安全分析报告： 비蝶 v9.6.6

安全分数


安全分数 47/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

1

用户/设备跟踪器


调研结果

高危 4
中危 47
信息 3
安全 1
关注 5

高危 App 链接 assetlinks.json 文件未找到 

[android:name=][android:host=http://telegram.me]
App Link 资产验证 URL （http://telegram.me/.well-known/assetlinks.json） 未找到或配置不正确。（状态代码：301）。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确，则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击，泄露 URI 中的敏感数据，例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android：autoVerify=“true”] 启用验证来验证 App Link 网域。

高危 App 链接 assetlinks.json 文件未找到 

[android:name=][android:host=http://t.me]
App Link 资产验证 URL （http://t.me/.well-known/assetlinks.json） 未找到或配置不正确。（状态代码：301）。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确，则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击，泄露 URI 中的敏感数据，例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android：autoVerify=“true”] 启用验证来验证 App Link 网域。

高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击 

如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7

Files:
org/telegram/ui/ArticleViewer.java, line(s) 8153,63,64
org/telegram/ui/Components/EmbedBottomSheet.java, line(s) 740,745,34,35
org/telegram/ui/Components/PhotoViewerWebView.java, line(s) 760,775,20,21

高危 已启用远程WebView调试 

已启用远程WebView调试
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing

Files:
org/telegram/messenger/SharedConfig.java, line(s) 527,618,12

中危 应用程序已启用明文网络流量 

[android:usesCleartextTraffic=true]
应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。

中危 应用程序数据存在被泄露的风险 

未设置[android:allowBackup]标志
这个标志 [android:allowBackup]应该设置为false。默认情况下它被设置为true，允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。

中危 Service () 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Broadcast Receiver (com.google.android.gms.measurement.AppMeasurementReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Activity () 未被保护。 

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Activity () 未被保护。 

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Activity-Alias () 未被保护。 

存在一个intent-filter。
发现 Activity-Alias与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity-Alias是显式导出的。

中危 Activity-Alias () 未被保护。 

存在一个intent-filter。
发现 Activity-Alias与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity-Alias是显式导出的。

中危 Activity-Alias () 未被保护。 

存在一个intent-filter。
发现 Activity-Alias与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity-Alias是显式导出的。

中危 Activity-Alias () 未被保护。 

存在一个intent-filter。
发现 Activity-Alias与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity-Alias是显式导出的。

中危 Activity-Alias () 未被保护。 

存在一个intent-filter。
发现 Activity-Alias与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity-Alias是显式导出的。

中危 Activity-Alias () 未被保护。 

存在一个intent-filter。
发现 Activity-Alias与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity-Alias是显式导出的。

中危 Activity-Alias () 未被保护。 

存在一个intent-filter。
发现 Activity-Alias与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity-Alias是显式导出的。

中危 Activity () 未被保护。 

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Activity () 未被保护。 

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Activity () 未被保护。 

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Activity () 未被保护。 

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Broadcast Receiver (org.telegram.messenger.AutoMessageHeardReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (org.telegram.messenger.NotificationsDisabledReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (org.telegram.messenger.AutoMessageReplyReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (org.telegram.messenger.SmsReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (org.telegram.messenger.CallReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Service () 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Service () 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Service () 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Service () 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Broadcast Receiver (org.telegram.messenger.MusicPlayerReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (org.telegram.messenger.voip.VoIPMediaButtonReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (org.telegram.messenger.AppStartReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (org.telegram.messenger.RefererReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (org.telegram.messenger.ChatsWidgetProvider) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (org.telegram.messenger.ContactsWidgetProvider) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Service () 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Service () 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 高优先级的Intent (4294966796) 

[android:priority]
通过设置一个比另一个Intent更高的优先级，应用程序有效地覆盖了其他请求。

中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞 

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
com/tencent/qimei/y/g.java, line(s) 45,42
com/tencent/qimei/y/k.java, line(s) 45,43
org/telegram/ui/ArticleViewer.java, line(s) 8038,8032
org/telegram/ui/Components/BotWebViewContainer.java, line(s) 357,322
org/telegram/ui/Components/EmbedBottomSheet.java, line(s) 719,256
org/telegram/ui/Components/PhotoViewerWebView.java, line(s) 726,289
org/telegram/ui/Components/WebPlayerView.java, line(s) 1565,1572
org/telegram/ui/LoginActivity.java, line(s) 2172,3816,2170,3814
org/telegram/ui/PaymentFormActivity.java, line(s) 1406,1398,2564
org/telegram/ui/WebviewActivity.java, line(s) 230,217

中危 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
org/telegram/messenger/BuildVars.java, line(s) 136
org/telegram/messenger/ImageLoader.java, line(s) 3448
org/telegram/messenger/ImageReceiver.java, line(s) 617
org/telegram/messenger/MediaDataController.java, line(s) 254,260,259
org/telegram/messenger/PushListenerController.java, line(s) 3068
org/telegram/messenger/voip/Instance.java, line(s) 229,201,211
org/telegram/ui/Adapters/MentionsAdapter.java, line(s) 717
org/telegram/ui/ArticleViewer.java, line(s) 3969
org/telegram/ui/ChannelCreateActivity.java, line(s) 191
org/telegram/ui/ChatEditTypeActivity.java, line(s) 183
org/telegram/ui/DataAutoDownloadActivity.java, line(s) 81,96,89
org/telegram/ui/PremiumPreviewFragment.java, line(s) 1911,1853
org/telegram/ui/TopicsFragment.java, line(s) 3255,3248

中危 SHA-1是已知存在哈希冲突的弱哈希 

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/github/gzuliyujiang/oaid/impl/OppoImpl.java, line(s) 74
com/tencent/qmsp/oaid2/h0.java, line(s) 71
com/tencent/qmsp/sdk/g/g/e.java, line(s) 102
org/telegram/messenger/Utilities.java, line(s) 336,350
org/telegram/ui/PassportActivity.java, line(s) 3136

中危 应用程序使用不安全的随机数生成器 

应用程序使用不安全的随机数生成器
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/carrotsearch/randomizedtesting/Xoroshiro128PlusRandom.java, line(s) 3
com/tencent/qimei/j/a.java, line(s) 9
com/tencent/qimei/o/u.java, line(s) 29
com/tencent/qimei/s/e.java, line(s) 3
com/tencent/qmsp/sdk/f/c.java, line(s) 6
j$/util/concurrent/ThreadLocalRandom.java, line(s) 18
org/telegram/messenger/Utilities.java, line(s) 18
org/telegram/ui/Components/AudioVisualizerDrawable.java, line(s) 6
org/telegram/ui/Components/AvatarsDrawable.java, line(s) 14
org/telegram/ui/Components/BlobDrawable.java, line(s) 7
org/telegram/ui/Components/CircleBezierDrawable.java, line(s) 7
org/telegram/ui/Components/FlickerLoadingView.java, line(s) 12
org/telegram/ui/Components/GroupCallPipButton.java, line(s) 18
org/telegram/ui/Components/LineBlobDrawable.java, line(s) 6
org/telegram/ui/Components/Reactions/ReactionsEffectOverlay.java, line(s) 15
org/telegram/ui/Components/SharedMediaFastScrollTooltip.java, line(s) 16
org/telegram/ui/EmojiAnimationsOverlay.java, line(s) 12
q/rorbin/badgeview/BadgeAnimator.java, line(s) 12

