.dex
com.iflytek.sunflower.CollectorJs;
com.ecitic.bank.mobile.ui.AdvDetailActivity;
com.ecitic.bank.mobile.helloar.view.activitys.NewArWebActivity;

webview的保存密码功能默认设置为true。Webview会明文保存网站上的密码到本地私有文件”databases/webview.db”中。对于可以被root的系统环境或者配合其他漏洞(如webview的同源绕过漏洞),攻击者可以获取到用户密码。
建议:显示设置webView.getSetting().setSavePassword(false)。

参考案例:
www.wooyun.org/bugs/wooyun-2010-021420
www.wooyun.org/bugs/wooyun-2013-020246

参考资料:
http://wolfeye.baidu.com/blog/
www.claudxiao.net/2013/03/android-webview-cache/

中危

检测到3使用全局可读写操作文件。

位置: classes3.dex
com.iflytek.cloud.thirdparty.N;->b(Landroid.content.Context; Ljava.lang.String; Ljava.lang.String; Ljava.lang.String;)Ljava.lang.String;===>getSharedPreferences
com.iflytek.cloud.thirdparty.N;->c(Landroid.content.Context; Ljava.lang.String; Ljava.lang.String; Ljava.lang.String;)V===>getSharedPreferences
com.iflytek.cloud.thirdparty.b;->a(Landroid.content.Context; Ljava.lang.String; I)Z===>openFileOutput

在使用getDir、getSharedPreferences(SharedPreference)或openFileOutput时,如果设置了全局的可读权限,攻击者恶意读取文件内容,获取敏感信息。在设置文件属性时如果设置全局可写,攻击者可能会篡改、伪造内容,可以能会进行诈骗等行为,造成用户财产损失。建议:
(1)使用MODE_PRIVATE模式创建内部存储文件。
(2)加密存储敏感数据。
(3)避免在文件中存储明文和敏感信息。

参考案例:
http://wooyun.org/bugs/wooyun-2010-047172
http://wooyun.org/bugs/wooyun-2010-054438
http://wooyun.org/bugs/wooyun-2010-0151270

参考资料:
https://jaq.alibaba.com/blog.htm?id=56
https://jaq.alibaba.com/blog.htm?id=58
http://wolfeye.baidu.com/blog/global-rw-of-file
http://wolfeye.baidu.com/blog/global-rw-of-sharepreference/

低危

检测到5处SecureRandom使用不当。

位置: classes2.dex
org.bouncycastle.crypto.prng.SP800SecureRandom;->setSeed
org.bouncycastle.crypto.tls.TlsProtocol;->createRandomBlock
org.bouncycastle.crypto.examples.DESExample;->
org.bouncycastle.crypto.tls.TlsClientProtocol;->createSecureRandom
org.bouncycastle.jcajce.provider.keystore.bc.BcKeyStoreSpi$StoreEntry;->

SecureRandom的使用不当会导致生成的随机数可被预测,该漏洞存在于Android系统随机生成数字串安全密钥的环节中。该漏洞的生成原因是对SecureRandom类的不正确使用方式导致生成的随机数不随机。建议:
(1)不要使用自定义随机源代替系统默认随机源(推荐)除非有特殊需求,在使用SecureRandom类时,不要调用以下函数:SecureRandom类下SecureRandom(byte[]seed)、setSeed(long seed)和setSeed(byte[]seed)方法。
(2)在调用setSeed方法前先调用任意nextXXX方法。具体做法是调用setSeed方法前先调用一次SecureRandom#nextBytes(byte[]bytes)方法,可以避免默认随机源被替代,详细见参考资料。

参考资料:
https://developer.android.com/reference/java/security/SecureRandom.html
http://drops.wooyun.org/papers/5164
http://jaq.alibaba.com/blog.htm?id=47

低危

检测到5处使用了DES弱加密算法。

位置: classes2.dex
'DES/CBC/PKCS5Padding' used in: Lcom/citicbank/cbframework/exceptionhandler/CBEncrypUtil;->encryptProcess(Ljava/lang/String; Ljava/lang/String;)[B
'DES/CBC/PKCS5Padding' used in: Lcom/citicbank/cbframework/exceptionhandler/CBEncrypUtil;->decryptProcess(Ljava/lang/String; Ljava/lang/String;)Ljava/lang/String;
'DES/ECB/NoPadding' used in: Lwd/watchdata/com/b/c;->a([B [B)[B
'DES/ECB/NoPadding' used in: Lwd/watchdata/com/b/c;->b([B [B)[B
'DES/ECB/PKCS5Padding' used in: Lcom/csii/csiitracker/secure/DesedeUtil;->encryptDes([B Ljava/lang/String;)Ljava/lang/String;

