安全分析报告： 乡村振兴 v1.11.2101311

安全分数


安全分数 42/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

4

用户/设备跟踪器


调研结果

高危 7
中危 28
信息 3
安全 1
关注 0

高危 基本配置不安全地配置为允许到所有域的明文流量。 

Scope:
*

高危 App 链接 assetlinks.json 文件未找到 

[android:name=org.telegram.ui.LaunchActivity][android:host=http://ichat.im]
App Link 资产验证 URL （http://ichat.im/.well-known/assetlinks.json） 未找到或配置不正确。（状态代码：None）。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确，则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击，泄露 URI 中的敏感数据，例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android：autoVerify=“true”] 启用验证来验证 App Link 网域。

高危 App 链接 assetlinks.json 文件未找到 

[android:name=org.telegram.ui.LaunchActivity][android:host=https://ichat.im]
App Link 资产验证 URL （https://ichat.im/.well-known/assetlinks.json） 未找到或配置不正确。（状态代码：None）。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确，则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击，泄露 URI 中的敏感数据，例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android：autoVerify=“true”] 启用验证来验证 App Link 网域。

高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击 

如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7

Files:
org/telegram/ui/ArticleViewer.java, line(s) 6248,59,60
org/telegram/ui/Components/EmbedBottomSheet.java, line(s) 731,736,34,35

高危 已启用远程WebView调试 

已启用远程WebView调试
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing

Files:
org/telegram/messenger/SharedConfig.java, line(s) 424,11

高危 该文件是World Readable。任何应用程序都可以读取文件 

该文件是World Readable。任何应用程序都可以读取文件
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2

Files:
org/telegram/messenger/SharedConfig.java, line(s) 1277

高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 

应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
org/telegram/messenger/Utilities.java, line(s) 479

中危 应用程序已启用明文网络流量 

[android:usesCleartextTraffic=true]
应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。

中危 Activity-Alias (org.telegram.ui.CallsActivity) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.CALL_PHONE [android:exported=true]
发现一个 Activity-Alias被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Activity (org.telegram.messenger.OpenChatReceiver) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity设置了TaskAffinity属性 

(org.telegram.ui.VoIPPermissionActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity设置了TaskAffinity属性 

(org.telegram.ui.VoIPFeedbackActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity (org.telegram.messenger.GoogleVoiceClientActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (org.telegram.messenger.SmsReceiver) 未被保护。 

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.MusicPlayerService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.MusicBrowserService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (org.telegram.messenger.RefererReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.INSTALL_PACKAGES [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Content Provider (org.telegram.messenger.voip.CallNotificationSoundProvider) 未被保护。 

[android:exported=true]
发现 Content Provider与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.GcmPushListenerService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (androidx.sharetarget.ChooserTargetServiceCompat) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.BIND_CHOOSER_TARGET_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (com.google.android.gms.auth.api.signin.RevocationBoundService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Activity设置了TaskAffinity属性 

(bin.mt.file.content.MTDataFilesWakeUpActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity (bin.mt.file.content.MTDataFilesWakeUpActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Content Provider (bin.mt.file.content.MTDataFilesProvider) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.MANAGE_DOCUMENTS [android:exported=true]
发现一个 Content Provider被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
org/telegram/messenger/BuildVars.java, line(s) 231
org/telegram/messenger/ImageReceiver.java, line(s) 547
org/telegram/messenger/MediaDataController.java, line(s) 220,226,225
org/telegram/messenger/voip/Instance.java, line(s) 229,201,211
org/telegram/ui/ActionBar/AlertDialog.java, line(s) 198
org/telegram/ui/ActionBar/BottomSheet.java, line(s) 771,789
org/telegram/ui/Adapters/MentionsAdapter.java, line(s) 709
org/telegram/ui/ArticleViewer.java, line(s) 2959
org/telegram/ui/Cells/HintDialogCell.java, line(s) 48
org/telegram/ui/Cells/TextInfoPrivacyCell.java, line(s) 49
org/telegram/ui/Charts/data/ChartData.java, line(s) 82
org/telegram/ui/Components/CheckBoxBase.java, line(s) 46,47,45
org/telegram/ui/Components/ContextProgressView.java, line(s) 34,37,40,43,35,38,41,44
org/telegram/ui/Components/CounterView.java, line(s) 90,91
org/telegram/ui/Components/FilterTabsView.java, line(s) 476,473,472,475,474
org/telegram/ui/Components/Premium/PremiumAppIconsPreviewView.java, line(s) 133
org/telegram/ui/Components/Premium/StarParticlesView.java, line(s) 145
org/telegram/ui/Components/Premium/VideoScreenPreview.java, line(s) 123,138
org/telegram/ui/Components/PullForegroundDrawable.java, line(s) 65,63,64
org/telegram/ui/Components/ScrollSlidingTextTabStrip.java, line(s) 89,88,91,90
org/telegram/ui/Components/SearchCounterView.java, line(s) 51
org/telegram/ui/Components/SnowflakesEffect.java, line(s) 21
org/telegram/ui/Components/StickersAlert.java, line(s) 916
org/telegram/ui/Components/Switch.java, line(s) 80,81,82,83
org/telegram/ui/Components/ViewPagerFixed.java, line(s) 670,666,667,669,668
org/telegram/ui/DataAutoDownloadActivity.java, line(s) 76,91,84
org/telegram/ui/PhotoPickerActivity.java, line(s) 436,438,437,433,434,432
org/telegram/ui/PremiumPreviewFragment.java, line(s) 1578,1526

中危 应用程序使用不安全的随机数生成器 

应用程序使用不安全的随机数生成器
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/carrotsearch/randomizedtesting/Xoroshiro128PlusRandom.java, line(s) 3
j$/util/concurrent/ThreadLocalRandom.java, line(s) 11
org/telegram/messenger/Utilities.java, line(s) 17
org/telegram/ui/Components/AudioVisualizerDrawable.java, line(s) 6
org/telegram/ui/Components/AvatarsDarawable.java, line(s) 12
org/telegram/ui/Components/BlobDrawable.java, line(s) 7
org/telegram/ui/Components/CircleBezierDrawable.java, line(s) 7
org/telegram/ui/Components/FlickerLoadingView.java, line(s) 12
org/telegram/ui/Components/GroupCallPipButton.java, line(s) 16
org/telegram/ui/Components/LineBlobDrawable.java, line(s) 6
org/telegram/ui/Components/SharedMediaFastScrollTooltip.java, line(s) 15
org/telegram/ui/EmojiAnimationsOverlay.java, line(s) 11