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
org/telegram/ui/Components/Paint/Slice.java, line(s) 22

中危 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
com/github/gzuliyujiang/oaid/DeviceID.java, line(s) 309,310
com/hbisoft/hbrecorder/HBRecorder.java, line(s) 153
com/hbisoft/hbrecorder/ScreenRecordService.java, line(s) 167
com/lxj/xpopup/util/XPopupUtils.java, line(s) 380,403
com/tencent/qmsp/sdk/d/b.java, line(s) 57
org/telegram/messenger/AndroidUtilities.java, line(s) 660,2953,659,2035,2067,2077,2840,2841,2864
org/telegram/messenger/EmuDetector.java, line(s) 254
org/telegram/messenger/FilesMigrationService.java, line(s) 102,86,200
org/telegram/messenger/ImageLoader.java, line(s) 2040,2089,2097,1995,1996
org/telegram/messenger/MediaController.java, line(s) 4706,4708,5173,5177,5182,5184,5997
org/telegram/messenger/SharedConfig.java, line(s) 1364
org/telegram/messenger/voip/VoIPController.java, line(s) 245
org/telegram/ui/ChatActivity.java, line(s) 9988,19816,19824
org/telegram/ui/Components/ChatAttachAlertDocumentLayout.java, line(s) 1660,1700,1307,1508,1508,1508,1511,1596,1597,1609
org/telegram/ui/Components/voip/VoIPHelper.java, line(s) 797,831

中危 可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息 

可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-6

Files:
com/tencent/qimei/y/g.java, line(s) 43,42
com/tencent/qimei/y/k.java, line(s) 38,43
org/telegram/ui/JMTBaiduMapActivity.java, line(s) 83,78
org/telegram/ui/JMTMapPreviewActivity.java, line(s) 71,65

中危 IP地址泄露 

IP地址泄露


Files:
com/tencent/qimei/c/c.java, line(s) 191,204
com/tencent/qimei/upload/BuildConfig.java, line(s) 13
cos/MyCOSService.java, line(s) 368,426,397,455,388,446,378,436,370,428,393,451,412,470,405,463,410,468,364,422,380,438,398,456,404,462,387,445,400,458,369,427,384,442,413,471,381,439,406,464,386,444,392,450,377,435,363,421,403,461,408,466,371,429,361,419,407,465,296,527,374,432,394,452,373,431,401,459,379,437,357,415,382,440,390,448,367,425,411,469,389,447,409,467,391,449,360,418,372,430,375,433,358,416,402,460,359,417,362,420,366,424,385,443,395,453,376,434,383,441,399,457,365,423,396,454
org/telegram/messenger/EmuDetector.java, line(s) 20

中危 MD5是已知存在哈希冲突的弱哈希 

MD5是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/tencent/qimei/j/a.java, line(s) 29
com/tencent/qmsp/oaid2/l.java, line(s) 78
com/tencent/qmsp/sdk/a/c.java, line(s) 42,107
com/tencent/qmsp/sdk/d/a.java, line(s) 18
com/tencent/qmsp/sdk/g/b/c.java, line(s) 71
org/telegram/messenger/FileUploadOperation.java, line(s) 435
org/telegram/messenger/MessagesController.java, line(s) 5968
org/telegram/messenger/Utilities.java, line(s) 481

中危 应用程序包含隐私跟踪程序 

此应用程序有多个1隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。

中危 此应用可能包含硬编码机密信息 

从应用程序中识别出以下机密确保这些不是机密或私人信息
谷歌地图的=> "com.google.android.maps.v2.API_KEY" : "AIzaSyA-t0jLPjUt2FxrA8VPK2EiYHcYcboIR6k"
openinstall统计的=> "com.openinstall.APP_KEY" : "kpbu1t"
014b35b6184100b085b0d0572f9b5103
ABVGDE2JZIQKLMNOPRSTUFHC34WXY9678
bb392ec0-8d4d-11e0-a896-0002a5d5c51b
Ldpv3DINc8b4Mg19EF0rkWBg7d2GJMJ3
A406AAA462DF6EEC06E61D67
bGV2ZWxfaXBhX3RzcmlmLnRjdWRvcnAub3I=
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
BvyoNmnTUIqvZufrqy6EPc/QFvgcZwweLUQZMPRjS0yO7ir5gj50GehaWU1uVA==
c06c8400-8e06-11e0-9cb6-0002a5d5c51b

