Thank you so much. It does work after follow your instruction. If use the Eclipse default build mode, it won't ProGuard at all. But in export APK mode, it works.
I still have some silly question here: 1. How can I ensure every function is workable after ProGuard obfuscated the APP? It seems not everything can be obfuscated and obfuscation not work for all function, right? 2. Is it possible set ProGuard default enabled in Eclipse build mode, not just Export mode? 3. My project use WebView and the web pages with JS, I can find the webpage can be browsed even no uncomment "-keepclassmembers....". When should I uncomment it? Best regards, Sunny 在 2012年9月7日星期五UTC+8上午2时29分10秒，Riley Hassell写道： > > Something is definitely off with your ProGuard configuration. While > exported > resources such as Activities, Receivers and Services cannot be optimized > (since they are exported and need a lookup entry to be imported ;). > Looking > at your output I'd assume one of the following: > - ProGuard isn't being invoked to optimize your output class files. > - You've enabled options like "-dontoptimize" in your ProGuard config. > - You're decompiling an (un)optimized version. > > I'm making this assumption since even your "private" class members are > not > being renamed. Add the following lines to your ProGuard config: > > -verbose > -dump class_files.txt > -printseeds seeds.txt > -printusage unused.txt > -printmapping mapping.txt > > After adding these check the contents of the files and you'll get an idea > what went wrong. > > In addition: > > - If you're using a template ProGuard config packaged with recent ADT make > sure you're using "proguard-android-optimize.txt" and not > "proguard-android.txt" > - You debug APK will not be optimized. Make sure you're testing a > decompile > on a release mode APK, i.e. you did an export, typed your private key pass > and selected an export path. > - ProGuard does not officially support previously optimized code. You > can't > easily optimize a previously optimized class. This only really becomes an > issue when you're writing your own Android libraries and want to publish > and > protect IP. > > -R > > > > --- > Riley Hassell | Founder > Privateer Labs, LLC > E-mail: [email protected] <javascript:> > Phone: 206-406-6348 > > CONFIDENTIALITY NOTE : The information in this e-mail is confidential and > privileged; it is intended for use solely by the individual or entity > named > as the recipient hereof. Disclosure, copying, distribution, or use of the > contents of this e-mail by persons other than the intended recipient is > strictly prohibited and may violate applicable laws. If you have received > this e-mail in error, please delete the original message and notify us by > return email or collect call immediately. > > > > -----Original Message----- > > From: [email protected] <javascript:> > > [mailto:android-<javascript:> > > [email protected] <javascript:>] On Behalf Of Winnie Zhang > > Sent: Tuesday, September 04, 2012 9:09 PM > > To: [email protected] <javascript:> > > Subject: [android-security-discuss] Proguard useless. After decompile, > all > > code show up normally. Even binary java class file, will become plain > text > as > > well. > > > > Proguard useless. After decompile, all code show up normally. Even > binary > > java class file, will be in plain text as well. > > > > > > AfterProgardScreenCapture<http://ilove.cn.com/files/AfterProgardScreenC > > apture.jpg> > > > > -- > > You received this message because you are subscribed to the Google > Groups > > "Android Security Discussions" group. > > To view this discussion on the web visit > > https://groups.google.com/d/msg/android-security-discuss/- > > /8jP58Bk4n28J. > > To post to this group, send email to android-security- > > [email protected] <javascript:>. > > To unsubscribe from this group, send email to android-security- > > [email protected] <javascript:>. > > For more options, visit this group at > > http://groups.google.com/group/android-security-discuss?hl=en. > > -- You received this message because you are subscribed to the Google Groups "Android Security Discussions" group. To view this discussion on the web visit https://groups.google.com/d/msg/android-security-discuss/-/2nl7WcphIeUJ. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/android-security-discuss?hl=en.
