Skip to content

Android: Improve :dm to find DEX files mapped in memory #443

Open
@enovella

Description

@enovella

image

image

R2Frida memory maps listing doesn't show up the filetype

[0x00000000]> :dm~0x7baa1dd000
[0x00000000]> :dm~7baa1dd000
0x0000007baa1bd000 - 0x0000007baa1dd000 rw-
0x0000007baa1dd000 - 0x0000007baa1fe000 r--
[0x00000000]> x 16 @ 0x7baa1dd000
- offset -     0 1  2 3  4 5  6 7  8 9  A B  C D  E F  0123456789ABCDEF
0x7baa1dd000  6465 780a 3033 3700 4283 41de bc18 0649  dex.037.B.A....I
[0x00000000]> x 16 @ 0x7c2cc71000
- offset -     0 1  2 3  4 5  6 7  8 9  A B  C D  E F  0123456789ABCDEF
0x7c2cc71000  6465 780a 3033 3700 66ce 2964 f478 4193  dex.037.f.)d.xA.
[0x00000000]> :dm~7c2cc71000
0x0000007c2cc70000 - 0x0000007c2cc71000 r-- /apex/com.android.art/lib64/libopenjdkjvm.so
0x0000007c2cc71000 - 0x0000007c2cc75000 r--

DEX files in memory maps

$ adb shell
$ grep dalvik-DEX /proc/25943/maps
7b8cf77000-7b8cf89000 r--p 00000000 00:00 0                              [anon:dalvik-DEX data]
7bab48e000-7bab4af000 r--p 00000000 00:00 0                              [anon:dalvik-DEX data]
7c1cfb0000-7c1cfc0000 r--p 00000000 00:00 0                              [anon:dalvik-DEX data]
7c1d203000-7c1d21c000 r--p 00000000 00:00 0                              [anon:dalvik-DEX data]
7c1d220000-7c1d224000 r--p 00000000 00:00 0                              [anon:dalvik-DEX data]
7c23d19000-7c23d21000 r--p 00000000 00:00 0                              [anon:dalvik-DEX data]
7c24a73000-7c24a79000 r--p 00000000 00:00 0                              [anon:dalvik-DEX data]
7c24fa3000-7c24fa7000 r--p 00000000 00:00 0                              [anon:dalvik-DEX data]
7c2c566000-7c2c56a000 r--p 00000000 00:00 0                              [anon:dalvik-DEX data]
7c2c998000-7c2c99c000 r--p 00000000 00:00 0                              [anon:dalvik-DEX data]
7c2cc3a000-7c2cc3e000 r--p 00000000 00:00 0                              [anon:dalvik-DEX data]
7c2cc71000-7c2cc75000 r--p 00000000 00:00 0                              [anon:dalvik-DEX data]
7c2e4fe000-7c2e502000 r--p 00000000 00:00 0                              [anon:dalvik-DEX data]
7c2e531000-7c2e535000 r--p 00000000 00:00 0                              [anon:dalvik-DEX data]
7c2e6c0000-7c2e6c4000 r--p 00000000 00:00 0                              [anon:dalvik-DEX data]
7c2e71c000-7c2e720000 r--p 00000000 00:00 0                              [anon:dalvik-DEX data]

Workaround

image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions