1. 程式人生 > >Android 混淆程式碼總結

Android 混淆程式碼總結

為了防止自己的勞動成果被別人竊取,混淆程式碼能有效防止被反編譯,下面來總結以下混淆程式碼的步驟:
1. 大家也許都注意到新建一個工程會看到專案下邊有這樣proguard-project.txt一個檔案,這個對混淆程式碼很重要,如果你不小心刪掉了,沒關係,從其他地方拷貝一個過來
2. 最重要的就是在proguard-project.txt新增混淆的申明瞭:
a. 把所有你的jar包都申明進來,例如:
-libraryjars libs/apns_1.0.6.jar
-libraryjars libs/armeabi/libBaiduMapSDK_v2_3_1.so
-libraryjars libs/armeabi/liblocSDK4.so
-libraryjars libs/baidumapapi_v2_3_1.jar
-libraryjars libs/core.jar
-libraryjars libs/gesture-imageview.jar
-libraryjars libs/gson-2.0.jar
-libraryjars libs/infogracesound.jar
-libraryjars libs/locSDK_4.0.jar
-libraryjars libs/ormlite-android-4.48.jar
-libraryjars libs/ormlite-core-4.48.jar
-libraryjars libs/universal-image-loader-1.9.0.jar

b. 將你不需要混淆的部分申明進來,因為有些類經過混淆會導致程式編譯不通過,如下:

-keep public class * extends android.app.Fragment  
-keep public class * extends android.app.Activity
-keep public class * extends android.app.Application
-keep public class * extends android.app.Service
-keep public class * extends android.content.BroadcastReceiver
-keep public class * extends android.content.ContentProvider -keep public class * extends android.app.backup.BackupAgentHelper -keep public class * extends android.preference.Preference -keep public class * extends android.support.v4.** -keep public class com.android.vending.licensing.ILicensingService

–以上都是API裡邊的類,最好都要避免混淆
有些很特殊的,例如百度地圖,你需要新增以下申明:

-keep class com.baidu.** { *; } 
-keep class vi.com.gdi.bgl.android.**{*;}

根據我的經驗,一般model最好避免混淆(model無關緊要,不混淆也沒多大關係)如:

-keep class com.bank.pingan.model.** { *; }

下面在貼上關於Umeng分享統計的避免混淆的申明

-dontwarn android.support.v4.**  
-dontwarn org.apache.commons.net.** 
-dontwarn com.tencent.** 
-keepclasseswithmembernames class * {
    native <methods>;
}
-keepclasseswithmembernames class * {
    public <init>(android.content.Context, android.util.AttributeSet);
}
-keepclasseswithmembernames class * {
    public <init>(android.content.Context, android.util.AttributeSet, int);
}
-keepclassmembers enum * {
    public static **[] values();
    public static ** valueOf(java.lang.String);
}
-keep class * implements android.os.Parcelable {
  public static final android.os.Parcelable$Creator *;
}
-keepclasseswithmembers class * {
    public <init>(android.content.Context);
}
-dontshrink
-dontoptimize
-dontwarn com.google.android.maps.**
-dontwarn android.webkit.WebView
-dontwarn com.umeng.**
-dontwarn com.tencent.weibo.sdk.**
-dontwarn com.facebook.**
-keep enum com.facebook.**
-keepattributes Exceptions,InnerClasses,Signature
-keepattributes *Annotation*
-keepattributes SourceFile,LineNumberTable
-keep public interface com.facebook.**
-keep public interface com.tencent.**
-keep public interface com.umeng.socialize.**
-keep public interface com.umeng.socialize.sensor.**
-keep public interface com.umeng.scrshot.**
-keep public class com.umeng.socialize.* {*;}
-keep public class javax.**
-keep public class android.webkit.**
-keep class com.facebook.**
-keep class com.umeng.scrshot.**
-keep public class com.tencent.** {*;}
-keep class com.umeng.socialize.sensor.**
-keep class com.tencent.mm.sdk.openapi.WXMediaMessage {*;}
-keep class com.tencent.mm.sdk.openapi.** implements com.tencent.mm.sdk.openapi.WXMediaMessage$IMediaObject {*;}
-keep class im.yixin.sdk.api.YXMessage {*;}
-keep class im.yixin.sdk.api.** implements im.yixin.sdk.api.YXMessage$YXMessageData{*;}
-keep public class [your_pkg].R$*{
    public static final int *;
}