中危 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
bin/mt/file/content/MTDataFilesProvider.java, line(s) 54
com/baidu/vi/VDeviceAPI.java, line(s) 141,150
org/telegram/messenger/AndroidUtilities.java, line(s) 2491,1733,1757,2443,2444
org/telegram/messenger/EmuDetector.java, line(s) 227
org/telegram/messenger/FileLog.java, line(s) 148,185,204,399
org/telegram/messenger/MediaController.java, line(s) 4116,4118
org/telegram/messenger/SharedConfig.java, line(s) 693,1126
org/telegram/messenger/voip/VoIPController.java, line(s) 208
org/telegram/ui/Components/ChatAttachAlertDocumentLayout.java, line(s) 969,1171,1171,1171,1174
org/telegram/ui/Components/voip/VoIPHelper.java, line(s) 750,784
org/telegram/ui/ProfileActivity.java, line(s) 7439
org/telegram/ui/QrActivity.java, line(s) 1676,1620
org/telegram/ui/SharePosterActivity.java, line(s) 213,151

中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞 

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
org/telegram/ui/ArticleViewer.java, line(s) 6134,6130
org/telegram/ui/Components/BotWebViewContainer.java, line(s) 332,298
org/telegram/ui/Components/EmbedBottomSheet.java, line(s) 711,258
org/telegram/ui/Components/WebPlayerView.java, line(s) 1128,1135
org/telegram/ui/WalletListActivity.java, line(s) 120,113
org/telegram/ui/WebviewActivity.java, line(s) 232,224

中危 IP地址泄露 

IP地址泄露


Files:
org/telegram/messenger/EmuDetector.java, line(s) 20
org/telegram/tgnet/ConnectionsManager.java, line(s) 200,538,197

中危 SHA-1是已知存在哈希冲突的弱哈希 

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/baidu/sec/privacy/d/d.java, line(s) 225
com/github/gzuliyujiang/oaid/impl/OppoImpl.java, line(s) 75
org/telegram/messenger/Utilities.java, line(s) 292,306
org/telegram/ui/PassportActivity.java, line(s) 2106

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
org/telegram/ui/Components/Paint/Slice.java, line(s) 22

中危 MD5是已知存在哈希冲突的弱哈希 

MD5是已知存在哈希冲突的弱哈希
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
org/telegram/messenger/MessagesController.java, line(s) 5677
org/telegram/messenger/Utilities.java, line(s) 437

中危 应用程序包含隐私跟踪程序 

此应用程序有多个4隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。

中危 此应用可能包含硬编码机密信息 

从应用程序中识别出以下机密确保这些不是机密或私人信息
谷歌地图的=> "com.google.android.maps.v2.API_KEY" : "AIzaSyBm2l9BN4WaUXsbHIWnfAAUz5QjuKdUVrw"
"UseProxySecret" : "Geheimnis"
"PasscodePassword" : "Senha"
"LoginPassword" : "Password"
"CheckPasswordPerfect" : "Perfect!"
"TypePrivate" : "Private"
"pleaseYourUsernametip" : "Username"
"RestorePasswordNoEmailTitle" : "Maaf"
"UseProxyPassword" : "Password"
"UseProxyUsername" : "Username"
"CancelPasswordResetYes" : "JA"
"PasswordOn" : "Aktif"
"UseProxySecret" : "Rahasia"
"com.google.firebase.crashlytics.mapping_file_id" : "3d44ea6f5a964eea84b8d15e979e0bf1"
"google_app_id" : "1:68956297440:android:2ffe485dff574e96fc9885"
"passwordLogin" : "Passwort-Anmeldung"
"PasswordOn" : "Hidup"
"CancelPasswordResetNo" : "NON"
"NotificationHiddenChatUserName" : "User"
"YourPasswordSuccess" : "Sucesso!"
"LoginPassword" : "Senha"
"NotificationHiddenChatUserName" : "Benutzer"
"CancelPasswordResetYes" : "YES"
"TypePrivateGroup" : "Private"
"PasswordLogins" : "Senha"
"TypePrivateGroup" : "Peribadi"
"CancelPasswordResetNo" : "NO"
"TypePrivateGroup" : "Privat"
"Username" : "Benutzername"
"CancelPasswordResetYes" : "OUI"
"CancelPasswordResetNo" : "NEIN"
"logingPwds" : "Anmeldepasswort"
"TypePrivate" : "Privat"
"UseProxySecret" : "Secreto"
"CancelPasswordResetYes" : "SIM"
"YourPasswordSuccess" : "Berhasil!"
"PaymentPasswordTitle" : "Passwort"
"PasscodePassword" : "Password"
"UseProxyUsername" : "Benutzername"
"TypePrivate" : "Pribadi"
"PasswordOn" : "Ativado"
"CancelPasswordResetNo" : "TIDAK"
"PasswordCode" : "Code"
"PasswordLogins" : "Account"
"NotificationHiddenChatUserName" : "Pengguna"
"WalletPassword" : "Zahlungspasswort"
"TypePrivate" : "Privado"
"YourPasswordSuccess" : "Erfolg!"
"PasswordRecovery" : "Passwort-Wiederherstellung"
"YourPasswordSuccess" : "Success!"
"PasswordOff" : "Deaktiviert"
"TypePrivateGroup" : "Privado"
"NotificationHiddenChatUserName" : "Usuario"
"PasswordOn" : "Aktiviert"
"TypePrivate" : "Peribadi"
"RestorePasswordNoEmailTitle" : "Sorry"
"PasswordLogins" : "Passwort"
"CheckPasswordPerfect" : "Perfekt!"
"PasswordCode" : "Kode"
"Username" : "Username"
"PasswordOn" : "Activado"
"CardUserName" : "Karteninhabername"
"UseProxyPassword" : "Passwort"
"PaymentPasswordTitle" : "Password"
"NotificationHiddenChatUserName" : "Utilisateur"
"CheckPasswordPerfect" : "Sempurna!"
"PasscodePassword" : "Sandi"
"PasswordOff" : "Off"
"PaymentPasswordTitle" : "Senha"
"passwordLock" : "Passwortsperre"
"CheckPasswordPerfect" : "Perfeito!"
"CancelPasswordResetYes" : "YA"
"google_crash_reporting_api_key" : "AIzaSyBm2l9BN4WaUXsbHIWnfAAUz5QjuKdUVrw"
"PaymentPasswordEmailTitle" : "Wiederherstellungs-E-Mail"
"PasswordOff" : "Nonaktif"
"TypePrivateGroup" : "Pribadi"
"UseProxySecret" : "Rahsia"
"PasswordOff" : "Desativado"
"google_api_key" : "AIzaSyBm2l9BN4WaUXsbHIWnfAAUz5QjuKdUVrw"
"UseProxySecret" : "Segredo"
"PasscodePassword" : "Passwort"
"PasswordOn" : "On"
"LoginPassword" : "Passwort"
"PasswordOff" : "Mati"
"UseProxyPassword" : "Senha"
"PasswordOff" : "Desactivado"
"UseProxySecret" : "Secret"
"RestorePasswordNoEmailTitle" : "Desculpe"
0000016742C00BDA259000000168CE0F13200000016588840DCE7118A0002FBF1C31C3275D78
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
4350376EF13389EE4350376EF13389EE
AIzaSyBm2l9BN4WaUXsbHIWnfAAUz5QjuKdUVrw
ABVGDE2JZIQKLMNOPRSTUFHC34WXY9678
9A04F079-9840-4286-AB92-E65BE0885F95
c06c8400-8e06-11e0-9cb6-0002a5d5c51b
014b35b6184100b085b0d0572f9b5103
bb392ec0-8d4d-11e0-a896-0002a5d5c51b
A2B55680-6F43-11E0-9A3F-0002A5D5C51B
ak=i4tYvpMqwtevgg85MS4Ms76MKP9hzPhx

