安全分析报告： Jianyuwyh v2.7.0

安全分数


安全分数 41/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

3

用户/设备跟踪器


调研结果

高危 12
中危 41
信息 2
安全 2
关注 6

高危 基本配置不安全地配置为允许到所有域的明文流量。 

Scope:
*

高危 App 链接 assetlinks.json 文件未找到 

[android:name=im.ciwpiyywbh.ui.LaunchActivity][android:host=http://m12345.cc]
App Link 资产验证 URL （http://m12345.cc/.well-known/assetlinks.json） 未找到或配置不正确。（状态代码：404）。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确，则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击，泄露 URI 中的敏感数据，例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android：autoVerify=“true”] 启用验证来验证 App Link 网域。

高危 App 链接 assetlinks.json 文件未找到 

[android:name=im.ciwpiyywbh.ui.LaunchActivity][android:host=https://m12345.cc]
App Link 资产验证 URL （https://m12345.cc/.well-known/assetlinks.json） 未找到或配置不正确。（状态代码：404）。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确，则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击，泄露 URI 中的敏感数据，例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android：autoVerify=“true”] 启用验证来验证 App Link 网域。

高危 Activity (im.ciwpiyywbh.ui.IntroActivity) 的启动模式不是standard模式 

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (im.ciwpiyywbh.messenger.OpenChatReceiver) is vulnerable to StrandHogg 2.0 

已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时，其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部，从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (28) 更新到 29 或更高版本以在平台级别修复此问题。

高危 Activity (im.ciwpiyywbh.ui.PopupNotificationActivity) 的启动模式不是standard模式 

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (im.ciwpiyywbh.keepalive.OnePxActivity) 的启动模式不是standard模式 

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 Activity (com.bjz.comm.net.premission.PermissionActivity) 的启动模式不是standard模式 

Activity 不应将启动模式属性设置为 "singleTask/singleInstance"，因为这会使其成为根 Activity，并可能导致其他应用程序读取调用 Intent 的内容。因此，当 Intent 包含敏感信息时，需要使用 "standard" 启动模式属性。

高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击 

如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7

Files:
im/ciwpiyywbh/ui/ArticleViewer.java, line(s) 7745,62,63
im/ciwpiyywbh/ui/components/EmbedBottomSheet.java, line(s) 699,704,34,35

高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 

应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
im/ciwpiyywbh/ui/hui/friendscircle/okhttphelper/AESHelper.java, line(s) 51
im/ciwpiyywbh/ui/utils/AesUtils.java, line(s) 25,46,55
im/ciwpiyywbh/ui/utils/ChiperUtils.java, line(s) 48,69,78

高危 WebView域控制不严格漏洞 

WebView域控制不严格漏洞


Files:
im/ciwpiyywbh/ui/fragments/TabWebFragment.java, line(s) 96,80
im/ciwpiyywbh/ui/hui/discoveryweb/DiscoveryJumpToPage.java, line(s) 272,256

高危 启用了调试配置。生产版本不能是可调试的 

启用了调试配置。生产版本不能是可调试的
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing

Files:
com/litesuits/orm/BuildConfig.java, line(s) 3,4

中危 应用程序已启用明文网络流量 

[android:usesCleartextTraffic=true]
应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。

中危 Service (im.ciwpiyywbh.messenger.GcmPushListenerService) 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Broadcast Receiver (com.google.android.gms.measurement.AppMeasurementReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Activity (im.ciwpiyywbh.ui.ShareActivity) 未被保护。 

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Activity (im.ciwpiyywbh.ui.ExternalActionActivity) 未被保护。 

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Activity (im.ciwpiyywbh.messenger.OpenChatReceiver) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity设置了TaskAffinity属性 

(im.ciwpiyywbh.ui.VoIPActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity设置了TaskAffinity属性 

(im.ciwpiyywbh.ui.VoIPGroupActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity设置了TaskAffinity属性 

(im.ciwpiyywbh.ui.VoIPPermissionActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity设置了TaskAffinity属性 

(im.ciwpiyywbh.ui.VoIPFeedbackActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Service (im.ciwpiyywbh.messenger.AuthenticatorService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (im.ciwpiyywbh.messenger.ContactsSyncAdapterService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (im.ciwpiyywbh.messenger.AppChooserTargetService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.BIND_CHOOSER_TARGET_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (im.ciwpiyywbh.messenger.MusicPlayerService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (im.ciwpiyywbh.messenger.MusicBrowserService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (im.ciwpiyywbh.messenger.WearDataLayerListenerService) 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Service (im.ciwpiyywbh.messenger.voip.AppConnectionService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.BIND_TELECOM_CONNECTION_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (im.ciwpiyywbh.messenger.MusicPlayerReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (im.ciwpiyywbh.messenger.voip.VoIPMediaButtonReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (im.ciwpiyywbh.messenger.AppStartReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (im.ciwpiyywbh.messenger.RefererReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.INSTALL_PACKAGES [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Content Provider (im.ciwpiyywbh.messenger.voip.CallNotificationSoundProvider) 未被保护。 

[android:exported=true]
发现 Content Provider与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (im.ciwpiyywbh.keepalive.ChannelService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (im.ciwpiyywbh.keepalive.DaemonService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (im.ciwpiyywbh.keepalive.ScheduleService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (im.ciwpiyywbh.keepalive.MonitorReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (im.ciwpiyywbh.keepalive.ScreenReceiver) 未被保护。 

[android:exported=true]
发现 Broadcast Receiver与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (com.blankj.utilcode.util.MessengerUtils$ServerService) 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (com.google.android.gms.auth.api.signin.RevocationBoundService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 MD5是已知存在哈希冲突的弱哈希 

MD5是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/bjz/comm/net/utils/MD5Utils.java, line(s) 17
com/danikula/videocache/ProxyCacheUtils.java, line(s) 73
com/litesuits/orm/db/assit/Encrypt.java, line(s) 35
im/ciwpiyywbh/messenger/AndroidUtilities.java, line(s) 2784
im/ciwpiyywbh/messenger/FileUploadOperation.java, line(s) 414
im/ciwpiyywbh/messenger/MessagesController.java, line(s) 1145
im/ciwpiyywbh/messenger/Utilities.java, line(s) 364
im/ciwpiyywbh/translate/MD5.java, line(s) 20,49
im/ciwpiyywbh/ui/hui/friendscircle/okhttphelper/MD5Utils.java, line(s) 17
im/ciwpiyywbh/ui/utils/ChiperUtils.java, line(s) 19

中危 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
com/bjz/comm/net/bean/AtUserBean.java, line(s) 60
com/bjz/comm/net/bean/FCEntitysRequest.java, line(s) 49
com/bjz/comm/net/bean/FCEntitysResponse.java, line(s) 126
com/bjz/comm/net/bean/FcUserInfoBean.java, line(s) 121
com/bjz/comm/net/bean/MiniGameBean.java, line(s) 113
com/bjz/comm/net/bean/ResponseAccessTokenBean.java, line(s) 60
com/litesuits/orm/db/assit/SQLBuilder.java, line(s) 61
com/litesuits/orm/db/model/EntityTable.java, line(s) 32
com/litesuits/orm/db/model/MapProperty.java, line(s) 7
com/zhy/http/okhttp/builder/PostFormBuilder.java, line(s) 48
im/ciwpiyywbh/javaBean/ShareInstallConfigBean.java, line(s) 46
im/ciwpiyywbh/messenger/GcmPushListenerService.java, line(s) 3049
im/ciwpiyywbh/messenger/ImageLoader.java, line(s) 3555
im/ciwpiyywbh/ui/ArticleViewer.java, line(s) 4196
im/ciwpiyywbh/ui/ChannelCreateActivity.java, line(s) 134
im/ciwpiyywbh/ui/ChatEditTypeActivity.java, line(s) 118
im/ciwpiyywbh/ui/DataAutoDownloadActivity.java, line(s) 297,312,305
im/ciwpiyywbh/ui/LaunchActivity.java, line(s) 3962
im/ciwpiyywbh/ui/adapters/MentionsAdapter.java, line(s) 396
im/ciwpiyywbh/ui/hui/friendscircle_v1/view/edittext/span/User.java, line(s) 152
im/ciwpiyywbh/ui/hui/login/LoginContronllerActivity.java, line(s) 73
im/ciwpiyywbh/ui/settings/AutoDownloadSettingActivity.java, line(s) 452,467,460

中危 IP地址泄露 

IP地址泄露


Files:
com/danikula/videocache/HttpProxyCacheServer.java, line(s) 32
im/ciwpiyywbh/tgnet/NetworkConfig.java, line(s) 106,101,108

