Skip to content

🐛 [BUG] 解锁全部应用流转失败 #1552

@SainoNamkho

Description

@SainoNamkho

Notice | 须知

  • I confirm that this issue still exists in the latest version |
    我确认最新版依然存在此问题

  • I checked all installed modules and confirmed that this module is the cause |
    我已排查已安装的所有模块的可能性,确认由本模块造成

  • I searched the Issue Tracker and couldn't find an issue that submitted the same issue |
    我已经搜索过 Issue Tracker,且并未查询到提交相同问题的 Issue

Issue description | 问题描述

requiredMemberList("relayAppMessage") {bridge ->
bridge.findClass {
matcher {
addUsingString("RelayAppMessage{type=")
addInterface("com.xiaomi.mirror.message.Message")

但是跨屏协同服务混淆之后的k4.b2实现的接口是p0而非com.xiaomi.mirror.message.Message

b2.smali.zip

HyperCeiler logs | HyperCeiler 日志

[ 2026-04-05T04:42:08.269     1000:  6581:  6581 E/LSPosedFramework ] (com.xiaomi.mirror)[com.sevtinge.hyperceiler,HyperCeiler] [com.xiaomi.mirror][UnlockSendAppM]: Skip hook because initDexKit failed
java.lang.IllegalStateException: UnlockSendAppM: required DexKit member list not found: relayAppMessage
	at d5.requiredMemberList(Unknown Source:60)
	at com.sevtinge.hyperceiler.libhook.rules.mirror.UnlockSendAppM.class2_delegate$lambda$7(Unknown Source:18)
	at com.sevtinge.hyperceiler.libhook.rules.mirror.UnlockSendAppM.g(Unknown Source:0)
	at pl0.invoke(Unknown Source:129)
	at vh0.getValue(Unknown Source:17)
	at com.sevtinge.hyperceiler.libhook.rules.mirror.UnlockSendAppM.getClass2(Unknown Source:2)
	at com.sevtinge.hyperceiler.libhook.rules.mirror.UnlockSendAppM.initDexKit(Unknown Source:3)
	at h5.initHook(Unknown Source:51)
	at h5.initHook(SourceFile:183)
	at com.sevtinge.hyperceiler.libhook.app.Mirror.onPackageLoaded(Unknown Source:16)
	at h5.onLoad(SourceFile:112)
	at up0.accept(Unknown Source:458)
	at java.util.HashMap.forEach(HashMap.java:1432)
	at vp0.b(Unknown Source:2171)
	at vp0.onPackageReady(Unknown Source:48)
	at l0.callOnPackageReady(r8-map-id-17d577086dd71e6884f065792124b1f833bac720d144fe3990363893462b134a:21)
	at q.intercept(r8-map-id-17d577086dd71e6884f065792124b1f833bac720d144fe3990363893462b134a:123)
	at h.proceed(r8-map-id-17d577086dd71e6884f065792124b1f833bac720d144fe3990363893462b134a:33)
	at android.location.Freandd.createOrUpdateClassLoaderLocked(Freandd.java)
	at android.app.LoadedApk.getClassLoader(LoadedApk.java:1183)
	at android.app.LoadedApk.getResources(LoadedApk.java:1442)
	at android.app.ContextImpl.createAppContext(ContextImpl.java:3420)
	at android.app.ContextImpl.createAppContext(ContextImpl.java:3411)
	at android.app.ActivityThread.handleBindApplication(ActivityThread.java:8121)
	at android.app.ActivityThread.-$$Nest$mhandleBindApplication(Unknown Source:0)
	at android.app.ActivityThread$H.handleMessage(ActivityThread.java:2655)
	at android.os.Handler.dispatchMessage(Handler.java:107)
	at android.os.Looper.loopOnce(Looper.java:249)
	at android.os.Looper.loop(Looper.java:337)
	at android.app.ActivityThread.main(ActivityThread.java:9608)
	at java.lang.reflect.Method.invoke(Native Method)
	at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:615)
	at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:936)

Reproduction steps | 复现步骤

虽然说可以安装特定版本,但还是希望有更可移植的hook办法,或者在设置时提示

Screenshot of issue | 问题截图

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions