混淆打包搞了好几天才初步了解,其中碰到很多Debug正常,Release的apk不能用,基本都是第三方的jar的问题,所以要排除混淆。
1. Json解析对象出错
用到fastJson或者GJson的apk混淆编码时要加上这句:
-keepattributes Signature
2.百度地图不能用,注意添加下面的语句
-libraryjars libs/baidumapapi_v2_1_0.jar #替换成自己所用版本的jar包
-keep class com.baidu.** { *; }
-keep class vi.com.gdi.bgl.android.**{*;}
3.融云IM
-keep class io.rong.imkit.** {*;}
-keep class io.rong.imlib.** {*;}
-keepattributes Exceptions,InnerClasses
-dontwarn io.rong.**
-keep class io.rong.** {*;}
-keep public class com.yourpackage.R** {*;} #自己的包名
-keep class *.R$ { *; }
4.保持自定义的View不混淆
-keepclasseswithmembers class * { # 保持自定义控件类不被混淆
public <init>(android.content.Context, android.util.AttributeSet);
} -keepclasseswithmembers class * { # 保持自定义控件类不被混淆
public <init>(android.content.Context, android.util.AttributeSet, int);
}
可以把自定义的View放入一个包。然后排除掉这个包。
5.其他第三方的jar包
-dontwarn org.apache.http.**
-keep class org.apache.http.** {*;}
-dontwarn com.ant.liao.**
-keep class com.ant.liao.** {*;}
-dontwarn org.json.**
-keep class org.json.** {*;}
-dontwarn pl.droidsonroids.gif.**
-keep class pl.droidsonroids.gif.** {*;}
-dontwarn com.cmcc.analytics.**
-keep class com.cmcc.analytics.** {*;}
-keep class android.** {*;}
6.Log文件
-assumenosideeffects
class android.util.Log
{
public static ***
e(...);
public static ***
w(...);
public static ***
wtf(...);
public static ***
d(...);
public static ***
v(...);
7.还有就是自定义的实体类,bean或者Entity。因为它们基本都是序列化的。
我的体会:序列化和用到反射机制的都不能混淆。
这篇文章有一个比较好的版本Android 混淆打包标准proguard 配置
# To enable ProGuard in your project, edit project.properties
# to define the proguard.config property as described in that file.
#
# Add project specific ProGuard rules here.
# By default, the flags in this file are appended to flags specified
# in ${sdk.dir}/tools/proguard/proguard-android.txt
# You can edit the include path and order by changing the ProGuard
# include property in project.properties.
#
# For more details, see
# http://developer.android.com/guide/developing/tools/proguard.html # Add any project specific keep options here: # If your project uses WebView with JS, uncomment the following
# and specify the fully qualified class name to the JavaScript interface
# class:
#-keepclassmembers class fqcn.of.javascript.interface.for.webview {
# public *;
# 指定代码的压缩级别
-optimizationpasses 5
# 是否使用大小写混合
-dontusemixedcaseclassnames
# 是否混淆第三方jar
-dontskipnonpubliclibraryclasses
# 混淆时是否做预校验
-dontpreverify
# 混淆时是否记录日志
-verbose
# 混淆时所采用的算法
-optimizations !code/simplification/arithmetic,!field/*,!class/merging/*
#-ignorewarnings -libraryjars libs/android-support-v4.jar
-libraryjars libs/baidumapapi_v3_0_0.jar
-libraryjars libs/commons-codec.jar
-libraryjars libs/commons-httpclient-3.1.jar
-libraryjars libs/gson-2.2.2.jar
-libraryjars libs/httpmime-4.2.jar
-libraryjars libs/locSDK_3.1.jar
-libraryjars libs/ShareSDK-Core-2.3.9.jar
-libraryjars libs/ShareSDK-QQ-2.3.9.jar
-libraryjars libs/ShareSDK-SinaWeibo-2.3.9.jar # 保持哪些类不被混淆
-keep public class * extends android.app.Activity
-keep public class * extends android.app.Application
-keep public class * extends android.app.Service
-keep public class * extends android.content.BroadcastReceiver
-keep public class * extends android.content.ContentProvider
-keep public class * extends android.app.backup.BackupAgentHelper
-keep public class * extends android.preference.Preference
-keep public class com.android.vending.licensing.ILicensingService #gson解析不被混淆
-keep class com.google.**{*;}
-keepclassmembers class * implements java.io.Serializable {
static final long serialVersionUID;
private static final java.io.ObjectStreamField[] serialPersistentFields;
private void writeObject(java.io.ObjectOutputStream);
private void readObject(java.io.ObjectInputStream);
java.lang.Object writeReplace();
java.lang.Object readResolve();
