LSPatch: A non-root Xposed framework fork from Xpatch

Last update: Jan 2, 2023

Related tags

Overview

Introduction

LSPatch fork from Xpatch.

LSPatch provides a way to insert dex and so into the target APK by repackaging. The following changes have been made since Xpatch

use LSPosed as Hook framework
Clean up the code
merge Xpatch's Loader and Patch into a single project

Usage

download the artifact
run java -jar lspatch.jar

Dev

Android Studio Arctic Fox | 2020.3.1 +

Build

gradlew build

Supported Android Versions

Min: Android 9
Max: In theory, same with LSPosed

Known issues

Can't solve the signature verification issue perfectly

Comments

[Bug] QQ新版apk修补出错
Steps to reproduce/复现步骤

选择com.tencent.mobileqq-8.9.25-3640-3834.apk 添加QAuxiliary模块本地模式修补

Expected behaviour/预期行为

正常应该是直接成功然后有安装按钮的

Actual behaviour/实际行为

实际出现错误

Xposed Module List/Xposed 模块列表

QAuxiliary

LSPatch version/LSPatch 版本

0.5.1（362）

Android version/Android 版本

13

Shizuku version/Shizuku 版本

12.14.0.r914.e88de6a

Version requirement/版本要求

[X] I am using latest debug CI version of LSPatch and enable verbose log/我正在使用最新 CI 调试版本且启用详细日志

Logs/日志

Launch patch , Processing /data/user/0/org.lsposed.lspatch/cache/apk/Android_8.9.25.10005_537145595_64.apk -> /data/user/0/org.lsposed.lspatch/cache/apk/Android_8.9.25.10005_537145595_64-362-lspatched.apk , apk path: /data/user/0/org.lsposed.lspatch/cache/apk/Android_8.9.25.10005_537145595_64.apk , Parsing original apk... , Register apk signer with default keystore... , Original signature 30820253308201bca00302010202044bbb0361300d06092a864886f70d0101050500306d310e300c060355040613054368696e61310f300d06035504080c06e58c97e4baac310f300d06035504070c06e58c97e4baac310f300d060355040a0c06e885bee8aeaf311b3019060355040b0c12e697a0e7babfe4b89ae58aa1e7b3bbe7bb9f310b30090603550403130251513020170d3130303430363039343831375a180f32323834303132303039343831375a306d310e300c060355040613054368696e61310f300d06035504080c06e58c97e4baac310f300d06035504070c06e58c97e4baac310f300d060355040a0c06e885bee8aeaf311b3019060355040b0c12e697a0e7babfe4b89ae58aa1e7b3bbe7bb9f310b300906035504031302515130819f300d06092a864886f70d010101050003818d0030818902818100a15e9756216f694c5915e0b529095254367c4e64faeff07ae13488d946615a58ddc31a415f717d019edc6d30b9603d3e2a7b3de0ab7e0cf52dfee39373bc472fa997027d798d59f81d525a69ecf156e885fd1e2790924386b2230cc90e3b7adc95603ddcf4c40bdc72f22db0f216a99c371d3bf89cba6578c60699e8a0d536950203010001300d06092a864886f70d01010505000381810094a9b80e80691645dd42d6611775a855f71bcd4d77cb60a8e29404035a5e00b21bcc5d4a562482126bd91b6b0e50709377ceb9ef8c2efd12cc8b16afd9a159f350bb270b14204ff065d843832720702e28b41491fbc3a205f5f2f42526d67f17614d8a974de6487b2c866efede3b4e49a0f916baa3c1336fd2ee1b1629652049 , original appComponentFactory class: androidx.core.app.CoreComponentFactory , Patching apk... , Adding config... , Adding metaloader dex... , Adding loader dex... , Adding native lib... , added assets/lspatch/so/x86_64/liblspatch.so , added assets/lspatch/so/x86/liblspatch.so , added assets/lspatch/so/armeabi-v7a/liblspatch.so , added assets/lspatch/so/arm64-v8a/liblspatch.so , Embedding modules... , - io.github.qauxv , Creating nested apk link... , Writing apk... , /data/user/0/org.lsposed.lspatch/cache/tempdir_2294739437204661460/temp_6011241502040241908.data: open failed: ENOENT (No such file or directory) , java.io.FileNotFoundException: /data/user/0/org.lsposed.lspatch/cache/tempdir_2294739437204661460/temp_6011241502040241908.data: open failed: ENOENT (No such file or directory) at libcore.io.IoBridge.open(IoBridge.java:574) at java.io.FileInputStream.(FileInputStream.java:160) at c6.f.j(Unknown Source:26) at a5.b.j(Unknown Source:4) at v4.k.j(Unknown Source:34) at c6.q.a(Unknown Source:19) at c6.q.(Unknown Source:8) at c6.f.j(Unknown Source:16) at a5.b.j(Unknown Source:4) at y4.y.S(Unknown Source:713) at y4.y.close(Unknown Source:4) at h9.a.a(Unknown Source:1008) at o8.b.j(Unknown Source:23) at l7.a.m(Unknown Source:5) at a8.d0.run(Unknown Source:105) at f8.e.run(Unknown Source:11) at g8.i.run(Unknown Source:2) at g8.a.run(Unknown Source:79) Caused by: android.system.ErrnoException: open failed: ENOENT (No such file or directory) at libcore.io.Linux.open(Native Method) at libcore.io.ForwardingOs.open(ForwardingOs.java:563) at libcore.io.BlockGuardOs.open(BlockGuardOs.java:274) at libcore.io.ForwardingOs.open(ForwardingOs.java:563) at android.app.ActivityThread$AndroidOs.open(ActivityThread.java:8234) at libcore.io.IoBridge.open(IoBridge.java:560) ... 17 more
bug
opened by y3341742136 34
[Bug] 331版本打包错误
Steps to reproduce/复现步骤

1.选择apk 2.选择模块 3.开始修补

Expected behaviour/预期行为

生成修补后的apk

Actual behaviour/实际行为

提示报错，无法修补任何apk

Xposed Module List/Xposed 模块列表

杜比大喇叭

LSPatch version/LSPatch 版本

0.3.1(330)

Android version/Android 版本

13

Shizuku version/Shizuku 版本

12.10.0

Version requirement/版本要求

[X] I am using latest debug CI version of LSPatch and enable verbose log/我正在使用最新 CI 调试版本且启用详细日志

Logs/日志

bug
opened by DoveBoy 27
应用闪退问题

系统版本：Magic UI 6.0 / Android 12 打包网易云，闪退

[02-13 00:30:14.416 19945:19945 E/LoadedApk] Unable to instantiate appComponentFactory java.lang.ClassNotFoundException: Didn't find class "" on path: DexPathList[[zip file "/data/user/0/com.netease.cloudmusic/cache/lspatch/origin/11870886"],nativeLibraryDirectories=[/data/app/~~GTQUqu0TWg9hK0SIxQ1Zng==/com.netease.cloudmusic-xB_qZ-FwE3C5H16QB6f6qw==/lib/arm64, /system/fake-libs64, /data/user/0/com.netease.cloudmusic/cache/lspatch/origin/11870886!/lib/arm64-v8a, /system/lib64, /product_h/lib64, /system_ext/lib64]] at dalvik.system.BaseDexClassLoader.findClass(BaseDexClassLoader.java:218) at java.lang.ClassLoader.loadClass(ClassLoader.java:379) at java.lang.ClassLoader.loadClass(ClassLoader.java:312) at android.app.LoadedApk.createAppFactory(LoadedApk.java:276) at android.app.LoadedApk.createOrUpdateClassLoaderLocked(LoadedApk.java:1098) at android.app.LoadedApk.getClassLoader(LoadedApk.java:1185) at org.lsposed.lspatch.loader.LSPLoader.initModules(LSPLoader.java:19) at org.lsposed.lspatch.loader.LSPApplication.onLoad(LSPApplication.java:113) at java.lang.Runtime.nativeLoad(Native Method) at java.lang.Runtime.nativeLoad(Runtime.java:1121) at java.lang.Runtime.load0(Runtime.java:927) at java.lang.System.load(System.java:1621) at org.lsposed.lspatch.appstub.LSPAppComponentFactoryStub.(LSPAppComponentFactoryStub.java:38) at java.lang.Class.newInstance(Native Method) at android.app.LoadedApk.createAppFactory(LoadedApk.java:276) at android.app.LoadedApk.createOrUpdateClassLoaderLocked(LoadedApk.java:1098) at android.app.LoadedApk.getClassLoader(LoadedApk.java:1185) at android.app.LoadedApk.getResources(LoadedApk.java:1463) at android.app.ContextImpl.createAppContext(ContextImpl.java:3196) at android.app.ContextImpl.createAppContext(ContextImpl.java:3184) at android.app.ActivityThread.handleBindApplication(ActivityThread.java:7571) at android.app.ActivityThread.access$2700(ActivityThread.java:279) at android.app.ActivityThread$H.handleMessage(ActivityThread.java:2506) at android.os.Handler.dispatchMessage(Handler.java:109) at android.os.Looper.loopOnce(Looper.java:206) at android.os.Looper.loop(Looper.java:296) at android.app.ActivityThread.main(ActivityThread.java:8899) at java.lang.reflect.Method.invoke(Native Method) at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:569) at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:976)

