Android 16 加固包怎样做兼容性验收

#!/usr/bin/env python3
import json, os, struct, sys, zipfile, subprocess

def get_target_sdk(apk_path):
    try:
        proc = subprocess.run(['aapt2', 'dump', 'badging', apk_path],
                              capture_output=True, text=True)
        if proc.returncode != 0:
            raise RuntimeError('aapt2 dump failed')
        for line in proc.stdout.splitlines():
            if 'targetSdkVersion:' in line:
                return int(line.split(":")[1].strip("'"))
    except Exception as e:
        print(f"Cannot read targetSdk: {e}", file=sys.stderr)
        sys.exit(1)
    sys.exit(1)

def check_elf_alignment(lib_data, lib_path):
    if len(lib_data) < 64 or lib_data[:4] != b'\x7fELF':
        return False, 'not a valid ELF'
    ei_class = lib_data[4]
    is_64 = (ei_class == 2)
    if is_64:
        e_phoff, e_phentsize, e_phnum = struct.unpack_from('<QHH', lib_data, 32)
    else:
        e_phoff, e_phentsize, e_phnum = struct.unpack_from('<IHH', lib_data, 28)
    for i in range(e_phnum):
        offset = e_phoff + i * e_phentsize
        if is_64:
            p_type, p_flags, p_offset, p_vaddr, p_paddr, p_filesz, p_memsz, p_align = struct.unpack_from('<IIQQQQQQ', lib_data, offset)
        else:
            p_type, p_offset, p_vaddr, p_paddr, p_filesz, p_memsz, p_flags, p_align = struct.unpack_from('<IIIIIIII', lib_data, offset)
        if p_type == 1:  # PT_LOAD
            if p_align < 16384:
                return False, f'LOAD segment alignment {p_align} < 16384'
            if p_offset % 16384 != 0:
                return False, f'file offset {p_offset} not 16KB-aligned'
    return True, ''

def main():
    if len(sys.argv) != 2:
        print('Usage: scanner.py <apk>', file=sys.stderr)
        sys.exit(2)
    apk = sys.argv[1]
    if not os.path.isfile(apk):
        print('APK not found', file=sys.stderr)
        sys.exit(1)
    result = {'targetSdk': None, 'libs': []}
    result['targetSdk'] = get_target_sdk(apk)
    fail = False
    if result['targetSdk'] != 36:
        print(f"Warning: targetSdk {result['targetSdk']} not 36", file=sys.stderr)
    with zipfile.ZipFile(apk) as zf:
        for name in zf.namelist():
            if name.startswith('lib/') and (name.endswith('.so') or '.so.' in name):
                elf_data = zf.read(name)
                aligned, reason = check_elf_alignment(elf_data, name)
                result['libs'].append({'path': name, 'aligned': aligned, 'reason': reason})
                if not aligned:
                    fail = True
    print(json.dumps(result, indent=2))
    sys.exit(1 if fail else 0)

if __name__ == '__main__':
    main()