中危 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
com/danikula/videocache/StorageUtils.java, line(s) 23,40
im/ciwpiyywbh/messenger/AndroidUtilities.java, line(s) 1742,1156,1734,1735,1761
im/ciwpiyywbh/messenger/FileLog.java, line(s) 47,79,318
im/ciwpiyywbh/messenger/ImageLoader.java, line(s) 2634,2635
im/ciwpiyywbh/messenger/MediaController.java, line(s) 3539,3541,3952
im/ciwpiyywbh/messenger/SharedConfig.java, line(s) 658
im/ciwpiyywbh/messenger/voip/VoIPController.java, line(s) 304
im/ciwpiyywbh/ui/DocumentSelectActivity.java, line(s) 502,612,612,612,615,711,713,724,792,826
im/ciwpiyywbh/ui/SettingsActivity.java, line(s) 1209
im/ciwpiyywbh/ui/components/voip/VoIPHelper.java, line(s) 479
im/ciwpiyywbh/ui/dialogs/McShareDialog.java, line(s) 166
im/ciwpiyywbh/ui/fragments/MeFragmentV2.java, line(s) 853
im/ciwpiyywbh/ui/hui/chats/GroupShareActivity.java, line(s) 266
im/ciwpiyywbh/ui/hui/mine/AboutAppActivity.java, line(s) 393
im/ciwpiyywbh/ui/hui/mine/QrCodeActivity.java, line(s) 375
im/ciwpiyywbh/ui/hviews/helper/MryDisplayHelper.java, line(s) 225
im/ciwpiyywbh/ui/utils/DownloadUtils.java, line(s) 159

中危 应用程序使用不安全的随机数生成器 

应用程序使用不安全的随机数生成器
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/socks/library/klog/FileLog.java, line(s) 10
im/ciwpiyywbh/ui/utils/NameUtil.java, line(s) 3
im/ciwpiyywbh/ui/utils/number/StringUtils.java, line(s) 4
im/ciwpiyywbh/ui/utils/translate/ssrc/SSRC.java, line(s) 18

中危 SHA-1是已知存在哈希冲突的弱哈希 

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
im/ciwpiyywbh/messenger/Utilities.java, line(s) 219,233
im/ciwpiyywbh/ui/PassportActivity.java, line(s) 3064
im/ciwpiyywbh/ui/utils/DeviceIdUtil.java, line(s) 88

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
im/ciwpiyywbh/ui/components/paint/Slice.java, line(s) 22
im/ciwpiyywbh/ui/utils/translate/ssrc/SSRC.java, line(s) 2946

中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
com/danikula/videocache/sourcestorage/DatabaseSourceInfoStorage.java, line(s) 6,7,28
com/litesuits/orm/db/assit/Querier.java, line(s) 4,14

中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞 

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
im/ciwpiyywbh/messenger/utils/PlayerUtils.java, line(s) 1584,1591
im/ciwpiyywbh/ui/ArticleViewer.java, line(s) 7617,7612
im/ciwpiyywbh/ui/WebviewActivity.java, line(s) 284,272
im/ciwpiyywbh/ui/components/EmbedBottomSheet.java, line(s) 678,233
im/ciwpiyywbh/ui/components/WebPlayerView.java, line(s) 1580,1587

中危 应用程序包含隐私跟踪程序 

此应用程序有多个3隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。

中危 此应用可能包含硬编码机密信息 

从应用程序中识别出以下机密确保这些不是机密或私人信息
openinstall统计的=> "com.openinstall.APP_KEY" : "toqkr9"
谷歌地图的=> "com.google.android.maps.v2.API_KEY" : "AIzaSyA-t0jLPjUt2FxrA8VPK2EiYHcYcboIR6k"
百度地图的=> "com.baidu.lbsapi.API_KEY" : "oYnHR3odlaw9KUleHaQP5BrTLivxSCz1"
"baidu_map_key" : "oYnHR3odlaw9KUleHaQP5BrTLivxSCz1"
"NotAuthenticated" : "NotAuthenticated"
"UseProxyPassword" : "Password"
"yuncheng_app_key" : "-dSPyyHFK-C3oeMlwHTO+pKDObpgxP2MO7Uo2UCH0+AxbvSwOHSK26vswxbHqitmfpzvpr_umcseBVAt1Jhc+ZSpVK2u1Jycd5vGXSkkeksUjEvw7B1ab_L72k9kUie93wo9MKEFb_z5dDVJuy1dmCJ1lkTEoczXTFwV8KDvdhxGgMFuczwD-9Dky82dyNcpoA5r1MQjP9ySfIjUZBsaePOvidufUoObTop+UEXpSPUk0S9Qz8Pt8bxT4nwwFJr18bwcZoeGyMLOYYBtZsWjTSuoCM-evTn1HNr6AjGt9PsQ2REKz14oSNoo4JB7gRopFVzhEnZYwMTBKe3jbvAufn_d4Ur6uhiE34czv+fdJVeUHP"
"FaceAuth" : "FaceAuth"
"UseProxyUsername" : "Username"
"AdvanceAuth" : "AdvanceAuth"
"UseProxySecret" : "Secret"
"ReAuth" : "Re-certification"
"FindBackPassword" : "FindBack"
"TypePrivate2" : "Private"
"Sessions" : "Sessions"
"key_windowBackgroundGray" : "windowBackgroundGray"
"TypePrivateGroup" : "Private"
"TypePrivate" : "Private"
"PasscodePassword" : "Password"
"firebase_database_url" : "https://ciwpiyywbh-48b0d.firebaseio.com"
"PassportAuthorize" : "AUTHORIZE"
"Username" : "Username"
"PayPassword" : "PayPassword"
"Authenticated" : "Authenticated"
"LoginPassword" : "Password"
"CommitAuthentication" : "CommitAuthentication"
"google_api_key" : "AIzaSyC6uk1nvjb5BYzqEzgaWy_iTryf5373Nyw"
"google_crash_reporting_api_key" : "AIzaSyC6uk1nvjb5BYzqEzgaWy_iTryf5373Nyw"
"key_walletDefaultBackground" : "walletDefaultBackground"
"RealNameAuth" : "RealNameAuth"
"key_windowBackgroundWhite" : "windowBackgroundWhite"
"Authentication" : "Authentication"
pE5eNoBQIFVcd9IEuyIhvopfgS1RSj5C
e283aac0-7c0f-4f2e-bcf7-90acc19903ed
A2B55680-6F43-11E0-9A3F-0002A5D5C51B
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
9A04F079-9840-4286-AB92-E65BE0885F95
f180c508-f49a-40bd-b8ac-50577ce9aff6
fb9f0bb7fdd0760c354cc3d80cecb1d9
ABVGDE2JZIQKLMNOPRSTUFHC34WXY9678