opened by takoyakiwhite 10
不支持接口IXposedHookInitPackageResources吗？

因为需要注入资源到目标app，入口实现了IXposedHookZygoteIni和IXposedHookInitPackageResources这两个接口，但是发现打包完之后handleInitPackageResources没有回调，initZygote是有回调的。请问是不支持IXposedHookInitPackageResources吗？

ps： LSPosed是正常的，两个接口都有回调。

opened by tpnet 9
[Feature Request] 增加使用shizuku读取应用列表的可选项

Is your feature request related to a problem?/你的请求是否与某个问题相关？

在OPPO Watch 3中禁止应用读取应用列表，同时在一些定制ROM中可能也存在不开放应用列表权限或应用列表不全的情况

Describe the solution you'd like/描述你想要的解决方案

希望在设置中增加『使用shizuku读取应用列表』的可选项及对应功能

Additional context/其他信息

No response
enhancement

opened by jiwangyihao 5

[BUG?] 微信无法登录

微信版本：8.0.23 2160 arm64 LSPatch 版本：0.3.1(308) 修补方式：本地模式系统信息：

API 版本
93
LSPatch 版本
0.3.1 (308)
框架版本
1.8.3 (6563)
系统版本
10 (API 29)
设备
HUAWEI HONOR BKL-AL20 
系统架构
arm64-v8a

表现：首次安装完成启动时可以进入登录页面，登录时输入登录信息并点击登录后无反应。使用正常版本时这里会出现滑动验证，已尝试手机号+验证码，手机号+密码，QQ号+密码的登录方式，表现均如此。强行停止后再次启动将闪退，adb logcat -s com.tencent.mm 捕获的日志记录如下：

