CTS问题分析3

CTS/GTS问题分析3

android.security.cts.ListeningPortsTest#testNoListeningLoopbackTcp6Ports
android.security.cts.ListeningPortsTest#testNoListeningLoopbackUdp6Ports
android.security.cts.ListeningPortsTest#testNoRemotelyAccessibleListeningUdp6Ports

问题分析

本地测了一下，前两条没问题，那么下面重点先说下第三条的分析流程:

测试命令: run sts-userbuild -m CtsSecurityTestCases -t android.security.cts.ListeningPortsTest#testNoRemotelyAccessibleListeningUdp6Ports

测试结果:

Found port listening on addr=fe80::77b0:8288:f0d8:d4c6, port=40066, UID=1000 [com.miui.screenrecorder, com.qti.service.colorservice, com.qualcomm.atfwd, com.goodix.fingerprint, com.android.wallpaperbackup, com.xiaomi.powerchecker, com.qualcomm.qti.seemp.service, com.qualcomm.qti.smcinvokepkgmgr, com.miui.contentcatcher, com.qualcomm.qti.services.secureui, com.miui.securitycore, com.wapi.wapicertmanage, com.qualcomm.qti.qtisystemservice, com.xiaomi.mbnloader, com.dsi.ant.server, com.xiaomi.location.fused, com.qti.diagservices, com.qualcomm.qti.usta, com.fingerprints.extension.service, com.miui.cleanmaster, com.miui.daemon, com.android.settings, com.android.systemui, com.qti.dpmserviceapp, com.miui.freeform, com.qualcomm.wfd.service, com.xiaomi.bttester, com.quicinc.cne.CNEService, com.miui.powerkeeper, com.qualcomm.location, com.qualcomm.qti.poweroffalarm, com.miui.cloudservice.sysbase, com.qualcomm.qti.callenhancement, com.miui.cit, com.qualcomm.qti.qmmi, org.codeaurora.gps.gpslogsave, com.miui.system, com.miui.touchassistant, com.miui.klo.bugreport, com.android.inputdevices, com.android.providers.settings, com.miui.securitycenter, org.codeaurora.btmultisim, com.xiaomi.joyose, com.qualcomm.qti.seccamservice, com.miui.antispam, com.qualcomm.svi, com.qualcomm.cabl, com.miui.rom, com.miui.bugreport, android, org.simalliance.openmobileapi.service, com.qualcomm.qti.uceShimService, com.android.keychain, com.miui.sysopt, com.miui.wmsvc, com.android.server.telecom, com.miui.qr, com.qti.csm, com.android.provision, com.qualcomm.qti.sensors.qsensortest, com.xiaomi.drivemode, com.android.location.fused] in /proc/net/udp6
Found port listening on addr=fe80::77b0:8288:f0d8:d4c6, port=49636, UID=1000 [com.miui.screenrecorder, com.qti.service.colorservice, com.qualcomm.atfwd, com.goodix.fingerprint, com.android.wallpaperbackup, com.xiaomi.powerchecker, com.qualcomm.qti.seemp.service, com.qualcomm.qti.smcinvokepkgmgr, com.miui.contentcatcher, com.qualcomm.qti.services.secureui, com.miui.securitycore, com.wapi.wapicertmanage, com.qualcomm.qti.qtisystemservice, com.xiaomi.mbnloader, com.dsi.ant.server, com.xiaomi.location.fused, com.qti.diagservices, com.qualcomm.qti.usta, com.fingerprints.extension.service, com.miui.cleanmaster, com.miui.daemon, com.android.settings, com.android.systemui, com.qti.dpmserviceapp, com.miui.freeform, com.qualcomm.wfd.service, com.xiaomi.bttester, com.quicinc.cne.CNEService, com.miui.powerkeeper, com.qualcomm.location, com.qualcomm.qti.poweroffalarm, com.miui.cloudservice.sysbase, com.qualcomm.qti.callenhancement, com.miui.cit, com.qualcomm.qti.qmmi, org.codeaurora.gps.gpslogsave, com.miui.system, com.miui.touchassistant, com.miui.klo.bugreport, com.android.inputdevices, com.android.providers.settings, com.miui.securitycenter, org.codeaurora.btmultisim, com.xiaomi.joyose, com.qualcomm.qti.seccamservice, com.miui.antispam, com.qualcomm.svi, com.qualcomm.cabl, com.miui.rom, com.miui.bugreport, android, org.simalliance.openmobileapi.service, com.qualcomm.qti.uceShimService, com.android.keychain, com.miui.sysopt, com.miui.wmsvc, com.android.server.telecom, com.miui.qr, com.qti.csm, com.android.provision, com.qualcomm.qti.sensors.qsensortest, com.xiaomi.drivemode, com.android.location.fused] in /proc/net/udp6