3.以上工作完成,混淆工作就完成了一大半了,最後需要做的就是在project.properties檔案中加上你的混淆檔案申明瞭,如下:
proguard.config=${sdk.dir}/tools/proguard/proguard-android.txt:proguard-project.txt
4. OK, 最後一步,打簽名包測試,如果有問題,仔細看下Log也許有得類不能混淆,那麼你得加入到proguard-project.txt檔案中
——-以上就是混淆程式碼的全過程了

最後貼上proguard-project.txt的全部程式碼:

# To enable ProGuard in your project, edit project.properties  
# to define the proguard.config property as described in that file.  
#  
# Add project specific ProGuard rules here.  
# By default, the flags in this file are appended to flags specified  
# in ${sdk.dir}/tools/proguard/proguard-android.txt  
# You can edit the include path and order by changing the ProGuard  
# include property in project.properties.  
#  
# For more details, see  
#   http://developer.android.com/guide/developing/tools/proguard.html  

# Add any project specific keep options here:  

# If your project uses WebView with JS, uncomment the following  
# and specify the fully qualified class name to the JavaScript interface  
# class:  
#-keepclassmembers class fqcn.of.javascript.interface.for.webview {  
#   public *;  
#}  

-optimizationpasses 5  
-dontusemixedcaseclassnames  
-dontskipnonpubliclibraryclasses  
-dontpreverify  
-verbose  
-optimizations !code/simplification/arithmetic,!field/*,!class/merging/*  

-keepattributes *Annotation*  
-keepattributes Signature  

-libraryjars libs/apns_1.0.6.jar  
-libraryjars libs/armeabi/libBaiduMapSDK_v2_3_1.so  
-libraryjars libs/armeabi/liblocSDK4.so  
-libraryjars libs/baidumapapi_v2_3_1.jar  
-libraryjars libs/core.jar  
-libraryjars libs/gesture-imageview.jar  
-libraryjars libs/gson-2.0.jar  
-libraryjars libs/infogracesound.jar  
-libraryjars libs/locSDK_4.0.jar  
-libraryjars libs/ormlite-android-4.48.jar  
-libraryjars libs/ormlite-core-4.48.jar  
-libraryjars libs/universal-image-loader-1.9.0.jar  

-keep class com.baidu.** { *; }   
-keep class vi.com.gdi.bgl.android.**{*;}  

-keep public class * extends android.app.Fragment    
-keep public class * extends android.app.Activity  
-keep public class * extends android.app.Application  
-keep public class * extends android.app.Service  
-keep public class * extends android.content.BroadcastReceiver  
-keep public class * extends android.content.ContentProvider  
-keep public class * extends android.app.backup.BackupAgentHelper  
-keep public class * extends android.preference.Preference  
-keep public class * extends android.support.v4.**  
-keep public class com.android.vending.licensing.ILicensingService  

-keep class com.google.gson.stream.** { *; }  
-keep class com.google.gson.examples.android.model.** { *; }  
-keep class com.uuhelper.Application.** { *; }  
-keep class net.sourceforge.zbar.** { *; }  
-keep class com.google.android.gms.** { *; }   

-keep class com.bank.pingan.model.** { *; }  

-keep public class * extends com.j256.ormlite.android.apptools.OrmLiteSqliteOpenHelper  
-keep public class * extends com.j256.ormlite.android.apptools.OpenHelperManager  

-keep class com.android.vending.licensing.ILicensingService  
-keep class android.support.v4.** { *; }    
-keep class org.apache.commons.net.** { *; }    
-keep class com.tencent.** { *; }    

-keep class com.umeng.** { *; }    
-keep class com.umeng.analytics.** { *; }    
-keep class com.umeng.common.** { *; }    
-keep class com.umeng.newxp.** { *; }    

-keep class com.j256.ormlite.** { *; }    
-keep class com.j256.ormlite.android.** { *; }    
-keep class com.j256.ormlite.field.** { *; }    
-keep class com.j256.ormlite.stmt.** { *; }   