信息 应用程序记录日志信息,不得记录敏感信息 

应用程序记录日志信息,不得记录敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
cn/jzvd/JZTextureView.java, line(s) 43,70,71
cn/jzvd/JZUtils.java, line(s) 70
cn/jzvd/Jzvd.java, line(s) 111,122,249,393,415,509,614,654,656,665,669,786,822,679,261,385,398,452,470,492,498,542,552,562,568,573,586,612,634,640,646,689,721,846,858,931,940,950
cn/jzvd/JzvdStd.java, line(s) 111,174
com/davemorrissey/labs/subscaleview/SubsamplingScaleImageView.java, line(s) 2020,1419,1519,1523,1600,1604,583,912,1693,1702,1731,1736,2422
com/davemorrissey/labs/subscaleview/decoder/SkiaPooledImageRegionDecoder.java, line(s) 381
com/github/gzuliyujiang/oaid/OAIDLog.java, line(s) 13
com/hbisoft/hbrecorder/ScreenRecordService.java, line(s) 219
com/lxj/xpopup/animator/TranslateAnimator.java, line(s) 86,93,98
com/lxj/xpopup/core/BasePopupView.java, line(s) 877,881,885,889
com/lxj/xpopup/util/KeyboardUtils.java, line(s) 31
com/lxj/xpopup/util/XPermission.java, line(s) 304
com/lxj/xpopup/widget/SmartDivider.java, line(s) 27
com/tencent/qimei/k/a.java, line(s) 49,14,43
com/tencent/qmsp/oaid2/c.java, line(s) 11,17,23
com/tencent/qmsp/oaid2/j.java, line(s) 32,40
com/tencent/qmsp/oaid2/y.java, line(s) 15
com/tencent/qmsp/sdk/base/c.java, line(s) 11,21,27
com/tencent/qmsp/sdk/f/g.java, line(s) 11,21,27,33
com/tencent/qmsp/sdk/g/b/a.java, line(s) 36,54
com/tencent/qmsp/sdk/g/b/b.java, line(s) 39,48,42
com/tencent/qmsp/sdk/g/e/d.java, line(s) 20
cos/MyCOSService.java, line(s) 515,519
io/nlopez/smartlocation/utils/LoggerFactory.java, line(s) 49,64,69,54,59
org/telegram/PhoneFormat/PhoneFormat.java, line(s) 111,116,137,144,154,162,212
org/telegram/SQLite/SQLiteCursor.java, line(s) 98,103
org/telegram/SQLite/SQLiteDatabase.java, line(s) 60,77
org/telegram/SQLite/SQLitePreparedStatement.java, line(s) 104,112
org/telegram/messenger/AndroidUtilities.java, line(s) 1905,2083,2108,2113,2711,2846,2853,349,405,488,586,624,950,987,1214,1245,1364,1380,1638,1647,1803,1867,1897,1953,2013,2079,2116,2125,2224,2228,2355,2371,2382,2431,2448,2452,2553,2679,2694,2810,2832,2899,2955,3047,3213,3225,3269,4434,4452,4679,4689,4697,4724,4740,4861,4922,5075,5084,5133
org/telegram/messenger/AnimatedFileDrawableStream.java, line(s) 54,113
org/telegram/messenger/ApplicationLoader.java, line(s) 184,207,232,233,252,354,536,140,364,404,421,435,459,504,528
org/telegram/messenger/AuthTokensHelper.java, line(s) 69
org/telegram/messenger/AutoDeleteMediaTask.java, line(s) 45,136,241,140,146,234
org/telegram/messenger/BillingController.java, line(s) 260,345,350,370,113
org/telegram/messenger/ChatObject.java, line(s) 291,299,349,357,533,913,925,949,957,1100,1109,1122,1132,1217,1254,1271,1297,1304,1322,1333,1371,1386,1398,1455,1468,1506
org/telegram/messenger/ChatThemeController.java, line(s) 68,206,352,419,451
org/telegram/messenger/ChatsRemoteViewsFactory.java, line(s) 193,332,359
org/telegram/messenger/ContactsController.java, line(s) 541,558,574,787,793,1065,1091,1198,1301,1356,1630,1645,1661,1840,1849,1873,2018,2023,2054,2118,2141,2655,2726,2868,188,197,689,714,837,1145,1153,1172,1188,1203,1214,1650,1795,2352,2360,2603,2607,2616,2680,2963,3564,3596
org/telegram/messenger/ContactsRemoteViewsFactory.java, line(s) 163
org/telegram/messenger/ContactsSyncAdapterService.java, line(s) 49,30
org/telegram/messenger/DatabaseMigrationHelper.java, line(s) 1225,1335,551,604,650,674,698,722,769,985,1239,1243
org/telegram/messenger/DispatchQueue.java, line(s) 52,63,76,89
org/telegram/messenger/DispatchQueuePoolBackground.java, line(s) 122
org/telegram/messenger/DocumentObject.java, line(s) 97
org/telegram/messenger/DownloadController.java, line(s) 1243,1325,1417,1469,1541,1593,1651,1656
org/telegram/messenger/Emoji.java, line(s) 156,166,700,745,1011,1023
org/telegram/messenger/EmuInputDevicesDetector.java, line(s) 57
org/telegram/messenger/FeedRemoteViewsFactory.java, line(s) 139
org/telegram/messenger/FileLoadOperation.java, line(s) 1415,1417,1672,1947,1949,2116,2316,2413,2609,2611,2697,2777,2894,2917,2939,2943,600,747,756,817,1098,1105,1108,1110,1197,1205,1257,1313,1345,1439,1442,1444,1482,1491,1524,1793,1803,1813,1823,1834,1858,1864,1872,1878,1886,1892,1900,1907,1916,2009,2011,2029,2051,2061,2066,2270,2471,2473,2544,2581,2592,2594
org/telegram/messenger/FileLoader.java, line(s) 870,1046,2091,164,1256,1895,1903,1911,1920
org/telegram/messenger/FileLog.java, line(s) 100,101,102,103,134,135,136,395,250,275,422
org/telegram/messenger/FilePathDatabase.java, line(s) 64,74,120,190,224,275,370,87,140,199,229,304,368,372,404,420,433,465,502,573
org/telegram/messenger/FileRefController.java, line(s) 249,905,1028,1288,1295,1130,1219
org/telegram/messenger/FileStreamLoadOperation.java, line(s) 167
org/telegram/messenger/FileUploadOperation.java, line(s) 126,150,650,673,218,331,444,655
org/telegram/messenger/FilesMigrationService.java, line(s) 109,146,151,166,170
org/telegram/messenger/FingerprintController.java, line(s) 33,48,69,74,87,112,130
org/telegram/messenger/GcmPushListenerService.java, line(s) 14,31
org/telegram/messenger/ImageLoader.java, line(s) 1867,1991,1993,2008,2019,2024,2096,2128,2140,2153,2166,2179,2192,2200,2205,329,350,359,399,405,453,477,495,516,542,554,573,769,786,809,818,864,1070,1088,1682,1953,1968,1985,2039,2065,2076,2132,2144,2157,2170,2183,2209,2273,2281,2291,4205,4217,4248,4325,4334,4362,4382,4417,4498,4630,4636,4711
org/telegram/messenger/ImageReceiver.java, line(s) 1391,1527,1565,1625,1676,1733,2037,2119
org/telegram/messenger/ImportingService.java, line(s) 38,75
org/telegram/messenger/KeepAliveJob.java, line(s) 28,42,48,65,77
org/telegram/messenger/LanguageDetector.java, line(s) 39,45,51
org/telegram/messenger/LinkifyPort.java, line(s) 42
org/telegram/messenger/LiteMode.java, line(s) 148,161
org/telegram/messenger/LocaleController.java, line(s) 712,1203,1251,1272,2906,2922,2932,2935,2965,2979,3039,3112,3151,3172,3187,3201,3217,3233,4146,549,554,977,1134,1140,1146,1157,1303,1352,1444,1492,2297,2398,2423,2439,2455,2474,2496,2512,2541,2590,2732,2748,2772,2814,2824,2987,3042,4102,4122
org/telegram/messenger/LocationController.java, line(s) 340,417,782,844,929,994,1082,1088,1093,1098,1109,1132
org/telegram/messenger/LocationSharingService.java, line(s) 160