使用弱加密算法会大大增加黑客攻击的概率,黑客可能会破解隐私数据、猜解密钥、中间人攻击等,造成隐私信息的泄漏,甚至造成财产损失。建议使用AES加密算法。

参考资料:
http://drops.wooyun.org/tips/15870
https://developer.android.com/training/articles/keystore.html
http://wolfeye.baidu.com/blog/weak-encryption/
http://www.freebuf.com/articles/terminal/99868.html

低危

检测到15处AES/DES弱加密风险。

位置: classes2.dex
Lcom/noknok/android/client/asm/core/uaf/EncodeUtil;->aesEncrypt([B [B)[B
Lcom/csii/csiitracker/secure/DesedeUtil;->decrypt([B Ljava/lang/String;)Ljava/lang/String;
Lcom/csii/csiitracker/secure/DesedeUtil;->encryptDes([B Ljava/lang/String;)Ljava/lang/String;
Lwd/watchdata/com/b/j;->b([B [B)[B
Lwd/watchdata/com/b/c;->a([B [B)[B
Lwd/watchdata/com/b/a;->b([B [B)[B
Lcom/citicbank/cbframework/common/security/CB3Des;->encrypt([B [B)[B
Lm/framework/utils/Data;->AES128Encode(Ljava/lang/String; Ljava/lang/String;)[B
Lwd/watchdata/com/b/j;->a([B [B)[B
Lcom/citicbank/cbframework/common/security/CB3Des;->decrypt([B [B)[B
Lm/framework/utils/Data;->AES128Decode([B [B)[B
Lwd/watchdata/com/b/c;->b([B [B)[B
Lwd/watchdata/com/b/a;->a([B [B)[B
Lm/framework/utils/Data;->AES128Encode([B Ljava/lang/String;)[B

位置: classes3.dex
Lorg/apache/poi/poifs/crypt/Decryptor;->getCipher()Ljavax/crypto/Cipher;

使用AES/DES/DESede加密算法时,如果使用ECB模式,容易受到攻击风险,造成信息泄露。建议在使用AES/DES/DESede加密算法时,应显示指定使用CBC或CFB加密模式

参考资料:
http://blog.csdn.net/u013107656/article/details/51997957
https://developer.android.com/reference/javax/crypto/Cipher.html
http://drops.wooyun.org/tips/15870
https://developer.android.com/training/articles/keystore.html
http://wolfeye.baidu.com/blog/weak-encryption/
http://www.freebuf.com/articles/terminal/99868.html

低危

非debug包,需要通过打包平台proguard脚本,移除大部分系统输出代码。
经扫描该包仍存在大量系统输出代码,共发现80处系统输出代码.(此处扫描的系统输出代码,是指调用System.out.print*输出的,本应在打包平台移除的系统输出代码.)
各个bundle系统输出代码详情如下:

位置: classes.dex
com.sinovoice.hcicloudsdk.common.utils.CloudLog;
com.ecitic.bank.mobile.common.util.DeviceCheckUtil;

位置: classes2.dex
org.bouncycastle.jce.provider.JCEStreamCipher;
org.jaxen.pattern.PatternHandler;
org.dom4j.io.DOMReader;
org.bouncycastle.pqc.math.linearalgebra.IntegerFunctions;
com.baidu.platform.comjni.map.basemap.a;
common.Base64;
org.bouncycastle.pqc.crypto.gmss.GMSSRootCalc;
org.bouncycastle.crypto.examples.DESExample;
com.baidu.mapapi.a.a.a;
org.dom4j.io.SAXHelper;
org.bouncycastle.jcajce.provider.keystore.pkcs12.PKCS12KeyStoreSpi;
org.dom4j.DocumentFactory;
org.dom4j.io.DOMWriter;
com.unionplugin.base.imageloader.diskcache.disklrucache.DiskLruCache;
org.bouncycastle.x509.examples.AttrCertExample;
org.bouncycastle.crypto.generators.NaccacheSternKeyPairGenerator;
com.baidu.platform.comapi.a;
org.dom4j.datatype.DatatypeDocumentFactory;
com.watchdata.android.utils.a;
org.bouncycastle.pqc.crypto.gmss.GMSSSigner;
org.jaxen.saxpath.SAXPathException;
org.dom4j.swing.XMLTableDefinition;
com.baidu.mapapi.search.core.g;
org.bouncycastle.crypto.examples.JPAKEExample;
com.swetake.util.Qrcode;
org.bouncycastle.pqc.crypto.gmss.util.GMSSUtil;
org.dom4j.tree.NamespaceStack;
org.bouncycastle.pqc.crypto.gmss.GMSSKeyPairGenerator;
org.bouncycastle.jcajce.provider.symmetric.util.BaseWrapCipher;
org.dom4j.dom.DOMNodeHelper;
org.dom4j.bean.BeanDocumentFactory;
com.citicbank.cbframework.common.util.CBXMLUtil;
org.bouncycastle.crypto.engines.NaccacheSternEngine;
org.bouncycastle.pqc.crypto.gmss.Treehash;
org.dom4j.swing.XMLTableColumnDefinition;
org.bouncycastle.LICENSE;
org.bouncycastle.apache.bzip2.CBZip2InputStream;
org.dom4j.swing.XMLTableModel;
org.dom4j.datatype.SchemaParser;
com.sun.activation.registries.LogSupport;
org.bouncycastle.pqc.math.linearalgebra.PolynomialRingGF2;
org.bouncycastle.jce.provider.BrokenJCEBlockCipher;
org.bouncycastle.jcajce.provider.asymmetric.ies.CipherSpi;
org.dom4j.rule.RuleManager;
com.citicbank.cbframework.common.security.CB3Des;
org.jaxen.JaxenRuntimeException;
tupsdk.Main;
com.tencent.aai.audio.buffer.FixSizeAudioDataBuffer;
org.bouncycastle.pqc.crypto.gmss.GMSSPrivateKeyParameters;
org.dom4j.DocumentException;
org.bouncycastle.asn1.util.Dump;
org.bouncycastle.apache.bzip2.CBZip2OutputStream;
org.bouncycastle.util.test.SimpleTest;