信息 应用程序记录日志信息,不得记录敏感信息 

应用程序记录日志信息,不得记录敏感信息
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
com/coremedia/iso/boxes/sampleentry/AudioSampleEntry.java, line(s) 196
com/github/gzuliyujiang/oaid/OAIDLog.java, line(s) 21
org/dom4j/DocumentFactory.java, line(s) 195
org/dom4j/bean/BeanDocumentFactory.java, line(s) 57
org/dom4j/datatype/DatatypeDocumentFactory.java, line(s) 67,68,82,83
org/dom4j/datatype/SchemaParser.java, line(s) 90,91,204
org/dom4j/dom/DOMNodeHelper.java, line(s) 334
org/dom4j/io/DOMReader.java, line(s) 70
org/dom4j/io/DOMWriter.java, line(s) 190,191,195
org/dom4j/io/SAXHelper.java, line(s) 40,41,42,71,72
org/dom4j/rule/RuleManager.java, line(s) 56
org/dom4j/swing/XMLTableColumnDefinition.java, line(s) 117
org/dom4j/swing/XMLTableDefinition.java, line(s) 169
org/dom4j/swing/XMLTableModel.java, line(s) 50,87
org/dom4j/tree/NamespaceStack.java, line(s) 191
org/telegram/PhoneFormat/PhoneFormat.java, line(s) 112,117,138,145,155,163,213,234
org/telegram/SQLite/SQLiteCursor.java, line(s) 98,103
org/telegram/SQLite/SQLiteDatabase.java, line(s) 60,77
org/telegram/SQLite/SQLitePreparedStatement.java, line(s) 104,112
org/telegram/messenger/AndroidUtilities.java, line(s) 1643,2342,2449,2456,334,393,476,562,600,815,849,1067,1098,1129,1376,1385,1541,1605,1635,1691,1710,1846,1850,2002,2018,2029,2079,2091,2188,2310,2325,2413,2435,2493,2585,2748,2760,2804,3756,3774,3933,3943,3951,3991,4007,4079
org/telegram/messenger/ApplicationLoader.java, line(s) 182,205,234,235,244,257,355,537,138,286,365,405,422,436,460,505,529
org/telegram/messenger/BillingController.java, line(s) 220,297,97
org/telegram/messenger/ChatObject.java, line(s) 155,163,353,729,741,762,770,902,911,924,934,1017
org/telegram/messenger/ChatThemeController.java, line(s) 45,155,303,335
org/telegram/messenger/ContactsController.java, line(s) 443,460,476,714,806,815,839,988,993,1023,1086,1109,1699,1841,577,602,765,1333,1341,1588,1592,1601,1651,1929,2482,2514
org/telegram/messenger/ContactsRemoteViewsFactory.java, line(s) 160
org/telegram/messenger/DispatchQueue.java, line(s) 52,63,76,89
org/telegram/messenger/DocumentObject.java, line(s) 89
org/telegram/messenger/DownloadController.java, line(s) 1055,1131,1223,1277,1349,1401,1459,1464
org/telegram/messenger/Emoji.java, line(s) 135,142,394,638,650
org/telegram/messenger/EmuInputDevicesDetector.java, line(s) 55
org/telegram/messenger/FeedRemoteViewsFactory.java, line(s) 136
org/telegram/messenger/FileLoadOperation.java, line(s) 689,961,1054,1301,493,502,547,818,828,838,848,859,872,878,886,892,900,906,914,921,930,992,994,1003,1025,1030
org/telegram/messenger/FileLoader.java, line(s) 782,1174,1182,1190,1199
org/telegram/messenger/FileLog.java, line(s) 72,73,74,75,88,89,90,352,221,246,376
org/telegram/messenger/FilePathDatabase.java, line(s) 61,71,106,172,231,84,126,181,229,233,261,277,288
org/telegram/messenger/FileRefController.java, line(s) 563
org/telegram/messenger/FileStreamLoadOperation.java, line(s) 137
org/telegram/messenger/FileUploadOperation.java, line(s) 112,136,203
org/telegram/messenger/FingerprintController.java, line(s) 32,47,68,73,86,111,129
org/telegram/messenger/GcmPushListenerService.java, line(s) 14,31
org/telegram/messenger/ImageLoader.java, line(s) 1401,248,278,290,309,347,366,387,680,698,1218,1479,1496,1550,1558,1568,2180,2192,2217,2282,2288,2355
org/telegram/messenger/ImageReceiver.java, line(s) 1224,1345,1397,1451,1496,1547
org/telegram/messenger/ImportingService.java, line(s) 38,75
org/telegram/messenger/KeepAliveJob.java, line(s) 28,42,48,64,76
org/telegram/messenger/LinkifyPort.java, line(s) 46
org/telegram/messenger/LocaleController.java, line(s) 972,2496,579,584,782,904,910,916,927,1064,1112,1199,1238,1577,1967,1992,2008,2027,2049,2065,2094,2143,2287,2303,2327,2363,2373,2569,3479
org/telegram/messenger/LocationController.java, line(s) 281,361,727,789,874,958,970,1073,1091,1100
org/telegram/messenger/LocationSharingService.java, line(s) 159
org/telegram/messenger/MediaController.java, line(s) 914,1450,1538,1570,1575,1598,1623,1635,1645,797,805,864,869,874,879,897,923,932,1047,1063,1141,1158,1207,1218,1291,1876,1886,1919,2041,2282,2296,2613,2619,2725,2861,2921,2968,3041,3139,3293,3333,3387,3404,3414,3458,3621,3661,3793,3802,3909,3995,4167,4198,4235,4243,4251,4281,4320,4328,4340,4397,4462,4470,4473,4484,4503,4514,4520,4526,4545,4555,4695,4850,4866
org/telegram/messenger/MediaDataController.java, line(s) 4491,614,719,799,896,1056,1150,1281,1338,1404,1623,1667,1897,2035,2214,2296,2384,2814,2935,3095,3207,3405,4324,4603,4638,4708,4769,4794,4916,5014,5165,5235,5252,5427,5567,5690,5793,6345,6444,6610,6660,6696,6738,6773,7015,7086,7201,7391,7621,7733
org/telegram/messenger/MessageObject$VCardData.java, line(s) 83
org/telegram/messenger/MessageObject.java, line(s) 527,832,2288,2364,2455,2461
org/telegram/messenger/MessagesController.java, line(s) 3050,3275,3279,3288,3295,3302,3312,3377,4216,4371,4950,4951,5114,7087,7128,7133,7174,7186,7196,7219,7225,7232,7249,7261,8931,8940,9923,10488,10740,10994,11477,11483,11586,11638,11689,11695,11706,13476,13491,13647,13656,13669,13735,13744,13756,14107,14351,1796,1812,1839,3734,3750,4794,4820,6085,8202,8244,8295,10759,11392,11613,12396,12422,12490,12510,13804,14486,14634,14723,15275,16107,16256,16400,16807,16808