org/telegram/messenger/MediaController.java, line(s) 1138,1763,1851,1888,1906,1922,1934,1944,4325,4337,4463,4496,4510,7059,7136,764,826,962,993,1021,1029,1088,1093,1098,1103,1121,1147,1156,1276,1292,1370,1387,1436,1447,1511,1588,1745,2175,2185,2218,2341,2666,2680,3063,3069,3182,3321,3390,3440,3517,3618,3804,3843,3897,3914,3924,3974,4163,4203,4318,4361,4371,4428,4486,4513,4583,4586,4757,4788,4876,4957,4963,5019,5027,5035,5065,5117,5244,5261,5319,5408,5424,5432,5444,5501,5528,5540,5548,5558,5572,5578,5597,5605,5611,5619,5638,5649,5655,5661,5680,5690,5755,5764,5786,5791,5802,5839,5846,5861,5890,5900,5905,5912,6002,6097,6131,6210,6235,6241,6276,6388,6430,6519,6525,6591,6819,6898,6994,7247,7253
org/telegram/messenger/MediaDataController.java, line(s) 5079,5480,654,889,974,1032,1109,1162,1187,1363,1462,1608,1665,1731,1987,2018,2171,2226,2684,2863,2892,2993,3081,3585,3711,3871,4008,4224,5302,5657,5702,5915,6026,6097,6127,6298,6508,6611,6769,6844,6861,6947,7067,7131,7344,7432,7643,7804,7967,8159,8489,8822,8923,9146,9196,9249,9297,9332,9565,9653,9729,9845,10483,10691,10767,10879,10912
org/telegram/messenger/MessageObject.java, line(s) 764,1618,3135,3358,5653,5750,5890,5968,5974,6662,6707,6731,6749,6777,6802,6828,6864,6888,6922,6973,7167
org/telegram/messenger/MessagesController.java, line(s) 5392,7617,7658,7663,7704,7716,7726,7749,7754,7761,7778,7790,9510,10028,10037,11261,11626,11840,12267,12529,12966,13028,13035,13042,13092,13119,13156,13304,14122,14130,14223,14275,14326,14332,14343,14513,14520,14531,14546,14556,14592,14593,14605,16826,16841,16997,17006,17019,17085,17094,17106,17378,17608,17609,17713,17946,19009,19216,19223,19285,19321,19335,19342,19373,19380,19439,19476,19478,19486,19560,19848,19876,19924,19957,20251,21255,21327,21387,21408,21423,21439,21465,21663,22781,22782,22787,22796,22810,22826,22856,23011,23024,23448,24220,1072,1111,1170,2299,2315,2342,3095,3763,4312,5108,6393,8703,8983,9025,9076,9692,12209,12548,13236,14035,14250,14959,15557,15583,15651,15671,17154,17330,18043,18191,18280,18969,22804,22843,23007,24400,24494,24795,24949
org/telegram/messenger/MessagesStorage.java, line(s) 447,453,733,738,9244,9268,9271,9275,9278,11867,12099,19317,21789,22808,22837,23397,25669,25728,25749,26121,29293,479,487,497,504,560,570,578,761,876,886,889,892,20562,36669
org/telegram/messenger/MusicBrowserService.java, line(s) 206,310,350,399,526
org/telegram/messenger/MusicPlayerService.java, line(s) 192,427
org/telegram/messenger/NativeLoader.java, line(s) 161,176,55,85,90,95,100,105,112,123,131,164,185,196,208,244,252
org/telegram/messenger/NotificationBadge.java, line(s) 203,486
org/telegram/messenger/NotificationCenter.java, line(s) 1316
org/telegram/messenger/NotificationImageProvider.java, line(s) 113
org/telegram/messenger/NotificationsController.java, line(s) 301,448,504,2394,2461,2476,2520,2535,2582,2878,2928,3075,3116,3133,4709,4994,5487,5703,5923,6100,6183,6208,276,281,288,312,348,423,445,453,1742,1757,2246,2315,2332,2345,2373,2377,2386,2400,2458,2473,2482,2517,2532,2542,2590,2667,2723,3072,3626,4550,4959,5244,5282,5328,6190,6289,6351,6386,6390,6399,4791,5125,5790,5998,6004,6284
org/telegram/messenger/NotificationsDisabledReceiver.java, line(s) 31,35,46,55,64,78
org/telegram/messenger/OpenChatReceiver.java, line(s) 34
org/telegram/messenger/PushListenerController.java, line(s) 148,162,168,172,250,274,288,375,390,591,630,669,686,767,3424,3427,3455,100,106,311,330,498,518,541,563,585,621,3068,3070,3095,3447,3474,2883
org/telegram/messenger/ScreenReceiver.java, line(s) 13,19
org/telegram/messenger/SecretChatHelper.java, line(s) 733,1397,1907,1908,808,831,923,1547,1550,1722,1902,1920,1981,1989,2120,2370,2399,2443,2460
org/telegram/messenger/SendMessagesHelper.java, line(s) 829,2975,4026,5554,5568,5611,5617,5632,5642,5656,6430,11172,11370,11390,11398,11404,873,878,887,1638,1655,2125,4211,4607,4967,7067,7134,7315,7320,7382,7445,7518,7545,7827,7877,8359,8631,9005,9084,9134,9429,9851,9897,10589,10602,10677,10821,10862,10903,11263,11268,11273,11286,11301
org/telegram/messenger/SharedConfig.java, line(s) 1479,363,444,547,621,689,704,726,769,783,937,1233,1386
org/telegram/messenger/SmsReceiver.java, line(s) 47
org/telegram/messenger/SvgHelper.java, line(s) 456,475,488,501,514,529,543,559,2160
org/telegram/messenger/TopicsController.java, line(s) 115,143,170,244,1220
org/telegram/messenger/TranslateController.java, line(s) 371,376,381,400,1100,1143
org/telegram/messenger/UserConfig.java, line(s) 245
org/telegram/messenger/UserNameResolver.java, line(s) 36
org/telegram/messenger/Utilities.java, line(s) 112,340,356,385,398,409,421,440,457,488
org/telegram/messenger/VideoEditedInfo.java, line(s) 410
org/telegram/messenger/VideoEncodingService.java, line(s) 36,92,54
org/telegram/messenger/XiaomiUtilities.java, line(s) 45
org/telegram/messenger/browser/Browser.java, line(s) 353,388,104,119,306,321,448
org/telegram/messenger/camera/CameraController.java, line(s) 174,209,593,610,629,191,226,267,355,370,375,464,481,507,519,551,583,636,665,726,736,760,789,792,810,816,850,871,901,962,967,973,978,986,1009
org/telegram/messenger/camera/CameraSession.java, line(s) 199,203,134,193,248,304,317,374,387,403,408,500
org/telegram/messenger/camera/CameraView.java, line(s) 451,831,1113,1143,1257,1287,1498,1534,1547,1555,1559,1568,1615,1689,1805,839,847,856,869,880,887,906,924,942,951,1005,1015,1236,1434,1591,1648,1658,1729,1738,1748,1756,1869,2053,2058,2066
org/telegram/messenger/ringtone/RingtoneDataStore.java, line(s) 48,366
org/telegram/messenger/secretmedia/ExtendedDefaultDataSource.java, line(s) 199
org/telegram/messenger/support/JobIntentService.java, line(s) 135
org/telegram/messenger/support/customtabsclient/shared/CustomTabsHelper.java, line(s) 70
org/telegram/messenger/support/fingerprint/FingerprintManagerCompatApi23.java, line(s) 38,51,60
org/telegram/messenger/utils/BitmapsCache.java, line(s) 414,543
org/telegram/messenger/utils/CopyUtilities.java, line(s) 91
org/telegram/messenger/video/AudioRecoder.java, line(s) 62
