拼多多 v7.13.0版本 - 安全评分 _南明离火移动安全分析平台

高危基本配置不安全地配置为允许到所有域的明文流量。

Scope:
*

高危 Activity (com.xunmeng.pinduoduo.chat.chatBiz.voiceChat.view.VoiceCallActivity) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (com.aimi.android.common.push.oppo.PermissionForwardActivity) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (com.xiaomi.mipush.sdk.NotificationClickedActivity) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (com.xunmeng.pinduoduo.safemode.SafeModeActivity) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (com.xunmeng.pinduoduo.share.web.subscribe.activity.SubscribeForwardActivity) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (com.xunmeng.pinduoduo.ui.activity.MainFrameActivity) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (com.tencent.tauth.AuthActivity) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (com.xunmeng.pinduoduo.auth_pay.wxpay.WXPayActivity) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (com.xunmeng.pinduoduo.app_widget.desk_shortcut.activities.DsCkActivity) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (com.xunmeng.pinduoduo.ui.activity.MainFrameActivityAssist) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (com.xunmeng.pinduoduo.ui.activity.MainFrameActivityLauncherAssist) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (com.xunmeng.pinduoduo.ui.activity.PandaHmActivity) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (com.xunmeng.pinduoduo.market_ad_forward.TransferActivity) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (com.xunmeng.pinduoduo.market_ad_forward.TransferDeskActivity) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (com.xunmeng.pinduoduo.market_ad_forward.CSDispatchActivity) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (com.xunmeng.pinduoduo.market_ad_forward.CSDispatchTitanActivity) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (com.xunmeng.pinduoduo.multitask.SingleTaskActivity) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (com.xunmeng.pinduoduo.apm.crash.activity.EmptyActivity) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (com.xunmeng.pinduoduo.opensdk.EntryActivity) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_00) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_01) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_02) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_03) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_04) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_05) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_06) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_07) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_08) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_09) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_00_T) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_01_T) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_02_T) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_00) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_01) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_02) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_03) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_04) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_05) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_06) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_07) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_08) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_09) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_00_T) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_01_T) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_02_T) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (com.xunmeng.pinduoduo.wallet.common.externaljump.ExternalJumpActivity) 的启动模式不是standard模式

MANIFEST

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。

CODE

应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/aimi/android/common/util/b.java, line(s) 36,56
com/alipay/b/a/a/a/a/c.java, line(s) 51,70
com/xunmeng/pinduoduo/chat/api/utils/a.java, line(s) 46,66,100,117,137
com/xunmeng/pinduoduo/chat/biz/logisticsRecognition/a.java, line(s) 146,152
com/xunmeng/pinduoduo/map/base/utils/SecurityHttpHandler.java, line(s) 115
com/xunmeng/pinduoduo/number/a/e.java, line(s) 178
com/xunmeng/pinduoduo/vita/patch/inner/b.java, line(s) 153

高危使用弱加密算法

CODE

使用弱加密算法
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/xunmeng/pinduoduo/basekit/http/dns/b/a.java, line(s) 52,105
com/xunmeng/pinduoduo/process_start_stat/h.java, line(s) 180

高危如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击

CODE

如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7

Files:
meco/webkit/WebView.java, line(s) 921,333
mecox/provider/impl/a/b.java, line(s) 1076,34,401,1346,1397,1412,1432,1437,1442,1447,1467,1472,1477,1482,1487,1512,1575,1577,1582,1587,1592,1597,1602,1607,1612,1617,1622,1667,1672,1677,1717,1722,1727,1732,1737,1742,1747,1752,1757,1762
mecox/webkit/WebView.java, line(s) 718,703

高危应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式，因为它对相同的明文块[UNK]产生相同的密文

CODE

应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式，因为它对相同的明文块[UNK]产生相同的密文
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-block-cipher-mode

Files:
com/xunmeng/pinduoduo/data_reporter/b/a.java, line(s) 20,55

高危该文件是World Writable。任何应用程序都可以写入文件

CODE

该文件是World Writable。任何应用程序都可以写入文件
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2

Files:
xmg/mobilebase/kenit/loader/shareutil/KenitSpUtils.java, line(s) 43,23

中危基本配置配置为信任系统证书。

NETWORK

Scope:
*

中危 Activity设置了TaskAffinity属性

MANIFEST

(com.xunmeng.pinduoduo.wxapi.WXEntryActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity (com.xunmeng.pinduoduo.wxapi.WXEntryActivity) 未被保护。

MANIFEST

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity (com.xunmeng.pinduoduo.wxapi.WXPayEntryActivity) 未被保护。

MANIFEST

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity设置了TaskAffinity属性

MANIFEST

(com.xunmeng.pinduoduo.app_pay.sign.SignActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity (com.xunmeng.pinduoduo.finshellapi.FinShellApiActivity) 未被保护。

MANIFEST

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.aimi.android.common.push.huawei.HwPushReceiver) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.huawei.hms.support.api.push.PushEventReceiver) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (com.aimi.android.common.push.oppo.OppoPushCompatibleService) 受权限保护, 但是应该检查权限的保护级别。

MANIFEST

Permission: com.coloros.mcs.permission.SEND_MCS_MESSAGE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (com.aimi.android.common.push.oppo.OppoPushService) 受权限保护, 但是应该检查权限的保护级别。

MANIFEST

Permission: com.heytap.mcs.permission.SEND_PUSH_MESSAGE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (com.vivo.push.sdk.service.CommandClientService) 受权限保护, 但是应该检查权限的保护级别。

MANIFEST

Permission: com.push.permission.UPSTAGESERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (com.xiaomi.mipush.sdk.PushMessageHandler) 未被保护。

MANIFEST

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.aimi.android.common.push.xiaomi.MiPushReceiver) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.aimi.android.common.push.xiaomi.proxy.NetworkStatusReceiver) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity (com.xiaomi.mipush.sdk.NotificationClickedActivity) 未被保护。

MANIFEST

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity设置了TaskAffinity属性

MANIFEST

(com.xunmeng.pinduoduo.share.web.subscribe.activity.SubscribeForwardActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity设置了TaskAffinity属性

MANIFEST

(com.xunmeng.pinduoduo.ui.activity.TransparentEntryActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity (com.xunmeng.pinduoduo.ui.activity.TransparentEntryActivity) 未被保护。

MANIFEST

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity (com.tencent.tauth.AuthActivity) 未被保护。

MANIFEST

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity设置了TaskAffinity属性

MANIFEST

(com.xunmeng.pinduoduo.auth_pay.wxpay.WXPayActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity (com.xunmeng.pinduoduo.auth_pay.alipay.AlipayCallbackActivity) 未被保护。

MANIFEST

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity (com.xunmeng.pinduoduo.auth_pay.qqpay.QQCallbackActivity) 未被保护。

MANIFEST

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity (com.xunmeng.pinduoduo.auth_pay.ddpay.DDWalletCallbackActivity) 未被保护。

MANIFEST

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity (com.xunmeng.pinduoduo.auth_pay.dcepay.DcepayCallbackActivity) 未被保护。

MANIFEST

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (com.xunmeng.pinduoduo.service.AlarmService) 未被保护。

MANIFEST

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.xunmeng.pinduoduo.xlog_wrapper.XlogUploadBroadcastReceiver) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (com.xunmeng.pinduoduo.service.clothes.coat.CoatService) 受权限保护, 但是应该检查权限的保护级别。

MANIFEST

Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (com.xunmeng.pinduoduo.app_widget.LowSdkCycleRefreshReceiver) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetOneXOne3) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetOneXOne2) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetOneXOne1) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetFourXOne1) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetFourXOne2) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetFourXOne3) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetFourXOne4) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetFourXOne5) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetFourXOneSpecial) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetTwoXOne1) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetTwoXTwoSpecial) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetTwoXTwoSpecial2) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.xunmeng.pinduoduo.app_widget.stub.WidgetStubs$StubWidgetTwoXTwoSpecial3) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (com.xunmeng.pinduoduo.app_widget.service.WidgetJobService) 受权限保护, 但是应该检查权限的保护级别。

MANIFEST

Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Activity设置了TaskAffinity属性

MANIFEST

(com.xunmeng.pinduoduo.app_widget.desk_shortcut.activities.DsCkActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity (com.xunmeng.pinduoduo.app_widget.desk_shortcut.activities.DsCkActivity) 未被保护。

MANIFEST

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.xunmeng.pinduoduo.market_widget.express.ExpressNewsWidgetProvider) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.xunmeng.pinduoduo.market_widget.universal.UniversalMiniScrollProvider) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity (com.xunmeng.pinduoduo.ui.activity.MainFrameActivityAssist) 未被保护。

MANIFEST

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity (com.xunmeng.pinduoduo.ui.activity.MainFrameActivityLauncherAssist) 未被保护。

MANIFEST

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity (com.xunmeng.pinduoduo.ui.activity.PandaHmActivity) 未被保护。

MANIFEST

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (com.xunmeng.pinduoduo.market_ad_common.scheduler.channel.MarketCommonService) 未被保护。

MANIFEST

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity设置了TaskAffinity属性

MANIFEST

(com.xunmeng.pinduoduo.market_ad_forward.TransferDeskActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity设置了TaskAffinity属性

MANIFEST

(com.xunmeng.pinduoduo.market_ad_forward.CSDispatchTitanActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Broadcast Receiver (com.xunmeng.basiccomponent.memorymonitorwrapper.receiver.MemoryReceiver) 未被保护。

MANIFEST

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity设置了TaskAffinity属性

MANIFEST

(com.xunmeng.pinduoduo.multitask.SingleTaskActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity设置了TaskAffinity属性

MANIFEST

(com.xunmeng.pinduoduo.apm.crash.activity.EmptyActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity设置了TaskAffinity属性

MANIFEST

(com.xunmeng.pinduoduo.permission.request.PermissionRequestActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity设置了TaskAffinity属性

MANIFEST

(com.xunmeng.pinduoduo.permission.scene_manager.ScenePermissionRequestActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity设置了TaskAffinity属性

MANIFEST

(com.xunmeng.pinduoduo.opensdk.EntryActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity (com.xunmeng.pinduoduo.opensdk.EntryActivity) 未被保护。

MANIFEST

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity (com.xunmeng.pinduoduo.wallet.common.externaljump.ExternalJumpActivity) 未被保护。

MANIFEST

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危文件可能包含硬编码的敏感信息，如用户名、密码、密钥等

CODE

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
am_okdownload/core/IOkDownloadDelegate.java, line(s) 6
com/aimi/android/common/http/downgrade/NetworkDowngradeConfig.java, line(s) 372,298,279
com/aimi/android/common/http/nova/b.java, line(s) 32
com/aimi/android/common/http/policy/HostRewriteBean.java, line(s) 12
com/aimi/android/common/http/policy/UrlRewriteBean.java, line(s) 12
com/xunmeng/almighty/a/b/a.java, line(s) 13
com/xunmeng/almighty/h/a/ac.java, line(s) 14
com/xunmeng/almighty/h/a/ag.java, line(s) 21
com/xunmeng/almighty/h/a/ai.java, line(s) 21
com/xunmeng/almighty/h/a/b.java, line(s) 19
com/xunmeng/almighty/h/a/g.java, line(s) 22
com/xunmeng/almighty/h/a/i.java, line(s) 14
com/xunmeng/almighty/h/a/k.java, line(s) 14
com/xunmeng/almighty/h/a/m.java, line(s) 14
com/xunmeng/almighty/h/a/o.java, line(s) 17
com/xunmeng/almighty/h/a/s.java, line(s) 14
com/xunmeng/almighty/h/a/x.java, line(s) 58
com/xunmeng/almighty/interceptnetwork/a/a.java, line(s) 21
com/xunmeng/almighty/interceptnetwork/a/b.java, line(s) 40
com/xunmeng/basiccomponent/probe/jni/DataStructure/StTaskExInfo.java, line(s) 12
com/xunmeng/basiccomponent/superlink/internal/CertificateUtils.java, line(s) 22
com/xunmeng/basiccomponent/titan/AbstractTitanInterface.java, line(s) 6
com/xunmeng/basiccomponent/titan/api/TitanApiRequest.java, line(s) 200
com/xunmeng/db_framework/a/h.java, line(s) 78
com/xunmeng/effect/kirby/utils/ECrashExtraInfo.java, line(s) 15
com/xunmeng/effect/render_engine_sdk/img_enhance/EnhanceReport.java, line(s) 229
com/xunmeng/goldenarch/GoldenTool.java, line(s) 53,58
com/xunmeng/mediaengine/base/RtcAbControl.java, line(s) 14,23
com/xunmeng/mediaengine/live/RtcLiveJungle.java, line(s) 203,207,67,274,71
com/xunmeng/mediaengine/live/RtcLivePlay.java, line(s) 332,336,302,317,306,321
com/xunmeng/mediaengine/live/RtcLivePush.java, line(s) 46,158,50
com/xunmeng/mediaengine/rtc/impl/ImRtcImpl.java, line(s) 779,769
com/xunmeng/moore/pic_text/view/MoorePicTextDetailFragment.java, line(s) 38
com/xunmeng/moore/upload/GoodsListFragment.java, line(s) 43,53,56,59
com/xunmeng/pdd_av_foundation/live_apm_monitor/f.java, line(s) 22,36
com/xunmeng/pdd_av_foundation/pdd_live_tab/LiveTabFragment.java, line(s) 280
com/xunmeng/pdd_av_foundation/pdd_live_tab/follow_tab/dynamic/LegoFollowTabFragment.java, line(s) 58
com/xunmeng/pdd_av_foundation/pdd_live_tab/s.java, line(s) 83
com/xunmeng/pdd_av_foundation/pdd_live_tab/simple_live_tab/SimpleLiveRecTabFragment.java, line(s) 79
com/xunmeng/pdd_av_foundation/pddimagekit_android/ImageNewEditFragment.java, line(s) 133,144,147,150
com/xunmeng/pdd_av_foundation/pddimagekit_android/ImagePreviewActivity.java, line(s) 88,82,85,91
com/xunmeng/pdd_av_foundation/pddlivepublishscene/view/fragment/viewimpl/PublishCoverCropFragment.java, line(s) 58
com/xunmeng/pdd_av_foundation/pddlivepublishscene/view/fragment/viewimpl/PublishLiveRoomFragment.java, line(s) 282
com/xunmeng/pdd_av_foundation/pddlivescene/entity/LiveBubbleEventVO.java, line(s) 7
com/xunmeng/pdd_av_foundation/pddlivescene/view/fragment/PDDBaseLivePlayFragment.java, line(s) 214
com/xunmeng/pdd_av_foundation/pddlivescene/view/fragment/PDDLivePlayFragment.java, line(s) 27,34,37,40,43,46
com/xunmeng/pdd_av_foundation/pddlivescene/view/widget/LivePublisherCardView.java, line(s) 103
com/xunmeng/pdd_av_foundation/pddvideocapturekit/albumvideo/AlbumVideoAndSmartAlbumFragment.java, line(s) 101
com/xunmeng/pdd_av_foundation/pddvideocapturekit/fragment/BaseCaptureLegoFragment.java, line(s) 71
com/xunmeng/pdd_av_foundation/pddvideocapturekit/fragment/VideoCaptureMixCameraFragment.java, line(s) 72,75
com/xunmeng/pdd_av_foundation/pddvideocapturekit/fragment/VideoCaptureShootFragmentV2.java, line(s) 92,95,98
com/xunmeng/pdd_av_foundation/pddvideocapturekitapi/base/apm/PublishAPMReportMap.java, line(s) 87,99
com/xunmeng/pdd_av_foundation/pddvideoeditkit/fragment/VideoEditAndPublishFragment.java, line(s) 93,96
com/xunmeng/pddrtc/base/PddRtcAbConfigImpl.java, line(s) 38,28,58,107,81,94,71
com/xunmeng/pddrtc/impl/PddRtcImpl.java, line(s) 139,256,150
com/xunmeng/pinduoduo/album/plugin/support/AlbumPluginSdkVersion.java, line(s) 11
com/xunmeng/pinduoduo/app/j.java, line(s) 66,69
com/xunmeng/pinduoduo/app_address_lego/AddressLegoFragment.java, line(s) 78,81
com/xunmeng/pinduoduo/app_address_lego/CreateLegoAddressActivity.java, line(s) 60
com/xunmeng/pinduoduo/app_album/album/MultiImageSelectorFragment.java, line(s) 110,113
com/xunmeng/pinduoduo/app_apm_page/apm/page/d.java, line(s) 165,163
com/xunmeng/pinduoduo/app_badge/a.java, line(s) 95
com/xunmeng/pinduoduo/app_badge/enitity/BadgeResult.java, line(s) 10
com/xunmeng/pinduoduo/app_base_photo_browser/NewMediaBrowseFragment.java, line(s) 47,50
com/xunmeng/pinduoduo/app_default_home/dualcolumn/header/a/a.java, line(s) 56
com/xunmeng/pinduoduo/app_favorite_mall/FavoriteMallNewArrivalFragment.java, line(s) 111,114,117
com/xunmeng/pinduoduo/app_home/HomeFragment.java, line(s) 108,111
com/xunmeng/pinduoduo/app_lego/v8/LegoV8ContainerFragment.java, line(s) 170,173
com/xunmeng/pinduoduo/app_qr_scan/fragment/QrScanFragment.java, line(s) 61
com/xunmeng/pinduoduo/app_search_common/history/SearchHistoryModel.java, line(s) 31
com/xunmeng/pinduoduo/arch/config/internal/ab/a.java, line(s) 33
com/xunmeng/pinduoduo/arch/config/internal/abexp/AbExpTrackConfigModel.java, line(s) 85
com/xunmeng/pinduoduo/arch/config/internal/abexp/a.java, line(s) 68
com/xunmeng/pinduoduo/arch/vita/memory_cache/CompInfo.java, line(s) 14
com/xunmeng/pinduoduo/arch/vita/q/b.java, line(s) 267
com/xunmeng/pinduoduo/at/a.java, line(s) 156,159
com/xunmeng/pinduoduo/audio/a.java, line(s) 34
com/xunmeng/pinduoduo/base_pinbridge/AMStorage.java, line(s) 281
com/xunmeng/pinduoduo/basekit/http/dns/DnsConfigInfo.java, line(s) 166
com/xunmeng/pinduoduo/bridge/Constants.java, line(s) 59
com/xunmeng/pinduoduo/category/CategoryFragment.java, line(s) 71,74,77,80
com/xunmeng/pinduoduo/category/OperationProductsFragment.java, line(s) 69,72
com/xunmeng/pinduoduo/chat/biz/followBuyRedPacket/ChatRedPacketDetailFragment.java, line(s) 23,26
com/xunmeng/pinduoduo/chat/biz/inputPanelBiz/hongbao/HongbaoPayFragment.java, line(s) 43,46
com/xunmeng/pinduoduo/chat/biz/multiMedia/ViewChatImageActivity.java, line(s) 78
com/xunmeng/pinduoduo/chat/camera/ChatCameraActivity.java, line(s) 24,27
com/xunmeng/pinduoduo/chat/chatBiz/conversation/fragment/ChatTabFragment.java, line(s) 40,43
com/xunmeng/pinduoduo/chat/chatBiz/conversation/fragment/ConversationPageFragment.java, line(s) 34,37
com/xunmeng/pinduoduo/chat/chatBiz/voiceChat/view/video/SingleMallVideoCallFragment.java, line(s) 22,25
com/xunmeng/pinduoduo/chat/chatBiz/voiceChat/view/video/SingleVideoCallFragment.java, line(s) 86,89
com/xunmeng/pinduoduo/chat/chatBiz/voiceChat/view/voice/SingleVoiceCallFragment.java, line(s) 38,41
com/xunmeng/pinduoduo/chat/daren/DaRenChatFragment.java, line(s) 50,53
com/xunmeng/pinduoduo/chat/daren/setting/DarenUserFragment.java, line(s) 37,40
com/xunmeng/pinduoduo/chat/logistics/LogisticsNewChatFragment.java, line(s) 44,47
com/xunmeng/pinduoduo/chat/maicai/MaiCaiChatFragment.java, line(s) 42,45
com/xunmeng/pinduoduo/chat/mall/base/AbsMallChatFragment.java, line(s) 110
com/xunmeng/pinduoduo/chat/mall/mall/MallChatFragment.java, line(s) 94,88,91,97
com/xunmeng/pinduoduo/chat/mall/mall/floatlayer/MallChatFloatLayerFragment.java, line(s) 39,33,36
com/xunmeng/pinduoduo/chat/mall/official/OfficialChatFragment.java, line(s) 59,53,56
com/xunmeng/pinduoduo/chat/mall/setting/MallChatSettingFragment.java, line(s) 29,32
com/xunmeng/pinduoduo/chat/timeline/MomentsNewChatDetailFragment.java, line(s) 78,81
com/xunmeng/pinduoduo/chat/timeline/MomentsNewChatGroupDetailFragment.java, line(s) 24,27,30
com/xunmeng/pinduoduo/chat/timeline/group/SingleSettingFragment.java, line(s) 30,33
com/xunmeng/pinduoduo/classification/fragment/SearchCategoryFragment.java, line(s) 94,97,100,103
com/xunmeng/pinduoduo/classification/fragment/SearchCategoryGoodsTabFragment.java, line(s) 40,36,45,48,51,54,65,68,71
com/xunmeng/pinduoduo/comment/camera_video/BaseCommentCameraFragment.java, line(s) 169,111
com/xunmeng/pinduoduo/comment/camera_video/CommentCameraFragment.java, line(s) 64,51
com/xunmeng/pinduoduo/comment/camera_video/VideoEditPreviewFragment.java, line(s) 132,135,138
com/xunmeng/pinduoduo/comment/fragment/BaseCommentFragment.java, line(s) 101
com/xunmeng/pinduoduo/comment/fragment/OrderAdditionalCommentFragment.java, line(s) 13,16
com/xunmeng/pinduoduo/comment/fragment/OrderCommentFragment.java, line(s) 26,29
com/xunmeng/pinduoduo/common/upload/entity/a.java, line(s) 198
com/xunmeng/pinduoduo/common_upgrade/config/a.java, line(s) 28,55
com/xunmeng/pinduoduo/common_upgrade/upgrade/bean/PatchExpInfo.java, line(s) 25
com/xunmeng/pinduoduo/cs_disperse/c.java, line(s) 36
com/xunmeng/pinduoduo/device_strategy_service/storage/StorageStrategyConfig.java, line(s) 34
com/xunmeng/pinduoduo/e/d.java, line(s) 26
com/xunmeng/pinduoduo/e/h.java, line(s) 29
com/xunmeng/pinduoduo/effect/codec/api/CodecPluginSdkVersion.java, line(s) 10
com/xunmeng/pinduoduo/effect/plugin/impl/AipinPluginSdkVersion.java, line(s) 8
com/xunmeng/pinduoduo/effect/plugin/impl/DebugToolPluginSdkVersion.java, line(s) 8
com/xunmeng/pinduoduo/effectservice_cimpl/store/c.java, line(s) 56
com/xunmeng/pinduoduo/event_impl/b/a.java, line(s) 201
com/xunmeng/pinduoduo/express/ExpressMapFragmentWithWeb.java, line(s) 176,170,173,182,185,194,179,188,191
com/xunmeng/pinduoduo/face_anti_spoofing_ui/ui/FaceAntiSpoofingActivity.java, line(s) 17,20
com/xunmeng/pinduoduo/fastjs/j/a.java, line(s) 112
com/xunmeng/pinduoduo/favbase/ChatFavListFragment.java, line(s) 101,105,108
com/xunmeng/pinduoduo/favbase/FavListNewFragment.java, line(s) 141,144
com/xunmeng/pinduoduo/favbase/search/SearchResultAbFragment.java, line(s) 51
com/xunmeng/pinduoduo/friend/ApplicationFragment.java, line(s) 127,130,133,136
com/xunmeng/pinduoduo/friend/ContactFriendsFragment.java, line(s) 103,106
com/xunmeng/pinduoduo/friend/ContactFriendsSearchFragment.java, line(s) 17
com/xunmeng/pinduoduo/friend/FriendSearchFragment.java, line(s) 13
com/xunmeng/pinduoduo/friend/FriendsFragmentV2.java, line(s) 100,103,106
com/xunmeng/pinduoduo/friend/MyQrCodeFragment.java, line(s) 55,58
com/xunmeng/pinduoduo/goods/ProductDetailFragment.java, line(s) 229,232,235,238,241
com/xunmeng/pinduoduo/goods/entity/GoodsDecoration.java, line(s) 206
com/xunmeng/pinduoduo/image_search/ImageSearchHistoryFragment.java, line(s) 43,46
com/xunmeng/pinduoduo/image_search/featrueV4/ImageSearchFragmentV4.java, line(s) 123,135,126,138,132
com/xunmeng/pinduoduo/image_search/new_version/NewImageSearchFragment.java, line(s) 165,147,156,159,162,153
com/xunmeng/pinduoduo/l/d/b.java, line(s) 93
com/xunmeng/pinduoduo/login/DirectLoginFragment.java, line(s) 69,72,75,78,81
com/xunmeng/pinduoduo/login/InternationalPhoneLoginFragment.java, line(s) 62,65,68,71
com/xunmeng/pinduoduo/login/LoginFragment.java, line(s) 62,87,90,66,72,75,78
com/xunmeng/pinduoduo/login/NewLoginFragment.java, line(s) 51,58,65,68,71
com/xunmeng/pinduoduo/login/ReceiveYzmFragment.java, line(s) 43,50,53,56
com/xunmeng/pinduoduo/login/login_saved_account/LoginSavedAccountFragment.java, line(s) 85,88,91,94
com/xunmeng/pinduoduo/login/s.java, line(s) 30,33,36
com/xunmeng/pinduoduo/login/switch_account/SwitchAccountTabFragment.java, line(s) 62,65
com/xunmeng/pinduoduo/login/t.java, line(s) 29,32,35
com/xunmeng/pinduoduo/mall/MallFragment.java, line(s) 212,191,209,194,197,200,203,206
com/xunmeng/pinduoduo/mall/MallProductSortFragment.java, line(s) 132,123,126,129
com/xunmeng/pinduoduo/mall/comment/MallCommentFragment.java, line(s) 85,88,91,94
com/xunmeng/pinduoduo/mall/comment/MallCommentListBrowserFragment.java, line(s) 89,83,86,92,95
com/xunmeng/pinduoduo/mall/comment/MallSingleCommentBrowserFragment.java, line(s) 35,38,41
com/xunmeng/pinduoduo/mall/search/MallSearchFragment.java, line(s) 66,69
com/xunmeng/pinduoduo/mall/search/NewMallSearchResultFragment.java, line(s) 131,134
com/xunmeng/pinduoduo/map/chat/ChatMapFragment.java, line(s) 103,106
com/xunmeng/pinduoduo/market_ad_common/scheduler/channel/MarketMessageReceiver.java, line(s) 35,34
com/xunmeng/pinduoduo/market_base_page/fragment/RedPacketReceiveFragment.java, line(s) 57,46
com/xunmeng/pinduoduo/msg_floating/ui/CoreViewContext.java, line(s) 28
com/xunmeng/pinduoduo/net_adapter/hera/netcapture/INetModelService.java, line(s) 6
com/xunmeng/pinduoduo/net_adapter/hera/report/IRequestMonitorHelper.java, line(s) 8
com/xunmeng/pinduoduo/net_adapter/hera/specialcode/login/ISpecialCode40001Service.java, line(s) 7
com/xunmeng/pinduoduo/net_adapter/hera/specialcode/riskcontrol/ISpecialCode54001Service.java, line(s) 6
com/xunmeng/pinduoduo/net_interface/hera/guard/IRequestGuard.java, line(s) 8
com/xunmeng/pinduoduo/notificationbox/NotificationBoxFragment.java, line(s) 93,96
com/xunmeng/pinduoduo/notificationbox/entity/KeyWord.java, line(s) 112
com/xunmeng/pinduoduo/notificationbox/ui/ActivityNotifySettingFragment.java, line(s) 29,32
com/xunmeng/pinduoduo/notificationbox/ui/MessageSettingFragment.java, line(s) 40,43
com/xunmeng/pinduoduo/notificationbox/ui/NotificationBoxSettingFragment.java, line(s) 17,20
com/xunmeng/pinduoduo/order/OrderListFragment.java, line(s) 95,98,104
com/xunmeng/pinduoduo/order/OrderSearchFragment.java, line(s) 107,113
com/xunmeng/pinduoduo/personal_center/PersonalFragment.java, line(s) 106,109
com/xunmeng/pinduoduo/personal_center/d/a.java, line(s) 205
com/xunmeng/pinduoduo/pisces/MediaSelectorFragment.java, line(s) 83,89,92
com/xunmeng/pinduoduo/pisces/SocialCaptureFragment.java, line(s) 70
com/xunmeng/pinduoduo/pmm/PMMReport.java, line(s) 377
com/xunmeng/pinduoduo/profile/HistoryProfilePhotoFragment.java, line(s) 31,34
com/xunmeng/pinduoduo/profile/ProfileFragment.java, line(s) 112,115
com/xunmeng/pinduoduo/q/b/d.java, line(s) 211,279
com/xunmeng/pinduoduo/review/fragment/CommentBrowseFragment.java, line(s) 132,135,138
com/xunmeng/pinduoduo/review/fragment/CommentChosenPicsFragment.java, line(s) 38,44,47
com/xunmeng/pinduoduo/review/fragment/CommentListFragment.java, line(s) 82,85,88,91
com/xunmeng/pinduoduo/review/fragment/CommentPgcBrowseFragmentV2.java, line(s) 47,50
com/xunmeng/pinduoduo/review/fragment/CommentPgcFragment.java, line(s) 41,44,52,55,58
com/xunmeng/pinduoduo/router/proxy/e.java, line(s) 156
com/xunmeng/pinduoduo/search/fragment/NewSearchFragment.java, line(s) 100,79,82,94,85,73,91,70,97,88,67
com/xunmeng/pinduoduo/search/fragment/SearchInputFragment.java, line(s) 115,112,118
com/xunmeng/pinduoduo/search/fragment/SearchSuggestFragment.java, line(s) 43,40
com/xunmeng/pinduoduo/search/s/t.java, line(s) 12
com/xunmeng/pinduoduo/settings/SettingFragment.java, line(s) 83,86
com/xunmeng/pinduoduo/sharecomment/ShareCommentFragment.java, line(s) 140,143,146
com/xunmeng/pinduoduo/sku_checkout/checkout/data/f/b.java, line(s) 37
com/xunmeng/pinduoduo/social/mall/fragment/MallMomentListFragment.java, line(s) 41
com/xunmeng/pinduoduo/social/topic/TopicHomeContainerFragment.java, line(s) 94,104,100
com/xunmeng/pinduoduo/social/topic/component/TopicHomeComponentFragment.java, line(s) 60
com/xunmeng/pinduoduo/social/topic/component/TopicPopularityComponentFragment.java, line(s) 20
com/xunmeng/pinduoduo/social/topic/component/TopicUserComponentFragment.java, line(s) 29
com/xunmeng/pinduoduo/social/topic/component/TopicUserProfileComponentFragment.java, line(s) 37
com/xunmeng/pinduoduo/social/topic/media_browser/TopicMediaBrowserFragment.java, line(s) 46,49
com/xunmeng/pinduoduo/timeline/MomentUserProfileFragmentNew.java, line(s) 154,151
com/xunmeng/pinduoduo/timeline/MomentsFragment.java, line(s) 1602,243,246
com/xunmeng/pinduoduo/timeline/TimelineSelfIntroductionPopFragment.java, line(s) 66
com/xunmeng/pinduoduo/timeline/friends_selection/FriendsSelectorFragment.java, line(s) 71,68
com/xunmeng/pinduoduo/timeline/goods_selection/MomentsCommentGoodsFragment.java, line(s) 67,70
com/xunmeng/pinduoduo/timeline/manager/LegoDynamicHolderManager.java, line(s) 112,161,175
com/xunmeng/pinduoduo/timeline/media_browser/PxqMediaBrowserFragment.java, line(s) 60,57
com/xunmeng/pinduoduo/timeline/moment_detail/MomentsDetailFragmentV2.java, line(s) 144,147
com/xunmeng/pinduoduo/timeline/moment_detail/section/MomentDetailLegoTemplateSection.java, line(s) 32
com/xunmeng/pinduoduo/timeline/moment_feed/fragment/MomentsGoodsSoldOutFragment.java, line(s) 17
com/xunmeng/pinduoduo/timeline/moment_list/fragment/MomentUgcAccumulateContainerFragment.java, line(s) 25
com/xunmeng/pinduoduo/timeline/moment_list/fragment/MomentsRecHistoryFragment.java, line(s) 25
com/xunmeng/pinduoduo/timeline/momentchat/MomentsChatRedPackageSendFragment.java, line(s) 84,87,90
com/xunmeng/pinduoduo/timeline/new_moments/section/LegoTemplateBaseSection.java, line(s) 29
com/xunmeng/pinduoduo/timeline/redenvelope/container/RedEnvelopeContainerFragment.java, line(s) 41
com/xunmeng/pinduoduo/timeline/remindlist/RemindListFragment.java, line(s) 95,107
com/xunmeng/pinduoduo/timeline/remindlist/a/c.java, line(s) 884
com/xunmeng/pinduoduo/timeline/service/cy.java, line(s) 329
com/xunmeng/pinduoduo/timeline/videoalbum/c/a.java, line(s) 355,106,82,115
com/xunmeng/pinduoduo/ui/activity/MainFrameActivity.java, line(s) 96
com/xunmeng/pinduoduo/util/m.java, line(s) 121
com/xunmeng/pinduoduo/vita/adapter/preload/PreLoadResourceInfo.java, line(s) 21
com/xunmeng/pinduoduo/wallet/PatternLockSettingFragment.java, line(s) 20,23
com/xunmeng/pinduoduo/wallet/PaySettingFragment.java, line(s) 40,43
com/xunmeng/pinduoduo/wallet/card/BankListFragment.java, line(s) 45,48
com/xunmeng/pinduoduo/wallet/common/accountbiz/bind/RecyclerBindBankCardFragment.java, line(s) 49,52,39,42
com/xunmeng/pinduoduo/wallet/common/accountbiz/fragment/BankCardPhoneInputFragment.java, line(s) 45,48,52,56
com/xunmeng/pinduoduo/wallet/common/accountbiz/fragment/BoundCardVerifyFragment.java, line(s) 42,45
com/xunmeng/pinduoduo/wallet/common/auth/passwd/ForgetPasswordMethodFragment.java, line(s) 50,53
com/xunmeng/pinduoduo/wallet/common/auth/passwd/PasswdFragment.java, line(s) 64,67
com/xunmeng/pinduoduo/wallet/common/card/BankCardActivity.java, line(s) 61
com/xunmeng/pinduoduo/wallet/common/ocr/CardCameraFragmentV3.java, line(s) 49,52,40
com/xunmeng/pinduoduo/wallet/common/ocr/CardIdConfirmFragment.java, line(s) 57,54,41
com/xunmeng/pinduoduo/wallet/common/sms/SMSAuthFragment.java, line(s) 70,73
com/xunmeng/pinduoduo/wallet/patternlock/PatternLockFragment.java, line(s) 50,53
com/xunmeng/pinduoduo/wallet/pay/internal/confirm/PayConfirmActivity.java, line(s) 97,100
com/xunmeng/pinduoduo/wallet/pay/internal/installments/SelectInstallmentCreditCardFragment.java, line(s) 40,43
com/xunmeng/pinduoduo/wallet/withdraw/WalletWithdrawResultFragment.java, line(s) 66,69
com/xunmeng/pinduoduo/web/e.java, line(s) 236,311,515
com/xunmeng/pinduoduo/web/modules/api_pre_request/FetchConfig.java, line(s) 38
com/xunmeng/pinduoduo/web_util/f.java, line(s) 30
com/xunmeng/sargeras/SargerasConfig.java, line(s) 67,61,55,49,83,73

中危应用程序使用不安全的随机数生成器

CODE

应用程序使用不安全的随机数生成器
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/bytedance/boost_multidex/DexInstallProcessor.java, line(s) 12
com/xunmeng/android_ui/smart_list/SmartListDelegateAdapter.java, line(s) 40
com/xunmeng/android_ui/smart_list/a.java, line(s) 13
com/xunmeng/android_ui/smart_list/business/bottom_recommend/c/k.java, line(s) 25
com/xunmeng/android_ui/smart_list/business/bottom_recommend/nestviewpager/viewpager/ChildFragment.java, line(s) 23
com/xunmeng/moore/util/m.java, line(s) 16
com/xunmeng/pdd_av_foundation/pdd_live_tab/util/LiveTabUtil.java, line(s) 29
com/xunmeng/pdd_av_foundation/pddlive/common/messagelist/e.java, line(s) 54
com/xunmeng/pdd_av_foundation/pddlivescene/presenter/c.java, line(s) 27
com/xunmeng/pdd_av_foundation/pddlivescene/view/widget/likeview/AnimationLayout.java, line(s) 20
com/xunmeng/pdd_av_foundation/pddlivescene/view/widget/likeview/a.java, line(s) 6
com/xunmeng/pinduoduo/apm/crash/core/b.java, line(s) 27
com/xunmeng/pinduoduo/apm/thread/ConcurrencyMonitor.java, line(s) 26
com/xunmeng/pinduoduo/apm/thread/ThreadCountMonitor.java, line(s) 32
com/xunmeng/pinduoduo/apm/thread/e.java, line(s) 19
com/xunmeng/pinduoduo/apm/thread/h.java, line(s) 12
com/xunmeng/pinduoduo/arch/config/e/a.java, line(s) 44
com/xunmeng/pinduoduo/arch/config/internal/e/b.java, line(s) 16
com/xunmeng/pinduoduo/arch/config/internal/h.java, line(s) 27
com/xunmeng/pinduoduo/arch/vita/VitaManagerImpl.java, line(s) 39
com/xunmeng/pinduoduo/badge/leolin/b/a.java, line(s) 6
com/xunmeng/pinduoduo/base/fragment/BaseFragment.java, line(s) 70
com/xunmeng/pinduoduo/base_pinbridge/AMDevice.java, line(s) 30
com/xunmeng/pinduoduo/category/e/f.java, line(s) 8
com/xunmeng/pinduoduo/chat/newChat/base/msglist/inputPanel/a/v.java, line(s) 24
com/xunmeng/pinduoduo/chat/sync/messagesynchandler/implemention/d.java, line(s) 28
com/xunmeng/pinduoduo/chat/sync/messagesynchandler/task/a/b.java, line(s) 17
com/xunmeng/pinduoduo/common/upload/c/f.java, line(s) 12
com/xunmeng/pinduoduo/event_impl/c/f.java, line(s) 9
com/xunmeng/pinduoduo/event_impl/d/c.java, line(s) 6
com/xunmeng/pinduoduo/event_impl/m/a.java, line(s) 16
com/xunmeng/pinduoduo/face_anti_spoofing_ui/util/i.java, line(s) 4
com/xunmeng/pinduoduo/faceantispoofing/b/n.java, line(s) 8
com/xunmeng/pinduoduo/goods/d/a.java, line(s) 14
com/xunmeng/pinduoduo/goods/util/r.java, line(s) 46
com/xunmeng/pinduoduo/image_search/l/p.java, line(s) 12
com/xunmeng/pinduoduo/index/promotion/PromotionCategoryFragment.java, line(s) 50
com/xunmeng/pinduoduo/index/ui/FirstCategoryFragment.java, line(s) 55
com/xunmeng/pinduoduo/lego/v8/list/h.java, line(s) 5
com/xunmeng/pinduoduo/mall/s/aj.java, line(s) 37
com/xunmeng/pinduoduo/mall/view/MallProductSortListView.java, line(s) 40
com/xunmeng/pinduoduo/mall/view/lego_tab/MallLegoListPageView.java, line(s) 35
com/xunmeng/pinduoduo/minos/v2/task/a/a.java, line(s) 5
com/xunmeng/pinduoduo/minos/v2/task/a/b.java, line(s) 5
com/xunmeng/pinduoduo/minos/v2/task/a/c.java, line(s) 5
com/xunmeng/pinduoduo/minos/v2/task/a/d.java, line(s) 5
com/xunmeng/pinduoduo/pmm/PMMReport.java, line(s) 50
com/xunmeng/pinduoduo/pmm/a/a.java, line(s) 15
com/xunmeng/pinduoduo/pmm/sampling/f.java, line(s) 14
com/xunmeng/pinduoduo/power_monitor/d/b.java, line(s) 19
com/xunmeng/pinduoduo/safemode/ae.java, line(s) 16
com/xunmeng/pinduoduo/secure/e.java, line(s) 20
com/xunmeng/pinduoduo/social/common/o/b.java, line(s) 14
com/xunmeng/pinduoduo/t/a.java, line(s) 14
com/xunmeng/pinduoduo/timeline/big_imge/FlyEmojiView.java, line(s) 23
com/xunmeng/pinduoduo/timeline/friends_selection/e/a.java, line(s) 19
com/xunmeng/pinduoduo/timeline/template/TimelineSmallProcessEntity.java, line(s) 11
com/xunmeng/pinduoduo/timeline/videoalbum/b/c.java, line(s) 11
com/xunmeng/pinduoduo/util/impr/LetterNumberListIdProvider.java, line(s) 3
com/xunmeng/pinduoduo/web/interceptor/impl/d.java, line(s) 25
com/xunmeng/pinduoduo/web/modules/api_pre_request/a.java, line(s) 6
com/xunmeng/pinduoduo/xlog_upload/XlogUploadManager.java, line(s) 22
xmg/mobilebase/exp_task/a/b.java, line(s) 22
xmg/mobilebase/kenit/loader/shareutil/ShareLoadReport.java, line(s) 16

中危此应用程序可能会请求root（超级用户）权限

CODE

此应用程序可能会请求root（超级用户）权限
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
com/xunmeng/pinduoduo/secure/h.java, line(s) 815

中危 MD5是已知存在哈希冲突的弱哈希

CODE

MD5是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
am_okdownload/core/e.java, line(s) 41
com/xunmeng/almighty/ctnmgr/e/g.java, line(s) 95
com/xunmeng/almighty/m/g.java, line(s) 11
com/xunmeng/basiccomponent/iris/i.java, line(s) 88
com/xunmeng/basiccomponent/probe/d.java, line(s) 17
com/xunmeng/db_framework/i.java, line(s) 22
com/xunmeng/e/a/a/b.java, line(s) 13
com/xunmeng/effect/render_engine_sdk/img_enhance/d.java, line(s) 188
com/xunmeng/pinduoduo/apm/common/utils/b.java, line(s) 94
com/xunmeng/pinduoduo/apm/common/utils/d.java, line(s) 315
com/xunmeng/pinduoduo/arch/config/internal/i.java, line(s) 48,22
com/xunmeng/pinduoduo/arch/vita/utils/f.java, line(s) 45,15
com/xunmeng/pinduoduo/basekit/commonutil/MD5Utils.java, line(s) 29,41
com/xunmeng/pinduoduo/chat/api/utils/b.java, line(s) 11
com/xunmeng/pinduoduo/chat/unifylayer/dcenter/impl/datasdk/submsg/a/a/e.java, line(s) 33
com/xunmeng/pinduoduo/command_center/internal/c.java, line(s) 62
com/xunmeng/pinduoduo/common/upload/c/b.java, line(s) 21,98
com/xunmeng/pinduoduo/common_upgrade/c/b.java, line(s) 18
com/xunmeng/pinduoduo/effectservice_cimpl/d/g.java, line(s) 47
com/xunmeng/pinduoduo/friend/i/d.java, line(s) 40
com/xunmeng/pinduoduo/lego/d/e.java, line(s) 51
com/xunmeng/pinduoduo/login/module/AMLogin.java, line(s) 107
com/xunmeng/pinduoduo/map/base/utils/SecurityHttpHandler.java, line(s) 131
com/xunmeng/pinduoduo/pddmap/MapYamlLoader.java, line(s) 140
com/xunmeng/pinduoduo/safemode/l.java, line(s) 49
com/xunmeng/pinduoduo/secure/c/e.java, line(s) 834
com/xunmeng/pinduoduo/secure/d/f.java, line(s) 10
com/xunmeng/pinduoduo/vita/patch/b/b.java, line(s) 16,36
xmg/mobilebase/kenit/loader/shareutil/SharePatchFileUtil.java, line(s) 153,315

中危 IP地址泄露

CODE

IP地址泄露


Files:
com/aimi/android/common/http/b.java, line(s) 490,504,518,491,505,519,492,506,520,493,507,521,494,508,522,495,509,523,496,510,524,497,511,525
com/aimi/android/common/http/nova/a.java, line(s) 50,47
com/xunmeng/basiccomponent/titan/jni/DataStructure/StGslbConfig.java, line(s) 38,87,102,38,87,102,38,87,102,38,87,102
com/xunmeng/basiccomponent/titan/util/d.java, line(s) 122
com/xunmeng/mediaengine/rtc/impl/ImRtcImpl.java, line(s) 421,426
com/xunmeng/pinduoduo/basekit/c/d.java, line(s) 267
com/xunmeng/pinduoduo/basekit/http/dns/DnsConfigInfo.java, line(s) 175,174
com/xunmeng/pinduoduo/basekit/http/dns/HttpDns.java, line(s) 34,46,58,35,47,59,36,48,60,37,49,61,38,50,62,39,51,63,40,52,64,41,53,65
com/xunmeng/pinduoduo/longlink/f.java, line(s) 80,74,73,80,48,135,135,135,135,135,135,135,135,135,135
com/xunmeng/pinduoduo/network_diagnose/e.java, line(s) 90,80,197,198
meco/util/MecoComponentUtil.java, line(s) 21
mecox/c/a/c.java, line(s) 105
xmg/mobilebase/kenit/lib/a/a.java, line(s) 142
xmg/mobilebase/kenit/loader/shareutil/ShareKenitInternals.java, line(s) 384,385,654

中危应用程序创建临时文件。敏感信息永远不应该被写进临时文件

CODE

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
com/bytedance/boost_multidex/Utility.java, line(s) 141,448
com/xunmeng/pinduoduo/common_upgrade/e/a.java, line(s) 280

中危 SHA-1是已知存在哈希冲突的弱哈希

CODE

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/alipay/b/a/a/a/a.java, line(s) 44
com/alipay/b/a/a/a/a/b.java, line(s) 11
com/alipay/b/a/a/a/a/c.java, line(s) 25
com/xunmeng/f/a/a/a/b.java, line(s) 13
com/xunmeng/pinduoduo/app_pay/d.java, line(s) 149
com/xunmeng/pinduoduo/chat/api/utils/c.java, line(s) 19
com/xunmeng/pinduoduo/supplier/e/a.java, line(s) 95
com/xunmeng/pinduoduo/supplier/f/a.java, line(s) 215
xmg/mobilebase/kenit/android/dex/i.java, line(s) 377

中危应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库

CODE

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
am_okdownload/core/g/c.java, line(s) 7,8,59
com/orm/b.java, line(s) 6,270
com/orm/e.java, line(s) 5,6,7,291
com/tencent/wcdb/database/SQLiteDatabase.java, line(s) 4,163
com/xunmeng/almighty/db/KeyValueStorage.java, line(s) 4,5,64
com/xunmeng/almighty/db/a.java, line(s) 4,75
com/xunmeng/almighty/db/c.java, line(s) 5,26
com/xunmeng/almighty/db/d.java, line(s) 4,46
com/xunmeng/basiccomponent/iris/sqlite/b.java, line(s) 4,5,12
com/xunmeng/pinduoduo/chat/biz/emotion/b/a/e.java, line(s) 4,5,87
com/xunmeng/pinduoduo/chat/datasdk/sdk/orm/db/d.java, line(s) 6,206
com/xunmeng/pinduoduo/data_reporter/a/a.java, line(s) 6,7,8,9,10,11,220
com/xunmeng/pinduoduo/data_reporter/a/b.java, line(s) 5,6,13
com/xunmeng/pinduoduo/event_impl/j/b.java, line(s) 8,9,10,201
com/xunmeng/pinduoduo/event_impl/j/c.java, line(s) 5,6,12

中危应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据

CODE

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
com/alipay/b/a/a/b/b.java, line(s) 242,488
com/alipay/b/a/a/d/b.java, line(s) 24
com/xunmeng/pinduoduo/app_album/album/repository/AlbumMediaLoadServiceImpl.java, line(s) 572
com/xunmeng/pinduoduo/sensitive_api/StorageApi.java, line(s) 306
com/xunmeng/pinduoduo/sensitive_api/storage/b.java, line(s) 30,46,50
com/xunmeng/pinduoduo/sensitive_api/storage/l.java, line(s) 77,82,124,125

中危不安全的Web视图实现。可能存在WebView任意代码执行漏洞

CODE

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
com/xunmeng/pinduoduo/fastjs/e/b.java, line(s) 290,284

中危应用程序包含隐私跟踪程序

TRACKERS

此应用程序有多个2隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。

中危此应用可能包含硬编码机密信息

SECRETS

从应用程序中识别出以下机密确保这些不是机密或私人信息
vivo推送的=> "com.vivo.push.api_key" : "a870d4b2-a46a-452a-a2bb-3e93b54c709b"
荣耀推送的=> "com.hihonor.push.app_id" : "103389855"
vivo推送的=> "com.vivo.push.app_id" : "10144"
华为HMS Core 应用ID的=> "com.huawei.hms.client.appid" : "10374976"
"app_classification_tab_item_api" : "/api/search/operation/detail/group"
"app_classification_tab_api" : "/api/search/operation/abstract/groups"
"app_image_search_upload_merge_api" : "/api/search-img/search"
"app_image_search_upload_api" : "/api/search-img/upload"
"auth_pay_ddwallet_callback_scheme" : "pdd_ddwallet"
"app_login_private_policy_url" : "private_policy.html"
"app_search_common_api_search_malls" : "/api/search/mall/plus"
"app_image_search_sdk_api" : "/sdk/yangkeduo/search/img/"
"app_image_search_capture_focus_api" : "/api/search-img/focus"
"app_map_api_poi_location_list" : "/api/ptolemeaus/poi_location/nearby/poi_location_list"
C57A3ACBE8C06BA1988A83485BF326F2448775379849DE01CA43571AF357E74B
c0a6f4dc63a24bfdcf54ef2a6a082a0a72de35803e2ff5ff527ae5d87206dfd5
411372fc-c9a5-4f1b-917d-7ebbb157b613
999e2180bf290249839f5e1ccf147956
B478B812250DF878635C2AA7EC7D155EAA625EE82916E2CD294361886CD1FBD4
839d7e33-708d-43ae-ae98-4c2463c9fd6e
218b0f99-f3a0-46aa-885e-810f6f0aeb29
2cabeafe37d06ca22aba7391c0033d25982952c453647349763a3ab5ad6ccf69
3c4fb0b95ab8b30032f432b86f535fe172c185d0fd39865837cf36187fa6f428
e914407e-ac90-4883-b4ef-c29260cd08c8
2530cc8e98321502bad96f9b1fba1b099e2d299e0f4548bb914f363bc0d4531f
fd1b89fc-23d3-42f2-83f4-e4c32cef0e90
021dc4757b79d3611cba4d4fc8771a5b
1c49754af8bc2559c24183262853d9ed
efb093a8-efd2-4874-808c-9ab37b217581
5e13eaff-3dac-41d0-b120-cac9a280e118
24efbbb8-3cfe-479a-b37c-f0fab7b69ab2
1051ffae4c9c5f4b7b6cec096d29ad3c
F09B122C7114F4A09BD4EA4F4A99D558B46E4C25CD81140D29C05613914C3841
afc63ffe-2302-465b-9857-3cd00e9947c8
879d96c8492374b821ec03fbb2fe061b
e9aaec0a-558b-4306-a4f0-467566c50818
d3177fdace177b28b21644464bd4f017
ce516e8a-926b-414d-afc0-9c22c85e511d
f734cea8-c506-4ab0-8ef0-d3c8ca160a80
dc1dac05-1045-4d68-8eef-8d5ce06a157e
EB04CF5EB1F39AFA762F2BB120F296CBA520C1B97DB1589565B81CB9A17B7244
09b80662-bd7d-48b5-b84c-2848ad0db8e8
5ce3d8cb3240e5259fc2b78ab24be619
Y29tLnNzLmFuZHJvaWQuYXJ0aWNsZS5saXRl
b864c338-f87d-49a5-ad2f-f08183a06287
3c5943d651fcf3276039e81b3b95a5a5
L2RhdGEveXpmc3dqL2Fub3RoZXIvdml2b19wZGRwcmVpbmZvLnR4dA==
91e2f5788d5810eba7ba58737de1548a8ecacd014598bc0b143e041b17052552
nmDYVF3FN8VKfyoAKS1vRQlXKslPf45oQSOgIWbC/jsQz+tp4etnJ98VUtKNm4Vsq
Y29tLnNzLmFuZHJvaWQudWdjLmF3ZW1lLmxpdGU=
03eae9cd4697cd3b6e79b3ee8e80ebba
8d2ebf7d1880811df7ba03e795317914
03bcf50e-c318-44c4-ba60-f560e0b04aaf
a86b7d4d-4065-4140-afef-74bdd2b9b2f7
e72b461525d3287bc9d7149b987a12e3
2a9b91857cbd9f844b3703230c8288c5
31df94fd2a35c65edc06267f075b8cd9
3b3f64ed-992f-4023-b2fe-3afe08b32249
E17890EE09A3FBF4F48B9C414A17D637B7A50647E9BC752322727FCC1742A911
dedfecef4b9fe5efd10f578f4d26efa4
b36efac4-bc3a-49cd-bbb8-eb703294a311
01f34933-8c4f-4033-af81-e5c359e9174a
97e06a1d-ba58-4885-b6bf-4f70535d6cc6
cecdacd3-a95f-43a4-9c55-6f726597a2d8
d40e9c86cd8fe468c1776959f49ea774fa548684b6c406f3909261f4dce2575c
6d9418d7-d4cf-43c6-adfb-aeee1e80dfd2
302d7b1d081ad80d5c79b0a470f02ec8
7c0a680fbf7b3c0c53959024e5363a90
2db843ac-5718-479b-b39b-96e4c6fd407a
1e1b9258-6d22-4584-859b-7822893e59ba
30d0895a9a448a262091635522d1f52010b5867acae12c78ef958fd4f4389f2f
0C258A12A5674AEF25F28BA7DCFAECEEA348E541E6F5CC4EE63B71B361606AC3
af69a7206f979f502d6cc5a09e874174
16af57a9f676b0ab126095aa5ebadef22ab31119d644ac95cd4b93dbf3f26aeb
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
f3532b20-4790-4269-9f2c-f362da8a2039
353fea5deb6fec2344fc91d32fad995e
dca58c95-31cd-4cd3-a87b-af9f8fcb9822
7e27d723-0a36-4e23-9160-02f484a40397
B0AB0254BD58EB87EAEE3172BA49FEFB
42d9a4b8-a2d8-4fc1-8b2f-b25cdec552b6
f68c6bf7-5d5d-48a5-8b9b-374a7a25fbae
13dc3365-302e-4787-b93e-2381d9315c5a
6acbf6061954af8516f7e0895ad49f1c
a0154d5858c5cc47ae37f28e0a478d9b
79e6b115-7d3b-4605-8a91-0a305ddf813b
92143df49b88d32a735a3551118387af
891d2352-9e43-45ae-b8ee-36b8ce5ac27d
95bbb372ca1afbbd7e4bd8cb2d09b71e
0b9fa2731100d0b5f9dfc280c4decd2b
2e31fee1-1f4d-47b2-99cc-93d18c8aa38b
f2a7a9465bd586e2c20fe329b4c06b4e
de837d92-fac4-4ab3-b1cc-3e9bd6511749
1285465f85dc880dcd81329c4c96cc61
A1A86D04121EB87F027C66F53303C28E5739F943FC84B38AD6AF009035DD9457
0aef70555347f1b834c035128a956bb3
513b2cecb810d4cde5dd85391adfc6c2dd60d87bb736d2b521484aa47a0ebef6
913fd63ef8ef0c37a21bc1c1e2ef3388
f80bedb7911dad6b34768e46a4c022b4
f813f3ca-75bc-4a31-b35b-d836843dc51c
501fa4b1ddd8e68bdbebc864c53160a8
5dcd2dd8-d717-4abf-850a-3773cc9df0a1
87a14a66a3a16a027e90c6cacd795cfa
4366b2d5-e6b6-412c-af07-3f6844da9a2a
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH8q0+dtUWGu9l13gywI
8daad8b2-f1c7-4945-95db-56f35e2330b2
ec93d927-6c38-447c-929b-6a379eb0cde4
463258ad-320f-4689-a811-cf4a7387d761
fb3bf089-04df-4782-90a6-6e163efd1ebd
187EF4436122D1CC2F40DC2B92F0EBA0
0056cabf-cd7d-4894-b305-37e4f21ff850
93bb9ee0-22cf-4f08-94a6-4871673b36b7
c2dd6f7f-ec44-4477-9969-61695f024ed5
8e2e723f-955c-487a-b090-a2b6f574e770
abf3a9dbd88e1e3e7f8217e7c650991f
2468a96c-a40c-4709-8c19-3eb8569ccfbe
4b0bbdc92fff77d9d3e8641df7bd7bb7
92D8092EE77BC9208F0897DC05271894E63EF27933AE537FB983EEF0EAE3EEC8
45a3a517-56cc-4a0f-82c4-ba95d7717f59
196063a5-e5f4-4809-b47e-18c6d5b53f63
0376ab1d54c5f9803ce4b2e201a0ee7eef7b57b636e8a93c9b8d4860c96f5fa7
7e37cb8b4c47090cab36551ba6f45db840680fba166a952db100717f43053fc2
0b488ebddbf17769a69fcade5c0c998d
64dc5e0c826f6f230347bf725f18e61a
1fde8b70-3ecc-4516-8fcb-68883f33a396
a14b617883c38576b43be1eeb8d333db
09006d1f-f442-4dcc-b270-3b7a75561f8d
bTIBAgABAAIABAAAAQAACgASAMwBGhAWAR8ABA8BAE0AcxAAcBEFIwYKMK8UFnBCBVIBYQYVcAYIgAYXkAYIoAYWsAYIwAYY0AYI4Mw8BUIGKFAJBhYVFf8GJ3AGEYAGJpAOo8xWwgJCwgIjHwIKZGV2aWNlSW5mbwhtYXhXaWR0aBBNQVhfU0FGRV9JTlRFR0VSM+WPl+eJiOacrOmZkOWItu+8jOW9k+WJjeeJiOacrOaXoOazleafpeeci+atpOa2iOaBrw==
b315b9acf37b735e5a61f4bf3819859f
5c400202-07ba-4b83-921a-679fbf4f5105
0e773ec6aad404db24d12dd59bcf926f
40b93bdd685dc6ab6fb7c134aed4cfe9
aab4288c-1d7f-4263-bd5a-cbbe02a12103
e35d28419ed02025cfa69038cd623962458da5c695fbdea3c22b0bfb25897092
93ec2280-db7a-47a2-a4cb-2cff787114b4
b00af66f495197263aa6bccfdfa6b0d3
e6f45dac-3a74-409d-817c-dc86692811be
8a866fd1b276b57e578e921c65828a2bed58e9f2f288054134b7f1f4bfc9cc74
0df351b9-0e48-48f5-9347-ac0ff822fd1c
9548f6af90fa137d065cf164c9208c7c
5fed6a0eca1166e5f02b2993d66facfa
8177d5cdc8acc83e7c0eca018292c49f
b2128cadce632f61ae053bd1216f4ea6
524452af32d7525f8e42d99870bc8d40
21DB20123660BB2ED418205DA11EE7A85A65E2BC6E55B5AF7E7899C8A266D92E
0a81ec5a929777f145904af38d5d509f66b5e2c58fcdb531058b0e17f3f0b41b
6dc47172e01cbcb0bf62580d895fe2b8ac9ad4f873801e0c10b9c837d21eb177
4381824f-c09d-414f-a7cd-8685bc6dc29b
46fbf3806441d4790c7bdfa771acb8a5
4a4aa7874ac69ba1c4a164cfdd598515
dc7e9dd1-69ee-4a5f-9c8a-c19885dea4d7
0753e940378c1bd5e3836e395daea5cb839e5046f1bd0eae1951cf10fec7c965
3793d428-ed7f-4d3b-951c-cad1a01e2370
c2881a26-d118-43cd-ab6a-c5055407f3c0
02c416885c1a7b6a5c6ecb4d56b51290
e2dbd1ed-3c63-4f9c-a711-7258d9b4f537
73c176434f1bc6d5adf45b0e76e727287c8de57616c1e6e6141a2b2cbc7d8e4c
bTIBAgABAAIAAgAAAQAACgASAMwBGhAWAR8ABBYBAGgABRMGCiCvExZwMAYgQAVQBiFgBXLMJgUyBihACQWcnJz/BidgBgxwBleABhGQBsygBbEGzcAF0QYU4AX0BxASBxEBBxIOdRMAAWgTBgAHEwEEAwAHEwIHFCZ1FQABzQQSwgIywgITHwEQTUFYX1NBRkVfSU5URUdFUhlvbmxpbmVfc3RhdHVzX2Rlc2NyaXB0aW9u
6efd035979050bf5be15e184d019b165
5cc3d78e4e1d5e45547a04e6873e64f90cf9536d1ccc2ef800f355c4c5fd70fd
25a7683b-e451-4f60-87cf-71a8ff6e564d
f39nfcKGcHF+wovCjX/CiWlzd3xxwoLChlbCgnB4woNUcMKJwo95c3vCjQ==
eaa962c4fa4a6bafebe415196d351ccd888d4f53f3fa8ae6d7c466a94e6042bb
64543a97-5e45-4624-84ce-fcece8b54a3c
c4256ac43ce78b050e4b7ac1474015be
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
13041f6e-c03e-4333-8e3f-8d08db34493c
2399561127a57125de8cefea610ddf2fa078b5c8067f4e828290bfb860e84b3c
411b412d4f9a1fe1d29f168f0e2ee1ea
6b9c08e86eb0f767cfad65cd98b62149e5494a67f5845e7bd1ed019f27b86bd6
Y29tLmhhcHB5ZWxlbWVudHMuQW5kcm9pZEFuaW1hbA==
CBB9C44D84B8043E1050EA31A69F514955D7BFD2E2C6B49301019AD61D9F5058
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
eeca8fa9f96f4e25d55f1bbf26f5e927
5CBF6FB81FD417EA4128CD6F8172A3C9402094F74AB2ED3A06B4405D04F30B19
69461202-84af-4bf3-833f-9a14eeb03f5a
3189be34dcb3990d45898eda758c4dff
036fd6d9e2cff6c71a593baef3b04030
25b2d60e7e9b9c789261803d459b4d95
4758508ac3019279e7118a4d380d9d5d
e23d4a036d7b70e9f595b1422079d2b91edfbb1fb651a0633eaa8a9dc5f80703
7f671b7bcfc947f3a8d3dda5baa60712
YWJfcmVwb3J0X3ByZV9jaGFubmVsX2ZpbGVfbm9fcGVyX2FjY2Vzc182MTgwMA==
acf7240d076b250f74906b8bb355cff9
70a73f7f376b60074248904534b11482d5bf0e698ecc498df52577ebf2e93b9a
798505b604349ef4360752d1a194ed23
3a9d6c3d090e7b76aa3a69a53737c9d9
9e61257e-c7f6-4124-ae24-502c56e83ca8
e1ee02fa-eeb2-425c-bf43-1fc4cef008f4
f5c9ebf3-0c1f-4395-b669-8cd6fcc982f8
56C77128D98C18D91B4CFDFFBC25EE9103D4758EA2ABAD826A90F3457D460EB4
4447dd39fbd1760537cabcdf25e21986
2245023265AE4CF87D02C8B6BA991139
D95FEA3CA4EEDCE74CD76E75FC6D1FF62C441F0FA8BC77F034B19E5DB258015D
b58bfd2b-c4ee-4ba2-abc7-6f93a10ec185
db109dd9-f5e3-48e3-b272-04a8fde8d9f4
d96c97fe-d1f2-4bec-9204-e8b0f511781e
90f5cf0785da33b7b23ca7b6412a57a5
976ffdfbc7037f57fc49823fcf82dbca
a924cbca-64e4-45c4-89a1-1d180509fd54
d7c94929-7bd4-466e-a4f9-29c08f4d0d5d
2fd4ab2f-5784-4a48-8e92-e9b705f51353
1465fa205397b876faa6f0a9958e5590e40fcc7faa4fb7c2c8677521fb5fb658
d4a004a0-053d-44d8-908c-a5b45e62255b
28052f5ec9e554ef4ef2129c7244543e
59769007f7685d0fcd50872f9f95d5755a5b2b457d81f3692b610a98672f0e1b
24db3120-7fa9-4a90-9598-58a41c8a5cbc
570431f9-790a-4128-86f8-8043d2374110
aaccc83935e018893679f42afc30fd40
8a9c9a6e-1909-40c5-93f2-e8cd107848a5
d97761eaa60e040d2c542b03958dab46
61c5954f-90d5-417a-8071-99c241736cdc
02b1b1293a306b3375e30b473c6ea5d1
9dc31d354b38056469d247aa99a6cb59
388860fc-2945-40ca-b790-3771fbd3cc61
153a52aefacc2e29a929a0e3e0f9e6b0
2de99acf-10e5-4fb7-8fde-19ae00373635
cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
C7BA6567DE93A798AE1FAA791E712D378FAE1F93C4397FEA441BB7CBE6FD5995
4441ddc4a1a74b1d9b075f3c6597d334
7221ed40-36ad-4cc9-b633-349ca5a54b28
b0bfd52bb0d7d9bd92bf5d4dc13da255c02c542f378365ea893911f55e55f23c
81a7f0b1-0a4c-403b-89d7-6767e683e3c2
701b48625b89db916c7c3481affcd530
0782e168def6b610acb23183159fcf8f
b676f2eddae8775cd36cb0f63cd1d4603961f49e6265ba013a2f0307b6d0b804
17f1d6df84885437a313558b4b20e39f
61e2c356fa727d8a8c53fdf4549bee53
d3855210d03c124491786651f07dcc52
49e7a442acf0ea6287050054b52564b650e4f49e42e348d6aa38e039e957b1c1
70088b3262e8219837d0e8a17d64a30c
2125e26746d17f6914552ea3c5b6f9dc
63585ff7-0d52-4beb-9bb6-82b6a2b130be
7e56ed63656d47b540941db6a84a9d13
a47b9f91-8739-40aa-a8f9-14e1815b9796
2ce1cb0bf9d2f9e102993fbe215152c3b2dd0cabde1c68e5319b839154dbb7f5
28319b28d8218ff23fced1c84686f097
6d6092a441a19b3a5d3b21f64ff0dade
9164e511-ea7f-4d39-bc0f-24ace5d4e61d
8560f91c3624daba9570b5fea0dbe36ff11a8323be9486854fb3f34a5571198d
568d6905a2c88708a4b3025190edcfedb1974a606a13c6e5290fcb2ae63edab5
6b92cbbd-2934-4d7b-adaa-ba16121bdbcc
5cb2544e-0297-422a-8805-1fbb16993f90
3ce4989b-2fa7-4b96-9962-443f160b008e
2e189e19f9a87fdd363fa83e40df8c62
CBB5AF185E942A2402F9EACBC0ED5BB876EEA3C1223623D00447E4F3BA554B65
3f4a68fb-0d82-4230-9215-0b43d8afaa36
8e15ddae268797ec8d4f95932552baf0
37D51006C512EAAB626421F1EC8C92013FC5F82AE98EE533EB4619B8DEB4D06C
TfUDt9gLsRuU4ofqBY6ret2c6m4cNlaJ
L3N5c3RlbS9ldGMvcHJlX3BkZF9jaGFubmVsLnR4dA==
aHR0cHM6Ly9yaXNrLWRhdGEtY2xlYW4tYXBpLnJpc2suZnQuc3J2LnBkZC5uZXQ=
6699c305-e238-4d85-b42d-f1eae751a0a0
09b08ff1-3d1a-4436-8d71-c28f49f08dfc
3B222E566711E992300DC0B15AB9473DAFDEF8C84D0CEF7D3317B4C1821D1436
31ad6648f8104138c738f39ea4320133393e3a18cc02296ef97c2ac9ef6731d0
753c38649a86e37b4bb8417e5d0dd779
bc835d16dfb4982b98f567031dec7592
aa9b0288-cbca-48fc-98a5-c757f1d8a3fe
d700fe01-844a-489a-a336-dc1b366d34c7
85a0dd7dd720adb7ff05f83d542b209dc7ff4528f7d677b18389fea5e5c49e86
F008733EC500DC498763CC9264C6FCEA40EC22000E927D053CE9C90BFA046CB2
8fe4fb0af93a4d0d67db0bebb23e37c71bf325dcbcdd240ea04daf58b47e1840
1ba5b2aa8c65401a82960118f80bec4f62304d83cec4713a19c39c011ea46db4
d8b645df-e67b-4dd0-8023-11f3330c7fe9
cecddc905099d8dadfc5b1d209b737cbe2c18cfb2c10c0ff0bcf0d3286fc1aa2
05073f99cf546a2782be826a3e44c792
aec98e0bcb262927b7ab164cb497f3fa
bf0d6c9474176cc1449015517d106409
da8f9ec3-2cc0-4548-b1b8-737813ca1757
c2a685d3846acebcdbeb9de7ec64baa9
1d2b994dcfd9c3709e6353fdb6a415b8
be4f0464-eccd-4608-a4e8-68209a9e78e8
da48bfc4-44cb-4ee6-aa0b-e9730fdaa554
3c5aa317c5b26e744bb0c1f8bc040d82
5c2550d7-8256-417e-a48f-8c58db1ba4d0
4509d88ea9985c4a6a7b8df417e8db5c
C2B9B042DD57830E7D117DAC55AC8AE19407D38E41D88F3215BC3A890444A050
cfc2739f-56f1-4b29-8c65-72bc6e40a7aa
e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd2
6bafe00e-f446-43e8-b786-659c2e6ae5da
649dc0f182428a129ccf4079b2810b76
0321758e-4281-472e-bca3-a4090d6e28fe
c45d7bb08e6d67e62e4235110b564e5f78fd92ef058c840aea4e6455d7585c60
b80bbc1f-cb29-4e15-b204-667180e2f7e9
3d135cff849342fe419c1d887a612042
3417bb06cc6007da1b961c920b8ab4ce3fad820e4aa30b9acbc4a74ebdcebc65
039f43706dcd87bb0645cf8fee354a82
f1c1b50ae5a20dd8030ec9f6bc24823dd367b5255759b4e71b61fce9f7375d73
10f4469e-5ee7-46e8-9af3-5a7252d6b361
1be694162bad8dd8dc353f2bf38c91c1
4200f5043ac8590ebb527d209ed1503029fbcbd41ca1b506ec27f15ade7dac69
a59899f7a56529c06528db6a0760483a
4be93da3-52ad-40a7-b199-871f2b16a014
fe4a52da-348b-4c6a-a1f3-caf67063b3c3
7bcf54cced71fb5ee66df7040af6d45d
aHR0cHM6Ly9yaXNrLWRhdGEtY2xlYW4tYXBpLnJpc2suYS50ZXN0LnBkZC5uZXQ=
9e0256b4-0167-498a-a335-538d5901f377
23804203CA45D8CDE716B8C13BF3B448457FA06CC10250997FA01458317C41E5
6FDB3F76C8B801A75338D8A50A7C02879F6198B57E594D318D3832900FEDCD79
507941C74460A0B47086220D4E9932572AB5D1B5BBCB8980AB1CB17651A844D2
4d24429d-b110-476a-92ca-80fa7fe6c138
2298c283-f723-4649-89ef-71ed9ea3a00b
9b89786b-bec8-4551-9b71-78e3b06f6460
4d2491414cfe956746ec4cefa6cf6f72e28a1329432f9d8a907ac4cb5dadc15a
0f6bb9ee-7bcc-4c7f-82c1-6f16f7f4c30d
03f2c9ae-55d6-44b2-828b-cd5829759d53
b3846d5012e25e9fa79ed142cf9fce5c
44b545aa8a25e65a73ca15dc27fc36d24c1cb9953a066539b11582dc487b4833
68e53f2d-480c-4900-83c2-ecddbe6cc627
8cd142858e5576f3e7b8745628fa41f0
edf7ebbca27a2a384d387b7d4010c666e2edb4843e4c29b4ae1d5b9332e6b24d
fd7ce55b7226cd3ef686fa5666c78fd5
1e3f15bf-f113-411c-96d2-c8a764e8ee51
a83d464279e9767068e5bd7f0d2401f9
2a575471e31340bc21581cbd2cf13e158463203ece94bcf9d3cc196bf09a5472
aa06b79a-32e2-4b31-81bc-00262e20a3aa
69DDD7EA90BB57C93E135DC85EA6FCD5480B603239BDC454FC758B2A26CF7F79
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
2e819f59-bba5-47fd-af55-1895685e09fc
7af5c422bfae16bbf01f7c2aca02d30d
882768a16a8188586e52c13625b09567
AE4457B40D9EDA96677B0D3C92D57B5177ABD7AC1037958356D1E094518BE5F2
242f1a29-2730-4d0b-bbe1-4b80874bad93
55a44564df27d4d6aa9506bdffd92a95
02ed0eb28c14da45165c566791700d6451d7fb56f0b2ab1d3b8eb070e56edff5
9a14d7be-896a-4e0b-b82b-0fe2f07bc91d
16c57eca-92ff-484d-8bbf-bb4220df3b75
5a2fc03f0c83b090bbfa40604b0988446c7636183df9846e17101a447fb8efd6
3416a7bf-fa67-40ab-bb40-ea6cf8e284df
5edb7ac43b82a06a8761e8d7be4979ebf2611f7dd79bf91c1c6b566a219ed766
874cf317ea227d9b0f1110bce785284a
40735014e9387b536892fe2cd7b44eaa
fe84f794-3f1d-490a-b40a-0c4ecfe40cc6
bfff8fd04433487d6a8aa60c1a29767a9fc2bbb05e420f713a13b992891d3893
0603a62e08983f2400e4e4584d785716
28291289-db67-4062-9793-f23188f0d48f
9D190B2E314566685BE8A889E27AA8C7D7AE1D8AADDBA3C1ECF9D24863CD34B9
437af297-1255-4262-86f6-3b16d5432c72
4d3d402916621d78b495a0d3c6e31055
9c8baf0fefaaf42b62c55a7e866d9d2f
fdae4021-533f-4fd7-853c-f969efdf51f9
ca42dd41745fd0b81eb902362cf9d8bf719da1bd1b1efc946f5b4c99f42c1b9e
1af23f21-5d60-49e3-873b-84b4e9e0dbba
EF3CB417FC8EBF6F97876C9E4ECE39DE1EA5FE649141D1028B7D11C0B2298CED
5733092a-b9fe-4817-89f5-9e7868f09120
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
45140b3247eb9cc8c5b4f0d7b53091f73292089e6e5a63e2749dd3aca9198eda
7c32ecee-de4d-4937-92bb-a15a36cf518a
0D83B611B648A1A75EB8558400795375CAD92E264ED8E9D7A757C1F5EE2BB22D
7431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf
ea0eaa26-203d-487b-9d7e-9c920c0b8d51
ef0dab4c-a529-4914-a7ad-efaea1140137
eec5496b988ce98625b934092eec2908bed0b0f316c2d4730c84eaf1f3d34881
2420e333017bd186642a85503458ce71
5ae3286ae85ebe0b211bf4e0b54cd594
1d59505185bd46c36d146a726d726f2b
15f0ba00a3ac7af3ac884c072b1011a077bd77c097f40164b2f8598abd83860c
3e20b5c87a313ffd0d8efb82d204325c
e3b6a2db2ed7ce48842f7ac53241c7b71d54144bfb40c11f3f1d0b42f5eea12d
a040929a02ce53b4acf4f2ffc6981ce4496f755e6d45fe0b2a692bcd52523f36
d9e5b9c1-2dbc-4771-9009-dc0b387b018e
594d89ecb6acde8e200c0cbf6064c171
c3846bf24b9e93ca64274c0ec67c1ecc5e024ffcacd2d74019350e81fe546ae4
4943e564-5b89-48bc-8749-a5c2c31fc260
6E26E5A980E0BA33FE2E4EF23607DC54
628f09cea5162018cc4a42528580a4c9
3c5a7f4a07a8c0291eb6d308fccc8bf0
520fcbfb-f558-4430-83cf-132f657085f7
c8f75d63-5071-495e-aeef-b696697fa67c
ebc5570c29018c4d67b1aa127baf12f703b4611ebc17b7dab5573894179b93fa
eff56133-fd6d-4440-a3f9-30b6a012cc14
dcb43bfcb67d5666592ad8202b8fbaea
3e89509e9dc7a391cee6ebd17b14fb16
79d2a572-fcd8-4a61-8537-446cc47ef482
b0d8f992-2c8a-49e9-b5dd-57f3e77e601a
3a739dfe-877e-4202-9bde-63755d8ad00b
f827110d-9ac4-4cd6-9e6d-22ca287086df
e5741647-24c4-487a-b0ec-61f0c8ad130a
2c9d8c1d0ed7a54ca2ec7b6f4e49e285
c4919102-bd46-4033-b754-390b0c95d2e8
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
85666a562ee0be5ce925c1d8890a6f76a87ec16d4d7d5f29ea7419cf20123b69
ef2f110f-68b9-4ca0-a9d9-f42acb2d8ef8
31c4dd0f-f3dc-4062-a065-2e7067ca25b0
4cec11cd-9896-4bd6-9e51-5449eb4737bf
aa7ae23b-0b22-4ae2-a508-777ab16e472b
Y29tLnNzLmFuZHJvaWQuYXJ0aWNsZS52aWRlbw==
8d5959af2aaa140db79a9e9ea6f7c45c
71c22eb2-f477-4ff3-9e0a-84ada9734abe
577e68a171a5b827c88b6670ff3a2e10
b32a6013-822c-4fcd-992a-7413448c69db
fd73dad31c644ff1b43bef0ccdda96710b9cd9875eca7e31707af3e96d522bbd
4ac8e5882c4acb194f18d97075b0202a
cbe4c915-6f74-4553-8d4c-d56a7cfaf9dc
6c61dac3a2def031506be036d2a6fe401994fbd13df9c8d466599274c446ec98
4c7bc7ac-766b-4706-a217-06a334eafe75
a86b9ad6-2cae-4ae7-ab69-9afb677a70e3
62a6a29f15d26cbede60f70d44b29e6e
f5167de4-bf7d-4642-9114-801ab8b06fdb
38b198eab1ffb6453dbf4c8bf1f82d53
cd407c4f-a4e3-451b-969c-004302bb34cd
a401996d6aa9e5b01b7637452f7233c7
3de54233832cadae1e0d6cb063bc3c6d
cab26db9655fef266a57a61e24999455
1BC45436A482856216039200F8E2878B
9dec7049-3fcc-481c-a504-45b00eba2110
7d536183-50d4-4c71-bd31-f7441b12d76f
9e31f6a3-1be0-407c-a798-42019c1ff92e
9e1c47d2feb032aa88bea218c703c61e
a91d8943-6030-49d9-9a91-45bd894be333
669ec522cb565ca54b794f2d304dced2
9a8234c18c8ad7570937903c149a9ddf
afe102ec8a798867dc70c6963c7c69e3
c30cd49b24d8222243b02b0e4161acc4
4ec498f997d79482553fa59f883e8011
27995829FE6A7515C1BFE848F9C4761DB16C225929257BF40D0894F29EA8BAF2
0ED3FFAB6C149C8B4E71058E8668D429ABFDA681C2FFF508207641F0D751A3E5
a823e6b4-4123-401f-bf2a-ffc6bbada21d
9b676af1c6732bb890a49c6e90fe85f1
76d4e7f3bd860efd1ae19a86ca65c6e9
4de48463-ca5d-4ecf-9bd7-3b63cee02477
43df5774b03e7fef5fe40d931a7bedf1bb2e6b42738c4e6d3841103d3aa7f339
75e3e0af-8c23-471a-a29e-be854713ed38
83e48236-7983-4602-aa6b-5240b7bc5a73
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
23dcab0b-4870-47f5-837b-dc5bd5b95744
CB627D18B58AD56DDE331A30456BC65C601A4E9B18DEDCEA08E7DAAA07815FF0
047D00CE52551DCEDC5F847B0665E022
8f5bcd0f-441c-4173-8099-aec8bd96b6fb
8c33feb8-59c7-4058-aa93-cade4f901c42
9636cf8e-073b-449b-b60a-b9c90525eb07
1793927a0614549789adce2f8f34f7f0b66d0f3ae3a3b84d21ec15dbba4fadc7
C766A9BEF2D4071C863A31AA4920E813B2D198608CB7B7CFE21143B836DF09EA
7E481CDC4FF39E33883CA8E0CF3F45E2
4ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a
9ACFAB7E43C8D880D06B262A94DEEEE4B4659989C3D0CAF19BAF6405E41AB7DF
063e4afac491dfd332f3089b8542e94617d893d7fe944e10a7937ee29d9693c0
48c4f68c-cb99-4ad5-b8e0-a2e3ad81ce12
0e07d089-d715-40eb-9fed-b91427cc4f93
4a24bff3b77ab39bceb847613f5f1d31
4ebe4609-1e06-4da7-9e07-096372c3522a
55926084ec963a64b96e2abe01ce0ba86a64fbfebcc7aab5afc155b37fd76066
5f3312624eb37b7ce00532a03c2b0290
ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99
e21cbe01-3b00-481b-b3cf-6d5f5546a4da
e76c83b6-d6ab-427c-93a8-e52c62b3d4b0
5a885db19c01d912c5759388938cafbbdf031ab2d48e91ee15589b42971d039c
fn5fdXJ7woTCgnzCim50dH1+woLChFbChHB6woFacMKJwo19cXfCiw==
52b900da-47e9-4625-b508-6a998aae7dd8
dd6936fe21f8f077c123a1a521c12224f72255b73e03a7260693e8a24b0fa389
bTIBAwACAAgAGAAAAQAACgASAcwBGiAWAh8ABAgCADsAcyAAaAIDAAQCAA4hc3AA0We3BhAjc8cjEWJzYAMjdL8RAWIFQAFjI3XDEgFiI3bDEwFiI3fHJRFiHwUEHQEAbgFzMAlzEwpzIAsOPAkET+s3AA5dc2INDn5zgg4On3OiEHCvw5gDOLPjuwUzBgpArxUWcRFQzEIFUwYRYAYMcAYTgAYMkAYSoAYQsAYUwAYQ0AYg4AXwzGoMBwWDywkMCgWyBh7ABdAF4MzSBeIGFPAHEAgHERQHEigJE5ycnP8HFCcHFRIIFsQABxcBBxgmEBkSzM7CArIFwgYe0AXhBfHM4gYR8AcQCggRzAAHEgEIE80ABxQBBxVXBxYSBxcnBxgPBxkoCRoWFRX/BxsmdRwBE80NEMICwgwNDA4MD8ICiAwJBaMGErAGEsDMsgXCBh7QBeAF8MziBfIHEBQHEQgHEhQHEycHFBIHFSgJFpycnP8IF8QABxgBBxkmEBoUzN7CAsIF0wYe4AXxBxABzPIHEBEHEQoHEggHExLM5nUQARV1EQAWchEXAAcSDD4SEgJJERI9EREUPRERCqoADxACwgLTwgKkwgJWwgIzHwMEAwIABAAOIh8CBAoCAj0AAQIBA3NAAGgEBQBzQARwRWgELABzQARwRQ5WDmHHkhhDJ0BzUADH4xdCJ0FzYADRVkxTBQFkAXIBgwGVv1MCZB4EBgIADgAOJQEwDkcBUcOYAyQfAgQFAwArANEyLTFcMQNoAxAANDEBbDIDcDVsQgFwRVozBGgDBwALAx8DBAQACgMfAx4EEwMDvAABAQECAQQnYCdyXGYHaAYJAAVjywfCAmIfBidhBXBacQdoBwUABXAECgA1cQFscgdwdyxxc4AHLIHHIxhjBWIGHnAFgAWQzIIGV5AGEqAGJ7AGD8AGKNAO5nPwBUgOD7euEgYm8AIQA8x6xiRiAWS3Nh9zVggnYkRlKSYnYCdyXGYHaAY5AAViBsxwBYEGzZAFoQZXsAYSwAYn0AYP4AYo8BAQBnURAAVIEBG5KgEQBxEmAhIDzHzCAmIfBgQCAB8EHgR0ZXh0AAYxNTE1MTYQaGlnaGxpZ2h0X3JhbmdlcwVzdHlsZQVjb2xvcgEjBWluZGV4BXdpZHRoCHRlbXBsYXRlB2VsZW1lbnQHbWVzc2FnZQpwYWdlX2VsX3NuCXNvdXJjZV9pZAZtc2dfaWQJaW50ZW50aW9uC2Jpel9jb250ZXh0EE1BWF9TQUZFX0lOVEVHRVID7qOMB2FkZHJlc3MD7qGBE3ByZWRpY3RfYXJyaXZlX2luZm8KZGV2aWNlSW5mbwhtYXhXaWR0aA==
a2dfad70-4e71-48fc-964b-aa1a0cd0a3dc
8224b54fa98b6d9beace07ae0d931d30
04048028bf1f2864d48f9ad4d83294366a828856553f3b14303f90147f5d40ef
0c915e10b150ad8253c85b5b54ddc6ad
2adbd029-bd32-4b89-8dd5-960ce730456e
cbdbde23-90cb-4027-830d-6bbe8f18a3b4
31332d0794b1730e115704a3f3aeeeca
68c152b9dab18cc5d9e4149c816a0418
ea134d0a-23c8-4209-a58d-6fbdeede9418
796bc562-0efa-40ab-aa19-7a2eb51ad385
A22DBA681E97376E2D397D728AAE3A9B6296B9FDBA60BC2E11F647F2C675FB37
72f18b72-4bc1-415b-a4a4-3d8864d34df5
af7dc37300073a342e8b9d40abc368d3
Y29tLmVnLmFuZHJvaWQuQWxpcGF5R3Bob25l
9b3daa48-9eb1-40f7-935d-011f528cec2d
8D722F81A9C113C0791DF136A2966DB26C950A971DB46B4199F4EA54B78BFB9F
5d56499be4d2e08bcfcad08a3e38723d50503bde706948e42f55603019e528ae
9a114025197c5bb95d94e63d55cd43790847b646b23cdf11ada4a00eff15fb48
0821cafae0d2c83ac92048978061ca12
8327BC8C9D69947B3DE3C27511537267F59C21B9FA7B613FAFBCCD53B7024000
152A402BFCDF2CD548054D2275B39C7FCA3EC0978078B0F0EA76E561A6C7433E
b6b6f8ce418cc414c7aeb8a94d3e7404
46edc3689046d53a453fb3104ab80dcaec658b2660ea1629dd7e867990648716
78a2e839-1f78-4b92-bc43-20057834ad4b
6a9dbd96-c693-4828-8de5-466d98d57cc3
3b348be0390e93d886642b7c2d78ecf0
ceabd44f-9d78-4c5a-9e44-a5602b117ae1
64b8c89bc1b23af244e87cf1562a0fa0
0b74404d-5fb2-482f-bf6f-d162864f4fb3
7a152a38a0fe597a40a5f0833c65d9b6
e543db46-1608-481a-93e7-d034bf57012a
eab4445aa73f9ce98a65659e22d2cc3b
066bd816484901d6f06fe83603fc7889
bd71fdf6da97e4cf62d1647add2581b07d79adf8397eb4ecba9c5e8488821423
dfc40e7d-05c9-405f-aacb-c1fdc533f45d
L2RhdGEvZXRjL2FwcGNoYW5uZWwvcGRkcHJlaW5mby5kYXQ=
nxet6jhZrYKOTnN7FAQudsUv8TPOL6tViJ5ZFPJpsD/8QBcTCIFk1EhNAII9jjIpl
18ce6cfe7bf14e60b2e347b8dfe868cb31d02ebb3ada271569f50343b46db3a4
Y29tLmFuanVrZS5hbmRyb2lkLmFwcA==
1073a96c2f7119bd4cf5937260727c47
3e9099b5015e8f486c00bcea9d111ee721faba355a89bcf1df69561e3dc6325c
4414b699-5279-4f51-8887-0e9b442116ef
07336340-5c80-427d-8993-1b0d6141eae8
f611297f5472b4433df52891dc5d6705
15d5b8774619ea7d54ce1ca6d0b0c403e037a917f131e8a04e1e6b7a71babce5
f9e67d336c51002ac054c632022d66dda2e7e3fff10ad061ed31d8bbb410cfb2
79fb1d67-fd0c-4ed9-82c7-062b4e62c9e2
962bd8c3-4db9-4a59-b6c9-6eb0ebe6cf34
2d6a9d92cd1b53553da39623c9b7cde1
6CC05041E6445E74696C4CFBC9F80F543B7EABBB44B4CE6F787C6A9971C42F17
5dcdf690a2347f8a7d5fbd12fc26f935
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
f89549bc-f826-4ef2-8c03-42b1da082372
82bebb47-c363-4cfc-a382-d595e60ab942
222d4729-aacd-4415-8c7d-856c26e07f6d
6d6209fb-13f1-461e-a2c9-e38e90c643e0
fd1325cf-cbb0-44c3-a95c-e584803b25be
ce7e3e39-d679-44d4-a006-de3f3bb0b914
81e4209444b70e0b5672936aaba07659
a6c8405c1355c9bba6ecbb227509ec72
1251ec82-2250-4491-b7b0-34161c63090d
58665876-496f-4f39-8091-de652182a186
aec9d812-7c0e-4d75-bbdc-48c5fcf44208
f9fcaebc-d528-48cf-b4ee-6dbb2a22bc79
84dfd127bc14f666cd0aca9e41754c31
6510e8948e065537b8a9ad3874da71b9
Y29tLmFsaWJhYmEuYW5kcm9pZC5yaW1ldA==
f356bea244b7a91eb35d53ca9ad7864ace018e2d35d5f8f96ddf68a6f41aa474
db7a99d6-b3a2-4e70-b7fd-7e102ae49069
6639D13CAB85DF1AD9A23C443B3A60901E2B138D456FA71183578108884EC6BF
ec132ce7-f880-4484-9873-56cb936168f5
7d05ebb682339f8c9451ee094eebfefa7953a114edb2f44949452fab7d2fc185
544f6e18-aa42-4076-8da5-5889c8a19ce2
ad7d9a33dd45afb5a2b689567a9ac125
5c58468d55f58e497e743982d2b50010b6d165374acf83a7d4a32db768c4408e
bc104f15a48be709dca542a7e1d4b9df6f054527e802eaa92d595444258afe71
b6a5b27c-fb7d-44d9-a633-e61de73eb386
C0DF4AB11EA3CF51B836F72E31098AA9
96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
Y29tLmdyZWVucG9pbnQuYW5kcm9pZC5tYzEwMDg2LmFjdGl2aXR5
fe855b12-047e-4577-b8ed-d3d97d018cf5
L3N5c3RlbS9ldGMvYXBwY2hhbm5lbC9wZGRwcmVpbmZvLmRhdA==
71cca5391f9e794b04802530b363e121da8a3043bb26662fea4dca7fc951a4bd
D8E0FEBC1DB2E38D00940F37D27D41344D993E734B99D5656D9778D4D8143624
18f1fc7f205df8adddeb7fe007dd57e3af375a9c4d8d73546bf4f1fed1e18d35
e74966becfd09b55752e146dec7ec14c
9f0dfc09-f404-4f89-93f3-834d571cf682
da796e5e-d1b3-4619-9351-f89209fa6e4e
92A9D9833FE1944DB366E8BFAE7A95B6480C2D6C6C2A1BE65D4236B608FCA1BB
8f85c383-9578-4a61-9791-7ff36b460aaa
a406f072-a9d8-4a52-b277-6c802f24f817
552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988
6dffd0313251be4e9bf2701ab46a2ca8
1184f033ff537ee7520cbc39453cb6cc
4B03F45807AD70F21BFC2CAE71C9FDE4604C064CF5FFB686BAE5DBAAD7FDD34C
E3268F6106BA8B665A1A962DDEA1459D2A46972F1F2440329B390B895749AD45
FCBFE2886206F72B27593C8B070297E12D769ED10ED7930705A8098EFFC14D17
96d263f7-01b9-43f1-853e-a721c64ba137
0e236493-ba64-43b9-9dc8-6eb4b5e6806e
4FA3126D8D3A11D1C4855A4F807CBAD6CF919D3A5A88B03BEA2C6372D93C40C9
be6c4da2bbb9ba59b6f3939768374246c3c005993fa98f020d1dedbed48a81d5
4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161
cb13cf1b-c030-4e02-ab87-ed1e628f86af
500870f7-dd1c-49ca-822a-ca1ffe1bafeb
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCU5JPb+MECYhFwFNgzraoW7gOl1YWjmovpXRfjOJTyyVxKiq1NvTqdy3niNXAi5ac3UnyHJlIlF7B+V5bZEJhRFUmDihXHltMfpuM0EH51SCLmBpvXVPSvQYVNGfU57+WQhgWqmrlcnVZxyAQDnnEfBz3a5xwmh0Eu4cfw+aSxHwIDAQAB
012cf94b-2546-476f-b34e-277fadcc282f
7ac774dd-0f6d-49dd-b962-12fe839afd4f
L3N5c3RlbS9ldGMvdml2b19wZGRwcmVpbmZvLnR4dA==
FABCF5197CDD7F458AC33832D3284021DB2425FD6BEA7A2E69B7486E8F51F9CC
0e220f53-3e96-4d6e-8f48-71efdffac1d3
cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b
bANoelxRIifGL8dUr5zc2ncyYkebkUkd
0074cba7-a74a-4ec0-ae68-87cb16340d26
96f1ec8ec5ed50cfbb58d835adcced07
F96F23F4C3E79C077A46988D5AF5900676A0F039CB645DD17549B216C82440CE
411bcc8515d61d07e3d9d81b3bad8ae6
49ab37f0-267d-49be-9b5c-8f2e8e18c500
52f0e1c4e58ec629291b60317f074671b85d7ea80d5b07273463534b32b40234
n9gYOvk2nZYrb8Aa6l9ORhE2qSQ0qn2t3FUtGS7AbL0THfOY+7EoV1R4KCKz+Cfi1
8f5f3155-aeb0-4b0b-b8bf-0e0c3f8d129b
6deb2dbd84dd429519b77fd4181b227c
158363080ca1f52021338cc2e1530552
c82c5ee445be2e4f097d4e2f22241ba8
Y29tLmh1bmFudHYuaW1nby5hY3Rpdml0eQ==
1081706f-8ca3-4fca-97d8-b8b34d77f908
73813738-fd95-4459-888c-f356955940e1
bd2f9412a2786122f27e8af27a40d176
adbe96ab-d1c7-4651-9980-baf9dbae2c07
0d716c8914ce08b5a61232619f319a24cf76d139
7c974ede2b4f2be835ab7f53cdddcc0b
B0B1730ECBC7FF4505142C49F1295E6EDA6BCAED7E2C68C5BE91B5A11001F024
e45dc1db-76e0-4259-88f9-bd5d5bfc8e0b
92f1736f-7a5a-4503-8b1d-d0fc8b1b0dfc
62dd0be9b9f50a163ea0f8e75c053b1eca57ea55c8688f647c6881f2c8357b95
ea65e063-6e6a-4958-b0af-b12f42ceedf9
9a1b31b9-a753-42f1-a87d-db965f02f431
319AF0A7729E6F89269C131EA6A3A16FCD86389FDCAB3C47A4A675C161A3F974
ad3cc4e1cde36f976309c52e0dfae4b9
c493bad63f2cb3d3364b8c1d5388dbf6
687d8f5c68f22672a0c9ca5d46dc69c5
bTIBAwACAAMADwAAAQAACgASAcwBGiAWAh8ABAUCAC8ADAJaIAJoAgIAHwEBMLejF9EjBTBaIgNoAgIAHwEBILeiFw4wDkHDiQEjt6ISHwIEFwEAywBzQAJzFANoAQMABAMAr4E5cyEEaAIDAAQDAK+COXNCBWgEAwAEAgAORru2ATQFQwYKUK8WFnBnBiBwBYDMVAViBihwc5IICQoWFRX/qAiSBieQAaMGV7AGDsAzCsBGwwYp0HPiCQ76Wu4PaA4FAAXhBAIABeAGWvB1EAILEBEMXhAQEWgQBgAHEAEEGAB1EAILEBENXhAQEWgQBgAHEAIEAwAHEAAHERUHEgwHExcHFAwHFSZ1FgACchYDAHIWDgDNBxDCAmLCAkMfBAIweAEjCHRlbXBsYXRlB2VsZW1lbnQFc3R5bGUEc2l6ZQIxNRBNQVhfU0FGRV9JTlRFR0VSBWNvbG9yBndlaWdodAExBWFsaWduATMBMgR0ZXh0
E9E3B4AEA92BDEF015AD1A89559BC295
d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
70B922BFDA0E3F4A342E4EE22D579AE598D071CC5EC9C30F123680340388AEA5
5259f01f4b97aedacbb2b4032bb8f855
4380503d2e188f5e023b8a413fe940c1
63343ABFB89A6A03EBB57E9B3F5FA7BE7C4F5C756F3017B3A8C488C3653E9179
74a66711-cdfa-4235-80e1-752402368fe7
c8533e40776c18a455dd2b12b3e2052a
e75e72ed9f560eec6eb4800073a43fc3ad19195a392282017895974a99026b6c
124c832b-ce75-4fbb-b287-b98d4b5b4e0d
e37a6d26-5be9-43c6-a182-d341fcd92487
a56c927b6f8d1f41dcef86e3ae5e224e
2bee8eae1ac52f9766352c9d05b62a1c
e295a2c8-6ecc-467d-8ebd-8a1d6a1d25d8
84a811ce-e64b-4ae5-aa68-5c3f722194a0
eff1924775b48b255412a895c4be6228
2a2ab8a8-b2ac-4834-af1e-c6c4465ece4d
349805ed-3f07-4334-b11a-f29b54c4a374
1759fe16-31ea-44c1-860a-60398f4e6194
2605875AFCC176B2D66DD66A995D7F8D5EBB86CE120D0E7E9E7C6EF294A27D4C
bcc44544-6b55-4f2c-8c19-cf6fe3a72e6f
70d0e1d7-c0c5-469f-a57b-91bc568a25e4
9eb2f479-4cf2-4203-b7a3-bfa4b148b7e9
5e40e27953aa16f4428e3f116579f6ac
b95b3bdd343b5b602eb809cc2743af52
238cdc6f02bc53427c9ace653c8ad3eb
c1b48299aba5208fe9630ace55ca68a03eda5a519c8802a0d3a673be8f8e557d
6be15106-0e65-459d-8260-76a94b33b60e
d5754724-28d3-49ea-afac-8cc6402f2b6d
5e4ab439-7185-43d3-8441-bbf1b308596c
7e25f0e00e8aab7241e363dcceab8f44
3f5705641716006b83365f94208fb3aa
190e61c84ebbe0fd62bcd266af8eb953
CFE1BDB3D6657FA67452EC804B5A0FF7
f5f49d9139d7ed7a4d4cf98f6c44902c
179fbc148a3dd00fd24ea13458cc43bfa7f59c8182d783a513f6ebec100c8924
bfd88fe1101c41ae3e801bf8be56350ee9bad1a6b9bd515edc5c6d5b8711ac44
3c5f81fea5fab82c64bfa2eaecafcde8e077fc8620a7cae537163df36edbf378
863ff256-89b2-4b7b-906f-8e8c6b9e2b22
dffba8c6-3430-4c7e-85b7-8bda9717dcb0
f6f80736e86ff563c4bf9d9d8990c953
AlmightyPriceInfoUpdateListenerj2v8
a6dc0ed4-8e02-4193-955f-a054676adf22
aae4418fc5e3343d79000e3f818a37bc
d03d94ce-beb1-41f3-bf04-79f6ba89f3a6
136335439334a7698016a0d324de72284e079d7b5220bb8fbd747816eebebaca
c51b983d-cfde-4628-98b2-89f8fecab851
dfb5d4a5-84b0-4426-b567-c30343546804
Y29tLnRlbmNlbnQuYW5kcm9pZC5xcWRvd25sb2FkZXI=
ab75884e-5c89-42a5-8502-e70f057ea5bf
69fb29184a5ccf95c8fe19a4ec50e6e8
a343aa2209a0800607e805312251cfe0
73fed4be24aadc480b0080e766162ded
757046ef-8f71-4e99-be1e-8984fa70cb66
197e659b-d980-4b5e-8132-4e547b2e8d92
0c2cd63df7806fa399ede809116b575bf87989f06518f9808c860503178baf66
3bfc621a725b038193042a81ed8f7ea0
abbe53416e650166042b459b618786db
a742625e-f3c7-47ce-a7f6-721c3236c6fd
5a2512cd-46ef-4b17-914b-917fb418bebe
88ef81de202eb018452e43f864725cea5fbd1fc2d9d205730709c5d8b8690f46
5BDC42A0AA7EC03D8AD1134C206B5188
2e2c7ff9e381b3a96f1305b81fc6901a
41C923866AB4CAD6B7AD578081582E020797A6CBDF4FFF78CE8396B38937D7F5
97b4739e2847e99183239ae150bb733e
abd54a3a-b91f-42b0-bb63-1f4413101eb4
8d19a0b51e03b0b70aaf73a92ffc71ab
e7712d9233b99446e09358900d73db1b
a8cd40b2f3b543243bfc1f3dc8cbb0c7
57f62602-b158-4d6f-8b36-7a263f297e29
B7C36231706E81078C367CB896198F1E3208DD926949DD8F5709A410F75B6292
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
500a0eb0-0bcb-498c-99ce-faeb8c59c2e0
f8ad742611b028e922382af431cb5703
2e7bf16cc22485a7bbe2aa8696750761b0ae39be3b2fe9d0cc6d4ef73491425c
c83708e8be21825debc5c38988457d20
98832d48-d450-41e5-a62f-dc21d72ab708
Y29tLnNvaHUuaW5wdXRtZXRob2Quc29nb3U=
2A99F5BC1174B73CBB1D620884E01C34E51CCB3978DA125F0E33268883BF4158
bec94911c2955676db6c0a550986d76e3ba005667c442c9762b4fbb773de228c
8ecde6884f3d87b1125ba31ac3fcb13d7016de7f57cc904fe1cb97c6ae98196e
99cfc1f9-aad7-4214-9083-0df38adfd7ce
6a89dbfa31dbf8aacfe9f52e5f77e4ae
49a3a58639fe8f38ca0649228405ff1e
1d941121-247c-4cbe-83e0-f7e2cbc3c877
82f28a27-ce3f-49aa-9cf5-469bca52e61c
6d7fb3ebb28d375c2446ef68c4fc9c23
92b8c71f5db4e9d4c1f2f2c9bbcd3cc9
99da644cd1d7e13b3a6adb21884a8592
woPCg2R6d8KAwonCh8KBwo9zeXnCgsKDwpB4aHjCisKCwolifsKLwoV3fcKBwo9xdsKMeXB+eHh0wpE=
87f5a564-45ac-4c2d-915d-63e45c8cfe55
35487fb4bd08cdf78302b2059dd5c287
22a2c1f7bded704cc1e701b5f408c310880fe956b5de2a4a44f99c873a25a7c8
d0622ad42b9d5654a1baa8989f8144d5
360af56a-b5a7-4d92-8da2-4fcd72d3921c
ef82f17c-d87f-46b9-aa13-42fb0ab2aba0

信息应用程序记录日志信息,不得记录敏感信息

CODE

应用程序记录日志信息,不得记录敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
am_okdownload/core/d/e.java, line(s) 159
am_okdownload/core/e.java, line(s) 110,92,119,101
com/aimi/android/common/http/downgrade/NetworkDowngradeManager.java, line(s) 502,779,507
com/aimi/android/common/push/huawei/HwPushReceiver.java, line(s) 78
com/bytedance/boost_multidex/Monitor.java, line(s) 55,59,63,32,36,67,71,75
com/bytedance/boost_multidex/Result.java, line(s) 30
com/eclipsesource/v8/debug/V8DebugServer.java, line(s) 537,234,294,378,392,571
com/media/tronplayer/TronMediaCodecInfo.java, line(s) 212,214
com/media/tronplayer/property/CorePlayParameter.java, line(s) 18,30,42,54,66,78
com/orm/b.java, line(s) 76,100,64,72,94,102,210,257
com/orm/d.java, line(s) 40
com/orm/e.java, line(s) 206,209,212,219,252,400,427,487,510,544
com/pdd/audio/audioenginesdk/AEAudioFileDemurer.java, line(s) 94
com/pdd/audio/audioenginesdk/AEAudioTrackPlayer.java, line(s) 66
com/pdd/audio/audioenginesdk/base/AELogger.java, line(s) 7
com/pdd/audio/audioenginesdk/codec/LiveStreamAPI.java, line(s) 30
com/pdd/audio/audioenginesdk/fileplayer/AEAudioFilePlayerNew.java, line(s) 146
com/pdd/audio/audioenginesdk/fileplayer/AudioFileMixDataProbe.java, line(s) 53
com/pdd/audio/audioenginesdk/recorder/AEAudioCaptureHelper.java, line(s) 72,117,348,396,451,592
com/tencent/wcdb/AbstractCursor.java, line(s) 128
com/tencent/wcdb/BulkCursorToCursorAdaptor.java, line(s) 114,134,54,70,146
com/tencent/wcdb/DatabaseUtils.java, line(s) 152,227,535,542,751
com/tencent/wcdb/DefaultDatabaseErrorHandler.java, line(s) 20,26,62
com/tencent/wcdb/database/SQLiteAsyncQuery.java, line(s) 41,52
com/tencent/wcdb/database/SQLiteConnection.java, line(s) 193,885
com/tencent/wcdb/database/SQLiteConnectionPool.java, line(s) 194,360,372,388,882,64,176,290,753
com/tencent/wcdb/database/SQLiteCursor.java, line(s) 57,172
com/tencent/wcdb/database/SQLiteDatabase.java, line(s) 141,181,947,1122,476,480
com/tencent/wcdb/database/SQLiteDebug.java, line(s) 97,112
com/tencent/wcdb/database/SQLiteDirectCursor.java, line(s) 41,73,167
com/tencent/wcdb/database/SQLiteDirectQuery.java, line(s) 53
com/tencent/wcdb/database/SQLiteOpenHelper.java, line(s) 125,198
com/tencent/wcdb/database/SQLiteQuery.java, line(s) 30
com/tencent/wcdb/database/SQLiteQueryBuilder.java, line(s) 158
com/tencent/wcdb/repair/DBDumpUtil.java, line(s) 280,119,206,211,221,225,245,256,46
com/xunmeng/android_ui/util/g.java, line(s) 114
com/xunmeng/basiccomponent/pnet/b/a.java, line(s) 34
com/xunmeng/basiccomponent/pnet/jni/struct/Logger.java, line(s) 33,58,15,35,37,60,62,29,54,25,50
com/xunmeng/basiccomponent/socket_leak_detector/SocketLeakDetector.java, line(s) 250,272,324
com/xunmeng/basiccomponent/titan/a/b.java, line(s) 35,75
com/xunmeng/basiccomponent/titan/service/a.java, line(s) 36
com/xunmeng/core/log/Logger.java, line(s) 174
com/xunmeng/core/log/b/a.java, line(s) 168,178,185,192,199,206,213,220,230,240,61,68,75,82,89,96,106,116,247,254,261,268,275,282,292,302,123,130,137,144,151,158,13,20,27,34,44,54,309,316
com/xunmeng/db_framework/a/a.java, line(s) 99
com/xunmeng/db_framework/a/b.java, line(s) 96
com/xunmeng/db_framework/a/h.java, line(s) 57
com/xunmeng/effect/render_engine_sdk/egl/c.java, line(s) 821
com/xunmeng/el/v8/c/b.java, line(s) 48
com/xunmeng/mediaengine/base/AudioDeviceEventReceiver.java, line(s) 27,139,150,33,35,42,56,60,62,69,83,86,93,121,159
com/xunmeng/mediaengine/base/AudioFocusManager.java, line(s) 35,41,50,31
com/xunmeng/mediaengine/base/AudioFocusOnApi_26_OrHigher.java, line(s) 19,27,33,38,44
com/xunmeng/mediaengine/base/AudioFocusOnApi_8_OrHigher.java, line(s) 17,25,29,36
com/xunmeng/mediaengine/base/AudioRecorderSilentJudge.java, line(s) 67,84,109,120,42,46,51
com/xunmeng/mediaengine/base/ImageUtil.java, line(s) 206
com/xunmeng/mediaengine/base/JniLibLoader.java, line(s) 40,64,76
com/xunmeng/mediaengine/base/MainThreadHandler.java, line(s) 52,48
com/xunmeng/mediaengine/base/RefCountedI420Frame.java, line(s) 48,49,65,66
com/xunmeng/mediaengine/base/RtcAbControl.java, line(s) 14,23,8
com/xunmeng/mediaengine/base/RtcAppMonitor.java, line(s) 21,31,17,26
com/xunmeng/mediaengine/base/RtcAudioManager.java, line(s) 75,97,130,190,216,351,372,377,386,403,62,70,273,297,341,363,381,400,143,149,167,173,195,198,207,219,231,233,242,246,313,392
com/xunmeng/mediaengine/base/RtcCmtReportUtils.java, line(s) 225,230,243,248
com/xunmeng/mediaengine/base/RtcLog.java, line(s) 99,89,86,96,102,93
com/xunmeng/mediaengine/base/RtcNetworkUtils.java, line(s) 88,105,122
com/xunmeng/mediaengine/base/RtcPermissionsChecker.java, line(s) 65,73,81,89,97,106,115,140,148,156,164,172,181,190,204,247,253
com/xunmeng/mediaengine/base/RtcReportManager.java, line(s) 40,51,36
com/xunmeng/mediaengine/base/RtcVideoView.java, line(s) 43,71,154,159,213,239,249
com/xunmeng/mediaengine/base/TelephoneEventReceiver.java, line(s) 34,44,47
com/xunmeng/mediaengine/base/WebrtcHelper.java, line(s) 34,41
com/xunmeng/mediaengine/live/RtcHttpDns.java, line(s) 42,47,58
com/xunmeng/mediaengine/live/RtcLiveDataReport.java, line(s) 27,35,24
com/xunmeng/mediaengine/live/RtcLiveJungle.java, line(s) 67,84,88,95,109,125,132,146,151,181,188,203,232,262,266,272,286,291,295,314,325,331,71,97,111,115,186,207,241,243,246,274,308,311,134,300
com/xunmeng/mediaengine/live/RtcLiveJungleDataReport.java, line(s) 29
com/xunmeng/mediaengine/live/RtcLivePlay.java, line(s) 85,89,96,105,108,114,159,163,170,176,191,196,227,233,244,248,262,274,277,283,302,317,332,345,355,395,407,416,83,94,116,179,285,306,321,336,45,56,76,252
com/xunmeng/mediaengine/live/RtcLivePush.java, line(s) 46,57,61,68,73,79,83,98,119,146,150,156,39,50,70,113,128,130,133,158,87
com/xunmeng/mediaengine/live/RtcLivePushDataReport.java, line(s) 24,29,36
com/xunmeng/mediaengine/live/RtcUdpTest.java, line(s) 13,20,29
com/xunmeng/mediaengine/rtc/ImRtc$ImRtcEventListener$$CC.java, line(s) 8
com/xunmeng/mediaengine/rtc/impl/HttpComponent.java, line(s) 94,111,85,87,90,106,114,62
com/xunmeng/mediaengine/rtc/impl/ImRtcImpl.java, line(s) 197,396,480,521,534,576,590,610,614,668,672,677,688,700,727,801,835,854,865,891,895,946,962,984,1001,1089,1106,1141,1174,1232,1260,1280,1318,1354,1383,1412,1440,1468,1512,1558,1602,1630,1658,1686,1714,1742,1771,1799,1827,1855,1883,1921,1949,2022,2056,2075,2102,2216,2276,2296,2315,2357,2368,2377,2387,2401,2408,2578,2707,2715,2731,2855,2872,2892,2897,2925,2937,3011,3045,3074,3082,3106,3126,3139,3198,3203,3208,3224,3240,3246,3256,3307,3318,3322,3328,3374,3379,3404,177,180,191,193,242,246,260,274,341,379,411,548,549,551,554,682,694,724,769,779,899,916,959,981,1164,1351,1547,2041,2111,2118,2128,2132,2198,2218,2293,2346,2511,2513,2533,2576,2604,2624,2765,2791,2806,2875,2901,2910,2915,2966,3043,3062,3064,3068,3210,3211,3213,3220,3222,3230,3233,3236,3266,3309,3371,3439,3528,324,353,436,1303,1534,1538,1588,1917,2934,3112,3115,3190,3294
com/xunmeng/mediaengine/rtc/impl/NativeI420VideoFrame.java, line(s) 40,41,62,63
com/xunmeng/mobile/a/a.java, line(s) 41,48,60
com/xunmeng/moore/b/a.java, line(s) 47
com/xunmeng/moore/lego_comment_dialog/g.java, line(s) 439,93
com/xunmeng/moore/model/FeedModel.java, line(s) 142,242
com/xunmeng/moore/upload/a/a.java, line(s) 89
com/xunmeng/moore/util/h.java, line(s) 31
com/xunmeng/moore_upload/model/LocalMediaModel.java, line(s) 70
com/xunmeng/moore_upload/task/c.java, line(s) 116
com/xunmeng/moore_upload/upload/VideoCaptureAlbumVideoUploadService.java, line(s) 526,949,1182,1270
com/xunmeng/pdd_av_foundation/av_converter/audio/muxer/AACConvert.java, line(s) 121
com/xunmeng/pdd_av_foundation/avimpl/a.java, line(s) 280
com/xunmeng/pdd_av_foundation/biz_base/a/a.java, line(s) 230,596,478,544,572,580,106,604,354,588
com/xunmeng/pdd_av_foundation/biz_base/label/GeneralLabelView.java, line(s) 437,448
com/xunmeng/pdd_av_foundation/biz_base/model/LocalMediaModel.java, line(s) 56
com/xunmeng/pdd_av_foundation/biz_base/swipe/SwipeLayerView.java, line(s) 214,468
com/xunmeng/pdd_av_foundation/biz_base/utils/w.java, line(s) 77,216
com/xunmeng/pdd_av_foundation/component/c/b.java, line(s) 79,218
com/xunmeng/pdd_av_foundation/giftkit/a/a.java, line(s) 35,47,53,60,67,77,84
com/xunmeng/pdd_av_foundation/live_apm_monitor/a/e.java, line(s) 80
com/xunmeng/pdd_av_foundation/live_apm_monitor/b/a.java, line(s) 58
com/xunmeng/pdd_av_foundation/live_apm_monitor/f.java, line(s) 24,38,49
com/xunmeng/pdd_av_foundation/pdd_av_floatwindow/a/a.java, line(s) 82,97,177,193,208,224,246,269
com/xunmeng/pdd_av_foundation/pdd_av_floatwindow/liveFloatWindow/AVFloatWindow.java, line(s) 365
com/xunmeng/pdd_av_foundation/pdd_av_gallery/GalleryUtil.java, line(s) 375
com/xunmeng/pdd_av_foundation/pdd_av_gallery/h/a.java, line(s) 40
com/xunmeng/pdd_av_foundation/pdd_av_gallery_api/router_service/AvPageManager.java, line(s) 81
com/xunmeng/pdd_av_foundation/pdd_live_push/c/c.java, line(s) 195
com/xunmeng/pdd_av_foundation/pdd_live_push/remoteVideoRecord/h.java, line(s) 138
com/xunmeng/pdd_av_foundation/pdd_live_push/streamV2/capture/VideoCaptureHelper.java, line(s) 49,70
com/xunmeng/pdd_av_foundation/pdd_live_push/streamV2/func/LiveStreamAPI.java, line(s) 23
com/xunmeng/pdd_av_foundation/pdd_live_tab/LiveTabFragment.java, line(s) 1573
com/xunmeng/pdd_av_foundation/pdd_live_tab/LiveTabRouterPreload.java, line(s) 235
com/xunmeng/pdd_av_foundation/pdd_live_tab/LiveTabTabLayout.java, line(s) 52
com/xunmeng/pdd_av_foundation/pdd_live_tab/interceptor/PersonalPageRouterInterceptor.java, line(s) 92
com/xunmeng/pdd_av_foundation/pdd_live_tab/k/a.java, line(s) 30
com/xunmeng/pdd_av_foundation/pdd_live_tab/preload/f.java, line(s) 44
com/xunmeng/pdd_av_foundation/pdd_live_tab/preload/s.java, line(s) 76,116,167
com/xunmeng/pdd_av_foundation/pdd_live_tab/red_dot/LiveTabPushHandler.java, line(s) 73,106,118,142,154
com/xunmeng/pdd_av_foundation/pdd_live_tab/red_dot/a.java, line(s) 997,1016,1033,1061,1081,1098
com/xunmeng/pdd_av_foundation/pdd_live_tab/s.java, line(s) 619,639,898
com/xunmeng/pdd_av_foundation/pdd_live_tab/traffic_red_popup/a.java, line(s) 363
com/xunmeng/pdd_av_foundation/pdd_live_tab/view/LiveTabTabView.java, line(s) 51
com/xunmeng/pdd_av_foundation/pdd_media_core/PDDMCEffect/a/a.java, line(s) 79,121,151,40,101
com/xunmeng/pdd_av_foundation/pdd_media_core/PDDMCEffect/a/d.java, line(s) 37
com/xunmeng/pdd_av_foundation/pdd_media_core/PDDMCEffect/gpuimage/utils/a.java, line(s) 52,62,67,76
com/xunmeng/pdd_av_foundation/pdd_media_core/PDDMCView/GLTextureView.java, line(s) 151,209,892,721,274,478
com/xunmeng/pdd_av_foundation/pdd_media_core/b/a.java, line(s) 10
com/xunmeng/pdd_av_foundation/pddlive/common/a/b.java, line(s) 25
com/xunmeng/pdd_av_foundation/pddlive/common/messagelist/LiveMessageLayout.java, line(s) 187
com/xunmeng/pdd_av_foundation/pddlive/common/messagelist/b.java, line(s) 58
com/xunmeng/pdd_av_foundation/pddlive/common/messagelist/d.java, line(s) 106
com/xunmeng/pdd_av_foundation/pddlive/common/messagelist/mic/e.java, line(s) 69
com/xunmeng/pdd_av_foundation/pddlive/common/messagelist/rich/a/a.java, line(s) 265
com/xunmeng/pdd_av_foundation/pddlive/common/messagelist/rich/a/g.java, line(s) 17
com/xunmeng/pdd_av_foundation/pddlive/common/notice/LiveNoticeView.java, line(s) 217,245
com/xunmeng/pdd_av_foundation/pddlive/common/onmic/e/b.java, line(s) 303,318,336,341,347,352,362,367,372,377,382,387,462,488,327,457
com/xunmeng/pdd_av_foundation/pddlive/utils/ab.java, line(s) 199
com/xunmeng/pdd_av_foundation/pddlive/utils/f.java, line(s) 54
com/xunmeng/pdd_av_foundation/pddlive/utils/k.java, line(s) 72
com/xunmeng/pdd_av_foundation/pddlive/utils/s.java, line(s) 159,177
com/xunmeng/pdd_av_foundation/pddlive/utils/v.java, line(s) 12,23
com/xunmeng/pdd_av_foundation/pddlive/widget/spreadBanner/GiftSpreadView.java, line(s) 97,188
com/xunmeng/pdd_av_foundation/pddlivepublishscene/a/b.java, line(s) 48,51
com/xunmeng/pdd_av_foundation/pddlivepublishscene/component/audiomessage/LivePublishAudioCommentComponent.java, line(s) 151
com/xunmeng/pdd_av_foundation/pddlivepublishscene/component/highlayer/HighLayerComponent.java, line(s) 92
com/xunmeng/pdd_av_foundation/pddlivepublishscene/component/highlayer/PublishPendantComponent.java, line(s) 63
com/xunmeng/pdd_av_foundation/pddlivepublishscene/component/highlayer/e.java, line(s) 401,520,662,685,710
com/xunmeng/pdd_av_foundation/pddlivepublishscene/utils/PublishMonitorReporter.java, line(s) 112
com/xunmeng/pdd_av_foundation/pddlivepublishscene/view/fragment/viewimpl/PublishLiveRoomFragment.java, line(s) 3542
com/xunmeng/pdd_av_foundation/pddlivepublishscene/view/widget/y.java, line(s) 62
com/xunmeng/pdd_av_foundation/pddlivescene/a/e.java, line(s) 37
com/xunmeng/pdd_av_foundation/pddlivescene/a/f.java, line(s) 79
com/xunmeng/pdd_av_foundation/pddlivescene/bridge/JSLiveCommonBridge.java, line(s) 22
com/xunmeng/pdd_av_foundation/pddlivescene/c/a.java, line(s) 37,200
com/xunmeng/pdd_av_foundation/pddlivescene/components/live/auction/AuctionComponent.java, line(s) 116
com/xunmeng/pdd_av_foundation/pddlivescene/components/live/bottom_bar/BottomBarComponent.java, line(s) 830,877
com/xunmeng/pdd_av_foundation/pddlivescene/components/live/fastGift/FastFastGiftComponent.java, line(s) 558
com/xunmeng/pdd_av_foundation/pddlivescene/components/live/goods_pop/GoodsPopComponent.java, line(s) 133,158
com/xunmeng/pdd_av_foundation/pddlivescene/components/live/highlayer/LiveHighLayerComponentV2.java, line(s) 240,262,485,512,667,887,960,163,165,938
com/xunmeng/pdd_av_foundation/pddlivescene/components/live/lego_high_layer/b.java, line(s) 154,209,210
com/xunmeng/pdd_av_foundation/pddlivescene/components/live/live_room_pendant/a.java, line(s) 57
com/xunmeng/pdd_av_foundation/pddlivescene/components/live/main/MainComponent.java, line(s) 254,256
com/xunmeng/pdd_av_foundation/pddlivescene/components/live/message/lego/LiveLegoMessageLayout.java, line(s) 693,727,478
com/xunmeng/pdd_av_foundation/pddlivescene/components/live/mic/LiveSceneMicComponent.java, line(s) 683,789,186,217,1259,1371,1440,1468
com/xunmeng/pdd_av_foundation/pddlivescene/components/live/notice/a.java, line(s) 956
com/xunmeng/pdd_av_foundation/pddlivescene/components/live/personal_card/PersonalComponent.java, line(s) 209
com/xunmeng/pdd_av_foundation/pddlivescene/components/live/player/LivePlayerComponent.java, line(s) 1285
com/xunmeng/pdd_av_foundation/pddlivescene/components/live/screen_clear/ScreenClearComponent.java, line(s) 94,239
com/xunmeng/pdd_av_foundation/pddlivescene/components/live/toast/LiveSceneToastComponent.java, line(s) 91,145,246,293,320
com/xunmeng/pdd_av_foundation/pddlivescene/float_window/f.java, line(s) 58
com/xunmeng/pdd_av_foundation/pddlivescene/float_window/live/LiveFloatWindowContainer.java, line(s) 207
com/xunmeng/pdd_av_foundation/pddlivescene/h/a.java, line(s) 256,201,209
com/xunmeng/pdd_av_foundation/pddlivescene/h/a/a.java, line(s) 18
com/xunmeng/pdd_av_foundation/pddlivescene/h/aa.java, line(s) 35
com/xunmeng/pdd_av_foundation/pddlivescene/h/e.java, line(s) 210
com/xunmeng/pdd_av_foundation/pddlivescene/h/j.java, line(s) 43
com/xunmeng/pdd_av_foundation/pddlivescene/model/LiveModel.java, line(s) 81
com/xunmeng/pdd_av_foundation/pddlivescene/player/a/a.java, line(s) 48
com/xunmeng/pdd_av_foundation/pddlivescene/presenter/a/a.java, line(s) 109,126,178
com/xunmeng/pdd_av_foundation/pddlivescene/presenter/k.java, line(s) 33
com/xunmeng/pdd_av_foundation/pddlivescene/simple_live/SimpleLiveModel.java, line(s) 30
com/xunmeng/pdd_av_foundation/pddlivescene/simple_live/b/b.java, line(s) 187
com/xunmeng/pdd_av_foundation/pddlivescene/simple_live/k.java, line(s) 62
com/xunmeng/pdd_av_foundation/pddlivescene/view/dialog/c.java, line(s) 27,49
com/xunmeng/pdd_av_foundation/pddlivescene/view/dialog/f.java, line(s) 83,216
com/xunmeng/pdd_av_foundation/pddlivescene/view/fragment/PDDBaseLivePlayFragment.java, line(s) 2200,3473,3596,3620,5182,6446,1548,3559,7018,8046
com/xunmeng/pdd_av_foundation/pddlivescene/view/fragment/PDDLiveReplayFragment.java, line(s) 3214
com/xunmeng/pdd_av_foundation/pddlivescene/view/replay/g.java, line(s) 96,148
com/xunmeng/pdd_av_foundation/pddlivescene/view/replay/i.java, line(s) 103,64,66
com/xunmeng/pdd_av_foundation/pddlivescene/view/replay/widget/TranslationPressConstrainLayout.java, line(s) 41,95
com/xunmeng/pdd_av_foundation/pddlivescene/view/widget/LivePublisherCard.java, line(s) 295,351,123,364
com/xunmeng/pdd_av_foundation/pddlivescene/view/widget/LivePublisherCardView.java, line(s) 301,317,131,330
com/xunmeng/pdd_av_foundation/pddlivescene/view/widget/LiveRichNoticeTextView.java, line(s) 87
com/xunmeng/pdd_av_foundation/pddlivescene/view/widget/a/b.java, line(s) 107
com/xunmeng/pdd_av_foundation/pddlivescene/view/widget/au.java, line(s) 182,313
com/xunmeng/pdd_av_foundation/pddlivescene/view/widget/likeview/AnimationLayout.java, line(s) 60
com/xunmeng/pdd_av_foundation/pddlivescene/view/widget/likeview/PDDLiveLikeView.java, line(s) 100,141
com/xunmeng/pdd_av_foundation/pddvideocapturekit/fragment/VideoCaptureMixCameraFragment.java, line(s) 276
com/xunmeng/pdd_av_foundation/pddvideocapturekitapi/base/monitor/b.java, line(s) 29
com/xunmeng/pdd_av_foundation/pddvideocapturekitapi/base/util/VideoUtils.java, line(s) 240,254,73
com/xunmeng/pdd_av_foundation/pddvideocapturekitapi/base/widget/PDDRenderLego.java, line(s) 99,113
com/xunmeng/pdd_av_foundation/pddvideoeditkit/c/a.java, line(s) 271
com/xunmeng/pdd_av_foundation/pddvideoeditkit/utils/d.java, line(s) 74,88
com/xunmeng/pddrtc/PddRtc.java, line(s) 148
com/xunmeng/pddrtc/PddRtcHttpDns.java, line(s) 40,50,53
com/xunmeng/pddrtc/PddRtcJungle.java, line(s) 77,83,107,121,125,127,195,199,201,271,275,294,302,99,114,137,153,157,173,211,316,319,323,66,87,233,264,278,312
com/xunmeng/pddrtc/PddRtcJungleDns.java, line(s) 24,34,37
com/xunmeng/pddrtc/PddRtcLive.java, line(s) 166,172,189,255,259,291,308,312,193,241,244,58,67,85,92,100,115,127,137,147,176,284,288,295,328,439,447
com/xunmeng/pddrtc/PddRtcLiveDns.java, line(s) 33,43,46
com/xunmeng/pddrtc/PddRtcLivePush.java, line(s) 25,31,38,48,62,44,50,57,65,76,79,88
com/xunmeng/pddrtc/PddRtcPushCallback.java, line(s) 17,27
com/xunmeng/pddrtc/base/LibInitializer.java, line(s) 208,220,193,197,206,218,113,39,52,61,69,85,87,100,106,114,151,167,171,179
com/xunmeng/pddrtc/base/PddRtcAbConfigImpl.java, line(s) 55,115,121,28,38,58,68,71,81,94,107
com/xunmeng/pddrtc/base/PddRtcAppMonitor.java, line(s) 103,150,147,61,70,79,128
com/xunmeng/pddrtc/base/PddRtcHttpDelegate.java, line(s) 42,77,85,88,102,139,147,156,173,176,180
com/xunmeng/pddrtc/base/PddRtcReportImpl.java, line(s) 65,58,62,24,35,44,51
com/xunmeng/pddrtc/base/SoDownloadInfo.java, line(s) 19,35
com/xunmeng/pddrtc/impl/FetchSoHelper.java, line(s) 50,64,37,45,55,75,80,89,101
com/xunmeng/pddrtc/impl/PddRtcImpl.java, line(s) 60,71,176,189,204,215,224,234,244,261,272,282,300,307,313,323,331,342,348,363,375,386,430,435,440,523,645,691,702,735,756,768,778,788,798,808,821,830,840,850,863,873,883,894,903,911,917,930,940,950,960,971,980,75,102,173,186,201,211,221,231,241,285,297,303,336,360,372,383,394,407,453,466,479,497,510,528,541,554,580,593,606,619,632,658,688,699,710,732,753,785,795,805,816,827,837,847,860,870,880,890,900,914,927,937,947,957,967,977,994,65,139,142,150,250,256,268,316,318,421,492,567,671
com/xunmeng/pinduoduo/a/a.java, line(s) 74
com/xunmeng/pinduoduo/activity/ErrorInfoActivity.java, line(s) 32
com/xunmeng/pinduoduo/activity/NewPageMaskActivity.java, line(s) 202
com/xunmeng/pinduoduo/activity/TranslinkErrorActivity.java, line(s) 38
com/xunmeng/pinduoduo/amui/cache/f.java, line(s) 439,450,460
com/xunmeng/pinduoduo/android_ui_jsapi/JSActionSheet.java, line(s) 217
com/xunmeng/pinduoduo/apm/avoid/MiscInlineFix.java, line(s) 45
com/xunmeng/pinduoduo/apm/common/b/h.java, line(s) 101
com/xunmeng/pinduoduo/apm/common/utils/h.java, line(s) 26
com/xunmeng/pinduoduo/apm/h/a.java, line(s) 17
com/xunmeng/pinduoduo/apm/memory/i.java, line(s) 31
com/xunmeng/pinduoduo/apm_cpu_wrapper/d/a.java, line(s) 34,43,48,67
com/xunmeng/pinduoduo/apm_cpu_wrapper/d/b.java, line(s) 72,159
com/xunmeng/pinduoduo/app/PDDApplicationLike.java, line(s) 286,300,402,493,102,297,298,479,480
com/xunmeng/pinduoduo/app_address_lego/AddressLegoFragment.java, line(s) 600,181,225,248,256,273,336,587,724,792,811,1004
com/xunmeng/pinduoduo/app_album/album/JSVideo.java, line(s) 82
com/xunmeng/pinduoduo/app_album/album/pddimage/PDDSaveImage.java, line(s) 317
com/xunmeng/pinduoduo/app_base_photo_browser/BasePhotoBrowserFragment.java, line(s) 225
com/xunmeng/pinduoduo/app_bubble/i.java, line(s) 44,94,96,114,182
com/xunmeng/pinduoduo/app_bubble/z.java, line(s) 118,188
com/xunmeng/pinduoduo/app_default_home/EventBannerHolder.java, line(s) 404
com/xunmeng/pinduoduo/app_default_home/a/d/b/a/a.java, line(s) 51
com/xunmeng/pinduoduo/app_default_home/dualcolumn/DefaultHomeFragmentDouble.java, line(s) 1157
com/xunmeng/pinduoduo/app_default_home/dualcolumn/k.java, line(s) 303,344,388
com/xunmeng/pinduoduo/app_default_home/dualcolumn/p.java, line(s) 508
com/xunmeng/pinduoduo/app_default_home/entity/HomeRankingListTag.java, line(s) 36
com/xunmeng/pinduoduo/app_default_home/g/a.java, line(s) 358,405
com/xunmeng/pinduoduo/app_default_home/icon/QuickEntranceViewHolder.java, line(s) 103,106
com/xunmeng/pinduoduo/app_default_home/icon/f.java, line(s) 633
com/xunmeng/pinduoduo/app_default_home/push/a.java, line(s) 205
com/xunmeng/pinduoduo/app_default_home/util/DefaultHomeDataUtil.java, line(s) 89,105,125,140,151,161
com/xunmeng/pinduoduo/app_default_home/util/f.java, line(s) 54
com/xunmeng/pinduoduo/app_default_home/util/i.java, line(s) 93
com/xunmeng/pinduoduo/app_default_home/util/k.java, line(s) 22
com/xunmeng/pinduoduo/app_home/HomeFragment.java, line(s) 816,1108,1795,716
com/xunmeng/pinduoduo/app_lego/v8/LegoV8ContainerFragment.java, line(s) 641,2698,2701
com/xunmeng/pinduoduo/app_lego/v8/d.java, line(s) 140
com/xunmeng/pinduoduo/app_lego/v8/preload/LegoPreloadServiceImpl.java, line(s) 273
com/xunmeng/pinduoduo/app_lego/v8/preload/bl.java, line(s) 344
com/xunmeng/pinduoduo/app_lego/v8/preload/h.java, line(s) 95,751,763,834,917,929,937
com/xunmeng/pinduoduo/app_lego/v8/preload/n.java, line(s) 138
com/xunmeng/pinduoduo/app_lego/v8/preload/s.java, line(s) 211
com/xunmeng/pinduoduo/app_mall_video/web/PDDNativeVideo.java, line(s) 610
com/xunmeng/pinduoduo/app_search_common/g/q.java, line(s) 297
com/xunmeng/pinduoduo/app_search_common/widgets/CommonSearchWebView.java, line(s) 37
com/xunmeng/pinduoduo/app_subjects/a.java, line(s) 183
com/xunmeng/pinduoduo/app_subjects/c/a.java, line(s) 69,105
com/xunmeng/pinduoduo/app_subjects/scene_group/a.java, line(s) 416,418
com/xunmeng/pinduoduo/app_subjects/ui/fragment/SubjectsExtFragment.java, line(s) 137
com/xunmeng/pinduoduo/app_subjects/ui/fragment/SubjectsFragment.java, line(s) 178
com/xunmeng/pinduoduo/appstartup/appinit/AppBaseInitTask.java, line(s) 147
com/xunmeng/pinduoduo/appstartup/b/a.java, line(s) 705,710
com/xunmeng/pinduoduo/appstartup/components/a.java, line(s) 10,15
com/xunmeng/pinduoduo/arch/foundation/c.java, line(s) 36,40
com/xunmeng/pinduoduo/arch/vita/fs/c/b.java, line(s) 105,152
com/xunmeng/pinduoduo/base_pinbridge/AMDevice.java, line(s) 78
com/xunmeng/pinduoduo/base_pinbridge/AMSecure.java, line(s) 52,86
com/xunmeng/pinduoduo/base_pinbridge/JSKeyboardListener.java, line(s) 168
com/xunmeng/pinduoduo/basekit/cache/DiskCache.java, line(s) 26,44,47,61,68,127
com/xunmeng/pinduoduo/basekit/http/manager/b.java, line(s) 362
com/xunmeng/pinduoduo/be/b.java, line(s) 35,37,39,42,45
com/xunmeng/pinduoduo/bridge/a.java, line(s) 83,67,72,77,87,116,131,248,237
com/xunmeng/pinduoduo/bridge/b.java, line(s) 13,21,23,27
com/xunmeng/pinduoduo/bridge/c.java, line(s) 40
com/xunmeng/pinduoduo/category/CategoryFragment.java, line(s) 362
com/xunmeng/pinduoduo/category/OperationProductsFragment.java, line(s) 636
com/xunmeng/pinduoduo/category/d/c.java, line(s) 42
com/xunmeng/pinduoduo/category/e.java, line(s) 95
com/xunmeng/pinduoduo/chat/api/a/a.java, line(s) 47,166
com/xunmeng/pinduoduo/chat/api/c/c.java, line(s) 34
com/xunmeng/pinduoduo/chat/base/c/d.java, line(s) 31,54
com/xunmeng/pinduoduo/chat/base/db/b.java, line(s) 20
com/xunmeng/pinduoduo/chat/base/lego/av.java, line(s) 255,280
com/xunmeng/pinduoduo/chat/base/lego/t.java, line(s) 123,196,441,454,467
com/xunmeng/pinduoduo/chat/base/legoBuiltIn/a.java, line(s) 255
com/xunmeng/pinduoduo/chat/biz/followBuyRedPacket/ChatRedPacketDetailFragment.java, line(s) 88
com/xunmeng/pinduoduo/chat/biz/lego/c.java, line(s) 143
com/xunmeng/pinduoduo/chat/biz/lego/common/ChatLegoFunctionRegister.java, line(s) 91,277,463,932,942,959,1048,1070,1343,1448,1469,1480,1492,1001,1439
com/xunmeng/pinduoduo/chat/biz/lego/dialog/av.java, line(s) 93
com/xunmeng/pinduoduo/chat/biz/lego/floatLayer/ad.java, line(s) 65
com/xunmeng/pinduoduo/chat/biz/lego/messageBoxAlert/w.java, line(s) 353
com/xunmeng/pinduoduo/chat/biz/multiMedia/e.java, line(s) 237
com/xunmeng/pinduoduo/chat/camera/CaptureFragment.java, line(s) 151,161
com/xunmeng/pinduoduo/chat/camera/ChatCameraFragmentV2.java, line(s) 228,361
com/xunmeng/pinduoduo/chat/camera/RecordFragment.java, line(s) 66
com/xunmeng/pinduoduo/chat/chatBiz/b/a.java, line(s) 69
com/xunmeng/pinduoduo/chat/chatBiz/chatDetail/Component/inputPanelComponent/ChatVoiceInputPanel.java, line(s) 112,653
com/xunmeng/pinduoduo/chat/chatBiz/chatDetail/Component/inputPanelComponent/a/b.java, line(s) 217
com/xunmeng/pinduoduo/chat/chatBiz/chatDetail/Component/inputPanelComponent/b/a/a.java, line(s) 128,181,372,411
com/xunmeng/pinduoduo/chat/chatBiz/chatDetail/Component/inputPanelComponent/b/a/h.java, line(s) 65,108,138,215,273,298,330
com/xunmeng/pinduoduo/chat/chatBiz/chatDetail/a.java, line(s) 136
com/xunmeng/pinduoduo/chat/chatBiz/chatDetail/clickAction/actions/a.java, line(s) 44
com/xunmeng/pinduoduo/chat/chatBiz/chatDetail/clickAction/actions/ao.java, line(s) 124
com/xunmeng/pinduoduo/chat/chatBiz/chatDetail/clickAction/actions/az.java, line(s) 36
com/xunmeng/pinduoduo/chat/chatBiz/chatDetail/clickAction/actions/br.java, line(s) 127
com/xunmeng/pinduoduo/chat/chatBiz/chatDetail/clickAction/actions/cu.java, line(s) 22
com/xunmeng/pinduoduo/chat/chatBiz/chatDetail/clickAction/actions/d.java, line(s) 34
com/xunmeng/pinduoduo/chat/chatBiz/chatDetail/o.java, line(s) 80
com/xunmeng/pinduoduo/chat/chatBiz/conversation/binder/LegoHeadBannerBinder.java, line(s) 171
com/xunmeng/pinduoduo/chat/chatBiz/conversation/binder/LegoModuleBinder.java, line(s) 112
com/xunmeng/pinduoduo/chat/chatBiz/conversation/binder/e.java, line(s) 159,212
com/xunmeng/pinduoduo/chat/chatBiz/conversation/d/af.java, line(s) 61
com/xunmeng/pinduoduo/chat/chatBiz/conversation/d/i.java, line(s) 60
com/xunmeng/pinduoduo/chat/chatBiz/conversation/utils/a.java, line(s) 19
com/xunmeng/pinduoduo/chat/chatBiz/msgCardBiz/multiFloorCard/a.java, line(s) 60,62
com/xunmeng/pinduoduo/chat/chatBiz/view/utils/c.java, line(s) 211,141,221
com/xunmeng/pinduoduo/chat/chatBiz/voiceChat/d/j.java, line(s) 337
com/xunmeng/pinduoduo/chat/chatBiz/voiceChat/model/b.java, line(s) 131
com/xunmeng/pinduoduo/chat/chatBiz/voiceChat/play/a.java, line(s) 91,252,46
com/xunmeng/pinduoduo/chat/datasdk/sdk/orm/db/b.java, line(s) 205,228,270,312,330,333,336,343,375
com/xunmeng/pinduoduo/chat/datasdk/sdk/orm/db/b/a.java, line(s) 202,225,267,309,327,330,333,340,372
com/xunmeng/pinduoduo/chat/datasdk/sdk/orm/db/b/e.java, line(s) 121,168
com/xunmeng/pinduoduo/chat/datasdk/sdk/orm/db/b/g.java, line(s) 249
com/xunmeng/pinduoduo/chat/datasdk/sdk/orm/db/d.java, line(s) 119,166
com/xunmeng/pinduoduo/chat/foundation/a.java, line(s) 140
com/xunmeng/pinduoduo/chat/foundation/legoFunction/a.java, line(s) 206,236,265,273,336,363,459,3773,3790,3812,4399,5186
com/xunmeng/pinduoduo/chat/foundation/utils/d.java, line(s) 230,302
com/xunmeng/pinduoduo/chat/mall/base/component/inputPanel/MallChatInputPanelView.java, line(s) 1768
com/xunmeng/pinduoduo/chat/mall/mall/MallChatFragment.java, line(s) 1173
com/xunmeng/pinduoduo/chat/mall/mall/component/MallStatusTitleGlobalComponent.java, line(s) 123,141,158
com/xunmeng/pinduoduo/chat/messagebox/service/c/a/b.java, line(s) 54,83,103,136,146,212,303,613,637,663,682,725,739
com/xunmeng/pinduoduo/chat/messagebox/service/convDb/a.java, line(s) 48,57,63,68,74,83,90,105,114,122
com/xunmeng/pinduoduo/chat/messagebox/service/convDb/b.java, line(s) 24,28
com/xunmeng/pinduoduo/chat/messagebox/sync/PddIdLongLinkMsgBoxHander.java, line(s) 49
com/xunmeng/pinduoduo/chat/newChat/base/msglist/BaseChatFragment.java, line(s) 83
com/xunmeng/pinduoduo/chat/newChat/base/msglist/bubble/BubblePanelComponent.java, line(s) 43
com/xunmeng/pinduoduo/chat/newChat/base/msglist/inputPanel/VoiceMsgInputComponent.java, line(s) 56,284
com/xunmeng/pinduoduo/chat/newChat/base/msglist/msgFlow/binder/sub/a/a.java, line(s) 60
com/xunmeng/pinduoduo/chat/newChat/base/msglist/msgFlow/binder/sub/image/c.java, line(s) 204
com/xunmeng/pinduoduo/chat/service/a/a.java, line(s) 248
com/xunmeng/pinduoduo/chat/service/init/ChatServiceImpl.java, line(s) 63
com/xunmeng/pinduoduo/chat/sync/messagesynchandler/implemention/b.java, line(s) 51
com/xunmeng/pinduoduo/chat/timeline/biz/a/a.java, line(s) 150,176
com/xunmeng/pinduoduo/chat/unifylayer/config/a/b.java, line(s) 90
com/xunmeng/pinduoduo/chat/unifylayer/dcenter/impl/datasdk/submsg/a/a/e.java, line(s) 97
com/xunmeng/pinduoduo/chat/unifylayer/dcenter/impl/datasdk/submsg/a/a/g.java, line(s) 48
com/xunmeng/pinduoduo/chat/unifylayer/dcenter/impl/datasdk/submsg/b/b.java, line(s) 253
com/xunmeng/pinduoduo/chat/unifylayer/dcenter/impl/datasdk/submsg/newUploadImage/d.java, line(s) 126
com/xunmeng/pinduoduo/chat/unifylayer/dcenter/impl/mall/a/j.java, line(s) 86
com/xunmeng/pinduoduo/chat/unifylayer/dcenter/impl/mall/model/MConversation.java, line(s) 123
com/xunmeng/pinduoduo/checkout_core/a/b/b.java, line(s) 38,83,101,140,85,103,109,122
com/xunmeng/pinduoduo/checkout_core/a/f.java, line(s) 57
com/xunmeng/pinduoduo/checkout_core/data/promotion/couponnew/b.java, line(s) 44
com/xunmeng/pinduoduo/checkout_core/promotion/litecontract/LiteContractHelper.java, line(s) 54,112,163,222,273
com/xunmeng/pinduoduo/checkout_core/view/paymentchannel/a.java, line(s) 344,341
com/xunmeng/pinduoduo/checkout_core/view/paymentchannel/paymentview/CreditCardPaymentView.java, line(s) 772,776,579
com/xunmeng/pinduoduo/checkout_core/view/paymentchannel/paymentview/n.java, line(s) 275,407
com/xunmeng/pinduoduo/checkout_core_compat/CheckoutPlugin.java, line(s) 27
com/xunmeng/pinduoduo/classification/fragment/SearchCategoryFragment.java, line(s) 712
com/xunmeng/pinduoduo/classification/widgets/NestedScrollContainer2.java, line(s) 33
com/xunmeng/pinduoduo/debug/a/a.java, line(s) 66,27,68,70,78,81,30,83
com/xunmeng/pinduoduo/debug/a/d.java, line(s) 172,289
com/xunmeng/pinduoduo/debug/b.java, line(s) 17,28,30
com/xunmeng/pinduoduo/deprecated/chat/holder/shareholder/b/a.java, line(s) 244
com/xunmeng/pinduoduo/deprecated/chat/holder/shareholder/ca.java, line(s) 60
com/xunmeng/pinduoduo/deprecated/chat/holder/shareholder/legocard/a.java, line(s) 169
com/xunmeng/pinduoduo/deprecated/chat/model/MallHttpCaller.java, line(s) 57,90
com/xunmeng/pinduoduo/deprecated/chat/model/MallSessionModel.java, line(s) 81
com/xunmeng/pinduoduo/dialog/BottomAbstractDialog.java, line(s) 26
com/xunmeng/pinduoduo/effect/effect_ui/sticker/StickerView.java, line(s) 720
com/xunmeng/pinduoduo/effect/effect_ui/sticker/e.java, line(s) 20,31,45
com/xunmeng/pinduoduo/embedded/WebEmbeddedFragment.java, line(s) 302
com/xunmeng/pinduoduo/embedded/f.java, line(s) 27,55
com/xunmeng/pinduoduo/express/ExpressMapFragmentWithWeb.java, line(s) 1373,1395,2009
com/xunmeng/pinduoduo/express/util/m.java, line(s) 72
com/xunmeng/pinduoduo/express/view/ExpressMapWebView.java, line(s) 33,71
com/xunmeng/pinduoduo/express/view/b.java, line(s) 73
com/xunmeng/pinduoduo/fastjs/main/f.java, line(s) 15,26
com/xunmeng/pinduoduo/fastjs/main/i.java, line(s) 50,61,88,92,103,116,148
com/xunmeng/pinduoduo/fastjs/main/k.java, line(s) 37
com/xunmeng/pinduoduo/fastjs/main/n.java, line(s) 8
com/xunmeng/pinduoduo/favbase/ChatFavListFragment.java, line(s) 1050
com/xunmeng/pinduoduo/favbase/FavListNewFragment.java, line(s) 2101,2210
com/xunmeng/pinduoduo/favbase/ar.java, line(s) 410,1102,2521
com/xunmeng/pinduoduo/favbase/i/b.java, line(s) 369,387
com/xunmeng/pinduoduo/favbase/j/e.java, line(s) 121
com/xunmeng/pinduoduo/favbase/l/h.java, line(s) 366,421
com/xunmeng/pinduoduo/favbase/promotion_banner/PromotionFavGoodsFragment.java, line(s) 63
com/xunmeng/pinduoduo/favbase/promotion_banner/g.java, line(s) 28
com/xunmeng/pinduoduo/force_permission/d.java, line(s) 65
com/xunmeng/pinduoduo/force_permission/l.java, line(s) 175
com/xunmeng/pinduoduo/friend/FriendsFragmentV2.java, line(s) 1317
com/xunmeng/pinduoduo/friend/c/a.java, line(s) 25
com/xunmeng/pinduoduo/home/base/c/e.java, line(s) 50
com/xunmeng/pinduoduo/home/base/util/HomeDataUtil.java, line(s) 145,159,176
com/xunmeng/pinduoduo/image_crop/crop/ImageCropView.java, line(s) 177
com/xunmeng/pinduoduo/image_search/ImageSearchHistoryFragment.java, line(s) 80,231
com/xunmeng/pinduoduo/image_search/featrueV4/ImageSearchFragmentV4.java, line(s) 677,741,2187
com/xunmeng/pinduoduo/image_search/i.java, line(s) 93
com/xunmeng/pinduoduo/image_search/j.java, line(s) 453
com/xunmeng/pinduoduo/image_search/j/c.java, line(s) 31
com/xunmeng/pinduoduo/image_search/j/m.java, line(s) 551
com/xunmeng/pinduoduo/image_search/j/q.java, line(s) 73
com/xunmeng/pinduoduo/image_search/new_version/CaptureSurfaceView.java, line(s) 221
com/xunmeng/pinduoduo/image_search/new_version/NewImageSearchFragment.java, line(s) 763,2144
com/xunmeng/pinduoduo/image_search/new_version/NewImageSearchModel.java, line(s) 157,161
com/xunmeng/pinduoduo/image_search/new_version/bj.java, line(s) 42
com/xunmeng/pinduoduo/image_search/new_version/localFocus/a.java, line(s) 76
com/xunmeng/pinduoduo/image_search/new_version/localFocus/video/VideoScanTask.java, line(s) 249
com/xunmeng/pinduoduo/image_search/widget/CodeJumpTipsView.java, line(s) 233
com/xunmeng/pinduoduo/image_search/widget/sheet/k.java, line(s) 160
com/xunmeng/pinduoduo/impl/FavoriteServiceImpl.java, line(s) 473,51,749
com/xunmeng/pinduoduo/index/entity/FirstCategoryPage.java, line(s) 115
com/xunmeng/pinduoduo/index/promotion/b.java, line(s) 404
com/xunmeng/pinduoduo/index/promotion/f.java, line(s) 49
com/xunmeng/pinduoduo/index/ui/e.java, line(s) 1134
com/xunmeng/pinduoduo/index/ui/l.java, line(s) 62
com/xunmeng/pinduoduo/infostat/c.java, line(s) 111,181,218,262,265,266,132,136,140,146,185,201,232,283
com/xunmeng/pinduoduo/lego/d/e.java, line(s) 116
com/xunmeng/pinduoduo/lego/dependency/a.java, line(s) 27
com/xunmeng/pinduoduo/lego/e/c.java, line(s) 440
com/xunmeng/pinduoduo/lego/log/a.java, line(s) 5,9,13,17
com/xunmeng/pinduoduo/lego/log/e.java, line(s) 19
com/xunmeng/pinduoduo/lego/v8/LegoViewFetchTemplate.java, line(s) 230,351
com/xunmeng/pinduoduo/lego/v8/component/ap.java, line(s) 226
com/xunmeng/pinduoduo/lego/v8/component/l.java, line(s) 177,191,206,218,233
com/xunmeng/pinduoduo/lego/v8/core/e.java, line(s) 158
com/xunmeng/pinduoduo/lego/v8/d.java, line(s) 69
com/xunmeng/pinduoduo/lego/v8/e.java, line(s) 99,328
com/xunmeng/pinduoduo/lego/v8/view/InternalLegoView.java, line(s) 358,530,575,803
com/xunmeng/pinduoduo/lego/v8/view/f.java, line(s) 131
com/xunmeng/pinduoduo/lego/v8/yoga/b.java, line(s) 23
com/xunmeng/pinduoduo/login/DirectLoginFragment.java, line(s) 897
com/xunmeng/pinduoduo/login/LoginFragment.java, line(s) 988
com/xunmeng/pinduoduo/login/NewLoginFragment.java, line(s) 489
com/xunmeng/pinduoduo/login/c/d.java, line(s) 2042,2460
com/xunmeng/pinduoduo/login/login_saved_account/LoginSavedAccountFragment.java, line(s) 1267
com/xunmeng/pinduoduo/longlink/h.java, line(s) 41,56
com/xunmeng/pinduoduo/m2/a/a.java, line(s) 161,175
com/xunmeng/pinduoduo/m2/a/l.java, line(s) 2508,2945
com/xunmeng/pinduoduo/m2/a/m.java, line(s) 954
com/xunmeng/pinduoduo/m2/m2function/M2Error.java, line(s) 132,150,175
com/xunmeng/pinduoduo/mall/s/ap.java, line(s) 98
com/xunmeng/pinduoduo/map/express/MapExpressData.java, line(s) 140
com/xunmeng/pinduoduo/map/express/MapFragment.java, line(s) 180
com/xunmeng/pinduoduo/meepo/core/a/a.java, line(s) 59
com/xunmeng/pinduoduo/meepo/core/message/PageTimeStampRecord.java, line(s) 106
com/xunmeng/pinduoduo/minos_tasks/v2/task/impl/b.java, line(s) 26,32,36,42,46,53,61,65,73,78,80,85,108
com/xunmeng/pinduoduo/network_bridge/JSTitanMulticast.java, line(s) 191
com/xunmeng/pinduoduo/network_bridge/PDDTitanPush.java, line(s) 73
com/xunmeng/pinduoduo/network_bridge/titan/WebTitanPushHandler.java, line(s) 31
com/xunmeng/pinduoduo/network_bridge/titan/c.java, line(s) 25
com/xunmeng/pinduoduo/network_diagnose/NetAsyncTaskEx.java, line(s) 28
com/xunmeng/pinduoduo/network_diagnose/NetSocket.java, line(s) 212
com/xunmeng/pinduoduo/notificationbox/NotificationBoxFragment.java, line(s) 468,653,890
com/xunmeng/pinduoduo/notificationbox/a/d.java, line(s) 26
com/xunmeng/pinduoduo/notificationbox/an.java, line(s) 98,109,185
com/xunmeng/pinduoduo/notificationbox/c/aq.java, line(s) 64,94
com/xunmeng/pinduoduo/notificationbox/c/b.java, line(s) 44
com/xunmeng/pinduoduo/notificationbox/c/c.java, line(s) 46
com/xunmeng/pinduoduo/notificationbox/c/e.java, line(s) 182
com/xunmeng/pinduoduo/notificationbox/e/a.java, line(s) 69
com/xunmeng/pinduoduo/notificationbox/g/ah.java, line(s) 222,321
com/xunmeng/pinduoduo/notificationbox/g/b.java, line(s) 171,436,580,591
com/xunmeng/pinduoduo/notificationbox/utils/g.java, line(s) 30,46,83
com/xunmeng/pinduoduo/order/utils/d.java, line(s) 982
com/xunmeng/pinduoduo/order/view/f.java, line(s) 202
com/xunmeng/pinduoduo/pdd_bandage/a/k.java, line(s) 26
com/xunmeng/pinduoduo/pddmap/MapData.java, line(s) 16
com/xunmeng/pinduoduo/pddxing/a/b.java, line(s) 41,55
com/xunmeng/pinduoduo/pddxing/abtest/b.java, line(s) 9
com/xunmeng/pinduoduo/pddxing/reader/MultiFormatReader.java, line(s) 18,29
com/xunmeng/pinduoduo/pddxing/report/PddReporter.java, line(s) 28,34,40
com/xunmeng/pinduoduo/personal_center/a/a.java, line(s) 54
com/xunmeng/pinduoduo/pisces/MediaSelectorFragment.java, line(s) 221
com/xunmeng/pinduoduo/process_start_stat/ProcessTraceInitTask.java, line(s) 9
com/xunmeng/pinduoduo/process_start_stat/i.java, line(s) 34,40,62,68,95,101,122,128,154,160
com/xunmeng/pinduoduo/report/cmt/CmtReporter.java, line(s) 43,39
com/xunmeng/pinduoduo/rocket/biz/c.java, line(s) 96,159
com/xunmeng/pinduoduo/safe_mode_impl/a.java, line(s) 72
com/xunmeng/pinduoduo/search/fragment/NewSearchFragment.java, line(s) 179,387,442,784
com/xunmeng/pinduoduo/search/fragment/SearchInputFragment.java, line(s) 571,578,786
com/xunmeng/pinduoduo/search/fragment/SearchResultGoodsNewFragment.java, line(s) 2019
com/xunmeng/pinduoduo/search/holder/header/l.java, line(s) 168
com/xunmeng/pinduoduo/search/jsapi/JSSearch.java, line(s) 239
com/xunmeng/pinduoduo/search/viewmodel/MainSearchViewModel.java, line(s) 159
com/xunmeng/pinduoduo/secure/SecureNative.java, line(s) 303
com/xunmeng/pinduoduo/secure/al.java, line(s) 54,63
com/xunmeng/pinduoduo/secure/u.java, line(s) 309,200,268
com/xunmeng/pinduoduo/service_hook/SystemServiceHooker.java, line(s) 32,30
com/xunmeng/pinduoduo/service_hook/a.java, line(s) 105
com/xunmeng/pinduoduo/settings/b/b.java, line(s) 83
