安全分析报告： VVES v1.9.4

安全分数


安全分数 46/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

3

用户/设备跟踪器


调研结果

高危 6
中危 38
信息 3
安全 2
关注 10

高危 程序可被任意调试 

[android:debuggable=true]
应用可调试标签被开启，这使得逆向工程师更容易将调试器挂接到应用程序上。这允许导出堆栈跟踪和访问调试助手类。

高危 App 链接 assetlinks.json 文件未找到 

[android:name=im.osyhbpahvl.ui.LaunchActivity][android:host=http://lovechat323.com]
App Link 资产验证 URL （http://lovechat323.com/.well-known/assetlinks.json） 未找到或配置不正确。（状态代码：302）。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确，则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击，泄露 URI 中的敏感数据，例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android：autoVerify=“true”] 启用验证来验证 App Link 网域。

高危 App 链接 assetlinks.json 文件未找到 

[android:name=im.osyhbpahvl.ui.LaunchActivity][android:host=https://lovechat323.com]
App Link 资产验证 URL （https://lovechat323.com/.well-known/assetlinks.json） 未找到或配置不正确。（状态代码：None）。应用程序链接允许用户从 Web URL/电子邮件重定向到移动应用程序。如果此文件丢失或为 App Link 主机/域配置不正确，则恶意应用程序可以劫持此类 URL。这可能会导致网络钓鱼攻击，泄露 URI 中的敏感数据，例如 PII、OAuth 令牌、魔术链接/密码重置令牌等。您必须通过托管 assetlinks.json 文件并通过 Activity intent-filter 中的 [android：autoVerify=“true”] 启用验证来验证 App Link 网域。

高危 如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击 

如果一个应用程序使用WebView.loadDataWithBaseURL方法来加载一个网页到WebView，那么这个应用程序可能会遭受跨站脚本攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-7

Files:
im/osyhbpahvl/ui/ArticleViewer.java, line(s) 7745,61,62
im/osyhbpahvl/ui/components/EmbedBottomSheet.java, line(s) 674,33,34

高危 启用了调试配置。生产版本不能是可调试的 

启用了调试配置。生产版本不能是可调试的
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04c-Tampering-and-Reverse-Engineering.md#debugging-and-tracing

Files:
com/litesuits/orm/BuildConfig.java, line(s) 3,4
com/serenegiant/uvccamera/BuildConfig.java, line(s) 3,6
im/osyhbpahvl/messenger/BuildConfig.java, line(s) 3,6

高危 应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。 

应用程序使用带PKCS5/PKCS7填充的加密模式CBC。此配置容易受到填充oracle攻击。
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/alivc/rtc/device/utils/AESUtils.java, line(s) 39,46
im/osyhbpahvl/ui/hui/friendscircle/okhttphelper/AESHelper.java, line(s) 50
im/osyhbpahvl/ui/utils/AesUtils.java, line(s) 28,50,59
im/osyhbpahvl/ui/utils/ChiperUtils.java, line(s) 53,75,84

中危 应用程序已启用明文网络流量 

[android:usesCleartextTraffic=true]
应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。

中危 Service (im.osyhbpahvl.messenger.GcmPushListenerService) 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Broadcast Receiver (com.google.android.gms.measurement.AppMeasurementReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Activity (im.osyhbpahvl.ui.ShareActivity) 未被保护。 

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Activity (im.osyhbpahvl.ui.ExternalActionActivity) 未被保护。 

存在一个intent-filter。
发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。

中危 Activity (im.osyhbpahvl.messenger.OpenChatReceiver) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity (im.osyhbpahvl.ui.hui.visualcall.VisualCallActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity (im.osyhbpahvl.ui.hui.visualcall.VisualCallReceiveActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Activity设置了TaskAffinity属性 

(im.osyhbpahvl.ui.VoIPPermissionActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Activity设置了TaskAffinity属性 

(im.osyhbpahvl.ui.VoIPFeedbackActivity)
如果设置了 taskAffinity，其他应用程序可能会读取发送到属于另一个任务的 Activity 的 Intent。为了防止其他应用程序读取发送或接收的 Intent 中的敏感信息，请始终使用默认设置，将 affinity 保持为包名

中危 Service (im.osyhbpahvl.messenger.AuthenticatorService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (im.osyhbpahvl.messenger.ContactsSyncAdapterService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (im.osyhbpahvl.messenger.AppChooserTargetService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.BIND_CHOOSER_TARGET_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (im.osyhbpahvl.messenger.MusicPlayerService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (im.osyhbpahvl.messenger.MusicBrowserService) 未被保护。 

[android:exported=true]
发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (im.osyhbpahvl.messenger.WearDataLayerListenerService) 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Service (im.osyhbpahvl.messenger.voip.AppConnectionService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.BIND_TELECOM_CONNECTION_SERVICE [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Broadcast Receiver (im.osyhbpahvl.messenger.MusicPlayerReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (im.osyhbpahvl.messenger.voip.VoIPMediaButtonReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (im.osyhbpahvl.messenger.AppStartReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (im.osyhbpahvl.messenger.RefererReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: android.permission.INSTALL_PACKAGES [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Content Provider (im.osyhbpahvl.messenger.voip.CallNotificationSoundProvider) 未被保护。 

[android:exported=true]
发现 Content Provider与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (com.google.android.gms.auth.api.signin.RevocationBoundService) 受权限保护, 但是应该检查权限的保护级别。 

Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true]
发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。

中危 Service (com.blankj.utilcode.util.MessengerUtils$ServerService) 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Broadcast Receiver (com.qiniu.android.dns.NetworkReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 MD5是已知存在哈希冲突的弱哈希 

MD5是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/bjz/comm/net/utils/MD5Utils.java, line(s) 19
com/danikula/videocache/ProxyCacheUtils.java, line(s) 74
com/litesuits/orm/db/assit/Encrypt.java, line(s) 35
im/osyhbpahvl/messenger/AndroidUtilities.java, line(s) 2907
im/osyhbpahvl/messenger/FileUploadOperation.java, line(s) 418
im/osyhbpahvl/messenger/Utilities.java, line(s) 374
im/osyhbpahvl/translate/MD5.java, line(s) 20,51
im/osyhbpahvl/ui/hui/friendscircle/okhttphelper/MD5Utils.java, line(s) 19
im/osyhbpahvl/ui/utils/ChiperUtils.java, line(s) 19
xxxx/AbstractC0082.java, line(s) 177

中危 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
com/alivc/rtc/device/core/persistent/PersistentConfiguration.java, line(s) 52,152,327,378
com/danikula/videocache/StorageUtils.java, line(s) 26,45
im/osyhbpahvl/messenger/AndroidUtilities.java, line(s) 1774,1161,1768,1769,1799
im/osyhbpahvl/messenger/FileLog.java, line(s) 50,83,332
im/osyhbpahvl/messenger/ImageLoader.java, line(s) 2145,2146
im/osyhbpahvl/messenger/MediaController.java, line(s) 3570,3572,3965
im/osyhbpahvl/messenger/SharedConfig.java, line(s) 701
im/osyhbpahvl/messenger/voip/VoIPController.java, line(s) 285
im/osyhbpahvl/ui/DocumentSelectActivity.java, line(s) 502,617,617,617,620,715,717,728,806
im/osyhbpahvl/ui/SettingsActivity.java, line(s) 1222
im/osyhbpahvl/ui/components/voip/VoIPHelper.java, line(s) 485
im/osyhbpahvl/ui/dialogs/McShareDialog.java, line(s) 167
im/osyhbpahvl/ui/fragments/MeFragmentV2.java, line(s) 871
im/osyhbpahvl/ui/hui/chats/GroupShareActivity.java, line(s) 269
im/osyhbpahvl/ui/hui/mine/AboutAppActivity.java, line(s) 397
im/osyhbpahvl/ui/hui/mine/QrCodeActivity.java, line(s) 292
im/osyhbpahvl/ui/hviews/helper/MryDisplayHelper.java, line(s) 262
im/osyhbpahvl/ui/utils/DownloadUtils.java, line(s) 157
xxxx/AbstractC0110.java, line(s) 39

中危 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
com/alivc/rtc/device/UTUtdid.java, line(s) 24,25,44
com/bjz/comm/net/bean/AtUserBean.java, line(s) 60
com/bjz/comm/net/bean/FCEntitysRequest.java, line(s) 49
com/bjz/comm/net/bean/FCEntitysResponse.java, line(s) 121
com/bjz/comm/net/bean/FcUserInfoBean.java, line(s) 116
com/bjz/comm/net/bean/MiniGameBean.java, line(s) 113
com/bjz/comm/net/bean/ResponseAccessTokenBean.java, line(s) 60
com/litesuits/orm/db/assit/SQLBuilder.java, line(s) 61
com/litesuits/orm/db/model/EntityTable.java, line(s) 32
com/litesuits/orm/db/model/MapProperty.java, line(s) 7
com/zhy/http/okhttp/builder/PostFormBuilder.java, line(s) 48
im/osyhbpahvl/javaBean/ShareInstallConfigBean.java, line(s) 46
im/osyhbpahvl/messenger/ContactsController.java, line(s) 2074,2415
im/osyhbpahvl/messenger/FileRefController.java, line(s) 129,161,178,193,198,203,210,228,225,231
im/osyhbpahvl/messenger/GcmPushListenerService.java, line(s) 2353
im/osyhbpahvl/messenger/ImageLoader.java, line(s) 3072,791
im/osyhbpahvl/messenger/LocaleController.java, line(s) 755
im/osyhbpahvl/messenger/NotificationsController.java, line(s) 2934,2979
im/osyhbpahvl/messenger/SendMessagesHelper.java, line(s) 3907,3093,3101,4794,4796,4798
im/osyhbpahvl/ui/ArticleViewer.java, line(s) 1809,4925,4207
im/osyhbpahvl/ui/ChannelCreateActivity.java, line(s) 131
im/osyhbpahvl/ui/ChatEditTypeActivity.java, line(s) 121
im/osyhbpahvl/ui/DataAutoDownloadActivity.java, line(s) 302,317,310
im/osyhbpahvl/ui/DataSettingsActivity.java, line(s) 218,386,230,394,224,390
im/osyhbpahvl/ui/LaunchActivity.java, line(s) 2085
im/osyhbpahvl/ui/NotificationsCustomSettingsActivity.java, line(s) 349,347,345
im/osyhbpahvl/ui/NotificationsSettingsActivity.java, line(s) 735
im/osyhbpahvl/ui/PassportActivity.java, line(s) 4644,4231,4693,4239,4650,4699,4656,4659,894,5939,4635,4668,5277,889,5931,4647,4641,4674,5285,4638,4671,5281,4227,4690,4653,892,5935,885,5919,4219,4684,4223,4687,897,5923
im/osyhbpahvl/ui/ProxySettingsActivity.java, line(s) 427,414
im/osyhbpahvl/ui/QuickRepliesSettingsActivity.java, line(s) 180,176,172,168
im/osyhbpahvl/ui/actionbar/Theme.java, line(s) 2756,3571,3639
im/osyhbpahvl/ui/adapters/MentionsAdapter.java, line(s) 400
im/osyhbpahvl/ui/components/AlertsCreator.java, line(s) 561,563
im/osyhbpahvl/ui/components/EmojiView.java, line(s) 5426,5430
im/osyhbpahvl/ui/components/EmojiViewV2.java, line(s) 4036,4040
im/osyhbpahvl/ui/hui/contacts/CreateGroupingActivity.java, line(s) 567
im/osyhbpahvl/ui/hui/friendscircle_v1/view/edittext/span/User.java, line(s) 146
im/osyhbpahvl/ui/hui/login/LoginContronllerActivity.java, line(s) 66
im/osyhbpahvl/ui/hui/packet/SelecteContactsActivity.java, line(s) 170,174
im/osyhbpahvl/ui/settings/AutoDownloadSettingActivity.java, line(s) 79,471,89,486,84,479
im/osyhbpahvl/ui/settings/DataAndStoreSettingActivity.java, line(s) 305,313,309

