From ad9f0a90229850ecc407387272fb7a5799556b60 Mon Sep 17 00:00:00 2001 From: Hans-Christoph Steiner Date: Tue, 23 Apr 2024 18:03:24 +0200 Subject: [PATCH] include @obfusk's proof-of-concept APKs in test suite https://github.com/obfusk/fdroid-fakesigner-poc/releases/tag/poc-apks --- MANIFEST.in | 4 ++++ tests/common.TestCase | 24 ++++++++++++++++++++++++ tests/issue-1128-poc1.apk | Bin 0 -> 6896 bytes tests/issue-1128-poc2.apk | Bin 0 -> 9781 bytes tests/issue-1128-poc3a.apk | Bin 0 -> 8822 bytes tests/issue-1128-poc3b.apk | Bin 0 -> 8821 bytes 6 files changed, 28 insertions(+) create mode 100644 tests/issue-1128-poc1.apk create mode 100644 tests/issue-1128-poc2.apk create mode 100644 tests/issue-1128-poc3a.apk create mode 100644 tests/issue-1128-poc3b.apk diff --git a/MANIFEST.in b/MANIFEST.in index 1d7bd768..8d24dbf2 100644 --- a/MANIFEST.in +++ b/MANIFEST.in @@ -592,6 +592,10 @@ include tests/init.TestCase include tests/install.TestCase include tests/IsMD5Disabled.java include tests/issue-1128-min-sdk-30-poc.apk +include tests/issue-1128-poc1.apk +include tests/issue-1128-poc2.apk +include tests/issue-1128-poc3a.apk +include tests/issue-1128-poc3b.apk include tests/janus.apk include tests/keystore.jks include tests/key-tricks.py diff --git a/tests/common.TestCase b/tests/common.TestCase index 2285b67b..24132297 100755 --- a/tests/common.TestCase +++ b/tests/common.TestCase @@ -1061,6 +1061,10 @@ class CommonTest(unittest.TestCase): ('org.bitbucket.tickytacky.mirrormirror_4.apk', 'org.bitbucket.tickytacky.mirrormirror', 4, '1.0.3'), ('org.dyndns.fules.ck_20.apk', 'org.dyndns.fules.ck', 20, 'v1.6pre2'), ('issue-1128-min-sdk-30-poc.apk', 'org.fdroid.ci', 1, '1.0'), + ('issue-1128-poc1.apk', 'android.appsecurity.cts.tinyapp', 10, '1.0'), + ('issue-1128-poc2.apk', 'android.appsecurity.cts.tinyapp', 10, '1.0'), + ('issue-1128-poc3a.apk', 'android.appsecurity.cts.tinyapp', 10, '1.0'), + ('issue-1128-poc3b.apk', 'android.appsecurity.cts.tinyapp', 10, '1.0'), ('urzip.apk', 'info.guardianproject.urzip', 100, '0.1'), ('urzip-badcert.apk', 'info.guardianproject.urzip', 100, '0.1'), ('urzip-badsig.apk', 'info.guardianproject.urzip', 100, '0.1'), @@ -1177,6 +1181,10 @@ class CommonTest(unittest.TestCase): self.assertEqual(4, get_minSdkVersion('bad-unicode-πÇÇ现代通用字-български-عربي1.apk')) self.assertEqual(30, get_minSdkVersion('issue-1128-min-sdk-30-poc.apk')) + self.assertEqual(29, get_minSdkVersion('issue-1128-poc1.apk')) + self.assertEqual(29, get_minSdkVersion('issue-1128-poc2.apk')) + self.assertEqual(23, get_minSdkVersion('issue-1128-poc3a.apk')) + self.assertEqual(23, get_minSdkVersion('issue-1128-poc3b.apk')) self.assertEqual(14, get_minSdkVersion('org.bitbucket.tickytacky.mirrormirror_1.apk')) self.assertEqual(14, get_minSdkVersion('org.bitbucket.tickytacky.mirrormirror_2.apk')) self.assertEqual(14, get_minSdkVersion('org.bitbucket.tickytacky.mirrormirror_3.apk')) @@ -2952,6 +2960,14 @@ APKS_WITH_JAR_SIGNATURES = ( 'bad-unicode-πÇÇ现代通用字-български-عربي1.apk', '32a23624c201b949f085996ba5ed53d40f703aca4989476949cae891022e0ed6', ), + ( + 'issue-1128-poc3a.apk', + '1dbb8be012293e988a0820f7d455b07abd267d2c0b500fc793fcfd80141cb5ce', + ), + ( + 'issue-1128-poc3b.apk', + '1dbb8be012293e988a0820f7d455b07abd267d2c0b500fc793fcfd80141cb5ce', + ), ( 'janus.apk', 'ebb0fedf1942a099b287c3db00ff732162152481abb2b6c7cbcdb2ba5894a768', @@ -3058,6 +3074,14 @@ APKS_WITH_JAR_SIGNATURES = ( ), ) APKS_WITHOUT_JAR_SIGNATURES = ( + ( + 'issue-1128-poc1.apk', # APK v3 Signature only + '1dbb8be012293e988a0820f7d455b07abd267d2c0b500fc793fcfd80141cb5ce', + ), + ( + 'issue-1128-poc2.apk', # APK v3 Signature only + '1dbb8be012293e988a0820f7d455b07abd267d2c0b500fc793fcfd80141cb5ce', + ), ( 'issue-1128-min-sdk-30-poc.apk', # APK v3 Signature only '09350d5f3460a8a0ea5cf6b68ccd296a58754f7e683ba6aa08c19be8353504f3', diff --git a/tests/issue-1128-poc1.apk b/tests/issue-1128-poc1.apk new file mode 100644 index 0000000000000000000000000000000000000000..ba643f3d5262a087fba08af14910217c49bb6c60 GIT binary patch literal 6896 zcmeG>XH*pFvNJt?G$cuqljNKQL>O`&at_LXA}}Bl29P9C$%sf2$ypFY zvg9aHK=SQz^{ji}-uvEp;m12?t52N@{dHCM*H!g>U9F*vg?$kO!UqAsAR=t7(0m^Y z1i~N@=r@oX9O3NYW&uZVnY$q@&bmM#fl+J_HZT?foW+a+13VaX1yl-9K>Qs5<@KLD zK*<1<0g!}5$JWUQD&^t=wQ_cY%IIi=pq$37SUVqPEs8b2t8$GlJ2cZ!jI2k1`*pt!(HxPPA;Cy+HDW5#oQr#}V(wxB;)48g}Y zcX2UuGIxXnQx72lkpnu6I}BoC2@KHz+5Dn20C-6N|EKUhr~xAY{T`bC&JWzlKI7?p)rE z4hh=bPGmgfVtv9(*D=FSaQ(%M8qEpomu$XtR=o(i zS+)VzzKD_*FUGuJzZT^znJZ+Qk?Jj!vv_6ckdzkD*{E-dJvc+mPM1m|`enmck8Nfp zJr(DYD!|r~kpYRj);8Hl%6Vy7%kcSN$dn3?-$`|AznKrOCI{1^Pz!_g_HUCoeba6N zIq*mI`_VOp0<`PsN}R&`59zqyXfDoUhLUROsb?kPMO13QAZ@(2QKk1AE!3>c}L*6`4O-@ z6b~?7VWu)H@m-Ad6IaZ{m^>OF7V?YueaXJb#-2Q26ZZ^j+E6Dn(?oU@pg zu5=%+-o~9BU@kee5JsYgp0}T8rta%@N-IpDyzyT5uiB^WN1=Bl#5+Yh2N>goZe9o= z4$)4CN9SbdNRn$Sy(G17iTIYFSBTQQag7mD*i*lU#tN)3u`>H0h&mBOj(mAomw)4c zt~zC6a$BUvZOX+~Se1@GG<2psI*s>E-^@osugL2((^-bq+qQje73+tq+Yg&Bs}K?T zj4Bcpu^^ws%XDqmTD^|SqfZh!H1dpj*vy??fk!HqTOvL*pP(-EMSQ@>y>gK||G9mN zpgbbl_azYO!Fc~J+6jPYw{S2=Ab@qs67K!riK-2m z6nXn}pyly%0Y^uNvfFnEC~PZUT|Pn?4cTQTX=&tNl}+AI``{>8!BcU8v$Zhevs7j% zUWqU1E#ESY?azwKO<_=PjjhjeF*w|e4V@|}8W$(Gy3qlv$LR`*wCcpsZ%3!U zE-aWCi_r@NFJeM)gz)$RGsdLx8bimZJg>a*E#C#l3IJMX`y4fmA>u}XDB3kAQcJM z%w1)M4I>erv#VXAm(M?Q1wmGZ#?b9;rT4A;ReQ^GsSGT{ce7pJ=R#2oJ?!