Proguard簡介

介紹

ProGuard is a Java class file shrinker, optimizer, obfuscator, and preverifier.

shrink:去除無用的類和成員
optimize:進一步優化，方法內聯，去除無用方法參數，非入口方法變成私有，靜態的,final
obfuscate:非入口點的方法和類進行重命名
preverify:android是不需要這一步的，只針對標準的.jar

jar轉換關係

inputjars 到　outputjars的關係　是多對多
多對一

-injars      in.jar 
-injars      /usr/local/java/scala-2.9.1/lib/scala-library.jar 
-outjars     out.jar

多對多

-injars       proguardgui.jar 
-outjars      proguardgui_out.jar 
-injars       proguard.jar 
-outjars      proguard_out.jar 
-libraryjars  <java.home>/lib/rt.jar 
-applymapping proguard.map 

-keep public class proguard.gui.ProGuardGUI { 
    public static void main(java.lang.String[]); 
}

一對多

-injars  in.jar 
-outjars code_out.jar(**.class) 
-outjars resources_out.jar

簡單的關鍵字說明

-keep [,modifier,…] class_specification

保存類和類成員，先查找指定的類，然後保存指定的類中的相關成員，同時做爲入口點

-keepclassmembers [,modifier,…] class_specification

保存類成員

-keepclasseswithmembers [,modifier,…] class_specification

保存指定的類成員存在的類和類成員，先查找包含指定成員的類，然後匹配指定的類

**-keepnames class_specification
縮寫 -keep,allowshrinking class_specification**

保存在瘦身階段沒有被移除的類和類成員的名字，僅僅用來obfuscate階段

**-keepclassmembernames class_specification
縮寫 -keepclassmembers,allowshrinking class_specification**

保存在瘦身階段沒有被移除的類成員的名字，僅僅用來obfuscate階段

**-keepclasseswithmembernames class_specification
縮寫 -keepclasseswithmembers,allowshrinking class_specification**

保存在瘦身階段沒有被移除的，並且指定的類成員出現的類和類成員的名字，僅僅用來obfuscate階段

-printseeds [filename]

列出所有匹配-keep的類和類成員，在處理過程進行標準的輸出，或者輸出在文件中

-printmapping [filename]

將混淆後的映射關係輸出到指定的文件．

-dontwan [class_filter]

不處理無法解析引用以及一些其它重要的問題

基本的匹配規則

 [@annotationtype] [[!]public|final|abstract|@ ...] [!]interface|class|enum classname
    [extends|implements [@annotationtype] classname]
[{
  [@annotationtype] [[!]public|private|protected|static|volatile|transient ...] <fields> | (fieldtype fieldname);
  [@annotationtype] [[!]public|private|protected|static|synchronized|native|abstract|strictfp ...] <methods> | <init>(argumenttype,...) | classname(argumenttype,...) | (returntype methodname(argumenttype,...));
  [@annotationtype] [[!]public|private|protected|static ... ] *;
    ...
}]

基本符號說明:

字符	解釋	例子
@	註釋	@Deprecated public class * // 可以匹配所有被@Deprecated修飾的類
!	非
[]	可選項
<>	特定的含義，下面詳細說明
\|	或者
()	組合	(fieldtype filedname)組合在一起進行限定
;	域或者方法後面需要加上
*	通配符

<>的說明：

<>	說明
< init >	匹配任意的構造函數
< fields >	匹配任意的域
< methods >	匹配任意的方法

classname的說明:

classname是必選項，是帶上包名的完整類名．如果有內部類可以用符號進行組合．如android.view.View OnClickListener同時可以使用通配符:

符號	說明
?	用來匹配除包分隔符.之外的其他任意單個字符
*	用來匹配任意多個字符（包括0個），匹配不能跨越包分隔符.。
**	用來匹配任意多個字符（包括0個），和不同的是，*匹配可以跨越包分隔符。

filedtype 和 filename一起使用:

filedtype的通配符：

符號	說明
%	用來匹配任意Java基本數據類型(包括byte，short，int，long，float，double，char和boolean，不包括void)
\?	用來匹配成員變量類型中除包分隔符.之外的任意單個字符
*	用來匹配成員變量類型中除包分隔符.之外的任意多個字符（包括0個）
**	用來匹配成員變量類型中任意多個字符（包括0個），包括包分隔符.
***	用來匹配任意類型，包括基本數據類型和數組

filename的通配符：

符號	說明
?	用來匹配成員變量名中任意單個字符
*	用來匹配成員變量名中任意多個字符（包括0個）

優化參數說明

官方優化選項說明

語句(部分)	說明
class/marking/final	儘可能的使類成爲final類型
class/unboxing/enum	儘可能的簡化枚舉類型爲整數常來功能
class/merging/vertical	儘可能的在類層級垂直方向進行合併
class/merging/horizontal (⇒ code/removal/advanced)	儘可能的在類層級水平方向進行合併
field/removal/writeonly	移除只讀的域
field/marking/private (⇒ code/simplification/advanced)	儘可能的使域權限爲私有
field/propagation/value	通過方法傳遞域值
method/marking/private (⇒ code/removal/advanced)	儘可能的使方法爲私有
method/marking/static	儘可能的使方法爲私有
method/marking/final (⇒ code/removal/advanced)	儘可能使方法爲final
method/removal/parameter(⇒ code/simplification/advanced)	移除無用的方法參數

