Android 12 how to patch .so files

[uuuddddl]

I try use my .so file that patches two functions, and the app can read the airpod name, but I can't use the app function. can the developer look into the patch of the lower version of the system and tell me?

[kavishdevar]

Please share the logs.

Thanks!

[uuuddddl]

suspend all histogram:	Sum: 461us 99% C.I. 1us-240us Avg: 23.050us Max: 255us
DALVIK THREADS (18):
"Signal Catcher" daemon prio=10 tid=2 Runnable
  | group="system" sCount=0 ucsCount=0 flags=0 obj=0x12c80ef0 self=0xb4000070095ef6f0
  | sysTid=9127 nice=-20 cgrp=default sched=0/0 handle=0x6e7e2ffcb0
  | state=R schedstat=( 7119217 2877760 4 ) utm=0 stm=0 core=6 HZ=100
  | stack=0x6e7e208000-0x6e7e20a000 stackSize=991KB
  | held mutexes= "mutator lock"(shared held)
  native: #00 pc 000000000056a8b4  /apex/com.android.art/lib64/libart.so (art::DumpNativeStack(std::__1::basic_ostream<char, std::__1::char_traits<char> >&, int, BacktraceMap*, char const*, art::ArtMethod*, void*, bool)+144)
  native: #01 pc 0000000000685b10  /apex/com.android.art/lib64/libart.so (art::Thread::DumpStack(std::__1::basic_ostream<char, std::__1::char_traits<char> >&, bool, BacktraceMap*, bool) const+368)
  native: #02 pc 00000000006a3f44  /apex/com.android.art/lib64/libart.so (art::DumpCheckpoint::Run(art::Thread*)+924)
  native: #03 pc 000000000069dad4  /apex/com.android.art/lib64/libart.so (art::ThreadList::RunCheckpoint(art::Closure*, art::Closure*)+520)
  native: #04 pc 000000000069ccd8  /apex/com.android.art/lib64/libart.so (art::ThreadList::Dump(std::__1::basic_ostream<char, std::__1::char_traits<char> >&, bool)+1468)
  native: #05 pc 000000000069c5ec  /apex/com.android.art/lib64/libart.so (art::ThreadList::DumpForSigQuit(std::__1::basic_ostream<char, std::__1::char_traits<char> >&)+1404)
  native: #06 pc 0000000000646a1c  /apex/com.android.art/lib64/libart.so (art::Runtime::DumpForSigQuit(std::__1::basic_ostream<char, std::__1::char_traits<char> >&)+212)
  native: #07 pc 000000000065cc98  /apex/com.android.art/lib64/libart.so (art::SignalCatcher::HandleSigQuit()+1404)
  native: #08 pc 000000000065bc70  /apex/com.android.art/lib64/libart.so (art::SignalCatcher::Run(void*)+348)
  native: #09 pc 00000000000b6a24  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+264)
  native: #10 pc 00000000000532bc  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+68)
  (no managed stack frames)