@zmSX*< zgg4~_J7e?)V+;2Xs}uywo)ZzGsD8cso+;m66iQT;oGA&$TomulooP86h=BsB+9 z46iZIV&8|SCD+KU%G=r$ycA^KZ+gS{@+QHN18z#hnpPhxR@{O{41D6=HHD^>_QYPw zw;a>MNQW#*McK@Rc+$OGsu+C4%JA)P9ET5~dW=%2cY9S;kD7~K(Jt-;YV=idQ~C~F ztr8Q_?-{G#hs*?QKs*w?dD_1W_>j7c*)REjRM=?{6M+rdC)$KqT*D>IIntI1co29@ zwEXnxGHg%eG!u;>+U{MVEk%b^~Y3M=u}43TV({602LHjjIH)OMUl z%8$AYc<8_8_&-g8TWPgDJdt`S7t|i7#eMWCqWg-hs-9M{+_Nwd?VbH&%#1M-(T??lv6_>>V+idgYXI5REM5S4u^LtnN#5qTz@DL66R-P>S-G2lb)FY zmbiW2B#G%()itK7>jk8_5d@j|H{LxaLGhE|MZyROgsfR8m>1bzCoVpjhv!;R(so4d z($G*P(Nfc<(9%#P%K{>rmWJ9uvIc7=hee)wJ{TO%j38r@z|u&4R1k?mnU6gfWEF@C zysX5!XjW7brK?x^Vb$f#u6};B?R5Ky@@j#alafTx>ft8$Ib;0f$IYX6eL;S+)hA*H z31Sq}Iz0IAH4d9@H1MpC;1c!Kv!+vTnAMy;+`t|g-X7uF>m!>vV(NjF8Mz&oF&)(3 z3J?#J_>$lsTK$P_@6F1Q&sl2mwwi8tR%rA3xF9-h5LGw7V|~E8Z88z3zRTrzI;U4P z#+DakoWC{K*N#lMJT&cjjg$OHBQ|e+x6>i(V19HduTR6j!gjPNdMo47`P78x;-$D<&dE@gG)^xo# zgl2Q%gW@BTQ6ZN&S72d~@VU<89v{9>AJ!Uk@uqJCHg?7dt`0PbOgoa5OqCR>eQW00 zd$OCKeXv_pt+Zi}-%u*hEmVGYZk23mH*vaWzs9-L&#>s5(aX-5C_y3B5fKu*g(mNv zy|C31k7Fyt@x@%j+`?@f|EX%xVcHJa>ogEvN5Sz z>jInAlJ$yH#OM9bhLvZdXoqUA>OOA6g|3OF!^Nh7700F#wU)etVFk8ulL@bC%{m<} zcxSjMC7pPM3!mck;@7r&uM%AoN57=9AeftiM&z8h^en75YJvnjoZp{FbjnE=QP64m zlvF-G?5&v|pr^0An(7UYKS$&})$Zqh^t9XB^{bXrYur`n))_<7NKac0Nxw&&<+9+yjXPO}Wb%QqV>|2A8 zTRNMzd*a&jk_QN^+_N(cW3o|C+vK_S;Iyo6&!=uR&gcCo0SkMbkDg0uOX=!KF4@Zi zizRN1$Fg$k{3n|=KF2qV9_h7@b2aQRr3dX-EOEs%fEFmpD#QRwZ^H0f^Wn8`$6rgC#;tN0#P)aaBgS_CH4e-wZGzW^03ZT0UAU3cumIP?R z;JS2q7~`04v}!?mHt6!F_T)sY^J2MSu`+Ghj8VCs(+H1(0t-u$!w2G@-8@rVhf1;J zKArG~#K<>hpyHh_05)*|goR>(VWHra3@iv30wKq<7M-x8Lon~y;Y5EDFB0Lk+$w|- z;$FBBemnet5DX^70l|oQ2w?=cSi0C)zhOH&yC7gtNDrn0bzxLiGjNTUxb8$!Jv%urYgZV!vc8xkJ&FO?JqGE2Iihe=~o>zsm2D_UsXaO@%eBSh+iH}z@+$w-Zs-I`<(GKp5#8~ z>+Z-4ua0xl^kgp6M-H|^AIY(G+X_C8+;Fk;w@8Wk)>vqiXBhI34TobJ2S@C`rT8@8l_I)En@lhW0$i zs@pSOTTAW9bA)%k@;?@q(OMGcxm(wjs&do0lH{eZZ(AdqjSLqb!+S~=k|xINVs?(0 z{>U3zogBJobw#$1Q)R^DOvH+3J69Sw*f^yR$JwVk!&|xhu=)d9kJ=k|9TWN3aaOd{ zg+Jd##cyWUlcm}CjzKP<+m(&|STk_@d=2j&jZa)eEnF*LbWLd}Se>3%sJZ4kQ#m;l zyB}3~-PTj@)PC#Mf+wVz(f5VUv*;WFsQmD4>#~h(dHj)^>xLI#Dnzh+%r`gaHz2X_ z0mLL2=8KxVm^0}LHsNElO!e1F*K6Mk)}nbY2Z#p*ngy5xARYfs)BiM0Yk!pNw>H{a6#!oXpzYr!`|pzdcgg<0E7?