信息 应用程序记录日志信息,不得记录敏感信息 

应用程序记录日志信息,不得记录敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
cn/dreamtobe/kpswitch/handler/KPSwitchRootLayoutHandler.java, line(s) 34,45,49,55,59
cn/dreamtobe/kpswitch/util/KeyboardUtil.java, line(s) 42,176,183,219,155,191,207
cn/dreamtobe/kpswitch/util/StatusBarHeightUtil.java, line(s) 21
cn/dreamtobe/kpswitch/util/ViewUtil.java, line(s) 18
com/bjz/comm/net/factory/ApiFactory.java, line(s) 59,66
com/bjz/comm/net/factory/ApiGameFactory.java, line(s) 57,64
com/bjz/comm/net/mvp/presenter/FcCommonPresenter.java, line(s) 111
com/bjz/comm/net/premission/PermissionActivity.java, line(s) 53,325,338,353
com/bjz/comm/net/premission/PermissionManager.java, line(s) 34
com/bjz/comm/net/receiver/NetworkConnectChangedReceiver.java, line(s) 25,31,41
com/bjz/comm/net/utils/MD5Utils.java, line(s) 19,84,88,89
com/bjz/comm/net/utils/RxHelper.java, line(s) 97,102,125,129,140,185
com/bjz/comm/net/utils/TokenLoader.java, line(s) 51,83,87
com/contrarywind/view/WheelView.java, line(s) 341
com/coremedia/iso/boxes/sampleentry/AudioSampleEntry.java, line(s) 195
com/litesuits/orm/LiteOrm.java, line(s) 81,83,89,118,295
com/litesuits/orm/db/TableManager.java, line(s) 92,132,123,172,249,91,96,97,101,102,119,121,131,138,139,160,161,180,181,182,187,188
com/litesuits/orm/db/assit/Querier.java, line(s) 12,18,21,11,17,20
com/litesuits/orm/db/assit/SQLStatement.java, line(s) 236,269,514,180,274,100,101,114,136,137,170,171,174,175,179,219,220,235,264,265,268,273,312,348,365,370,418,419,493,502,513,313,349,494,503
com/litesuits/orm/db/assit/Transaction.java, line(s) 16,22,23
com/litesuits/orm/db/utils/DataUtil.java, line(s) 102,103
com/litesuits/orm/log/OrmLog.java, line(s) 41,74,124,157,62,95,145,178,20,27,48,81,131,164,34,67,117,150,55,88,138,171
com/preview/PreviewDialogFragment.java, line(s) 164
com/socks/library/Util.java, line(s) 13,15
com/socks/library/klog/BaseLog.java, line(s) 29,38,32,26,35,41
com/socks/library/klog/FileLog.java, line(s) 18,21
com/socks/library/klog/JsonLog.java, line(s) 22
com/socks/library/klog/XmlLog.java, line(s) 19
com/zhy/http/okhttp/cookie/store/PersistentCookieStore.java, line(s) 141,150,153
com/zhy/http/okhttp/log/LoggerInterceptor.java, line(s) 41,43,44,45,47,50,53,56,58,69,70,71,73,77,79,81,84
com/zhy/http/okhttp/utils/L.java, line(s) 10
im/ciwpiyywbh/keepalive/ChannelService.java, line(s) 55
im/ciwpiyywbh/keepalive/CheckTopTask.java, line(s) 23,47
im/ciwpiyywbh/keepalive/DaemonService.java, line(s) 133,68,92,105,114,136
im/ciwpiyywbh/keepalive/MonitorReceiver.java, line(s) 11,15
im/ciwpiyywbh/keepalive/OnePxActivity.java, line(s) 34,63,87
im/ciwpiyywbh/keepalive/ScheduleService.java, line(s) 11,19
im/ciwpiyywbh/keepalive/ScreenReceiver.java, line(s) 37
im/ciwpiyywbh/messenger/AndroidUtilities.java, line(s) 1044,1740,1751,241,296,432,527,541,786,795,943,1006,1036,1077,1089,1149,1158,1168,1177,1261,1264,1362,1378,1393,1434,1451,1455,1521,1542,1641,1656,1706,1726,1796,1855,1916,1974,1986,2027,2181
im/ciwpiyywbh/messenger/AnimatedFileDrawableStream.java, line(s) 56
im/ciwpiyywbh/messenger/AppChooserTargetService.java, line(s) 49,92,171
im/ciwpiyywbh/messenger/ApplicationLoader.java, line(s) 73,119,147,163,173,187,196,231,234,245,248,284,66,122,270,298,311,330,343,387
im/ciwpiyywbh/messenger/ContactsController.java, line(s) 447,464,480,677,683,1002,1065,1133,1387,1402,1418,1596,1605,1629,1775,1780,1811,1887,1904,2431,2571,583,608,720,907,914,922,1407,1551,2087,2095,2324,2333,2339,2383,2642,3144,3175
im/ciwpiyywbh/messenger/ContactsSyncAdapterService.java, line(s) 49,30
im/ciwpiyywbh/messenger/DispatchQueue.java, line(s) 29,38,50,64,85
im/ciwpiyywbh/messenger/DownloadController.java, line(s) 1109
im/ciwpiyywbh/messenger/Emoji.java, line(s) 189,93,106,116,632,808,820
im/ciwpiyywbh/messenger/FileLoadOperation.java, line(s) 1018,1020,1113,1307,1378,1524,1557,1625,1914,2017,2042,346,488,501,518,801,830,908,915,952,977,1037,1053,1225,1231,1238,1244,1251,1257,1264,1270,1278,1338,1340,1349,1356,1657,1659,1731,1754,1765,1767
im/ciwpiyywbh/messenger/FileLoader.java, line(s) 1007,1466,1474,1482,1491
im/ciwpiyywbh/messenger/FileLog.java, line(s) 223,247,96,121,145,169,271,295
im/ciwpiyywbh/messenger/FileRefController.java, line(s) 121,630,953
im/ciwpiyywbh/messenger/FileStreamLoadOperation.java, line(s) 138
im/ciwpiyywbh/messenger/FileUploadOperation.java, line(s) 116,140,206,423,572,707
im/ciwpiyywbh/messenger/GcmPushListenerService.java, line(s) 37,50,118,140,159,171,278,438,783,3083,3136,198,228,274,389,414,536,2507,2531,2995,3049,3051,2488
im/ciwpiyywbh/messenger/ImageLoader.java, line(s) 2561,2631,2645,2657,2670,2683,2691,209,230,239,277,283,331,354,371,391,417,428,446,472,634,654,663,705,895,913,1178,1215,1244,1295,1376,1416,1488,1511,1557,1692,2401,2407,2621,2627,2649,2661,2674,2687,2695,2743,2751,2761,4173,4185,4211,4278,4287,4304,4324,4331,4356,4391,4548,4554,4647
im/ciwpiyywbh/messenger/ImageReceiver.java, line(s) 1002,1053,1087,1100,1178
im/ciwpiyywbh/messenger/KeepAliveJob.java, line(s) 28,44,50,72,84
im/ciwpiyywbh/messenger/LocaleController.java, line(s) 1025,2303,2407,2444,518,523,800,957,963,969,980,1102,1131,1181,1769,1846,1871,1887,1906,1935,1978,2007,2100,2116,2140,2378,3345
im/ciwpiyywbh/messenger/LocationController.java, line(s) 554,638,702
im/ciwpiyywbh/messenger/MediaController.java, line(s) 895,1391,1484,1527,1532,1552,1571,1583,1593,5250,5328,5354,5404,6458,6507,6579,6586,7006,526,723,754,782,790,849,854,859,864,881,904,913,1014,1025,1094,1107,1141,1152,1215,1799,1829,1938,2070,2085,2393,2399,2490,2596,2738,2811,2947,2953,2999,3014,3023,3074,3095,3213,3222,3326,3406,3474,3528,3684,3692,3715,3718,3729,3751,3754,3765,3783,3829,3835,3843,3848,3855,3867,3877,3954,3960,4002,4062,4088,4094,4111,4150,4242,4270,4306,4328,4418,4443,4474,4502,4678,4965,5238,5246,5400,5419,5453,5537,5598,5637,5688,5768,5820,6028,6123,6254,6362,6403,6519,6535,6648,6687,6786,7002
im/ciwpiyywbh/messenger/MediaDataController.java, line(s) 297,428,485,549,686,741,933,1011,1025,1066,1085,1090,1283,1309,1417,1488,1711,1808,1827,1921,2116,2224,2698,2951,2990,3144,3178,3204,3285,3440,3628,3722,3760,3926,3994,4011,4095,4216,4278,4384,4658,4720,4773,4778,4830,5039,5453,5534,5677,5718,5754,5793,5829,5917,5968,5974,6046,6084,6106,6187
im/ciwpiyywbh/messenger/MessageObject.java, line(s) 251,4138,4197,4293,4367,4373,4737,4860,4882,4898,4929,4951,4998,5047,5058,5172
im/ciwpiyywbh/messenger/MessagesController.java, line(s) 2462,2467,2513,2523,2548,2555,2572,2584,4196,4205,6063,6499,6506,6514,6561,6580,6611,9271,9286,9332,9441,9450,9463,9523,9532,9544,9999,10093,10110,10331,11429,11436,11473,11531,11571,11614,11636,11638,11646,12042,12073,12831,12896,12909,12920,13143,13301,13315,13326,13336,13363,14121,14122,14127,14131,14137,14152,14174,14796,1436,3342,3467,3510,3558,3908,5769,6079,6678,7458,7869,8530,8556,9587,9724,10399,10539,10623,11205,14166,15189,15497,15590,15595
im/ciwpiyywbh/messenger/MessagesStorage.java, line(s) 269,357,8350,8655,245,386,402,422,465,525,583,615,624,668,714,747,779,914,1191,1333,1384,1450,1454,1472,1494,1523,1554,1721,1816,1870,1970,2028,2126,2168,2207,2275,2286,2378,2581,2608,2634,2653,2702,2743,2767,2923,2953,2985,3075,3092,3106,3133,3206,3264,3309,3350,3390,3426,3431,3476,3531,3546,3626,3644,3696,3788,3873,3914,3943,4005,4049,4169,4247,4343,4425,4450,4485,4577,4622,4658,4752,4757,4801,4871,4940,4984,5055,5092,5132,5152,5211,5300,5343,5360,5438,5450,5521,5544,5626,5658,5725,5758,5794,5906,5974,6012,6044,6118,6158,6174,6210,6230,6394,6406,6480,6503,6536,6605,6617,6639,6673,6743,6783,6829,6854,6950,6997,7070,7138,7167,7191,7266,7312,7385,7414,7500,7622,7653,7722,7762,7796,7859,7937,7974,8044,8100,8165,8203,8215,8230,8271,8307,8363,8406,8433,8546,8561,8574,8604,8663,8679,8777,8959,9025,9040,9066,9081,9121,9173,9247,9275,9308,9410,9471,9539,9574,9679,9733,9768,9806,9854,9922,9935,9962,9975,10017,10075,10140,10245,10329,10371,10409,10446,10548,10554,10607,10669,10724,10814,10906,10912,10964,11018,11072,11104,11150,11181,11252,11284,11310,11319,11378,11424,11477,11527,11625,11679,11714,11747,11780,11834,12019,12043,12126,12160,12203,12227,12265,12367,12409,12413,12448,12465,12546,12550,12555,12596,12622,12675,12725,12760,12787,12824,12890,12984,13019,13056,13136,13142,13185,13268,13291,13355,13395,13400,13515,13558,13608,13705,13739,13784,13828,13881,13929,14021,14083,14095,14153,14208,14229,14263,14321,14367,14388,14399,14482,14492,14499,14595,14633,14664,14945,15055,15117,15167,15287,15383,15448,15575,15673,15749,15820,15915,15998,16091,16156,16240,16320,16388,16477,16549,16620,16941,17035,17051,17095,17115,17142,17182,17248,17273,17350,17377,17406,17429,17452,17476,17547,17560,17646,17771,17839,17921,17984,18050,18113,18192,18257,18323,18392,18463,18517,18596,18670,18728,18821,18877,18934,19005,19134,19168,19171,19223,19256,19365,19418,19438,19488,19530,19551,19577,19598,19607,19624,19646,19665,19676,19690,19704,19731,19755,19785,19829,19858,19887,19919,19948