中危 SHA-1是已知存在哈希冲突的弱哈希 

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/alivc/rtc/device/UTUtdid.java, line(s) 347
im/osyhbpahvl/messenger/Utilities.java, line(s) 229,243
im/osyhbpahvl/ui/PassportActivity.java, line(s) 3117
im/osyhbpahvl/utils/DeviceUtils.java, line(s) 98
im/osyhbpahvl/utils/FingerprintUtil.java, line(s) 143

中危 IP地址泄露 

IP地址泄露


Files:
com/danikula/videocache/HttpProxyCacheServer.java, line(s) 31
com/snail/antifake/deviceid/IpScanner.java, line(s) 114
im/osyhbpahvl/tgnet/NetworkConfig.java, line(s) 178,170,180,168

中危 不安全的Web视图实现。可能存在WebView任意代码执行漏洞 

不安全的Web视图实现。可能存在WebView任意代码执行漏洞
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#testing-javascript-execution-in-webviews-mstg-platform-5

Files:
im/osyhbpahvl/messenger/utils/PlayerUtils.java, line(s) 1837,1844
im/osyhbpahvl/ui/ArticleViewer.java, line(s) 7618,7614
im/osyhbpahvl/ui/WebviewActivity.java, line(s) 277,267
im/osyhbpahvl/ui/components/EmbedBottomSheet.java, line(s) 653,220
im/osyhbpahvl/ui/components/WebPlayerView.java, line(s) 1833,1840

中危 应用程序使用不安全的随机数生成器 

应用程序使用不安全的随机数生成器
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/alivc/rtc/device/UTUtdid.java, line(s) 17
com/alivc/rtc/device/utils/PhoneInfoUtils.java, line(s) 7
com/socks/library/klog/FileLog.java, line(s) 11
im/osyhbpahvl/ui/hui/visualcall/VisualCallReceiveService.java, line(s) 31
im/osyhbpahvl/ui/utils/number/StringUtils.java, line(s) 4
im/osyhbpahvl/ui/utils/translate/ssrc/SSRC.java, line(s) 19
xxxx/FragmentC0107.java, line(s) 14

中危 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 

应用程序创建临时文件。敏感信息永远不应该被写进临时文件


Files:
im/osyhbpahvl/ui/components/paint/Slice.java, line(s) 23
im/osyhbpahvl/ui/utils/translate/ssrc/SSRC.java, line(s) 2490

中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
com/danikula/videocache/sourcestorage/DatabaseSourceInfoStorage.java, line(s) 6,7,28
com/litesuits/orm/db/assit/Querier.java, line(s) 4,14

中危 可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息 

可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-6

Files:
im/osyhbpahvl/ui/fragments/TabWebFragment.java, line(s) 85,78
im/osyhbpahvl/ui/hui/discoveryweb/DiscoveryJumpToPage.java, line(s) 258,251

中危 应用程序包含隐私跟踪程序 

此应用程序有多个3隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。

中危 此应用可能包含硬编码机密信息 

从应用程序中识别出以下机密确保这些不是机密或私人信息
谷歌地图的=> "com.google.android.maps.v2.API_KEY" : "AIzaSyA-t0jLPjUt2FxrA8VPK2EiYHcYcboIR6k"
openinstall统计的=> "com.openinstall.APP_KEY" : "fehmkv"
百度地图的=> "com.baidu.lbsapi.API_KEY" : "kdjUejIjejr98r5lAPl34kPK4M45T7Y4"
"Sessions" : "Sessions"
"baidu_map_key" : "kdjUejIjejr98r5lAPl34kPK4M45T7Y4"
"pref_speakerphone_key" : "speakerphone_preference"
"TypePrivate" : "Private"
"FindBackPassword" : "FindBack"
"FindBackPassword" : "FindBackPassword"
"key_windowBackgroundGray" : "windowBackgroundGray"
"TypePrivateGroup" : "Private"
"yuncheng_app_key" : "hf4gX21KF4+d3MBQdtbQCgRUv4JmXdcd366tMJ_2Nkpr4qFQ+JpjJLgILcjeglAiPhawp_SkhJg-btxAXxfMy6eoVE1Z5fLbHa9ML84-gJ9CQ2t-p5A1wGw-liBiglGLE35hA5yAWgdxLwxRJflwNFFm2i29YgTVMFxjgNtgLqtrtwmcG66YUL1m-O7wxuAyW8yaJiCVl5igvChLSTlvQPwxfiKp1Sw1+iG1UAx4j69AT3tPeWludJlhbEQzVkcRPSkvtrz5ZtvTAFTFGw_ZtiXBOWXRg5i-lvaTd++Zp9pr85E8lZCy2roG4BKf2Mc9ZTtRVClTm+l6Ht2Hs8ipggo3uTxwXTMXDiNYfvoAyegblngR-OM26+E4MCAKI_QSqRI25NOKS8O5EV+1J+VKP2nx89cKwxQErwhdZUnDDnvDuxRffIrfRP7PZhbkcjaUvQiv-ZTE6J91V3ZQnzu7a8jOf5IsaiXnwUDNBuOWP6c4xjOQHalyUGA9b8fGpdefZXz"
"NotAuthenticated" : "NotAuthenticated"
"UseProxyPassword" : "Password"
"key_windowBackgroundWhite" : "windowBackgroundWhite"
"firebase_database_url" : "https://osyhbpahvl-48b0d.firebaseio.com"
"UseProxySecret" : "Secret"
"RealNameAuth" : "RealNameAuth"
"Authentication" : "Authentication"
"FaceAuth" : "FaceAuth"
"TypePrivate2" : "Private"
"UseProxyUsername" : "Username"
"PassportAuthorize" : "AUTHORIZE"
"google_api_key" : "AIzaSyC6uk1nvjb5BYzqEzgaWy_iTryf5373Nyw"
"AdvanceAuth" : "AdvanceAuth"
"PasscodePassword" : "Password"
"CommitAuthentication" : "CommitAuthentication"
"ReAuth" : "Re-certification"
"google_crash_reporting_api_key" : "AIzaSyC6uk1nvjb5BYzqEzgaWy_iTryf5373Nyw"
"LoginPassword" : "Password"
"Username" : "Username"
"key_walletDefaultBackground" : "walletDefaultBackground"
"Authenticated" : "Authenticated"
ABVGDE2JZIQKLMNOPRSTUFHC34WXY9678
4139a3e9a76946bbf4640aa8d8dab771
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
pE5eNoBQIFVcd9IEuyIhvopfgS1RSj5C
f180c508-f49a-40bd-b8ac-50577ce9aff6
9A04F079-9840-4286-AB92-E65BE0885F95
c06c8400-8e06-11e0-9cb6-0002a5d5c51b
bb392ec0-8d4d-11e0-a896-0002a5d5c51b
fb9f0bb7fdd0760c354cc3d80cecb1d9
A2B55680-6F43-11E0-9A3F-0002A5D5C51B
d0b2b84436a58f55a254af56951b0e23
e283aac0-7c0f-4f2e-bcf7-90acc19903ed
QrMgt8GGYI6T52ZY5AnhtxkLzb8egpFn3j5JELI8H6wtACbUnZ5cc3aYTsTRbmkAkRJeYbtx92LPBWm7nBO9UIl7y5i5MQNmUZNf5QENurR5tGyo7yJ2G0MBjWvy6iAtlAbacKP0SwOUeUWx5dsBdyhxa7Id1APtybSdDgicBDuNjI0mlZFUzZSS9dmN8lBD0WTVOMz0pRZbR3cysomRXOO1ghqjJdTcyDIxzpNAEszN8RMGjrzyU7Hjbmwi6YNK