位置: classes3.dex
com.hp.hpl.sparta.DefaultLog;
com.sun.mail.pop3.Protocol;
com.sun.mail.imap.IMAPStore;
javax.mail.Session;
com.ecitic.bank.mobile.vrmodel.WavefrontLoader$ModelDimensions;
org.vudroid.core.DocumentView;
javax.mail.internet.MailDateFormat;
com.sun.mail.imap.IMAPFolder;
com.bumptech.glide.disklrucache.DiskLruCache;
com.sun.mail.smtp.SMTPTransport;
com.sun.mail.dsn.DeliveryStatus;
com.ecitic.bank.mobile.vrmodel.WavefrontLoader$FaceMaterials;
com.ecitic.bank.mobile.helloar.view.activitys.MainActivityAR;
com.ecitic.bank.mobile.vrmodel.WavefrontLoader$Material;
com.ecitic.bank.mobile.vrmodel.WavefrontLoader;
com.ecitic.bank.mobile.common.util.Util;
com.sun.mail.util.UUEncoderStream;
com.sun.mail.imap.protocol.BODYSTRUCTURE;
com.ecitic.bank.mobile.vrmodel.WavefrontLoader$Materials;
com.sun.mail.imap.protocol.IMAPProtocol;
com.sun.mail.pop3.POP3Store;
com.ecitic.bank.mobile.helloar.broadcast.NetWorkStateReceiver;
com.sun.mail.imap.protocol.IMAPSaslAuthenticator;
com.sun.mail.imap.protocol.IMAPSaslAuthenticator$1;
com.sun.mail.smtp.DigestMD5;

低危

检测到4处主机名弱校验检测漏洞。

位置: classes2.dex
com.citicbank.unionplugin.http.HttpUtil$1;->verify(Ljava.lang.String; Ljavax.net.ssl.SSLSession;)Z
com.tencent.asr.task.TaskManager$1;->verify(Ljava.lang.String; Ljavax.net.ssl.SSLSession;)Z
com.tencent.preprocess.PreProcessEngine$6;->verify(Ljava.lang.String; Ljavax.net.ssl.SSLSession;)Z

位置: classes3.dex
com.ecitic.bank.mobile.hwvideo.service.ics.ICSService$MyHostnameVerifier;->verify(Ljava.lang.String; Ljavax.net.ssl.SSLSession;)Z

自定义HostnameVerifier类,却不实现其verify方法验证域名直接返回true,直接接受任意域名。建议:
对SSL证书进行强校验,包括签名CA是否合法、证书是否是自签名、主机域名是否匹配、证书是否过期等。

参考资料:
http://drops.wooyun.org/tips/3296
https://www.91ri.org/12534.html

低危

检测到3处RSA算法不使用padding。

位置: classes2.dex
'RSA/ECB/NoPadding' used in: Lcom/citicbank/cbframework/common/security/CBRSA;->decrypt(Ljava/security/interfaces/RSAKey; [B)[B
'RSA/ECB/NoPadding' used in: Lcom/citicbank/cbframework/common/security/CBRSA;->encrypt(Ljava/security/interfaces/RSAKey; [B)[B
'RSA/ECB/NoPadding' used in: Lcom/citicbank/cbframework/common/security/CBRSA;->getRSAPublicKey(Ljava/lang/String;)Ljava/security/interfaces/RSAPublicKey;