im/ciwpiyywbh/messenger/MusicBrowserService.java, line(s) 192,288,327,376,500
im/ciwpiyywbh/messenger/MusicPlayerService.java, line(s) 191,373
im/ciwpiyywbh/messenger/NativeLoader.java, line(s) 161,199,53,83,89,95,100,105,112,123,133,164,182,186,205,216,225
im/ciwpiyywbh/messenger/NotificationBadge.java, line(s) 180,449
im/ciwpiyywbh/messenger/NotificationCenter.java, line(s) 941
im/ciwpiyywbh/messenger/NotificationImageProvider.java, line(s) 106
im/ciwpiyywbh/messenger/NotificationsController.java, line(s) 224,362,1980,3240,4646,200,205,212,235,276,310,329,1353,1367,1830,1906,1919,1932,1959,1963,1972,1986,2044,2076,2350,2986,2998,3135,4720,4754,4758,4767,3317,3483,3829,4038,4105,4254,4408,4453,4460,4613,4661
im/ciwpiyywbh/messenger/ScreenReceiver.java, line(s) 13,27
im/ciwpiyywbh/messenger/SecretChatHelper.java, line(s) 557,1109,1593,1594,632,655,740,1271,1278,1442,1588,1604,1665,1674,1870,1891,1905,2014,2043,2087,2104
im/ciwpiyywbh/messenger/SendMessagesHelper.java, line(s) 142,1637,2345,7517,7754,7775,7783,7789,186,191,200,863,880,1285,2484,2971,4574,4580,4740,4745,4796,4855,4879,5142,5154,5178,5775,5801,5825,6469,6540,7111,7215,7250,7285,7669,7674,7679,7692,7707
im/ciwpiyywbh/messenger/SharedConfig.java, line(s) 709,155,287,309,323,383,680
im/ciwpiyywbh/messenger/SmsReceiver.java, line(s) 49
im/ciwpiyywbh/messenger/UserConfig.java, line(s) 188
im/ciwpiyywbh/messenger/Utilities.java, line(s) 72,223,239,268,281,292,304,323,340,371
im/ciwpiyywbh/messenger/VideoEditedInfo.java, line(s) 69
im/ciwpiyywbh/messenger/VideoEncodingService.java, line(s) 36,86,54
im/ciwpiyywbh/messenger/WearDataLayerListenerService.java, line(s) 38,46,62,231,238,55,225,242,331
im/ciwpiyywbh/messenger/XiaomiUtilities.java, line(s) 42
im/ciwpiyywbh/messenger/browser/Browser.java, line(s) 233,268,103,118,217,308,319
im/ciwpiyywbh/messenger/camera/CameraController.java, line(s) 156,178,536,553,572,292,308,313,401,423,450,462,494,526,579,608,656,684,687,704,710,740,759,780,835,840,846,851,859,882
im/ciwpiyywbh/messenger/camera/CameraSession.java, line(s) 199,203,164,240,256,327,340,356,361,440
im/ciwpiyywbh/messenger/secretmedia/ExtendedDefaultDataSource.java, line(s) 198
im/ciwpiyywbh/messenger/support/JobIntentService.java, line(s) 136
im/ciwpiyywbh/messenger/support/customtabs/CustomTabsSessionToken.java, line(s) 19,28,37,46
im/ciwpiyywbh/messenger/support/customtabsclient/shared/CustomTabsHelper.java, line(s) 84
im/ciwpiyywbh/messenger/support/fingerprint/FingerprintManagerCompatApi23.java, line(s) 36,45,54
im/ciwpiyywbh/messenger/utils/PlayerUtils.java, line(s) 801,399,489,511,533,543,567,612,654,691,718,781,853,912,964,1024,1095,1532,1795,1867,2283,2293,2305,2316,2327,2338,2349
im/ciwpiyywbh/messenger/utils/SelectorUtils.java, line(s) 86
im/ciwpiyywbh/messenger/voip/AppConnectionService.java, line(s) 31,68,48,58,16,24
im/ciwpiyywbh/messenger/voip/AudioRecordJNI.java, line(s) 239,64,77,93,112,135,176,200,230,108,208,61,74,90
im/ciwpiyywbh/messenger/voip/AudioTrackJNI.java, line(s) 40,63,109,119,117,34
im/ciwpiyywbh/messenger/voip/JNIUtilities.java, line(s) 90
im/ciwpiyywbh/messenger/voip/VoIPBaseService.java, line(s) 600,689,744,843,881,888,894,1064,1260,1419,1430,1458,1470,1477,180,188,286,534,571,647,735,824,853,1001,1018,1173,1338,1349
im/ciwpiyywbh/messenger/voip/VoIPServerConfig.java, line(s) 19
im/ciwpiyywbh/messenger/voip/VoIPService.java, line(s) 364,449,455,462,699,718,749,756,787,865,1011,1128,1148,1303,97,284,340,362,396,419,468,521,576,586,692,723,895,1085,1142,1189,111,389,415,566,740,796,803,813,838,911
im/ciwpiyywbh/phoneformat/PhoneFormat.java, line(s) 116,122,144,151,161,171,234,268
im/ciwpiyywbh/sqlite/SQLiteCursor.java, line(s) 98,103
im/ciwpiyywbh/sqlite/SQLiteDatabase.java, line(s) 60,77
im/ciwpiyywbh/sqlite/SQLitePreparedStatement.java, line(s) 107,108
im/ciwpiyywbh/tgnet/ConnectionsManager.java, line(s) 228,308,357,485,493,509,524,536,586,615,623,631,775,781,784,1004,1041,326,328,348,366,368,539,599,669,681,699,790,814,865,870,887,918,931,946,984,1021
im/ciwpiyywbh/tgnet/FCTokenRequestCallback.java, line(s) 45,67,68,123,128,134,142,146
im/ciwpiyywbh/tgnet/NativeByteBuffer.java, line(s) 41,134,149,175,190,210,221,257,293,304,341,391,409,425,439,452,488,518,553,569
im/ciwpiyywbh/tgnet/NetworkConfig.java, line(s) 170,177,185,218,226,242,63,87
im/ciwpiyywbh/tgnet/SerializedData.java, line(s) 72,80,88,96,127,150,179,194,209,224,260,271,307,318,353,380,395,436,470,486,503,523
im/ciwpiyywbh/tgnet/TLClassStore.java, line(s) 52
im/ciwpiyywbh/tgnet/TLJsonResolve.java, line(s) 87
im/ciwpiyywbh/translate/MD5.java, line(s) 31
im/ciwpiyywbh/ui/ArticleViewer.java, line(s) 2949,2954,3937,4530,4599,4837,5005,5054,5073,5213,5222,5249,5262,7593,7603,7706,7727,7751,10537,10945,11354,11547,11622,11628,11656,11706
im/ciwpiyywbh/ui/AudioSelectActivity.java, line(s) 286
im/ciwpiyywbh/ui/CacheControlActivity.java, line(s) 240,462,545,551,625,701,779,789,874,926,1016,1117,1163,1185
im/ciwpiyywbh/ui/CancelAccountDeletionActivity.java, line(s) 135,264,394,960,1078
im/ciwpiyywbh/ui/ChangeBioActivity.java, line(s) 230,241
im/ciwpiyywbh/ui/ChangePhoneActivity.java, line(s) 131,287,693,699,871,1498,1616
im/ciwpiyywbh/ui/ChangePhoneNumberActivity.java, line(s) 187,197
im/ciwpiyywbh/ui/ChangeSignActivity.java, line(s) 162,173
im/ciwpiyywbh/ui/ChangeUsernameActivity.java, line(s) 86,104,487,502
im/ciwpiyywbh/ui/ChannelAdminLogActivity.java, line(s) 310,989,1423,2469,2479,2489,2499,2509,2519,2529,2539,309,309,313
im/ciwpiyywbh/ui/ChannelCreateActivity.java, line(s) 773,910,1039,1051
im/ciwpiyywbh/ui/ChatActivity.java, line(s) 13634,16884,16922,17362,986,1012,1041,1061,1359,6467,7829,8034,9659,9936,10071,11630,12258,12341,14585,15130,17015,18812,18843,19282,19649,19819,19825,20753,20805,20820,22361,22423,22519,22551,22603,23430,23440,23450,23460,23470,23480,23490,23500
im/ciwpiyywbh/ui/ChatEditActivity.java, line(s) 902
im/ciwpiyywbh/ui/ChatEditTypeActivity.java, line(s) 431,443,475
im/ciwpiyywbh/ui/ChatRightsEditActivity.java, line(s) 604,631
im/ciwpiyywbh/ui/ChatUsersActivity.java, line(s) 2347,2834
im/ciwpiyywbh/ui/ContactAddActivity.java, line(s) 182
im/ciwpiyywbh/ui/ContactsActivity.java, line(s) 638,740,824
im/ciwpiyywbh/ui/ContentPreviewViewer.java, line(s) 792,828,860,881,892,986
im/ciwpiyywbh/ui/CountrySelectActivity.java, line(s) 357,518,529
im/ciwpiyywbh/ui/DialogsActivity.java, line(s) 1901,2772
im/ciwpiyywbh/ui/DocumentSelectActivity.java, line(s) 740,154,176,525,765,775,782,810,836,863
im/ciwpiyywbh/ui/ExternalActionActivity.java, line(s) 591,595,88,392,438
im/ciwpiyywbh/ui/GroupCreateFinalActivity.java, line(s) 152
im/ciwpiyywbh/ui/GroupInviteActivity.java, line(s) 141,156
im/ciwpiyywbh/ui/GroupStickersActivity.java, line(s) 724
im/ciwpiyywbh/ui/IdenticonActivity.java, line(s) 71
im/ciwpiyywbh/ui/IndexActivity.java, line(s) 689,721,724
im/ciwpiyywbh/ui/InviteContactsActivity.java, line(s) 590,633,806,832
im/ciwpiyywbh/ui/LanguageSelectActivity.java, line(s) 264,275
im/ciwpiyywbh/ui/LaunchActivity.java, line(s) 516,562,571,596,637,681,4099,4332,4915,4943,5043,5047,227,486,532,1011,1106,1191,1213,2175,2971,3122,3170,3224,3284,3358,3451,3468,3485,3506,3534,3590,3629,3737,3762,3772,3980,4091,4197,4204,4435,4446,4691,4877,4975,5170,5234,1170
im/ciwpiyywbh/ui/LaunchAgDialogActivity.java, line(s) 40
im/ciwpiyywbh/ui/LocationActivity.java, line(s) 215,270,799,984,1094,1144,1189,1201,1402,1486,1546,1563,1572
im/ciwpiyywbh/ui/LoginActivity.java, line(s) 371,426,718,1143,1148,1333,2031,2154,4030
im/ciwpiyywbh/ui/Media1Activity.java, line(s) 2189
im/ciwpiyywbh/ui/MediaActivity.java, line(s) 2219
im/ciwpiyywbh/ui/NewContactActivity.java, line(s) 478,488,611
im/ciwpiyywbh/ui/NotificationsCustomSettingsActivity.java, line(s) 400,809,835,865
im/ciwpiyywbh/ui/NotificationsSettingsActivity.java, line(s) 449,475,508,703
im/ciwpiyywbh/ui/PasscodeActivity.java, line(s) 489,624
im/ciwpiyywbh/ui/PassportActivity.java, line(s) 1080,3068,3553,3847,3959,4740,5490,6104,6171,7999,8066,8253,8324,8481,9216,9334
im/ciwpiyywbh/ui/PeopleNearbyActivity.java, line(s) 432,362,568
im/ciwpiyywbh/ui/PhoneBookSelectActivity.java, line(s) 223
im/ciwpiyywbh/ui/PhonebookShareActivity.java, line(s) 520,571,613
im/ciwpiyywbh/ui/PhotoCropActivity.java, line(s) 347,455,333,338,355
im/ciwpiyywbh/ui/PhotoViewer.java, line(s) 1391,4979,10591,10598,10606,10612,456,786,1908,2548,2561,2885,3027,3824,3880,3908,3964,3991,4397,4404,4627,4648,4743,4803,4816,5072,5079,7223,8189,8479,8516,8597,8827,8918,9701,10618
im/ciwpiyywbh/ui/PopupNotificationActivity.java, line(s) 550,1493
im/ciwpiyywbh/ui/PrivacyControlActivity.java, line(s) 113,714