05-29 13:19:23.936  1676  1676 E com.tencent.mm: LoadAppImageStartupCache enabled : 1
05-29 13:19:23.938  1676  1676 I com.tencent.mm: Reinit property: dalvik.vm.checkjni= false
05-29 13:19:23.938  1676  1676 I com.tencent.mm: ReInitProperties: persist.vm.debug.dumpapi= false
05-29 13:19:23.939  1676  1676 E com.tencent.mm: Not starting debugger since process cannot load the jdwp agent.
05-29 13:19:23.979  1676  1676 I com.tencent.mm: The ClassLoaderContext is a special shared library.
05-29 13:19:24.298  1676  1676 W com.tencent.mm: Unsupported class loader
05-29 13:19:24.298  1676  1676 W com.tencent.mm: Could not establish class loader context
05-29 13:19:24.413  1676  1676 W com.tencent.mm: Unsupported class loader
05-29 13:19:24.413  1676  1676 W com.tencent.mm: Could not establish class loader context
05-29 13:19:24.442  1676  1676 W com.tencent.mm: Unsupported class loader
05-29 13:19:24.442  1676  1676 W com.tencent.mm: Could not establish class loader context
05-29 13:19:24.789  1676  1676 W com.tencent.mm: Unsupported class loader
05-29 13:19:24.789  1676  1676 W com.tencent.mm: Could not establish class loader context
05-29 13:19:24.805  1676  1676 W com.tencent.mm: Unsupported class loader
05-29 13:19:24.805  1676  1676 W com.tencent.mm: Could not establish class loader context
05-29 13:19:24.863  1676  1676 W com.tencent.mm: Unsupported class loader
05-29 13:19:24.863  1676  1676 W com.tencent.mm: Could not establish class loader context
05-29 13:19:24.919  1676  1676 W com.tencent.mm: Unsupported class loader
05-29 13:19:24.920  1676  1676 W com.tencent.mm: Could not establish class loader context
05-29 13:19:24.980  1676  1676 W com.tencent.mm: Failed to determine odex file name: Dex location /data/user/0/com.tencent.mm/cache/lspatch/origin/1690855477 has no extension.
05-29 13:19:28.909  1676  1710 I com.tencent.mm: Thread[6,tid=1710,WaitingInMainSignalCatcherLoop,Thread*=0x788881b000,peer=0x181014d0,"Signal Catcher"]: reacting to signal 3
05-29 13:19:28.909  1676  1710 I com.tencent.mm: 
05-29 13:19:28.919  1676  1710 F com.tencent.mm: oat.cc:384] Check failed: key_value != nullptr compiler-filter not found in oat header
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668] Runtime aborting...
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668] Dumping all threads without mutator lock held
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668] All threads:
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668] DALVIK THREADS (18):
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668] "Signal Catcher" prio=5 tid=6 Runnable
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   | group="" sCount=0 dsCount=0 flags=0 obj=0x181014d0 self=0x788881b000
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   | sysTid=1710 nice=0 cgrp=default sched=0/0 handle=0x7889988d50
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   | state=R schedstat=( 24100520 110937 9 ) utm=1 stm=1 core=5 HZ=100
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   | stack=0x7889892000-0x7889894000 stackSize=991KB
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   | held mutexes= "abort lock" "OatFile manager lock"(shared held) "mutator lock"(shared held)
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #00 pc 000000000042f8e8  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 366000) (art::DumpNativeStack(std::__1::basic_ostream<char, std::__1::char_traits<char>>&, int, BacktraceMap*, char const*, art::ArtMethod*, void*, bool)+140)
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #01 pc 0000000000523590  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::Thread::DumpStack(std::__1::basic_ostream<char, std::__1::char_traits<char>>&, bool, BacktraceMap*, bool) const+508)
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #02 pc 000000000053e75c  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::DumpCheckpoint::Run(art::Thread*)+844)
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #03 pc 000000000053735c  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::ThreadList::RunCheckpoint(art::Closure*, art::Closure*)+504)
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #04 pc 0000000000536744  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::ThreadList::Dump(std::__1::basic_ostream<char, std::__1::char_traits<char>>&, bool)+1048)
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #05 pc 00000000004e0a48  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::Runtime::Abort(char const*)+1700)
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #06 pc 000000000000c600  /system/lib64/libbase.so (android::base::LogMessage::~LogMessage()+684)
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #07 pc 000000000046c89c  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 366000) (art::OatHeader::GetCompilerFilter() const+280)
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #08 pc 0000000000474320  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 366000) (art::OatFile::GetCompilerFilter() const+40)
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #09 pc 0000000000482c24  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 482000) (art::OatFileManager::DumpForSigQuit(std::__1::basic_ostream<char, std::__1::char_traits<char>>&)+376)
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #10 pc 00000000004ee47c  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::Runtime::DumpForSigQuit(std::__1::basic_ostream<char, std::__1::char_traits<char>>&)+104)
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #11 pc 000000000050250c  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::SignalCatcher::HandleSigQuit()+1356)
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #12 pc 0000000000501558  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::SignalCatcher::Run(void*)+268)
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #13 pc 00000000000cf7c0  /apex/com.android.runtime/lib64/bionic/libc.so!libc.so (offset bd000) (__pthread_start(void*)+36)
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #14 pc 00000000000721a8  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   (no managed stack frames)
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668] 
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668] "main" prio=10 tid=1 Native
05-29 13:19:29.059  1676  1710 F com.tencent.mm: runtime.cc:668]   | group="" sCount=1 dsCount=0 flags=1 obj=0x73f89540 self=0x7895410800
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   | sysTid=1676 nice=-10 cgrp=default sched=1073741825/2 handle=0x791c37a0d0
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   | state=R schedstat=( 4843161460 4194271 45 ) utm=463 stm=20 core=4 HZ=100
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   | stack=0x7ffbc60000-0x7ffbc62000 stackSize=8192KB
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   | held mutexes=
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   kernel: (couldn't read /proc/self/task/1676/stack)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #00 pc 000000000002ac74  /apex/com.android.runtime/lib64/libdexfile.so (art::DexFileVerifier::CheckIntraClassDataItemMethods(art::ClassAccessor::Method*, unsigned long, art::ClassAccessor::Method*, unsigned long, bool*, art::dex::TypeIndex*, art::dex::ClassDef const**)+396)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #01 pc 000000000002adc4  /apex/com.android.runtime/lib64/libdexfile.so (art::DexFileVerifier::CheckIntraClassDataItem()+256)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #02 pc 00000000000326bc  /apex/com.android.runtime/lib64/libdexfile.so (_ZN3art15DexFileVerifier24CheckIntraSectionIterateILNS_7DexFile11MapItemTypeE8192EEEbmj+60)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #03 pc 000000000002cab0  /apex/com.android.runtime/lib64/libdexfile.so (art::DexFileVerifier::CheckIntraSection()+268)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #04 pc 0000000000026f00  /apex/com.android.runtime/lib64/libdexfile.so (art::DexFileVerifier::Verify(art::DexFile const*, unsigned char const*, unsigned long, char const*, bool, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>>*)+168)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #05 pc 0000000000023c10  /apex/com.android.runtime/lib64/libdexfile.so (art::DexFileLoader::OpenCommon(unsigned char const*, unsigned long, unsigned char const*, unsigned long, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>> const&, unsigned int, art::OatDexFile const*, bool, bool, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>>*, std::__1::unique_ptr<art::DexFileContainer, std::__1::default_delete<art::DexFileContainer>>, art::DexFileLoader::VerifyResult*)+308)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #06 pc 000000000001af00  /apex/com.android.runtime/lib64/libdexfile.so (art::ArtDexFileLoader::OpenOneDexFileFromZip(art::ZipArchive const&, char const*, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>> const&, bool, bool, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>>*, art::DexFileLoaderErrorCode*) const+944)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #07 pc 000000000001a868  /apex/com.android.runtime/lib64/libdexfile.so (art::ArtDexFileLoader::OpenAllDexFilesFromZip(art::ZipArchive const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>> const&, bool, bool, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>>*, std::__1::vector<std::__1::unique_ptr<art::DexFile const, std::__1::default_delete<art::DexFile const>>, std::__1::allocator<std::__1::unique_ptr<art::DexFile const, std::__1::default_delete<art::DexFile const>>>>*) const+392)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #08 pc 000000000001a57c  /apex/com.android.runtime/lib64/libdexfile.so (art::ArtDexFileLoader::OpenZip(int, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>> const&, bool, bool, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>>*, std::__1::vector<std::__1::unique_ptr<art::DexFile const, std::__1::default_delete<art::DexFile const>>, std::__1::allocator<std::__1::unique_ptr<art::DexFile const, std::__1::default_delete<art::DexFile const>>>>*) const+248)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #09 pc 000000000001a248  /apex/com.android.runtime/lib64/libdexfile.so (art::ArtDexFileLoader::OpenWithMagic(unsigned int, int, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>> const&, bool, bool, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>>*, std::__1::vector<std::__1::unique_ptr<art::DexFile const, std::__1::default_delete<art::DexFile const>>, std::__1::allocator<std::__1::unique_ptr<art::DexFile const, std::__1::default_delete<art::DexFile const>>>>*) const+284)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #10 pc 000000000001a0e0  /apex/com.android.runtime/lib64/libdexfile.so (art::ArtDexFileLoader::Open(char const*, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>> const&, bool, bool, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>>*, std::__1::vector<std::__1::unique_ptr<art::DexFile const, std::__1::default_delete<art::DexFile const>>, std::__1::allocator<std::__1::unique_ptr<art::DexFile const, std::__1::default_delete<art::DexFile const>>>>*) const+148)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #11 pc 0000000000480dd0  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 366000) (art::OatFileManager::OpenDexFilesFromOat(char const*, _jobject*, _jobjectArray*, art::OatFile const**, std::__1::vector<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>>, std::__1::allocator<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>>>>*)+9444)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #12 pc 0000000000433998  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 366000) (art::DexFile_openDexFileNative(_JNIEnv*, _jclass*, _jstring*, _jstring*, int, _jobject*, _jobjectArray*)+396)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at dalvik.system.DexFile.openDexFileNative(Native method)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at dalvik.system.DexFile.openDexFile(DexFile.java:365)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.reflect.Method.invoke(Native method)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at org.lsposed.lspd.nativebridge.HookBridge.invokeOriginalMethod(Native method)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at de.robv.android.xposed.XposedBridge$AdditionalHookInfo.callback(XposedBridge.java:471)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at LSPHooker_.openDexFile(LSP:-1)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at dalvik.system.DexFile.<init>(DexFile.java:107)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at dalvik.system.DexFile.<init>(DexFile.java:80)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at dalvik.system.DexPathList.loadDexFile(DexPathList.java:445)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at dalvik.system.DexPathList.makeDexElements(DexPathList.java:404)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at dalvik.system.DexPathList.<init>(DexPathList.java:164)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at dalvik.system.BaseDexClassLoader.<init>(BaseDexClassLoader.java:131)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at dalvik.system.BaseDexClassLoader.<init>(BaseDexClassLoader.java:106)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at dalvik.system.PathClassLoader.