不能混淆的項
在AndroidManifest中配置的類，比如四大組件
JNI調用的方法
反射用到的類
WebView中JavaScript調用的方法
Layout文件引用到的自定義View
一些引入的第三方庫
使用工具AndroidStudio
release {
minifyEnabled true
proguardFiles getDefaultProguardFile('proguard-android.txt'), 'proguard-rules.pro'
}
使用proguard混淆代碼是對產品本身的一種保護，常見的方法就是編寫projuard-rules.pro配置文件
# This is a configuration file for ProGuard.
# http://proguard.sourceforge.net/index.html#manual/usage.html
//混淆時不使用大小寫混合類名
-dontusemixedcaseclassnames
//不跳過library中的非public的類
-dontskipnonpubliclibraryclasses
//打印混淆的詳細信息
-verbose
# Optimization is turned off by default. Dex does not like code run
# through the ProGuard optimize and preverify steps (and performs some
# of these optimizations on its own).
//不進行優化，建議使用此選項，理由見上
-dontoptimize
//不進行預校驗，預校驗是作用在Java平臺上的，Android平臺上不需要這項功能，去掉之后還可以加快混淆速度
-dontpreverify
# Note that if you want to enable optimization, you cannot just
# include optimization flags in your own project configuration file;
# instead you will need to point to the
# "proguard-android-optimize.txt" file instead of this one from your
# project.properties file.
//保留注解參數
-keepattributes *Annotation*
//保留Google原生服務需要的類
-keep public class com.google.vending.licensing.ILicensingService
-keep public class com.android.vending.licensing.ILicensingService
# For native methods, see http://proguard.sourceforge.net/manual/examples.html#native
//保留native方法的類名和方法名
-keepclasseswithmembernames class * {
native <methods>;
}
# keep setters in Views so that animations can still work.
# see http://proguard.sourceforge.net/manual/examples.html#beans
//保留自定義View,如"屬性動畫"中的set/get方法
-keepclassmembers public class * extends android.view.View {
void set*(***);
*** get*();
}
# We want to keep methods in Activity that could be used in the XML attribute onClick
//保留Activity中參數是View的方法，如XML中配置android:onClick=”buttonClick”屬性，Activity中調用的buttonClick(View view)方法
-keepclassmembers class * extends android.app.Activity {
public void *(android.view.View);
}
# For enumeration classes, see http://proguard.sourceforge.net/manual/examples.html#enumerations
//保留混淆枚舉中的values()和valueOf()方法
-keepclassmembers enum * {
public static **[] values();
public static ** valueOf(java.lang.String);
}
//Parcelable實現類中的CREATOR字段是絕對不能改變的，包括大小寫
-keepclassmembers class * implements android.os.Parcelable {
public static final android.os.Parcelable$Creator CREATOR;
}
//R文件中的所有記錄資源id的靜態字段
-keepclassmembers class **.R$* {
public static <fields>;
}
# The support library contains references to newer platform versions.
# Dont warn about those in case this app is linking against an older
# platform version. We know about them, and they are safe.
//忽略support包因為版本兼容產生的警告
-dontwarn android.support.**
Proguard關鍵字
關鍵字 描述
keep 保留類和類中的成員，防止被混淆或移除
keepnames 保留類和類中的成員，防止被混淆，成員沒有被引用會被移除
keepclassmembers 只保留類中的成員，防止被混淆或移除
keepclassmembernames 只保留類中的成員，防止被混淆，成員沒有引用會被移除
keepclasseswithmembers 保留類和類中的成員，防止被混淆或移除，保留指明的成員
keepclasseswithmembernames 保留類和類中的成員，防止被混淆，保留指明的成員，成員沒有引用會被移除
Proguard通配符
通配符 描述
<field> 匹配類中的所有字段
<method> 匹配類中所有的方法
<init> 匹配類中所有的構造函數
* 匹配任意長度字符，不包含包名分隔符(.)