org/telegram/messenger/MessagesStorage.java, line(s) 388,492,614,1650,521,526,536,542,1125,1177,1223,1247,1271,1295,1342,1545,1673,1769,1818,1821,1848,1868,2168,2265,2286,2332,2383,2465,2623,2786,2846,2951,2987,3043,3201,3258,3289,3306,3373,3514,3597,3670,3742,3816,3886,3919,3984,4011,4055,4109,4278,4337,4381,4467,4545,4629,4663,4709,4847,4880,4913,4942,4962,4989,5017,5111,5136,5208,5229,5261,5298,5350,5397,5416,5446,5475,5513,5530,5545,5572,5649,5675,5825,5868,5903,5938,6024,6063,6099,6181,6281,6343,6386,6408,6455,6468,6532,6580,6628,6815,6882,6906,6971,7092,7205,7227,7255,7752,7834,7882,7986,8022,8052,8085,8106,8127,8149,8168,8179,8193,8207,8333,8338
org/telegram/messenger/MusicBrowserService.java, line(s) 196,272,321,448
org/telegram/messenger/MusicPlayerService.java, line(s) 182,295
org/telegram/messenger/NotificationBadge.java, line(s) 203,486
org/telegram/messenger/NotificationCenter.java, line(s) 990
org/telegram/messenger/NotificationImageProvider.java, line(s) 113
org/telegram/messenger/NotificationsController.java, line(s) 244,383,438,1445,1509,1524,1568,1583,1630,220,225,232,255,291,358,380,388,1207,1222,1294,1366,1383,1396,1424,1428,1437,1451,1506,1521,1530,1565,1580,1590,1638,1704,1864,1923,1958,1962,1971,1859
org/telegram/messenger/NotificationsDisabledReceiver.java, line(s) 32,36,49,58,72,85
org/telegram/messenger/OpenChatReceiver.java, line(s) 34
org/telegram/messenger/PushListenerController.java, line(s) 126,140,146,150,283,286,313,78,84,305,332
org/telegram/messenger/RpmController.java, line(s) 128,219
org/telegram/messenger/ScreenReceiver.java, line(s) 13,19
org/telegram/messenger/SecretChatHelper.java, line(s) 699,774,797,889,1080,1213,1463,1492,1536,1553
org/telegram/messenger/SendMessagesHelper.java, line(s) 752,3052,3058,3073,3083,3097,4760,796,801,810,1557,1574,1953,2515,3970,4037,4097,4291,4595
org/telegram/messenger/SessionTokenController.java, line(s) 63,74,217
org/telegram/messenger/SharedConfig.java, line(s) 1211,263,331,348,427,487,502,513,545,559,695,727,737,1148
org/telegram/messenger/SmsReceiver.java, line(s) 47
org/telegram/messenger/SvgHelper.java, line(s) 378,397,410,423,436,451,467,1529
org/telegram/messenger/UserConfig.java, line(s) 237
org/telegram/messenger/Utilities.java, line(s) 94,296,312,341,354,365,377,396,413,444,500
org/telegram/messenger/VideoEditedInfo.java, line(s) 352
org/telegram/messenger/VideoEncodingService.java, line(s) 36,91,53
org/telegram/messenger/XiaomiUtilities.java, line(s) 45
org/telegram/messenger/browser/Browser.java, line(s) 90,105
org/telegram/messenger/camera/CameraController.java, line(s) 150,171,500,517,536,186,299,314,319,371,388,414,426,458,490,543,572,633,643,667,696,699,758,763,769,774,782,805
org/telegram/messenger/camera/CameraSession.java, line(s) 198,202,133,192,247,265,322,335,351,356,448
org/telegram/messenger/camera/CameraView.java, line(s) 396,727,1007,1037,1150,1180,1329,1393,1509,735,743,752,765,776,783,802,820,838,847,901,911,1130,1362,1433,1442,1452,1460,1573,1651,1656,1664
org/telegram/messenger/redpacket/JsonData.java, line(s) 56
org/telegram/messenger/ringtone/RingtoneDataStore.java, line(s) 48,362
org/telegram/messenger/secretmedia/ExtendedDefaultDataSource.java, line(s) 196
org/telegram/messenger/support/JobIntentService.java, line(s) 135
org/telegram/messenger/support/customtabsclient/shared/CustomTabsHelper.java, line(s) 70
org/telegram/messenger/support/fingerprint/FingerprintManagerCompatApi23.java, line(s) 38,51,60
org/telegram/messenger/utils/CopyUtilities.java, line(s) 91
org/telegram/messenger/utils/OpenInstall.java, line(s) 69,66
org/telegram/messenger/utils/QrUtils.java, line(s) 73
org/telegram/messenger/video/AudioRecoder.java, line(s) 59
org/telegram/messenger/video/MediaCodecVideoConvertor.java, line(s) 52
org/telegram/messenger/video/TextureRenderer.java, line(s) 72,74,194
org/telegram/messenger/voip/AudioRecordJNI.java, line(s) 242,62,75,91,109,133,175,207,233,105,215,59,72,88
org/telegram/messenger/voip/AudioTrackJNI.java, line(s) 37,60,114,124,122,31
org/telegram/messenger/voip/Instance.java, line(s) 97
org/telegram/messenger/voip/JNIUtilities.java, line(s) 94
org/telegram/messenger/voip/NativeInstance.java, line(s) 142,276,306
org/telegram/messenger/voip/TelegramConnectionService.java, line(s) 33,70,50,60,18,26
org/telegram/messenger/voip/VideoCapturerDevice.java, line(s) 400
org/telegram/messenger/voip/VoIPServerConfig.java, line(s) 19
org/telegram/messenger/voip/VoIPService.java, line(s) 1246,1702,1957,2078,3081,3097,3117,3222,3444,3852,3868,3905,3913,3920,4039,4054,4184,4227,4366,4403,4410,4418,4534,4593,4751,4974,4985,5013,5025,5032,341,380,388,563,812,873,1164,1218,1244,1267,1304,1748,1991,3016,3255,3437,3560,3614,3682,3699,3761,3843,3926,4095,4107,4152,4249,4258,4304,4334,4376,4557,4587,4890,4901,879,902,1260,1300,1764,3750
org/telegram/tgnet/ConnectionsManager.java, line(s) 382,428,438,440,607,615,631,647,650,662,712,717,744,770,911,917,920,400,418,450,665,753,809,821,839,926,966,1031
org/telegram/tgnet/NativeByteBuffer.java, line(s) 131,132,147,148,174,175,190,191,211,212,221,222,230,231,267,268,304,305,316,317,354,404,405,423,439,440,454,455,468,469,505,506,536,537,573,574,590,591
