1、checkpermission部分寫到服務端的是:
- writeInterfaceToken -->> android.app.IActivityManager
- writeString---> permission 字符串
- writeInt -->pid
- writeInt -->uid
- 寫過去的code是Check_permission_transcation
2、現在我們可以讀出interfacetoken的值,只是出現了兩次android.app.IActivityManager字符串值
只要分別是哪一個值就可以讀取相關的值(理論)
3、下面做驗證
從一些錯誤信息如下來看code是53
PID: 5165, UID: 10046 D/android.app.IActivityManager Writing exception to parcel E/DatabaseUtils(2622): java.lang.SecurityException: Permission Denial: reading com.android.providers.contacts.ContactsProvider2 uri content://com.android.contacts/contacts from pid=5165, uid=10046 requires android.permission.READ_CONTACTS E/DatabaseUtils(2622): at android.content.ContentProvider$Transport.enforceReadPermission(ContentProvider.java:295) E/DatabaseUtils(2622): at android.content.ContentProvider$Transport.query(ContentProvider.java:177)