<init>(PathClassLoader.java:74)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at com.android.internal.os.ClassLoaderFactory.createClassLoader(ClassLoaderFactory.java:87)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at com.android.internal.os.ClassLoaderFactory.createClassLoader(ClassLoaderFactory.java:116)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at android.app.ApplicationLoaders.getClassLoader(ApplicationLoaders.java:152)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   - locked <0x017842a0> (a android.util.ArrayMap)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at android.app.ApplicationLoaders.getClassLoaderWithSharedLibraries(ApplicationLoaders.java:93)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at android.app.LoadedApk.createOrUpdateClassLoaderLocked(LoadedApk.java:999)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at android.app.LoadedApk.getClassLoader(LoadedApk.java:1129)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   - locked <0x0e9af4be> (a android.app.LoadedApk)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at org.lsposed.lspatch.loader.LSPLoader.initModules(LSPLoader.java:19)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at org.lsposed.lspatch.loader.LSPApplication.onLoad(LSPApplication.java:101)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Runtime.nativeLoad(Native method)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Runtime.nativeLoad(Runtime.java:1115)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Runtime.load0(Runtime.java:936)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   - locked <0x0c414e59> (a java.lang.Runtime)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.System.load(System.java:1632)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at org.lsposed.lspatch.appstub.LSPAppComponentFactoryStub.<clinit>(SourceFile:-1)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Class.newInstance(Native method)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at android.app.LoadedApk.createAppFactory(LoadedApk.java:270)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at android.app.LoadedApk.createOrUpdateClassLoaderLocked(LoadedApk.java:1005)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at android.app.LoadedApk.getClassLoader(LoadedApk.java:1129)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   - locked <0x0f83aa1e> (a android.app.LoadedApk)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at android.app.LoadedApk.getResources(LoadedApk.java:1419)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at android.app.ContextImpl.createAppContext(ContextImpl.java:2662)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at android.app.ContextImpl.createAppContext(ContextImpl.java:2644)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at android.app.ActivityThread.handleBindApplication(ActivityThread.java:7452)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at android.app.ActivityThread.access$2600(ActivityThread.java:260)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at android.app.ActivityThread$H.handleMessage(ActivityThread.java:2435)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at android.os.Handler.dispatchMessage(Handler.java:110)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at android.os.Looper.loop(Looper.java:219)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at android.app.ActivityThread.main(ActivityThread.java:8668)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.reflect.Method.invoke(Native method)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:513)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:1109)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668] 
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668] "Runtime worker thread 0" prio=5 tid=2 Native (still starting up)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   | group="" sCount=1 dsCount=0 flags=1 obj=0x0 self=0x7888826000
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   | sysTid=1702 nice=0 cgrp=default sched=0/0 handle=0x791ae0fd40
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   | state=S schedstat=( 309896 46875 4 ) utm=0 stm=0 core=5 HZ=100
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   | stack=0x791ae01000-0x791ae03000 stackSize=63KB
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   | held mutexes=
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   kernel: (couldn't read /proc/self/task/1702/stack)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #00 pc 000000000006cbbc  /apex/com.android.runtime/lib64/bionic/libc.so (syscall+28)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #01 pc 000000000015c2a0  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 158000) (art::ConditionVariable::WaitHoldingLocks(art::Thread*)+156)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #02 pc 0000000000540244  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::ThreadPool::GetTask(art::Thread*)+276)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #03 pc 000000000053f514  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::ThreadPoolWorker::Run()+80)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #04 pc 000000000053f018  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::ThreadPoolWorker::Callback(void*)+148)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #05 pc 00000000000cf7c0  /apex/com.android.runtime/lib64/bionic/libc.so!libc.so (offset bd000) (__pthread_start(void*)+36)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #06 pc 00000000000721a8  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   (no managed stack frames)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668] 
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668] "Runtime worker thread 1" prio=5 tid=3 Native (still starting up)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   | group="" sCount=1 dsCount=0 flags=1 obj=0x0 self=0x7895473400
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   | sysTid=1707 nice=0 cgrp=default sched=0/0 handle=0x7918776d40
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   | state=S schedstat=( 116666 146875 3 ) utm=0 stm=0 core=5 HZ=100
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   | stack=0x7918768000-0x791876a000 stackSize=63KB
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   | held mutexes=
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   kernel: (couldn't read /proc/self/task/1707/stack)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #00 pc 000000000006cbbc  /apex/com.android.runtime/lib64/bionic/libc.so (syscall+28)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #01 pc 000000000015c2a0  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 158000) (art::ConditionVariable::WaitHoldingLocks(art::Thread*)+156)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #02 pc 0000000000540244  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::ThreadPool::GetTask(art::Thread*)+276)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #03 pc 000000000053f514  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::ThreadPoolWorker::Run()+80)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #04 pc 000000000053f018  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::ThreadPoolWorker::Callback(void*)+148)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #05 pc 00000000000cf7c0  /apex/com.android.runtime/lib64/bionic/libc.so!libc.so (offset bd000) (__pthread_start(void*)+36)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #06 pc 00000000000721a8  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668]   (no managed stack frames)
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668] 
05-29 13:19:29.060  1676  1710 F com.tencent.mm: runtime.cc:668] "Jit thread pool worker thread 0" prio=5 tid=4 Native
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | group="" sCount=1 dsCount=0 flags=1 obj=0x18101458 self=0x7888841800
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | sysTid=1697 nice=0 cgrp=default sched=0/0 handle=0x7889a8dd40
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | state=S schedstat=( 2341665 737500 7 ) utm=0 stm=0 core=4 HZ=100
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | stack=0x788998f000-0x7889991000 stackSize=1023KB
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | held mutexes=
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   kernel: (couldn't read /proc/self/task/1697/stack)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #00 pc 000000000006cbbc  /apex/com.android.runtime/lib64/bionic/libc.so (syscall+28)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #01 pc 000000000015c2a0  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 158000) (art::ConditionVariable::WaitHoldingLocks(art::Thread*)+156)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #02 pc 0000000000540244  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::ThreadPool::GetTask(art::Thread*)+276)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #03 pc 000000000053f554  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::ThreadPoolWorker::Run()+144)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #04 pc 000000000053f018  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::ThreadPoolWorker::Callback(void*)+148)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #05 pc 00000000000cf7c0  /apex/com.android.runtime/lib64/bionic/libc.so!libc.so (offset bd000) (__pthread_start(void*)+36)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #06 pc 00000000000721a8  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   (no managed stack frames)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668] 
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668] "Runtime worker thread 3" prio=5 tid=5 Native (still starting up)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | group="" sCount=1 dsCount=0 flags=1 obj=0x0 self=0x7884371400
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | sysTid=1709 nice=0 cgrp=default sched=0/0 handle=0x79181e5d40
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | state=S schedstat=( 81250 234896 4 ) utm=0 stm=0 core=6 HZ=100
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | stack=0x79181d7000-0x79181d9000 stackSize=63KB
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | held mutexes=
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   kernel: (couldn't read /proc/self/task/1709/stack)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #00 pc 000000000006cbbc  /apex/com.android.runtime/lib64/bionic/libc.so (syscall+28)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #01 pc 000000000015c2a0  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 158000) (art::ConditionVariable::WaitHoldingLocks(art::Thread*)+156)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #02 pc 0000000000540244  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::ThreadPool::GetTask(art::Thread*)+276)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #03 pc 000000000053f514  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::ThreadPoolWorker::Run()+80)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #04 pc 000000000053f018  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::ThreadPoolWorker::Callback(void*)+148)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #05 pc 00000000000cf7c0  /apex/com.android.runtime/lib64/bionic/libc.so!libc.so (offset bd000) (__pthread_start(void*)+36)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #06 pc 00000000000721a8  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   (no managed stack frames)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668] 
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668] "Runtime worker thread 2" prio=5 tid=7 Native (still starting up)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | group="" sCount=1 dsCount=0 flags=1 obj=0x0 self=0x787dc94400
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | sysTid=1708 nice=0 cgrp=default sched=0/0 handle=0x791834bd40
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | state=S schedstat=( 93749 327604 6 ) utm=0 stm=0 core=5 HZ=100
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | stack=0x791833d000-0x791833f000 stackSize=63KB
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | held mutexes=
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   kernel: (couldn't read /proc/self/task/1708/stack)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #00 pc 000000000006cbbc  /apex/com.android.runtime/lib64/bionic/libc.so (syscall+28)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #01 pc 000000000015c2a0  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 158000) (art::ConditionVariable::WaitHoldingLocks(art::Thread*)+156)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #02 pc 0000000000540244  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::ThreadPool::GetTask(art::Thread*)+276)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #03 pc 000000000053f514  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::ThreadPoolWorker::Run()+80)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #04 pc 000000000053f018  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 483000) (art::ThreadPoolWorker::Callback(void*)+148)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #05 pc 00000000000cf7c0  /apex/com.android.runtime/lib64/bionic/libc.so!libc.so (offset bd000) (__pthread_start(void*)+36)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #06 pc 00000000000721a8  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   (no managed stack frames)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668] 
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668] "ReferenceQueueDaemon" prio=5 tid=8 Waiting
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | group="" sCount=1 dsCount=0 flags=1 obj=0x18101548 self=0x78955c4400
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | sysTid=1712 nice=4 cgrp=default sched=0/0 handle=0x7889782d50
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | state=S schedstat=( 693750 9896 5 ) utm=0 stm=0 core=6 HZ=100
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | stack=0x7889680000-0x7889682000 stackSize=1039KB
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | held mutexes=
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   kernel: (couldn't read /proc/self/task/1712/stack)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #00 pc 000000000006cbbc  /apex/com.android.runtime/lib64/bionic/libc.so (syscall+28)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #01 pc 000000000015c2a0  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 158000) (art::ConditionVariable::WaitHoldingLocks(art::Thread*)+156)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #02 pc 00000000004292e4  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 366000) (art::Monitor::Wait(art::Thread*, long, int, bool, art::ThreadState)+660)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #03 pc 000000000042af90  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 366000) (art::Monitor::Wait(art::Thread*, art::ObjPtr<art::mirror::Object>, long, int, bool, art::ThreadState)+284)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Object.wait(Native method)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   - waiting on <0x0a18c2ff> (a java.lang.Class<java.lang.ref.ReferenceQueue>)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Object.wait(Object.java:442)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Object.wait(Object.java:568)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Daemons$ReferenceQueueDaemon.runInternal(Daemons.java:215)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   - locked <0x0a18c2ff> (a java.lang.Class<java.lang.ref.ReferenceQueue>)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Daemons$Daemon.run(Daemons.java:137)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Thread.run(Thread.java:929)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668] 