org/telegram/tgnet/ObtainAddress$applyDatacenterAddress$2.java, line(s) 45,49
org/telegram/tgnet/ObtainAddress$connectAddress$2.java, line(s) 48
org/telegram/tgnet/ObtainAddress$getAddressFromConfig$2.java, line(s) 75,109
org/telegram/tgnet/ObtainAddress.java, line(s) 662,781,695,713
org/telegram/tgnet/SerializedData.java, line(s) 69,78,87,96,115,116,139,140,169,170,185,186,201,202,217,218,254,255,266,267,303,304,315,316,326,327,356,383,400,401,416,417,458,459,493,494,510,511,526,527,544,545,565,566
org/telegram/tgnet/TLClassStore.java, line(s) 50
org/telegram/tgnet/TLRPC$ChatPhoto.java, line(s) 95
org/telegram/tgnet/TLRPC$TL_chatPhoto.java, line(s) 32
org/telegram/tgnet/TLRPC$TL_userProfilePhoto.java, line(s) 32
org/telegram/tgnet/TLRPC$UserProfilePhoto.java, line(s) 58
org/telegram/ui/ActionBar/ActionBarLayout.java, line(s) 1073,1077,1704
org/telegram/ui/ActionBar/ActionBarPopupWindow.java, line(s) 170,578,658
org/telegram/ui/ActionBar/AlertDialog.java, line(s) 783,1002
org/telegram/ui/ActionBar/BaseFragment.java, line(s) 250,262,288,303,416,515,527,576,590
org/telegram/ui/ActionBar/BottomSheet.java, line(s) 819,1365,1494,1518
org/telegram/ui/ActionBar/DrawerLayoutContainer.java, line(s) 466
org/telegram/ui/ActionBar/EmojiThemes.java, line(s) 388,456
org/telegram/ui/ActionBar/Theme.java, line(s) 3726,3775,1269,1490,1506,1570,1709,1757,1973,1981,2332,3185,3192,3246,3334,3356,4177,4198,4212,4338,4359,6117,6164,6383,4021
org/telegram/ui/ActionBar/ThemeDescription.java, line(s) 796
org/telegram/ui/ActionIntroActivity.java, line(s) 794,862,947
org/telegram/ui/Adapters/BaseLocationAdapter.java, line(s) 141,187,158,179
org/telegram/ui/Adapters/ContactsAdapter.java, line(s) 129
org/telegram/ui/Adapters/DialogsAdapter.java, line(s) 151,181,261
org/telegram/ui/Adapters/DialogsSearchAdapter.java, line(s) 568,611,656,680
org/telegram/ui/Adapters/GroupCreateContactSearchAdapter.java, line(s) 126,146,443
org/telegram/ui/Adapters/GroupCreateContactsAdapter.java, line(s) 99
org/telegram/ui/Adapters/SearchAdapter.java, line(s) 110,130,435
org/telegram/ui/Adapters/SearchAdapterHelper.java, line(s) 342,528,586
org/telegram/ui/AddFriendActivity.java, line(s) 345,354
org/telegram/ui/ArticleViewer.java, line(s) 3879,3924,3943,4089,4098,4120,4133,6111,6121,6220,6243,6269,8515,8891
org/telegram/ui/BaiduLocationActivity.java, line(s) 457,465,561,908,1481,1677,1707,1755,1794,1817,2022,2096,2431,2452,2557,2646,2696,2705
org/telegram/ui/BasePermissionsActivity.java, line(s) 101
org/telegram/ui/BindPhoneActivity.java, line(s) 564,1070,1117
org/telegram/ui/BubbleActivity.java, line(s) 279,283,71
org/telegram/ui/CacheControlActivity.java, line(s) 163,278,464,517
org/telegram/ui/CameraScanActivity.java, line(s) 685,696,931
org/telegram/ui/Cells/AboutLinkCell.java, line(s) 277,466
org/telegram/ui/Cells/AudioPlayerCell.java, line(s) 85,94
org/telegram/ui/Cells/BotHelpCell.java, line(s) 176
org/telegram/ui/Cells/ChatActionCell.java, line(s) 558,563
org/telegram/ui/Cells/ChatMessageCell.java, line(s) 3603,3717,3745
org/telegram/ui/Cells/DialogCell.java, line(s) 539
org/telegram/ui/Cells/DialogMeUrlCell.java, line(s) 219,234,316
org/telegram/ui/Cells/SettingsSuggestionCell.java, line(s) 127
org/telegram/ui/Cells/SharedAudioCell.java, line(s) 160,183
org/telegram/ui/Cells/SharedLinkCell.java, line(s) 421
org/telegram/ui/Cells/TextSelectionHelper.java, line(s) 1044,1045
org/telegram/ui/Cells/ThemesHorizontalListCell.java, line(s) 427
org/telegram/ui/ChangeAccountNameActivity.java, line(s) 391,401
org/telegram/ui/ChangeBioActivity.java, line(s) 257,268
org/telegram/ui/ChangeBirthOrSexActivity.java, line(s) 414,429
org/telegram/ui/ChangeUsernameActivity.java, line(s) 72,423,434
org/telegram/ui/ChannelAdminLogActivity.java, line(s) 959,985,341,1640,2338,2347,2356,2365,2374,2383,2392,2401,340,340,344
org/telegram/ui/ChannelCreateActivity.java, line(s) 1008,1148,1162
org/telegram/ui/ChatActivity.java, line(s) 3990,4020,4047,10828,14611,16908,16938,16955,16972,16989,17008,17032,17049,2112,4165,7944,8262,8624,8805,8857,9808,10189,10199,10529,12595,13286,13879,15011,15174,15342,15500,16480,16925,16949,16966,16983,17000,17026,17043,17060,17333,17352,17382
org/telegram/ui/ChatEditActivity.java, line(s) 673
org/telegram/ui/ChatRightsEditActivity.java, line(s) 854,881
org/telegram/ui/ChatUsersActivity.java, line(s) 2011
org/telegram/ui/Components/AlertsCreator.java, line(s) 266,285,332,365,4514,4571,5345
org/telegram/ui/Components/AnimatedEmojiDrawable.java, line(s) 255,269
org/telegram/ui/Components/AvatarDrawable.java, line(s) 271
org/telegram/ui/Components/BlockingUpdateView.java, line(s) 280,284
org/telegram/ui/Components/BlurBehindDrawable.java, line(s) 141,396
org/telegram/ui/Components/BotWebViewContainer.java, line(s) 233,675,1001,1011,1021,1062
org/telegram/ui/Components/BotWebViewMenuContainer.java, line(s) 802
org/telegram/ui/Components/BotWebViewSheet.java, line(s) 803
org/telegram/ui/Components/ChatActivityEnterView.java, line(s) 1795,2322,2379,4085,5785,6046,6061,6073,6122,6820,6864
org/telegram/ui/Components/ChatAttachAlertAudioLayout.java, line(s) 610
