Something is definitely off with your ProGuard configuration. While exported resources such as Activities, Receivers and Services cannot be optimized (since they are exported and need a lookup entry to be imported ;). Looking at your output I'd assume one of the following: - ProGuard isn't being invoked to optimize your output class files. - You've enabled options like "-dontoptimize" in your ProGuard config. - You're decompiling an (un)optimized version.
I'm making this assumption since even your "private" class members are not being renamed. Add the following lines to your ProGuard config: -verbose -dump class_files.txt -printseeds seeds.txt -printusage unused.txt -printmapping mapping.txt After adding these check the contents of the files and you'll get an idea what went wrong. In addition: - If you're using a template ProGuard config packaged with recent ADT make sure you're using "proguard-android-optimize.txt" and not "proguard-android.txt" - You debug APK will not be optimized. Make sure you're testing a decompile on a release mode APK, i.e. you did an export, typed your private key pass and selected an export path. - ProGuard does not officially support previously optimized code. You can't easily optimize a previously optimized class. This only really becomes an issue when you're writing your own Android libraries and want to publish and protect IP. -R --- Riley Hassell | Founder Privateer Labs, LLC E-mail: [email protected] Phone: 206-406-6348 CONFIDENTIALITY NOTE : The information in this e-mail is confidential and privileged; it is intended for use solely by the individual or entity named as the recipient hereof. Disclosure, copying, distribution, or use of the contents of this e-mail by persons other than the intended recipient is strictly prohibited and may violate applicable laws. If you have received this e-mail in error, please delete the original message and notify us by return email or collect call immediately. > -----Original Message----- > From: [email protected] [mailto:android- > [email protected]] On Behalf Of Winnie Zhang > Sent: Tuesday, September 04, 2012 9:09 PM > To: [email protected] > Subject: [android-security-discuss] Proguard useless. After decompile, all > code show up normally. Even binary java class file, will become plain text as > well. > > Proguard useless. After decompile, all code show up normally. Even binary > java class file, will be in plain text as well. > > > AfterProgardScreenCapture<http://ilove.cn.com/files/AfterProgardScreenC > apture.jpg> > > -- > You received this message because you are subscribed to the Google Groups > "Android Security Discussions" group. > To view this discussion on the web visit > https://groups.google.com/d/msg/android-security-discuss/- > /8jP58Bk4n28J. > To post to this group, send email to android-security- > [email protected]. > To unsubscribe from this group, send email to android-security- > [email protected]. > For more options, visit this group at > http://groups.google.com/group/android-security-discuss?hl=en.
smime.p7s
Description: S/MIME cryptographic signature