>)l|DZ|$F!b7 zKly(y;j~YfAS7bwcQwwjrG#l~&P6vSs6D#TGc%W%Tn*NvI%vCs?6n2bu*4m!*aK@# zL+A#_KWX+MivyTCqmoDACEO90ZJ#{=xoELW&75hR^+MMLdU6e`d*j^SI=G}1a&Pse zn3BL^dEX_dq1x!DqN2UKd8)Iv7^F&^%W!d+@W*R3Pu1<7rLVy5)Y-+)&@{$ntX1A) zt@lX{I~{KiFC?qon40sWD0*s^F5~S4w==AeJ0#0tq~$1Pod}#n-amHkQhRTupYP{! z8j9keDX0m1$hG3`m95Wu|Hk|2J7XbM3tE~lrOV$5gWBIAr4Jkol6alI1?L{qiHA8z zy*~Q8g#TA}T0eK+QX0xoZCh)ow1cySJ(QnULm3RY2>RFmbuiKQ2mI^5JQzFVK#SmK zkNMYr9Hz(o2h;%z$6s`u|JlH=J&7M*4nJ%Z;{K_L_w&Mk)w1}*^U{UCZeVCA;{YZx Pe;9xR*c5!E#z_AF7Z0Hn literal 0 HcmV?d00001 diff --git a/tests/issue-1128-poc2.apk b/tests/issue-1128-poc2.apk new file mode 100644 index 0000000000000000000000000000000000000000..b9947df8781d730d0c043325fbb526faee148261 GIT binary patch literal 9781 zcmeG?2UJtrmN$V&la6#DG(n^!^e(-3kdBlPia;o#NH0pUKqyiK>4;R3E+~l7MM01v zy$FH|3MeRuFgN;~=X>-2`+v>+S+i!w&D!jeeb2esIlJ6*kD(3$At?Y510Zn7NV{ls zTqFPhJW>Eh0bexM%ikA;#tJ$3Vo?W=0YH3$5Fi9?q2Q-@D+tI#09N1*NI~&CfJ(j} zJVBA9}on?-zc8P|DK3%6fb=T_zwo8M?g>bee(?lZ~0D% zz3ng#o@mhZP%3~9)ZwSYBYrJGpr(N9PdW>bR|N6D3f~qrI0#6;EzQ502aT~%`p?ey z^E}_a*I#@e2VV>2f5klD@&ydR*rfx#i=UrE=I2rI5vPQ4^7V3a(sRJLIisv`9Mn0dBqCqGC7W)eGscQ>rHXHKi8tG*Xh{b|~Q~dNHl%>RMT@&WfhW&nWGU zI25A1=E*+O&=YUcdWWK1Sf9r)4lzyjd}5mm@g(Y95F_KOT+nCU=Up!n&E++VKfZW! zh<6~qx-*dTR%A%0PN51b?fXjxoeYaaHM!8NPT9q)pS7OAMtCsP)$xO>v2VV(E-D6S zz09nGxF}u<%lP2pS`^2yq^#-`yA%nX)kTKvH+2o#1&J65aJ`c1B96_Cc}@a!Twjj6R2U9*7kX{X%tXgvuI&z7|)a$Ff!VUYnDOMf<%{mYozDMxl4 zRo-s>xf6Cu)jcUX0>N6QGDWs>j>}PR4>#QVUbAkn#?}u}i>-dS(H3$(p2#$l?%B^;eX1T=K}xp2LD0J7@ZoHKvo#6Wtwr%1W6cW zlu24@c5%L`BAtnL6^(mm{O2^Y@?;}^Zcb?Vlh*BQg77+9XS?T;$@`LVxvnkW;JL~Nxt#_O~I(nftF-OE^U}20r@Dd;MT%l#trrSVw-P-P(&C4CfbScP# zCbTFjPQ+bHRe8L5&-w1vTkM%KyH)|X%N@eGbwo7sCDjTeOKApD>k30we)X?}OK-Yo zNs2#asbX2ob`@k2oT`7CI8-megDSf5^;(~`yRcNl#@EW(ln!&3)iYPmb`5>_D)4^A zKInmd`lmt8jdyoj`_FaH910&l_&ctKne6oNax&S%#!D8~xc~A0q1B3x3Jf$Y3#`Ol+T+ z`?$PpXD!bz*_N}$7=HSrIP5S>WU5R987T({4CcDQ{9DB#GKzcINe1zW`)XoKh=b9h zb!GSb)~En7hHTd!BdJTe9E3ra@2iBvBa(_rb+{yxp<7fz(Un|-NesR2OXRgtp^9zr zx#Yaq(6(MRIfmziy6ghQ6i)i&nq0nyL#5}=nZ0$e?e0D!XxPYHUxrnhNUu!`SJ~A= zvz+s@dMd5=_^gStN{-18yJGH3HZ?Q7pxJj{%~$Vxnth;g34CjujqBI`xJ8+-k>MYw zMgG>oM`hIV5;kD*&12bPhx0-a(AOiA**)ENE;@(mJ*_Qav_L6*DDrt$0#D|6a_VB+ zN>b>o^n3O2KAhQbQu#La4L#Xvz;wK9@}SwpfUM7z<)<5}540t5qze5d3!Mj(V)g6s z%I|FWM1=F*?ufFHXdk4gFp_c6>~dg*kdnmGY;x381JAuZD4)`y>hpJS?`ux$VX@kZ zM#EW_+&qhf7tuM_o7LW^ySbKCN%HJGY~ieuAlvgek`@2fcz~B6W!Vsio_6Hcc$n3b z@sy!mU~V+dqfk*xwID5(X1jzDM~rS6ktR1NFiT z!6R%9@-pU6CR=x)3t{h|{u$?yJ?le3G~Sc$E1_c=TW#_(h++2(*C-VC5%S_a6P2)- z@Glgr>FKM8ZJDo06BEJ3w$2Z~?VQM!43q@nF?8~T=HMWaaS$E;?jktZkWoE5tAWr_q!2Tlr}^mjC4 zIw!cNbEV$`$^Nl8G(8jTY}|c$U#Uthq9?