com/xunmeng/pinduoduo/shake/algorithm/d.java, line(s) 80
com/xunmeng/pinduoduo/sharecomment/ShareCommentFragment.java, line(s) 938,1114
com/xunmeng/pinduoduo/sku/bc.java, line(s) 1598
com/xunmeng/pinduoduo/sku/k/a.java, line(s) 106,176
com/xunmeng/pinduoduo/sku_browse/activity/SkuPhotoBrowseActivity.java, line(s) 394
com/xunmeng/pinduoduo/social/common/b.java, line(s) 95,137
com/xunmeng/pinduoduo/social/common/b/b.java, line(s) 87,218,247,202,254
com/xunmeng/pinduoduo/social/common/comment/x.java, line(s) 298
com/xunmeng/pinduoduo/social/common/media_browser/ExpandTextComponent.java, line(s) 425
com/xunmeng/pinduoduo/social/common/media_browser/fragment/PxqEasyModeMediaBrowserFragment.java, line(s) 261
com/xunmeng/pinduoduo/social/common/media_browser/gv.java, line(s) 364
com/xunmeng/pinduoduo/social/common/r/v.java, line(s) 116
com/xunmeng/pinduoduo/social/common/util/a/a.java, line(s) 120
com/xunmeng/pinduoduo/social/common/util/ba.java, line(s) 17
com/xunmeng/pinduoduo/social/common/util/bp.java, line(s) 16
com/xunmeng/pinduoduo/social/common/util/cb.java, line(s) 21
com/xunmeng/pinduoduo/social/common/view/ScrollGridLayoutManager.java, line(s) 69
com/xunmeng/pinduoduo/social/common/view/a/a.java, line(s) 140
com/xunmeng/pinduoduo/social/mall/a/a/a/a.java, line(s) 36,39
com/xunmeng/pinduoduo/social/topic/a/r.java, line(s) 70,71,300
com/xunmeng/pinduoduo/social/topic/media_browser/component/BottomCommentComponent.java, line(s) 397
com/xunmeng/pinduoduo/splash/SplashConfig.java, line(s) 48,58,72
com/xunmeng/pinduoduo/splash/f.java, line(s) 81,108,144,147
com/xunmeng/pinduoduo/threadpool/HandlerBuilder.java, line(s) 84,90,96
com/xunmeng/pinduoduo/threadpool/ThreadPool.java, line(s) 56,62,68
com/xunmeng/pinduoduo/threadpool/a.java, line(s) 42,56,66
com/xunmeng/pinduoduo/timeline/MomentsFragment.java, line(s) 2557,4041
com/xunmeng/pinduoduo/timeline/a/r.java, line(s) 151
com/xunmeng/pinduoduo/timeline/at_friends/d.java, line(s) 66,146,166
com/xunmeng/pinduoduo/timeline/b/ay.java, line(s) 103,147,170
com/xunmeng/pinduoduo/timeline/b/b.java, line(s) 83
com/xunmeng/pinduoduo/timeline/b/r.java, line(s) 39
com/xunmeng/pinduoduo/timeline/badge/a.java, line(s) 761
com/xunmeng/pinduoduo/timeline/extension/badge/view/PxqEntryView.java, line(s) 472
com/xunmeng/pinduoduo/timeline/goods_selection/a/a.java, line(s) 23
com/xunmeng/pinduoduo/timeline/jsapi/JSSocial.java, line(s) 975
com/xunmeng/pinduoduo/timeline/jsapi/c/a.java, line(s) 307
com/xunmeng/pinduoduo/timeline/manager/k.java, line(s) 73,94
com/xunmeng/pinduoduo/timeline/manager/x.java, line(s) 82,92,102,112
com/xunmeng/pinduoduo/timeline/media_browser/PxqBaseMediaBrowserFragment.java, line(s) 144
com/xunmeng/pinduoduo/timeline/media_browser/cj.java, line(s) 37
com/xunmeng/pinduoduo/timeline/moment_detail/a/a.java, line(s) 771
com/xunmeng/pinduoduo/timeline/moment_detail/c/a.java, line(s) 82
com/xunmeng/pinduoduo/timeline/moment_feed/d/c.java, line(s) 104,141,284,333
com/xunmeng/pinduoduo/timeline/moment_feed/fragment/MomentsGoodsSoldOutFragment.java, line(s) 54
com/xunmeng/pinduoduo/timeline/moment_list/base/BaseMomentListChildFragment.java, line(s) 198
com/xunmeng/pinduoduo/timeline/moment_list/d/am.java, line(s) 83
com/xunmeng/pinduoduo/timeline/moment_list/fragment/MomentsRecHistoryFragment.java, line(s) 60,97
com/xunmeng/pinduoduo/timeline/new_moments/a/ax.java, line(s) 476
com/xunmeng/pinduoduo/timeline/new_moments/a/g.java, line(s) 576,1801,2081
com/xunmeng/pinduoduo/timeline/new_moments/base/c.java, line(s) 23
com/xunmeng/pinduoduo/timeline/new_moments/base/p.java, line(s) 44,47
com/xunmeng/pinduoduo/timeline/new_moments/cell/a.java, line(s) 327
com/xunmeng/pinduoduo/timeline/new_moments/cell/cz.java, line(s) 86
com/xunmeng/pinduoduo/timeline/new_moments/cell/jp.java, line(s) 422,488,878
com/xunmeng/pinduoduo/timeline/new_moments/cell/on.java, line(s) 437
com/xunmeng/pinduoduo/timeline/new_moments/cell/qe.java, line(s) 107
com/xunmeng/pinduoduo/timeline/new_moments/profile/cell/au.java, line(s) 145
com/xunmeng/pinduoduo/timeline/panelview/g.java, line(s) 28
com/xunmeng/pinduoduo/timeline/photo_service/room/database/TimelinePhotoDatabase.java, line(s) 64
com/xunmeng/pinduoduo/timeline/redenvelope/container/RedPacketAfterPayedFollowBuyOpenView.java, line(s) 140
com/xunmeng/pinduoduo/timeline/remindlist/a/c.java, line(s) 825
com/xunmeng/pinduoduo/timeline/service/TimelineInternalServiceImpl.java, line(s) 601,706,830,954,1032,1531,1556,2290
com/xunmeng/pinduoduo/timeline/service/TimelineServiceImpl.java, line(s) 218,325
com/xunmeng/pinduoduo/timeline/service/db.java, line(s) 143,243
com/xunmeng/pinduoduo/timeline/service/df.java, line(s) 72,139
com/xunmeng/pinduoduo/timeline/service/di.java, line(s) 27,44,59
com/xunmeng/pinduoduo/timeline/view/ExpandIconTextView.java, line(s) 36
com/xunmeng/pinduoduo/timeline/work/c.java, line(s) 360
com/xunmeng/pinduoduo/u/a.java, line(s) 69,79,184,189,29,39,164,169,89,99,194,199,49,59,174,179,9,19,159,204
com/xunmeng/pinduoduo/ui/activity/HomeActivity.java, line(s) 503
com/xunmeng/pinduoduo/ui/activity/MainFrameActivity.java, line(s) 411,481,613
com/xunmeng/pinduoduo/ui/activity/TransparentEntryActivity.java, line(s) 24
com/xunmeng/pinduoduo/ui/widget/TagSpan.java, line(s) 158
com/xunmeng/pinduoduo/ui/widget/helper/ItemTouchHelperExtension.java, line(s) 1484,1488,1499,1503
com/xunmeng/pinduoduo/ui_home_activity/widget/tab/HomeInit.java, line(s) 158,267,391
com/xunmeng/pinduoduo/ui_home_activity/widget/tab/b_1.java, line(s) 70
com/xunmeng/pinduoduo/user_agent/d.java, line(s) 70,93,116,137,168,186,204,222
com/xunmeng/pinduoduo/user_agent/e.java, line(s) 108
com/xunmeng/pinduoduo/user_agent/f.java, line(s) 156,131
com/xunmeng/pinduoduo/util/impr/TabBarViewTrackableManager.java, line(s) 32
com/xunmeng/pinduoduo/util/p.java, line(s) 42
com/xunmeng/pinduoduo/util_home_activity/HomeActivityUtil.java, line(s) 145,166
com/xunmeng/pinduoduo/util_home_activity/a.java, line(s) 39,55
com/xunmeng/pinduoduo/volantis/kenithelper/PDDKenitResultService.java, line(s) 16,18,22,28,39,44
com/xunmeng/pinduoduo/volantis/kenithelper/b.java, line(s) 44,73,85,29,55
com/xunmeng/pinduoduo/volantis/kenithelper/d.java, line(s) 28,37,50,63,23,30,33,39,42,45,46
com/xunmeng/pinduoduo/web/WebFragment.java, line(s) 973,1043
com/xunmeng/pinduoduo/web/e.java, line(s) 336
com/xunmeng/pinduoduo/web/j/q.java, line(s) 22,34
com/xunmeng/pinduoduo/web/k/a.java, line(s) 105
com/xunmeng/pinduoduo/web/meepo/extension/EmptyPageMonitorSubscriber.java, line(s) 105
com/xunmeng/pinduoduo/web/meepo/extension/PageRecordSubscriber.java, line(s) 182
com/xunmeng/pinduoduo/web/modules/JSLifecycleTracker.java, line(s) 267
com/xunmeng/pinduoduo/web/modules/WebScene.java, line(s) 314
com/xunmeng/pinduoduo/web/modules/e.java, line(s) 43
com/xunmeng/pinduoduo/web/modules/f.java, line(s) 40
com/xunmeng/pinduoduo/web/parallelrequesthtml/ParallelRequestHtmlUtil.java, line(s) 145,188
com/xunmeng/pinduoduo/web/parallelrequesthtml/a.java, line(s) 240
com/xunmeng/pinduoduo/web/parallelrequesthtml/d.java, line(s) 64,100
com/xunmeng/pinduoduo/web/prerender/PreRenderUtil.java, line(s) 215,545,112,133,333,372
com/xunmeng/pinduoduo/web/prerender/config/PreRenderConfigCenter.java, line(s) 274
com/xunmeng/pinduoduo/web/prerender/config/PreRenderTemplateControl.java, line(s) 238
com/xunmeng/pinduoduo/web/prerender/l.java, line(s) 234
com/xunmeng/pinduoduo/web/web_network_tool/b.java, line(s) 284,321,330,382,410
com/xunmeng/pinduoduo/web_util/d.java, line(s) 44
com/xunmeng/pinduoduo/widget/nested/c/a.java, line(s) 12,16
com/xunmeng/pinduoduo/xlog_wrapper/PlogInitTask.java, line(s) 272,306
com/xunmeng/pinduoduo/xlog_wrapper/XlogABConfigInitTask.java, line(s) 88
com/xunmeng/pinduoduo/xlog_wrapper/XlogPushHandler.java, line(s) 40
com/xunmeng/pinduoduo/xlog_wrapper/h.java, line(s) 43
com/xunmeng/router/AbsRouter.java, line(s) 210,157,235
com/xunmeng/router/MatcherRegistry.java, line(s) 59
com/xunmeng/router/RealRouter.java, line(s) 161,190,310,312,314,335,361,369,379,381,383,483,494,513,530,536,557,571,582,595,690,45,350,481,519,523,528,563,564,569,601,605,614,618,621,628,655,667,703,706
com/xunmeng/router/Router.java, line(s) 67,97,108,81
com/xunmeng/router/matcher/AbsExplicitMatcher.java, line(s) 23,33
com/xunmeng/router/util/RouterSdkConfig.java, line(s) 46,56
com/xunmeng/sargeras/XMVideoPlayer.java, line(s) 517,521,572,618,104,184,239,250,312,495,504,513,550,559,568,596,605,614
in/srain/cube/views/ptr/b/a.java, line(s) 15,22
meco/cookie/JNILog.java, line(s) 15,25,28,18,12,21
meco/cookie/a.java, line(s) 19
meco/core/a.java, line(s) 178,181,176,49,83,92,101,123,142,150,163
meco/core/b.java, line(s) 44,27,46,47,77,86
meco/core/component/DirMecoComponent.java, line(s) 41,71,74,97,130,156,185,32,37,43,95,123
meco/core/component/FlatMecoComponent.java, line(s) 47,48,38,42,53,69
meco/core/component/MecoComponent.java, line(s) 91,288,297,317,325,487,519,47,85,189,194,280,285,309,338,351,366,483,51,220,241,253,259,268,360,372,378,383,389,443
meco/core/component/MecoComponentConfig.java, line(s) 123,138,154,77,81,99,111,170,173
meco/core/d.java, line(s) 14,16,23,27,30,31,13
meco/core/dex/MecoBroadcastManager.java, line(s) 14,25
meco/core/dex/a.java, line(s) 636,648,154,180,208,218,228,238,248,639,722,746,152,170,193,196,202,212,222,232,307,408,454,462,465,546,572,585,749,148,190,330,412,470,684,700
meco/core/dex/d.java, line(s) 35,40
meco/core/fs/a.java, line(s) 87,147,168,77,83,183
meco/core/g.java, line(s) 13,16
meco/core/h.java, line(s) 74,439,484,518,537,583,633,672,712,768,821,955,970,999,1034,40,50,67,78,192,227,299,315,326,337,352,462,522,928,944,949,965,995,1032,1056,312,402,406,425,466,499,511,613,699,798,917
meco/core/pkg/MecoPackage.java, line(s) 55,89,30,34,38,61,70,74,81
meco/core/pkg/a.java, line(s) 46,15,21,25,32
meco/core/r.java, line(s) 7,12,17
meco/core/utils/MecoCoreUtil.java, line(s) 35,38,41,44,13
meco/core/utils/a.java, line(s) 51,24,40,60,56,34,42
meco/core/utils/b.java, line(s) 15
meco/core/utils/c.java, line(s) 13,30,33,43,46,49,56
meco/core/utils/f.java, line(s) 23,26,29,32,35,44,47
meco/core/utils/g.java, line(s) 67,74,65,38
meco/delegate/MecoReflectDelegate.java, line(s) 116,19,29,34,41,46,56,64,74,77,85,88,95,102,105,113,122
meco/logger/AndroidLogImpl.java, line(s) 10,20,27,34,41,51,58,65,72,82,89,96,103,113,120,127,134,144,151,158
meco/logger/MChromiumLog.java, line(s) 8,17,26,35,44,53,62,71,197,206,89,98,107,116,125,134,143,152,161,170,179,188
meco/logger/MecoShell.java, line(s) 16,29,42,63,76,89
meco/statistic/idkey/DummyReporter.java, line(s) 12,17
meco/statistic/idkey/IDKeyReport.java, line(s) 12,17,22,27
meco/statistic/idkey/impl/ChromiumVersionCoverageReport.java, line(s) 12
meco/statistic/kv/info/KVInfo.java, line(s) 116,126
meco/statistic/kv/info/MecoCoverInfo.java, line(s) 29
meco/util/HiddenApiBypassUtil.java, line(s) 27,44,69,49
meco/util/MecoRenderLongTaskManager.java, line(s) 18
meco/util/PathHelper.java, line(s) 26
meco/util/PreloadHelper.java, line(s) 25,44
meco/util/ResourceUtil.java, line(s) 23,17,19,21,31
meco/util/SoftInputHelper.java, line(s) 69,72,90,93,105,111,116,120,125,127,135
meco/util/SystemUAUtils.java, line(s) 41,58,16,18,24,45,52,65
meco/util/ViewRootImplHelper.java, line(s) 33,36,39,27,16,23,62
meco/webkit/JsDialogHelper.java, line(s) 111
meco/webkit/LegacyErrorStrings.java, line(s) 44
meco/webkit/WebView.java, line(s) 322,103,120,846,950,953,112,126,157,160,163,176,179,182,199,207,227,229,231,263,266,269,586
meco/webkit/WebViewDelegate.java, line(s) 64,264,266,268,279,281,283,285,37,50,79,92,105,118,131,144,157,170,187,200,221,233,296,300,304,308,316,326,328,249,251,253
meco/webkit/WebViewFactory.java, line(s) 29,112,123,155,26,90,120
mecox/a/a.java, line(s) 139,143,197,21,39,44,50,64,69,75,89,94,97,104,106,119,124,127,137,145,163,189,157,205
mecox/a/b.java, line(s) 71,24,30,37,44,49,52,55,61,68,77,81
mecox/c/a.java, line(s) 25,28,20
mecox/c/a/a.java, line(s) 13,18,23,29,35,41,46,52,58
mecox/c/a/c.java, line(s) 143,261,52,139,151,161,163,166,170,177,186,202,212,218,225,268,280,294,56,72,147,288,312,321,343,352,361,370
mecox/c/b.java, line(s) 163,173,307,310,313,329,332,335,34,46,58,71,151,101
mecox/provider/impl/InternalWebViewHelper.java, line(s) 18
mecox/provider/impl/a/a.java, line(s) 578,607,551,575
mecox/provider/impl/a/b.java, line(s) 294,297,300,359,362,365,375,378,381,407,207,216,222,252,261,272,317,451,460,491,500,559,613,632,641,650,709,718,806,880,899,913,932,1040,1200,1206,1297,1357,1519,1528,1537,1546,1555,1564,1813
mecox/webkit/WebView.java, line(s) 705
org/webrtc/EglRenderer.java, line(s) 261
org/webrtc/ThreadUtils.java, line(s) 30
org/webrtc/codecs/AndroidAudioHelper2.java, line(s) 23
org/webrtc/codecs/DefaultVideoDecoderFactory.java, line(s) 40
org/webrtc/codecs/DefaultVideoEncoderFactory.java, line(s) 21,34
org/webrtc/codecs/HardwareVideoEncoderFactory.java, line(s) 42,168,182,221,224,160
org/webrtc/codecs/MediaCodecVideoDecoderFactory.java, line(s) 50
org/webrtc/codecs/NewSurfaceTextureHelper.java, line(s) 71
org/webrtc/codecs/SurfaceTextureHelper.java, line(s) 69
org/webrtc/videoengine/Camera1Help.java, line(s) 62,130,138,144,50,104,107,111,118,136,142,207,232,72,120,197
org/webrtc/videoengine/Camera2Help.java, line(s) 107,114,118,91,111,138,148,217,228,319,372,378,385,651,105,146,241,275,288,297,311,333,345,348,351,361,416,621,633,654,664,671,212,452,460,492,551,590,75,205,363,403,631
org/webrtc/videoengine/RtcCameraManager.java, line(s) 187,201,220,223,83,130,139,153,162,167,172,178,282,317,330,346,361,57,64,68,80,97,112,117,127,137,144,268,277,288,305,311,321,357,253
org/webrtc/videoengine/VideoCaptureAndroid.java, line(s) 95,109,131,144,190,198,77,86,93,98,106,112,126,138,215,222,238,241
org/webrtc/videoengine/VideoCaptureDeviceInfoAndroid.java, line(s) 43,78,28,23,33,39,55,51
pcrash/k.java, line(s) 13,23,18,8
uk/co/senab/photoview/b/c.java, line(s) 8,13
uk/co/senab/photoview/d.java, line(s) 22
xmg/mobilebase/debugging_assistant_wrapper/DebuggingAssistantLoadFragment.java, line(s) 23,27,33,41,71
xmg/mobilebase/debugging_assistant_wrapper/a.java, line(s) 19,21,28,32,35
xmg/mobilebase/debugging_assistant_wrapper/h.java, line(s) 9
xmg/mobilebase/kenit/entry/DefaultApplicationLike.java, line(s) 12,17,22,27,32,37
xmg/mobilebase/kenit/lib/a/a.java, line(s) 127,144,142,221,132,153,218,232
xmg/mobilebase/kenit/lib/a/b.java, line(s) 61,66
xmg/mobilebase/kenit/lib/a/c.java, line(s) 32
xmg/mobilebase/kenit/lib/a/d.java, line(s) 128,132,136,140,153,157,160,165,173,178,182,187,191,201,208,212,215,260,264,268,272,277,281,284,288,54,65,96,122,194,235,226,229,232
xmg/mobilebase/kenit/lib/b/a.java, line(s) 97,107,120,157,162,167,172,184,175,180,185,188
xmg/mobilebase/kenit/lib/c/a.java, line(s) 76,78,97,112
xmg/mobilebase/kenit/lib/d/c.java, line(s) 49,21,47
xmg/mobilebase/kenit/lib/d/d.java, line(s) 108,191,34,44,63,74,77,86,90,97,102,120,124,181,186
xmg/mobilebase/kenit/lib/d/e.java, line(s) 60,120,254,266,382,416,42,58,240,270,581,82,160,285,297,307,327,335,345,352,360,365,376,388,400,405,410,422,427,571,576
xmg/mobilebase/kenit/lib/d/f.java, line(s) 239,42,181,184,246,392,29,45,54,57,65,96,112,140,160,227,261,270,277,289,298,303,308,320,324,355,385,395
xmg/mobilebase/kenit/lib/d/g.java, line(s) 28,34,40,50,66,72,83,99,109,113,117,126,131,44,91,96,123
xmg/mobilebase/kenit/lib/e/a.java, line(s) 33,42,56,59,99,102,15,20,29,35,38,44,47,50,52,67,73,83,89,95,105,112,118,132,154,123
xmg/mobilebase/kenit/lib/e/b.java, line(s) 24,16,23,32,38,46,54,60
xmg/mobilebase/kenit/lib/service/AbstractResultService.java, line(s) 19,24,46
xmg/mobilebase/kenit/lib/service/DefaultKenitResultService.java, line(s) 15,18,25,34
xmg/mobilebase/kenit/lib/service/KenitPatchService.java, line(s) 36,53,102,108,27,139,143,146,156,96
xmg/mobilebase/kenit/lib/util/a.java, line(s) 12,16,20,24
xmg/mobilebase/kenit/lib/util/b.java, line(s) 38,41
xmg/mobilebase/kenit/lib/util/c.java, line(s) 48,129,235,203,125,134,140,149,168,172,176,183,190,194,198,212,231
xmg/mobilebase/kenit/loader/AppInfoChangedBlocker.java, line(s) 80,21,71,75,77,25,65
xmg/mobilebase/kenit/loader/KenitArkHotLoader.java, line(s) 42,48,32,27
xmg/mobilebase/kenit/loader/KenitDexLoader.java, line(s) 233,269,282,88,110,117,163,178,197,217,222,228,240,255,158,207
xmg/mobilebase/kenit/loader/KenitDexOptimizer.java, line(s) 448,521,96,116,129,305,368,371,445,470,473,494,544,568,616,619,624,649,704,719,730,742,747,753,262,277,328,365,441,691,716,733,757
xmg/mobilebase/kenit/loader/KenitLoader.java, line(s) 24,138,330,65,70,76,82,88,109,116,155,161,168,179,186,204,223,230,234,236,257,262,281,294,304,308,315,323,333
xmg/mobilebase/kenit/loader/KenitMemClassLoader.java, line(s) 59,132,164
xmg/mobilebase/kenit/loader/KenitResourceLoader.java, line(s) 28,39,43,76,32,36
xmg/mobilebase/kenit/loader/KenitResourcePatcher.java, line(s) 43,54,50,144,37
xmg/mobilebase/kenit/loader/KenitUncaughtHandler.java, line(s) 25,27,32,44
xmg/mobilebase/kenit/loader/NewClassLoaderInjector.java, line(s) 21,62,72,98,65
xmg/mobilebase/kenit/loader/SystemClassLoaderAdder.java, line(s) 62,66,97,101,103,106,120,140,157,296,51,86,202
xmg/mobilebase/kenit/loader/hotplug/ComponentHotplug.java, line(s) 98,52,76
xmg/mobilebase/kenit/loader/hotplug/IncrementComponentManager.java, line(s) 429,50
xmg/mobilebase/kenit/loader/hotplug/handler/MHMessageHandler.java, line(s) 32,91,99,71,76,82
xmg/mobilebase/kenit/loader/hotplug/handler/PMSInterceptHandler.java, line(s) 53,56,103,106,24,74,37,69,87
xmg/mobilebase/kenit/loader/hotplug/interceptor/Interceptor.java, line(s) 24
xmg/mobilebase/kenit/loader/hotplug/interceptor/KenitHackInstrumentation.java, line(s) 51,46,105
xmg/mobilebase/kenit/loader/hotplug/interceptor/ServiceBinderInterceptor.java, line(s) 144
xmg/mobilebase/kenit/loader/shareutil/ShareFileLockHelper.java, line(s) 33,38
xmg/mobilebase/kenit/loader/shareutil/ShareIntentUtil.java, line(s) 17,29,41,53,65,129
xmg/mobilebase/kenit/loader/shareutil/ShareKenitBackGroundManager.java, line(s) 48,62
xmg/mobilebase/kenit/loader/shareutil/ShareKenitInternals.java, line(s) 277,494,497,500,60,83,101,147,351,716,759,780,390,440,442,444,446,448,450,619,656,385,396,661
xmg/mobilebase/kenit/loader/shareutil/ShareKenitLog.java, line(s) 122
xmg/mobilebase/kenit/loader/shareutil/ShareLoadReport.java, line(s) 43,64,167,181,250,272,280,289,295,301,361,371,381,417,427
xmg/mobilebase/kenit/loader/shareutil/SharePatchFileUtil.java, line(s) 44,67,126,181,435,446,457,493,31,33,42,60,88,178,216,226,269
xmg/mobilebase/kenit/loader/shareutil/SharePatchInfo.java, line(s) 43,319,328,102,190,200,207,230,264,279,288
xmg/mobilebase/kenit/loader/shareutil/ShareReflectUtil.java, line(s) 54
xmg/mobilebase/kenit/loader/shareutil/ShareSecurityCheck.java, line(s) 24,91,101,114
xmg/mobilebase/lego/a/j.java, line(s) 31,154
xmg/mobilebase/lego/c_m2/VMState.java, line(s) 563,566,496
xmg/mobilebase/lego/c_m2/a.java, line(s) 191,332,165,181,305,322
xmg/mobilebase/lego/c_m2/a/g.java, line(s) 55,84
xmg/mobilebase/lego/c_m2/a/i.java, line(s) 75,114,261
xmg/mobilebase/lego/c_m2/a/k.java, line(s) 189,97
xmg/mobilebase/lego/c_m2/a/n.java, line(s) 194,471
xmg/mobilebase/lego/c_m2/a/u.java, line(s) 205
xmg/mobilebase/lego/c_m2/a/v.java, line(s) 73,131,291,446
xmg/mobilebase/lego/c_m2/b/a.java, line(s) 65
xmg/mobilebase/lego/c_m2/bridge/OpCaller.java, line(s) 63,75,86,103,131,849,926,934,964,998,1031,1034,1040,1048,1068,1082,1096,1111,1119,1160,1162,1169
xmg/mobilebase/lego/c_m2/bridge/VmBinder.java, line(s) 26
xmg/mobilebase/lego/c_m2/utils/a.java, line(s) 24,49
xmg/mobilebase/lego/c_m2/utils/b.java, line(s) 67,985
xmg/mobilebase/lego/c_m2/utils/g.java, line(s) 12,36
xmg/mobilebase/utils/dokodoor/a/a.java, line(s) 8,9