信息 应用程序记录日志信息,不得记录敏感信息 

应用程序记录日志信息,不得记录敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
cn/dreamtobe/kpswitch/handler/KPSwitchRootLayoutHandler.java, line(s) 34,45,49,55,59
cn/dreamtobe/kpswitch/util/KeyboardUtil.java, line(s) 43,174,181,221,152,190,207
cn/dreamtobe/kpswitch/util/StatusBarHeightUtil.java, line(s) 21
cn/dreamtobe/kpswitch/util/ViewUtil.java, line(s) 17
com/alivc/component/capture/VideoPusher.java, line(s) 157,305,309,328,333,338,396,411,422,427,450,456,466,583,615,635,640,667,728,758,762,764,771,965,999,1052,368,387,391,649,815,878,925,983,1016,659
com/alivc/component/capture/VideoPusherJNI.java, line(s) 40,51,59,74,82,97,105,115,127,139,150,158,167,176,186,196,198,205,214,223,231,240,248,257,68,91,121,133
com/alivc/rtc/AliRtcEngine.java, line(s) 273,286,300,307
com/alivc/rtc/AliRtcEngineImpl.java, line(s) 1639,1711,2053,2091,2266,3334,335,359,668,959,983,1292,1441,1457,1476,1490,1530,1543,1564,1620,1627,1629,1633,1641,1657,1661,1665,1669,1688,1692,1713,1717,1729,1733,1737,1763,1777,1781,1842,1846,1850,1855,1880,1899,1906,1909,1913,1928,1932,1937,1941,1966,1972,1974,1980,1986,1988,1993,1995,2001,2003,2009,2017,2028,2040,2060,2103,2247,2289,2304,2319,2334,2689,2694,2739,2744,2746,2753,2768,2785,2791,2793,2950,2967,3044,74,76,84,86,100,102,109,111,117,123,153,155,166,169,196,198,221,223,236,238,264,266,289,291,302,304,313,341,343,357,377,381,383,392,394,402,404,411,413,420,427,434,455,457,464,490,492,499,505,512,514,517,519,522,524,534,536,538,545,548,550,552,554,556,558,609,611,666,682,684,691,693,700,702,709,711,718,720,739,777,779,790,793,820,822,845,847,860,862,888,890,913,915,926,928,937,965,967,981,1001,1005,1007,1016,1018,1026,1028,1035,1037,1044,1051,1058,1079,1081,1088,1114,1116,1123,1129,1136,1138,1141,1143,1146,1148,1158,1160,1162,1169,1172,1174,1176,1178,1180,1182,1233,1235,1290,1306,1308,1315,1317,1324,1326,1333,1335,1342,1344,1381,1383,1409,1417,1464,1468,1474,1477,1482,1488,1494,1500,1502,1508,1515,1522,1528,1546,1551,1553,1607,1621,1649,1655,1673,1679,1682,1705,1727,1747,1754,1760,1769,1775,1786,1793,1796,1802,1807,1815,1820,1825,1834,1840,1891,1897,1920,1926,1954,1959,1963,2015,2021,2034,2048,2097,2114,2126,2132,2159,2169,2177,2179,2185,2191,2193,2200,2213,2220,2222,2230,2232,2237,2239,2245,2258,2264,2272,2274,2280,2282,2295,2297,2310,2312,2323,2325,2340,2342,2351,2361,2369,2371,2377,2381,2388,2390,2397,2399,2406,2414,2422,2440,2447,2452,2458,2460,2471,2506,2518,2553,2565,2581,2583,2591,2593,2600,2602,2611,2619,2628,2676,2761,2770,2796,2856,2858,2864,2895,2901,2907,2913,2919,2925,2931,2937,2943,3046,3055,3057,3066,3068,3077,3079,3088,3090,3099,3101,3110,3112,3121,3123,3132,3134,3143,3145,3154,3156,3165,3167,3176,3178,3187,3189,3198,3200,3209,3211,3220,3222,3231,3233,3242,3244,3253,3255,3264,3266,3275,3277,3288,3300,3304,3314,3318,3333,3384,3386,3395,3397,1544
com/alivc/rtc/device/DeviceInfo.java, line(s) 31,58,64
com/alivc/rtc/device/UTUtdid.java, line(s) 133,135,140,142,153,155,160,162,206,215,241,244,249,252
com/bjz/comm/net/factory/ApiFactory.java, line(s) 59,66
com/bjz/comm/net/factory/ApiGameFactory.java, line(s) 57,64
com/bjz/comm/net/mvp/presenter/FcCommonPresenter.java, line(s) 109
com/bjz/comm/net/premission/PermissionActivity.java, line(s) 52,332,345,360
com/bjz/comm/net/premission/PermissionManager.java, line(s) 34
com/bjz/comm/net/receiver/NetworkConnectChangedReceiver.java, line(s) 35,41,51
com/bjz/comm/net/utils/MD5Utils.java, line(s) 21,88,92,93
com/bjz/comm/net/utils/RxHelper.java, line(s) 98,103,126,130,141,189
com/bjz/comm/net/utils/TokenLoader.java, line(s) 50,82,86
com/contrarywind/view/WheelView.java, line(s) 337
com/coremedia/iso/boxes/sampleentry/AudioSampleEntry.java, line(s) 195
com/litesuits/orm/LiteOrm.java, line(s) 82,84,88,118,302
com/litesuits/orm/db/TableManager.java, line(s) 92,133,124,172,250,91,96,97,102,103,120,122,132,139,140,160,161,181,182,183,188,189
com/litesuits/orm/db/assit/Querier.java, line(s) 12,18,21,11,17,20
com/litesuits/orm/db/assit/SQLStatement.java, line(s) 243,279,513,169,284,100,101,125,126,168,182,183,186,187,226,227,242,274,275,278,283,316,345,361,362,416,417,490,500,512,317,346,491,501
com/litesuits/orm/db/assit/Transaction.java, line(s) 16,22,23
com/litesuits/orm/db/utils/DataUtil.java, line(s) 109,110
com/litesuits/orm/log/OrmLog.java, line(s) 41,74,124,157,62,95,145,178,20,27,48,81,131,164,34,67,117,150,55,88,138,171
com/preview/PreviewDialogFragment.java, line(s) 155
com/serenegiant/usb/DeviceFilter.java, line(s) 73,75
com/serenegiant/usb/USBMonitor.java, line(s) 242,249,828,847,425,429,432,844,282,467
com/serenegiant/usb/UVCCamera.java, line(s) 1080,1085,1094,1099,483,1119
com/snail/antifake/deviceid/IpScanner.java, line(s) 47,89,123
com/socks/library/Util.java, line(s) 14,16
com/socks/library/klog/BaseLog.java, line(s) 28,37,31,25,34,40
com/socks/library/klog/FileLog.java, line(s) 17,19
com/socks/library/klog/JsonLog.java, line(s) 29
com/socks/library/klog/XmlLog.java, line(s) 27
com/tablayout/SlidingScaleTabLayout.java, line(s) 674
com/tablayout/transformer/TabScaleTransformer.java, line(s) 28
com/zhy/http/okhttp/cookie/store/PersistentCookieStore.java, line(s) 145,158,161
com/zhy/http/okhttp/log/LoggerInterceptor.java, line(s) 42,45,46,47,49,52,55,58,60,71,72,73,75,79,81,83,86
com/zhy/http/okhttp/utils/L.java, line(s) 10
ezy/assist/compat/RomUtil.java, line(s) 157
ezy/assist/compat/SettingsCompat.java, line(s) 90,105
im/osyhbpahvl/javaBean/wallet/BankCardListResBean.java, line(s) 83
im/osyhbpahvl/javaBean/wallet/BillRecordDetailBean.java, line(s) 90
im/osyhbpahvl/javaBean/wallet/BillRecordResBillListBean.java, line(s) 212
im/osyhbpahvl/javaBean/wallet/WalletPaymentBankCardBean.java, line(s) 78,90
im/osyhbpahvl/javaBean/wallet/WalletWithdrawTemplateBean.java, line(s) 69
im/osyhbpahvl/messenger/AndroidUtilities.java, line(s) 1035,1772,1782,185,242,381,463,478,920,995,1027,1072,1085,1154,1163,1172,1181,1278,1281,1399,1414,1429,1474,1485,1549,1568,1665,1680,1737,1759,1792,1922,1985,2026,2038,2079,2240,3108
im/osyhbpahvl/messenger/AnimatedFileDrawableStream.java, line(s) 56
im/osyhbpahvl/messenger/AppChooserTargetService.java, line(s) 54,96,178
im/osyhbpahvl/messenger/ApplicationLoader.java, line(s) 79,128,163,187,199,213,223,260,263,274,277,312,72,131,299,327,341,361,378,434
im/osyhbpahvl/messenger/ContactsController.java, line(s) 446,463,479,681,687,999,1052,1126,1482,1512,1531,1705,1715,1739,1890,1895,1926,2003,2020,2582,2739,586,612,843,921,935,1517,1661,2227,2236,2473,2482,2488,2506,2812,3333,3347,3388
im/osyhbpahvl/messenger/ContactsSyncAdapterService.java, line(s) 49,30
im/osyhbpahvl/messenger/DispatchQueue.java, line(s) 26,35,47,61,85
im/osyhbpahvl/messenger/DownloadController.java, line(s) 1137
im/osyhbpahvl/messenger/Emoji.java, line(s) 192,105,117,128,356,402,422,491,503,704,744,773
im/osyhbpahvl/messenger/FileLoadOperation.java, line(s) 1096,1098,1175,1378,1449,1594,1638,1717,2035,2145,2177,350,505,518,535,833,837,919,927,956,999,1027,1115,1132,1291,1297,1305,1311,1319,1325,1333,1339,1348,1408,1410,1419,1427,1603,1773,1775,1860,1874,1876
im/osyhbpahvl/messenger/FileLoader.java, line(s) 923,1382,1390,1398,1407
im/osyhbpahvl/messenger/FileLog.java, line(s) 235,260,102,128,153,178,285,310
im/osyhbpahvl/messenger/FileRefController.java, line(s) 123,636,974
im/osyhbpahvl/messenger/FileStreamLoadOperation.java, line(s) 138
im/osyhbpahvl/messenger/FileUploadOperation.java, line(s) 115,139,206,427,549,691
im/osyhbpahvl/messenger/GcmPushListenerService.java, line(s) 37,50,99,108,127,139,210,319,427,2439,2494,161,181,1180,2282,2295,2322,2353,2355,2271
im/osyhbpahvl/messenger/ImageLoader.java, line(s) 2072,2142,2156,2168,2181,2194,2202,202,210,219,243,247,257,263,315,338,358,379,405,417,437,595,605,614,638,642,653,666,839,860,1075,1140,1213,1276,1367,1911,1917,2132,2138,2160,2172,2185,2198,2206,2251,2256,2264,2272,3547,3559,3583,3595,3665,3674,3709,3716,3760,3925,3931,4041
im/osyhbpahvl/messenger/ImageReceiver.java, line(s) 809,899,946,978,1179
im/osyhbpahvl/messenger/KeepAliveJob.java, line(s) 28,44,50,72,84
im/osyhbpahvl/messenger/LocaleController.java, line(s) 1017,2350,2459,2496,432,438,777,910,957,965,971,977,1095,1124,1179,1782,1858,1883,1905,1927,1961,2009,2049,2144,2161,2185,2427,3547
im/osyhbpahvl/messenger/LocationController.java, line(s) 555,638,702
im/osyhbpahvl/messenger/MediaController.java, line(s) 859,1407,1446,1489,1494,1514,1533,1545,1555,5366,5412,6332,6357,6416,6524,6953,484,523,720,745,753,813,818,823,828,845,869,878,988,1000,1066,1081,1115,1126,1189,1764,1794,1911,2038,2053,2363,2369,2456,2618,2718,2744,2761,2802,2818,2828,2888,2999,3139,3165,3281,3290,3395,3475,3539,3643,3651,3672,3694,3702,3724,3734,3740,3748,3772,3781,3787,3795,3814,3847,3854,3874,3880,3884,3889,3896,3969,4017,4026,4053,4119,4124,4148,4279,4323,4372,4377,4455,4629,4972,5269,5318,5375,5400,5408,5514,5557,5617,5748,5812,5948,6055,6109,6200,6267,6351,6364,6433,6475,6497,6949
im/osyhbpahvl/messenger/MediaDataController.java, line(s) 286,425,481,544,688,744,952,1021,1059,1073,1242,1321,1404,1645,1736,1812,1999,2019,2129,2576,2856,2894,2976,3044,3078,3099,3130,3199,3227,3267,3339,3505,3532,3693,3778,3809,3990,4062,4079,4177,4197,4218,4224,4243,4298,4345,4475,4551,4573,4765,4797,4875,4877,5111,5622,5707,5848,5890,5929,5968,6004,6076,6114,6191,6278
im/osyhbpahvl/messenger/MessageObject.java, line(s) 268,3838,3883,4016,4107,4113,4547,4578,4589,4605,4621,4748,4770,4787,4826,4860,4942,4958
im/osyhbpahvl/messenger/MessagesController.java, line(s) 2440,2445,2490,2501,2526,2533,2550,2562,4135,4144,6025,6489,6496,6502,6553,6586,6624,9382,9397,9447,9558,9567,9580,9642,9651,9663,10018,10224,10243,10458,11379,11462,11495,11546,11575,11577,11585,11822,11829,12818,12894,12910,12925,13029,13223,13264,13278,13291,13330,13659,13704,14516,14517,14522,14526,14532,14547,14569,15161,1396,3349,3460,3488,3518,3852,5740,6038,6605,7543,7969,8625,8650,9700,9829,10522,10645,10721,11306,13253,14561,15533,15844,15938,15941