"main" prio=5 tid=1 Native
  | group="main" sCount=1 ucsCount=0 flags=1 obj=0x721fcf48 self=0xb4000070095e87b0
  | sysTid=9121 nice=-10 cgrp=default sched=0/0 handle=0x71c4d734f8
  | state=S schedstat=( 555440442 62869478 243 ) utm=48 stm=6 core=4 HZ=100
  | stack=0x7ffded0000-0x7ffded2000 stackSize=8188KB
  | held mutexes=
  native: #00 pc 00000000000a2888  /apex/com.android.runtime/lib64/bionic/libc.so (__recvmsg+8)
  native: #01 pc 000000000005f818  /apex/com.android.runtime/lib64/bionic/libc.so (recvmsg+52)
  native: #02 pc 00000000000128f4  /system/lib64/libbase.so (android::base::ReceiveFileDescriptorVector(android::base::borrowed_fd, void*, unsigned long, unsigned long, std::__1::vector<android::base::unique_fd_impl<android::base::DefaultCloser>, std::__1::allocator<android::base::unique_fd_impl<android::base::DefaultCloser> > >*)+376)
  native: #03 pc 000000000015be44  /system/lib64/libandroid_runtime.so (android::socket_read_all(_JNIEnv*, _jobject*, int, void*, unsigned long)+92)
  native: #04 pc 000000000015b8bc  /system/lib64/libandroid_runtime.so (android::socket_readba(_JNIEnv*, _jobject*, _jbyteArray*, int, int, _jobject*)+336)
  at android.net.LocalSocketImpl.readba_native(Native method)
  at android.net.LocalSocketImpl.access$300(LocalSocketImpl.java:37)
  at android.net.LocalSocketImpl$SocketInputStream.read(LocalSocketImpl.java:110)
  - locked <0x07a18083> (a java.lang.Object)
  at android.bluetooth.BluetoothSocket.readAll(BluetoothSocket.java:792)
  at android.bluetooth.BluetoothSocket.readInt(BluetoothSocket.java:808)
  at android.bluetooth.BluetoothSocket.connect(BluetoothSocket.java:433)
  at me.kavishdevar.aln.AirPodsService.connectToSocket(AirPodsService.kt:297)
  at me.kavishdevar.aln.AirPodsService$onStartCommand$2$1.onServiceConnected(AirPodsService.kt:237)
  at android.bluetooth.BluetoothProfileConnector$2.onServiceConnected(BluetoothProfileConnector.java:66)
  at android.app.LoadedApk$ServiceDispatcher.doConnected(LoadedApk.java:2126)
  at android.app.LoadedApk$ServiceDispatcher$RunConnection.run(LoadedApk.java:2159)
  at android.os.Handler.handleCallback(Handler.java:938)
  at android.os.Handler.dispatchMessage(Handler.java:99)
  at android.os.Looper.loopOnce(Looper.java:201)
  at android.os.Looper.loop(Looper.java:288)
  at android.app.ActivityThread.main(ActivityThread.java:8005)
  at java.lang.reflect.Method.invoke(Native method)
  at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:548)
  at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:1039)

"ADB-JDWP Connection Control Thread" daemon prio=0 tid=7 WaitingInMainDebuggerLoop
  | group="system" sCount=1 ucsCount=0 flags=1 obj=0x12c80f68 self=0xb4000070095f9dd0
  | sysTid=9129 nice=-20 cgrp=default sched=0/0 handle=0x6e205abcb0
  | state=S schedstat=( 325886 1170625 3 ) utm=0 stm=0 core=5 HZ=100
  | stack=0x6e204b4000-0x6e204b6000 stackSize=991KB
  | held mutexes=
  native: #00 pc 00000000000a2d4c  /apex/com.android.runtime/lib64/bionic/libc.so (__ppoll+12)
  native: #01 pc 000000000005e2c0  /apex/com.android.runtime/lib64/bionic/libc.so (poll+96)
  native: #02 pc 0000000000009e50  /apex/com.android.art/lib64/libadbconnection.so (adbconnection::AdbConnectionState::RunPollLoop(art::Thread*)+760)
  native: #03 pc 000000000000845c  /apex/com.android.art/lib64/libadbconnection.so (adbconnection::CallbackFunction(void*)+1488)
  native: #04 pc 00000000000b6a24  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+264)
  native: #05 pc 00000000000532bc  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+68)
  (no managed stack frames)

"perfetto_hprof_listener" prio=10 tid=8 Native (still starting up)
  | group="" sCount=1 ucsCount=0 flags=1 obj=0x0 self=0xb4000070095ebf50
  | sysTid=9128 nice=-20 cgrp=default sched=0/0 handle=0x6e79201cb0
  | state=S schedstat=( 286665 7948752 4 ) utm=0 stm=0 core=5 HZ=100
  | stack=0x6e7910a000-0x6e7910c000 stackSize=991KB
  | held mutexes=
  native: #00 pc 00000000000a19e8  /apex/com.android.runtime/lib64/bionic/libc.so (read+8)
  native: #01 pc 0000000000022408  /apex/com.android.art/lib64/libperfetto_hprof.so (void* std::__1::__thread_proxy<std::__1::tuple<std::__1::unique_ptr<std::__1::__thread_struct, std::__1::default_delete<std::__1::__thread_struct> >, ArtPlugin_Initialize::$_33> >(void*)+284)
  native: #02 pc 00000000000b6a24  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+264)
  native: #03 pc 00000000000532bc  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+68)
  (no managed stack frames)