org/telegram/ui/Components/ChatAttachAlertBaiduLocationLayout.java, line(s) 925,969,985,1188,1221,1327,1711,1732,1752,1761
org/telegram/ui/Components/ChatAttachAlertBotWebViewLayout.java, line(s) 564
org/telegram/ui/Components/ChatAttachAlertDocumentLayout.java, line(s) 212,702,965,972
org/telegram/ui/Components/ChatAttachAlertLocationLayout.java, line(s) 987,1060,1076,1280,1313,1350,1407,1698,1719,1739,1748
org/telegram/ui/Components/ChatAttachAlertPhotoLayout.java, line(s) 1188,2730,3124,3137
org/telegram/ui/Components/ChatAvatarContainer.java, line(s) 643
org/telegram/ui/Components/ChatThemeBottomSheet.java, line(s) 980
org/telegram/ui/Components/ClippingImageView.java, line(s) 224
org/telegram/ui/Components/Crop/CropView.java, line(s) 1150,956,1098
org/telegram/ui/Components/EditTextBoldCursor.java, line(s) 255,491,668,735,744
org/telegram/ui/Components/EditTextCaption.java, line(s) 247,316,343,384,452
org/telegram/ui/Components/EditTextEmoji$2.java, line(s) 32
org/telegram/ui/Components/EditTextEmoji$5.java, line(s) 158,185
org/telegram/ui/Components/EmbedBottomSheet.java, line(s) 224,353,381,395,417,460,533,540,722,741,754,836,921
org/telegram/ui/Components/EmojiPacksAlert.java, line(s) 745,1163,1539
org/telegram/ui/Components/EmojiView$15.java, line(s) 23
org/telegram/ui/Components/EmojiView$17.java, line(s) 155
org/telegram/ui/Components/EmojiView$5.java, line(s) 27
org/telegram/ui/Components/EmojiView$EmojiGridAdapter.java, line(s) 523
org/telegram/ui/Components/EmojiView$EmojiPopupWindow.java, line(s) 63
org/telegram/ui/Components/EmojiView.java, line(s) 2803
org/telegram/ui/Components/FilterGLThread.java, line(s) 107,180,213,220,229,236,246,257,264,439
org/telegram/ui/Components/FilterShaders.java, line(s) 948,949
org/telegram/ui/Components/ForegroundDetector.java, line(s) 79,111,86,118
org/telegram/ui/Components/GroupCallPipAlertView.java, line(s) 194
org/telegram/ui/Components/GroupVoipInviteAlert.java, line(s) 374
org/telegram/ui/Components/ImageUpdater.java, line(s) 503,536,574,606,689
org/telegram/ui/Components/InstantCameraView.java, line(s) 524,536,542,968,1023,1050,1059,1066,1234,1239,1483,1504,1772,2079,483,1053,1063,1089,1102,1134,1146,1247,1254,1263,1270,1280,1291,1298,1328,1355,1360,1417,1586,1591,1599,1836,1859,1868,1879,1887,2002,2051,2149
org/telegram/ui/Components/JoinCallAlert.java, line(s) 221,285
org/telegram/ui/Components/LetterDrawable.java, line(s) 84
org/telegram/ui/Components/LinkActionView.java, line(s) 217,235
org/telegram/ui/Components/MotionBackgroundDrawable.java, line(s) 301,508
org/telegram/ui/Components/Paint/RenderView.java, line(s) 296,303,312,319,329,340,347,519
org/telegram/ui/Components/Paint/Shader.java, line(s) 19,27,82,92
org/telegram/ui/Components/Paint/Slice.java, line(s) 24,54,88
org/telegram/ui/Components/Paint/Utils.java, line(s) 12
org/telegram/ui/Components/PasscodeView.java, line(s) 536,546,563,619,648,936,950
org/telegram/ui/Components/PathAnimator.java, line(s) 101
org/telegram/ui/Components/PhonebookShareAlert.java, line(s) 285,343,678
org/telegram/ui/Components/PhotoPaintView.java, line(s) 642,1653,1660,1678
org/telegram/ui/Components/PhotoViewerCaptionEnterView.java, line(s) 183,531,909,929,954,987,1110
org/telegram/ui/Components/PhotoViewerWebView.java, line(s) 301,595
org/telegram/ui/Components/PipRoundVideoView.java, line(s) 224
org/telegram/ui/Components/Premium/GLIcon/GLIconTextureView.java, line(s) 395,402,439
org/telegram/ui/Components/Premium/PremiumAppIconsPreviewView.java, line(s) 39
org/telegram/ui/Components/Premium/PremiumNotAvailableBottomSheet.java, line(s) 66
org/telegram/ui/Components/ProximitySheet.java, line(s) 565
org/telegram/ui/Components/RLottieDrawable$5.java, line(s) 34,72,194
org/telegram/ui/Components/RLottieDrawable.java, line(s) 865
org/telegram/ui/Components/RadioButton.java, line(s) 48,153
org/telegram/ui/Components/Reactions/CustomEmojiReactionsWindow.java, line(s) 269
org/telegram/ui/Components/RecyclerListView$3.java, line(s) 26
org/telegram/ui/Components/RecyclerListView$RecyclerListViewItemClickListener.java, line(s) 193
org/telegram/ui/Components/RecyclerListView.java, line(s) 466,1249,1255
org/telegram/ui/Components/ShareAlert.java, line(s) 1891
org/telegram/ui/Components/SharedMediaLayout.java, line(s) 1866,4083
org/telegram/ui/Components/SizeNotifierFrameLayout$BlurBackgroundTask.java, line(s) 44
org/telegram/ui/Components/SlotsDrawable.java, line(s) 70,179
org/telegram/ui/Components/StaticLayoutEx.java, line(s) 99
org/telegram/ui/Components/StickersAlert.java, line(s) 185,1167,1298
org/telegram/ui/Components/TermsOfServiceView.java, line(s) 169
org/telegram/ui/Components/ThemeEditorView.java, line(s) 98,107,1077,1298,1415
org/telegram/ui/Components/TimerDrawable.java, line(s) 118
org/telegram/ui/Components/TranscribeButton.java, line(s) 492
org/telegram/ui/Components/TranslateAlert.java, line(s) 911,1121
org/telegram/ui/Components/UndoView.java, line(s) 125
org/telegram/ui/Components/VideoPlayerSeekBar.java, line(s) 341
org/telegram/ui/Components/VideoTimelinePlayView.java, line(s) 339,409,440
org/telegram/ui/Components/VideoTimelineView.java, line(s) 275,345,377