}
##---------------Begin: proguard configuration for Gson ----------
# Gson uses generic type information stored in a class file when working with fields. Proguard
# removes such information by default, so configure it to keep all of it.
-keepattributes Signature
# Gson specific classes
-keep class sun.misc.Unsafe {*;}
#-keep class com.google.gson.stream.** {*;}
# Application classes that will be serialized/deserialized over Gson
-dontwarn com.u14studio.entity.**
-keep class com.u14studio.entity.**{*;}
##---------------End: proguard configuration for Gson ----------
#shareSDK、
-keep class cn.sharesdk.**{*;}
-keep class com.sina.**{*;}
-keep class **.R$* {*;}
-keep class **.R{*;}
-dontwarn cn.sharesdk.**
-dontwarn **.R$*
-keep class m.framework.**{*;}
#shareSDK结束 #百度地图不混淆
-dontwarn com.baidu.**
-keep class com.baidu.**{*;}
-keep class vi.com.gdi.bgl.android.**{*;}
-keep class android.content.Context.getExternalFilesDirs
-keep public class * extends android.content.Context.getExternalFilesDirs
#百度地图不混淆结束 -dontwarn org.apache.**
-keep class org.apache.**{*;}
-dontwarn android.support-v4.**
-keep class android.support-v4.**{*;}
-dontwarn com.alipay.android.app.**
-keep class com.alipay.android.app.**{*;}
下面就是些闲话了,是自己解决问题时写的记录,也一并留着吧。参照的文章都写上了,谢谢大家的分享。也谢谢QQ群里某位热心人的帮助。
今天遇到一个很奇怪的问题,混淆打包导致的,至今没明白为什么。主要现象是一个实现parcelable的UserBean,数据成员包含一个UserTag的list对象,后者也实现了parcel接口,然后就是利用json与服务器之间传递值。当不设置标签时,一切OK,只要设置标签,就会报错,错误只能定位到这个转化问题。
java.lang.ClassCastException: com.alibaba.fastjson.JSONObject cannot be cast to com.cmcc.wepa.bean.UserTagBean
查看了代码,转化是没有问题的啊
public void run()
{
super.run();
Message resultMsg = mHandler.obtainMessage();
HashMap<String, String> param = new HashMap<String, String>();
param.put("userId", mUserId);
// 获取返回
String jsonStr = null;
// 返回参数
try
{
jsonStr = NetworkManager.getInstance().httpConnectOpt(
Constant.URL_USER_GET_INTO, param);
// 将字符串转换成jsonObject对象
JSONObject jsonObject = new JSONObject();
jsonObject = JSONObject.parseObject(jsonStr);
String result = jsonObject.getString("result");
LogUtil.d(jsonObject);
LogUtil.d(result);
Bundle data = null;
if (result != null && result.length() != 0)
{
// 获取返回参数
UserBean bean = JSON.parseObject(result, UserBean.class);
LogUtil.d(bean);
LogUtil.d(bean.getTags());
data = new Bundle();
data.putParcelable("result", bean);
} // 获取返值
String code = (String) jsonObject.get("code");
if ("0".equals(code))
{ resultMsg.what = 1;
resultMsg.setData(data);
} else if ("1".equals(code))
{ resultMsg.what = -1; }
} catch (Exception e)
{
// TODO Auto-generated catch block
e.printStackTrace();
}
但是不混淆编码或者Debug的包都是好用的,标签一直OK。
难道是parcelable对象之中嵌套parcelable对象成员会有问题吗?还是忘记了什么keep。
