NDK .so Session: readelf, llvm-objdump -d, JNI_OnLoad

One lab APK, one arm64-v8a .so. file/readelf/llvm-objdump through JNI_OnLoad, Java_* exports, GetStringUTFChars, a 32-byte stack copy, tombstone and ASAN. Frida logs length and prefix only.

January 4, 2025 · 7 min · 1414 words · Jose Adalberto Gutierrez Ochoa

JNI_OnLoad vs Java_* Name Mangling on a Lab APK

Self-built APK where javah-style Java_com_lab_onload_Bridge_* exports sit next to a RegisterNatives table. readelf -s, ARM64 JNIEnv GetObjectClass, crash on an unbounded UTF copy.

December 2, 2019 · 7 min · 1353 words · Jose Adalberto Gutierrez Ochoa