im/ciwpiyywbh/ui/PrivacySettingsActivity.java, line(s) 437,515
im/ciwpiyywbh/ui/ProfileActivity.java, line(s) 355,836,857,1644,1658,1673,1697,2777
im/ciwpiyywbh/ui/ProfileNotificationsActivity.java, line(s) 527,548
im/ciwpiyywbh/ui/SecretMediaViewer.java, line(s) 537,543,586,626,894,1044,1467
im/ciwpiyywbh/ui/SessionsActivity.java, line(s) 359,385
im/ciwpiyywbh/ui/SettingsActivity.java, line(s) 2796
im/ciwpiyywbh/ui/ShareActivity.java, line(s) 76,98
im/ciwpiyywbh/ui/StickersActivity.java, line(s) 415,424,516
im/ciwpiyywbh/ui/TestActivity.java, line(s) 35
im/ciwpiyywbh/ui/ThemeActivity.java, line(s) 1032,1044,1126,1131,1172,1506,1520,1534,1563
im/ciwpiyywbh/ui/ThemeSetUrlActivity.java, line(s) 108,126,450,461,684,695
im/ciwpiyywbh/ui/TwoStepVerificationActivity.java, line(s) 175,1015
im/ciwpiyywbh/ui/VoIPActivity.java, line(s) 225
im/ciwpiyywbh/ui/WallpaperActivity.java, line(s) 912,919,938,954,981,1088
im/ciwpiyywbh/ui/WebviewActivity.java, line(s) 94,199,300,310,342,523,326,332
im/ciwpiyywbh/ui/actionbar/ActionBarLayout.java, line(s) 184,1436,1628,2216
im/ciwpiyywbh/ui/actionbar/ActionBarPopupWindow.java, line(s) 102,319,381
im/ciwpiyywbh/ui/actionbar/AlertDialog.java, line(s) 904
im/ciwpiyywbh/ui/actionbar/BaseFragment.java, line(s) 198,210,235,250,346,377,446,457,494,508
im/ciwpiyywbh/ui/actionbar/BottomSheet.java, line(s) 655,1052,1116,1134
im/ciwpiyywbh/ui/actionbar/DrawerLayoutContainer.java, line(s) 401
im/ciwpiyywbh/ui/actionbar/Theme.java, line(s) 3224,3265,1184,1240,1248,2140,2170,2844,2851,2903,2929,3018,3389,3423,3461,3478,3673,3693,3707,3792,3835,3869,3924,3961,3998,4004,4138,4142,4223,4235,5433,5439,5470,5585,5595,5610,5616
im/ciwpiyywbh/ui/actionbar/ThemeDescription.java, line(s) 709
im/ciwpiyywbh/ui/actionbar/XAlertDialog.java, line(s) 944,996
im/ciwpiyywbh/ui/adapters/BaseLocationAdapter.java, line(s) 61,83
im/ciwpiyywbh/ui/adapters/ContactsAdapter.java, line(s) 97
im/ciwpiyywbh/ui/adapters/DialogsAdapter.java, line(s) 225
im/ciwpiyywbh/ui/adapters/DialogsSearchAdapter.java, line(s) 375,416,436,843,1385
im/ciwpiyywbh/ui/adapters/PhonebookSearchAdapter.java, line(s) 52,68
im/ciwpiyywbh/ui/adapters/SearchAdapter.java, line(s) 93,113,362
im/ciwpiyywbh/ui/adapters/SearchAdapterHelper.java, line(s) 375,494,497,521,538,597
im/ciwpiyywbh/ui/bottom/BottomBarLayout.java, line(s) 169
im/ciwpiyywbh/ui/cell/FmtDialogCell.java, line(s) 381,746,1087,1860,1891,1740
im/ciwpiyywbh/ui/cells/AboutLinkCell.java, line(s) 127,132,160,212
im/ciwpiyywbh/ui/cells/ArchiveHintCell.java, line(s) 53,58
im/ciwpiyywbh/ui/cells/AudioPlayerCell.java, line(s) 68,73
im/ciwpiyywbh/ui/cells/BotHelpCell.java, line(s) 99,141,146,174
im/ciwpiyywbh/ui/cells/ChatActionCell.java, line(s) 351,356
im/ciwpiyywbh/ui/cells/ChatMessageCell.java, line(s) 1066,1094,1136,1150,1206,1217,1305,1317,3624,3702,3768,3851,3972,4050,4155,4262,4337,4424,4514,6331,6752,6774,6796,6819,7700,7808,9539,9636,9664,10606,11275,11285,12865,12948,13072,13085,14015,6735,10321,13282,13392
im/ciwpiyywbh/ui/cells/ContextLinkCell.java, line(s) 153,174,229
im/ciwpiyywbh/ui/cells/DialogCell.java, line(s) 368,842,1147,1238,1297,1312,1905,1936,1783
im/ciwpiyywbh/ui/cells/DialogMeUrlCell.java, line(s) 384
im/ciwpiyywbh/ui/cells/DrawerActionCell.java, line(s) 53
im/ciwpiyywbh/ui/cells/DrawerProfileCell.java, line(s) 111,161
im/ciwpiyywbh/ui/cells/PopMenuCell.java, line(s) 46
im/ciwpiyywbh/ui/cells/SharedAudioCell.java, line(s) 84,89
im/ciwpiyywbh/ui/cells/SharedLinkCell.java, line(s) 246,303,318,328,349,467,478
im/ciwpiyywbh/ui/cells/ThemeCell.java, line(s) 182,211
im/ciwpiyywbh/ui/cells/ThemesHorizontalListCell.java, line(s) 313,769,779,786,869
im/ciwpiyywbh/ui/components/AlertsCreator.java, line(s) 1041,1094,1109
im/ciwpiyywbh/ui/components/AnimatedFileDrawable.java, line(s) 194,225
im/ciwpiyywbh/ui/components/AudioPlayerAlert.java, line(s) 902,1306,1321
im/ciwpiyywbh/ui/components/AvatarDrawable.java, line(s) 240
im/ciwpiyywbh/ui/components/BlockingUpdateView.java, line(s) 249,270,274
im/ciwpiyywbh/ui/components/ChatActivityEnterView.java, line(s) 1849,1888,3321,4640,4689,4899,5048,5063,5077,5091,5114,5126,5174,5686
im/ciwpiyywbh/ui/components/ChatAttachAlert.java, line(s) 3707,3715,3719,2469,3695,3747,3756,3778
im/ciwpiyywbh/ui/components/ChatAvatarContainer.java, line(s) 287
im/ciwpiyywbh/ui/components/ClippingImageView.java, line(s) 75,153
im/ciwpiyywbh/ui/components/EditTextBoldCursor.java, line(s) 191,329,788,797
im/ciwpiyywbh/ui/components/EditTextCaption.java, line(s) 317,344,398
im/ciwpiyywbh/ui/components/EditTextEmoji.java, line(s) 92,497
im/ciwpiyywbh/ui/components/EmbedBottomSheet.java, line(s) 214,322,349,363,385,431,504,511,690,709,723,805,824,902
im/ciwpiyywbh/ui/components/EmojiView.java, line(s) 738,1664,2761,4709
im/ciwpiyywbh/ui/components/EmojiViewV2.java, line(s) 591,1457,3391
im/ciwpiyywbh/ui/components/ForegroundDetector.java, line(s) 79,111,86,118
im/ciwpiyywbh/ui/components/ImageUpdater.java, line(s) 274,304,327,341
im/ciwpiyywbh/ui/components/InstantCameraView.java, line(s) 494,510,516,873,892,914,1049,1295,1316,1623,1659,1670,1676,1680,1688,1733,1804,2088,457,934,947,979,991,1057,1064,1073,1085,1096,1106,1136,1163,1168,1177,1227,1386,1391,1399,1562,1711,1766,1777,1927,1936,1946,1954,2045,2158
im/ciwpiyywbh/ui/components/LetterDrawable.java, line(s) 78
im/ciwpiyywbh/ui/components/PasscodeView.java, line(s) 144,261,928,938,954,1005,1038,1056
im/ciwpiyywbh/ui/components/PhotoFilterView.java, line(s) 408,427,440,447,456,468,479,489,744,795,1000
im/ciwpiyywbh/ui/components/PhotoPaintView.java, line(s) 440,1261,1268,1291
im/ciwpiyywbh/ui/components/PhotoViewerCaptionEnterView.java, line(s) 116,329,356,421,537,566,580,613,694,707
im/ciwpiyywbh/ui/components/PipRoundVideoView.java, line(s) 260
im/ciwpiyywbh/ui/components/PipVideoView.java, line(s) 409
im/ciwpiyywbh/ui/components/RLottieDrawable.java, line(s) 222,346,423
im/ciwpiyywbh/ui/components/RadioButton.java, line(s) 61,160
im/ciwpiyywbh/ui/components/RecyclerListView.java, line(s) 719,923,937,1603,1609
im/ciwpiyywbh/ui/components/ShareAlert.java, line(s) 975,1516
im/ciwpiyywbh/ui/components/SpannableStringLight.java, line(s) 24,41,58
im/ciwpiyywbh/ui/components/StaticLayoutEx.java, line(s) 57,120,177
im/ciwpiyywbh/ui/components/StickersAlert.java, line(s) 125,830,862,982
im/ciwpiyywbh/ui/components/TermsOfServiceView.java, line(s) 169
im/ciwpiyywbh/ui/components/ThemeEditorView.java, line(s) 101,109,1318,1540,1747
im/ciwpiyywbh/ui/components/TimerDrawable.java, line(s) 92
im/ciwpiyywbh/ui/components/VideoTimelinePlayView.java, line(s) 299,363,392
im/ciwpiyywbh/ui/components/VideoTimelineView.java, line(s) 228,292,321
im/ciwpiyywbh/ui/components/WallpaperUpdater.java, line(s) 105,108,133,159,193,208,223,238
im/ciwpiyywbh/ui/components/WebPlayerView.java, line(s) 797,395,485,507,529,539,563,608,650,687,714,777,849,908,960,1020,1091,1528,1791,1839,2212,2222,2234,2245,2256,2267,2278
im/ciwpiyywbh/ui/components/compress/Checker.java, line(s) 54,74,80,105,113
im/ciwpiyywbh/ui/components/compress/Luban.java, line(s) 87,86
im/ciwpiyywbh/ui/components/paint/RenderView.java, line(s) 305,312,321,333,344,354,373,493
im/ciwpiyywbh/ui/components/paint/Shader.java, line(s) 20,28,81,91
im/ciwpiyywbh/ui/components/paint/Slice.java, line(s) 24,54,88
im/ciwpiyywbh/ui/components/paint/Utils.java, line(s) 12
im/ciwpiyywbh/ui/components/toast/ToastUtils.java, line(s) 75
im/ciwpiyywbh/ui/components/voip/CallSwipeView.java, line(s) 94
im/ciwpiyywbh/ui/components/voip/DarkTheme.java, line(s) 2380
im/ciwpiyywbh/ui/components/voip/VoIPHelper.java, line(s) 154,561
im/ciwpiyywbh/ui/dialogs/McShareDialog.java, line(s) 191
im/ciwpiyywbh/ui/fragments/BaseFmts.java, line(s) 226,279,293,316
im/ciwpiyywbh/ui/fragments/CallRecordsFragment.java, line(s) 585,194
im/ciwpiyywbh/ui/fragments/ContactsFragment.java, line(s) 621
im/ciwpiyywbh/ui/fragments/DialogsFragment.java, line(s) 502,518,2261
im/ciwpiyywbh/ui/fragments/DiscoveryFragment.java, line(s) 144,295
im/ciwpiyywbh/ui/fragments/MeFragmentV2.java, line(s) 478,1003,1062,1077
im/ciwpiyywbh/ui/fragments/TabWebFragment.java, line(s) 189,293,333,356,520,317,323
im/ciwpiyywbh/ui/fragments/adapter/FmtContactsAdapter.java, line(s) 139
im/ciwpiyywbh/ui/hui/CameraViewActivity.java, line(s) 2653,2661,2665,1795,2641,2693,2702,2724
im/ciwpiyywbh/ui/hui/CharacterParser.java, line(s) 40
im/ciwpiyywbh/ui/hui/WebViewAppCompatActivity.java, line(s) 107,224
im/ciwpiyywbh/ui/hui/adapter/AddNewCallAdapter.java, line(s) 76
im/ciwpiyywbh/ui/hui/adapter/CreateGroupAdapter.java, line(s) 95
im/ciwpiyywbh/ui/hui/adapter/CreateSecureAdapter.java, line(s) 80
im/ciwpiyywbh/ui/hui/adapter/MyDialogsAdapter.java, line(s) 234
im/ciwpiyywbh/ui/hui/adapter/NewChatAdapter.java, line(s) 85