因为报错的uid = 1000,所以共享这个uid的进程都会被打出来，影响真正的判断，因此需要通过下面的步骤找出真正的fail项:

      1. adb shell
      2. su
      3. polaris:/ # cat /proc/net/udp6 
sl local_address remote_address st tx_queue rx_queue tr tm->when retrnsmt uid timeout inode ref pointer drops
149: 00000000000000000000000000000000:A9CE 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38655 2 0000000000000000 0
841: 000080FE000000008882B077C6D4D8F0:9C82 00000000000000000000000000000000:0000 07 00000000:00000000 00:00000000 00000000 1000 0 35682 2 0000000000000000 0
926: 00000000000000000000000000000000:9CD7 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38659 2 0000000000000000 0
934: 00000000000000000000000000000000:9CDF 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38671 2 0000000000000000 0
1193: 00000000000000000000000000000000:9DE2 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38675 2 0000000000000000 0
2208: 00000000000000000000000000000000:A1D9 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38667 2 0000000000000000 0
2219: 000080FE000000008882B077C6D4D8F0:C1E4 00000000000000000000000000000000:0000 07 00000000:00000000 00:00000000 00000000 1000 0 35680 2 0000000000000000 0
2507: 00000000000000000000000000000000:A304 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38647 2 0000000000000000 0
2595: 00000000000000000000000000000000:C35C 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 37765 2 0000000000000000 0
2596: 00000000000000000000000000000000:C35D 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 37766 2 0000000000000000 0
2597: 00000000000000000000000000000000:C35E 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 37755 2 0000000000000000 0
2598: 00000000000000000000000000000000:C35F 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 37756 2 0000000000000000 0
2603: 00000000000000000000000000000000:C364 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38722 2 0000000000000000 0
2604: 00000000000000000000000000000000:C365 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38723 2 0000000000000000 0
2607: 00000000000000000000000000000000:C368 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38738 2 0000000000000000 0
2608: 00000000000000000000000000000000:C369 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38739 2 0000000000000000 0
2611: 00000000000000000000000000000000:C36C 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38758 2 0000000000000000 0
2612: 00000000000000000000000000000000:C36D 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38759 2 0000000000000000 0
2617: 00000000000000000000000000000000:C372 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 37747 2 0000000000000000 0
2618: 00000000000000000000000000000000:C373 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 37748 2 0000000000000000 0
2619: 00000000000000000000000000000000:C374 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38730 2 0000000000000000 0
2620: 00000000000000000000000000000000:C375 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38731 2 0000000000000000 0
2623: 00000000000000000000000000000000:C378 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38706 2 0000000000000000 0
2624: 00000000000000000000000000000000:C379 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38707 2 0000000000000000 0
2628: 00000000000000000000000000000000:A37D 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38683 2 0000000000000000 0
2629: 00000000000000000000000000000000:C37E 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38698 2 0000000000000000 0
2630: 00000000000000000000000000000000:C37F 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38699 2 0000000000000000 0
2639: 00000000000000000000000000000000:C388 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38768 2 0000000000000000 0
2640: 00000000000000000000000000000000:C389 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38769 2 0000000000000000 0
2641: 00000000000000000000000000000000:C38A 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38746 2 0000000000000000 0
2642: 00000000000000000000000000000000:C38B 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38747 2 0000000000000000 0
2643: 00000000000000000000000000000000:C38C 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38714 2 0000000000000000 0
2644: 00000000000000000000000000000000:C38D 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38715 2 0000000000000000 0
2783: 00000000000000000000000000000000:A418 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38691 2 0000000000000000 0
2925: 00000000000000000000000000000000:A4A6 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38687 2 0000000000000000 0
3446: 00000000000000000000000000000000:A6AF 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38663 2 0000000000000000 0
3497: 00000000000000000000000000000000:A6E2 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38679 2 0000000000000000 0
3771: 00000000000000000000000000000000:A7F4 00000000000000000000000000000000:0000 87 00000000:00000000 00:00000000 00000000 1001 0 38651 2 0000000000000000 0