** 匹配任意長度字符，包含包名分隔符(.)
*** 匹配任意參數類型
...
指定混淆時可使用字典
-applymapping filename 指定重用一個已經寫好了的map文件作為新舊元素名的映射。
-obfuscationdictionary filename 指定一個文本文件用來生成混淆后的名字。
-classobfuscationdictionary filename 指定一個混淆類名的字典
-packageobfuscationdictionary filename 指定一個混淆包名的字典
-overloadaggressively 混淆的時候大量使用重載，多個方法名使用同一個混淆名（慎用）
# 這里巧妙地使用java中的關鍵字作字典，混淆之后的代碼更加不利于閱讀
#
# This obfuscation dictionary contains reserved Java keywords. They can't
# be used in Java source files, but they can be used in compiled class files.
# Note that this hardly improves the obfuscation. Decent decompilers can
# automatically replace reserved keywords, and the effect can fairly simply be
# undone by obfuscating again with simpler names.
# Usage:
# java -jar proguard.jar ..... -obfuscationdictionary keywords.txt
#
do
if
for
int
new
try
byte
case
char
else
goto
long
this
void
break
catch
class
const
final
float
short
super
throw
while
double
import
native
public
return
static
switch
throws
boolean
default
extends
finally
package
private
abstract
continue
strictfp
volatile
interface
protected
transient
implements
instanceof
synchronized
使用proguardgui對jar包進行混淆
proguardgui工具支持Shrinking(壓縮)、Optimization(優化)、Obfuscation(混淆)、Preverification(預校驗)四項操作
詳細步驟：
1 Load configuration --> Next
2 Add input/Add output
3 添加jar包依賴
JAVA_HOME/jre/lib/rt.jar
Android_SDK/platfroms/android-23/android.jar
AndroidStudioProjects/ProjectName/app/build/intermediates/exploded-aar/com.android.support/appcompat-v7/23.4.0/jars/classes.jar
AndroidStudioProjects/ProjectName/app/build/intermediates/exploded-aar/com.android.support/support-v4/23.4.0/jars/classes.jar
AndroidStudioProjects/ProjectName/app/build/intermediates/exploded-aar/com.android.support/support-v4/23.4.0/jars/libs/internal_impl-23.4.0.jar
其他第三方jar文件
4 Don`t use Shrink --> Next
5 Add --> Extends/implements class --> android.app.Activity --> ok --> Next
6 Next
7 Next
8 View configuration
tips:
AndroidStudio中生成jar文件方法：
jar -cvf filename.jar -C app/build/intermediates/classes/debug
5分鐘快速混淆
#-------------------------------------------定制化區域----------------------------------------------
#---------------------------------1.實體類---------------------------------
-keep class com.demo.login.bean.** { *; }
-keep class com.demo.main.bean.** { *; }
#-------------------------------------------------------------------------
#---------------------------------2.第三方包-------------------------------
#eventBus
-keepattributes *Annotation*
-keepclassmembers class ** {
@org.greenrobot.eventbus.Subscribe <methods>;
}
-keep enum org.greenrobot.eventbus.ThreadMode { *; }
-keepclassmembers class * extends org.greenrobot.eventbus.util.ThrowableFailureEvent {
<init>(java.lang.Throwable);
}
#glide
-keep public class * implements com.bumptech.glide.module.GlideModule
-keep public enum com.bumptech.glide.load.resource.bitmap.ImageHeaderParser$** {
**[] $VALUES;
public *;
}
#log4j
-libraryjars log4j-1.2.17.jar
-dontwarn org.apache.log4j.**
-keep class org.apache.log4j.** { *;}
#-------------------------------------------------------------------------
#---------------------------------3.與js互相調用的類------------------------
-keepclasseswithmembers class com.demo.login.bean.ui.MainActivity$JSInterface {
<methods>;
}
#-------------------------------------------------------------------------
#---------------------------------4.反射相關的類和方法-----------------------
# 有
#----------------------------------------------------------------------------
#---------------------------------------------------------------------------------------------------
#-------------------------------------------基本不用動區域--------------------------------------------
#---------------------------------基本指令區----------------------------------
-optimizationpasses 5
-dontusemixedcaseclassnames