org/telegram/messenger/video/MediaCodecVideoConvertor.java, line(s) 251,278,469,476,488,823,2344,2554,4543,4821,5015,5986,6129,6413,6724,6979,310,311,349,350,377,378,404,405,450,451,539,540,599,600,643,644,754,755,798,799,970,971,1025,1026,1125,1126,1170,1171,1219,1220,1286,1287,1373,1374,1418,1419,1478,1479,1524,1525,1567,1568,1622,1623,1634,1694,1695,1741,1742,1769,1770,1796,1797,1867,1868,1921,1922,1989,1990,2043,2044,2111,2112,2188,2189,2244,2245,2296,2297,2373,2374,2473,2474,2528,2529,2596,2597,2640,2641,2716,2717,2772,2773,2831,2832,2909,2910,2964,2965,3025,3026,3082,3159,3160,3240,3241,3295,3296,3365,3366,3420,3421,3507,3508,3562,3563,3670,3671,3726,3727,3766,3767,3882,3883,3939,3940,4005,4006,4060,4061,4114,4115,4169,4170,4323,4324,4378,4379,4430,4431,4485,4486,4556,4557,4595,4596,4677,4678,4747,4748,4777,4778,4877,4878,4926,4962,4963,5086,5087,5140,5141,5211,5212,5265,5266,5358,5359,5397,5398,5490,5491,5588,5589,5644,5645,5764,5765,5818,5819,5862,5863,6282,6283,6339,6340,6370,6371,6549,6550,6608,6609,6669,6670,6696,6769,6793
org/telegram/messenger/video/TextureRenderer.java, line(s) 103,105,226,561,714
org/telegram/messenger/voip/AudioRecordJNI.java, line(s) 245,64,77,93,112,136,178,210,236,108,218,61,74,90
org/telegram/messenger/voip/AudioTrackJNI.java, line(s) 37,60,114,124,122,31
org/telegram/messenger/voip/Instance.java, line(s) 97
org/telegram/messenger/voip/JNIUtilities.java, line(s) 92
org/telegram/messenger/voip/NativeInstance.java, line(s) 142,276,306
org/telegram/messenger/voip/TelegramConnectionService.java, line(s) 33,70,50,60,18,26
org/telegram/messenger/voip/VideoCapturerDevice.java, line(s) 429
org/telegram/messenger/voip/VoIPServerConfig.java, line(s) 19
org/telegram/messenger/voip/VoIPService.java, line(s) 1287,1742,1845,1852,1944,2204,2325,3111,4100,4116,4136,4241,4505,4527,4561,4968,4984,5021,5028,5035,5155,5170,5300,5343,5484,5521,5528,5536,5752,5890,5948,6106,6330,6341,6369,6381,6388,379,418,426,601,854,915,1206,1260,1285,1308,1345,1781,1808,1995,2238,3201,4035,4274,4489,4554,4677,4731,4799,4816,4878,4959,5041,5211,5223,5266,5367,5376,5422,5452,5494,5645,5660,5697,5711,5772,5912,5942,6245,6256,921,944,1301,1341,1836,1875,1882,1892,1917,2011,4867
org/telegram/tgnet/ConnectionsManager.java, line(s) 380,437,447,449,531,630,638,654,670,673,685,758,788,946,952,955,401,427,459,688,767,833,845,863,961,1001,1052,1057,1091,1102,1116,419
org/telegram/tgnet/NativeByteBuffer.java, line(s) 131,132,147,148,174,175,190,191,211,212,221,222,230,231,267,268,304,305,316,317,354,404,405,423,439,440,454,455,468,469,505,506,536,537,573,574,590,591
org/telegram/tgnet/SerializedData.java, line(s) 70,79,88,97,116,117,140,141,170,171,186,187,202,203,218,219,255,256,267,268,304,305,316,317,327,328,357,384,401,402,417,418,459,460,494,495,511,512,527,528,545,546,566,567
org/telegram/tgnet/TLClassStore.java, line(s) 50
org/telegram/tgnet/TLRPC$ChatPhoto.java, line(s) 102
org/telegram/tgnet/TLRPC$TL_chatPhoto.java, line(s) 40
org/telegram/tgnet/TLRPC$TL_userProfilePhoto.java, line(s) 37
org/telegram/tgnet/TLRPC$UserProfilePhoto.java, line(s) 62
org/telegram/ui/ActionBar/ActionBarLayout.java, line(s) 1315,434,1172,1176,1864,2691
org/telegram/ui/ActionBar/ActionBarPopupWindow.java, line(s) 178,731,831
org/telegram/ui/ActionBar/AlertDialog.java, line(s) 1025,1311
org/telegram/ui/ActionBar/BaseFragment.java, line(s) 283,295,321,336,468,563,575,619,633
org/telegram/ui/ActionBar/BottomSheet.java, line(s) 1221,1827,1962,1986
org/telegram/ui/ActionBar/DrawerLayoutContainer.java, line(s) 581
org/telegram/ui/ActionBar/EmojiThemes.java, line(s) 410,481
org/telegram/ui/ActionBar/Theme.java, line(s) 8816,8865,3883,4037,5374,5934,5956,5968,6080,6096,6160,6299,6347,6563,6571,6934,8093,8100,8154,8190,8277,8314,8425,8448,9117,9601,9622,9636,9774,9804,9830,9869,9897,9928,10054,10164,10171,10221,10445,10551,10563,12333,12351,12384,12403,12572,12677,12687,12704,12713,12749,12944,12971,9294
org/telegram/ui/ActionBar/ThemeDescription.java, line(s) 787
org/telegram/ui/ActionIntroActivity.java, line(s) 771,844,931
org/telegram/ui/Adapters/ContactsAdapter.java, line(s) 111
org/telegram/ui/Adapters/DialogsAdapter.java, line(s) 359
org/telegram/ui/Adapters/DialogsSearchAdapter.java, line(s) 767,810,857,883,1672
org/telegram/ui/Adapters/SearchAdapter.java, line(s) 116,137,492
org/telegram/ui/Adapters/SearchAdapterHelper.java, line(s) 499,685,743
org/telegram/ui/ArticleViewer.java, line(s) 1369,2960,2966,4718,4784,5145,5194,5213,5359,5368,5390,5403,8013,8023,8124,8147,8174,11448,11956
org/telegram/ui/BasePermissionsActivity.java, line(s) 100
org/telegram/ui/BubbleActivity.java, line(s) 295,299,89
org/telegram/ui/CacheControlActivity.java, line(s) 312,435,541,548,1236,1723,1777
org/telegram/ui/CachedMediaLayout.java, line(s) 1094,1124
org/telegram/ui/CameraScanActivity.java, line(s) 1056,1067,1096,1107,1370
org/telegram/ui/Cells/AboutLinkCell.java, line(s) 234,306,527
org/telegram/ui/Cells/AudioPlayerCell.java, line(s) 91,102
org/telegram/ui/Cells/BotHelpCell.java, line(s) 191,244,253,289
org/telegram/ui/Cells/ChatActionCell.java, line(s) 467,995,1000
org/telegram/ui/Cells/ChatMessageCell.java, line(s) 1863,1911,1969,1987,2060,2089,2188,2219,6567,8274,10804,10949,11119,11288,11407,11525,11675,12003,12116,12210,12320,12433,14228,14416,14544,14649,20195,20821,20935,20963,22771,22785,23851,26148,26180,29320
org/telegram/ui/Cells/ContextLinkCell.java, line(s) 245,273,298
org/telegram/ui/Cells/DialogCell.java, line(s) 841,1564,2341,2582,2640,2882,4086,4248,4367,5884
org/telegram/ui/Cells/DialogMeUrlCell.java, line(s) 218,233,315
org/telegram/ui/Cells/DrawerActionCell.java, line(s) 99,108
org/telegram/ui/Cells/DrawerProfileCell.java, line(s) 503,581
org/telegram/ui/Cells/SettingsSuggestionCell.java, line(s) 127
org/telegram/ui/Cells/SharedAudioCell.java, line(s) 177,210
org/telegram/ui/Cells/SharedLinkCell.java, line(s) 351,386,473,501,516,570,821,835
org/telegram/ui/Cells/TextSelectionHelper.java, line(s) 1542,1543
org/telegram/ui/Cells/ThemesHorizontalListCell.java, line(s) 337
org/telegram/ui/ChangeBioActivity.java, line(s) 259,270
org/telegram/ui/ChangeUsernameActivity.java, line(s) 136,1569,1583,1592,1601
org/telegram/ui/ChannelAdminLogActivity.java, line(s) 1124,1151,414,1866,2320,3231,3241,3251,3261,3271,3281,3291,3301,403,413,413,417
org/telegram/ui/ChannelCreateActivity.java, line(s) 1288,1431,1445
org/telegram/ui/ChatActivity.java, line(s) 8738,8769,8797,20386,21021,25282,25330,26050,31488,31627,34058,34131,34149,34167,34187,34212,34230,2523,2557,2593,2613,5245,6561,6766,8932,9354,13604,14140,14326,14430,18496,18506,19370,19675,19739,26203,29174,30330,30602,32023,32028,32052,32370,32530,32535,32559,32773,34124,34142,34160,34178,34205,34223,34241,35136,35315,35360,35691,35710,35740,10036,10040,19828
