add manual patching script and flask server

This commit is contained in:
Kavish Devar
2025-01-10 21:32:57 +05:30
parent 4ef74712b2
commit d7b6353bcf
4 changed files with 452 additions and 0 deletions

164
root-module-manual/main.py Normal file
View File

@@ -0,0 +1,164 @@
import logging
import os
import re
import shutil
import subprocess
import sys
import zipfile
# Define color codes for logging
class LogColors:
HEADER = '\033[95m'
OKBLUE = '\033[94m'
OKCYAN = '\033[96m'
OKGREEN = '\033[92m'
WARNING = '\033[93m'
FAIL = '\033[91m'
ENDC = '\033[0m'
BOLD = '\033[1m'
UNDERLINE = '\033[4m'
# Custom logging formatter to include colors
class ColoredFormatter(logging.Formatter):
def format(self, record):
log_colors = {
'DEBUG': LogColors.OKCYAN,
'INFO': LogColors.OKGREEN,
'WARNING': LogColors.WARNING,
'ERROR': LogColors.FAIL,
'CRITICAL': LogColors.FAIL + LogColors.BOLD
}
log_color = log_colors.get(record.levelname, LogColors.ENDC)
record.msg = f"{log_color}{record.msg}{LogColors.ENDC}"
return super().format(record)
def run_command(command):
"""
Runs a shell command and logs the output.
Args:
command (str): The command to run.
Returns:
str: The standard output from the command.
Raises:
SystemExit: If the command fails.
"""
logging.info(f"Running command: {command}")
result = subprocess.run(command, shell=True, capture_output=True, text=True)
if result.returncode != 0 and "Cannot determine entrypoint" not in result.stderr:
logging.error(f"Command failed: {command}\n{result.stderr}")
sys.exit(1)
logging.info(f"Command output: {result.stdout}")
return result.stdout
def get_symbol_address(file_path, symbol_name):
"""
Gets the address of a symbol in a binary file using radare2.
Args:
file_path (str): The path to the binary file.
symbol_name (str): The name of the symbol to find.
Returns:
str: The address of the symbol.
Raises:
SystemExit: If the symbol is not found.
"""
logging.info(f"Getting address for symbol: {symbol_name}")
output = run_command(f"radare2 -q -e bin.cache=true -c 'is~{symbol_name}' -z {file_path}")
match = re.search(r'0x[0-9a-fA-F]+', output)
if match:
address = match.group(0)
logging.info(f"Found address for {symbol_name}: {address}")
return address
else:
logging.error(f"Symbol {symbol_name} not found in {file_path}")
sys.exit(1)
def patch_address(file_path, address, patch_bytes):
"""
Patches a specific address in a binary file with given bytes using radare2.
Args:
file_path (str): The path to the binary file.
address (str): The address to patch.
patch_bytes (str): The bytes to write at the address.
Raises:
SystemExit: If the patching command fails.
"""
logging.info(f"Patching address {address} with bytes: {patch_bytes}")
run_command(f"radare2 -q -e bin.cache=true -w -c 's {address}; wx {patch_bytes}; wci' {file_path}")
logging.info(f"Successfully patched address {address}")
def copy_file_to_src(file_path):
"""
Copies a file to the 'src/' directory.
Args:
file_path (str): The path to the file to copy.
"""
src_dir = 'src/'
if not os.path.exists(src_dir):
os.makedirs(src_dir)
shutil.copy(file_path, src_dir)
logging.info(f"Copied {file_path} to {src_dir}")
def zip_src_files():
"""
Zips all files in the 'src/' directory into 'btl2capfix.zip', preserving symlinks.
"""
with zipfile.ZipFile('btl2capfix.zip', 'w', zipfile.ZIP_DEFLATED, allowZip64=True) as zipf:
for root, dirs, files in os.walk('src/'):
for file in files:
file_path = os.path.join(root, file)
if file_path == os.path.join('src', os.path.basename(file_path)):
continue # Skip the original uploaded file
if os.path.islink(file_path):
link_target = os.readlink(file_path)
zip_info = zipfile.ZipInfo(os.path.relpath(file_path, 'src/'))
zip_info.create_system = 3 # Unix
zip_info.external_attr = 0o777 << 16
zip_info.external_attr |= 0xA000
zipf.writestr(zip_info, link_target)
else:
zipf.write(file_path, os.path.relpath(file_path, 'src/'))
logging.info("Zipped files under src/ into btl2capfix.zip")
def main():
"""
Main function to execute the script. It performs the following steps:
1. Copies the input file to the 'src/' directory.
2. Patches specific addresses in the binary file.
3. Zips the files in the 'src/' directory into 'btl2capfix.zip'.
"""
logging.basicConfig(level=logging.INFO, format='%(asctime)s - %(levelname)s - %(message)s')
logger = logging.getLogger()
handler = logger.handlers[0]
handler.setFormatter(ColoredFormatter('%(asctime)s - %(levelname)s - %(message)s'))
if len(sys.argv) != 2:
logging.error("Usage: python main.py <file_path>")
sys.exit(1)
file_path = sys.argv[1]
# Patch l2c_fcr_chk_chan_modes
l2c_fcr_chk_chan_modes_address = get_symbol_address(file_path, "l2c_fcr_chk_chan_modes")
patch_address(file_path, l2c_fcr_chk_chan_modes_address, "20008052c0035fd6")
# Patch l2cu_send_peer_info_req
l2cu_send_peer_info_req_address = get_symbol_address(file_path, "l2cu_send_peer_info_req")
patch_address(file_path, l2cu_send_peer_info_req_address, "c0035fd6")
# Copy file to src/
copy_file_to_src(file_path)
# Zip files under src/
zip_src_files()
if __name__ == "__main__":
main()