im/ciwpiyywbh/ui/hui/adapter/SelectContactsAdapter.java, line(s) 84
im/ciwpiyywbh/ui/hui/adapter/StartChatAdapter.java, line(s) 86
im/ciwpiyywbh/ui/hui/adapter/grouping/AddGroupingUserAdapter.java, line(s) 83
im/ciwpiyywbh/ui/hui/adapter/pageAdapter/PageSelectionAdapter.java, line(s) 71
im/ciwpiyywbh/ui/hui/adapter/pageAdapter/PageStickerAdapter.java, line(s) 123
im/ciwpiyywbh/ui/hui/chats/CreateGroupFinalActivity.java, line(s) 168
im/ciwpiyywbh/ui/hui/chats/GroupShareActivity.java, line(s) 213
im/ciwpiyywbh/ui/hui/chats/MryDialogsActivity.java, line(s) 1784,2610
im/ciwpiyywbh/ui/hui/chats/NewChatActivity.java, line(s) 396
im/ciwpiyywbh/ui/hui/chats/ProfileGroupActivity.java, line(s) 367,847,868,1155,1612,1626,1641,1665,2734
im/ciwpiyywbh/ui/hui/chats/StartChatActivity.java, line(s) 345
im/ciwpiyywbh/ui/hui/contacts/AddContactsActivity.java, line(s) 198
im/ciwpiyywbh/ui/hui/contacts/PhonebookUsersActivity.java, line(s) 533
im/ciwpiyywbh/ui/hui/discovery/ActionIntroActivity.java, line(s) 465,512,549,597
im/ciwpiyywbh/ui/hui/discovery/NearPersonAndGroupActivity.java, line(s) 482,486,491,494,499,552,419,645
im/ciwpiyywbh/ui/hui/discovery/QrScanActivity.java, line(s) 319,344
im/ciwpiyywbh/ui/hui/discoveryweb/DiscoveryJumpPausedFloatingView.java, line(s) 249,524
im/ciwpiyywbh/ui/hui/discoveryweb/DiscoveryJumpToPage.java, line(s) 125,153,553,592,762,537,543
im/ciwpiyywbh/ui/hui/friendscircle/fcHelper/OKHttpStreamFetcher.java, line(s) 43,42
im/ciwpiyywbh/ui/hui/friendscircle/okhttphelper/AESHelper.java, line(s) 63,75
im/ciwpiyywbh/ui/hui/friendscircle/okhttphelper/MD5Utils.java, line(s) 19,84,88,89
im/ciwpiyywbh/ui/hui/friendscircle/okhttphelper/OkHttpStringCallBack.java, line(s) 77,68,78
im/ciwpiyywbh/ui/hui/friendscircle_v1/adapter/FcDetailAdapter.java, line(s) 193
im/ciwpiyywbh/ui/hui/friendscircle_v1/adapter/FcHomeAdapter.java, line(s) 184,678
im/ciwpiyywbh/ui/hui/friendscircle_v1/adapter/UserFcListAdapter.java, line(s) 170
im/ciwpiyywbh/ui/hui/friendscircle_v1/base/BaseFcActivity.java, line(s) 316,395,494,228,242,266,347,369,517
im/ciwpiyywbh/ui/hui/friendscircle_v1/base/BaseFcFragment.java, line(s) 399,478,577,269,283,306,430,452,600
im/ciwpiyywbh/ui/hui/friendscircle_v1/base/CommFcListActivity.java, line(s) 190
im/ciwpiyywbh/ui/hui/friendscircle_v1/base/CommFcListFragment.java, line(s) 195,199,208
im/ciwpiyywbh/ui/hui/friendscircle_v1/fragments/FcFollowFragment.java, line(s) 330,867
im/ciwpiyywbh/ui/hui/friendscircle_v1/fragments/FcHomeFragment.java, line(s) 247,751,807
im/ciwpiyywbh/ui/hui/friendscircle_v1/fragments/FcRecommendFragment.java, line(s) 241,727,783
im/ciwpiyywbh/ui/hui/friendscircle_v1/helper/FcDBHelper.java, line(s) 149,154,163,165
im/ciwpiyywbh/ui/hui/friendscircle_v1/player/logger/ExoPlayerLogger.java, line(s) 167,172,186,189,200,206,209,213,223,226,232,242,250,255,259,263,265,270,272,277,282,287,292,297,302,307,312,317,322,332,337,342,359,362,365,368,371,374,376,379,177,351
im/ciwpiyywbh/ui/hui/friendscircle_v1/player/player/AbsBaseVideoPlayer.java, line(s) 36,47,56,63,70,78,90
im/ciwpiyywbh/ui/hui/friendscircle_v1/player/player/VideoPlayerManager.java, line(s) 381
im/ciwpiyywbh/ui/hui/friendscircle_v1/player/utils/Utils.java, line(s) 111,115
im/ciwpiyywbh/ui/hui/friendscircle_v1/ui/FcPageDetailActivity.java, line(s) 169,216,344,363,876
im/ciwpiyywbh/ui/hui/friendscircle_v1/ui/FcPageMineActivity.java, line(s) 932,985
im/ciwpiyywbh/ui/hui/friendscircle_v1/ui/FcPageOthersActivity.java, line(s) 982
im/ciwpiyywbh/ui/hui/friendscircle_v1/ui/FcPublishActivity.java, line(s) 744,990,1430,879,1433,1443
im/ciwpiyywbh/ui/hui/friendscircle_v1/ui/FcTopicMainActivity.java, line(s) 804,857
im/ciwpiyywbh/ui/hui/friendscircle_v1/ui/ImagePreSelectorActivity.java, line(s) 2439,2448,2452,1651,2427,2478,2487,2510
im/ciwpiyywbh/ui/hui/friendscircle_v1/ui/ImagePreviewActivity.java, line(s) 1350,10308,10315,10323,10329,538,868,1855,2507,2520,2824,2965,3712,3767,3795,3853,3880,4289,4296,4503,4524,4619,4677,4690,7142,8030,8304,8341,8605,8691,9439,10335
im/ciwpiyywbh/ui/hui/friendscircle_v1/ui/ImageSelectorActivity.java, line(s) 3080,3088,3092,2122,3068,3120,3129,3151
im/ciwpiyywbh/ui/hui/friendscircle_v1/utils/KeyboardUtils.java, line(s) 44,179,186,222,158,194,210
im/ciwpiyywbh/ui/hui/friendscircle_v1/utils/StatusBarHeightUtil.java, line(s) 21
im/ciwpiyywbh/ui/hui/friendscircle_v1/utils/ViewUtil.java, line(s) 18
im/ciwpiyywbh/ui/hui/friendscircle_v1/view/FCIndexBar.java, line(s) 119
im/ciwpiyywbh/ui/hui/friendscircle_v1/view/FcChildReplyListDialog.java, line(s) 215
im/ciwpiyywbh/ui/hui/friendscircle_v1/view/FcDoReplyDialog.java, line(s) 186,393
im/ciwpiyywbh/ui/hui/friendscircle_v1/view/flowLayout/TagAdapter.java, line(s) 88,92
im/ciwpiyywbh/ui/hui/friendscircle_v1/view/flowLayout/TagFlowLayout.java, line(s) 121
im/ciwpiyywbh/ui/hui/friendscircle_v1/view/panel/KPSwitchRootLayoutHandler.java, line(s) 34,45,49,55,59
im/ciwpiyywbh/ui/hui/friendscircle_v1/view/richtext/TextCommonUtils.java, line(s) 193,211,212
im/ciwpiyywbh/ui/hui/friendscircle_v1/view/toast/FcToastUtils.java, line(s) 80
im/ciwpiyywbh/ui/hui/login/ChangePersonalInformationActivity.java, line(s) 521,506
im/ciwpiyywbh/ui/hui/login/HloginActivity.java, line(s) 367,422,696,1156,1166,1393,2134,2257,4121
im/ciwpiyywbh/ui/hui/login/LoginContronllerActivity.java, line(s) 1195,1116,1168,1171,1172,1196,1234
im/ciwpiyywbh/ui/hui/login/LoginPasswordContronllerActivity.java, line(s) 191,356
im/ciwpiyywbh/ui/hui/mine/AboutAppActivity.java, line(s) 212,301,353,368
im/ciwpiyywbh/ui/hui/mine/DataUsageActivity.java, line(s) 358
im/ciwpiyywbh/ui/hui/mine/MryLanguageSelectActivity.java, line(s) 269,280
im/ciwpiyywbh/ui/hui/mine/MrySessionsActivity.java, line(s) 726,751
im/ciwpiyywbh/ui/hui/mine/MryThemeActivity.java, line(s) 1012,1043,1055,1137,1142,1183,1517,1531,1545,1574
im/ciwpiyywbh/ui/hui/mine/PrivacyAndSafeActivity.java, line(s) 276
im/ciwpiyywbh/ui/hui/mine/QrCodeActivity.java, line(s) 362
im/ciwpiyywbh/ui/hui/packet/RedpktGroupSendActivity.java, line(s) 774,991,1156,1208,1223
im/ciwpiyywbh/ui/hui/packet/RedpktSendActivity.java, line(s) 469,670,842,894,909
im/ciwpiyywbh/ui/hui/packet/SelecteContactsActivity.java, line(s) 863
im/ciwpiyywbh/ui/hui/packet/pop/RedPacketViewHolder.java, line(s) 223,228,233
im/ciwpiyywbh/ui/hui/transfer/TransferSendActivity.java, line(s) 469,705,894,946,961
im/ciwpiyywbh/ui/hui/transfer/TransferStatusActivity.java, line(s) 409,584
im/ciwpiyywbh/ui/hui/views/SilderRelativeLayout.java, line(s) 90,100
im/ciwpiyywbh/ui/hviews/MryCheckBox.java, line(s) 102
im/ciwpiyywbh/ui/hviews/MyScrollView.java, line(s) 483,543
im/ciwpiyywbh/ui/hviews/PasswordEditText.java, line(s) 153,314
im/ciwpiyywbh/ui/hviews/dialogs/XDialog.java, line(s) 681
im/ciwpiyywbh/ui/hviews/dragView/DragCallBack.java, line(s) 235
im/ciwpiyywbh/ui/hviews/dragView/DragHelperFrameLayout.java, line(s) 167
im/ciwpiyywbh/ui/hviews/helper/MryDeviceHelper.java, line(s) 48,76
im/ciwpiyywbh/ui/hviews/helper/MryDrawableHelper.java, line(s) 157
im/ciwpiyywbh/ui/hviews/helper/MryNotchHelper.java, line(s) 46,59,62,357,359,361,43,56
im/ciwpiyywbh/ui/hviews/page/PagerConfig.java, line(s) 43,37
im/ciwpiyywbh/ui/hviews/page/PagerGridLayoutManager.java, line(s) 468,472,505,509
im/ciwpiyywbh/ui/hviews/pop/BasePopup.java, line(s) 150,156
im/ciwpiyywbh/ui/hviews/slidemenu/SwipeLayout.java, line(s) 820,825
im/ciwpiyywbh/ui/newcall/NewCallActivity.java, line(s) 333
im/ciwpiyywbh/ui/settings/CacheControlSettingActivity.java, line(s) 196
im/ciwpiyywbh/ui/settings/NoticeAndSoundSettingActivity.java, line(s) 269,295,328,604,662,720
im/ciwpiyywbh/ui/utils/AppUpdater.java, line(s) 91,146,159
im/ciwpiyywbh/ui/utils/ChatActionBarHelper.java, line(s) 290
im/ciwpiyywbh/ui/utils/DownloadUtils.java, line(s) 194,227
im/ciwpiyywbh/ui/utils/OpenInstallUitl.java, line(s) 57,87
im/ciwpiyywbh/ui/utils/QrCodeParseUtil.java, line(s) 258,274,322,343,409
im/ciwpiyywbh/ui/utils/ThirdPartSdkInitUtil.java, line(s) 43,73,103,100
im/ciwpiyywbh/ui/utils/number/MoneyUtil.java, line(s) 145
im/ciwpiyywbh/ui/utils/picture/PictureUtil.java, line(s) 85
im/ciwpiyywbh/ui/utils/translate/DecodeEngine.java, line(s) 116,120,130,132,140,165,249,270,297,313,319,349,360,401,404,439,466
im/ciwpiyywbh/ui/utils/translate/ssrc/SSRC.java, line(s) 1348,63,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,332,336,339,2727,2741,2820,2855,2856,2857,2858,2874,2877,2880,2940,3026,3184,3292,3379,3380,3381,3382,3398,3401,3404,3466
im/ciwpiyywbh/ui/utils/translate/utils/AudioFileUtils.java, line(s) 31,34,59,117,121,141,159
pub/devrel/easypermissions/EasyPermissions.java, line(s) 138,140,34
pub/devrel/easypermissions/helper/ActivityPermissionHelper.java, line(s) 36
pub/devrel/easypermissions/helper/BaseSupportPermissionsHelper.java, line(s) 20