-dontskipnonpubliclibraryclasses
-dontskipnonpubliclibraryclassmembers
-dontpreverify
-verbose
-printmapping proguardMapping.txt
-optimizations !code/simplification/cast,!field/*,!class/merging/*
-keepattributes *Annotation*,InnerClasses
-keepattributes Signature
-keepattributes SourceFile,LineNumberTable
#----------------------------------------------------------------------------
#---------------------------------默認保留區---------------------------------
-keep public class * extends android.app.Activity
-keep public class * extends android.app.Application
-keep public class * extends android.app.Service
-keep public class * extends android.content.BroadcastReceiver
-keep public class * extends android.content.ContentProvider
-keep public class * extends android.app.backup.BackupAgentHelper
-keep public class * extends android.preference.Preference
-keep public class * extends android.view.View
-keep public class com.android.vending.licensing.ILicensingService
-keep class android.support.** {*;}
-keepclasseswithmembernames class * {
native <methods>;
}
-keepclassmembers class * extends android.app.Activity{
public void *(android.view.View);
}
-keepclassmembers enum * {
public static **[] values();
public static ** valueOf(java.lang.String);
}
-keep public class * extends android.view.View{
*** get*();
void set*(***);
public <init>(android.content.Context);
public <init>(android.content.Context, android.util.AttributeSet);
public <init>(android.content.Context, android.util.AttributeSet, int);
}
-keepclasseswithmembers class * {
public <init>(android.content.Context, android.util.AttributeSet);
public <init>(android.content.Context, android.util.AttributeSet, int);
}
-keep class * implements android.os.Parcelable {
public static final android.os.Parcelable$Creator *;
}
-keepclassmembers class * implements java.io.Serializable {
static final long serialVersionUID;
private static final java.io.ObjectStreamField[] serialPersistentFields;
private void writeObject(java.io.ObjectOutputStream);
private void readObject(java.io.ObjectInputStream);
java.lang.Object writeReplace();
java.lang.Object readResolve();
}
-keep class **.R$* {
*;
}
-keepclassmembers class * {
void *(**On*Event);
}
#----------------------------------------------------------------------------
#---------------------------------webview------------------------------------
-keepclassmembers class fqcn.of.javascript.interface.for.Webview {
public *;
}
-keepclassmembers class * extends android.webkit.WebViewClient {
public void *(android.webkit.WebView, java.lang.String, android.graphics.Bitmap);
public boolean *(android.webkit.WebView, java.lang.String);
}
-keepclassmembers class * extends android.webkit.WebViewClient {
public void *(android.webkit.WebView, jav.lang.String);
}
#----------------------------------------------------------------------------
#---------------------------------------------------------------------------------------------------
# 刪除代碼中Log相關的代碼
-assumenosideeffects class android.util.Log {
public static boolean isLoggable(java.lang.String, int);
public static int v(...);
public static int i(...);
public static int w(...);
public static int d(...);
public static int e(...);
}
網上有很多5分鐘完成混淆規則的教程，但如何更優雅的完成這一枯燥的過程，即使用@Keep注解，使混淆變得輕松愉快
在proguard-rules.pro配置文件中加入以下規則
#手動啟用support keep注解
#http://tools.android.com/tech-docs/support-annotations
-dontskipnonpubliclibraryclassmembers
-printconfiguration
-keep,allowobfuscation @interface android.support.annotation.Keep
-keep @android.support.annotation.Keep class *
-keepclassmembers class * {
@android.support.annotation.Keep *;
}
哪里不對@Keep哪里，媽媽再也不用擔心我不會混淆啦……
參考資料
http://blog.csdn.net/guolin_blog/article/details/50451259
http://www.lxweimin.com/p/60e82aafcfd0