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668] "FinalizerDaemon" prio=5 tid=9 Waiting
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | group="" sCount=1 dsCount=0 flags=1 obj=0x181015c0 self=0x789552d000
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | sysTid=1714 nice=4 cgrp=default sched=0/0 handle=0x7889679d50
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | state=S schedstat=( 373958 0 5 ) utm=0 stm=0 core=5 HZ=100
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | stack=0x7889577000-0x7889579000 stackSize=1039KB
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | held mutexes=
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   kernel: (couldn't read /proc/self/task/1714/stack)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #00 pc 000000000006cbbc  /apex/com.android.runtime/lib64/bionic/libc.so (syscall+28)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #01 pc 000000000015c2a0  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 158000) (art::ConditionVariable::WaitHoldingLocks(art::Thread*)+156)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #02 pc 00000000004292e4  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 366000) (art::Monitor::Wait(art::Thread*, long, int, bool, art::ThreadState)+660)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #03 pc 000000000042af90  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 366000) (art::Monitor::Wait(art::Thread*, art::ObjPtr<art::mirror::Object>, long, int, bool, art::ThreadState)+284)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Object.wait(Native method)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   - waiting on <0x082ee8cc> (a java.lang.Object)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Object.wait(Object.java:442)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.ref.ReferenceQueue.remove(ReferenceQueue.java:190)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   - locked <0x082ee8cc> (a java.lang.Object)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.ref.ReferenceQueue.remove(ReferenceQueue.java:211)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Daemons$FinalizerDaemon.runInternal(Daemons.java:271)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Daemons$Daemon.run(Daemons.java:137)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Thread.run(Thread.java:929)
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668] 
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668] "HeapTaskDaemon" prio=5 tid=10 WaitingForCheckPointsToRun
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | group="" sCount=1 dsCount=0 flags=1 obj=0x18101cd8 self=0x78955bf000
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | sysTid=1711 nice=4 cgrp=default sched=0/0 handle=0x788988bd50
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | state=S schedstat=( 36918230 261458 7 ) utm=3 stm=0 core=6 HZ=100
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | stack=0x7889789000-0x788978b000 stackSize=1039KB
05-29 13:19:29.061  1676  1710 F com.tencent.mm: runtime.cc:668]   | held mutexes=
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   kernel: (couldn't read /proc/self/task/1711/stack)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #00 pc 000000000006cbbc  /apex/com.android.runtime/lib64/bionic/libc.so (syscall+28)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #01 pc 000000000015c2a0  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 158000) (art::ConditionVariable::WaitHoldingLocks(art::Thread*)+156)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #02 pc 0000000000158d58  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 158000) (_ZN3art7Barrier9IncrementILNS0_12LockHandlingE1EEEvPNS_6ThreadEi+96)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #03 pc 00000000002201d4  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 17f000) (art::gc::collector::ConcurrentCopying::ActivateReadBarrierEntrypoints()+520)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #04 pc 000000000021f2b0  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 17f000) (art::gc::collector::ConcurrentCopying::RunPhases()+588)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #05 pc 000000000023deb4  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 17f000) (art::gc::collector::GarbageCollector::Run(art::gc::GcCause, bool)+288)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #06 pc 000000000025d37c  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 17f000) (art::gc::Heap::CollectGarbageInternal(art::gc::collector::GcType, art::gc::GcCause, bool)+2740)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #07 pc 000000000025b318  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 17f000) (art::gc::Heap::DoPendingCollectorTransition()+100)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #08 pc 00000000002758a8  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 17f000) (art::gc::Heap::CollectorTransitionTask::Run(art::Thread*)+36)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #09 pc 00000000002a8230  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 17f000) (art::gc::TaskProcessor::RunAllTasks(art::Thread*)+64)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   at dalvik.system.VMRuntime.runHeapTasks(Native method)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Daemons$HeapTaskDaemon.runInternal(Daemons.java:523)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Daemons$Daemon.run(Daemons.java:137)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Thread.run(Thread.java:929)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668] 
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668] "FinalizerWatchdogDaemon" prio=5 tid=11 Sleeping
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   | group="" sCount=1 dsCount=0 flags=1 obj=0x18101638 self=0x789552ec00
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   | sysTid=1715 nice=4 cgrp=default sched=0/0 handle=0x7889570d50
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   | state=S schedstat=( 120834 31250 4 ) utm=0 stm=0 core=6 HZ=100
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   | stack=0x788946e000-0x7889470000 stackSize=1039KB
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   | held mutexes=
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   kernel: (couldn't read /proc/self/task/1715/stack)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #00 pc 000000000006cbc0  /apex/com.android.runtime/lib64/bionic/libc.so (syscall+32)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #01 pc 000000000015c6e0  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 158000) (art::ConditionVariable::TimedWait(art::Thread*, long, int)+176)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #02 pc 0000000000429304  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 366000) (art::Monitor::Wait(art::Thread*, long, int, bool, art::ThreadState)+692)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #03 pc 000000000042af90  /apex/com.android.runtime/lib64/libart.so!libart.so (offset 366000) (art::Monitor::Wait(art::Thread*, art::ObjPtr<art::mirror::Object>, long, int, bool, art::ThreadState)+284)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Thread.sleep(Native method)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   - sleeping on <0x00af7715> (a java.lang.Object)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Thread.sleep(Thread.java:443)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   - locked <0x00af7715> (a java.lang.Object)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Thread.sleep(Thread.java:359)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Daemons$FinalizerWatchdogDaemon.sleepForMillis(Daemons.java:383)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Daemons$FinalizerWatchdogDaemon.waitForFinalization(Daemons.java:411)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Daemons$FinalizerWatchdogDaemon.runInternal(Daemons.java:323)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Daemons$Daemon.run(Daemons.java:137)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.lang.Thread.run(Thread.java:929)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668] 
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668] "Binder:1676_1" prio=5 tid=12 Native
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   | group="" sCount=1 dsCount=0 flags=1 obj=0x181016b0 self=0x7888867800
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   | sysTid=1716 nice=0 cgrp=default sched=0/0 handle=0x7889369d50
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   | state=S schedstat=( 4295312 6963542 18 ) utm=0 stm=0 core=7 HZ=100
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   | stack=0x7889273000-0x7889275000 stackSize=991KB
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   | held mutexes=
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   kernel: (couldn't read /proc/self/task/1716/stack)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #00 pc 00000000000baf44  /apex/com.android.runtime/lib64/bionic/libc.so (__ioctl+4)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #01 pc 0000000000078a84  /apex/com.android.runtime/lib64/bionic/libc.so (ioctl+132)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #02 pc 0000000000064f84  /system/lib64/libbinder.so (android::IPCThreadState::talkWithDriver(bool)+256)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #03 pc 0000000000065158  /system/lib64/libbinder.so (android::IPCThreadState::getAndExecuteCommand()+24)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #04 pc 0000000000065a78  /system/lib64/libbinder.so (android::IPCThreadState::joinThreadPool(bool)+60)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #05 pc 000000000008bbb0  /system/lib64/libbinder.so (android::PoolThread::threadLoop()+24)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #06 pc 00000000000136d4  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+288)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #07 pc 0000000000104fec  /system/lib64/libandroid_runtime.so (android::AndroidRuntime::javaThreadShell(void*)+140)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #08 pc 00000000000cf7c0  /apex/com.android.runtime/lib64/bionic/libc.so!libc.so (offset bd000) (__pthread_start(void*)+36)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #09 pc 00000000000721a8  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   (no managed stack frames)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668] 
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668] "Binder:1676_2" prio=5 tid=13 Native
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   | group="" sCount=1 dsCount=0 flags=1 obj=0x18101728 self=0x787dcbd400
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   | sysTid=1717 nice=0 cgrp=default sched=0/0 handle=0x788926cd50
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   | state=S schedstat=( 4438020 3490625 8 ) utm=0 stm=0 core=7 HZ=100
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   | stack=0x7889176000-0x7889178000 stackSize=991KB
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   | held mutexes=
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   kernel: (couldn't read /proc/self/task/1717/stack)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #02 pc 0000000000064f84  /system/lib64/libbinder.so (android::IPCThreadState::talkWithDriver(bool)+256)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #08 pc 00000000000cf7c0  /apex/com.android.runtime/lib64/bionic/libc.so!libc.so (offset bd000) (__pthread_start(void*)+36)
05-29 13:19:29.062  1676  1710 F com.tencent.mm: runtime.cc:668]   | held mutexes=
05-29 13:19:29.063  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #02 pc 0000000000064f84  /system/lib64/libbinder.so (android::IPCThreadState::talkWithDriver(bool)+256)
05-29 13:19:29.063  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #05 pc 000000000008bbb0  /system/lib64/libbinder.so (android::PoolThread::threadLoop()+24)
05-29 13:19:29.063  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #08 pc 00000000000cf7c0  /apex/com.android.runtime/lib64/bionic/libc.so!libc.so (offset bd000) (__pthread_start(void*)+36)
05-29 13:19:29.063  1676  1710 F com.tencent.mm: runtime.cc:668]   | state=S schedstat=( 11372395 13951565 29 ) utm=1 stm=0 core=5 HZ=100
05-29 13:19:29.063  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #00 pc 000000000006cbbc  /apex/com.android.runtime/lib64/bionic/libc.so (syscall+28)
05-29 13:19:29.063  1676  1710 F com.tencent.mm: runtime.cc:668]   | sysTid=1726 nice=0 cgrp=default sched=0/0 handle=0x788469fd50
05-29 13:19:29.063  1676  1710 F com.tencent.mm: runtime.cc:668]   at java.util.concurrent.ForkJoinWorkerThread.run(ForkJoinWorkerThread.java:157)
05-29 13:19:29.063  1676  1710 F com.tencent.mm: runtime.cc:668]   | sysTid=1727 nice=-10 cgrp=default sched=0/0 handle=0x782906cd40
05-29 13:19:29.064  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #04 pc 000000000000c600  /system/lib64/libbase.so (android::base::LogMessage::~LogMessage()+684)
05-29 13:19:29.064  1676  1710 F com.tencent.mm: runtime.cc:668]   native: #11 pc 00000000000cf7c0  /apex/com.android.runtime/lib64/bionic/libc.so!libc.so (offset bd000) (__pthread_start(void*)+36)
05-29 13:19:29.064  1676  1710 F com.tencent.mm: runtime.cc:668] 
05-29 13:19:29.984  1676  1728 E com.tencent.mm: [HOTFIX][Report]Bind hotfix monitor service fail!

opened by zhanghua000 5

[Bug] Failed to sign V1 signature with manager

本地模式下管理页中已修补程序无法进行操作，例如模块作用域设置
设置页中自定义签名密钥库使用自带文件管理器选择jks后无法正常获取路径，提示密钥库类型错误
创建应用签名时只能选择V2，V1或者V1+V2。报错如下

Launch patch
, Processing /data/user/0/org.lsposed.lspatch/cache/apk/weixin8022android2140_arm64.apk -> /data/user/0/org.lsposed.lspatch/cache/apk/weixin8022android2140_arm64-308-lspatched.apk
, apk path: /data/user/0/org.lsposed.lspatch/cache/apk/weixin8022android2140_arm64.apk
, Parsing original apk...
, Register apk signer with default keystore...
, Original signature
308202eb30820254a00302010202044d36f7a4300d06092a864886f70d01010505003081b9310b300906035504061302383631123010060355040813094775616e67646f6e673111300f060355040713085368656e7a68656e31353033060355040a132c54656e63656e7420546563686e6f6c6f6779285368656e7a68656e2920436f6d70616e79204c696d69746564313a3038060355040b133154656e63656e74204775616e677a686f7520526573656172636820616e6420446576656c6f706d656e742043656e7465723110300e0603550403130754656e63656e74301e170d3131303131393134333933325a170d3431303131313134333933325a3081b9310b300906035504061302383631123010060355040813094775616e67646f6e673111300f060355040713085368656e7a68656e31353033060355040a132c54656e63656e7420546563686e6f6c6f6779285368656e7a68656e2920436f6d70616e79204c696d69746564313a3038060355040b133154656e63656e74204775616e677a686f7520526573656172636820616e6420446576656c6f706d656e742043656e7465723110300e0603550403130754656e63656e7430819f300d06092a864886f70d010101050003818d0030818902818100c05f34b231b083fb1323670bfbe7bdab40c0c0a6efc87ef2072a1ff0d60cc67c8edb0d0847f210bea6cbfaa241be70c86daf56be08b723c859e52428a064555d80db448cdcacc1aea2501eba06f8bad12a4fa49d85cacd7abeb68945a5cb5e061629b52e3254c373550ee4e40cb7c8ae6f7a8151ccd8df582d446f39ae0c5e930203010001300d06092a864886f70d0101050500038181009c8d9d7f2f908c42081b4c764c377109a8b2c70582422125ce545842d5f520aea69550b6bd8bfd94e987b75a3077eb04ad341f481aac266e89d3864456e69fba13df018acdc168b9a19dfd7ad9d9cc6f6ace57c746515f71234df3a053e33ba93ece5cd0fc15f3e389a3f365588a9fcb439e069d3629cd7732a13fff7b891499
, original appComponentFactory class: androidx.core.app.CoreComponentFactory
, Patching apk...
, Adding native lib..
, added assets/lspatch/so/x86_64/liblspatch.so
, added assets/lspatch/so/arm64/liblspatch.so
, added assets/lspatch/so/x86/liblspatch.so
, added assets/lspatch/so/arm/liblspatch.so
, Adding dex..
, Search target apk library arch...
, Embedding modules...
,   - me.dannyit.wechat.chum
,   - com.fkzhang.wechatxposed
, Creating nested apk link...
, Writing apk...
, Failed to generate v1 signature
, java.io.IOException: Failed to generate v1 signature
	at r4.f.run(SourceFile:14)
	at t4.y.r(Unknown Source:60)
	at t4.y.A(Unknown Source:10)
	at t4.y.close(Unknown Source:4)
	at k8.b.b(SourceFile:32)
	at w7.a.i(Unknown Source:23)
	at u6.a.l(Unknown Source:8)
	at k7.c0.run(Unknown Source:90)
	at p7.d.run(Unknown Source:11)
	at q7.i.run(Unknown Source:2)
	at q7.a.run(SourceFile:10)
Caused by: java.security.SignatureException: Failed to sign using signer "CERT"
	at d4.c.e(SourceFile:19)
	at z3.p.o(SourceFile:41)
	at r4.f.run(SourceFile:5)
	... 10 more
Caused by: java.security.SignatureException: Failed to encode signature block
	at d4.c.b(SourceFile:16)
	at d4.c.e(SourceFile:10)
	... 12 more

设备信息

API 版本
93

LSPatch 版本
0.3.1 (308)

框架版本
1.8.3 (6563)

系统版本
10 (API 29)

设备
HUAWEI NOH-AN01 

系统架构
arm64-v8a

bug

opened by BigUIFU 5

Implemented "Logs" tab
Hi! I implemented the "Logs" tab, now to log something just do it like this:

- android.util.Log.i("aTag", "A message!") + org.lsposed.lspatch.ui.util.ManagerLogging.i("aTag", "A message!")

Preview:

If needed, I speak fluent French and Spanish.
opened by Chaikew 4
希望加入隐藏后台开关

Is your feature request related to a problem?/你的请求是否与某个问题相关？

如果多任务后台不隐藏的话，多任务后台的一键清理把软件清掉后会影响短暂影响模块的使用（因为即使软件自启动开启和后台无限制等已开启，但清掉后台后自启还需要一定的时间）

Describe the solution you'd like/描述你想要的解决方案

上次已经加入前台保活的开关，如果再加入后台隐藏的开关我相信软件的使用会更加的完美完善。

Additional context/其他信息

No response
enhancement

opened by Mubai-meng 4
希望支持对split apk文件的修补

Is your feature request related to a problem?/你的请求是否与某个问题相关？

希望可以支持对split安装包的修补

Describe the solution you'd like/描述你想要的解决方案

.

Additional context/其他信息

No response
enhancement

opened by DRAWCORE 4
Compare AXML attribute name by resource ID
This is porting of https://github.com/WindySha/Xpatch/pull/114.

Issues

Due to https://github.com/WindySha/ManifestEditor/pull/6, an AndroidManifest with two appComponentFactory attributes may be created and LSPAppComponentFactoryStub may not be used, causing crash with ClassNotFoundException.

For the same reason, the original appComponentFactory name is not saved in assets/lspatch/config.json.

I saw that some obfuscated apk files cause this bug, so I would very much like to fix it. 😫

Steps to reproduce

Download this apk file. This apk file has an appfactory class com.example.testapp.MyAppComponentFactory.

Run LSPatch.

java -jar jar-v0.3.1-327-release.jar -f -v tmp/app-release4.apk

Despite the appfactory class being set, the detailed log shows original appComponentFactory class: null.

View the patched apk with an apk file viewer such as JADX. You can see that the aforementioned issues are occurring.

Run the patched apk on the device. Then you will get the following error log. error.txt

How to fix

Update the ManifestEditor to fix AndroidManifest issue.

I compiled the committed jar myself. (https://github.com/WindySha/ManifestEditor/commit/aff51233504a52dcb09b5d7e7119bc8b428585f9) https://github.com/WindySha/Xpatch/blob/master/xpatch/libs/ManifestEditor-aff5123.jar

In ManifestParser.java, compare the attributes of the appfactory name not only as a string but also as a resource ID.

The mapping between name and resource ID is defined in public.xml.

Thank you!
opened by nonnonstop 4
[Bug] App "com.miraeasset.global" crashes with LSPatch
Steps to reproduce/复现步骤

Install latest LSPatch Debug from github actions

Download the app com.miraeasset.global

Patch using LSPatch

Open the installed app. The app freezes and finally crashes

This is a banking app, I think some extra "security" features of the app are causing issues, by detecting that it is a modified apk.