信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
im/ciwpiyywbh/messenger/AndroidUtilities.java, line(s) 10,1704
im/ciwpiyywbh/ui/ChangeUsernameActivity.java, line(s) 5,83
im/ciwpiyywbh/ui/ChannelCreateActivity.java, line(s) 9,770
im/ciwpiyywbh/ui/ChatActivity.java, line(s) 11,19642
im/ciwpiyywbh/ui/ChatEditTypeActivity.java, line(s) 5,428,440
im/ciwpiyywbh/ui/GroupInviteActivity.java, line(s) 5,137
im/ciwpiyywbh/ui/PhonebookShareActivity.java, line(s) 5,568,602
im/ciwpiyywbh/ui/ProfileActivity.java, line(s) 11,1641,1670
im/ciwpiyywbh/ui/StickersActivity.java, line(s) 5,421
im/ciwpiyywbh/ui/ThemeSetUrlActivity.java, line(s) 5,105
im/ciwpiyywbh/ui/components/EmbedBottomSheet.java, line(s) 10,803
im/ciwpiyywbh/ui/components/ShareAlert.java, line(s) 9,968
im/ciwpiyywbh/ui/dialogs/McShareDialog.java, line(s) 6,224
im/ciwpiyywbh/ui/hui/chats/ProfileGroupActivity.java, line(s) 11,1609,1638
im/ciwpiyywbh/ui/hui/discovery/QrScanResultActivity.java, line(s) 5,63
im/ciwpiyywbh/ui/hui/packet/BillDetailsActivity.java, line(s) 5,1004