使用RSA公钥时通常会绑定一个padding,原因是为了防止一些依赖于no padding时对RSA算法的攻击。

参考资料:
http://drops.wooyun.org/tips/15870
https://developer.android.com/training/articles/keystore.html
http://wolfeye.baidu.com/blog/weak-encryption/
http://www.freebuf.com/articles/terminal/99868.html

低危

检测到1处地方在自定义实现的WebViewClient类在onReceivedSslError调用proceed()方法。

位置: classes3.dex
com.ecitic.bank.mobile.helloar.view.activitys.NewArWebActivity$1;->onReceivedSslError(Landroid.webkit.WebView; Landroid.webkit.SslErrorHandler; Landroid.net.http.SslError;)V

Android WebView组件加载网页发生证书认证错误时,会调用WebViewClient类的onReceivedSslError方法,如果该方法实现调用了handler.proceed()来忽略该证书错误,则会受到中间人攻击的威胁,可能导致隐私泄露。建议:
当发生证书认证错误时,采用默认的处理方法handler.cancel(),停止加载问题页面当发生证书认证错误时,采用默认的处理方法handler.cancel(),停止加载问题页面。

参考案例:
http://www.wooyun.org/bugs/wooyun-2010-0109266

参考资料:
https://jaq.alibaba.com/blog.htm?id=60
http://wolfeye.baidu.com/blog/webview-ignore-ssl-error/

警告

检测到30处addFlags使用Intent.FLAG_ACTIVITY_NEW_TASK。

位置: classes2.dex
me.weyye.hipermission.HiPermission;->startActivity
com.igexin.getuiext.util.e;->b
com.igexin.getuiext.a.g;->a
com.tencent.mm.opensdk.channel.MMessageActV2;->send
com.noknok.android.client.asm.core.uaf.AuthenticatorCore;->displayUsernamePicker

位置: classes3.dex
com.ecitic.bank.mobile.common.util.VersionManageUtil;->installNewPackage
com.tencent.mm.sdk.a.a;->a
com.ecitic.bank.mobile.ui.CBWebviewActivity$26;->onClick
com.ecitic.bank.mobile.common.util.Util$1;->run
com.ecitic.bank.mobile.ui.view.CalendarView$3;->onItemClick
com.ecitic.bank.mobile.common.manager.ActivityServlet$9$2;->onClick
com.ecitic.bank.mobile.common.manager.ActivityServlet$33$2;->onClick
com.ecitic.bank.mobile.ui.CBWebviewActivity$42;->onClick
com.iflytek.cloud.SpeechUtility;->openEngineSettings
com.ecitic.bank.mobile.ui.activity.account.ElectronAccountYzActivity$1;->onClick
com.ecitic.bank.mobile.ui.CBWebviewActivity$15;->onClick
com.ecitic.bank.mobile.ui.CBWebviewActivity$43;->onClick
com.ecitic.bank.mobile.common.manager.ActivityServlet;->doPhoneCall
com.gmrz.appsdk.commlib.h;->sendRequest
com.iflytek.cloud.thirdparty.ai;->e
com.ecitic.bank.mobile.common.util.Util$3;->onClick
com.ecitic.bank.mobile.common.manager.ActivityServlet;->handleRequest
com.ecitic.bank.mobile.ui.CBWebviewActivity$24;->onClick
com.ecitic.bank.mobile.common.manager.ActivityServlet$6$2;->onClick
com.ecitic.bank.mobile.common.manager.ActivityServlet$4$1;->onRequestPermissionsResult
com.ecitic.bank.mobile.ui.CBWebviewActivity$46;->onClick
com.iflytek.cloud.ui.a$a;->onClick
com.ecitic.bank.mobile.ui.CBWebviewActivity$31;->onClick
com.ecitic.bank.mobile.common.manager.ActivityServlet$39$3;->onClick
com.ecitic.bank.mobile.function.firstpage.view.MapOrderView;->onClick

APP创建Intent传递数据到其他Activity,如果创建的Activity不是在同一个Task中打开,就很可能被其他的Activity劫持读取到Intent内容,跨Task的Activity通过Intent传递敏感信息是不安全的。建议:
尽量避免使用包含FLAG_ACTIVITY_NEW_TASK标志的Intent来传递敏感信息。