^zc<)7gKdY*qnelD4ybCfWPo5v*gXhf+ zn$Lt_;fsd>0EXpzd8hz+JTS+R_!NPB9*7R0jV`Fu1d$M|Uy2}&QL-DZ&cCaWS0wE$z1PY}ia*>@rcO1*Jbq<#JLZL!N#A%}(L4JgUKUOpL6FCGz z4g(OBNOA<(5rQ*>1V;(Iyu7gpI0Lze7(z@$1SusZDk5sdNGXC4MczyN}12qkzo5K?F~1OntAK5UR|85JiIOE`7Rg;15Cx|_P^LdGiU2|<(karvh9 zi6_<+IG(UfsY2PRO-gOaGo}Y`!f~Y~b>+}|qVHN&nL~!LmaH6O$a^#I5V-Qk{h_C4 zFF=HslFb`FJ=9AIb7#{|jw2R5qCr`;H;qsd9ck}4t`l^Ce6U|~Q?$SLR%}xW#wdWN z#yoDg3w}lIWIs%y%>OIo6kjA2@1j;&V3%#J1}v-DCt>*bNu!O|eOTxFjE(@uD-B!C zK+~Y0Y3wB%s$8z~%5HoxhVz>imL(C7cXhv}A#9!4)Tp7f*r#g4iuI8z-v0e0N zPa#S3=UQA=aqC+OiDP%B!x6eZT%t+GC)p|a+0JE>| z8*g614qHYA_fs3VED$D%+FrK z)k-*6rVCtt8~TSumUk};rg)3%^C~4JekNZU)sGYrRUfT8k?tPFwJSdyyY2E;Jto6W zdYvll{z-H5n!4Ls*DYK{mjSYC}|;np^>V2V4+WFu`OfJmrhuA5Eb zyHUk0l~?MvLc0~jXHp@`3#Y1CnTxHDNm2J|3i&D&up9p}Csbx*i6N|5bE#gnKsMT+ zdPQJOUuSi1@w$w|DHk82`O_ynUl2-Jax(W1NRHHZL#C%zsySAc4vq-*Iu$F#Mg=A; zpeucs#V*}r3RBV`SBbYVU$`2gm=r~NDk8E!u>NIP>v2_s(1Rq_Db*9855REz z6{i0%Oz-`cvfEuvHtImW8br5WDf?H-{*|)-`%*R|n57R75Ai!hzz_bLcYn3L~L8(&OsKL(UJs>L!A*8GQjrgXnhOjR`K?XbZ}# z(j8zTHtrIsc5e~vic4rze5$aFI~zfQLN{5Q6TMuU^#JQ+BuVsv-X9wRPRPQHkot81{`Q7A$D!fa6B zrZ-%9300EHGCa;3azaC=b42O`*w0dSCpu%%0Q-P=@y&EDeUfEM3%h3ek-@*&luBqeD! zWa|>eZ_06iJ7)N6QfDGm<%kmsH^VM^xFcViA)&lBI??MV6*KhuCGRE2<)R8fD*$i? z=WzrP?8MI^qM_>FJ8?o?t*5}xy&4ScynT>l2oikfeS{WzMh8iSpuh{nv_xkx?ijB? z43ZjwZ}$j^Xo=0yey(U=$DkiZq`w>eb{X048YTn-{xSkuDit>eUk40a!{5UX8Af1a~9Z!99nmJ6=H zAFr}4Tl}i#ft~QPMV{1Xm%+y?Up^jKqSUKfJ`zz*CGU9MpX1Ujn&3tl@^OELG1Qpt z-61Av?R|xOP*y!6n50%=H#VG*OGmm-3nYgyHFbB+X=~|je(Kjo^^#+i(c|LPxdtR^ zcFMseRwibr@UcW}xhsOF`EIAOfY-#gXNNy6oo{VE@zQ&@+)N^uh;0{> zN$mStX>zN@hv9mS$)j_@A@=)3%*!NQN;)f}lYVo2)T{CmuATWc6}>unwCUQx`?=C};4upOMjo^u3)A*$!{Zl9l&#mPVhTF#K@$qvstH28UM!iiNGyVkby0 zWPH7;s9F$itZJH<=~i$5_$-FQ-Rqp-9SbteqlMM4*4)+KO%4{9s}aPLtj%|2#F~ut z+PNe~SaFyQwar8^__H|`-OL`!l~AB@vY6rCUnA zZZ*!^NBPo}7e3;C&)G<@Ht@xIb3W!_@<^@0igHbG-L|d17wr8}Fxv22vE&=?+rWVP z28`h56~67qM>xLir+%PcIURm+Y$7A`5ZM-P7#a&y{fe`=fdV%pRo=51Hj(94r6$s4@2W z%1n3%%8cBhpye3F2Z89JvqQ>3@4&v+??uJ%n=?dp5@edU*I#?FJF{X|5NqzSGECnDt^>Y{3Fnh`Z)=Pm_4|Ve$~%k_48N# z{J&5?e>`V_LH+N~Tz{^gMB>*AgbJ(uWuT?Qz{SBWU9nD-q%pS97JCTmbFFg?wwCTq zxx%QqK^X??3u5-LJ2Se>(v@puPDcHNUx$8Y&$HoC!1^fDp!yhlwNQ9-Zr%bk{hg2HZCsUA^sx&s0mRY4F-^U+K>m9{J3jCWW-nKjM0yiiZ9^12ElZE>`;O9C z1qxCoKBpUa;!3=sJOdm z8@R&>rM|73u#+&3qWrmj{(twyulo7VcIy`S?h}MSw6F4a?