org/telegram/ui/Components/WallpaperUpdater.java, line(s) 108,111,135,161
org/telegram/ui/Components/WebPlayerView.java, line(s) 454,386,506,565,617,681,736,1077,1339,1387,1743,1751,1759,1767,1775,1781,1805
org/telegram/ui/Components/voip/VoIPHelper.java, line(s) 113,182,401,777
org/telegram/ui/Components/voip/VoIPPiPView.java, line(s) 368,626
org/telegram/ui/ContactAddActivity.java, line(s) 205
org/telegram/ui/ContactsActivity.java, line(s) 283,380,400,472
org/telegram/ui/ContentPreviewViewer.java, line(s) 910,980,1155
org/telegram/ui/CountrySelectActivity.java, line(s) 299,439,450
org/telegram/ui/DialogsActivity.java, line(s) 2608,3410,6772,7877,8262
org/telegram/ui/DiscoverActivity.java, line(s) 233
org/telegram/ui/EditApplyInfoActivity.java, line(s) 63
org/telegram/ui/EmojiAnimationsOverlay.java, line(s) 787
org/telegram/ui/ExternalActionActivity.java, line(s) 610,614,90,417,463
org/telegram/ui/FilterCreateActivity.java, line(s) 499,872
org/telegram/ui/FilteredSearchView.java, line(s) 1056
org/telegram/ui/FiltersSetupActivity.java, line(s) 683
org/telegram/ui/GroupAndChannelActivity.java, line(s) 384,403
org/telegram/ui/GroupCallActivity.java, line(s) 1144,1290
org/telegram/ui/GroupCreateActivity.java, line(s) 1108,1311,1828,2112,2127
org/telegram/ui/GroupInviteActivity.java, line(s) 139,154
org/telegram/ui/GroupStickersActivity.java, line(s) 656
org/telegram/ui/IdenticonActivity.java, line(s) 70
org/telegram/ui/InviteContactsActivity.java, line(s) 593,636,812,838
org/telegram/ui/LanguageSelectActivity.java, line(s) 228,240
org/telegram/ui/LaunchActivity.java, line(s) 524,613,623,2881,3592,3605,3609,3619,3623,3636,3648,301,486,540,1412,1436,1441,1451,1527,1881,1965,2006,2098,2115,2132,2153,2181,2246,2272,2324,2484,2499,2513,2525,2787,2992,3115,3122,3756,3830,3916
org/telegram/ui/LocationActivity.java, line(s) 442,450,545,886,1442,1593,1787,1820,1876,1916,1943,1968,2079,2154,2500,2530,2553,2657,2763,2836,2850,2875,2884
org/telegram/ui/ManageLinksActivity.java, line(s) 989,1004
org/telegram/ui/NewContactActivity.java, line(s) 191,277
org/telegram/ui/NotificationsCustomSettingsActivity.java, line(s) 499
org/telegram/ui/NotificationsSettingsActivity.java, line(s) 322
org/telegram/ui/NotificationsSoundActivity.java, line(s) 920
org/telegram/ui/PasscodeActivity.java, line(s) 584,739
org/telegram/ui/PassportActivity.java, line(s) 835,2110,2463,2762,2872,3608,5087,5469,5532,5730,5746,5910,6646,6764
org/telegram/ui/PaymentFormActivity.java, line(s) 319,517,1250,1466,1553,1562,1712,1719,1995,2267
org/telegram/ui/PeopleNearbyActivity.java, line(s) 609,538,775
org/telegram/ui/PhotoCropActivity.java, line(s) 195,200
org/telegram/ui/PhotoViewer.java, line(s) 6701,6709,13349,707,2658,2666,2768,3040,3980,3992,5866,5897,6222,6276,6972,7013,7020,7393,7414,7792,7928,7941,7956,7985,8109,8292,8302,8529,8536,10658,11328,11739,12084,12095,12104,12218,12336,13629
org/telegram/ui/PopupNotificationActivity.java, line(s) 515,1144
org/telegram/ui/PremiumPreviewFragment.java, line(s) 1529,1544,1559,1581
org/telegram/ui/PrivacyControlActivity.java, line(s) 951
org/telegram/ui/PrivacySettingsActivity.java, line(s) 357
org/telegram/ui/ProfileActivity.java, line(s) 1467,3113,4377,4511,4530,4568,4588,6179,7552,7634,7700,7912,8099
org/telegram/ui/ProfileNotificationsActivity.java, line(s) 281
org/telegram/ui/RedRpmChatUsersActivity.java, line(s) 2253
org/telegram/ui/SecretMediaViewer.java, line(s) 466,472,514,553,865,1024,1150
org/telegram/ui/SelectAnimatedEmojiDialog.java, line(s) 668,730,2567
org/telegram/ui/SessionsActivity.java, line(s) 519,545,1352,1453
org/telegram/ui/StickersActivity.java, line(s) 1043,1065,1426
org/telegram/ui/ThemeActivity.java, line(s) 1252,1264,1352,1357
org/telegram/ui/ThemePreviewActivity.java, line(s) 1075
org/telegram/ui/ThemeSetUrlActivity.java, line(s) 115,133,469,485,720,731
org/telegram/ui/TwoStepVerificationActivity.java, line(s) 204,1106
org/telegram/ui/TwoStepVerificationSetupActivity.java, line(s) 1327,1359
org/telegram/ui/VoIPFragment.java, line(s) 903,892,1503,1714
org/telegram/ui/VoIPPermissionActivity.java, line(s) 34
org/telegram/ui/WalletListActivity.java, line(s) 55,89
org/telegram/ui/WalletWithdrawalRecordActivity.java, line(s) 298
org/telegram/ui/WallpapersListActivity.java, line(s) 1203
org/telegram/ui/WebviewActivity.java, line(s) 106,162,248,260,418
org/telegram/ui/newlogin/ChannelSSLoginActivity.java, line(s) 1124,2149
org/telegram/ui/newlogin/LoginBaseActivity.java, line(s) 577,145,447,515,621,672,909,1026,1179,1570,1717
org/telegram/ui/newlogin/NewLoginActivity.java, line(s) 856,1491,2281
org/telegram/ui/newlogin/NewPageLoginActivity.java, line(s) 994,2032
org/webrtc/AndroidVideoDecoder.java, line(s) 436
org/webrtc/EglRenderer.java, line(s) 207,507
org/webrtc/GlGenericDrawer.java, line(s) 326
org/webrtc/GlShader.java, line(s) 97
org/webrtc/HardwareVideoEncoderFactory.java, line(s) 125
org/webrtc/MediaCodecUtils.java, line(s) 56
org/webrtc/ScreenCapturerAndroid.java, line(s) 85,147
org/webrtc/TextureBufferImpl.java, line(s) 120
org/webrtc/YuvConverter.java, line(s) 116,142
org/webrtc/voiceengine/WebRtcAudioRecord.java, line(s) 161,355,396
org/webrtc/voiceengine/WebRtcAudioTrack.java, line(s) 255,381