org/telegram/ui/ChatEditActivity.java, line(s) 1859
org/telegram/ui/ChatRightsEditActivity.java, line(s) 954,981
org/telegram/ui/ChatUsersActivity.java, line(s) 3077,3811
org/telegram/ui/Components/AlertsCreator.java, line(s) 295,326,373,406,1542,1674,1739,1754,2655,5552,5609,6837
org/telegram/ui/Components/AnimatedEmojiDrawable.java, line(s) 734,243,275
org/telegram/ui/Components/AnimatedFileDrawable.java, line(s) 442,480
org/telegram/ui/Components/AudioPlayerAlert.java, line(s) 1667
org/telegram/ui/Components/AvatarDrawable.java, line(s) 465
org/telegram/ui/Components/BlockingUpdateView.java, line(s) 279,283
org/telegram/ui/Components/BlurBehindDrawable.java, line(s) 140,392
org/telegram/ui/Components/BotWebViewContainer.java, line(s) 257,714,1221,1310,1333,1341,1377,1401,1421,1429,1444,1457,1598,1601,1619,1659,1662,1669,1684,1694,1704,1754,1783
org/telegram/ui/Components/BotWebViewMenuContainer.java, line(s) 902
org/telegram/ui/Components/BotWebViewSheet.java, line(s) 971
org/telegram/ui/Components/ChatActivityEnterView.java, line(s) 3846,5071,5142,6545,8675,8776,9552,9962,9980,9992,10051,10923,10952,11252,11300
org/telegram/ui/Components/ChatAttachAlertAudioLayout.java, line(s) 615
org/telegram/ui/Components/ChatAttachAlertBotWebViewLayout.java, line(s) 565
org/telegram/ui/Components/ChatAttachAlertDocumentLayout.java, line(s) 1625,216,1012,1303,1310,1650,1656,1680,1688,1710
org/telegram/ui/Components/ChatAttachAlertLocationLayout.java, line(s) 114,132,443,466,484,492
org/telegram/ui/Components/ChatAttachAlertPhotoLayout.java, line(s) 2780,2788,2792,2820,2829,2851,3435,3924,3938
org/telegram/ui/Components/ChatAvatarContainer.java, line(s) 756
org/telegram/ui/Components/ChatThemeBottomSheet.java, line(s) 1164,1345
org/telegram/ui/Components/ClippingImageView.java, line(s) 232
org/telegram/ui/Components/Crop/CropView.java, line(s) 1158,964,1106
org/telegram/ui/Components/DrawingInBackgroundThreadDrawable.java, line(s) 64
org/telegram/ui/Components/EditTextBoldCursor.java, line(s) 349,593,1176,1250,1259
org/telegram/ui/Components/EditTextCaption.java, line(s) 282,413,440,481,547
org/telegram/ui/Components/EditTextEffects.java, line(s) 230
org/telegram/ui/Components/EditTextEmoji.java, line(s) 146,720,748
org/telegram/ui/Components/EmbedBottomSheet.java, line(s) 222,354,382,396,418,461,534,541,731,750,764,846,873,943
org/telegram/ui/Components/EmojiColorPickerWindow.java, line(s) 442
org/telegram/ui/Components/EmojiPacksAlert.java, line(s) 1143,1624,2028,2138
org/telegram/ui/Components/EmojiView.java, line(s) 1485,1965,2386,2927,3336,7475,8854
org/telegram/ui/Components/FilterGLThread.java, line(s) 107,180,213,220,229,240,251,258,334,439
org/telegram/ui/Components/FilterShaders.java, line(s) 949,950
org/telegram/ui/Components/ForegroundDetector.java, line(s) 82,119,89,126
org/telegram/ui/Components/ForwardingPreviewView.java, line(s) 753
org/telegram/ui/Components/GroupCallPipAlertView.java, line(s) 205
org/telegram/ui/Components/GroupVoipInviteAlert.java, line(s) 452,876
org/telegram/ui/Components/ImageUpdater.java, line(s) 822,855,898,921,951,1246,1253
org/telegram/ui/Components/InstantCameraView.java, line(s) 593,605,611,1043,1117,1145,1154,1161,1325,1330,1575,1596,1955,1991,2004,2012,2016,2025,2141,2149,2246,2527,533,585,793,901,1148,1158,1188,1201,1233,1245,1338,1345,1354,1365,1376,1406,1433,1438,1444,1453,1507,1678,1683,1691,1896,2048,2097,2113,2280,2303,2312,2323,2331,2450,2499,2597
org/telegram/ui/Components/JoinCallAlert.java, line(s) 230,295
org/telegram/ui/Components/LetterDrawable.java, line(s) 113
org/telegram/ui/Components/LinkActionView.java, line(s) 228,246
org/telegram/ui/Components/MotionBackgroundDrawable.java, line(s) 317,538
org/telegram/ui/Components/Paint/PaintTypeface.java, line(s) 238
org/telegram/ui/Components/Paint/RenderView.java, line(s) 393,400,409,420,431,438,457,616
org/telegram/ui/Components/Paint/Shader.java, line(s) 19,27,82,92
org/telegram/ui/Components/Paint/ShapeDetector.java, line(s) 232,293,606
org/telegram/ui/Components/Paint/Slice.java, line(s) 24,54,88
org/telegram/ui/Components/Paint/Utils.java, line(s) 12
org/telegram/ui/Components/Paint/Views/LPhotoPaintView.java, line(s) 1784,1791,1809,2061,3697,3725
org/telegram/ui/Components/PasscodeView.java, line(s) 175,292,1209,1219,1249,1302,1318,1346,1366,1387,1397
org/telegram/ui/Components/PathAnimator.java, line(s) 101
org/telegram/ui/Components/PhonebookShareAlert.java, line(s) 843,901,1316
org/telegram/ui/Components/PhotoViewerCaptionEnterView.java, line(s) 190,640,952,973,998,1031,1150
org/telegram/ui/Components/PhotoViewerWebView.java, line(s) 406,604,738,782,814
org/telegram/ui/Components/PipRoundVideoView.java, line(s) 270
org/telegram/ui/Components/Premium/GLIcon/GLIconTextureView.java, line(s) 393,400,437
org/telegram/ui/Components/Premium/PremiumAppIconsPreviewView.java, line(s) 40
org/telegram/ui/Components/Premium/PremiumNotAvailableBottomSheet.java, line(s) 68
org/telegram/ui/Components/ProfileGalleryView.java, line(s) 495
org/telegram/ui/Components/ProximitySheet.java, line(s) 632
org/telegram/ui/Components/QRCodeBottomSheet.java, line(s) 165
org/telegram/ui/Components/RLottieDrawable.java, line(s) 370,408,530,664,702,824,904,990,1028,1150,1372,1410,1532,1915
org/telegram/ui/Components/RadioButton.java, line(s) 48,153
org/telegram/ui/Components/RecyclerListView.java, line(s) 1211,1474,1489,2500,2506
org/telegram/ui/Components/SeekBar.java, line(s) 346,358
org/telegram/ui/Components/SeekBarView.java, line(s) 634
org/telegram/ui/Components/ShareAlert.java, line(s) 3774,4509
org/telegram/ui/Components/SharedMediaLayout.java, line(s) 2781,5486
org/telegram/ui/Components/SizeNotifierFrameLayout.java, line(s) 671
org/telegram/ui/Components/SlotsDrawable.java, line(s) 71,177
org/telegram/ui/Components/StaticLayoutEx.java, line(s) 99
org/telegram/ui/Components/StickerCategoriesListView.java, line(s) 937,997
org/telegram/ui/Components/StickersAlert.java, line(s) 1542,1653,1860
org/telegram/ui/Components/TermsOfServiceView.java, line(s) 177
org/telegram/ui/Components/ThemeEditorView.java, line(s) 103,112,1347,1578,1785