$`f+r3ZezT~jjDft$Fw zz?D6`Q0{Os5knmaloa^;$E*H$4}br#6@DB#@Yu|cqaHuM7RMj;_#N(pUD4k-`0?if iettEGe|!Erlpp!SyL3Yx7^uLXpCJGqfz*}k|jcmvQ`Muq9Qzmk|bGM zM3gKMg%A<4)_2{c)cd^e`~1GYzVG*Y&N%lu*SXF)*EQ!p*L9!k9ynt<6feZc$Ou7@ zs5&%hhxbE5P&68Xcz{HQ>_qV*Iho?gBxfR(hV}RKIBi)@=F#EREKgNEE>Wu;PN>^{ zf|pUo9Vw03$%EwH9fsV=tWHRCz^5fu#Kto-GxPBtf!5hS=EVz6@o5(D8D1!rdv42_~EBKZY;w_U2PQ8t8hK)Kd8@ zcyz9=c&vH9c*Yj$>13%TH}SjAJ(%XuOT$+31v?Ggj0^Reut{UtP0`y3B^ynKzY&fr zK5<_Xp470iHyWGVE#IQ2>z<%I(@;8eI7jnpN6?KyZ`Z|8Mt7%tDqkO(JS=ldwy3ek zy(_=JM0eBBP0E>)^z?Xt7bDN%ZN=h2jsX`F7T>7stJjR4h`85Uu(fv6kw(_ZipCv8 zvFp$1>V-#$^GR`Ux`$>XN}akN5X>xw8;3n67oBF}=Nh$&7o+*DTZ42eOt(MO3+~y0 z3K)hS<2fy3)Wk%QC>>M)Z@?I(Gfc}yt->@-V=k=vaZ3Nuu#6A=*5~93-+u_~@IGR@ z_jx+!x>HMuW(xfSY#YD2DBL=z(3RUDb5!4=E;(V>%R?5shFZDQeG^&v0&JWDr*BKt z3AYJN4w}S1XxOUUDlUA#^tPP3&tP5aK;6?JtzF4`=54kp=MHJ8wpuA!`Mp+u9NQGR z)%S#7gKK&4g3tc^zE8$HQ;i1sqeF8($@VjW1xMOa6W+@QQcD*l$H(YJyvB#^amEac zYm*ZP(v}&5;H(8{+ujy+0RkxtBMT4`Jn&R1k&1O9`YXRiK`77zSmrH?%23y&TdyId zOf5P+HRe@o#Bd8|w2_y(uNG|T4fOo?D{%v|3|r_S=nufba#ny{0KwvbSP>8e{vZi( zVFGkBpzs(pKv@AZ1!yBsYysE?@FPHBItbbYkP7fTz&wD>04D(Q0vl<78UXbG8UQo` zcmNd~%6%fKP^uiz@PKeA2&lip#Yz5mj{IG+g%>G0E?BB>= z{3eI<zd+8qq zc;H>A5F-etJsIywgivsRAa0^3iAEz*)G=;&g1ej|R$&{2b_O?$>I$Kj^%%X#dK4m_ zMufPjct4_(A(=|UlLWOP>5WRhX{xs zw4R`rGg$x)_;<@v2EZ)>4qjI?V46crpKc!okNW(Xz%pq2OT*BRhD`QHWG8UkWICuy_iUp!^yMp0G$z z0l@w6a~A;#K?Q(<<_Z9z^ePW1{3byUASb6KC_gbe-rg8zFA7G_(gMQBS=VG$->NRG zuE11BR^P9_kExBXE~!bvR7cfh)nsD4$V3e7uos5rN+A+$A&hok=$XFITdl{P#tBnAPWcR*1D;UO~Q1W_O_hy*AWw7tQH3K1a!n@)&@bNoas~2>6Z|^Iu&*n*%ZF#TFW*mYKJw6sd zcf8Q}6~1G-z;i~{@mR>wXj|svN{3iJAEn2=u0G=0={EgHq_QWN}4Sd^J3|QSNyHWhWys2mIp!-W@N8+ zP}~fKIQVY1$qI1TM^ji6-fwSVX$t#r(ob(T+Vi+=eW@N}v4hfe6{f8|mC%J|iY8Ug z^xjn673X-H#DeuaiHnCD@{qw9GpQ06@3XjCT_5Avt@hfFcMI2C9QzjTRFN5_9%a#| zxCigK!jE3LA=S2SxaKag*4knABzvvF`e44-QDw$f5e18jHB)7$9!zjloqg%5Xi}}k zeEwZvv2kAtR!C~+R7^-k?4_5|DNa!&zxCR-MqD4_2liKdM#MF1*pquEs;XP2^LO&L z<&ESxWz|MFMO;a&XLDhRUkExvPhh3_GCM{SGfh;27i<;y*oqS4-|7mqr1_k;-|vIT zuZn-SABqZlSJK@!7SNr-Rc5xMY5Y@6uyNWTG;xq1+%Z0$CVMb>W96i@YV;kvNVL|8 zp_co?<()yS&!9nx!DN$sVfZJ~ci8_fx#%Z85PD{ak3P zaLF;V>OU_~hf<0@GcL*hEy3Vm3Mv(B4GiYta{i)ZqNW5WMD9UfXDZM^v;T424tlST0+ zW1aGget`o`b0ZgndV&Y!bt}l#2i^(bU!MztVan#A`txzMi?~H=ScCkOZUl6 z>u>>dnQeRTFS;J}5X;DA?o;7URPT_VWK@~-_HW4-8y(NG=fBb;Aa}N)>Ot#1p#XeT z_3T|NQ&jAyfVgHPE-F;~SmwG&qY|-WyjB>*uG?Z3+9US8-};Tjw7;FH1+g!kl@{jt?v--E^RPTo^WLEe%NJ+55@K`xQc zr#HWCI5Wr5WO}dw>rjIBMM<$ee>|TjsTef6l;7%f=|joU6kpxlg~Jx@vNE1on%y~X z=RMIfew@s7m-BtE&Z)l93%?_%j`hy{c)m`#AyiCFk|r?y0d=*z z%G1qZC^|f6o_0<0i(lL*<(l=|D^;$C>HYNr<8h=EMT0!