mark一下,悬而未决。
其中在$sdk_dir$\tools\proguard\proguard-android.txt,里面吧基本的keep都定义好了,工程自己的在proguard-project.txt中定义。
这里原来理解错了吗?看到这篇文说是要把proguard-android.txt中的copy到proguard-project.txt中,个人感觉不用,应该会自动读取,个人验证确实没有影响。
这篇文章则详细介绍了常用的各个字段的意义。Android proguard 详解
折腾了俩天还是没效果,最后参照上面****解决Gson的方法,我的是fastJson,然后可能是Parcel出了问题,加上下面的排除混淆。
-keepclassmembers class * implements android.os.Parcel { public *;}
-dontwarn com.cmcc.wepa.bean.**
-keep class com.cmcc.wepa.bean.** {*;}
-keepattributes Signature
打包,竟然好用了。还是因为不理解造成很多弯路,哈哈,解决了就好,虽然还是懵懵懂懂的,但有了一些印象。
也就是说实现Parcel或者Seriallizable的对象一定不要混淆,连同它们的接口对象一起排除混淆。大概就是这样。估计一般实体类不混淆。 还有个问题就是必须加上-keepattributes Signature,不加这句我的apk也不好用,有的blog说:
当有注解的时候
- -keepattributes Signature
- -keepattributes *Annotation*
加上上面两句减少错误。最后还有个总结的还可以的Android 混淆代码总结
下面给出我的proguard-project.txt 后记:经过N次尝试,发现这句也没有用,去掉后不会报错,不过加上更好吧~呵呵
-keepclassmembers class * implements android.os.Parcel { public *;}
-libraryjars libs/fastjson-1.2.3.jar
其实,最后就是神奇的-keepattributes Signature的作用。不明白的还有很多啊。
# To enable ProGuard in your project, edit project.properties
# to define the proguard.config property as described in that file.
#
# Add project specific ProGuard rules here.
# By default, the flags in this file are appended to flags specified
# in ${sdk.dir}/tools/proguard/proguard-android.txt
# You can edit the include path and order by changing the ProGuard
# include property in project.properties.
#
# For more details, see
# http://developer.android.com/guide/developing/tools/proguard.html # Add any project specific keep options here:
# If your project uses WebView with JS, uncomment the following
# and specify the fully qualified class name to the JavaScript interface
# class: -keepclassmembers class * implements android.os.Parcel { public *;} # the third-party library
-libraryjars libs/fastjson-1.2.3.jar
-dontwarn net.tsz.afinal.**
-keep class net.tsz.afinal.** {*;}
-dontwarn com.alibaba.fastjson.**
-keep class com.alibaba.fastjson.** { *; } -dontwarn com.baidu.**
-keep class com.baidu.** {*;}
-dontwarn io.rong.**
-keep class io.rong.** {*;}
-dontwarn org.apache.http.**
-keep class org.apache.http.** {*;}
-dontwarn com.ant.liao.**
-keep class com.ant.liao.** {*;}
-dontwarn org.json.**
-keep class org.json.** {*;}
-dontwarn pl.droidsonroids.gif.**
-keep class pl.droidsonroids.gif.** {*;}
-dontwarn com.cmcc.analytics.**
-keep class com.cmcc.analytics.** {*;}
-keep class android.** {*;} -dontwarn com.my.bean.**
-keep class com.my.bean.** {*;}
-keepattributes Signature -assumenosideeffects
class android.util.Log
{
public static ***
e(...);
public static ***
w(...);
public static ***
wtf(...);
public static ***
d(...);
public static ***
v(...);
}