信息此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改

CODE

此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
com/xunmeng/pinduoduo/adapter_sdk/utils/BotClipboardApi.java, line(s) 29,5
com/xunmeng/pinduoduo/clipboard/c/b.java, line(s) 34,62,3
com/xunmeng/pinduoduo/clipboard/d/f.java, line(s) 26,54,54,84,315,315,5
com/xunmeng/pinduoduo/clipboard/d/i.java, line(s) 6,8,17,3
com/xunmeng/pinduoduo/clipboard/d/k.java, line(s) 17,29,100,4
com/xunmeng/pinduoduo/clipboard/d/m.java, line(s) 9,4
com/xunmeng/pinduoduo/clipboard/e/a.java, line(s) 56,5
com/xunmeng/pinduoduo/clipboard/e/b.java, line(s) 11,4
com/xunmeng/pinduoduo/sensitive_api/f.java, line(s) 48,5

信息此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它

CODE

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
com/xunmeng/pinduoduo/adapter_sdk/utils/BotClipboardApi.java, line(s) 5,33
com/xunmeng/pinduoduo/sensitive_api/f.java, line(s) 5,35

安全此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击

CODE

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
com/xunmeng/basiccomponent/pnet/jni/struct/PnetPlatform.java, line(s) 203,202,201,201

安全此应用程序可能具有Root检测功能

CODE

此应用程序可能具有Root检测功能
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
com/aimi/android/common/d/c.java, line(s) 31,209,216,216,216,216,216,216
com/xunmeng/pinduoduo/apm/common/utils/c.java, line(s) 101,225,232,232,232,232,232,232
com/xunmeng/pinduoduo/secure/e.java, line(s) 131
pcrash/m.java, line(s) 15,15,15,15,15

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (t13img.yangkeduo.com) 通信。

DOMAINS

{'ip': '101.226.46.29', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (chat-img.pddugc.com) 通信。

DOMAINS

{'ip': '101.226.46.29', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (commimg.pddpic.com) 通信。

DOMAINS

{'ip': '58.222.37.105', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '苏州', 'latitude': '31.311365', 'longitude': '120.617691'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (hydra.alibaba.com) 通信。

DOMAINS

{'ip': '58.222.37.105', 'country_short': 'CN', 'country_long': '中国', 'region': '浙江', 'city': '杭州', 'latitude': '30.293650', 'longitude': '120.161583'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (th.pinduoduo.com) 通信。

DOMAINS

{'ip': '58.222.37.105', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (cfg.pddpic.com) 通信。

DOMAINS

{'ip': '101.226.46.29', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (funimg.pddpic.com) 通信。

DOMAINS

{'ip': '58.222.37.105', 'country_short': 'CN', 'country_long': '中国', 'region': '江西', 'city': '南昌', 'latitude': '28.683331', 'longitude': '115.883331'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (apm-a.pinduoduo.com) 通信。

DOMAINS

{'ip': '58.222.37.105', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (img.pddpic.com) 通信。

DOMAINS

{'ip': '58.222.37.105', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '盐城', 'latitude': '33.385559', 'longitude': '120.125282'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (cdl.moremorepin.com) 通信。

DOMAINS

{'ip': '58.218.210.239', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '徐州', 'latitude': '34.266666', 'longitude': '117.166664'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (ta.pinduoduo.com) 通信。

DOMAINS

{'ip': '101.226.46.29', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (tp.pinduoduo.com) 通信。

DOMAINS

{'ip': '101.226.46.29', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (img-test.pddpic.com) 通信。

DOMAINS

{'ip': '101.226.46.29', 'country_short': 'CN', 'country_long': '中国', 'region': '-Balkarskaya Respublika\x08Kabarole\x0bKaberamaido\x05Kabul\x06Kachin\x07Kadiogo\x06Kaduna\x04Kaeb\x08Kaffrine\x0fKafr ash Shaykh\x06Kagawa\x06K', 'city': '徐州', 'latitude': '34.266666', 'longitude': '117.166664'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (cdn.pinduoduo.com) 通信。

DOMAINS

{'ip': '101.226.46.29', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (pfile.pddpic.com) 通信。

DOMAINS

{'ip': '101.226.46.29', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (pmmtk-a.pinduoduo.com) 通信。

DOMAINS

{'ip': '101.226.46.29', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (h5.m.taobao.com) 通信。

DOMAINS

{'ip': '222.186.18.191', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '镇江', 'latitude': '32.209366', 'longitude': '119.434372'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (apiv3.yangkeduo.com) 通信。

DOMAINS

{'ip': '111.231.186.221', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (api-staging.yangkeduo.com) 通信。

DOMAINS

{'ip': '212.129.232.162', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (ws.yangkeduo.com) 通信。

DOMAINS

{'ip': '118.89.127.62', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (apm.hutaojie.com) 通信。

DOMAINS

{'ip': '212.64.116.43', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (api-ipv6.pinduoduo.com) 通信。

DOMAINS

{'ip': '121.5.87.88', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (mobile.yangkeduo.com) 通信。

DOMAINS

{'ip': '121.5.87.88', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (meta.yangkeduo.com) 通信。

DOMAINS

{'ip': '121.5.87.88', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (app.yangkeduo.com) 通信。

DOMAINS

{'ip': '121.5.85.26', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (file.hutaojie.com) 通信。

DOMAINS

{'ip': '42.192.253.100', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (m-staging.yangkeduo.com) 通信。

DOMAINS

{'ip': '118.89.126.163', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (t16img.yangkeduo.com) 通信。

DOMAINS

{'ip': '121.5.85.26', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '徐州', 'latitude': '34.266666', 'longitude': '117.166664'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (api.yangkeduo.com) 通信。

DOMAINS

{'ip': '121.5.85.26', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (apm.pinduoduo.com) 通信。

DOMAINS

{'ip': '101.226.153.253', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (im-emoticon.pinduoduo.com) 通信。

DOMAINS

{'ip': '58.222.37.105', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (a.tracking.yangkeduo.com) 通信。

DOMAINS

{'ip': '111.231.149.181', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (cdl.pddpic.com) 通信。

DOMAINS

{'ip': '222.186.162.56', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '镇江', 'latitude': '32.209366', 'longitude': '119.434372'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (dl-test.pddpic.com) 通信。

DOMAINS

{'ip': '58.218.210.239', 'country_short': 'CN', 'country_long': '中国', 'region': '海南', 'city': '海口', 'latitude': '20.045830', 'longitude': '110.341667'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (promotion.pddpic.com) 通信。

DOMAINS

{'ip': '124.225.195.95', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '徐州', 'latitude': '34.266666', 'longitude': '117.166664'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (api.pinduoduo.com) 通信。

DOMAINS

{'ip': '124.225.195.95', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (cdn.yangkeduo.com) 通信。

DOMAINS

{'ip': '58.218.210.239', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '徐州', 'latitude': '34.266666', 'longitude': '117.166664'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (api-ipv6.yangkeduo.com) 通信。

DOMAINS

{'ip': '111.231.186.137', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (ws.pinduoduo.com) 通信。

DOMAINS

{'ip': '58.218.210.239', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (apiv4.yangkeduo.com) 通信。

DOMAINS

{'ip': '111.231.186.221', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (pinduoduoimg.yangkeduo.com) 通信。

DOMAINS

{'ip': '218.92.135.48', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '盐城', 'latitude': '33.385559', 'longitude': '120.125282'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (t00img.yangkeduo.com) 通信。

DOMAINS

{'ip': '58.222.37.105', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '盐城', 'latitude': '33.385559', 'longitude': '120.125282'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (ccdn.yangkeduo.com) 通信。

DOMAINS

{'ip': '58.222.37.105', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (ccdn.pddpic.com) 通信。

DOMAINS

{'ip': '58.218.210.239', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '徐州', 'latitude': '34.266666', 'longitude': '117.166664'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (meta.pinduoduo.com) 通信。

DOMAINS

{'ip': '121.5.85.56', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (panduoduo.yangkeduo.com) 通信。

DOMAINS

{'ip': '175.24.137.218', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (apiv2.yangkeduo.com) 通信。

DOMAINS

{'ip': '111.231.186.221', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (file.pinduoduo.com) 通信。

DOMAINS

{'ip': '121.5.80.117', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (th-sandbox.hutaojie.com) 通信。

DOMAINS

{'ip': '111.231.186.221', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (images.pinduoduo.com) 通信。

DOMAINS

{'ip': '121.5.85.56', 'country_short': 'CN', 'country_long': '中国', 'region': '山东', 'city': '济南', 'latitude': '36.668331', 'longitude': '116.997223'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (m.pinduoduo.net) 通信。

DOMAINS

{'ip': '121.5.85.56', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (apiv2.hutaojie.com) 通信。

DOMAINS

{'ip': '42.192.253.100', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (m.hutaojie.com) 通信。

DOMAINS

{'ip': '129.211.153.65', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

安全分析报告： 拼多多 v7.13.0

安全分数

安全分数 30/100

风险评级

等级

严重性分布 (%)

隐私风险

用户/设备跟踪器

调研结果

高危 基本配置不安全地配置为允许到所有域的明文流量。

高危 Activity (com.xunmeng.pinduoduo.chat.chatBiz.voiceChat.view.VoiceCallActivity) 的启动模式不是standard模式

高危 Activity (com.aimi.android.common.push.oppo.PermissionForwardActivity) 的启动模式不是standard模式

高危 Activity (com.xiaomi.mipush.sdk.NotificationClickedActivity) 的启动模式不是standard模式

高危 Activity (com.xunmeng.pinduoduo.safemode.SafeModeActivity) 的启动模式不是standard模式

高危 Activity (com.xunmeng.pinduoduo.share.web.subscribe.activity.SubscribeForwardActivity) 的启动模式不是standard模式

高危 Activity (com.xunmeng.pinduoduo.ui.activity.MainFrameActivity) 的启动模式不是standard模式

高危 Activity (com.tencent.tauth.AuthActivity) 的启动模式不是standard模式

高危 Activity (com.xunmeng.pinduoduo.auth_pay.wxpay.WXPayActivity) 的启动模式不是standard模式

高危 Activity (com.xunmeng.pinduoduo.app_widget.desk_shortcut.activities.DsCkActivity) 的启动模式不是standard模式

高危 Activity (com.xunmeng.pinduoduo.ui.activity.MainFrameActivityAssist) 的启动模式不是standard模式

高危 Activity (com.xunmeng.pinduoduo.ui.activity.MainFrameActivityLauncherAssist) 的启动模式不是standard模式

高危 Activity (com.xunmeng.pinduoduo.ui.activity.PandaHmActivity) 的启动模式不是standard模式

高危 Activity (com.xunmeng.pinduoduo.market_ad_forward.TransferActivity) 的启动模式不是standard模式

高危 Activity (com.xunmeng.pinduoduo.market_ad_forward.TransferDeskActivity) 的启动模式不是standard模式

高危 Activity (com.xunmeng.pinduoduo.market_ad_forward.CSDispatchActivity) 的启动模式不是standard模式

高危 Activity (com.xunmeng.pinduoduo.market_ad_forward.CSDispatchTitanActivity) 的启动模式不是standard模式

高危 Activity (com.xunmeng.pinduoduo.multitask.SingleTaskActivity) 的启动模式不是standard模式

高危 Activity (com.xunmeng.pinduoduo.apm.crash.activity.EmptyActivity) 的启动模式不是standard模式

高危 Activity (com.xunmeng.pinduoduo.opensdk.EntryActivity) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_00) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_01) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_02) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_03) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_04) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_05) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_06) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_07) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_08) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_09) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_00_T) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_01_T) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SGTKStub_02_T) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_00) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_01) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_02) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_03) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_04) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_05) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_06) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_07) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_08) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_09) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_00_T) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_01_T) 的启动模式不是standard模式

高危 Activity (xmg.mobilebase.kenit.loader.hotplug.ActivityStubs$SIStub_02_T) 的启动模式不是standard模式

高危 Activity (com.xunmeng.pinduoduo.wallet.common.externaljump.ExternalJumpActivity) 的启动模式不是standard模式

高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。

高危 使用弱加密算法

高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击

高危 应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式，因为它对相同的明文块[UNK]产生相同的密文

高危 该文件是World Writable。任何应用程序都可以写入文件

中危 基本配置配置为信任系统证书。

中危 Activity设置了TaskAffinity属性

中危 Activity (com.xunmeng.pinduoduo.wxapi.WXEntryActivity) 未被保护。

中危 Activity (com.xunmeng.pinduoduo.wxapi.WXPayEntryActivity) 未被保护。

中危 Activity设置了TaskAffinity属性

中危 Activity (com.xunmeng.pinduoduo.finshellapi.FinShellApiActivity) 未被保护。

中危 Broadcast Receiver (com.aimi.android.common.push.huawei.HwPushReceiver) 未被保护。

中危 Broadcast Receiver (com.huawei.hms.support.api.push.PushEventReceiver) 未被保护。

中危 Service (com.aimi.android.common.push.oppo.OppoPushCompatibleService) 受权限保护, 但是应该检查权限的保护级别。

中危 Service (com.aimi.android.common.push.oppo.OppoPushService) 受权限保护, 但是应该检查权限的保护级别。

中危 Service (com.vivo.push.sdk.service.CommandClientService) 受权限保护, 但是应该检查权限的保护级别。

中危 Service (com.xiaomi.mipush.sdk.PushMessageHandler) 未被保护。

中危 Broadcast Receiver (com.aimi.android.common.push.xiaomi.MiPushReceiver) 未被保护。

中危 Broadcast Receiver (com.aimi.android.common.push.xiaomi.proxy.NetworkStatusReceiver) 未被保护。

中危 Activity (com.xiaomi.mipush.sdk.NotificationClickedActivity) 未被保护。

中危 Activity设置了TaskAffinity属性

中危 Activity设置了TaskAffinity属性

中危 Activity (com.xunmeng.pinduoduo.ui.activity.TransparentEntryActivity) 未被保护。

中危 Activity (com.tencent.tauth.AuthActivity) 未被保护。

安全分析报告：拼多多 v7.13.0

高危基本配置不安全地配置为允许到所有域的明文流量。

高危应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。

高危使用弱加密算法

高危如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击

高危应用程序在加密算法中使用ECB模式。ECB模式是已知的弱模式，因为它对相同的明文块[UNK]产生相同的密文

高危该文件是World Writable。任何应用程序都可以写入文件

中危基本配置配置为信任系统证书。

中危文件可能包含硬编码的敏感信息，如用户名、密码、密钥等

中危应用程序使用不安全的随机数生成器

中危此应用程序可能会请求root（超级用户）权限

中危应用程序创建临时文件。敏感信息永远不应该被写进临时文件

中危应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库

中危应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据

中危不安全的Web视图实现。可能存在WebView任意代码执行漏洞

中危应用程序包含隐私跟踪程序

中危此应用可能包含硬编码机密信息

信息应用程序记录日志信息,不得记录敏感信息

信息此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改

信息此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它

安全此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击

安全此应用程序可能具有Root检测功能

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (t13img.yangkeduo.com) 通信。

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (chat-img.pddugc.com) 通信。

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (commimg.pddpic.com) 通信。

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (hydra.alibaba.com) 通信。

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (th.pinduoduo.com) 通信。

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (cfg.pddpic.com) 通信。

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (funimg.pddpic.com) 通信。

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (apm-a.pinduoduo.com) 通信。

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (img.pddpic.com) 通信。

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (cdl.moremorepin.com) 通信。

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (ta.pinduoduo.com) 通信。

关注应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (tp.pinduoduo.com) 通信。