不能混淆的項(xiàng)
在AndroidManifest中配置的類,比如四大組件
JNI調(diào)用的方法
反射用到的類
WebView中JavaScript調(diào)用的方法
Layout文件引用到的自定義View
一些引入的第三方庫
使用工具AndroidStudio
release {
minifyEnabled true
proguardFiles getDefaultProguardFile('proguard-android.txt'), 'proguard-rules.pro'
}
使用proguard混淆代碼是對產(chǎn)品本身的一種保護(hù),常見的方法就是編寫projuard-rules.pro配置文件
# This is a configuration file for ProGuard.
# http://proguard.sourceforge.net/index.html#manual/usage.html
//混淆時(shí)不使用大小寫混合類名
-dontusemixedcaseclassnames
//不跳過library中的非public的類
-dontskipnonpubliclibraryclasses
//打印混淆的詳細(xì)信息
-verbose
# Optimization is turned off by default. Dex does not like code run
# through the ProGuard optimize and preverify steps (and performs some
# of these optimizations on its own).
//不進(jìn)行優(yōu)化,建議使用此選項(xiàng),理由見上
-dontoptimize
//不進(jìn)行預(yù)校驗(yàn),預(yù)校驗(yàn)是作用在Java平臺(tái)上的,Android平臺(tái)上不需要這項(xiàng)功能,去掉之后還可以加快混淆速度
-dontpreverify
# Note that if you want to enable optimization, you cannot just
# include optimization flags in your own project configuration file;
# instead you will need to point to the
# "proguard-android-optimize.txt" file instead of this one from your
# project.properties file.
//保留注解參數(shù)
-keepattributes *Annotation*
//保留Google原生服務(wù)需要的類
-keep public class com.google.vending.licensing.ILicensingService
-keep public class com.android.vending.licensing.ILicensingService
# For native methods, see http://proguard.sourceforge.net/manual/examples.html#native
//保留native方法的類名和方法名
-keepclasseswithmembernames class * {
native <methods>;
}
# keep setters in Views so that animations can still work.
# see http://proguard.sourceforge.net/manual/examples.html#beans
//保留自定義View,如"屬性動(dòng)畫"中的set/get方法
-keepclassmembers public class * extends android.view.View {
void set*(***);
*** get*();
}
# We want to keep methods in Activity that could be used in the XML attribute onClick
//保留Activity中參數(shù)是View的方法,如XML中配置android:onClick=”buttonClick”屬性,Activity中調(diào)用的buttonClick(View view)方法
-keepclassmembers class * extends android.app.Activity {
public void *(android.view.View);
}
# For enumeration classes, see http://proguard.sourceforge.net/manual/examples.html#enumerations
//保留混淆枚舉中的values()和valueOf()方法
-keepclassmembers enum * {
public static **[] values();
public static ** valueOf(java.lang.String);
}
//Parcelable實(shí)現(xiàn)類中的CREATOR字段是絕對不能改變的,包括大小寫
-keepclassmembers class * implements android.os.Parcelable {
public static final android.os.Parcelable$Creator CREATOR;
}
//R文件中的所有記錄資源id的靜態(tài)字段
-keepclassmembers class **.R$* {
public static <fields>;
}
# The support library contains references to newer platform versions.
# Dont warn about those in case this app is linking against an older
# platform version. We know about them, and they are safe.
//忽略support包因?yàn)榘姹炯嫒莓a(chǎn)生的警告
-dontwarn android.support.**
Proguard關(guān)鍵字
關(guān)鍵字 描述
keep 保留類和類中的成員,防止被混淆或移除
keepnames 保留類和類中的成員,防止被混淆,成員沒有被引用會(huì)被移除
keepclassmembers 只保留類中的成員,防止被混淆或移除
keepclassmembernames 只保留類中的成員,防止被混淆,成員沒有引用會(huì)被移除
keepclasseswithmembers 保留類和類中的成員,防止被混淆或移除,保留指明的成員
keepclasseswithmembernames 保留類和類中的成員,防止被混淆,保留指明的成員,成員沒有引用會(huì)被移除
Proguard通配符
通配符 描述
<field> 匹配類中的所有字段
<method> 匹配類中所有的方法
<init> 匹配類中所有的構(gòu)造函數(shù)
* 匹配任意長度字符,不包含包名分隔符(.)