View File

@@ -0,0 +1,278 @@
from flask import Flask, request, jsonify, send_file, make_response
import os
import json
import uuid
import time
import threading
import logging
from main import get_symbol_address, patch_address, copy_file_to_src, zip_src_files
app = Flask(__name__)
PATCHED_LIBRARIES = {}
PERMALINK_EXPIRY = 600 # 10 minutes
PATCHES_JSON = 'patches.json'
# Configure logging
logging.basicConfig(level=logging.INFO, format='%(asctime)s - %(levelname)s - %(message)s')
logger = logging.getLogger()
def save_patch_info(permalink_id, file_path):
patch_info = {
'permalink_id': permalink_id,
'file_path': file_path,
'timestamp': time.time()
}
if os.path.exists(PATCHES_JSON):
with open(PATCHES_JSON, 'r') as f:
patches = json.load(f)
else:
patches = []
patches.append(patch_info)
with open(PATCHES_JSON, 'w') as f:
json.dump(patches, f, indent=4)
@app.route('/')
def index():
return '''
<!doctype html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Library Patcher</title>
<style>
body {
background-color: #121212;
color: #ffffff;
font-family: Arial, sans-serif;
display: flex;
justify-content: center;
align-items: center;
height: 100vh;
margin: 0;
padding: 5vmax;
box-sizing: border-box;
}
.container {
text-align: center;
background-color: #1e1e1e;
padding: 20px;
border-radius: 10px;
box-shadow: 0 0 10px rgba(0, 0, 0, 0.5);
width: 80%;
max-width: 500px;
}
.file-upload {
width: 100%;
height: 150px;
margin: 10px 0;
padding: 10px;
border-radius: 5px;
border: 2px dashed #555;
background-color: #333;
color: #fff;
box-sizing: border-box;
display: flex;
justify-content: center;
align-items: center;
cursor: pointer;
position: relative;
}
.file-upload input[type="file"] {
width: 100%;
height: 100%;
opacity: 0;
position: absolute;
cursor: pointer;
}
.file-upload-text {
font-size: 16px;
pointer-events: none;
}
.file-upload-text span {
display: block;
margin-top: 10px;
font-size: 14px;
color: #bbb;
}
input[type="submit"] {
width: 100%;
padding: 15px 20px;
border-radius: 5px;
border: none;
background-color: #6200ea;
color: #fff;
cursor: pointer;
transition: background-color 0.3s;
box-sizing: border-box;
display: block;
font-size: 16px;
}
input[type="submit"]:hover {
background-color: #3700b3;
}
.progress {
display: none;
margin-top: 20px;
width: 100%;
background-color: #333;
border-radius: 5px;
overflow: hidden;
}
.progress-bar {
width: 0;
height: 20px;
background-color: #6200ea;
transition: width 0.3s;
}
.progress-text {
margin-top: 10px;
font-size: 14px;
color: #bbb;
}
.download-link {
margin-top: 20px;
display: none;
}
.download-link a {
color: #6200ea;
text-decoration: none;
font-weight: bold;
}
.download-link a:hover {
color: #3700b3;
}
</style>
</head>
<body>
<div class="container">
<h1>Upload a library to patch</h1>
<form id="upload-form" enctype="multipart/form-data">
<div class="file-upload">
<input type="file" name="file" onchange="updateFileName(this)">
<span class="file-upload-text">Click to upload a file<span id="file-name"></span></span>
</div>
<input type="submit" value="Patch" id="patch-button">
</form>
<div class="progress" id="progress">
<div class="progress-bar" id="progress-bar"></div>
</div>
<div class="progress-text" id="progress-text"></div>
<div class="download-link" id="download-link">
<a href="#" id="download-url">Download patched file</a>
</div>
</div>
<script>
function updateFileName(input) {
const fileName = input.files[0] ? input.files[0].name : "No file selected";
document.getElementById('file-name').textContent = fileName;
}
document.getElementById('upload-form').addEventListener('submit', async function(event) {
event.preventDefault();
const formData = new FormData(this);
const progressBar = document.getElementById('progress-bar');
const progressText = document.getElementById('progress-text');
const progress = document.getElementById('progress');
const patchButton = document.getElementById('patch-button');
patchButton.style.display = 'none';