org/telegram/ui/Components/TimerDrawable.java, line(s) 125
org/telegram/ui/Components/TranscribeButton.java, line(s) 647,715
org/telegram/ui/Components/UndoView.java, line(s) 140,626
org/telegram/ui/Components/VideoPlayerSeekBar.java, line(s) 337
org/telegram/ui/Components/VideoTimelinePlayView.java, line(s) 340,410,441
org/telegram/ui/Components/VideoTimelineView.java, line(s) 274,344,376
org/telegram/ui/Components/WallpaperUpdater.java, line(s) 105,108,134,160,194,209,224,239
org/telegram/ui/Components/WebPlayerView.java, line(s) 803,403,493,514,536,545,570,614,656,693,720,783,854,912,961,1022,1076,1513,1776,1824,2168,2176,2184,2192,2200,2206,2253,2263,2275,2286,2297,2308,2318,2606
org/telegram/ui/Components/voip/VoIPHelper.java, line(s) 127,196,421,824
org/telegram/ui/Components/voip/VoIPPiPView.java, line(s) 378,758
org/telegram/ui/ContactAddActivity.java, line(s) 304
org/telegram/ui/ContactsActivity.java, line(s) 698,801,828,900,1048,1079
org/telegram/ui/ContentPreviewViewer.java, line(s) 1515,1585,1761
org/telegram/ui/CountrySelectActivity.java, line(s) 309,466,477
org/telegram/ui/DeviceUtils.java, line(s) 50
org/telegram/ui/DialogsActivity.java, line(s) 2591,2604,2610,2618,3324,5281,7120,10569,11947
org/telegram/ui/EditWidgetActivity.java, line(s) 398,429,455,466,479,589,716,742
org/telegram/ui/EmojiAnimationsOverlay.java, line(s) 821
org/telegram/ui/ExternalActionActivity.java, line(s) 626,630,108,433,479
org/telegram/ui/FilterChatlistActivity.java, line(s) 1508
org/telegram/ui/FilterCreateActivity.java, line(s) 849,1329
org/telegram/ui/FilteredSearchView.java, line(s) 1127
org/telegram/ui/FiltersSetupActivity.java, line(s) 960
org/telegram/ui/GroupCallActivity.java, line(s) 1156,1302,1526
org/telegram/ui/GroupCreateActivity.java, line(s) 826
org/telegram/ui/GroupCreateFinalActivity.java, line(s) 195
org/telegram/ui/GroupInviteActivity.java, line(s) 148,163
org/telegram/ui/GroupStickersActivity.java, line(s) 697
org/telegram/ui/IdenticonActivity.java, line(s) 69
org/telegram/ui/InviteContactsActivity.java, line(s) 599,642,824,850
org/telegram/ui/LanguageSelectActivity.java, line(s) 263,297
org/telegram/ui/LaunchActivity.java, line(s) 837,1209,1221,2424,2613,7331,11281,11747,12867,12895,12985,12998,13007,13017,13021,13042,13054,455,799,853,1954,1997,2302,2355,2433,2549,2559,2624,6707,6787,8243,8250,8340,8364,8369,8379,8476,8728,8908,8914,8975,9017,9104,9196,9240,9247,9752,9779,9879,9939,9960,9988,10016,10108,10125,10142,10163,10191,10259,10285,10317,10332,10365,10797,10812,10826,10845,11164,11484,11491,11894,11905,12102,12108,12806,12927,13004,13162,13243,13318
org/telegram/ui/LocationActivity.java, line(s) 447,455,563,1588,1656,1663,1775,2003,2046,2073,2098,2229,2304,2653,2683,2706,2811,2920,2993,3007,3032,3041
org/telegram/ui/LoginActivity.java, line(s) 511,516,1793,1883,1979,1985,1990,1994,2011,2017,2471,2480,2492,2767,2784,2988,3307,3316,3328,3427,3448,3514,3590,3607,4006,4061,4071,4171,4179,10397,10445,972,1053,1720,1984,2016,2435,3271,3981,4814,5392,5473,7210,7886,10601
org/telegram/ui/ManageLinksActivity.java, line(s) 1310,1325
org/telegram/ui/NewContactBottomSheet.java, line(s) 534,581,865
org/telegram/ui/NotificationsCustomSettingsActivity.java, line(s) 529,864,891,922
org/telegram/ui/NotificationsSettingsActivity.java, line(s) 323,350,381,586
org/telegram/ui/NotificationsSoundActivity.java, line(s) 465,614,1037
org/telegram/ui/PasscodeActivity.java, line(s) 1254,1430
org/telegram/ui/PassportActivity.java, line(s) 1130,3140,3654,3955,4059,4859,5647,6312,6385,7900,8289,8351,8554,8572,8736,9487,9605
org/telegram/ui/PaymentFormActivity.java, line(s) 350,548,718,1344,1371,1476,3600,3818,3904,3913,4064,4071,4361,4405,4701,4729,4753
org/telegram/ui/PeopleNearbyActivity.java, line(s) 677,606,844
org/telegram/ui/PhotoCropActivity.java, line(s) 450,455,474
org/telegram/ui/PhotoViewer.java, line(s) 9376,9384,21744,758,3650,3658,3762,4544,5535,5548,6522,7995,8489,8520,8859,8913,9649,9739,9746,10126,10147,10550,10664,10677,10692,10721,10862,11650,11660,11926,11934,15482,17179,17564,17580,17591,17600,17657,17732,18183,18305,20201,22028
org/telegram/ui/PopupNotificationActivity.java, line(s) 603,1566
org/telegram/ui/PremiumPreviewFragment.java, line(s) 1856,1871,1886,1913
org/telegram/ui/PrivacyControlActivity.java, line(s) 1172
org/telegram/ui/PrivacySettingsActivity.java, line(s) 368,600,703
org/telegram/ui/ProfileActivity.java, line(s) 1195,1779,3135,3153,3751,4319,5624,5838,5851,5866,5955,5975,10214,10317,10629,12372
org/telegram/ui/ProfileNotificationsActivity.java, line(s) 469
org/telegram/ui/RestrictedLanguagesSelectActivity.java, line(s) 569,581,604
org/telegram/ui/SecretMediaViewer.java, line(s) 475,481,524,565,897,1043,1540
org/telegram/ui/SelectAnimatedEmojiDialog.java, line(s) 771,845,3744
org/telegram/ui/SessionsActivity.java, line(s) 545,571,1445,1542
org/telegram/ui/ShareActivity.java, line(s) 77,100
org/telegram/ui/StickersActivity.java, line(s) 1119,1141,1776
org/telegram/ui/ThemeActivity.java, line(s) 1625,1637,1725,1730,2097,2105,2122,2154
org/telegram/ui/ThemePreviewActivity.java, line(s) 3105,3116,3124,3162,3174,3425,3468,3557,4253
org/telegram/ui/ThemeSetUrlActivity.java, line(s) 114,132,475,491,724,735
org/telegram/ui/TopicsFragment.java, line(s) 3942,1477
org/telegram/ui/TwoStepVerificationActivity.java, line(s) 194,1320
org/telegram/ui/TwoStepVerificationSetupActivity.java, line(s) 1187,1584,1606
org/telegram/ui/VoIPFragment.java, line(s) 906,1875,2086
org/telegram/ui/VoIPPermissionActivity.java, line(s) 34
org/telegram/ui/WallpapersListActivity.java, line(s) 1246
org/telegram/ui/WebviewActivity.java, line(s) 106,157,246,256,411
org/webrtc/AndroidVideoDecoder.java, line(s) 436
org/webrtc/EglRenderer.java, line(s) 235,535
org/webrtc/GlGenericDrawer.java, line(s) 328
org/webrtc/GlShader.java, line(s) 97
org/webrtc/HardwareVideoEncoderFactory.java, line(s) 125
org/webrtc/MediaCodecUtils.java, line(s) 55
org/webrtc/ScreenCapturerAndroid.java, line(s) 85,147
org/webrtc/TextureBufferImpl.java, line(s) 120
org/webrtc/YuvConverter.java, line(s) 116,142
org/webrtc/voiceengine/WebRtcAudioRecord.java, line(s) 158,352,393
org/webrtc/voiceengine/WebRtcAudioTrack.java, line(s) 263,375
repeackage/com/qiku/id/QikuIdmanager.java, line(s) 24

信息 此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改 

此应用侦听剪贴板更改。一些恶意软件也会监听剪贴板更改
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
org/telegram/ui/ProxySettingsActivity.java, line(s) 61,93,112,6

信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
org/telegram/messenger/AndroidUtilities.java, line(s) 10,2804,2807
org/telegram/ui/ChangeUsernameActivity.java, line(s) 7,131
org/telegram/ui/ChatActivity.java, line(s) 14,30597
org/telegram/ui/Components/EmbedBottomSheet.java, line(s) 10,844
org/telegram/ui/Components/InviteMembersBottomSheet.java, line(s) 12,259,1512
org/telegram/ui/Components/LinkActionView.java, line(s) 6,221
org/telegram/ui/Components/PhonebookShareAlert.java, line(s) 9,896,918
org/telegram/ui/Components/ShareAlert.java, line(s) 11,3757
org/telegram/ui/GroupInviteActivity.java, line(s) 4,144
org/telegram/ui/ManageLinksActivity.java, line(s) 4,1306
org/telegram/ui/PrivacyControlActivity.java, line(s) 4,1753
org/telegram/ui/ProfileActivity.java, line(s) 12,5621,5844
org/telegram/ui/SessionBottomSheet.java, line(s) 5,301
org/telegram/ui/StickersActivity.java, line(s) 5,1138
org/telegram/ui/ThemeSetUrlActivity.java, line(s) 4,109

安全 此应用程序使用Safety Net API。 

此应用程序使用Safety Net API。
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#safetynet

Files:
org/telegram/ui/LoginActivity.java, line(s) 90

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (tun-cos-1258344701.file.myqcloud.com) 通信。 

{'ip': '183.131.117.116', 'country_short': 'CN', 'country_long': '中国', 'region': '浙江', 'city': '台州', 'latitude': '28.666668', 'longitude': '121.349998'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (szcp.mxdx.net) 通信。 

{'ip': '183.131.117.116', 'country_short': 'CN', 'country_long': '中国', 'region': '福建', 'city': '福州', 'latitude': '26.061390', 'longitude': '119.306107'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (bit.909321.xyz) 通信。 

{'ip': '61.160.148.90', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (attheme.org) 通信。 

{'ip': '61.160.148.90', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (ip.jmtim.cn) 通信。 

{'ip': '61.160.148.90', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

安全评分: ( 비蝶 9.6.6)