参考资料:
http://wolfeye.baidu.com/blog/intent-data-leak

警告

检测到5个导出的组件接收其他app的消息,这些组件会被其他app引用并导致dos攻击。

activity com.ecitic.bank.mobile.ui.CBWebviewActivity
activity com.ecitic.bank.mobile.wxapi.WXEntryActivity
service com.igexin.sdk.PushService
receiver com.igexin.sdk.PushReceiver
receiver com.igexin.download.DownloadReceiver

建议:
(1)最小化组件暴露。对不会参与跨应用调用的组件建议显示添加android:exported="false"属性。
(2)设置组件访问权限。对provider设置权限,同时将权限的protectionLevel设置为"signature"或"signatureOrSystem"。
(3)组件传输数据验证。对组件之间,特别是跨应用的组件之间的数据传入与返回做验证和增加异常处理,防止恶意调试数据传入,更要防止敏感数据返回。

参考案例:
http://www.wooyun.org/bugs/wooyun-2010-0169746
http://www.wooyun.org/bugs/wooyun-2010-0104965

参考资料:
http://jaq.alibaba.com/blog.htm?spm=0.0.0.0.Wz4OeC&id=55
《Android安全技术解密与防范》

警告

检测1处組件設置了android.intent.category.BROWSABLE属性。
com.ecitic.bank.mobile.ui.SplashActivity


在AndroidManifest文件中定义了android.intent.category.BROWSABLE属性的组件,可以通过浏览器唤起,这会导致远程命令执行漏洞攻击。建议:
(1)APP中任何接收外部输入数据的地方都是潜在的攻击点,过滤检查来自网页的参数。
(2)不要通过网页传输敏感信息,有的网站为了引导已经登录的用户到APP上使用,会使用脚本动态的生成URL Scheme的参数,其中包括了用户名、密码或者登录态token等敏感信息,让用户打开APP直接就登录了。恶意应用也可以注册相同的URL Sechme来截取这些敏感信息。Android系统会让用户选择使用哪个应用打开链接,但是如果用户不注意,就会使用恶意应用打开,导致敏感信息泄露或者其他风险。

參考案例:
http://www.wooyun.org/bugs/wooyun-2014-073875
http://www.wooyun.org/bugs/wooyun-2014-067798

参考资料:
http://wolfeye.baidu.com/blog/intent-scheme-url/
http://www.jssec.org/dl/android_securecoding_en.pdf
http://drops.wooyun.org/mobile/15202
http://blog.csdn.net/l173864930/article/details/36951805
http://drops.wooyun.org/papers/2893

警告

检测到9潜在的XSS漏洞。

位置: classes.dex
com.ecitic.bank.mobile.ui.WebviewActivity;->initUI()V
com.ecitic.bank.mobile.ui.activity.fund.OPenPDFActivity;->initUI()V

位置: classes2.dex
com.citicbank.unionplugin.util.JSBridge;->(Lcom.citicbank.unionplugin.view.webview.UnionWebView; Lcom.citicbank.unionplugin.util.JSBridgeListener;)V
com.citicbank.unionplugin.view.webview.UnionWebView;->initWebViewSettings()V
com.citicbank.cbframework.webview.CBJSCommonWebView;->a()V
com.citicbank.cbframework.webview.bridge.impl.CBJSBridgeBaseImp;->(Landroid.webkit.WebView; Lcom.citicbank.cbframework.webview.bridge.CBJSBridge$JSBridgeListener;)V
com.citicbank.unionplugin.activity.WebViewActivity;->onCreate(Landroid.os.Bundle;)V

位置: classes3.dex
com.iflytek.sunflower.CollectorJs;->(Landroid.content.Context; Landroid.webkit.WebView; Landroid.webkit.WebChromeClient;)V
com.ecitic.bank.mobile.helloar.view.activitys.NewArWebActivity;->initData()V

允许WebView执行JavaScript(setJavaScriptEnabled),有可能导致XSS攻击。建议尽量避免使用。
(1)API等于高高于17的Android系统。出于安全考虑,为了防止Java层的函数被随意调用,Google在4.2版本之后,规定允许被调用的函数必须以@JavascriptInterface进行注解。
(2)API等于高高于17的Android系统。建议不要使用addJavascriptInterface接口,以免带来不必要的安全隐患,如果一定要使用该接口,建议使用证书校验。
u(3)使用removeJavascriptInterface移除Android系统内部的默认内置接口:searchBoxJavaBridge_、accessibility、accessibilityTraversal。

参考案例:
www.wooyun.org/bugs/wooyun-2015-0140708
www.wooyun.org/bugs/wooyun-2016-0188252

参考资料:
http://jaq.alibaba.com/blog.htm?id=48
http://blog.nsfocus.net/android-webview-remote-code-execution-vulnerability-analysis

