taintdroid Download precompilation (v): taintdroid (Android) system compiled virtual machine and real machine test

Light said not practicing non-hero, now let us open their own compiled system test! Actually understand these processes. You know the entire process of customizing the Android phone system. Existing smartphones are using Google's Android Open source system and then adding something of their own. Become the company's system!

Taintdroid (Android) virtual machine test

We talked about how to compile, the successful identity of the compilation is to generate the System.img file, for example:

SDK Replacement
Copy the system.img image file and replace the image in the SDK. For example, with:

Very easy to create AVD, here are a few pictures to read.

Watermark/2/text/ahr0cdovl2jsb2cuy3nkbi5uzxqv/font/5a6l5l2t/fontsize/400/fill/i0jbqkfcma==/dissolve/70/gravity /center ">

Click Start to start the virtual machine.

Api must be called , because the interface is our compilation generated system.img

Executive taintdroid! Here I have made changes to the app to make it possible to generate log files!

have tested successfully.

Taintdroid (Android) on the real machine test on the real machine is more complex, need to download the driver. My test cell phone is the Galaxy Nexus i9250 that is downloaded below such as the following drivers

% CD ~/tdroid/tdroid-4.3_r1% wget https://dl.google.com/dl/android/aosp/broadcom-maguro-jwr66y-5fa7715b.tgz% Tar- ZXVF broadcom-maguro-jwr66y-5fa7715b.tgz%./extract-broadcom-maguro.sh # (View the license and then type "I ACCEPT") ...% W Get https://dl.google.com/dl/android/aosp/imgtec-maguro-jwr66y-b0a4a1ef.tgz% TAR-ZXVF Imgtec-maguro-jwr66y-b0a4a1ef.tgz%./extract-imgtec-maguro.sh # (View the license and then type "I ACCEPT") ...% wget http s://dl.google.com/dl/android/aosp/invensense-maguro-jwr66y-e0d2e531.tgz% TAR-ZXVF invensense-maguro-jwr66y-e0d2e531.tgz%./extract-invensense-maguro.sh # (View the license and then type "I ACCEPT") ...% W Get https://dl.google.com/dl/android/aosp/nxp-maguro-jwr66y-d8ac2804.tgz% TAR-ZXVF nxp-maguro-jwr66y-d8ac2804.tgz %./extract-nxp-maguro.sh # (View the license and then type "I ACCEPT") ...% wget Https://dl.google.com/dl/android/aosp/sam sung-maguro-jwr66y-fb8f93b6.tgz% tar-zxvf samsung-maguro-jwr66y-fb8f93b6.tgz%./extract-samsung-maguro.sh # (viewThe license and then type "I ACCEPT") ...% wget https://dl.google.com/dl/android/aosp/ widevine-maguro-jwr66y-c49927ce.tgz% tar-zxvf widevine-maguro-jwr66y-c49927ce.tgz%./extract-widevine-maguro.sh # ( View the license and then type "I ACCEPT")

Establishbuildspec.mk file and enter the following!

% CD ~/tdroid/tdroid-4.3_r1% edit/create buildspec.mk # Enable core taint tracking logic (always add this) with_taint_track ING: = true# enable taint tracking for ODEX files (always add this) With_taint_odex: = true# enable taint tracking in the " Fast "(aka ASM) Interpreter (recommended) With_taint_fast: = true# Enable Additional output for tracking JNI usage (not rec ommended) #TAINT_JNI_LOG: = true# Enable byte-granularity tracking for IPC parcelswith_taint_byte_parcel: = True

Start the compilation!Open build/target/product/core.mk Join content

Product_packages + =                     basicdreams ...                    Voip-common                     taintdroidnotify

Compile once again

% . build/envsetup.sh% lunch 12% make clean% make-j4

Start the Brush machinefirst, the mobile phone fastboot status Unclose

% fastboot OEM unlock

Watermark/2/text/ahr0cdovl2jsb2cuy3nkbi5uzxqv/font/5a6l5l2t/fontsize/400/fill/i0jbqkfcma==/dissolve/70/gravity /center ">



Brush the machine!

% CD out/target/product/maguro% fastboot flash boot boot.img% fastboot flash system system.img% fastboot Flash userdata US Erdata.img

For example, with:

Watermark/2/text/ahr0cdovl2jsb2cuy3nkbi5uzxqv/font/5a6l5l2t/fontsize/400/fill/i0jbqkfcma==/dissolve/70/gravity /center ">
Test results






So far. The experiment has finally finished! Summary look at the picture is very easy, the operation is quite troublesome!

Compile error, Brush machine error. Anyway, 1.1-point tune! The whole process goes down, at least you can learn something!!

(The driver must conform to the mobile phone, otherwise the start of the brush machine is also the beginning of the board.) It's harder for Google phones to recover after changing boards. Suppose SD card external is quite simple, but I experiment the machine are built-in SD card ~ ~ ~ I wish you all a happy study!

。

taintdroid Download precompilation (v): taintdroid (Android) system compiled virtual machine and real machine test