im/osyhbpahvl/messenger/MessagesStorage.java, line(s) 227,316,7278,348,356,372,443,479,1034,1101,1103,1117,1150,1186,1370,1458,1504,1527,1651,1719,1814,1851,1894,1967,2061,2154,2183,2278,2287,2336,2379,2433,2515,2593,2721,2940,2952,3036,3075,3131,3171,3205,3207,3253,3311,3340,3463,3518,3526,3648,3675,3822,3873,3929,4005,4050,4084,4166,4303,4379,4502,4564,4624,4668,4670,4752,4832,4872,4902,4985,4993,5082,5117,5142,5223,5298,5340,5386,5396,5415,5441,5564,5619,5650,5673,5700,5729,5790,5843,5868,5943,6003,6072,6211,6265,6342,6484,6550,6578,6594,6719,6750,6843,6861,6864,6920,6943,6989,7050,7099,7143,7158,7205,7248,7289,7331,7424,7469,7550,7637,7664,7706,7754,7770,7791,7807,7843,7884,7950,7979,8012,8088,8147,8193,8233,8339,8395,8409,8432,8446,8484,8605,8708,8749,8790,8898,8932,8970,8992,9019,9036,9098,9109,9125,9134,9188,9228,9293,9396,9429,9548,9588,9617,9715,9790,9848,9917,10022,10082,10214,10315,10594,10727,10841,10967,11086,11166,11274,11366,11505,11584,11680,11854,11955,12139,12291,12361,12455,12538,12617,12686,12775,13071,13174,13619,13658,13708,13737,13826,13883,13929,13967,13995,14032,14087,14145,14158,14235,14297,14369,14398,14430,14488,14502,14562,14587,14613,14671,14684,14752,14776,14805,14835,14890,15105,15142,15192,15199,15269,15332,15347,15368,15488,15541,15606,15646,15686,15768,15820,15839,15878,15961,16013,16017,16132,16293,16397,16414,16471,16535,16609,16692,16757,16865,17046,17112,17174,17247,17308,17428,17512,17570,17666,17785,18040,18120,18200,18238,18288,18303,18355,18388,18434,18489,18586,18626,18748,18808,18864,18896,18923,18961,19069,19072,19151,19279,19363,19421,19512,19607,19710,19771,19824,19976,20066,20146,20266,20305,20308,20349,20362,20408,20485,20526,20533,20571,20614,20630,20651,20667,20688,20710,20730,20741,20756,20771,20799,20822,20856,20891,20925,20959,20996,21030
im/osyhbpahvl/messenger/MusicBrowserService.java, line(s) 208,300,337,386,515
im/osyhbpahvl/messenger/MusicPlayerService.java, line(s) 183,289
im/osyhbpahvl/messenger/NativeLoader.java, line(s) 125,178,47,77,83,89,93,98,105,128,156,165,184,195,204
im/osyhbpahvl/messenger/NotificationBadge.java, line(s) 182,459
im/osyhbpahvl/messenger/NotificationCenter.java, line(s) 963
im/osyhbpahvl/messenger/NotificationImageProvider.java, line(s) 109
im/osyhbpahvl/messenger/NotificationsController.java, line(s) 212,348,2877,5539,187,192,200,223,260,294,315,1364,1378,2723,2800,2813,2828,2856,2860,2869,2883,2941,2973,3184,3293,3526,3803,5616,5651,5655,5664,4640,4706,4767,4784,4942,5337,5509,5552
im/osyhbpahvl/messenger/ScreenReceiver.java, line(s) 13,27
im/osyhbpahvl/messenger/SecretChatHelper.java, line(s) 586,1146,1689,1690,663,689,775,1078,1292,1470,1618,1684,1700,1773,1969,1983,2095,2124,2165,2181
im/osyhbpahvl/messenger/SendMessagesHelper.java, line(s) 131,1945,2693,7980,8213,187,192,201,919,936,1396,2397,2424,2485,2504,2552,2564,2603,2685,2746,2780,2810,2868,2921,3409,5066,5072,5223,5228,5284,5297,5536,5580,5616,6129,6185,6215,6879,6930,6988,7634,7757,7833,8149,8155,8161,8173
im/osyhbpahvl/messenger/SharedConfig.java, line(s) 750,157,296,317,331,401,723
im/osyhbpahvl/messenger/SmsReceiver.java, line(s) 49
im/osyhbpahvl/messenger/UserConfig.java, line(s) 193
im/osyhbpahvl/messenger/Utilities.java, line(s) 73,233,249,278,291,302,314,333,350,382
im/osyhbpahvl/messenger/VideoEditedInfo.java, line(s) 73
im/osyhbpahvl/messenger/VideoEncodingService.java, line(s) 36,87,54
im/osyhbpahvl/messenger/WearDataLayerListenerService.java, line(s) 38,46,62,231,238,55,225,242,338
im/osyhbpahvl/messenger/XiaomiUtilities.java, line(s) 46
im/osyhbpahvl/messenger/browser/Browser.java, line(s) 234,274,101,116,215,296,313
im/osyhbpahvl/messenger/camera/CameraController.java, line(s) 163,190,551,568,587,304,320,325,417,439,465,477,509,541,594,623,672,700,703,720,726,747,770,784,836,841,847,852,860,883
im/osyhbpahvl/messenger/camera/CameraSession.java, line(s) 210,214,172,252,267,342,355,371,376,466
im/osyhbpahvl/messenger/secretmedia/ExtendedDefaultDataSource.java, line(s) 199
im/osyhbpahvl/messenger/support/JobIntentService.java, line(s) 129
im/osyhbpahvl/messenger/support/customtabs/CustomTabsSessionToken.java, line(s) 19,28,37,46
im/osyhbpahvl/messenger/support/customtabsclient/shared/CustomTabsHelper.java, line(s) 89
im/osyhbpahvl/messenger/support/fingerprint/FingerprintManagerCompatApi23.java, line(s) 21,30,39
im/osyhbpahvl/messenger/utils/PlayerUtils.java, line(s) 1062,413,641,663,668,689,746,792,843,889,953,1004,1023,1118,1177,1232,1296,1364,1785,2047,2119,2522,2534,2547,2561,2575,2589,2603
im/osyhbpahvl/messenger/utils/SelectorUtils.java, line(s) 91
im/osyhbpahvl/messenger/voip/AppConnectionService.java, line(s) 31,68,48,58,16,24
im/osyhbpahvl/messenger/voip/AudioRecordJNI.java, line(s) 249,64,77,93,111,135,179,202,240,106,212,61,74,90
im/osyhbpahvl/messenger/voip/AudioTrackJNI.java, line(s) 38,65,113,123,121,32
im/osyhbpahvl/messenger/voip/JNIUtilities.java, line(s) 80
im/osyhbpahvl/messenger/voip/VoIPBaseService.java, line(s) 608,702,760,865,907,914,920,1088,1280,1441,1453,1481,1493,1500,180,188,279,541,579,656,751,846,875,1023,1039,1191,1357,1368
im/osyhbpahvl/messenger/voip/VoIPServerConfig.java, line(s) 19
im/osyhbpahvl/messenger/voip/VoIPService.java, line(s) 367,452,457,694,713,742,749,778,794,961,1072,1089,1234,97,286,342,365,398,421,508,565,575,686,718,878,1029,1086,1121,111,392,417,555,733,822,829,839,865,893
im/osyhbpahvl/phoneformat/PhoneFormat.java, line(s) 101,107,128,137,200,239
im/osyhbpahvl/sqlite/SQLiteCursor.java, line(s) 98,103
im/osyhbpahvl/sqlite/SQLiteDatabase.java, line(s) 60,77
im/osyhbpahvl/sqlite/SQLitePreparedStatement.java, line(s) 107,108
im/osyhbpahvl/tgnet/ConnectionsManager.java, line(s) 235,332,386,532,540,556,571,583,633,666,674,682,827,834,837,1032,1069,344,346,360,379,397,399,586,650,720,732,756,843,875,925,930,951,965,978,1012,1049
im/osyhbpahvl/tgnet/FCTokenRequestCallback.java, line(s) 45,67,68,126,132,138,146,150
im/osyhbpahvl/tgnet/NativeByteBuffer.java, line(s) 37,130,145,174,189,209,220,256,292,303,340,392,412,426,442,455,488,515,546,562
im/osyhbpahvl/tgnet/NetworkConfig.java, line(s) 279,288,352,380,387,398,82,102,208,240,241
im/osyhbpahvl/tgnet/SerializedData.java, line(s) 64,73,82,91,122,145,177,192,207,222,258,269,305,316,351,378,393,429,460,476,495,516
im/osyhbpahvl/tgnet/TLClassStore.java, line(s) 54
im/osyhbpahvl/tgnet/TLJsonResolve.java, line(s) 86,141,169
im/osyhbpahvl/translate/MD5.java, line(s) 33
im/osyhbpahvl/ui/ArticleViewer.java, line(s) 2897,2917,3945,4573,4649,4833,4983,5028,5049,5190,5200,5228,5241,7585,7595,7704,7725,7751,10632,11061,11463,11654,11726,11732,11760,11817
im/osyhbpahvl/ui/AudioSelectActivity.java, line(s) 278
im/osyhbpahvl/ui/CacheControlActivity.java, line(s) 238,456,476,584,593,661,841,931,954
im/osyhbpahvl/ui/CancelAccountDeletionActivity.java, line(s) 136,267,399,973,1087
im/osyhbpahvl/ui/ChangeBioActivity.java, line(s) 236,247
im/osyhbpahvl/ui/ChangePhoneActivity.java, line(s) 133,293,685,695,863,1492,1606
im/osyhbpahvl/ui/ChangePhoneNumberActivity.java, line(s) 187,197
im/osyhbpahvl/ui/ChangeSignActivity.java, line(s) 152,163
im/osyhbpahvl/ui/ChangeUsernameActivity.java, line(s) 87,105,496,511
im/osyhbpahvl/ui/ChannelAdminLogActivity.java, line(s) 971,1415,2495,2505,2515,2525,2535,2545,2555,2565
im/osyhbpahvl/ui/ChannelCreateActivity.java, line(s) 782,891,1018,1030
im/osyhbpahvl/ui/ChatActivity.java, line(s) 11700,14919,14955,15387,934,960,989,1009,1300,4005,4146,5558,5765,7400,7729,7850,9466,10171,10234,12641,13173,15037,16831,16866,17317,17670,17847,17853,18825,18877,18892,20448,20512,20601,20658,20700,21521,21531,21541,21551,21561,21571,21581,21591
im/osyhbpahvl/ui/ChatEditActivity.java, line(s) 956
im/osyhbpahvl/ui/ChatEditTypeActivity.java, line(s) 450,464,496
im/osyhbpahvl/ui/ChatRightsEditActivity.java, line(s) 613,641
im/osyhbpahvl/ui/ChatUsersActivity.java, line(s) 2347,2901
im/osyhbpahvl/ui/ContactAddActivity.java, line(s) 181
im/osyhbpahvl/ui/ContactsActivity.java, line(s) 512,619,704
im/osyhbpahvl/ui/ContentPreviewViewer.java, line(s) 798,844,880,902,914,1009
im/osyhbpahvl/ui/CountrySelectActivity.java, line(s) 352,544,555
im/osyhbpahvl/ui/DialogsActivity.java, line(s) 1888,2783
im/osyhbpahvl/ui/DocumentSelectActivity.java, line(s) 744,151,173,526,775,789,797,816,847
im/osyhbpahvl/ui/ExternalActionActivity.java, line(s) 596,600,69,389,437
im/osyhbpahvl/ui/GroupCreateFinalActivity.java, line(s) 145
im/osyhbpahvl/ui/GroupEditActivity.java, line(s) 904
im/osyhbpahvl/ui/GroupInviteActivity.java, line(s) 143,158
im/osyhbpahvl/ui/GroupStickersActivity.java, line(s) 709
im/osyhbpahvl/ui/IdenticonActivity.java, line(s) 68
im/osyhbpahvl/ui/IndexActivity.java, line(s) 287,317,322,795,824,314,584,600,777,780,785,827
im/osyhbpahvl/ui/InviteContactsActivity.java, line(s) 570,614,800,826
im/osyhbpahvl/ui/LanguageSelectActivity.java, line(s) 275,286
im/osyhbpahvl/ui/LaunchActivity.java, line(s) 180,521,570,575,605,647,693,2234,2454,2515,2808,3144,3178,3276,3280,228,486,537,1045,1197,1205,1257,1363,1469,1566,1584,1601,1622,1650,1706,1744,1855,1881,1891,2108,2226,2333,2341,2619,2628,2901,3001,3037,3066,3210,3401,3472
im/osyhbpahvl/ui/LaunchAgDialogActivity.java, line(s) 38
im/osyhbpahvl/ui/LocationActivity.java, line(s) 215,264,775,955,1069,1118,1163,1176,1378,1462,1519,1536,1545
im/osyhbpahvl/ui/LoginActivity.java, line(s) 375,432,725,1132,1139,1335,2045,2163,4049
im/osyhbpahvl/ui/Media1Activity.java, line(s) 2213
im/osyhbpahvl/ui/MediaActivity.java, line(s) 2113
im/osyhbpahvl/ui/NewContactActivity.java, line(s) 458,472,585
im/osyhbpahvl/ui/NotificationsCustomSettingsActivity.java, line(s) 440,884,925,960
im/osyhbpahvl/ui/NotificationsSettingsActivity.java, line(s) 432,471,504,712
im/osyhbpahvl/ui/PasscodeActivity.java, line(s) 498,612
im/osyhbpahvl/ui/PassportActivity.java, line(s) 1066,3121,3599,3886,3992,4791,5542,6240,6323,8192,8259,8442,8511,8668,9412,9526
im/osyhbpahvl/ui/PeopleNearbyActivity.java, line(s) 437,364,573
im/osyhbpahvl/ui/PhoneBookSelectActivity.java, line(s) 227
im/osyhbpahvl/ui/PhonebookShareActivity.java, line(s) 523,579,627
im/osyhbpahvl/ui/PhotoCropActivity.java, line(s) 348,415,335,340,357
im/osyhbpahvl/ui/PhotoViewer.java, line(s) 1389,5040,10467,455,653,1953,2582,2595,2914,3130,3898,3956,3985,4038,4062,4466,4473,4696,4718,4810,4870,4883,5125,5132,7130,8034,8358,8396,8477,8694,8785,9551
im/osyhbpahvl/ui/PopupNotificationActivity.java, line(s) 545,1502
im/osyhbpahvl/ui/PrivacyControlActivity.java, line(s) 118,724
im/osyhbpahvl/ui/PrivacySettingsActivity.java, line(s) 443,523
im/osyhbpahvl/ui/ProfileActivity.java, line(s) 271,608,626,1402,1416,1428,1459,2159
im/osyhbpahvl/ui/ProfileNotificationsActivity.java, line(s) 509,534
im/osyhbpahvl/ui/SecretMediaViewer.java, line(s) 497,503,545,594,865,990,1395
im/osyhbpahvl/ui/SessionsActivity.java, line(s) 367,393
im/osyhbpahvl/ui/SettingsActivity.java, line(s) 2816
im/osyhbpahvl/ui/ShareActivity.java, line(s) 77,99
im/osyhbpahvl/ui/StickersActivity.java, line(s) 419,430,521
im/osyhbpahvl/ui/TestActivity.java, line(s) 35
im/osyhbpahvl/ui/ThemeActivity.java, line(s) 1037,1049,1135,1140,1181,1518,1528,1534,1558
im/osyhbpahvl/ui/ThemeSetUrlActivity.java, line(s) 101,119,453,468,696,707
im/osyhbpahvl/ui/TwoStepVerificationActivity.java, line(s) 170,1025
im/osyhbpahvl/ui/VoIPActivity.java, line(s) 219
im/osyhbpahvl/ui/WallpaperActivity.java, line(s) 833,842,863,887,906,923
im/osyhbpahvl/ui/WebviewActivity.java, line(s) 91,190,292,303,490,500
im/osyhbpahvl/ui/actionbar/ActionBarLayout.java, line(s) 189,1472,1663,2270
im/osyhbpahvl/ui/actionbar/ActionBarPopupWindow.java, line(s) 99,318,380
im/osyhbpahvl/ui/actionbar/AlertDialog.java, line(s) 906
im/osyhbpahvl/ui/actionbar/BaseFragment.java, line(s) 136,148,176,191,291,327,418,438,493,507
im/osyhbpahvl/ui/actionbar/BottomSheet.java, line(s) 611,1027,1090,1107
im/osyhbpahvl/ui/actionbar/DrawerLayoutContainer.java, line(s) 394
im/osyhbpahvl/ui/actionbar/Theme.java, line(s) 3161,3203,1197,1253,1261,2155,2219,2726,2733,2785,2819,2895,2940,3353,3385,3408,3444,3468,3657,3678,3691,3778,3829,3834,3896,3943,3999,4032,4068,4143,4147,4256,4268,5478,5491,5497,5599,5606,5615,5622
im/osyhbpahvl/ui/actionbar/ThemeDescription.java, line(s) 715
im/osyhbpahvl/ui/actionbar/XAlertDialog.java, line(s) 939,992
im/osyhbpahvl/ui/activities/LoginActivity.java, line(s) 155,326,73,328
im/osyhbpahvl/ui/activities/WalletRechargeH5Activity.java, line(s) 128,208
im/osyhbpahvl/ui/activities/WalletWithdrawActivity.java, line(s) 307,359,374
im/osyhbpahvl/ui/activities/WalletWithdrawAddNewAccountActivity.java, line(s) 432,439,619,645,705
im/osyhbpahvl/ui/activities/WqDialogsActivity.java, line(s) 1310,2163
im/osyhbpahvl/ui/activities/WqDialogsAdapter.java, line(s) 253
im/osyhbpahvl/ui/adapters/BaseLocationAdapter.java, line(s) 62,84
im/osyhbpahvl/ui/adapters/ContactsAdapter.java, line(s) 98
im/osyhbpahvl/ui/adapters/DialogsAdapter.java, line(s) 234
im/osyhbpahvl/ui/adapters/DialogsSearchAdapter.java, line(s) 371,415,435,825,933,939,1440
im/osyhbpahvl/ui/adapters/PhonebookSearchAdapter.java, line(s) 41,57
im/osyhbpahvl/ui/adapters/SearchAdapter.java, line(s) 94,114,416
im/osyhbpahvl/ui/adapters/SearchAdapterHelper.java, line(s) 361,485,487,508,571
im/osyhbpahvl/ui/bottom/BottomBarLayout.java, line(s) 169
im/osyhbpahvl/ui/cell/FmtDialogCell.java, line(s) 386,757,781,1017,1197,1267,1384,1944,1975,1818
im/osyhbpahvl/ui/cells/AboutLinkCell.java, line(s) 120,130,147,196
im/osyhbpahvl/ui/cells/ArchiveHintCell.java, line(s) 53,58
im/osyhbpahvl/ui/cells/AudioPlayerCell.java, line(s) 68,76
im/osyhbpahvl/ui/cells/BotHelpCell.java, line(s) 102,136,146,163
im/osyhbpahvl/ui/cells/ChatActionCell.java, line(s) 348,353
im/osyhbpahvl/ui/cells/ChatMessageCell.java, line(s) 1156,1180,1235,1246,1344,1358,3245,3344,3379,4246,4929,4939,6466,6556,6593,6600,7526,3839,6919,7027
im/osyhbpahvl/ui/cells/ContextLinkCell.java, line(s) 149,175,229
im/osyhbpahvl/ui/cells/DialogCell.java, line(s) 371,740,765,1141,1299,2005,2036,1876
im/osyhbpahvl/ui/cells/DialogMeUrlCell.java, line(s) 245,359
im/osyhbpahvl/ui/cells/DrawerActionCell.java, line(s) 53
im/osyhbpahvl/ui/cells/DrawerProfileCell.java, line(s) 147
im/osyhbpahvl/ui/cells/PopMenuCell.java, line(s) 47
im/osyhbpahvl/ui/cells/SharedAudioCell.java, line(s) 76,81
im/osyhbpahvl/ui/cells/SharedLinkCell.java, line(s) 308,338,355,365,389,505,517
im/osyhbpahvl/ui/cells/ThemeCell.java, line(s) 191,229
im/osyhbpahvl/ui/cells/ThemesHorizontalListCell.java, line(s) 384,869,878,884,963
im/osyhbpahvl/ui/components/AlertsCreator.java, line(s) 1049,1102,1117
im/osyhbpahvl/ui/components/AnimatedFileDrawable.java, line(s) 194,227
im/osyhbpahvl/ui/components/AudioPlayerAlert.java, line(s) 867,1325,1340
im/osyhbpahvl/ui/components/AvatarDrawable.java, line(s) 216,244
im/osyhbpahvl/ui/components/BlockingUpdateView.java, line(s) 250,272,276
im/osyhbpahvl/ui/components/ChatActivityEnterView.java, line(s) 1840,1879,3270,4603,4652,4864,5011,5026,5040,5054,5077,5087,5141,5646
im/osyhbpahvl/ui/components/ChatAttachAlert.java, line(s) 3724,3737,3741,2460,3713
im/osyhbpahvl/ui/components/ChatAvatarContainer.java, line(s) 280
im/osyhbpahvl/ui/components/ClippingImageView.java, line(s) 96,172
im/osyhbpahvl/ui/components/EditTextBoldCursor.java, line(s) 185,323,756,765
im/osyhbpahvl/ui/components/EditTextCaption.java, line(s) 324,346,408
im/osyhbpahvl/ui/components/EditTextEmoji.java, line(s) 91,494
im/osyhbpahvl/ui/components/EmbedBottomSheet.java, line(s) 198,298,313,340,368,412,488,495,671,680,699,809,898
im/osyhbpahvl/ui/components/EmojiView.java, line(s) 740,1706,2830,4819
im/osyhbpahvl/ui/components/EmojiViewV2.java, line(s) 590,1496,3459
im/osyhbpahvl/ui/components/ForegroundDetector.java, line(s) 58,91,66,99
im/osyhbpahvl/ui/components/ImageUpdater.java, line(s) 272,302,325,351
im/osyhbpahvl/ui/components/InstantCameraView.java, line(s) 500,508,514,884,903,925,1059,1308,1342,1637,1685,1692,1696,1705,1717,1750,1830,2076,460,943,958,989,1001,1067,1075,1085,1098,1109,1146,1168,1174,1180,1189,1241,1400,1405,1412,1580,1733,1783,1795,1912,1921,1931,1939,2013,2149
im/osyhbpahvl/ui/components/LetterDrawable.java, line(s) 60
im/osyhbpahvl/ui/components/PasscodeView.java, line(s) 140,255,929,938,953,1005,1037,1056
im/osyhbpahvl/ui/components/PhotoFilterView.java, line(s) 404,421,436,444,454,467,732,738,747,803,1032
im/osyhbpahvl/ui/components/PhotoPaintView.java, line(s) 438,1261,1268,1295
im/osyhbpahvl/ui/components/PhotoViewerCaptionEnterView.java, line(s) 114,327,362,428,542,573,587,616,698,711
im/osyhbpahvl/ui/components/PipRoundVideoView.java, line(s) 215
im/osyhbpahvl/ui/components/PipVideoView.java, line(s) 407
im/osyhbpahvl/ui/components/RLottieDrawable.java, line(s) 223,348,426
im/osyhbpahvl/ui/components/RadioButton.java, line(s) 61,160
im/osyhbpahvl/ui/components/RecyclerListView.java, line(s) 700,916,930,1624,1632
im/osyhbpahvl/ui/components/ShareAlert.java, line(s) 957,1517
im/osyhbpahvl/ui/components/SpannableStringLight.java, line(s) 24,41,58
im/osyhbpahvl/ui/components/StaticLayoutEx.java, line(s) 48,112,145,151,162,167,172,201,212,242,250
im/osyhbpahvl/ui/components/StickersAlert.java, line(s) 115,803,839,919
im/osyhbpahvl/ui/components/TermsOfServiceView.java, line(s) 162
im/osyhbpahvl/ui/components/ThemeEditorView.java, line(s) 100,109,1336,1596,1801
im/osyhbpahvl/ui/components/TimerDrawable.java, line(s) 71
im/osyhbpahvl/ui/components/VideoTimelinePlayView.java, line(s) 300,357,386
im/osyhbpahvl/ui/components/VideoTimelineView.java, line(s) 230,287,316
im/osyhbpahvl/ui/components/WallpaperUpdater.java, line(s) 85,101,126,152,183,186,198,214
im/osyhbpahvl/ui/components/WebPlayerView.java, line(s) 1058,409,637,659,664,685,742,788,839,885,949,1000,1019,1114,1173,1228,1292,1360,1781,2043,2091,2452,2464,2477,2491,2505,2519,2533
im/osyhbpahvl/ui/components/compress/Checker.java, line(s) 80
im/osyhbpahvl/ui/components/compress/Luban.java, line(s) 80,79
im/osyhbpahvl/ui/components/paint/RenderView.java, line(s) 308,316,326,339,350,360,379,499
im/osyhbpahvl/ui/components/paint/Shader.java, line(s) 20,28,82,92
im/osyhbpahvl/ui/components/paint/Slice.java, line(s) 25,56,90
im/osyhbpahvl/ui/components/paint/Utils.java, line(s) 12
im/osyhbpahvl/ui/components/toast/ToastUtils.java, line(s) 73
im/osyhbpahvl/ui/components/voip/CallSwipeView.java, line(s) 94
im/osyhbpahvl/ui/components/voip/DarkTheme.java, line(s) 2384
im/osyhbpahvl/ui/components/voip/VoIPHelper.java, line(s) 153,567
im/osyhbpahvl/ui/dialogs/McShareDialog.java, line(s) 197
im/osyhbpahvl/ui/fragments/BaseFmts.java, line(s) 220,276,290,312
im/osyhbpahvl/ui/fragments/CallRecordsFragment.java, line(s) 601,196
im/osyhbpahvl/ui/fragments/ContactsFragment.java, line(s) 638
im/osyhbpahvl/ui/fragments/DialogsFragment.java, line(s) 505,520,2246
im/osyhbpahvl/ui/fragments/DiscoveryFragment.java, line(s) 203,254
im/osyhbpahvl/ui/fragments/MeFragmentV2.java, line(s) 487,985,1044,1059
im/osyhbpahvl/ui/fragments/TabWebFragment.java, line(s) 172,279,316,339,503
im/osyhbpahvl/ui/fragments/adapter/FmtContactsAdapter.java, line(s) 143
im/osyhbpahvl/ui/hui/CameraViewActivity.java, line(s) 2661,2674,2678,1778,2650
im/osyhbpahvl/ui/hui/CharacterParser.java, line(s) 31
im/osyhbpahvl/ui/hui/WebViewAppCompatActivity.java, line(s) 103,219
im/osyhbpahvl/ui/hui/adapter/AddNewCallAdapter.java, line(s) 77
im/osyhbpahvl/ui/hui/adapter/CreateGroupAdapter.java, line(s) 96
im/osyhbpahvl/ui/hui/adapter/CreateSecureAdapter.java, line(s) 82
im/osyhbpahvl/ui/hui/adapter/MyDialogsAdapter.java, line(s) 243
im/osyhbpahvl/ui/hui/adapter/NewChatAdapter.java, line(s) 86
im/osyhbpahvl/ui/hui/adapter/SelectContactsAdapter.java, line(s) 85
im/osyhbpahvl/ui/hui/adapter/StartChatAdapter.java, line(s) 86
im/osyhbpahvl/ui/hui/adapter/grouping/AddGroupingUserAdapter.java, line(s) 84
im/osyhbpahvl/ui/hui/adapter/pageAdapter/PageSelectionAdapter.java, line(s) 80
im/osyhbpahvl/ui/hui/adapter/pageAdapter/PageStickerAdapter.java, line(s) 111
im/osyhbpahvl/ui/hui/chats/CreateGroupFinalActivity.java, line(s) 157
im/osyhbpahvl/ui/hui/chats/GroupShareActivity.java, line(s) 216
im/osyhbpahvl/ui/hui/chats/MryDialogsActivity.java, line(s) 1784,2637
im/osyhbpahvl/ui/hui/chats/NewChatActivity.java, line(s) 407
im/osyhbpahvl/ui/hui/chats/ProfileGroupActivity.java, line(s) 364,838,856,1053,1633,1647,1659,1690,2814
im/osyhbpahvl/ui/hui/chats/StartChatActivity.java, line(s) 360
im/osyhbpahvl/ui/hui/contacts/AddContactsActivity.java, line(s) 267
im/osyhbpahvl/ui/hui/discovery/ActionIntroActivity.java, line(s) 463,500,535,581
im/osyhbpahvl/ui/hui/discovery/NearPersonAndGroupActivity.java, line(s) 484,488,493,496,503,557,420,649
im/osyhbpahvl/ui/hui/discovery/QrScanActivity.java, line(s) 315,341
im/osyhbpahvl/ui/hui/discoveryweb/DiscoveryJumpPausedFloatingView.java, line(s) 253,515