警告

检测到38处IvParameterSpec的使用。

位置: classes2.dex
com.baidu.android.bbalbs.common.a.a;->a(Ljava.lang.String; Ljava.lang.String; [B)[B
com.baidu.android.bbalbs.common.a.a;->b(Ljava.lang.String; Ljava.lang.String; [B)[B
com.baidu.location.f.b.a;->a(Ljava.lang.String; Ljava.lang.String; [B)[B
com.baidu.location.f.b.a;->if(Ljava.lang.String; Ljava.lang.String; [B)[B
com.citicbank.cbframework.common.security.CB3Des;->decrypt_cbc([B [B [B)[B
com.citicbank.cbframework.common.security.CB3Des;->encrypt_cbc([B [B [B)[B
com.citicbank.cbframework.exceptionhandler.CBEncrypUtil;->decryptProcess(Ljava.lang.String; Ljava.lang.String;)Ljava.lang.String;
com.citicbank.cbframework.exceptionhandler.CBEncrypUtil;->encryptProcess(Ljava.lang.String; Ljava.lang.String;)[B
tendyron.loader.a;->b(Landroid.content.Context; Ljava.lang.String;)Ldalvik.system.DexClassLoader;
wd.watchdata.com.b.a;->a([B [B [B)[B
wd.watchdata.com.b.a;->b([B [B [B)[B
wd.watchdata.com.b.j;->a([B [B [B)[B
wd.watchdata.com.b.j;->b([B [B [B)[B
com.fido.android.framework.tm.core.prov.CryptoModule;->decrypt([B [B)[B
com.fido.android.framework.tm.core.prov.CryptoModule;->doCipher([B [B I [B)[B
com.fido.android.framework.tm.core.prov.CryptoModule;->encrypt([B [B)[B
org.bouncycastle.jcajce.provider.keystore.pkcs12.PKCS12KeyStoreSpi;->createCipher(I [C Lorg.bouncycastle.asn1.x509.AlgorithmIdentifier;)Ljavax.crypto.Cipher;
org.bouncycastle.jcajce.provider.symmetric.AES$AlgParamGen;->engineGenerateParameters()Ljava.security.AlgorithmParameters;
org.bouncycastle.jcajce.provider.symmetric.CAST5$AlgParamGen;->engineGenerateParameters()Ljava.security.AlgorithmParameters;
org.bouncycastle.jcajce.provider.symmetric.CAST5$AlgParams;->localEngineGetParameterSpec(Ljava.lang.Class;)Ljava.security.spec.AlgorithmParameterSpec;
org.bouncycastle.jcajce.provider.symmetric.Camellia$AlgParamGen;->engineGenerateParameters()Ljava.security.AlgorithmParameters;
org.bouncycastle.jcajce.provider.symmetric.DES$AlgParamGen;->engineGenerateParameters()Ljava.security.AlgorithmParameters;
org.bouncycastle.jcajce.provider.symmetric.DESede$AlgParamGen;->engineGenerateParameters()Ljava.security.AlgorithmParameters;
org.bouncycastle.jcajce.provider.symmetric.GOST28147$AlgParamGen;->engineGenerateParameters()Ljava.security.AlgorithmParameters;
org.bouncycastle.jcajce.provider.symmetric.IDEA$AlgParamGen;->engineGenerateParameters()Ljava.security.AlgorithmParameters;
org.bouncycastle.jcajce.provider.symmetric.IDEA$AlgParams;->localEngineGetParameterSpec(Ljava.lang.Class;)Ljava.security.spec.AlgorithmParameterSpec;
org.bouncycastle.jcajce.provider.symmetric.Noekeon$AlgParamGen;->engineGenerateParameters()Ljava.security.AlgorithmParameters;
org.bouncycastle.jcajce.provider.symmetric.RC2$AlgParamGen;->engineGenerateParameters()Ljava.security.AlgorithmParameters;
org.bouncycastle.jcajce.provider.symmetric.RC2$AlgParams;->localEngineGetParameterSpec(Ljava.lang.Class;)Ljava.security.spec.AlgorithmParameterSpec;
org.bouncycastle.jcajce.provider.symmetric.RC5$AlgParamGen;->engineGenerateParameters()Ljava.security.AlgorithmParameters;
org.bouncycastle.jcajce.provider.symmetric.RC6$AlgParamGen;->engineGenerateParameters()Ljava.security.AlgorithmParameters;
org.bouncycastle.jcajce.provider.symmetric.SEED$AlgParamGen;->engineGenerateParameters()Ljava.security.AlgorithmParameters;
org.bouncycastle.jcajce.provider.symmetric.Shacal2$AlgParamGen;->engineGenerateParameters()Ljava.security.AlgorithmParameters;
org.bouncycastle.jcajce.provider.symmetric.util.IvAlgorithmParameters;->localEngineGetParameterSpec(Ljava.lang.Class;)Ljava.security.spec.AlgorithmParameterSpec;