找到uid=1000的行，找出其中的inode值，此处为35682

       4. polaris:/ # ls -l /proc/*/fd | grep 35682

lrwx------ 1 root root 64 2018-08-13 12:20 26 -> socket:[35682]     

       5. polaris:/ # ls -l /proc/*/fd/26

l-wx------ 1 root root 64 2018-08-13 12:32 /proc/1018/fd/26 -> /dev/pmsg0
l-wx------ 1 gps gps 64 2018-08-13 12:20 /proc/1023/fd/26 -> pipe:[36017]
lrwx------ 1 root root 64 2018-08-13 12:20 /proc/1182/fd/26 -> socket:[29611]
lrwx------ 1 radio radio 64 2018-08-13 12:20 /proc/1207/fd/26 -> socket:[37162]
lrwx------ 1 root root 64 2018-08-13 12:32 /proc/1222/fd/26 -> socket:[42078]
lr-x------ 1 root root 64 2018-08-13 12:20 /proc/1224/fd/26 -> pipe:[33964]
lr-x------ 1 system system 64 2018-08-13 12:32 /proc/1397/fd/26 -> /system/framework/android.hidl.manager-V1.0-java.jar
lrwx------ 1 root root 64 2018-08-13 12:20 /proc/1725/fd/26 -> socket:[35682]
lr-x------ 1 system system 64 2018-08-13 12:32 /proc/1947/fd/26 -> /system/framework/android.hidl.manager-V1.0-java.jar
lr-x------ 1 root root 64 2018-08-13 12:20 /proc/1993/fd/26 -> /system/framework/android.hidl.manager-V1.0-java.jar
lr-x------ 1 u0_a76 u0_a76 64 2018-08-13 12:32 /proc/2013/fd/26 -> /system/framework/android.hidl.manager-V1.0-java.jar