im/osyhbpahvl/ui/hui/discoveryweb/DiscoveryJumpToPage.java, line(s) 112,139,554,567,601,771
im/osyhbpahvl/ui/hui/friendscircle/fcHelper/OKHttpStreamFetcher.java, line(s) 45,44
im/osyhbpahvl/ui/hui/friendscircle/okhttphelper/AESHelper.java, line(s) 62,75
im/osyhbpahvl/ui/hui/friendscircle/okhttphelper/MD5Utils.java, line(s) 21,88,92,93
im/osyhbpahvl/ui/hui/friendscircle/okhttphelper/OkHttpStringCallBack.java, line(s) 74,65,75
im/osyhbpahvl/ui/hui/friendscircle_v1/adapter/FcDetailAdapter.java, line(s) 189
im/osyhbpahvl/ui/hui/friendscircle_v1/adapter/FcHomeAdapter.java, line(s) 181,690
im/osyhbpahvl/ui/hui/friendscircle_v1/adapter/UserFcListAdapter.java, line(s) 167
im/osyhbpahvl/ui/hui/friendscircle_v1/base/BaseFcActivity.java, line(s) 310,385,498,223,237,260,345,370,521
im/osyhbpahvl/ui/hui/friendscircle_v1/base/BaseFcFragment.java, line(s) 395,470,583,267,281,303,430,455,606
im/osyhbpahvl/ui/hui/friendscircle_v1/base/CommFcListActivity.java, line(s) 162
im/osyhbpahvl/ui/hui/friendscircle_v1/base/CommFcListFragment.java, line(s) 164,165,176
im/osyhbpahvl/ui/hui/friendscircle_v1/fragments/FcFollowFragment.java, line(s) 330,918
im/osyhbpahvl/ui/hui/friendscircle_v1/fragments/FcHomeFragment.java, line(s) 245,799,851
im/osyhbpahvl/ui/hui/friendscircle_v1/fragments/FcRecommendFragment.java, line(s) 240,773,825
im/osyhbpahvl/ui/hui/friendscircle_v1/helper/FcDBHelper.java, line(s) 151,157,167,169
im/osyhbpahvl/ui/hui/friendscircle_v1/player/logger/ExoPlayerLogger.java, line(s) 99,104,126,129,140,147,156,161,178,181,187,197,201,211,216,220,222,227,229,234,239,244,249,254,259,264,269,274,279,297,302,307,324,327,330,333,336,339,342,345,117,316
im/osyhbpahvl/ui/hui/friendscircle_v1/player/player/AbsBaseVideoPlayer.java, line(s) 36,47,54,63,70,78,90
im/osyhbpahvl/ui/hui/friendscircle_v1/player/player/VideoPlayerManager.java, line(s) 379
im/osyhbpahvl/ui/hui/friendscircle_v1/player/utils/Utils.java, line(s) 62,66
im/osyhbpahvl/ui/hui/friendscircle_v1/ui/FcPageDetailActivity.java, line(s) 154,200,336,355,866
im/osyhbpahvl/ui/hui/friendscircle_v1/ui/FcPageMineActivity.java, line(s) 980,1029
im/osyhbpahvl/ui/hui/friendscircle_v1/ui/FcPageOthersActivity.java, line(s) 1043
im/osyhbpahvl/ui/hui/friendscircle_v1/ui/FcPublishActivity.java, line(s) 748,1003,1451,901,1454,1464
im/osyhbpahvl/ui/hui/friendscircle_v1/ui/FcTopicMainActivity.java, line(s) 851,900
im/osyhbpahvl/ui/hui/friendscircle_v1/ui/ImagePreSelectorActivity.java, line(s) 2436,2449,2453,1623,2425
im/osyhbpahvl/ui/hui/friendscircle_v1/ui/ImagePreviewActivity.java, line(s) 1345,10234,552,750,1902,2543,2556,2854,3063,3769,3826,3855,3910,3934,4341,4348,4554,4576,4668,4726,4739,7143,7935,8198,8236,8491,8577,9338
im/osyhbpahvl/ui/hui/friendscircle_v1/ui/ImageSelectorActivity.java, line(s) 3080,3093,3097,2098,3069
im/osyhbpahvl/ui/hui/friendscircle_v1/utils/KeyboardUtils.java, line(s) 46,178,185,225,156,194,211
im/osyhbpahvl/ui/hui/friendscircle_v1/utils/StatusBarHeightUtil.java, line(s) 21
im/osyhbpahvl/ui/hui/friendscircle_v1/utils/ViewUtil.java, line(s) 17
im/osyhbpahvl/ui/hui/friendscircle_v1/view/FCIndexBar.java, line(s) 119
im/osyhbpahvl/ui/hui/friendscircle_v1/view/FcChildReplyListDialog.java, line(s) 210
im/osyhbpahvl/ui/hui/friendscircle_v1/view/FcDoReplyDialog.java, line(s) 189,396
im/osyhbpahvl/ui/hui/friendscircle_v1/view/flowLayout/TagAdapter.java, line(s) 84,88
im/osyhbpahvl/ui/hui/friendscircle_v1/view/flowLayout/TagFlowLayout.java, line(s) 122
im/osyhbpahvl/ui/hui/friendscircle_v1/view/panel/KPSwitchRootLayoutHandler.java, line(s) 34,45,49,55,59
im/osyhbpahvl/ui/hui/friendscircle_v1/view/richtext/TextCommonUtils.java, line(s) 241,269,272
im/osyhbpahvl/ui/hui/friendscircle_v1/view/toast/FcToastUtils.java, line(s) 78
im/osyhbpahvl/ui/hui/login/ChangePersonalInformationActivity.java, line(s) 487
im/osyhbpahvl/ui/hui/login/LoginPasswordContronllerActivity.java, line(s) 188
im/osyhbpahvl/ui/hui/login/PcScanCodeLoginActivity.java, line(s) 110,153
im/osyhbpahvl/ui/hui/mine/AboutAppActivity.java, line(s) 219,309,361,376
im/osyhbpahvl/ui/hui/mine/DataUsageActivity.java, line(s) 356
im/osyhbpahvl/ui/hui/mine/MrySessionsActivity.java, line(s) 706,731
im/osyhbpahvl/ui/hui/mine/MryThemeActivity.java, line(s) 1015,1048,1060,1146,1151,1192,1529,1539,1545,1569
im/osyhbpahvl/ui/hui/mine/PrivacyAndSafeActivity.java, line(s) 286
im/osyhbpahvl/ui/hui/mine/PrivacySecurityActivity.java, line(s) 232
im/osyhbpahvl/ui/hui/mine/QrCodeActivity.java, line(s) 274
im/osyhbpahvl/ui/hui/packet/RedpktGroupSendActivity.java, line(s) 784,1022,1177,1229,1244
im/osyhbpahvl/ui/hui/packet/RedpktSendActivity.java, line(s) 427,621,810,862,877
im/osyhbpahvl/ui/hui/packet/RedpktSendActivity_back.java, line(s) 424,626,815,867,882
im/osyhbpahvl/ui/hui/packet/SelecteContactsActivity.java, line(s) 925
im/osyhbpahvl/ui/hui/packet/fragments/PacketLuckyFragment.java, line(s) 434
im/osyhbpahvl/ui/hui/packet/fragments/PacketNormalFragment.java, line(s) 451
im/osyhbpahvl/ui/hui/packet/fragments/PacketSpecialFragment.java, line(s) 394
im/osyhbpahvl/ui/hui/packet/pop/RedPacketViewHolder.java, line(s) 216,221,226
im/osyhbpahvl/ui/hui/transfer/TransferSendActivity.java, line(s) 435,662,861,913,928
im/osyhbpahvl/ui/hui/transfer/TransferSendActivity_back.java, line(s) 435,670,868,920,935
im/osyhbpahvl/ui/hui/transfer/TransferStatusActivity.java, line(s) 363,543
im/osyhbpahvl/ui/hui/transfer/TransferStatusActivity_back.java, line(s) 429,609
im/osyhbpahvl/ui/hui/views/SilderRelativeLayout.java, line(s) 98,120
im/osyhbpahvl/ui/hui/visualcall/AVideoCallInterface.java, line(s) 75,94,109,120,165,184,189,208
im/osyhbpahvl/ui/hui/visualcall/BaseCallActivity.java, line(s) 227,261,362,424,426,158,219,334
im/osyhbpahvl/ui/hui/visualcall/FlowService.java, line(s) 263,211
im/osyhbpahvl/ui/hui/visualcall/PermissionUtils.java, line(s) 68,73,91,95,116,119,139,158,170,207,222,230,79,235,54,62,64,180,182,185,220,84,176
im/osyhbpahvl/ui/hui/visualcall/RingUtils.java, line(s) 171,67
im/osyhbpahvl/ui/hui/visualcall/ThreadUtils.java, line(s) 58
im/osyhbpahvl/ui/hui/visualcall/VisualCallActivity.java, line(s) 330,334,398,429,506,774,871,995,1133,1155,1182,1187,1303,1330,1548,1581,1625,1627,1655,1688,1689,1718,1723,1745,1770,1775,1829,1885,2152,701,1293,1803,1859,955,960,972,977
im/osyhbpahvl/ui/hui/visualcall/VisualCallReceiveActivity.java, line(s) 456,496,579,617,748,855,1010,1039,1087,1088,1195
im/osyhbpahvl/ui/hui/visualcall/VisualCallReceiveService.java, line(s) 55
im/osyhbpahvl/ui/hviews/MryCheckBox.java, line(s) 93
im/osyhbpahvl/ui/hviews/MyScrollView.java, line(s) 499,574
im/osyhbpahvl/ui/hviews/PasswordEditText.java, line(s) 138,295
im/osyhbpahvl/ui/hviews/dialogs/XDialog.java, line(s) 681
im/osyhbpahvl/ui/hviews/dragView/DragCallBack.java, line(s) 249
im/osyhbpahvl/ui/hviews/dragView/DragHelperFrameLayout.java, line(s) 173
im/osyhbpahvl/ui/hviews/helper/MryDeviceHelper.java, line(s) 44,53
im/osyhbpahvl/ui/hviews/helper/MryDrawableHelper.java, line(s) 158
im/osyhbpahvl/ui/hviews/helper/MryNotchHelper.java, line(s) 48,64,67,368,370,372,45,61
im/osyhbpahvl/ui/hviews/page/PagerConfig.java, line(s) 43,37
im/osyhbpahvl/ui/hviews/page/PagerGridLayoutManager.java, line(s) 493,497,532,536
im/osyhbpahvl/ui/hviews/pop/BasePopup.java, line(s) 150,154
im/osyhbpahvl/ui/hviews/slidemenu/SwipeLayout.java, line(s) 794,799
im/osyhbpahvl/ui/hviews/swipelist/reservation/TopWrappedDividerItemDecoration.java, line(s) 28
im/osyhbpahvl/ui/load/animation/SpriteAnimatorBuilder.java, line(s) 146
im/osyhbpahvl/ui/newcall/NewCallActivity.java, line(s) 321
im/osyhbpahvl/ui/settings/CacheControlSettingActivity.java, line(s) 195
im/osyhbpahvl/ui/settings/NoticeAndSoundSettingActivity.java, line(s) 299,338,371,713,775,837
im/osyhbpahvl/ui/utils/AppUpdater.java, line(s) 86,148,161
im/osyhbpahvl/ui/utils/ChatActionBarHelper.java, line(s) 294
im/osyhbpahvl/ui/utils/DownloadUtils.java, line(s) 197,230
im/osyhbpahvl/ui/utils/QrCodeParseUtil.java, line(s) 290,305,351,371,468
im/osyhbpahvl/ui/utils/ThirdPartSdkInitUtil.java, line(s) 43,73,103,101
im/osyhbpahvl/ui/utils/number/MoneyUtil.java, line(s) 145
im/osyhbpahvl/ui/utils/picture/PictureUtil.java, line(s) 74
im/osyhbpahvl/ui/utils/translate/DecodeEngine.java, line(s) 117,121,141,148,174,180,273,296,308,324,336,394,398,433,461
im/osyhbpahvl/ui/utils/translate/ssrc/SSRC.java, line(s) 1155,62,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,296,300,303,2225,2239,2322,2387,2388,2389,2390,2395,2397,2399,2401,2475,2610,2778,2782,2819,2916,2917,2918,2919,2920,2922,2924,2926,2978
im/osyhbpahvl/ui/utils/translate/utils/AudioFileUtils.java, line(s) 32,35,56,111,113,134,150
org/webrtc/ali/AliHardwareAudioEncoder.java, line(s) 116,130,165,69
org/webrtc/ali/USBAudioDevice.java, line(s) 66
org/webrtc/alirtcInterface/ALI_RTC_INTERFACE_IMPL.java, line(s) 404,695,715,721,736,742,1272,289,294,304,346,351,356,361,366,371,376,381,386,391,331
org/webrtc/alirtcInterface/SophonEngine.java, line(s) 276
org/webrtc/alirtcInterface/SophonEngineImpl.java, line(s) 83,160,262,287,296,306,361,371,474,483,493,553,710,101,105,108,153,237,339,84,129,154,340,454,458,1250
org/webrtc/audio/AppRTCAudioManager.java, line(s) 263,277,310,356,403,413,99,105,113,121,173,185,197,209,248,260,266,275,298,302,324,334,338,360,406,511,512,542,562,568
org/webrtc/audio/AppRTCBluetoothManager.java, line(s) 61,64,71,77,94,109,113,121,123,127,132,137,142,159,190,191,193,199,214,219,228,234,240,248,255,260,264,266,298,301,303,310,316,322,331,341,344,355,178,183,221,225,118,161,165,174,348
org/webrtc/audio/AppRTCProximitySensor.java, line(s) 26,33,43,71,74,81,112,61
org/webrtc/sdk/SophonSurfaceView.java, line(s) 58,68,77,34
org/webrtc/utils/AppRTCUtils.java, line(s) 21
org/webrtc/utils/CpuMonitor.java, line(s) 102,113,120,127,166,240,180,185,187,286,324,351,357,360,363
org/webrtc/utils/MemoryMonitor.java, line(s) 33,40,63,69
org/webrtc/utils/NetworkMonitor.java, line(s) 49,55
pub/devrel/easypermissions/EasyPermissions.java, line(s) 138,140,34
pub/devrel/easypermissions/helper/ActivityPermissionHelper.java, line(s) 38
pub/devrel/easypermissions/helper/BaseSupportPermissionsHelper.java, line(s) 22
xxxx/AbstractC0082.java, line(s) 41,162,215,256,269,309
xxxx/C0081.java, line(s) 8

信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
im/osyhbpahvl/messenger/AndroidUtilities.java, line(s) 10,1735
im/osyhbpahvl/ui/ChangeUsernameActivity.java, line(s) 4,84
im/osyhbpahvl/ui/ChannelCreateActivity.java, line(s) 8,779
im/osyhbpahvl/ui/ChatActivity.java, line(s) 10,17663
im/osyhbpahvl/ui/ChatEditTypeActivity.java, line(s) 4,447,461
im/osyhbpahvl/ui/GroupInviteActivity.java, line(s) 4,139
im/osyhbpahvl/ui/PhonebookShareActivity.java, line(s) 4,576,616
im/osyhbpahvl/ui/ProfileActivity.java, line(s) 5,1399,1424
im/osyhbpahvl/ui/StickersActivity.java, line(s) 4,427
im/osyhbpahvl/ui/ThemeSetUrlActivity.java, line(s) 4,98
im/osyhbpahvl/ui/components/EmbedBottomSheet.java, line(s) 9,807
im/osyhbpahvl/ui/components/ShareAlert.java, line(s) 8,949
im/osyhbpahvl/ui/dialogs/McShareDialog.java, line(s) 5,233
im/osyhbpahvl/ui/hui/chats/ProfileGroupActivity.java, line(s) 10,1630,1655
im/osyhbpahvl/ui/hui/discovery/QrScanResultActivity.java, line(s) 4,68
im/osyhbpahvl/ui/hui/packet/BillDetailsActivity.java, line(s) 4,866