混淆保留的分類

保留原則：
1.外部可能需要使用的
2.反射相關

保留序列化

//僅僅在內存使用
 -keepclassmembers class * implements java.io.Serializable { 
     private static final java.io.ObjectStreamField[] serialPersistentFields; 
     private void writeObject(java.io.ObjectOutputStream); 
     private void readObject(java.io.ObjectInputStream); 
     java.lang.Object writeReplace(); 
     java.lang.Object readResolve(); 
}
//需要存儲的序列化，需要額外加上
 -keepnames class * implements java.io.Serializable
 //需要兼容老的數據
  -keepnames class * implements java.io.Serializable 
  -keepclassmembers class * implements java.io.Serializable { 
    static final long serialVersionUID; 
    private static final java.io.ObjectStreamField[] serialPersistentFields; 
    !static !transient <fields>; 
    !private <fields>; 
    !private <methods>; 
    private void writeObject(java.io.ObjectOutputStream); 
    private void readObject(java.io.ObjectInputStream); 
    java.lang.Object writeReplace(); 
    java.lang.Object readResolve(); 
}

保留反射
保留枚舉

-keepclassmembers,allowoptimization enum * { 
    public static **[] values(); public static ** valueOf(java.lang.String); 
}

保留bean

keep public class mypackage.MyBean { 
    public void setMyProperty(int); 
    public int getMyProperty(); 
} 

-keep public class mypackage.MyBeanEditor

#更加通用的方式
-keep class mybeans.** { 
    void set*(***); 
    void set*(int, ***); 
    boolean is*(); 
    boolean is*(int); 
    *** get*(); 
    *** get*(int); 
}

保留native

-keepclasseswithmembernames,includedescriptorclasses class * { 
    native <methods>; 
}

保留回調

-keep class mypackage.MyCallbackClass { 
    void myCallbackMethod(java.lang.String); 
}

保留數據庫驅動

-keep class * implements java.sql.Driver

８. 保留UI

#java的UI 
-keep class * extends javax.swing.plaf.ComponentUI { 
    public static javax.swing.plaf.ComponentUI createUI(javax.swing.JComponent); 
}
＃android的UI 
-keep public class * extends android.view.View { 
      public <init>(android.content.Context); 
      public <init>(android.content.Context, android.util.AttributeSet); 
      public <init>(android.content.Context, android.util.AttributeSet, int); 
      public void set*(...); 
} 

-keepclasseswithmembers class * { 
    public <init>(android.content.Context, android.util.AttributeSet); 
} 

-keepclasseswithmembers class * { 
    public <init>(android.content.Context, android.util.AttributeSet, int); 
}

９. 保留RMI代碼
對於android來說就AIDL

-keep class com.xx.xxxxx.token.ITokenService

proguard的使用

Proguard被集成在android sdk 中，其目錄是\

buildTypes {
  release {
    signingConfig signingConfigs.release
    minifyEnabled true
    proguardFiles getDefaultProguardFile(‘proguard-android.txt‘), ‘proguard-rules.pro‘
  }
}

通過makefile編譯，混淆

android.mk文件中加入

ifeq ("$(isProguard)","false") //isProguard是上層腳本定義的一個變量
    LOCAL_PROGUARD_ENABLED := disabled
else
    LOCAL_PROGUARD_ENABLED := custom
endif

proguard_options_file := $(LOCAL_PATH)/src/app/proguard-rules.pro

LOCAL_PROGUARD_FLAGS := $(addprefix -include ,$(proguard_options_file)) $(LOCAL_PROGUARD_FLAGS)

android 官方混淆模板

#
# This ProGuard configuration file illustrates how to process Android
# applications.
# Usage:
#     java -jar proguard.jar @android.pro
#
# If you're using the Android SDK (version 2.3 or higher), the android tool
# already creates a file like this in your project, called proguard.cfg.
# It should contain the settings of this file, minus the input and output paths
# (-injars, -outjars, -libraryjars, -printmapping, and -printseeds).
# The generated Ant build file automatically sets these paths.

# Specify the input jars, output jars, and library jars.
# Note that ProGuard works with Java bytecode (.class),
# before the dex compiler converts it into Dalvik code (.dex).