       6. polaris:/ # ps -A | grep 1725

system        1725     1   47296  11704 binder_thread_read  0 S ims_rtp_daemo

则找到影响的对应进程

问题总结

这个问题如果直接报出其他进程，其实非常好处理；但是报出uid=1000的项，就需要按照上面的步骤确认下再进行处理，后续考虑写成脚本处理

最后编辑于 ：
©著作权归作者所有,转载或内容合作请联系作者
  • 人面猴
    序言：七十年代末，一起剥皮案震惊了整个滨河市，随后出现的几起案子，更是在滨河造成了极大的恐慌，老刑警刘岩，带你破解...
    沈念sama阅读 219,188评论 6赞 508
  • 死咒
    序言：滨河连续发生了三起死亡事件，死亡现场离奇诡异，居然都是意外死亡，警方通过查阅死者的电脑和手机，发现死者居然都...
    沈念sama阅读 93,464评论 3赞 395
  • 救了他两次的神仙让他今天三更去死
    文/潘晓璐 我一进店门，熙熙楼的掌柜王于贵愁眉苦脸地迎上来，“玉大人，你说我怎么就摊上这事。” “怎么了？”我有些...
    开封第一讲书人阅读 165,562评论 0赞 356
  • 道士缉凶录：失踪的卖姜人
    文/不坏的土叔 我叫张陵，是天一观的道长。 经常有香客问我，道长，这世上最难降的妖魔是什么？ 我笑而不...
    开封第一讲书人阅读 58,893评论 1赞 295
  • 港岛之恋（遗憾婚礼）
    正文 为了忘掉前任，我火速办了婚礼，结果婚礼上，老公的妹妹穿的比我还像新娘。我一直安慰自己，他们只是感情好，可当我...
    茶点故事阅读 67,917评论 6赞 392
  • 恶毒庶女顶嫁案：这布局不是一般人想出来的
    文/花漫 我一把揭开白布。 她就那样静静地躺着，像睡着了一般。 火红的嫁衣衬着肌肤如雪。 梳的纹丝不乱的头发上，一...
    开封第一讲书人阅读 51,708评论 1赞 305
  • 城市分裂传说
    那天，我揣着相机与录音，去河边找鬼。 笑死，一个胖子当着我的面吹牛，可吹牛的内容都是我干的。 我是一名探鬼主播，决...
    沈念sama阅读 40,430评论 3赞 420
  • 双鸳鸯连环套：你想象不到人心有多黑
    文/苍兰香墨 我猛地睁开眼，长吁一口气：“原来是场噩梦啊……” “哼！你这毒妇竟也来了？” 一声冷哼从身侧响起，我...
    开封第一讲书人阅读 39,342评论 0赞 276
  • 万荣杀人案实录
    序言：老挝万荣一对情侣失踪，失踪者是张志新（化名）和其女友刘颖，没想到半个月后，有当地人在树林里发现了一具尸体，经...
    沈念sama阅读 45,801评论 1赞 317
  • 护林员之死
    正文 独居荒郊野岭守林人离奇死亡，尸身上长有42处带血的脓包…… 初始之章·张勋 以下内容为张勋视角 年9月15日...
    茶点故事阅读 37,976评论 3赞 337
  • 白月光启示录
    正文 我和宋清朗相恋三年，在试婚纱的时候发现自己被绿了。 大学时的朋友给我发了我未婚夫和他白月光在一起吃饭的照片。...
    茶点故事阅读 40,115评论 1赞 351
  • 活死人
    序言：一个原本活蹦乱跳的男人离奇死亡，死状恐怖，灵堂内的尸体忽然破棺而出，到底是诈尸还是另有隐情，我是刑警宁泽，带...
    沈念sama阅读 35,804评论 5赞 346
  • 日本核电站爆炸内幕
    正文 年R本政府宣布，位于F岛的核电站，受9级特大地震影响，放射性物质发生泄漏。R本人自食恶果不足惜，却给世界环境...
    茶点故事阅读 41,458评论 3赞 331
  • 男人毒药：我在死后第九天来索命
    文/蒙蒙 一、第九天 我趴在偏房一处隐蔽的房顶上张望。 院中可真热闹，春花似锦、人声如沸。这庄子的主人今日做“春日...
    开封第一讲书人阅读 32,008评论 0赞 22
  • 一桩弑父案，背后竟有这般阴谋
    文/苍兰香墨 我抬头看了看天上的太阳。三九已至，却和暖如春，着一层夹袄步出监牢的瞬间，已是汗流浃背。 一阵脚步声响...
    开封第一讲书人阅读 33,135评论 1赞 272
  • 情欲美人皮
    我被黑心中介骗来泰国打工， 没想到刚下飞机就差点儿被人妖公主榨干…… 1. 我叫王不留，地道东北人。 一个月前我还...
    沈念sama阅读 48,365评论 3赞 373
  • 代替公主和亲
    正文 我出身青楼，却偏偏与公主长得像，于是被迫代替她去往敌国和亲。 传闻我的和亲对象是个残疾皇子，可洞房花烛夜当晚...
    茶点故事阅读 45,055评论 2赞 355