"Jit thread pool worker thread 0" daemon prio=5 tid=9 Native
  | group="system" sCount=1 ucsCount=0 flags=1 obj=0x12c80fe0 self=0xb400007009610760
  | sysTid=9131 nice=9 cgrp=default sched=0/0 handle=0x6e1e3afcb0
  | state=S schedstat=( 8153965 45550049 39 ) utm=0 stm=0 core=7 HZ=100
  | stack=0x6e1e2b0000-0x6e1e2b2000 stackSize=1023KB
  | held mutexes=
  native: #00 pc 000000000004def0  /apex/com.android.runtime/lib64/bionic/libc.so (syscall+32)
  native: #01 pc 000000000028dc74  /apex/com.android.art/lib64/libart.so (art::ConditionVariable::WaitHoldingLocks(art::Thread*)+152)
  native: #02 pc 00000000006a59b8  /apex/com.android.art/lib64/libart.so (art::ThreadPool::GetTask(art::Thread*)+128)
  native: #03 pc 00000000006a4d68  /apex/com.android.art/lib64/libart.so (art::ThreadPoolWorker::Run()+148)
  native: #04 pc 00000000006a47f0  /apex/com.android.art/lib64/libart.so (art::ThreadPoolWorker::Callback(void*)+196)
  native: #05 pc 00000000000b6a24  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+264)
  native: #06 pc 00000000000532bc  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+68)
  (no managed stack frames)

"FinalizerWatchdogDaemon" daemon prio=5 tid=10 Waiting
  | group="system" sCount=1 ucsCount=0 flags=1 obj=0x12c81058 self=0xb4000070096176a0
  | sysTid=9136 nice=4 cgrp=default sched=0/0 handle=0x6e1cf8bcb0
  | state=S schedstat=( 340677 5317761 8 ) utm=0 stm=0 core=6 HZ=100
  | stack=0x6e1ce88000-0x6e1ce8a000 stackSize=1039KB
  | held mutexes=
  at java.lang.Object.wait(Native method)
  - waiting on <0x0d3dd200> (a java.lang.Daemons$FinalizerWatchdogDaemon)
  at java.lang.Object.wait(Object.java:442)
  at java.lang.Object.wait(Object.java:568)
  at java.lang.Daemons$FinalizerWatchdogDaemon.sleepUntilNeeded(Daemons.java:341)
  - locked <0x0d3dd200> (a java.lang.Daemons$FinalizerWatchdogDaemon)
  at java.lang.Daemons$FinalizerWatchdogDaemon.runInternal(Daemons.java:321)
  at java.lang.Daemons$Daemon.run(Daemons.java:139)
  at java.lang.Thread.run(Thread.java:920)

"Binder:9121_1" prio=5 tid=11 Native
  | group="main" sCount=1 ucsCount=0 flags=1 obj=0x12c810d0 self=0xb400007009615ad0
  | sysTid=9137 nice=0 cgrp=default sched=0/0 handle=0x6e1ce81cb0
  | state=S schedstat=( 7501563 20476615 22 ) utm=0 stm=0 core=5 HZ=100
  | stack=0x6e1cd8a000-0x6e1cd8c000 stackSize=991KB
  | held mutexes=
  native: #00 pc 00000000000a1c88  /apex/com.android.runtime/lib64/bionic/libc.so (__ioctl+8)
  native: #01 pc 000000000005b8d4  /apex/com.android.runtime/lib64/bionic/libc.so (ioctl+156)
  native: #02 pc 0000000000053070  /system/lib64/libbinder.so (android::IPCThreadState::talkWithDriver(bool)+292)
  native: #03 pc 0000000000053360  /system/lib64/libbinder.so (android::IPCThreadState::getAndExecuteCommand()+28)
  native: #04 pc 0000000000053c98  /system/lib64/libbinder.so (android::IPCThreadState::joinThreadPool(bool)+72)
  native: #05 pc 00000000000803d4  /system/lib64/libbinder.so (android::PoolThread::threadLoop()+28)
  native: #06 pc 000000000001358c  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+264)
  native: #07 pc 00000000000bd47c  /system/lib64/libandroid_runtime.so (android::AndroidRuntime::javaThreadShell(void*)+148)
  native: #08 pc 0000000000012de8  /system/lib64/libutils.so (thread_data_t::trampoline(thread_data_t const*)+408)
  native: #09 pc 00000000000b6a24  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+264)
  native: #10 pc 00000000000532bc  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+68)
  (no managed stack frames)

