内存作假常见方案可行性分析
内存作假通常修改所涉及到的几个文件：
M sys/frameworks/base/core/java/android/app/ActivityManager.javaM sys/frameworks/base/core/jni/android_os_Debug.cppM sys/frameworks/base/core/jni/android_util_Process.cppM sys/frameworks/base/services/core/java/com/android/server/am/ProcessList.javaM vnd/bsp/kernel5.15/kernel5.15/fs/proc/meminfo.cM vnd/bsp/kernel5.15/kernel5.15/mm/page_alloc.c
我们需要过的检测app包括如下几款：
安兔兔、鲁大师、白眼、AIDA64、CPU X、CPU-Z、DevCheck、DeviceInfoHW
1、修改ActivityManager.java
--- a/sys/frameworks/base/core/java/android/app/ActivityManager.java
+++ b/sys/frameworks/base/core/java/android/app/ActivityManager.java
@@ -3438,8 +3438,8 @@ public class ActivityManager {public void writeToParcel(Parcel dest, int flags) {dest.writeLong(advertisedMem);
- dest.writeLong(availMem);
- dest.writeLong(totalMem);
+ dest.writeLong(availMem * 3);//运行内存作假：4GB-->12GB
+ dest.writeLong(totalMem * 3);
结果：
安兔兔 (可用√，总共√)
鲁大师 (可用√，总共×)
白眼 (可用×，总共×)上面不行，下面行
AIDA64 (可用×，总共×)
CPU X (可用√，总共√)
CPU-Z (可用，总共)
DevCheck (可用×，总共×)
DeviceInfoHW (可用√，总共√)
2、修改android_os_Debug.cpp
--- a/sys/frameworks/base/core/jni/android_os_Debug.cpp
+++ b/sys/frameworks/base/core/jni/android_os_Debug.cpp
@@ -444,6 +444,11 @@ static void android_os_Debug_getMemInfo(JNIEnv *env, jobject clazz, jlongArray ocontinue;}outArray[i] = mem[i];
+ if (i == MEMINFO_TOTAL || i == MEMINFO_FREE || i == MEMINFO_AVAILABLE) {
+ outArray[i] = mem[i] * 3;//内存作假：4GB-->12GB
+ } else {
+ outArray[i] = mem[i];
+ }}
结果：
安兔兔 (可用×，总共×)
鲁大师 (可用×，总共×)
白眼 (可用×，总共×)上面不行，下面也不行
AIDA64 (可用×，总共×)
CPU X (可用×，总共×)
CPU-Z (可用×，总共×)
DevCheck (可用×，总共×)
DeviceInfoHW (可用×，总共×)
3、修改android_util_Process.cpp
--- a/sys/frameworks/base/core/jni/android_util_Process.cpp
+++ b/sys/frameworks/base/core/jni/android_util_Process.cpp
@@ -684,7 +684,7 @@ static jlong android_os_Process_getFreeMemory(JNIEnv* env, jobject clazz)jlong sum = 0;std::for_each(mem.begin(), mem.end(), [&](uint64_t val) { sum += val; });
- return sum * 1024;
+ return sum * 1024 * 3;}static jlong android_os_Process_getTotalMemory(JNIEnv* env, jobject clazz)
@@ -695,7 +695,7 @@ static jlong android_os_Process_getTotalMemory(JNIEnv* env, jobject clazz)return -1;}- return static_cast<jlong>(si.totalram) * si.mem_unit;
+ return static_cast<jlong>(si.totalram) * si.mem_unit * 3;//内存作假：4GB-->12GB}
结果：
安兔兔 (可用√，总共√)
鲁大师 (可用√，总共×)
白眼 (可用×，总共×)上面不行，下面行
AIDA64 (可用×，总共×)
CPU X (可用√，总共√)
CPU-Z (可用√，总共×)
DevCheck (可用×，总共×)
DeviceInfoHW (可用√，总共√)
4、修改ProcessList.java
--- a/sys/frameworks/base/services/core/java/com/android/server/am/ProcessList.java
+++ b/sys/frameworks/base/services/core/java/com/android/server/am/ProcessList.java
@@ -1795,8 +1795,8 @@ public final class ProcessList {final long homeAppMem = getMemLevel(HOME_APP_ADJ);final long cachedAppMem = getMemLevel(CACHED_APP_MIN_ADJ);outInfo.advertisedMem = getAdvertisedMem();
- outInfo.availMem = getFreeMemory();
- outInfo.totalMem = getTotalMemory();
+ outInfo.availMem = getFreeMemory() * 3;
+ outInfo.totalMem = getTotalMemory() * 3;//内存作假：4GB-->12GBoutInfo.threshold = homeAppMem;
结果：
安兔兔 (可用√，总共√)
鲁大师 (可用√，总共×)
白眼 (可用×，总共×)上面不行，下面行
AIDA64 (可用×，总共×)
CPU X (可用√，总共√)
CPU-Z (可用√，总共×)
DevCheck (可用×，总共×)
DeviceInfoHW (可用√，总共√)
5、修改meminfo.c
--- a/vnd/bsp/kernel5.15/kernel5.15/fs/proc/meminfo.c
+++ b/vnd/bsp/kernel5.15/kernel5.15/fs/proc/meminfo.c
@@ -55,9 +55,9 @@ static int meminfo_proc_show(struct seq_file *m, void *v)sreclaimable = global_node_page_state_pages(NR_SLAB_RECLAIMABLE_B);sunreclaim = global_node_page_state_pages(NR_SLAB_UNRECLAIMABLE_B);- show_val_kb(m, "MemTotal: ", i.totalram);
- show_val_kb(m, "MemFree: ", i.freeram);
- show_val_kb(m, "MemAvailable: ", available);
+ show_val_kb(m, "MemTotal: ", i.totalram * 3);//运行内存作假：4GB-->12GB
+ show_val_kb(m, "MemFree: ", i.freeram * 3);
+ show_val_kb(m, "MemAvailable: ", available * 3);
结果：
安兔兔 (可用×，总共×)
鲁大师 (可用√，总共√)
白眼 (可用×，总共×)上面行，下面不行
AIDA64 (可用×，总共×)
CPU X (可用×，总共×)
CPU-Z (可用√，总共√)
DevCheck (可用×，总共×)
DeviceInfoHW (可用×，总共×)
6、修改page_alloc.c
--- a/vnd/bsp/kernel5.15/kernel5.15/mm/page_alloc.c
+++ b/vnd/bsp/kernel5.15/kernel5.15/mm/page_alloc.c
@@ -6177,13 +6177,13 @@ long si_mem_available(void)if (available < 0)available = 0;
- return available;
+ return available * 3;}EXPORT_SYMBOL_GPL(si_mem_available);void si_meminfo(struct sysinfo *val){
- val->totalram = totalram_pages();
+ val->totalram = totalram_pages() * 3;//运行内存作假：4GB-->12GB
结果：
安兔兔 (可用√，总共√)
鲁大师 (可用√，总共√)
白眼 (可用√，总共√)
AIDA64 (可用√，总共√)
CPU X (可用√，总共√)
CPU-Z (可用√，总共√)
DevCheck (可用√，总共√)
DeviceInfoHW (可用√，总共√)