progress.style.display = 'block';
progressBar.style.width = '0%';
progressText.textContent = 'Uploading...';
const response = await fetch('/patch', {
method: 'POST',
body: formData,
onUploadProgress: function(progressEvent) {
const percentCompleted = Math.round((progressEvent.loaded * 100) / progressEvent.total);
progressBar.style.width = percentCompleted + '%';
}
});
const result = await response.json();
if (result.permalink) {
progressBar.style.width = '100%';
progressText.textContent = 'Patching completed!';
const downloadLink = document.getElementById('download-link');
const downloadUrl = document.getElementById('download-url');
downloadUrl.href = result.permalink;
downloadLink.style.display = 'block';
} else {
progressText.textContent = 'Error: ' + result.error;
patchButton.style.display = 'block';
}
});
</script>
</body>
</html>
'''
@app.route('/patch', methods=['POST'])
def patch():
if 'file' not in request.files:
return jsonify({"error": "No file part"}), 400
file = request.files['file']
if file.filename == '':
return jsonify({"error": "No selected file"}), 400
if not file.filename.endswith('.so'):
return jsonify({"error": "Invalid file type. Only .so files are allowed."}), 400
file_path = os.path.join('uploads', file.filename)
file.save(file_path)
# Patch the file
try:
l2c_fcr_chk_chan_modes_address = get_symbol_address(file_path, "l2c_fcr_chk_chan_modes")
patch_address(file_path, l2c_fcr_chk_chan_modes_address, "20008052c0035fd6")
l2cu_send_peer_info_req_address = get_symbol_address(file_path, "l2cu_send_peer_info_req")
patch_address(file_path, l2cu_send_peer_info_req_address, "c0035fd6")
except Exception as e:
logger.error(f"Error patching file: {str(e)}")
return jsonify({"error": f"Error patching file: {str(e)}"}), 500
# Create permalink
permalink_id = str(uuid.uuid4())
PATCHED_LIBRARIES[permalink_id] = {
'file_path': file_path,
'timestamp': time.time()
}
# Save patch info
save_patch_info(permalink_id, file_path)
# Schedule deletion
threading.Timer(PERMALINK_EXPIRY, delete_expired_permalink, args=[permalink_id]).start()
return jsonify({'permalink': f'/download/{permalink_id}'})
@app.route('/download/<permalink_id>', methods=['GET'])
def download(permalink_id):
if permalink_id not in PATCHED_LIBRARIES:
return "Permalink expired or invalid", 404
file_path = PATCHED_LIBRARIES[permalink_id]['file_path']
if not os.path.exists(file_path):
return "File not found", 404
try:
copy_file_to_src(file_path)
zip_src_files()
except Exception as e:
logger.error(f"Error preparing download: {str(e)}")
return f"Error preparing download: {str(e)}", 500
resp = make_response(send_file('btl2capfix.zip', as_attachment=True))
resp.headers['Content-Disposition'] = f'attachment; filename=btl2capfix.zip'
return resp
def delete_expired_permalink(permalink_id):
if permalink_id in PATCHED_LIBRARIES:
if os.path.exists(PATCHED_LIBRARIES[permalink_id]['file_path']):
os.remove(PATCHED_LIBRARIES[permalink_id]['file_path'])
del PATCHED_LIBRARIES[permalink_id]
if not os.path.exists('uploads'):
os.makedirs('uploads')
if __name__ == '__main__':
app.run(debug=True, host='0.0.0.0', port=8080)

View File

@@ -0,0 +1,6 @@
id=btl2capfix
name=Bluetooth L2CAP workaround for AirPods
version=v1
versionCode=1
author=kavishdevar
description=Fixes the Bluetooth L2CAP connection issue with AirPods

View File

@@ -0,0 +1,4 @@
#!/system/bin/sh
mount -t overlay overlay -o lowerdir=/apex/com.android.btservices/lib64,upperdir=/data/adb/modules/btl2capfix/apex/com.android.btservices/lib64,workdir=/data/adb/modules/btl2capfix/apex/com.android.btservices/work /apex/com.android.btservices/lib64
mount -t overlay overlay -o lowerdir=/apex/com.android.btservices@352090000/lib64,upperdir=/data/adb/modules/btl2capfix/apex/com.android.btservices@352090000/lib64,workdir=/data/adb/modules/btl2capfix/apex/com.android.btservices@352090000/work /apex/com.android.btservices@352090000/lib64