-injars  bin/classes
-injars  libs
-outjars bin/classes-processed.jar

-libraryjars /usr/local/android-sdk/platforms/android-9/android.jar
#-libraryjars /usr/local/android-sdk/add-ons/google_apis-7_r01/libs/maps.jar
# ...

# Save the obfuscation mapping to a file, so you can de-obfuscate any stack
# traces later on.

-printmapping bin/classes-processed.map

# You can print out the seeds that are matching the keep options below.

#-printseeds bin/classes-processed.seeds

# Preverification is irrelevant for the dex compiler and the Dalvik VM.

-dontpreverify

# Reduce the size of the output some more.

-repackageclasses ''
-allowaccessmodification

# Switch off some optimizations that trip older versions of the Dalvik VM.

-optimizations !code/simplification/arithmetic

# Keep a fixed source file attribute and all line number tables to get line
# numbers in the stack traces.
# You can comment this out if you're not interested in stack traces.

-renamesourcefileattribute SourceFile
-keepattributes SourceFile,LineNumberTable

# RemoteViews might need annotations.

-keepattributes *Annotation*

# Preserve all fundamental application classes.

-keep public class * extends android.app.Activity
-keep public class * extends android.app.Application
-keep public class * extends android.app.Service
-keep public class * extends android.content.BroadcastReceiver
-keep public class * extends android.content.ContentProvider

# Preserve all View implementations, their special context constructors, and
# their setters.

-keep public class * extends android.view.View {
    public <init>(android.content.Context);
    public <init>(android.content.Context, android.util.AttributeSet);
    public <init>(android.content.Context, android.util.AttributeSet, int);
    public void set*(...);
}

# Preserve all classes that have special context constructors, and the
# constructors themselves.

-keepclasseswithmembers class * {
    public <init>(android.content.Context, android.util.AttributeSet);
}

# Preserve all classes that have special context constructors, and the
# constructors themselves.

-keepclasseswithmembers class * {
    public <init>(android.content.Context, android.util.AttributeSet, int);
}

# Preserve the special fields of all Parcelable implementations.

-keepclassmembers class * implements android.os.Parcelable {
    static android.os.Parcelable$Creator CREATOR;
}

# Preserve static fields of inner classes of R classes that might be accessed
# through introspection.

-keepclassmembers class **.R$* {
  public static <fields>;
}

# Preserve the required interface from the License Verification Library
# (but don't nag the developer if the library is not used at all).

-keep public interface com.android.vending.licensing.ILicensingService

-dontnote com.android.vending.licensing.ILicensingService

# The Android Compatibility library references some classes that may not be
# present in all versions of the API, but we know that's ok.

-dontwarn android.support.**

# Preserve all native method names and the names of their classes.

-keepclasseswithmembernames class * {
    native <methods>;
}

# Preserve the special static methods that are required in all enumeration
# classes.

-keepclassmembers class * extends java.lang.Enum {
    public static **[] values();
    public static ** valueOf(java.lang.String);
}

# Explicitly preserve all serialization members. The Serializable interface
# is only a marker interface, so it wouldn't save them.
# You can comment this out if your application doesn't use serialization.
# If your code contains serializable classes that have to be backward 
# compatible, please refer to the manual.

-keepclassmembers class * implements java.io.Serializable {
    static final long serialVersionUID;
    static final java.io.ObjectStreamField[] serialPersistentFields;
    private void writeObject(java.io.ObjectOutputStream);
    private void readObject(java.io.ObjectInputStream);
    java.lang.Object writeReplace();
    java.lang.Object readResolve();
}

# Your application may contain more items that need to be preserved; 
# typically classes that are dynamically created using Class.forName:

# -keep public class mypackage.MyClass
# -keep public interface mypackage.MyInterface
# -keep public class * implements mypackage.MyInterface

優雅的混淆

僅供參考，思路類似
在需要保留的地方加上標識@android.support.annotation.Keep

#手動啓用support keep註解
#http://tools.android.com/tech-docs/support-annotations
-dontskipnonpubliclibraryclassmembers
-printconfiguration

-keep @android.support.annotation.Keep class *
-keepclassmembers class * {
    @android.support.annotation.Keep *;
}

Proguard說明，android代碼混淆

Proguard簡介

介紹

jar轉換關係

簡單的關鍵字說明

基本的匹配規則

基本符號說明:

<>的說明：

classname的說明:

filedtype 和 filename一起使用:

優化參數說明

混淆保留的分類

proguard的使用

android 官方混淆模板

優雅的混淆

Android 自定義View 之觸摸消息派發

Clean_Achitecture_翻譯

Bitmap Png jpg的區別

Android 自定義View 之測量過程（onMeasure）

安卓安全那點事

Mac下配置sublime實現LaTeX

https://yachay.unat.edu.pe/blog/index.php?comment_area=format_blog&comment_component=blog&comment_co

linux以太網驅動總結