位置: classes3.dex
com.iflytek.cloud.thirdparty.g;->a(Ljava.lang.String;)[B

位置: assets/tdrBTCITICBank.jar
tendyron.provider.sdk.ionative.AKeyAlg;->Cipher(Ljava.lang.String; [B [B I [B)[B
tendyron.provider.sdk.ionative.AKeyAlg;->Cipher(Ljava.lang.String; [B [B I [B)[B
tendyron.provider.sdk.ionative.AKeyAlg;->Cipher(Ljava.lang.String; [B [B I [B)[B

使用IVParameterSpec函数,如果使用了固定的初始化向量,那么密码文本可预测性高得多,容易受到字典攻击等。建议禁止使用常量初始化矢量构造IVParameterSpec,使用聚安全提供的安全组件。

参考资料:
http://drops.wooyun.org/tips/15870
https://developer.android.com/training/articles/keystore.html
http://wolfeye.baidu.com/blog/weak-encryption/
http://www.freebuf.com/articles/terminal/99868.html

警告

检测到1处provider的grantUriPermissions设置为true。
android.support.v4.content.FileProvider


grant-uri-permission若设置为true,可被其它程序员通过uri访问到content provider的内容,容易造成信息泄露。

参考资料:
https://security.tencent.com/index.php/blog/msg/6

警告

检测到1处使用空Intent构造PendingIntent。

位置: classes.dex
com.citicbank.cbframework.common.util.CBDeviceUtil;->sendMessage(Ljava.lang.String; Ljava.lang.String;)V

使用pendingIntent时候,如果使用了一个空Intent,会导致恶意用户劫持Intent的内容。禁止使用空intent去构造pendingIntent。建议:
禁止使用空intent去构造pendingIntent。

参考资料:
http://wolfeye.baidu.com/blog/pendingintent-leak-information
http://bbs.mob.com/thread-5249-1-1.html

警告

检测到1处socket通信。

位置: classes2.dex
Lorg.bouncycastle.crypto.tls.UDPTransport;->receive

Android应用通常使用PF_UNIX、PF_INET、PF_NETLINK等不同domain的socket来进行本地IPC或者远程网络通信,这些暴露的socket代表了潜在的本地或远程攻击面,历史上也出现过不少利用socket进行拒绝服务、root提权或者远程命令执行的案例特别是PF_INET类型的网络socket,可以通过网络与Android应用通信,其原本用于linux环境下开放网络服务,由于缺乏对网络调用者身份或者本地调用者id、permission等细粒度的安全检查机制,在实现不当的情况下,可以突破Android的沙箱限制,以被攻击应用的权限执行命令,通常出现比较严重的漏洞

参考案例:
http://www.wooyun.org/bugs/wooyun-2015-0148406
http://www.wooyun.org/bugs/wooyun-2015-0145365

参考资料:
http://wolfeye.baidu.com/blog/open-listen-port
http://blog.csdn.net/jltxgcy/article/details/50686858
https://www.bigniu.com/article/view/10
http://drops.wooyun.org/mobile/6973

警告

这个app应该声明permission的"android:protectionLevel"属性值为"signature"或者"signatureOrSystem",保证其他app无法注册或者从这个app接收消息。有安全隐患的permission如下:
getui.permission.GetuiService.com.ecitic.bank.mobile normal

警告

检测到36处使用了加解密算法。密钥处理不当可能会导致信息泄露。

位置: classes.dex
okio.ByteString;->hmac(Ljava.lang.String; Lokio.ByteString;)Lokio.ByteString;
okio.Buffer;->hmac(Ljava.lang.String; Lokio.ByteString;)Lokio.ByteString;
okio.HashingSink;->(Lokio.Sink; Lokio.ByteString; Ljava.lang.String;)V

位置: classes2.dex
org.bouncycastle.jcajce.provider.symmetric.DESede$KeyFactory;->engineGenerateSecret(Ljava.security.spec.KeySpec;)Ljavax.crypto.SecretKey;
org.bouncycastle.jcajce.provider.symmetric.util.BaseSecretKeyFactory;->engineTranslateKey(Ljavax.crypto.SecretKey;)Ljavax.crypto.SecretKey;
org.bouncycastle.jce.provider.BrokenJCEBlockCipher;->engineUnwrap([B Ljava.lang.String; I)Ljava.security.Key;
org.bouncycastle.jce.provider.JCEStreamCipher;->engineUnwrap([B Ljava.lang.String; I)Ljava.security.Key;
org.bouncycastle.jcajce.provider.symmetric.DESede$KeyGenerator;->engineGenerateKey()Ljavax.crypto.SecretKey;
m.framework.utils.Data;->AES128Encode([B Ljava.lang.String;)[B
com.csii.csiitracker.secure.DesedeUtil;->encryptDes([B Ljava.lang.String;)Ljava.lang.String;
com.baidu.location.f.b.a;->a(Ljava.lang.String; Ljava.lang.String; [B)[B
tendyron.loader.a;->b(Landroid.content.Context; Ljava.lang.String;)Ldalvik.system.DexClassLoader;
com.baidu.android.bbalbs.common.a.a;->b(Ljava.lang.String; Ljava.lang.String; [B)[B
com.csii.csiitracker.sign.HS1Signature;->calculateRFC2104HMAC([B [B)Ljava.lang.String;
org.bouncycastle.jcajce.provider.keystore.bc.BcKeyStoreSpi;->decodeKey(Ljava.io.DataInputStream;)Ljava.security.Key;
com.tencent.utils.SecretUtils;->encryptMode([B [B)[B
m.framework.utils.Data;->AES128Encode(Ljava.lang.String; Ljava.lang.String;)[B
com.baidu.android.bbalbs.common.a.a;->a(Ljava.lang.String; Ljava.lang.String; [B)[B
org.bouncycastle.jcajce.provider.asymmetric.ec.KeyAgreementSpi;->engineGenerateSecret(Ljava.lang.String;)Ljavax.crypto.SecretKey;
org.bouncycastle.jcajce.provider.symmetric.util.BaseSecretKeyFactory;->engineGetKeySpec(Ljavax.crypto.SecretKey; Ljava.lang.Class;)Ljava.security.spec.KeySpec;
org.bouncycastle.jcajce.provider.asymmetric.util.BaseCipherSpi;->engineUnwrap([B Ljava.lang.String; I)Ljava.security.Key;
org.bouncycastle.jcajce.provider.symmetric.util.BaseKeyGenerator;->engineGenerateKey()Ljavax.crypto.SecretKey;
org.bouncycastle.jcajce.provider.symmetric.DESede$KeyFactory;->engineGetKeySpec(Ljavax.crypto.SecretKey; Ljava.lang.Class;)Ljava.security.spec.KeySpec;
com.tencent.utils.SecretUtils;->decryptMode([B [B)[B
com.fido.android.framework.tm.core.prov.CryptoModule;->hmacSha256([B [B)[B
com.noknok.android.client.asm.core.uaf.EncodeUtil;->aesEncrypt([B [B)[B
org.bouncycastle.jcajce.provider.symmetric.DES$KeyFactory;->engineGenerateSecret(Ljava.security.spec.KeySpec;)Ljavax.crypto.SecretKey;
org.bouncycastle.jcajce.provider.symmetric.DES$KeyFactory;->engineGetKeySpec(Ljavax.crypto.SecretKey; Ljava.lang.Class;)Ljava.security.spec.KeySpec;
org.bouncycastle.jcajce.provider.symmetric.util.BaseWrapCipher;->engineUnwrap([B Ljava.lang.String; I)Ljava.security.Key;
okio.HashingSource;->(Lokio.Source; Lokio.ByteString; Ljava.lang.String;)V
m.framework.utils.Data;->AES128Decode([B [B)[B
org.bouncycastle.jcajce.provider.asymmetric.dh.KeyAgreementSpi;->engineGenerateSecret(Ljava.lang.String;)Ljavax.crypto.SecretKey;
com.baidu.location.f.b.a;->if(Ljava.lang.String; Ljava.lang.String; [B)[B
org.bouncycastle.jcajce.provider.symmetric.DES$KeyGenerator;->engineGenerateKey()Ljavax.crypto.SecretKey;

位置: classes3.dex
com.iflytek.cloud.thirdparty.g;->a(Ljava.lang.String;)[B

位置: assets/tdrBTCITICBank.jar
tendyron.provider.sdk.ionative.AKeyAlg;->Cipher(Ljava.lang.String; [B [B I [B)[B

参考案例:
http://www.wooyun.org/bugs/wooyun-2010-0105766
http://www.wooyun.org/bugs/wooyun-2015-0162907
http://www.wooyun.org/bugs/wooyun-2010-0187287

参考资料:
http://drops.wooyun.org/tips/15870
https://developer.android.com/training/articles/keystore.html


动态扫描发现风险点

风险等级 风险名称

服务端分析

风险等级 风险名称

警告

检测到?处XSS漏洞。
开发中...

警告

检测到?处XSS跨站漏洞。
开发中...

应用证书