Expected behaviour/预期行为

The app runs

Actual behaviour/实际行为

The app freezes on open at a blank screen and crashes

Xposed Module List/Xposed 模块列表

Modules enabled - None Module installed but not enabled in module scope - [AllTrans](https://github.com/akhilkedia/AllTrans) (a non-public build)

LSPatch version/LSPatch 版本

LSPatch version - 0.5.1 (363), Framework Version - 1.8.5 (6649)

Android version/Android 版本

11 (API 30) Samsung

Shizuku version/Shizuku 版本

N/A

Version requirement/版本要求

[X] I am using latest debug CI version of LSPatch and enable verbose log/我正在使用最新 CI 调试版本且启用详细日志

Apk file/Apk 文件

No response

Logs/日志

I have uploaded a logcat between me opening the app, and when the app first exits - https://gist.github.com/akhilkedia/7fef280c63485648ace23269f3e93810
bug
opened by akhilkedia 1
[Bug] 在Patch完成或者更新加载器时闪退或无法完成
Steps to reproduce/复现步骤

1.正常patch一个应用勾选对应模块内置

2.正常patch完毕点击安装

3.此时app闪退

Expected behaviour/预期行为

正常patch安装包并且调用shizuku完成安装

Actual behaviour/实际行为

点击安装后闪退

Xposed Module List/Xposed 模块列表

哔哩漫游(me.iacn.biliroaming) 杜比大喇叭α(com.raincat.dolby_alpha) 杜比大喇叭β(com.raincat.dolby_beta) 贴吧TS(gm.tieba.tabswitch)

LSPatch version/LSPatch 版本

0.5.1(361)

Android version/Android 版本

12

Shizuku version/Shizuku 版本

13.0.0.r928.55c605f

Version requirement/版本要求

[X] I am using latest debug CI version of LSPatch and enable verbose log/我正在使用最新 CI 调试版本且启用详细日志

Logs/日志

java.lang.SecurityException: Binder invocation to an incorrect interface at android.os.Parcel.createExceptionOrNull(Parcel.java:2426) at android.os.Parcel.createException(Parcel.java:2410) at android.os.Parcel.readException(Parcel.java:2393) at android.os.Parcel.readException(Parcel.java:2335) at android.content.pm.IPackageManager$Stub$Proxy.getApplicationInfo(IPackageManager.java:5061) at org.lsposed.lspatch.util.ShizukuApi.isPackageInstalledWithoutPatch(ShizukuApi.kt:63) at org.lsposed.lspatch.ui.page.NewPatchScreenKt.InstallDialog(NewPatchScreen.kt:392) at org.lsposed.lspatch.ui.page.NewPatchScreenKt.access$InstallDialog(NewPatchScreen.kt:1) at org.lsposed.lspatch.ui.page.NewPatchScreenKt$DoPatchBody$2.invoke(NewPatchScreen.kt:328) at org.lsposed.lspatch.ui.page.NewPatchScreenKt$DoPatchBody$2.invoke(NewPatchScreen.kt:281) at androidx.compose.runtime.internal.ComposableLambdaImpl.invoke(ComposableLambda.jvm.kt:116) at androidx.compose.runtime.internal.ComposableLambdaImpl$invoke$1.invoke(ComposableLambda.jvm.kt:127) at androidx.compose.runtime.internal.ComposableLambdaImpl$invoke$1.invoke(ComposableLambda.jvm.kt:127) at androidx.compose.runtime.RecomposeScopeImpl.compose(RecomposeScopeImpl.kt:145) at androidx.compose.runtime.ComposerImpl.recomposeToGroupEnd(Composer.kt:2375) at androidx.compose.runtime.ComposerImpl.skipCurrentGroup(Composer.kt:2643) at androidx.compose.runtime.ComposerImpl$doCompose$2$5.invoke(Composer.kt:3260) at androidx.compose.runtime.ComposerImpl$doCompose$2$5.invoke(Composer.kt:3238) at androidx.compose.runtime.SnapshotStateKt__DerivedStateKt.observeDerivedStateRecalculations(DerivedState.kt:341) at androidx.compose.runtime.SnapshotStateKt.observeDerivedStateRecalculations(Unknown Source:1) at androidx.compose.runtime.ComposerImpl.doCompose(Composer.kt:3238) at androidx.compose.runtime.ComposerImpl.recompose$runtime_release(Composer.kt:3203) at androidx.compose.runtime.CompositionImpl.recompose(Composition.kt:771) at androidx.compose.runtime.Recomposer.performRecompose(Recomposer.kt:1031) at androidx.compose.runtime.Recomposer.access$performRecompose(Recomposer.kt:125) at androidx.compose.runtime.Recomposer$runRecomposeAndApplyChanges$2$2.invoke(Recomposer.kt:534) at androidx.compose.runtime.Recomposer$runRecomposeAndApplyChanges$2$2.invoke(Recomposer.kt:503) at androidx.compose.ui.platform.AndroidUiFrameClock$withFrameNanos$2$callback$1.doFrame(AndroidUiFrameClock.android.kt:34) at androidx.compose.ui.platform.AndroidUiDispatcher.performFrameDispatch(AndroidUiDispatcher.android.kt:109) at androidx.compose.ui.platform.AndroidUiDispatcher.access$performFrameDispatch(AndroidUiDispatcher.android.kt:41) at androidx.compose.ui.platform.AndroidUiDispatcher$dispatchCallback$1.doFrame(AndroidUiDispatcher.android.kt:69) at android.view.Choreographer$CallbackRecord.run(Choreographer.java:1186) at android.view.Choreographer.doCallbacks(Choreographer.java:978) at android.view.Choreographer.doFrame(Choreographer.java:890) at android.view.Choreographer$FrameDisplayEventReceiver.run(Choreographer.java:1170) at android.os.Handler.handleCallback(Handler.java:938) at android.os.Handler.dispatchMessage(Handler.java:99) at android.os.Looper.loopOnce(Looper.java:211) at android.os.Looper.loop(Looper.java:300) at android.app.ActivityThread.main(ActivityThread.java:8237) at java.lang.reflect.Method.invoke(Native Method) at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:556) at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:1046) Suppressed: kotlinx.coroutines.DiagnosticCoroutineContextException: [androidx.compose.runtime.PausableMonotonicFrameClock@b536818, androidx.compose.ui.platform.MotionDurationScaleImpl@6cad271, StandaloneCoroutine{Cancelling}@4e03856, AndroidUiDispatcher@d2660d7] Caused by: android.os.RemoteException: Remote stack trace: at android.os.Parcel.nativeEnforceInterface(Native Method) at android.os.Parcel.enforceInterface(Parcel.java:699) at android.content.pm.IPackageManager$Stub.onTransact(IPackageManager.java:2042) at com.android.server.pm.PackageManagerService.onTransact(PackageManagerService.java:8939) at android.os.Binder.execTransactInternal(Binder.java:1185)
bug
opened by naloder 0
[Feature Request] 在未连接『Shizuku』时调用系统包管理器安装应用

Is your feature request related to a problem?/你的请求是否与某个问题相关？

现在在未连接『Shizuku』时修补应用以后只能用文件管理器打开对应文件夹手动安装，很不方便

Describe the solution you'd like/描述你想要的解决方案

希望可以在未连接『Shizuku』时调用系统包管理器安装应用

Additional context/其他信息

No response
enhancement

opened by jiwangyihao 0
[Feature Request] 嵌入模块时可选择安装包（而不是只能选择已安装的模块）

Is your feature request related to a problem?/你的请求是否与某个问题相关？

嵌入模块时只能选择本机上已安装的模块

Describe the solution you'd like/描述你想要的解决方案

也可以选择一个模块的安装包（而不用预先安装它）

Additional context/其他信息

No response
enhancement

opened by jiwangyihao 0
[Bug] 不支持提取 v3 签名
Steps to reproduce/复现步骤

1.选择一个有V2或v3签名的安装包 2.任选一个模式 3.显示签名读取错误,应该还没有支持v2v3的获取

Expected behaviour/预期行为

成功修补

Actual behaviour/实际行为

实际上发生了错误，显示签名读取失败下面是日志 Launch patch , Processing /data/app/~~6AutKtUEV9J2Ya9f0P3Y9g==/io.github.vvb2060.mahoshojo-taSXrveIJLtxvgbhIZAk2g==/base.apk -> /data/user/0/org.lsposed.lspatch/cache/apk/base-325-lspatched.apk , apk path: /data/app/~~6AutKtUEV9J2Ya9f0P3Y9g==/io.github.vvb2060.mahoshojo-taSXrveIJLtxvgbhIZAk2g==/base.apk , Parsing original apk... , Register apk signer with default keystore... , get original signature failed , h7.c: get original signature failed at h9.b.b(SourceFile:32) at n8.b.h(Unknown Source:23) at m7.a.i(Unknown Source:8) at c8.d0.run(Unknown Source:90) at h8.e.run(Unknown Source:11) at i8.i.run(Unknown Source:2) at i8.a.run(SourceFile:10)