-dontwarn android.support.v4.**    
-dontwarn org.apache.commons.net.**   
-dontwarn com.tencent.**    

-keepclasseswithmembernames class * {  
    native <methods>;  
}  

-keepclasseswithmembernames class * {  
    public <init>(android.content.Context, android.util.AttributeSet);  
}  

-keepclasseswithmembernames class * {  
    public <init>(android.content.Context, android.util.AttributeSet, int);  
}  

-keepclassmembers enum * {  
    public static **[] values();  
    public static ** valueOf(java.lang.String);  
}  

-keep class * implements android.os.Parcelable {  
  public static final android.os.Parcelable$Creator *;  
}  

-keepclasseswithmembers class * {  
    public <init>(android.content.Context);  
}  

-dontshrink  
-dontoptimize  
-dontwarn com.google.android.maps.**  
-dontwarn android.webkit.WebView  
-dontwarn com.umeng.**  
-dontwarn com.tencent.weibo.sdk.**  
-dontwarn com.facebook.**  

-keep enum com.facebook.**  
-keepattributes Exceptions,InnerClasses,Signature  
-keepattributes *Annotation*  
-keepattributes SourceFile,LineNumberTable  

-keep public interface com.facebook.**  
-keep public interface com.tencent.**  
-keep public interface com.umeng.socialize.**  
-keep public interface com.umeng.socialize.sensor.**  
-keep public interface com.umeng.scrshot.**  

-keep public class com.umeng.socialize.* {*;}  
-keep public class javax.**  
-keep public class android.webkit.**  

-keep class com.facebook.**  
-keep class com.umeng.scrshot.**  
-keep public class com.tencent.** {*;}  
-keep class com.umeng.socialize.sensor.**  

-keep class com.tencent.mm.sdk.openapi.WXMediaMessage {*;}  

-keep class com.tencent.mm.sdk.openapi.** implements com.tencent.mm.sdk.openapi.WXMediaMessage$IMediaObject {*;}  

-keep class im.yixin.sdk.api.YXMessage {*;}  
-keep class im.yixin.sdk.api.** implements im.yixin.sdk.api.YXMessage$YXMessageData{*;}  

-keep public class [your_pkg].R$*{  
    public static final int *;  


-dontwarn com.xx.bbb.**
-keep class com.xx.bbb.** { *;}

引數來保持第三方庫中的類而不亂,-dontwarn和-keep 結合使用,意思是保持com.xx.bbb.這個包裡面的所有類和所有方法而不混淆,接著還叫ProGuard不要警告找不到com.xx.bbb.這個包裡面的類的相關引用。

2、加入新浪微博sdk遇到的問題
Proguard returned with error code 1. See console
Note: there were 1 duplicate class definitions.
Warning: library class android.webkit.WebViewClient depends on program class android.net.http.SslError
Warning: there were 1 instances of library classes depending on program classes.
You must avoid such dependencies, since the program classes will
be processed, while the library classes will remain unchanged.
java.io.IOException: Please correct the above warnings first.
at proguard.Initializer.execute(Initializer.java:321)
at proguard.ProGuard.initialize(ProGuard.java:211)
at proguard.ProGuard.execute(ProGuard.java:86)
at proguard.ProGuard.main(ProGuard.java:492)
根據異常相信同行們已經看出來了,還要單獨keep 一下SslError這個,因為這個東西沒有在 com.weibo.sdk.android這個包裡面,於是再加上:
-dontwarn android.net.http.**
-keep class android.net.http.* { ;}

3、對於引入了第三方Library,以actionbarsherlock為例

#actionbarsherlock start
-keep class android.support.v4.app.** { *; }
-keep interface android.support.v4.app.** { *; }
-keep class com.actionbarsherlock.** { *; }
-keep interface com.actionbarsherlock.** { *; }
#actionbarsherlock start

4、Conversion to Dalvik format failed with error
對於這個問題註釋掉了下面的程式碼啟用了上面的程式碼,上面的程式碼是防止方法呼叫的棧太多導致的溢位,下面的意思猜測可能是隻允許5層巢狀的方法,明天再確定一下

-dontoptimize
#-optimizationpasses 5