&cPSmE=TmBN<&$|8FKP&OW;-GS?sYsLTRKuP)PAh< z=2DW4%DMxl&vq)hLI zj`DOP+S4u#Ehrbo5tBQ$@4yB()@1%{heIdA>ZS4@zNd?7+jQcar|Pv3wr!uQ7cwK8 z6FlR;rgU4d9-3^s(ra57eP{YOVniljrVuYE9s99f$1|+CPv_Bv4IiSY`Ti-NsPie(uVvt4Y0WrP&MH7@L)yn%hR58Wm08xvmtyQi%K2CPyu>Z zXuG<&I<>huV|+<%*OuGcWUlRr{1Xy)D8! zV#0&ZwFjjvlH$KgzQrwF%o-7jl9V#+@|By`>~3~%j1>wjTF4knF1)=dY3g0+v%R8wYr48NGrv1`f2-ldH@;9-Sq^XCjx#!IDB3Hh_U=`y#U6WPlsPDPR?Q+kgt zK&(TzSd-)G#T;G*PPLElFm=tGEBI83?#e5zEcTe&wbPH(E1eo!QO!BL6KaZ^;$@SAk) zy#}qj^%SS<+6+-4^#E)4mpk`dEtKcD`nuhz`wPC~G+`-QvCwB@Mu_C-b5VtYsfNLm zF$d-w8=Zx#?OzGEP+4bX>dR&b~I<|Ft4l73CFDP{`m-z?&&YO?Bn*u zuMIo7F;C{P`bt;(OEh;RX4ZUaUqiUfoA>LUTRaav zeI_$RvRi3?hogRhId$F>9bIhxjO$BGKZBY2& z6xio6A~78@xQNLqLd81|>zXK7dP#j2P!Vb1N3)%}*5a8;2$!k@hv-IMX;?hTR?*@oX*OYVxS$Jvcj2W(o=4>TMEhYp<&i+R!1R2iSc z${6OfzIx0SGuXjnz57lTnvZ@%rxGqJY2@SGr~p}}AcgB3%yw!o`||EQ)yxTLy}E@l zRJ;5WWw@}`lRj4U)N8qcLb;ciXQ{T>ue?eHcbigf1)LdQ7|c2%pz3J$a_^nz^a>WG zu9CqQqQCm)3%cqYKF}XIr3{$`6+LXjfD&O z#iv;&lCHjLEoNXU8nvyxKGu|Y?bb6N)|0oaue5A8m=P+-(vsxoZtZiG7JncSxU2nS zs2ZcPvfW7VA5pFS%67rKD}pmEpXkP@uuGp4z?a$QvQM80Ar73H_>b)r(-{>a0FUI~Yo4bi^Myh|dhh3?_S3oyyfFE3f?G9Pt#N-pt^G8c24+9j`}eck z@7BLp$Um(s!7shPT7!D|ck|!3m!IZU;HQ)y=4&<^oH0FoFa@VlCP*CILro0a`XAOI BOg{hs literal 0 HcmV?d00001 diff --git a/tests/issue-1128-poc3b.apk b/tests/issue-1128-poc3b.apk new file mode 100644 index 0000000000000000000000000000000000000000..91f536e35326d5dad5674f5e7f77cf24b559ff22 GIT binary patch literal 8821 zcmeG?XIN9s(uWWtU78dH3`GSgK?J2rN4h8xl^#OqB$$NWQ3M20ngtaR6tK|+EGQj8 z=|vF~1(hmIL_pAQ4~U}oz4yM)_v`zf=bbQTW@l$+H*;q9%${IsNQ>lx=;`Sp2oh3) zrfqQE2ndQoK@ca9Xb>I9Bo_x`9MQ#*K%q+edbpp$J|J>xaH&4HsBl8GRy`bFr*e{u zUfc~KhSugpaOj00v>BD~m+WwtlFQ-}7#SIPxB{UKwv{}l`%R|>#6u|)P1T9{QoN(S zb%U=1#_^5xY=}l|S(P!J0?okSOOJZ-13c`Oi3fvMG)u+7!5@cIfy{%t)DsfJS zpFM)D)Sy?yhGSiI=$!5%+VMuOHjipiUL@zz6V8!2`ai3zas@gPiP0y1@KG@&+j7!_&rl7I; zx}xz`bCD}Dlv8K7F1d=_Z*gasM=gz5VDhweT@CZKnx&J+Gn%7z;fuE!jeN(S*!j$D zNnl#p!q#AXS`X8vrRkO^KU-fi9U4B1mPP^ zv`+*^2@A>buU`$#9WQZsRgO0?8)+DEpI&sBO_*;`D_V@=wd@GcC^J^6)C%g`gY+AL zp5oZB(Tc)C2&4wmkIQeI+!Ll|rC4TsNqIi3>S@YAaM+dM0n2kz`R|AQUwQ^w?{7(E z+Yq~yWFkB8fo0n_C)u3Cvc0$K#e;Rs>dq$a?K)z%cc_D1$t#JO$Ir^a|MOkZI)P69 z=|Q8o^7+c6goi zu6KSA^!2EDZvUhq=S+ic?%2@$(X+O*{&|6&7ZcxO{3#`iTPDWo1W6Mkwx)*b=+`Ev zDM(vJ2!gW~r0t8&$O{liSs0ms5butoPzV%h2ZFDBHxfdE9>6ln?39Okr(NIZlS>t& zQZGh7?