信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
org/telegram/messenger/AndroidUtilities.java, line(s) 12,2407,2410
org/telegram/ui/ActionBar/ActionBarMenuItem.java, line(s) 10,1608
org/telegram/ui/ChatActivity.java, line(s) 14,13874
org/telegram/ui/Components/EmbedBottomSheet.java, line(s) 10,834
org/telegram/ui/Components/InviteMembersBottomSheet.java, line(s) 13,235,1187
org/telegram/ui/Components/LinkActionView.java, line(s) 6,210
org/telegram/ui/Components/PhonebookShareAlert.java, line(s) 8,338,360
org/telegram/ui/Components/ShareAlert.java, line(s) 11,1875
org/telegram/ui/Components/TranslateAlert.java, line(s) 8,521
org/telegram/ui/GroupInviteActivity.java, line(s) 4,135
org/telegram/ui/ManageLinksActivity.java, line(s) 4,985
org/telegram/ui/ProfileActivity.java, line(s) 10,4375,4525,7895,7903,7908
org/telegram/ui/SessionBottomSheet.java, line(s) 5,302
org/telegram/ui/StickersActivity.java, line(s) 5,1062
org/telegram/ui/ThemeSetUrlActivity.java, line(s) 4,110
org/telegram/ui/ZXWalletActivity.java, line(s) 4,164

信息 此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改 

此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
org/telegram/ui/ProxySettingsActivity.java, line(s) 59,91,110,5

安全 Firebase远程配置已禁用 

Firebase远程配置URL （ https://firebaseremoteconfig.googleapis.com/v1/projects/68956297440/namespaces/firebase:fetch?key=AIzaSyBm2l9BN4WaUXsbHIWnfAAUz5QjuKdUVrw ） 已禁用。响应内容如下所示：

{
    "state": "NO_TEMPLATE"
}

安全评分: ( 乡村振兴 1.11.2101311)