安全分析报告: 乡村振兴 v1.11.2101301

安全分数


安全分数 39/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

4

用户/设备跟踪器


调研结果

高危 7
中危 25
信息 3
安全 0
关注 6

高危 App 链接 assetlinks.json 文件未找到

[android:name=org.telegram.ui.LaunchActivity][android:host=http://ichat.im]
App Link 资产验证 URL (http://ichat.im/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:None)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。

高危 App 链接 assetlinks.json 文件未找到

[android:name=org.telegram.ui.LaunchActivity][android:host=https://ichat.im]
App Link 资产验证 URL (https://ichat.im/.well-known/assetlinks.json) 未找到或配置不正确。(状态代码:None)。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确,则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击,泄露 URI 中的敏感数据,例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android:autoVerify=“true”] 启用验证来验证 App Link 网域。

高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView,那么这个应用程序可能会遭受跨站脚本攻击

如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView,那么这个应用程序可能会遭受跨站脚本攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7

Files:
org/telegram/ui/ArticleViewer.java, line(s) 8137,65,66
org/telegram/ui/Components/EmbedBottomSheet.java, line(s) 732,737,34,35
org/telegram/ui/Components/PhotoViewerWebView.java, line(s) 644,659,18,19

高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。

应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
org/telegram/messenger/Utilities.java, line(s) 480,512

高危 已启用远程WebView调试

已启用远程WebView调试
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing

Files:
org/telegram/messenger/SharedConfig.java, line(s) 424,11

高危 该文件是World Readable。任何应用程序都可以读取文件

该文件是World Readable。任何应用程序都可以读取文件
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2

Files:
org/telegram/messenger/SharedConfig.java, line(s) 1277

中危 应用程序已启用明文网络流量

[android:usesCleartextTraffic=true]
应用程序打算使用明文网络流量,例如明文HTTP,FTP协议,DownloadManager和MediaPlayer。针对API级别27或更低的应用程序,默认值为“true”。针对API级别28或更高的应用程序,默认值为“false”。避免使用明文流量的主要原因是缺乏机密性,真实性和防篡改保护;网络攻击者可以窃听传输的数据,并且可以在不被检测到的情况下修改它。

中危 Activity-Alias (org.telegram.ui.CallsActivity) 受权限保护, 但是应该检查权限的保护级别。

Permission: android.permission.CALL_PHONE [android:exported=true]
发现一个 Activity-Alias被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Activity (org.telegram.messenger.OpenChatReceiver) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Activity设置了TaskAffinity属性

(org.telegram.ui.VoIPPermissionActivity)
如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名

中危 Activity设置了TaskAffinity属性

(org.telegram.ui.VoIPFeedbackActivity)
如果设置了 taskAffinity,其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息,请始终使用默认设置,将 affinity 保持为包名

中危 Activity (org.telegram.messenger.GoogleVoiceClientActivity) 未被保护。

[android:exported=true]
发现 Activity与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (org.telegram.messenger.SmsReceiver) 未被保护。

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.MusicPlayerService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.MusicBrowserService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (org.telegram.messenger.RefererReceiver) 受权限保护, 但是应该检查权限的保护级别。

Permission: android.permission.INSTALL_PACKAGES [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Content Provider (org.telegram.messenger.voip.CallNotificationSoundProvider) 未被保护。

[android:exported=true]
发现 Content Provider与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (org.telegram.messenger.GcmPushListenerService) 未被保护。

[android:exported=true]
发现 Service与设备上的其他应用程序共享,因此可被设备上的任何其他应用程序访问。

中危 Service (androidx.sharetarget.ChooserTargetServiceCompat) 受权限保护, 但是应该检查权限的保护级别。

Permission: android.permission.BIND_CHOOSER_TARGET_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。

Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (com.google.android.gms.auth.api.signin.RevocationBoundService) 受权限保护, 但是应该检查权限的保护级别。

Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序,因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此,应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险,一个恶意应用程序可以请求并获得这个权限,并与该组件交互。如果它被设置为签名,只有使用相同证书签名的应用程序才能获得这个权限。

中危 文件可能包含硬编码的敏感信息,如用户名、密码、密钥等

文件可能包含硬编码的敏感信息,如用户名、密码、密钥等
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
org/telegram/messenger/BuildVars.java, line(s) 213
org/telegram/messenger/ImageLoader.java, line(s) 4539
org/telegram/messenger/ImageReceiver.java, line(s) 556
org/telegram/messenger/MediaDataController.java, line(s) 252,258,257
org/telegram/messenger/PushListenerController.java, line(s) 388
org/telegram/messenger/voip/Instance.java, line(s) 229,201,211
org/telegram/ui/ActionBar/AlertDialog.java, line(s) 196
org/telegram/ui/ActionBar/BottomSheet.java, line(s) 1155,1173
org/telegram/ui/Adapters/MentionsAdapter.java, line(s) 722
org/telegram/ui/ArticleViewer.java, line(s) 3989
org/telegram/ui/Cells/HintDialogCell.java, line(s) 50
org/telegram/ui/Cells/TextInfoPrivacyCell.java, line(s) 50
org/telegram/ui/Charts/data/ChartData.java, line(s) 82
org/telegram/ui/ChatEditTypeActivity.java, line(s) 147
org/telegram/ui/Components/BotWebViewContainer.java, line(s) 1714
org/telegram/ui/Components/CheckBoxBase.java, line(s) 50,51,49
org/telegram/ui/Components/ContextProgressView.java, line(s) 34,37,40,43,35,38,41,44
org/telegram/ui/Components/CounterView.java, line(s) 91,92
org/telegram/ui/Components/FilterTabsView.java, line(s) 939,936,935,938,937
org/telegram/ui/Components/Premium/PremiumAppIconsPreviewView.java, line(s) 134
org/telegram/ui/Components/Premium/StarParticlesView.java, line(s) 147
org/telegram/ui/Components/Premium/VideoScreenPreview.java, line(s) 125,140
org/telegram/ui/Components/PullForegroundDrawable.java, line(s) 66,64,65
org/telegram/ui/Components/ScrollSlidingTextTabStrip.java, line(s) 90,89,92,91
org/telegram/ui/Components/SearchCounterView.java, line(s) 52
org/telegram/ui/Components/SnowflakesEffect.java, line(s) 22
org/telegram/ui/Components/StickersAlert.java, line(s) 1144
org/telegram/ui/Components/Switch.java, line(s) 79,80,81,82
org/telegram/ui/Components/ViewPagerFixed.java, line(s) 859,855,856,858,857
org/telegram/ui/DataAutoDownloadActivity.java, line(s) 81,96,89
org/telegram/ui/PhotoPickerActivity.java, line(s) 664,666,665,661,662,660
org/telegram/ui/PremiumPreviewFragment.java, line(s) 1671