>Iiv#ujBjQu0!RO+A60uelrtAj=>_2SJ+v2g{iO_5uWp17fCuAn*r?f(rwn zl7PZvPyuBI%nYCnK(P&AC%}&Y1!y5?FF*>w^8oJvYy~(4kPFy|0aOO41yC2D0l-55 zaR8kF1^_$;FdASYz$}2d0Pg|>!!6GXxLTeEnD%ls)&UAf2%aMd76=UlvHn1qhhaTH zn6CzN1g;=_#ubKg8{aK0Uj3ycq|xTec0EkKRAZV@Iw){ zhsRshX90W?Fk=1DzdE0_{ntQ0FX&$Yov_-U_C=sy^oKn>{tKY@8sI8F2zYotlgkwT zh7j}+@Zb;fWCIrvA;j_rf+~Ozjv)z61F=CwHh8{p{9r5CuKuST9A(y@@}_?yZ~sFM z=gDsXPjU?~|IvokQ4mVSh3G=v1JUS1+(x*S4H|><^u%c3sV?3wR6k`%daay7zu!RI&@vNf{FP@4Ctm=T9XP1*7Rj zbZ{pqL&8Q5ICpOsHw=zQBvElx7ZMSpL&Uq2D8R86yttJi!N1VaClU$dAN@jq(Qi!f zu>YYz04_L;Tyfqwj606#gxP2BO2AWeQ;RvBId1I%)5j1bCP%EB^2U@8j?TW2Mfqu*@}RAW+?@_>*&{N z{Ce210b6eQvpZm07&)O^D0dfo436wUz}dTC9C2<0X$nccI|~JNjDO&t2>cU)e% zxF3G*(m?!B9-yGP0zfFX$^#0&Nzekw#)bvuCtAbP6YWSMqqVSR5L(KzCcP@BD!-}> zT@_LFsOk~AHleDxCK+87S(9Fqh9(gSXsQnhO?4&{2-Xlmp!U784OBmq$DF-MlUk1=2y2=9zpNWtw^)70)V1;cY zfqc~m%%DMg73hCe$`AscZ`nbLEOXT))vEj37He;W@y1rT`TH{%--U@?ZdT zIZgkQe**Ea#)|gezpnKU&-Xw1$B_?f{(a9Ynrr>TG5J-`CV`qXV$b<{xE_V02v^;3 zJuACh(2^@5tL1`rt;&iqc9Kr*)TPPfUdUC@!I$NXqd z6(5vEVUbf(=^fzCaypR0F&f2^8pyAyfutX=AC)k`GH zv)6UOI!B;;hbEY8#PaKv2ECPPn)|70;zBHM%S|%;z0<{{k|)Vu7Y~1YA|9fm{9u1f z-A+;|MuUkpX~}*wPlm#_IsU%(O|nVPPj9{gKHS;uOD9PQIT7`_9gWySA&IjRnJ>w% z`uyv8ZgooVt+$OLGbg@RX=7>*8;7 z@7cqHuixC-xnZQ{KB3mqZZ3wkR+l@7r#rIL(BgRB;$qEAX>9q_`ie7M&O42&)ELjd z^Di>&Pm$)|sy!1OQWkf$ODx49(#4xw-P(YCIN^hN*(aL#R%Kga-&93a+vi+uuFgB7 z*$(No#~qGePkO@Q#FX$gAdn8vO!Z>4k0PWQ?GE~CEz84Fn3V8VldtX4(et+EN71?n(S$wn2ZiGyfg?+9mWg1oS3*Iaro@E$J1g8QTK3yQEDfL z+8zl!=m}tM`CKwVFF49Q;(aio#qdpr*k^V7NOrDF0UzOXX~skQGN~IP3#}6Jgy`t^ zZSWNllzpkQbGQImRm~iv;;MMlWR6KfhdHcfDS&0VkAgj@$iwFr%Qev%9Va@#jRUs}ig9tzG zqbKPQJ(WFfUJKfeF7=c$h}pD;>vZ%aBg?OrCD&@@fiFfdewV_3yL z3=29<>WTGF(QWQa=*an!Bf+Dto}HP&VWl(qiusL9n1vCx~RVV7)wAr$~+8>#TyZm}k`-#z~;$VSiBQ!m`bG+hR z?MCarv!dN0EZUhR8WHt*VEyCh7j|FOM@7_92`WP2i3BNP&qi*7YsD~Oc;R}PMUmn* ziksVfLyUw?A?ps|?N=Iw%*4air-5ZgcjpW`sH&M zDK(B3&w`zDsKrsyLGF77VrX+1(>fepA=ib`H!ap9^$vCU_z`{`{!!z-rcFp z9~E=j<1vQD^evqQI}A!}3#3z%cC8!tSIE4wrQh4fI4H1iBp~WY_asV-H{s!_N2=+g zR&r_UX5(jqwb`$KRm0+ro)SoW_o1NS(d9vbTvUU9(}x=kQn$)Q^+&uu`s{rn`8>ks zOLwHwBtrKEzOdn8nL?equ6^{C!EeoNITw8{WPeeR?AtE1>&dNslL6hgrWedVr#v{3 zgy$Lg9<=w6TivahGfx{n?Fh7fu0x47G$($E;Qx4GB%v$uQtSCFIS$zoH<#YR&E(Ct z=VkELl^$P6Ukrz`&dnY%aGdR4u)5V$-gZaP^{(dOt8J9(iySYtEpG-dH9lZY911h; z`KFC=;TB-H^K3E0SXX?1V z(Tk+?n<~*2iS#{{wYU_TaqMiv?qb$+`+OCA-w#f@hTmtMzAKWke&Y6YywB?chZPk$ z>n{n6NlW`^UmI}L?J1~9Er?SezlT-(xO6%tHP9rsomnbpW3a>5jpFMMwMz@+`FnA@ z%4}8=E@;_r5p-M0)FD*EA$BHG-v1qDv(il~n>kFG;^j?I7beseFtMq`(vl5fwg=i1Gg?`<}l*| zo;%q`c{3zYeOI2{zsZ04cA0{8)BNx*!^o1xYG>YMrRG5Ljw^r@{mbDzU3{(3bqM>p3B(=dKTyFtDO8RZ49nA+G=Oo@dqW|oNli0aK@BpY`e`DL*F*ZSADL9leKqBBCs-WT4{{Rqn BPjmnP literal 0 HcmV?d00001