"FinalizerDaemon" daemon prio=5 tid=12 Waiting
  | group="system" sCount=1 ucsCount=0 flags=1 obj=0x12c81148 self=0xb400007009613f00
  | sysTid=9135 nice=4 cgrp=default sched=0/0 handle=0x6e1d095cb0
  | state=S schedstat=( 546512 5280208 6 ) utm=0 stm=0 core=6 HZ=100
  | stack=0x6e1cf92000-0x6e1cf94000 stackSize=1039KB
  | held mutexes=
  at java.lang.Object.wait(Native method)
  - waiting on <0x054e9a39> (a java.lang.Object)
  at java.lang.Object.wait(Object.java:442)
  at java.lang.ref.ReferenceQueue.remove(ReferenceQueue.java:190)
  - locked <0x054e9a39> (a java.lang.Object)
  at java.lang.ref.ReferenceQueue.remove(ReferenceQueue.java:211)
  at java.lang.Daemons$FinalizerDaemon.runInternal(Daemons.java:273)
  at java.lang.Daemons$Daemon.run(Daemons.java:139)
  at java.lang.Thread.run(Thread.java:920)

"HeapTaskDaemon" daemon prio=5 tid=13 WaitingForTaskProcessor
  | group="system" sCount=1 ucsCount=0 flags=1 obj=0x12c81660 self=0xb400007009612330
  | sysTid=9133 nice=4 cgrp=default sched=0/0 handle=0x6e1d2a9cb0
  | state=S schedstat=( 24463434 41295780 27 ) utm=2 stm=0 core=4 HZ=100
  | stack=0x6e1d1a6000-0x6e1d1a8000 stackSize=1039KB
  | held mutexes=
  native: #00 pc 000000000004def0  /apex/com.android.runtime/lib64/bionic/libc.so (syscall+32)
  native: #01 pc 000000000028dc74  /apex/com.android.art/lib64/libart.so (art::ConditionVariable::WaitHoldingLocks(art::Thread*)+152)
  native: #02 pc 00000000003bb784  /apex/com.android.art/lib64/libart.so (art::gc::TaskProcessor::GetTask(art::Thread*)+536)
  native: #03 pc 00000000003bc0b4  /apex/com.android.art/lib64/libart.so (art::gc::TaskProcessor::RunAllTasks(art::Thread*)+96)
  at dalvik.system.VMRuntime.runHeapTasks(Native method)
  at java.lang.Daemons$HeapTaskDaemon.runInternal(Daemons.java:531)
  at java.lang.Daemons$Daemon.run(Daemons.java:139)
  at java.lang.Thread.run(Thread.java:920)

"Binder:9121_2" prio=5 tid=14 Native
  | group="main" sCount=1 ucsCount=0 flags=1 obj=0x12c811c0 self=0xb40000700961ae40
  | sysTid=9138 nice=0 cgrp=default sched=0/0 handle=0x6e18d83cb0
  | state=S schedstat=( 1817084 7989009 11 ) utm=0 stm=0 core=6 HZ=100
  | stack=0x6e18c8c000-0x6e18c8e000 stackSize=991KB
  | held mutexes=
  native: #00 pc 00000000000a1c88  /apex/com.android.runtime/lib64/bionic/libc.so (__ioctl+8)
  native: #01 pc 000000000005b8d4  /apex/com.android.runtime/lib64/bionic/libc.so (ioctl+156)
  native: #02 pc 0000000000053070  /system/lib64/libbinder.so (android::IPCThreadState::talkWithDriver(bool)+292)
  native: #03 pc 0000000000053360  /system/lib64/libbinder.so (android::IPCThreadState::getAndExecuteCommand()+28)
  native: #04 pc 0000000000053c98  /system/lib64/libbinder.so (android::IPCThreadState::joinThreadPool(bool)+72)
  native: #05 pc 00000000000803d4  /system/lib64/libbinder.so (android::PoolThread::threadLoop()+28)
  native: #06 pc 000000000001358c  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+264)
  native: #07 pc 00000000000bd47c  /system/lib64/libandroid_runtime.so (android::AndroidRuntime::javaThreadShell(void*)+148)
  native: #08 pc 0000000000012de8  /system/lib64/libutils.so (thread_data_t::trampoline(thread_data_t const*)+408)
  native: #09 pc 00000000000b6a24  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+264)
  native: #10 pc 00000000000532bc  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+68)
  (no managed stack frames)

[uuuddddl]

Please share the logs.

Thanks!

sorry, only have this, I change another system for fix this problem. Now it's work good on the los A13