中危 应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据

应用程序可以读取/写入外部存储器,任何应用程序都可以读取写入外部存储器的数据
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
com/baidu/vi/VDeviceAPI.java, line(s) 159,168
com/github/gzuliyujiang/oaid/DeviceID.java, line(s) 265,266
org/telegram/messenger/AndroidUtilities.java, line(s) 2747,1878,1902,1910,2632,2633,2658
org/telegram/messenger/EmuDetector.java, line(s) 255
org/telegram/messenger/FileLog.java, line(s) 149,186,205,400
org/telegram/messenger/FilesMigrationService.java, line(s) 102,86,207
org/telegram/messenger/ImageLoader.java, line(s) 3159,3200,3126,3127
org/telegram/messenger/MediaController.java, line(s) 4508,4510,4975,4979,4984,4986,5839
org/telegram/messenger/SharedConfig.java, line(s) 693,1126
org/telegram/messenger/voip/VoIPController.java, line(s) 243
org/telegram/ui/Components/ChatAttachAlertDocumentLayout.java, line(s) 1650,1690,1297,1498,1498,1498,1501,1586,1587,1599
org/telegram/ui/Components/voip/VoIPHelper.java, line(s) 786,820
org/telegram/ui/ProfileActivity.java, line(s) 9536
org/telegram/ui/QrActivity.java, line(s) 1782,1726
org/telegram/ui/newlogin/LoginBaseActivity.java, line(s) 1824

中危 MD5是已知存在哈希冲突的弱哈希

MD5是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
org/telegram/messenger/FileUploadOperation.java, line(s) 444
org/telegram/messenger/MessagesController.java, line(s) 5864
org/telegram/messenger/Utilities.java, line(s) 441

中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
org/telegram/ui/ArticleViewer.java, line(s) 8023,8019
org/telegram/ui/Components/BotWebViewContainer.java, line(s) 345,311
org/telegram/ui/Components/EmbedBottomSheet.java, line(s) 712,258
org/telegram/ui/Components/PhotoViewerWebView.java, line(s) 611,210
org/telegram/ui/Components/WebPlayerView.java, line(s) 1571,1578
org/telegram/ui/PaymentFormActivity.java, line(s) 1397,1393,2556
org/telegram/ui/WalletListActivity.java, line(s) 120,113
org/telegram/ui/WebviewActivity.java, line(s) 227,219

中危 应用程序使用不安全的随机数生成器

应用程序使用不安全的随机数生成器
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/carrotsearch/randomizedtesting/Xoroshiro128PlusRandom.java, line(s) 3
j$/util/concurrent/ThreadLocalRandom.java, line(s) 11
org/telegram/messenger/Utilities.java, line(s) 17
org/telegram/ui/Components/AudioVisualizerDrawable.java, line(s) 7
org/telegram/ui/Components/AvatarsDarawable.java, line(s) 17
org/telegram/ui/Components/BlobDrawable.java, line(s) 8
org/telegram/ui/Components/CircleBezierDrawable.java, line(s) 8
org/telegram/ui/Components/FlickerLoadingView.java, line(s) 13
org/telegram/ui/Components/GroupCallPipButton.java, line(s) 20
org/telegram/ui/Components/LineBlobDrawable.java, line(s) 6
org/telegram/ui/Components/Reactions/ReactionsEffectOverlay.java, line(s) 15
org/telegram/ui/Components/SharedMediaFastScrollTooltip.java, line(s) 17
org/telegram/ui/EmojiAnimationsOverlay.java, line(s) 15

中危 SHA-1是已知存在哈希冲突的弱哈希

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/baidu/sec/privacy/d/d.java, line(s) 228
com/github/gzuliyujiang/oaid/impl/OppoImpl.java, line(s) 74
org/telegram/messenger/Utilities.java, line(s) 296,310
org/telegram/ui/PassportActivity.java, line(s) 3135

中危 IP地址泄露

IP地址泄露


Files:
org/telegram/messenger/EmuDetector.java, line(s) 21
org/telegram/tgnet/ConnectionsManager.java, line(s) 208,546,205

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
org/telegram/ui/Components/Paint/Slice.java, line(s) 22

中危 应用程序包含隐私跟踪程序

此应用程序有多个4隐私跟踪程序。跟踪器可以跟踪设备或用户,是终端用户的隐私问题。

中危 此应用可能包含硬编码机密信息

从应用程序中识别出以下机密确保这些不是机密或私人信息
谷歌地图的=> "com.google.android.maps.v2.API_KEY" : "AIzaSyBm2l9BN4WaUXsbHIWnfAAUz5QjuKdUVrw"
"PasscodePassword" : "Password"
"NotificationHiddenChatUserName" : "Benutzer"
"google_api_key" : "AIzaSyBm2l9BN4WaUXsbHIWnfAAUz5QjuKdUVrw"
"PasscodePassword" : "Senha"
"PassportAuthorize" : "AUTORISIEREN"
"UseProxyPassword" : "Senha"
"UseProxyUsername" : "Benutzername"
"TypePrivate" : "Pribadi"
"UseProxySecret" : "Rahsia"
"google_crash_reporting_api_key" : "AIzaSyBm2l9BN4WaUXsbHIWnfAAUz5QjuKdUVrw"
"UseProxyUsername" : "Username"
"UseProxySecret" : "Rahasia"
"Username" : "Benutzername"
"PasscodePassword" : "Passwort"
"TypePrivate" : "Privat"
"LoginPassword" : "Senha"
"AuthAnotherWebClientUrl" : "https://web.%1$s.net/"
"TypePrivateGroup" : "Peribadi"
"TypePrivateGroup" : "Private"
"UseProxyPassword" : "Passwort"
"LoginPassword" : "Passwort"
"TypePrivateGroup" : "Privat"
"LoginPassword" : "Password"
"UseProxySecret" : "Geheimnis"
"TypePrivateGroup" : "Privado"
"TypePrivate" : "Peribadi"
"UseProxyPassword" : "Password"
"PassportAuthorize" : "AUTORISER"
"com.google.firebase.crashlytics.mapping_file_id" : "8010f61abac343509432cce7c8f1e449"
"PassportAuthorize" : "AUTORIZAR"
"PassportAuthorize" : "MENYAHKAN"
"UseProxySecret" : "Segredo"
"PassportAuthorize" : "OTORIZASI"
"NotificationHiddenChatUserName" : "User"
"logingPwds" : "Anmeldepasswort"
"PasscodePassword" : "Sandi"
"UseProxySecret" : "Secret"
"UseProxySecret" : "Secreto"
"NotificationHiddenChatUserName" : "Pengguna"
"NotificationHiddenChatUserName" : "Usuario"
"TypePrivate" : "Privado"
"PassportAuthorize" : "AUTHORIZE"
"TypePrivateGroup" : "Pribadi"
"Username" : "Username"
"NotificationHiddenChatUserName" : "Utilisateur"
"TypePrivate" : "Private"
"AuthAnotherClientDownloadClientUrl" : "https://desktop.%1$s.net/"
AIzaSyBm2l9BN4WaUXsbHIWnfAAUz5QjuKdUVrw
bb392ec0-8d4d-11e0-a896-0002a5d5c51b
014b35b6184100b085b0d0572f9b5103
4350376EF13389EE4350376EF13389EE
A2B55680-6F43-11E0-9A3F-0002A5D5C51B
ak=i4tYvpMqwtevgg85MS4Ms76MKP9hzPhx
ABVGDE2JZIQKLMNOPRSTUFHC34WXY9678
0000016742C00BDA259000000168CE0F13200000016588840DCE7118A0002FBF1C31C3275D78
c06c8400-8e06-11e0-9cb6-0002a5d5c51b
9A04F079-9840-4286-AB92-E65BE0885F95
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

信息 应用程序记录日志信息,不得记录敏感信息

应用程序记录日志信息,不得记录敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
com/coremedia/iso/boxes/sampleentry/AudioSampleEntry.java, line(s) 196
com/github/gzuliyujiang/oaid/OAIDLog.java, line(s) 21
org/dom4j/DocumentFactory.java, line(s) 195
org/dom4j/bean/BeanDocumentFactory.java, line(s) 57
org/dom4j/datatype/DatatypeDocumentFactory.java, line(s) 67,68,82,83
org/dom4j/datatype/SchemaParser.java, line(s) 90,91,205
org/dom4j/dom/DOMNodeHelper.java, line(s) 334
org/dom4j/io/DOMReader.java, line(s) 70
org/dom4j/io/DOMWriter.java, line(s) 190,191,195
org/dom4j/io/SAXHelper.java, line(s) 40,41,42,71,72
org/dom4j/rule/RuleManager.java, line(s) 56
org/dom4j/swing/XMLTableColumnDefinition.java, line(s) 117
org/dom4j/swing/XMLTableDefinition.java, line(s) 170
org/dom4j/swing/XMLTableModel.java, line(s) 50,87
org/dom4j/tree/NamespaceStack.java, line(s) 191
org/telegram/PhoneFormat/PhoneFormat.java, line(s) 112,117,138,145,155,163,213,234
org/telegram/SQLite/SQLiteCursor.java, line(s) 98,103
org/telegram/SQLite/SQLiteDatabase.java, line(s) 60,77
org/telegram/SQLite/SQLitePreparedStatement.java, line(s) 104,112
org/telegram/messenger/AndroidUtilities.java, line(s) 1747,2528,2638,2645,350,407,490,576,614,829,863,1081,1112,1143,1480,1489,1645,1709,1739,1795,1855,1912,1937,1946,2031,2035,2187,2203,2214,2265,2277,2374,2496,2511,2600,2622,2693,2749,2841,3004,3016,3060,4199,4217,4383,4393,4401,4428,4444,4560
org/telegram/messenger/AnimatedFileDrawableStream.java, line(s) 84
org/telegram/messenger/ApplicationLoader.java, line(s) 181,204,233,234,243,257,355,537,137,286,365,405,422,436,460,505,529
org/telegram/messenger/BillingController.java, line(s) 229,309,103
org/telegram/messenger/ChatObject.java, line(s) 204,212,262,270,446,825,837,858,866,998,1007,1020,1030,1115,1152,1169,1195,1202,1220,1231,1269,1284,1296,1353,1366,1404
org/telegram/messenger/ChatThemeController.java, line(s) 52,163,315,347
org/telegram/messenger/ChatsRemoteViewsFactory.java, line(s) 192,343
org/telegram/messenger/ContactsController.java, line(s) 496,513,529,730,736,1054,1109,1379,1394,1410,1580,1589,1613,1762,1767,1798,1861,1884,2476,2618,644,669,773,781,972,979,1399,1539,2108,2116,2365,2369,2378,2428,2706,3310,3342
org/telegram/messenger/ContactsRemoteViewsFactory.java, line(s) 165
org/telegram/messenger/DispatchQueue.java, line(s) 52,63,76,89
org/telegram/messenger/DocumentObject.java, line(s) 96
org/telegram/messenger/DownloadController.java, line(s) 1244,1320,1412,1466,1538,1590,1648,1653
org/telegram/messenger/Emoji.java, line(s) 135,142,669,703,947,959
org/telegram/messenger/EmuInputDevicesDetector.java, line(s) 55
org/telegram/messenger/FeedRemoteViewsFactory.java, line(s) 137
org/telegram/messenger/FileLoadOperation.java, line(s) 1314,1316,1509,1781,1874,2073,2170,2509,2647,2686,561,700,709,754,1021,1026,1109,1117,1150,1214,1250,1333,1354,1638,1648,1658,1668,1679,1692,1698,1706,1712,1720,1726,1734,1741,1750,1812,1814,1823,1845,1850,2035,2230,2232,2243,2330,2332,2342
org/telegram/messenger/FileLoader.java, line(s) 740,966,1219,1799,1807,1815,1824
org/telegram/messenger/FileLog.java, line(s) 73,74,75,76,89,90,91,353,222,247,377
org/telegram/messenger/FilePathDatabase.java, line(s) 62,72,107,173,205,234,324,85,127,182,209,258,322,326,354,370,381
org/telegram/messenger/FileRefController.java, line(s) 245,870,1244
org/telegram/messenger/FileStreamLoadOperation.java, line(s) 146
org/telegram/messenger/FileUploadOperation.java, line(s) 127,151,218,309,453,605
org/telegram/messenger/FilesMigrationService.java, line(s) 109,149,154,171,175
org/telegram/messenger/FingerprintController.java, line(s) 32,47,86,91,104,129,147
org/telegram/messenger/GcmPushListenerService.java, line(s) 14,31
org/telegram/messenger/ImageLoader.java, line(s) 3008,3123,3231,3243,3256,3269,3282,3295,3303,3308,290,311,320,360,366,415,439,457,478,504,516,535,731,748,771,780,825,1031,1049,1194,1328,1333,1356,1595,1618,1702,1744,1766,1833,1856,1904,1926,2010,2111,2172,2257,2295,2327,2825,3085,3102,3117,3158,3176,3187,3235,3247,3260,3273,3286,3312,3363,3371,3381,5293,5305,5331,5430,5439,5456,5476,5483,5507,5554,5686,5692,5759
org/telegram/messenger/ImageReceiver.java, line(s) 1233,1354,1406,1460,1505,1556,1844
org/telegram/messenger/ImportingService.java, line(s) 38,75
org/telegram/messenger/KeepAliveJob.java, line(s) 28,42,48,65,77
org/telegram/messenger/LinkifyPort.java, line(s) 46
org/telegram/messenger/LocaleController.java, line(s) 1053,2754,560,565,863,985,991,997,1008,1145,1193,1280,1319,1658,2225,2250,2266,2285,2307,2323,2352,2401,2545,2561,2585,2621,2631,2827,3742
org/telegram/messenger/LocationController.java, line(s) 319,400,768,830,915,1000,1012,1116,1134,1143,1488,1509,1519,1530,1549
org/telegram/messenger/LocationSharingService.java, line(s) 160
org/telegram/messenger/MediaController.java, line(s) 1101,1705,1793,1825,1830,1853,1878,1890,1900,6826,6903,724,922,956,984,992,1051,1056,1061,1066,1084,1110,1119,1234,1250,1328,1345,1394,1405,1469,1546,2131,2141,2174,2296,2636,2650,2967,2973,3085,3224,3293,3340,3413,3511,3676,3716,3770,3787,3797,3847,4013,4053,4185,4194,4301,4387,4559,4590,4678,4759,4765,4821,4829,4837,4867,4919,5046,5063,5121,5210,5226,5234,5246,5303,5372,5385,5393,5403,5411,5421,5442,5450,5453,5464,5483,5494,5500,5506,5525,5535,5600,5609,5631,5636,5647,5684,5691,5706,5735,5745,5750,5757,5844,5901,5940,6010,6035,6041,6076,6179,6221,6306,6351,6357,6606,6761,7014
org/telegram/messenger/MediaDataController.java, line(s) 4634,4987,646,761,846,916,993,1046,1066,1251,1350,1496,1553,1619,1838,1893,2213,2351,2538,2620,2708,3166,3292,3452,3589,3802,4820,5099,5139,5211,5439,5500,5530,5690,5904,6007,6165,6240,6257,6343,6463,6529,6742,6830,7039,7165,7268,7460,7789,8088,8187,8363,8413,8449,8491,8526,8757,8845,8921,9036,9490,9696,9772,9884
org/telegram/messenger/MessageObject.java, line(s) 668,1515,3060,5149,5231,5373,5451,5457,6137,6161,6208,6233,6250,6276,6312,6369,6422,6428,6542
org/telegram/messenger/MessagesController.java, line(s) 3303,3528,3532,3541,3548,3555,3565,3630,4449,4604,5136,5137,5300,7393,7434,7439,7480,7492,7502,7525,7530,7537,7554,7566,9225,9713,9722,10905,11251,11451,11845,12097,12503,12565,12572,12579,12629,12656,12693,12841,13628,13634,13737,13789,13840,13846,13857,14008,14015,14025,14035,14040,14059,14063,14091,16035,16050,16206,16215,16228,16294,16303,16315,16585,16814,16815,16916,17168,18236,18443,18450,18512,18548,18562,18569,18600,18607,18666,18703,18705,18713,18787,19069,19101,19149,19177,20398,20475,20483,20512,20528,20544,20576,20754,21815,21816,21821,21830,21837,21854,21880,22025,22404,23091,1982,1998,2025,3987,4003,4980,5006,6272,8481,8702,8744,8795,9389,11786,12116,12773,13543,13764,14400,14955,14981,15049,15069,16363,16537,17326,17474,17563,18196,21866,22021,23575,23724,23868,24343,24344
org/telegram/messenger/MessagesStorage.java, line(s) 417,521,643,1680,9105,9129,9132,9136,11682,11914,550,555,565,571,1154,1206,1252,1276,1300,1324,1371,1575,1703,1799,1848,1851,1878,1898,2198,2295,2316,2362,2413,2458,2592,2617,2649,2761,2896,3042,3274,3324,3457,3523,4116,4387,4783,4843,5136,5226,5350,5410,5441,5477,5533,5585,5641,5830,5882,5936,5986,6128,6163,6195,6289,6339,6374,6443,6498,6555,6586,6603,6654,6875,6944,7066,7225,7308,7381,7453,7527,7597,7630,7668,7725,7778,7805,7849,7903,7986,8049,9259,9365,9424,9468,9554,9632,9692,9697,9786,9848,9881,9921,9963,10013,10050,10084,10172,10193,10234,10290,10428,10461,10494,10523,10543,10570,10598,10686,10765,10803,10815,10853,10885,10904,10949,10975,11001,11040,11063,11095,11197,11263,11288,11323,11360,11400,11433,11459,11550,11588,11632,11657,11744,11756,11857,11881,11919,11931,12019,12119,12245,12259,12283,12297,12332,12369,12421,12468,12487,12517,12546,12584,12601,12616,12643,12720,12746,12896,12939,12974,13009,13095,13130,13157,13169,13209,13314,13400,13500,13562,13605,13627,13674,13687,13751,13789,13835,13877,13925,14050,14152,14208,14338,14418,14437,14472,14544,14583,14634,14693,14810,14898,14965,14989,15039,15070,15135,15186,15214,15270,15288,15308,15394,15450,15566,15608,15652,15712,15816,15838,15866,15954,15959,16044,16096,16149,16246,16315,16423,16483,16507,16558,16585,16638,16667,16701,16764,16850,16911,16948,17056,17118,17182,17242,17313,17443,17495,17514,17629,17648,17695,17728,17906,17972,17995,18002,18042,18098,18120,18127,18177,18203,18288,18376,18683,18811,18886,18966,19085,19136,19259,19315,19382,19482,19561,19661,19762,19836,19906,19957,20048,20109,20161,20244,20277,20725,20744,20860,20898,20961,21004,21027,21142,21267,21397,21456,21546,21667,21750,21821,21896,21966,22067,22168,22249,22331,22451,22527,22608,22675,22761,22826,22910,23036,23118,23166,23244,23300,23345,23404,23440,23470,23493,23526,23553,23577,23591,23597,23619,23641,23660,23671,23685,23699,23744,23933,24194,24199,24315,24320
org/telegram/messenger/MusicBrowserService.java, line(s) 201,299,339,388,515
org/telegram/messenger/MusicPlayerService.java, line(s) 184,297
org/telegram/messenger/NativeLoader.java, line(s) 163,201,56,86,91,96,101,106,113,124,132,166,183,188,207,218,227
org/telegram/messenger/NotificationBadge.java, line(s) 205,488
org/telegram/messenger/NotificationCenter.java, line(s) 992
org/telegram/messenger/NotificationImageProvider.java, line(s) 113
org/telegram/messenger/NotificationsController.java, line(s) 287,427,482,2286,2350,2365,2409,2424,2471,2797,2848,2999,3040,3057,5810,5827,263,268,275,298,335,402,424,432,1638,1653,2135,2207,2224,2237,2265,2269,2278,2292,2347,2362,2371,2406,2421,2431,2479,2556,2614,2996,3484,4347,4721,4974,5815,5902,5959,5994,5998,6007,4565,4855,5477,5643,5649,5897
org/telegram/messenger/NotificationsDisabledReceiver.java, line(s) 31,35,46,55,64,77
org/telegram/messenger/OpenChatReceiver.java, line(s) 34
org/telegram/messenger/PushListenerController.java, line(s) 141,155,161,165,225,268,277,442,480,496,590,3122,3125,3153,93,99,388,390,408,2779,2799,3145,3172,2581
org/telegram/messenger/RpmController.java, line(s) 114,205
org/telegram/messenger/ScreenReceiver.java, line(s) 13,19
org/telegram/messenger/SecretChatHelper.java, line(s) 733,1394,1904,1905,808,831,923,1544,1547,1719,1899,1917,1978,1986,2117,2367,2396,2440,2457
org/telegram/messenger/SendMessagesHelper.java, line(s) 825,2721,3706,5131,5144,5187,5193,5208,5218,5232,10693,10904,869,874,883,1633,1650,2109,3883,4245,4594,6626,6693,6872,6937,6942,7004,7077,7104,7412,7462,7940,8219,8593,8672,8722,9002,9443,9493,10143,10156,10232,10367,10410,10453,10793,10799,10804,10818,10833
org/telegram/messenger/SessionTokenController.java, line(s) 63,74,217
org/telegram/messenger/SharedConfig.java, line(s) 1211,263,331,348,427,487,502,513,545,559,695,727,737,1148
org/telegram/messenger/SmsReceiver.java, line(s) 48
org/telegram/messenger/SvgHelper.java, line(s) 379,398,411,424,437,452,468,2076
org/telegram/messenger/UserConfig.java, line(s) 232
org/telegram/messenger/Utilities.java, line(s) 98,300,316,345,358,369,381,400,417,448,490,501,533
org/telegram/messenger/VideoEditedInfo.java, line(s) 353
org/telegram/messenger/VideoEncodingService.java, line(s) 36,92,54
org/telegram/messenger/XiaomiUtilities.java, line(s) 45
org/telegram/messenger/browser/Browser.java, line(s) 315,350,109,124,283,390,401
org/telegram/messenger/camera/CameraController.java, line(s) 158,179,545,562,581,194,307,322,327,416,433,459,471,503,535,588,617,678,687,712,741,745,762,768,802,823,853,914,919,925,930,938,961
org/telegram/messenger/camera/CameraSession.java, line(s) 199,203,134,193,248,304,317,374,387,403,408,500
org/telegram/messenger/camera/CameraView.java, line(s) 400,731,1015,1045,1158,1188,1399,1434,1447,1455,1459,1468,1510,1584,1700,739,747,756,769,780,787,806,824,844,853,907,917,1138,1335,1491,1543,1553,1624,1633,1643,1651,1764,1945,1950,1958
org/telegram/messenger/redpacket/JsonData.java, line(s) 56
org/telegram/messenger/ringtone/RingtoneDataStore.java, line(s) 48,362
org/telegram/messenger/secretmedia/ExtendedDefaultDataSource.java, line(s) 200
org/telegram/messenger/support/JobIntentService.java, line(s) 135
org/telegram/messenger/support/customtabsclient/shared/CustomTabsHelper.java, line(s) 70
org/telegram/messenger/support/fingerprint/FingerprintManagerCompatApi23.java, line(s) 38,51,60
org/telegram/messenger/utils/BitmapsCache.java, line(s) 221,451
org/telegram/messenger/utils/CopyUtilities.java, line(s) 91
org/telegram/messenger/utils/OpenInstall.java, line(s) 64,61,114
org/telegram/messenger/utils/QrUtils.java, line(s) 66
org/telegram/messenger/video/AudioRecoder.java, line(s) 61
org/telegram/messenger/video/MediaCodecVideoConvertor.java, line(s) 270,81,105
org/telegram/messenger/video/TextureRenderer.java, line(s) 83,85,205,518,606
org/telegram/messenger/voip/AudioRecordJNI.java, line(s) 242,62,75,91,109,133,175,207,233,105,215,59,72,88
org/telegram/messenger/voip/AudioTrackJNI.java, line(s) 37,60,114,124,122,31
org/telegram/messenger/voip/Instance.java, line(s) 97
org/telegram/messenger/voip/JNIUtilities.java, line(s) 94
org/telegram/messenger/voip/NativeInstance.java, line(s) 142,276,306
org/telegram/messenger/voip/TelegramConnectionService.java, line(s) 32,66,48,57,18,26
org/telegram/messenger/voip/VideoCapturerDevice.java, line(s) 409
org/telegram/messenger/voip/VoIPServerConfig.java, line(s) 19
org/telegram/messenger/voip/VoIPService.java, line(s) 1290,1746,1847,1854,1946,2206,2327,3112,3883,3899,3919,4024,4283,4305,4339,4747,4763,4800,4808,4815,4934,4949,5077,5120,5259,5296,5303,5311,5527,5644,5703,5861,6103,6113,6138,6150,6156,381,420,428,603,856,917,1208,1262,1288,1311,1348,1783,1810,1997,2240,3638,3818,4057,4267,4332,4455,4509,4577,4594,4656,4738,4821,4988,5000,5045,5142,5151,5197,5227,5269,5420,5435,5472,5486,5547,5667,5697,6000,6011,923,946,1304,1344,1838,1877,1884,1894,1919,2013,4645
org/telegram/tgnet/ConnectionsManager.java, line(s) 390,436,446,448,615,623,639,655,658,670,720,725,752,780,920,926,929,408,426,458,673,761,818,830,848,935,975,1026,1031,1065,1076,1090,1136
org/telegram/tgnet/NativeByteBuffer.java, line(s) 132,133,148,149,175,176,191,192,212,213,222,223,231,232,268,269,305,306,317,318,355,405,406,424,440,441,455,456,469,470,506,507,537,538,574,575,591,592
org/telegram/tgnet/ObtainAddress$applyDatacenterAddress$2.java, line(s) 46,50
org/telegram/tgnet/ObtainAddress$connectAddress$2.java, line(s) 50
org/telegram/tgnet/ObtainAddress$connectBackupAddress$1.java, line(s) 128,131,151,169,212,259,316,327,333,359,367,120
org/telegram/tgnet/ObtainAddress$getAddressFromConfig$2.java, line(s) 174,210
org/telegram/tgnet/ObtainAddress.java, line(s) 670,715,733,755,811,838,1144,1184,855,886,920,972,1035,1066,1251
org/telegram/tgnet/SerializedData.java, line(s) 71,80,89,98,117,118,141,142,171,172,187,188,203,204,219,220,256,257,268,269,305,306,317,318,328,329,358,385,402,403,418,419,460,461,495,496,512,513,528,529,546,547,567,568
org/telegram/tgnet/TLClassStore.java, line(s) 50
org/telegram/tgnet/TLRPC$ChatPhoto.java, line(s) 95
org/telegram/tgnet/TLRPC$TL_chatPhoto.java, line(s) 32
org/telegram/tgnet/TLRPC$TL_userProfilePhoto.java, line(s) 32
org/telegram/tgnet/TLRPC$UserProfilePhoto.java, line(s) 58
org/telegram/ui/ActionBar/ActionBarLayout.java, line(s) 305,1085,1089,1734
org/telegram/ui/ActionBar/ActionBarPopupWindow.java, line(s) 172,694,774
org/telegram/ui/ActionBar/AlertDialog.java, line(s) 888,1107
org/telegram/ui/ActionBar/BaseFragment.java, line(s) 250,262,288,303,416,515,527,576,590
org/telegram/ui/ActionBar/BottomSheet.java, line(s) 1203,1774,1903,1927
org/telegram/ui/ActionBar/DrawerLayoutContainer.java, line(s) 557
org/telegram/ui/ActionBar/EmojiThemes.java, line(s) 390,460
org/telegram/ui/ActionBar/Theme.java, line(s) 6428,6477,1660,2199,2221,2233,2307,2323,2387,2526,2574,2790,2798,3149,4507,4664,5703,5710,5764,5800,5887,5924,6036,6058,6710,6726,6765,6778,7214,7235,7249,7406,7469,7535,7702,7749,7811,7824,7831,8064,8148,8253,8265,10068,10085,10125,10145,10283,10389,10408,10417,10453,10654,6907
org/telegram/ui/ActionBar/ThemeDescription.java, line(s) 796
org/telegram/ui/ActionIntroActivity.java, line(s) 790,863,948
org/telegram/ui/Adapters/BaseLocationAdapter.java, line(s) 141,187,158,179
org/telegram/ui/Adapters/ContactsAdapter.java, line(s) 130
org/telegram/ui/Adapters/DialogsAdapter.java, line(s) 158,189,309
org/telegram/ui/Adapters/DialogsSearchAdapter.java, line(s) 575,618,663,687,1504
org/telegram/ui/Adapters/GroupCreateContactSearchAdapter.java, line(s) 126,146,446
org/telegram/ui/Adapters/GroupCreateContactsAdapter.java, line(s) 100
org/telegram/ui/Adapters/SearchAdapter.java, line(s) 110,130,438
org/telegram/ui/Adapters/SearchAdapterHelper.java, line(s) 499,685,743
org/telegram/ui/AddFriendActivity.java, line(s) 351,360
org/telegram/ui/ArticleViewer.java, line(s) 2928,2933,4730,4794,5149,5194,5213,5359,5368,5390,5403,8000,8010,8109,8132,8158,11449,11966
org/telegram/ui/BaiduLocationActivity.java, line(s) 458,466,574,927,1134,1388,1935,2137,2167,2215,2254,2277,2489,2563,2898,2919,3025,3114,3165,3174
org/telegram/ui/BasePermissionsActivity.java, line(s) 101
org/telegram/ui/BindPhoneActivity.java, line(s) 560,1157,1210
org/telegram/ui/BubbleActivity.java, line(s) 280,284,70
org/telegram/ui/CacheControlActivity.java, line(s) 168,393,586,644
org/telegram/ui/CameraScanActivity.java, line(s) 998,1009,1032,1043,1291
org/telegram/ui/Cells/AboutLinkCell.java, line(s) 166,329,518
org/telegram/ui/Cells/AudioPlayerCell.java, line(s) 87,96
org/telegram/ui/Cells/BotHelpCell.java, line(s) 182,234,239,270
org/telegram/ui/Cells/ChatActionCell.java, line(s) 413,854,859
org/telegram/ui/Cells/ChatMessageCell.java, line(s) 1733,1782,1841,1859,1933,1963,2064,2096,6341,7326,7459,7571,7704,9125,9252,9406,9563,9673,9800,10034,10172,11979,12059,12158,17925,18039,18067,19740,19754,20435,22525,22734,22763,25180
org/telegram/ui/Cells/ContextLinkCell.java, line(s) 239,267,292
org/telegram/ui/Cells/DialogCell.java, line(s) 593,1354,1457,2243,2464,2577,3640,3689
org/telegram/ui/Cells/DialogMeUrlCell.java, line(s) 221,236,318
org/telegram/ui/Cells/DrawerProfileCell.java, line(s) 327
org/telegram/ui/Cells/SettingsSuggestionCell.java, line(s) 127
org/telegram/ui/Cells/SharedAudioCell.java, line(s) 161,184
org/telegram/ui/Cells/SharedLinkCell.java, line(s) 542,1057,353,388,477,505,520,575,817,831
org/telegram/ui/Cells/TextSelectionHelper.java, line(s) 1528,1529
org/telegram/ui/Cells/ThemesHorizontalListCell.java, line(s) 424
org/telegram/ui/ChangeBioActivity.java, line(s) 258,269
org/telegram/ui/ChangeBirthOrSexActivity.java, line(s) 415,430
org/telegram/ui/ChangeUsernameActivity.java, line(s) 73,424,435
org/telegram/ui/ChannelAdminLogActivity.java, line(s) 1056,1083,357,1546,1934,2856,2866,2876,2886,2896,2906,2916,2926,356,356,360
org/telegram/ui/ChannelCreateActivity.java, line(s) 1087,1229,1243
org/telegram/ui/ChatActivity.java, line(s) 9527,9558,9586,18582,19147,22746,22792,23313,27775,27913,31077,31109,31127,31145,31163,31183,31208,31226,1850,1885,1921,1941,4751,6185,6358,9717,13522,13894,14262,14449,14553,17095,17890,17900,18194,18282,23429,25786,26735,26990,28313,28562,28594,28762,28949,29968,30107,30188,31094,31120,31138,31156,31174,31201,31219,31237,31510,31529,31559
org/telegram/ui/ChatEditActivity.java, line(s) 1385
org/telegram/ui/ChatRightsEditActivity.java, line(s) 862,889
org/telegram/ui/ChatUsersActivity.java, line(s) 3015,3780
org/telegram/ui/Components/AlertsCreator.java, line(s) 276,295,348,381,1395,1456,5448,5505,6796
org/telegram/ui/Components/AnimatedEmojiDrawable.java, line(s) 264,278,371
org/telegram/ui/Components/AnimatedFileDrawable.java, line(s) 434,472
org/telegram/ui/Components/AudioPlayerAlert.java, line(s) 1519
org/telegram/ui/Components/AvatarDrawable.java, line(s) 271
org/telegram/ui/Components/BlockingUpdateView.java, line(s) 286,290
org/telegram/ui/Components/BlurBehindDrawable.java, line(s) 141,396
org/telegram/ui/Components/BotWebViewContainer.java, line(s) 246,696,1161,1250,1273,1281,1305,1319,1332,1484,1504,1527,1535,1550,1560,1570,1611
org/telegram/ui/Components/BotWebViewMenuContainer.java, line(s) 846
org/telegram/ui/Components/BotWebViewSheet.java, line(s) 849
org/telegram/ui/Components/ChatActivityEnterView.java, line(s) 2743,3346,3403,4189,5961,7744,7834,8512,8773,8788,8800,8849,9812,9856
org/telegram/ui/Components/ChatAttachAlertAudioLayout.java, line(s) 614
org/telegram/ui/Components/ChatAttachAlertBaiduLocationLayout.java, line(s) 1319,1363,1379,1613,1646,1758,2146,2167,2187,2196
org/telegram/ui/Components/ChatAttachAlertBotWebViewLayout.java, line(s) 567
org/telegram/ui/Components/ChatAttachAlertDocumentLayout.java, line(s) 1615,218,1002,1293,1300,1640,1646,1670,1678,1700
org/telegram/ui/Components/ChatAttachAlertLocationLayout.java, line(s) 1405,1478,1494,1729,1762,1799,1859,2151,2172,2192,2201
org/telegram/ui/Components/ChatAttachAlertPhotoLayout.java, line(s) 2345,2354,2358,1203,2312,2387,2396,2418,2918,3340,3353
org/telegram/ui/Components/ChatAvatarContainer.java, line(s) 724
org/telegram/ui/Components/ChatThemeBottomSheet.java, line(s) 996
org/telegram/ui/Components/ClippingImageView.java, line(s) 225
org/telegram/ui/Components/Crop/CropView.java, line(s) 1149,955,1097
org/telegram/ui/Components/DrawingInBackgroundThreadDrawable.java, line(s) 64
org/telegram/ui/Components/EditTextBoldCursor.java, line(s) 337,578,1164,1238,1247
org/telegram/ui/Components/EditTextCaption.java, line(s) 286,417,444,485,553
org/telegram/ui/Components/EditTextEmoji.java, line(s) 146,704,732
org/telegram/ui/Components/EmbedBottomSheet.java, line(s) 224,353,381,395,417,460,533,540,723,742,756,838,932
org/telegram/ui/Components/EmojiPacksAlert.java, line(s) 846,1274,1661,1767
org/telegram/ui/Components/EmojiView.java, line(s) 1100,1400,1879,2264,2873,3244,7280,8577
org/telegram/ui/Components/FilterGLThread.java, line(s) 108,181,214,221,230,237,247,258,265,440
org/telegram/ui/Components/FilterShaders.java, line(s) 952,953
org/telegram/ui/Components/ForegroundDetector.java, line(s) 79,111,86,118
org/telegram/ui/Components/GroupCallPipAlertView.java, line(s) 216
org/telegram/ui/Components/GroupVoipInviteAlert.java, line(s) 452,875
org/telegram/ui/Components/ImageUpdater.java, line(s) 688,725,772,795,825,962
org/telegram/ui/Components/InstantCameraView.java, line(s) 533,545,551,977,1032,1059,1068,1075,1243,1248,1495,1516,1865,1900,1913,1921,1925,1934,1976,2047,2448,492,1062,1072,1098,1111,1143,1155,1256,1263,1272,1279,1289,1300,1307,1338,1365,1370,1427,1598,1603,1611,1804,1957,2009,2020,2204,2227,2236,2247,2255,2371,2420,2518
org/telegram/ui/Components/JoinCallAlert.java, line(s) 232,297
org/telegram/ui/Components/LetterDrawable.java, line(s) 85
org/telegram/ui/Components/LinkActionView.java, line(s) 224,242
org/telegram/ui/Components/MotionBackgroundDrawable.java, line(s) 302,509
org/telegram/ui/Components/Paint/RenderView.java, line(s) 299,306,315,322,332,343,350,522
org/telegram/ui/Components/Paint/Shader.java, line(s) 19,27,82,92
org/telegram/ui/Components/Paint/Slice.java, line(s) 24,54,88
org/telegram/ui/Components/Paint/Utils.java, line(s) 12
org/telegram/ui/Components/PasscodeView.java, line(s) 536,546,563,619,652,940,954
org/telegram/ui/Components/PathAnimator.java, line(s) 101
org/telegram/ui/Components/PhonebookShareAlert.java, line(s) 783,841,1176
org/telegram/ui/Components/PhotoPaintView.java, line(s) 649,1658,1665,1683
org/telegram/ui/Components/PhotoViewerCaptionEnterView.java, line(s) 192,619,1035,1056,1081,1114,1237
org/telegram/ui/Components/PhotoViewerWebView.java, line(s) 301,622,666,703
org/telegram/ui/Components/PipRoundVideoView.java, line(s) 226
org/telegram/ui/Components/Premium/GLIcon/GLIconTextureView.java, line(s) 397,404,441
org/telegram/ui/Components/Premium/PremiumAppIconsPreviewView.java, line(s) 40
org/telegram/ui/Components/Premium/PremiumNotAvailableBottomSheet.java, line(s) 68
org/telegram/ui/Components/ProximitySheet.java, line(s) 637
org/telegram/ui/Components/RLottieDrawable.java, line(s) 308,346,468,600,638,760,894,932,1054,1272,1310,1432,1837
org/telegram/ui/Components/RadioButton.java, line(s) 49,154
org/telegram/ui/Components/Reactions/CustomEmojiReactionsWindow.java, line(s) 274
org/telegram/ui/Components/RecyclerListView.java, line(s) 1142,1413,1427,2278,2284
org/telegram/ui/Components/ShareAlert.java, line(s) 3465,4137
org/telegram/ui/Components/SharedMediaLayout.java, line(s) 2664,5293
org/telegram/ui/Components/SizeNotifierFrameLayout.java, line(s) 593
org/telegram/ui/Components/SlotsDrawable.java, line(s) 71,180
org/telegram/ui/Components/StaticLayoutEx.java, line(s) 101
org/telegram/ui/Components/StickersAlert.java, line(s) 219,1395,1498,1748
org/telegram/ui/Components/TermsOfServiceView.java, line(s) 176
org/telegram/ui/Components/ThemeEditorView.java, line(s) 104,113,1336,1565,1778
org/telegram/ui/Components/TimerDrawable.java, line(s) 120
org/telegram/ui/Components/TranscribeButton.java, line(s) 511
org/telegram/ui/Components/TranslateAlert.java, line(s) 928,1139
org/telegram/ui/Components/UndoView.java, line(s) 142,635
org/telegram/ui/Components/VideoPlayerSeekBar.java, line(s) 342
org/telegram/ui/Components/VideoTimelinePlayView.java, line(s) 341,411,442
org/telegram/ui/Components/VideoTimelineView.java, line(s) 287,357,389
org/telegram/ui/Components/WallpaperUpdater.java, line(s) 106,109,139,165,199,214,229,244
org/telegram/ui/Components/WebPlayerView.java, line(s) 798,406,496,517,539,548,573,618,660,697,724,850,909,961,1025,1080,1519,1782,1830,2186,2194,2202,2210,2218,2224,2271,2281,2293,2304,2315,2326,2336,2630
org/telegram/ui/Components/voip/VoIPHelper.java, line(s) 130,204,425,813
org/telegram/ui/Components/voip/VoIPPiPView.java, line(s) 376,754
org/telegram/ui/ContactAddActivity.java, line(s) 206
org/telegram/ui/ContactsActivity.java, line(s) 821,890,910,982
org/telegram/ui/ContentPreviewViewer.java, line(s) 1155,1225,1400
org/telegram/ui/CountrySelectActivity.java, line(s) 300,442,453
org/telegram/ui/DialogsActivity.java, line(s) 2863,3803,8011,9125,10045
org/telegram/ui/DiscoverActivity.java, line(s) 247
org/telegram/ui/EditApplyInfoActivity.java, line(s) 63
org/telegram/ui/EditWidgetActivity.java, line(s) 397,440,453,462,562,682
org/telegram/ui/EmojiAnimationsOverlay.java, line(s) 824
org/telegram/ui/ExternalActionActivity.java, line(s) 612,616,90,419,465
org/telegram/ui/FilterCreateActivity.java, line(s) 502,875
org/telegram/ui/FilteredSearchView.java, line(s) 1104
org/telegram/ui/FiltersSetupActivity.java, line(s) 777
org/telegram/ui/GroupAndChannelActivity.java, line(s) 424,443
org/telegram/ui/GroupCallActivity.java, line(s) 1165,1311,1532
org/telegram/ui/GroupCreateActivity.java, line(s) 1113,1317,1838,2202,2217
org/telegram/ui/GroupInviteActivity.java, line(s) 140,155
org/telegram/ui/GroupStickersActivity.java, line(s) 696
org/telegram/ui/IdenticonActivity.java, line(s) 71
org/telegram/ui/InviteContactsActivity.java, line(s) 596,639,821,847
org/telegram/ui/LanguageSelectActivity.java, line(s) 234,246
org/telegram/ui/LaunchActivity.java, line(s) 587,676,686,1674,1824,8926,9404,10273,10286,10290,10300,10304,10317,10329,364,549,603,1527,1585,1683,1765,1775,1833,5094,5163,6394,6404,6445,6469,6474,6484,6588,6798,6968,7080,7172,7179,7625,7709,7764,7785,7812,7840,7932,7949,7966,7987,8015,8080,8106,8138,8178,8528,8543,8557,8569,8831,9037,9160,9167,9514,9525,9688,9694,10437,10511,10597
org/telegram/ui/LocationActivity.java, line(s) 443,451,558,905,1127,1378,1910,2061,2261,2294,2350,2390,2417,2442,2556,2631,2977,3007,3030,3135,3241,3314,3328,3354,3363
org/telegram/ui/ManageLinksActivity.java, line(s) 1258,1273
org/telegram/ui/NewContactActivity.java, line(s) 512,542,665,751
org/telegram/ui/NotificationsCustomSettingsActivity.java, line(s) 517,851,878,909
org/telegram/ui/NotificationsSettingsActivity.java, line(s) 339,365,396,603
org/telegram/ui/NotificationsSoundActivity.java, line(s) 454,1007
org/telegram/ui/PasscodeActivity.java, line(s) 1199,1354
org/telegram/ui/PassportActivity.java, line(s) 1143,3139,3643,3942,4052,4849,5619,6286,6355,7884,8267,8330,8532,8548,8712,9451,9569
org/telegram/ui/PaymentFormActivity.java, line(s) 352,550,717,1339,1366,1466,3610,3827,3914,3923,4074,4081,4375,4419,4715,4743,4767
org/telegram/ui/PeopleNearbyActivity.java, line(s) 668,597,835
org/telegram/ui/PhotoCropActivity.java, line(s) 451,456,475
org/telegram/ui/PhotoViewer.java, line(s) 8430,8438,20091,746,3103,3111,3215,4002,4966,4979,5796,7564,7595,7920,7974,8701,8743,8750,9130,9151,9536,9672,9685,9700,9729,9853,10507,10517,10744,10751,14045,15292,15704,16051,16062,16071,16128,16201,16632,16750,18617,20375
org/telegram/ui/PopupNotificationActivity.java, line(s) 593,1555
org/telegram/ui/PremiumPreviewFragment.java, line(s) 1674,1689,1704,1726
org/telegram/ui/PrivacyControlActivity.java, line(s) 893
org/telegram/ui/PrivacySettingsActivity.java, line(s) 413
org/telegram/ui/ProfileActivity.java, line(s) 1681,2909,2927,3507,4008,5285,5422,5441,5480,5500,7334,9649,9734,9801,10181,10577,10764
org/telegram/ui/ProfileNotificationsActivity.java, line(s) 421
org/telegram/ui/RedRpmChatUsersActivity.java, line(s) 2787,3552
org/telegram/ui/SecretMediaViewer.java, line(s) 477,483,526,567,879,1038,1524
org/telegram/ui/SelectAnimatedEmojiDialog.java, line(s) 686,751,3231
org/telegram/ui/SessionsActivity.java, line(s) 519,545,1364,1465
org/telegram/ui/StickersActivity.java, line(s) 1082,1104,1673
org/telegram/ui/ThemeActivity.java, line(s) 1353,1365,1453,1458,1824,1832,1849,1885
org/telegram/ui/ThemePreviewActivity.java, line(s) 2163,2174,2182,2217,2236,2283,2430,3062
org/telegram/ui/ThemeSetUrlActivity.java, line(s) 117,135,472,488,723,734
org/telegram/ui/TwoStepVerificationActivity.java, line(s) 208,1167
org/telegram/ui/TwoStepVerificationSetupActivity.java, line(s) 1332,1362
org/telegram/ui/VoIPFragment.java, line(s) 895,1844,2062
org/telegram/ui/VoIPPermissionActivity.java, line(s) 34
org/telegram/ui/WalletListActivity.java, line(s) 55,89
org/telegram/ui/WalletWithdrawalRecordActivity.java, line(s) 308
org/telegram/ui/WallpapersListActivity.java, line(s) 1225
org/telegram/ui/WebviewActivity.java, line(s) 108,159,242,252,407
org/telegram/ui/newlogin/ChannelSSLoginActivity.java, line(s) 1410,2508
org/telegram/ui/newlogin/LoginBaseActivity.java, line(s) 647,181,514,584,691,749,1004,1134,1290,1694,1958
org/telegram/ui/newlogin/NewLoginActivity.java, line(s) 1168,1893,2799
org/telegram/ui/newlogin/NewPageLoginActivity.java, line(s) 1270,2308
org/webrtc/AndroidVideoDecoder.java, line(s) 436
org/webrtc/EglRenderer.java, line(s) 236,536
org/webrtc/GlGenericDrawer.java, line(s) 327
org/webrtc/GlShader.java, line(s) 97
org/webrtc/HardwareVideoEncoderFactory.java, line(s) 125
org/webrtc/MediaCodecUtils.java, line(s) 55
org/webrtc/ScreenCapturerAndroid.java, line(s) 85,147
org/webrtc/TextureBufferImpl.java, line(s) 120
org/webrtc/YuvConverter.java, line(s) 116,142
org/webrtc/voiceengine/WebRtcAudioRecord.java, line(s) 159,353,394
org/webrtc/voiceengine/WebRtcAudioTrack.java, line(s) 255,381