Xposed Module List/Xposed 模块列表

无，没有嵌入模块

LSPatch version/LSPatch 版本

6586

Android version/Android 版本

12

Shizuku version/Shizuku 版本

N/A

Version requirement/版本要求

[X] I am using latest debug CI version of LSPatch and enable verbose log/我正在使用最新 CI 调试版本且启用详细日志

Logs/日志

Launch patch , Processing /data/app/~~6AutKtUEV9J2Ya9f0P3Y9g==/io.github.vvb2060.mahoshojo-taSXrveIJLtxvgbhIZAk2g==/base.apk -> /data/user/0/org.lsposed.lspatch/cache/apk/base-325-lspatched.apk , apk path: /data/app/~~6AutKtUEV9J2Ya9f0P3Y9g==/io.github.vvb2060.mahoshojo-taSXrveIJLtxvgbhIZAk2g==/base.apk , Parsing original apk... , Register apk signer with default keystore... , get original signature failed , h7.c: get original signature failed at h9.b.b(SourceFile:32) at n8.b.h(Unknown Source:23) at m7.a.i(Unknown Source:8) at c8.d0.run(Unknown Source:90) at h8.e.run(Unknown Source:11) at i8.i.run(Unknown Source:2) at i8.a.run(SourceFile:10)
bug
opened by WYXHY-Cimolestes 2
[Feature Request] 管理器关联apk文件启动方式

Is your feature request related to a problem?/你的请求是否与某个问题相关？

否

Describe the solution you'd like/描述你想要的解决方案

希望可以和太极一样，打开apk文件时可以直接选择管理器进行修补

Additional context/其他信息

enhancement

opened by funnycups 0

Releases(v0.5.1)

v0.5.1(Nov 11, 2022)
Updates

Better signature bypass

Use service instead of content provider to send binder

[Manager] Support foreground keep alive

Contributors @Dr-TSNG @Howard20181 @yujincheng08

Full Changelog: https://github.com/LSPosed/LSPatch/compare/v0.5...v0.5.1
Source code(tar.gz)
Source code(zip)
lspatch.jar(9.99 MB)
manager.apk(5.48 MB)
v0.5(Oct 23, 2022)
Updates

Fix Android 9 crash

Fix Android 13 install

Better signature bypass

Support fake signatures for other lspatched apps (To solve some inter-app communication problem)

Support bootstrapping loader dynamically for local mode (No longer need to update loader after upgrading the manager)

[Manager] Fix a bug causing screen stuck after installing patched apps

[Manager] Fix opening module settings

Contributors @577fkj @pxb1988 @Dr-TSNG @Howard20181

Full Changelog: https://github.com/LSPosed/LSPatch/compare/v0.4...v0.5
Source code(tar.gz)
Source code(zip)
lspatch.jar(9.95 MB)
manager.apk(5.53 MB)
v0.4(Sep 27, 2022)
Updates

Support Android 13

Fix an AndroidManifest modification bug

Fix module not loaded after update

Delete signing V1 signature option since not necessary

[Manager] Support module scope

[Manager] Support launch modules from manager

[Manager] Support update loader version from manager

[Manager] Fix patching failed on some devices

[Manager] Refresh app list on installing/uninstalling apps

New Contributors

@Howard20181 made their first contribution in https://github.com/LSPosed/LSPatch/pull/80

@nonnonstop made their first contribution in https://github.com/LSPosed/LSPatch/pull/107

Full Changelog: https://github.com/LSPosed/LSPatch/compare/v0.3.1...v0.4
Source code(tar.gz)
Source code(zip)
lspatch.jar(9.95 MB)
manager.apk(5.14 MB)
v0.3.1(May 27, 2022)
Modifications:

Fix module not loading on first run

Fix some crashes

[Manager] Support select apks from local storage

[Manager] Show patched apps on manage page since 0.3.1 (Module scope is still WIP)

[Manager] Update translations

Known issues:

If using local patch mode, it is required to keep LSPatch manager alive manually

Native crash on WSA Android 12

Source code(tar.gz)
Source code(zip)
lspatch.jar(9.92 MB)
manager.apk(4.99 MB)
v0.3(May 6, 2022)
Modifications:

Better support for Android 12+

Refactor core to main branch LSPosed

Support custom keystone

LSPatch manager (WIP)

Known issues:

If using local patch mode, it is required to keep LSPatch manager alive manually

Source code(tar.gz)
Source code(zip)
lspatch.jar(9.84 MB)
manager.apk(4.85 MB)
v0.2(Dec 8, 2021)
Modifications:

Support Android 12

更改:

支持安卓12

Source code(tar.gz)
Source code(zip)
lspatch.jar(9.87 MB)
v0.1(Sep 18, 2021)
Modifications:

Replace the proxy entry point to AppComponentFactory to increase flexibility, but now only support Android 9+

Better signature bypass, although it may not work completely on some devices

No longer load installed modules, but only the embedded ones

Support always setting the versionCode to 1 for degraded installation. If this function is enabled, the versionCode actually obtained by the application is still correct in most cases

Future:

LSPatch manager

Support split apks

Support dynamic upgrade of core version, just upgrading the manager without repackaging each application

更改:

将代理入口点更换为 AppComponentFactory，增加灵活性但最低只支持安卓9+

更好的过签，虽然在部分设备上可能工作不完全

不再主动加载已安装模块，只会加载内置模块

支持将版本号始终设为1实现降级安装，如果开启此功能，应用实际获取到的版本号大多数情况下仍然是正确的

未来展望:

LSPatch 管理器

支持 split apk

支持动态升级核心版本，只需升级管理器而不需要重新打包每个应用

Source code(tar.gz)
Source code(zip)
lspatch.jar(9.46 MB)
v0.0.1(May 30, 2021)
LSPatch is a non-root Xposed framework like Taichi but based on LSPosed. It hooks app by modifying its apk. It's still in its very early development stage, so it's somehow available but still very hard to use and unstable with tones of bug.

Usage: Download LSPatch and unzip it, and run the jar file with jre. Pass --help as the argument to the jar to gain more help.

Features:

Non-root Xposed framework by modifying apk

Based on LSPosed 1.3.x

Apk modification needs running on PC

Somehow support signature bypass

Hooked app will automatically load and activate all modules

Some apps that target API 30 may not load modules because of the restriction to query all packages

Needs to Uninstall and install the modified app

Future:

An app that allows modifying apk on the phone

An app that specifying the loaded modules of an app

An app that helps apps targeting API 30 to load modules

Based on a higher and unmodified version of LSPosed

Support split apks

Better signature bypass

Modify apk by patching dex instead of inserting dex

...

Collaborators and PRs are warmly welcome for perfecting this project. Notice that non-root frameworks are very limited. You cannot expect it to work on all kinds of apps.

===

LSPatch 是一款不需要 root 的 xposed 框架。类似太极但是基于 LSPosed。它以修改 apk 的形式注入应用。目前它还在非常早的开发阶段，所以非常难使用并且有一堆 bug。

使用方法: 下载 LSPatch 并解压，用 jre 运行 jar 文件. 传 --help 参数给 jar 文件可以获取更多使用方法。

特性:

修改 apk 方式实现的非 root xposed 框架

基于 LSPosed 1.3.x

Apk 的修改仍需要用电脑完成

支持一点签名绕过

修改后的应用自动加载并激活所有模块

一些目标 API 是 30 的应用由于不能查询所有包，所以可能不能加载模块

需要完全卸载再安装 apk

未来展望:

一个可以在手机上修改 apk 的应用

一个可以设置应用加载模块范围的应用

一个可以帮助 API 30 的应用加载所有模块的应用

基于更高版本的未修改的 LSPosed

支持 split apk

更好的签名绕过

以修改 dex 方式注入而不是以插入 dex 的方式

...

我们非常欢迎各路协作者和 PR。注意非 root 框架能做的事非常有限，你不能期待它能在所有 app 上能工作。
Source code(tar.gz)
Source code(zip)
lspatch-release.zip(1.95 MB)