安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
com/bjz/comm/net/factory/ApiFactory.java, line(s) 50,50
com/bjz/comm/net/factory/ApiGameFactory.java, line(s) 48,48
com/bjz/comm/net/factory/ApiMPFactory.java, line(s) 46,46
com/bjz/comm/net/factory/ApiTranslateAudioFactory.java, line(s) 40,40
com/zhy/http/okhttp/https/HttpsUtils.java, line(s) 107,171,42,105,105,169,169

安全 此应用程序可能具有Root检测功能 

此应用程序可能具有Root检测功能
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
im/ciwpiyywbh/ui/utils/SimulatorUtil.java, line(s) 18

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.shareinstall.com.cn) 通信。 

{'ip': '159.226.242.43', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '扬州', 'latitude': '32.397221', 'longitude': '119.435600'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.ntsc.ac.cn) 通信。 

{'ip': '159.226.242.43', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.taobao.com) 通信。 

{'ip': '222.186.18.188', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '镇江', 'latitude': '32.209366', 'longitude': '119.434372'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (impyq.gz.bcebos.com) 通信。 

{'ip': '121.228.183.252', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '苏州', 'latitude': '31.311365', 'longitude': '120.617691'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.163.com) 通信。 

{'ip': '49.79.224.243', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '南通', 'latitude': '32.030296', 'longitude': '120.874779'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.linkedin.com) 通信。 

{'ip': '52.131.37.152', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

安全评分: ( Jianyuwyh 2.7.0)