** 匹配任意長度字符,包含包名分隔符(.)
*** 匹配任意參數(shù)類型
...
指定混淆時(shí)可使用字典
-applymapping filename 指定重用一個(gè)已經(jīng)寫好了的map文件作為新舊元素名的映射。
-obfuscationdictionary filename 指定一個(gè)文本文件用來生成混淆后的名字。
-classobfuscationdictionary filename 指定一個(gè)混淆類名的字典
-packageobfuscationdictionary filename 指定一個(gè)混淆包名的字典
-overloadaggressively 混淆的時(shí)候大量使用重載,多個(gè)方法名使用同一個(gè)混淆名(慎用)
# 這里巧妙地使用java中的關(guān)鍵字作字典,混淆之后的代碼更加不利于閱讀
#
# This obfuscation dictionary contains reserved Java keywords. They can't
# be used in Java source files, but they can be used in compiled class files.
# Note that this hardly improves the obfuscation. Decent decompilers can
# automatically replace reserved keywords, and the effect can fairly simply be
# undone by obfuscating again with simpler names.
# Usage:
# java -jar proguard.jar ..... -obfuscationdictionary keywords.txt
#
do
if
for
int
new
try
byte
case
char
else
goto
long
this
void
break
catch
class
const
final
float
short
super
throw
while
double
import
native
public
return
static
switch
throws
boolean
default
extends
finally
package
private
abstract
continue
strictfp
volatile
interface
protected
transient
implements
instanceof
synchronized
使用proguardgui對jar包進(jìn)行混淆
proguardgui工具支持Shrinking(壓縮)、Optimization(優(yōu)化)、Obfuscation(混淆)、Preverification(預(yù)校驗(yàn))四項(xiàng)操作
詳細(xì)步驟:
1 Load configuration --> Next
2 Add input/Add output
3 添加jar包依賴
JAVA_HOME/jre/lib/rt.jar
Android_SDK/platfroms/android-23/android.jar
AndroidStudioProjects/ProjectName/app/build/intermediates/exploded-aar/com.android.support/appcompat-v7/23.4.0/jars/classes.jar
AndroidStudioProjects/ProjectName/app/build/intermediates/exploded-aar/com.android.support/support-v4/23.4.0/jars/classes.jar
AndroidStudioProjects/ProjectName/app/build/intermediates/exploded-aar/com.android.support/support-v4/23.4.0/jars/libs/internal_impl-23.4.0.jar
其他第三方j(luò)ar文件
4 Don`t use Shrink --> Next
5 Add --> Extends/implements class --> android.app.Activity --> ok --> Next
6 Next
7 Next
8 View configuration
tips:
AndroidStudio中生成jar文件方法:
jar -cvf filename.jar -C app/build/intermediates/classes/debug
5分鐘快速混淆
#-------------------------------------------定制化區(qū)域----------------------------------------------
#---------------------------------1.實(shí)體類---------------------------------
-keep class com.demo.login.bean.** { *; }
-keep class com.demo.main.bean.** { *; }
#-------------------------------------------------------------------------
#---------------------------------2.第三方包-------------------------------
#eventBus
-keepattributes *Annotation*
-keepclassmembers class ** {
@org.greenrobot.eventbus.Subscribe <methods>;
}
-keep enum org.greenrobot.eventbus.ThreadMode { *; }
-keepclassmembers class * extends org.greenrobot.eventbus.util.ThrowableFailureEvent {
<init>(java.lang.Throwable);
}
#glide
-keep public class * implements com.bumptech.glide.module.GlideModule
-keep public enum com.bumptech.glide.load.resource.bitmap.ImageHeaderParser$** {
**[] $VALUES;
public *;
}
#log4j
-libraryjars log4j-1.2.17.jar
-dontwarn org.apache.log4j.**
-keep class org.apache.log4j.** { *;}
#-------------------------------------------------------------------------
#---------------------------------3.與js互相調(diào)用的類------------------------
-keepclasseswithmembers class com.demo.login.bean.ui.MainActivity$JSInterface {
<methods>;
}
#-------------------------------------------------------------------------
#---------------------------------4.反射相關(guān)的類和方法-----------------------
# 有
#----------------------------------------------------------------------------
#---------------------------------------------------------------------------------------------------
#-------------------------------------------基本不用動(dòng)區(qū)域--------------------------------------------
#---------------------------------基本指令區(qū)----------------------------------