信息 应用程序可以写入应用程序目录。敏感信息应加密 

应用程序可以写入应用程序目录。敏感信息应加密


Files:
com/alivc/rtc/device/core/persistent/TransactionXMLFile.java, line(s) 19

安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
com/bjz/comm/net/factory/ApiFactory.java, line(s) 50,50
com/bjz/comm/net/factory/ApiGameFactory.java, line(s) 48,48
com/bjz/comm/net/factory/ApiHuanHuiFactory.java, line(s) 41,41
com/bjz/comm/net/factory/ApiMPFactory.java, line(s) 46,46
com/bjz/comm/net/factory/ApiTranslateAudioFactory.java, line(s) 40,40
com/zhy/http/okhttp/https/HttpsUtils.java, line(s) 110,174,42,108,108,172,172

安全 此应用程序可能具有Root检测功能 

此应用程序可能具有Root检测功能
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md#testing-root-detection-mstg-resilience-1

Files:
im/osyhbpahvl/ui/utils/SimulatorUtil.java, line(s) 19

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.ntsc.ac.cn) 通信。 

{'ip': '159.226.242.43', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (core.poolserviceexpress.com) 通信。 

{'ip': '119.96.90.203', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.linkedin.com) 通信。 

{'ip': '119.96.90.203', 'country_short': 'CN', 'country_long': '中国', 'region': '北京', 'city': '北京', 'latitude': '39.907501', 'longitude': '116.397102'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (translations.lovechat323.com) 通信。 

{'ip': '119.96.90.203', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.taobao.com) 通信。 

{'ip': '119.96.90.203', 'country_short': 'CN', 'country_long': '中国', 'region': '湖北', 'city': '武汉', 'latitude': '30.583330', 'longitude': '114.266853'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.shareinstall.com.cn) 通信。 

{'ip': '58.220.76.32', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '扬州', 'latitude': '32.397221', 'longitude': '119.435600'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (lovechat323.com) 通信。 

{'ip': '61.160.148.90', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '台州', 'latitude': '32.492168', 'longitude': '119.910767'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.163.com) 通信。 

{'ip': '61.160.227.107', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '常州', 'latitude': '31.783331', 'longitude': '119.966667'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (impyq.gz.bcebos.com) 通信。 

{'ip': '121.228.183.252', 'country_short': 'CN', 'country_long': '中国', 'region': '江苏', 'city': '苏州', 'latitude': '31.311365', 'longitude': '120.617691'}

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (www.alibaba.com) 通信。 

{'ip': '203.119.238.27', 'country_short': 'CN', 'country_long': '中国', 'region': '浙江', 'city': '杭州', 'latitude': '30.293650', 'longitude': '120.161583'}

安全评分: ( VVES 1.9.4)