信息 此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改

此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
org/telegram/ui/ProxySettingsActivity.java, line(s) 63,95,114,6
org/telegram/ui/newlogin/LoginBaseActivity.java, line(s) 144,144,238,7

信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板,因为其他应用程序可以访问它
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
org/telegram/messenger/AndroidUtilities.java, line(s) 12,2594,2597
org/telegram/ui/ActionBar/ActionBarMenuItem.java, line(s) 10,1610
org/telegram/ui/ChatActivity.java, line(s) 14,26985
org/telegram/ui/Components/EmbedBottomSheet.java, line(s) 10,836
org/telegram/ui/Components/InviteMembersBottomSheet.java, line(s) 12,248,1473
org/telegram/ui/Components/LinkActionView.java, line(s) 6,217
org/telegram/ui/Components/PhonebookShareAlert.java, line(s) 9,836,858
org/telegram/ui/Components/ShareAlert.java, line(s) 11,3448
org/telegram/ui/Components/TranslateAlert.java, line(s) 8,538
org/telegram/ui/GroupInviteActivity.java, line(s) 4,136
org/telegram/ui/ManageLinksActivity.java, line(s) 4,1254
org/telegram/ui/ProfileActivity.java, line(s) 11,5283,5436,10560,10568,10573
org/telegram/ui/SessionBottomSheet.java, line(s) 5,304
org/telegram/ui/StickersActivity.java, line(s) 5,1101
org/telegram/ui/ThemeSetUrlActivity.java, line(s) 4,112

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (firebase-settings.crashlytics.com) 通信。

{'ip': '180.163.150.162', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (pagead2.googlesyndication.com) 通信。

{'ip': '180.163.150.166', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (ads.teamgram.net) 通信。

{'ip': '61.160.148.90', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.linkedin.com) 通信。

{'ip': '52.130.75.155', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www2.teamgram.net) 通信。

{'ip': '61.160.148.90', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (app-measurement.com) 通信。

{'ip': '180.163.150.161', 'country_short': 'CN', 'country_long': '中国', 'region': '上海', 'city': '上海', 'latitude': '31.224333', 'longitude': '121.468948'}

安全评分: ( 乡村振兴 1.11.2101301)