-optimizationpasses 5
-dontusemixedcaseclassnames
-dontskipnonpubliclibraryclasses
-dontskipnonpubliclibraryclassmembers
-dontpreverify
-verbose
-printmapping proguardMapping.txt
-optimizations !code/simplification/cast,!field/*,!class/merging/*
-keepattributes *Annotation*,InnerClasses
-keepattributes Signature
-keepattributes SourceFile,LineNumberTable
#----------------------------------------------------------------------------
#---------------------------------默認(rèn)保留區(qū)---------------------------------
-keep public class * extends android.app.Activity
-keep public class * extends android.app.Application
-keep public class * extends android.app.Service
-keep public class * extends android.content.BroadcastReceiver
-keep public class * extends android.content.ContentProvider
-keep public class * extends android.app.backup.BackupAgentHelper
-keep public class * extends android.preference.Preference
-keep public class * extends android.view.View
-keep public class com.android.vending.licensing.ILicensingService
-keep class android.support.** {*;}
-keepclasseswithmembernames class * {
native <methods>;
}
-keepclassmembers class * extends android.app.Activity{
public void *(android.view.View);
}
-keepclassmembers enum * {
public static **[] values();
public static ** valueOf(java.lang.String);
}
-keep public class * extends android.view.View{
*** get*();
void set*(***);
public <init>(android.content.Context);
public <init>(android.content.Context, android.util.AttributeSet);
public <init>(android.content.Context, android.util.AttributeSet, int);
}
-keepclasseswithmembers class * {
public <init>(android.content.Context, android.util.AttributeSet);
public <init>(android.content.Context, android.util.AttributeSet, int);
}
-keep class * implements android.os.Parcelable {
public static final android.os.Parcelable$Creator *;
}
-keepclassmembers class * implements java.io.Serializable {
static final long serialVersionUID;
private static final java.io.ObjectStreamField[] serialPersistentFields;
private void writeObject(java.io.ObjectOutputStream);
private void readObject(java.io.ObjectInputStream);
java.lang.Object writeReplace();
java.lang.Object readResolve();
}
-keep class **.R$* {
*;
}
-keepclassmembers class * {
void *(**On*Event);
}
#----------------------------------------------------------------------------
#---------------------------------webview------------------------------------
-keepclassmembers class fqcn.of.javascript.interface.for.Webview {
public *;
}
-keepclassmembers class * extends android.webkit.WebViewClient {
public void *(android.webkit.WebView, java.lang.String, android.graphics.Bitmap);
public boolean *(android.webkit.WebView, java.lang.String);
}
-keepclassmembers class * extends android.webkit.WebViewClient {
public void *(android.webkit.WebView, jav.lang.String);
}
#----------------------------------------------------------------------------
#---------------------------------------------------------------------------------------------------
# 刪除代碼中Log相關(guān)的代碼
-assumenosideeffects class android.util.Log {
public static boolean isLoggable(java.lang.String, int);
public static int v(...);
public static int i(...);
public static int w(...);
public static int d(...);
public static int e(...);
}
網(wǎng)上有很多5分鐘完成混淆規(guī)則的教程,但如何更優(yōu)雅的完成這一枯燥的過程,即使用@Keep注解,使混淆變得輕松愉快
在proguard-rules.pro配置文件中加入以下規(guī)則
#手動(dòng)啟用support keep注解
#http://tools.android.com/tech-docs/support-annotations
-dontskipnonpubliclibraryclassmembers
-printconfiguration
-keep,allowobfuscation @interface android.support.annotation.Keep
-keep @android.support.annotation.Keep class *
-keepclassmembers class * {
@android.support.annotation.Keep *;
}
哪里不對@Keep哪里,媽媽再也不用擔(dān)心我不會(huì)混淆啦……
參考資料
http://blog.csdn.net/guolin_blog/article/details/50451259
http://www.lxweimin.com/p/60e82aafcfd0