dlopen bypass broken on Android 12 (S)

[nick-botticelli]

Seems to work fine on Android versions 11 and lower, but does not appear to work correctly on Android 12. I'll take a look at it later and see if I can find any reason/fix for this.

It looks like libssl.so (the test) is able to be opened on Android 12, but while other libraries like libhwui.so can be opened on Android 11, they cannot be opened on Android 12.

[nick-botticelli]

Looks like this https://github.com/quarkslab/android-restriction-bypass should still work; for libhwui.so specifically, I did have to add /apex/com.android.i18n/lib and /apex/com.android.i18n/lib64 to set_ld_library_paths.

Some debugging also showed that RestrictionBypass wasn't loading libhwui.so on Android 12 because it couldn't load all of its dependencies. The dependency libandroidicu.so cannot be loaded from the ART namespace so I don't know if it is fixable in the scope of this implementation.

[SarotecK]

Hi yes currently it's only unsealing the java/vm part. Library loading is currently not supported, but I will work on it. Thanks for your feedbak