CtsSecurityTestCases#ListeningPortsTest定位tcp端口与pid

时间 2020-05-19

标签 ctssecuritytestcases#listeningportstest ctssecuritytestcases listeningportstest 定位 tcp 端口 pid 栏目系统网络繁體版

原文原文链接

CtsSecurityTestCases#ListeningPortsTest定位tcp端口与pid

【问题描述】

cts失败项
armeabi-v7a CtsSecurityTestCases
android.security.cts.ListeningPortsTest#testNoListeningLoopbackTcpPorts
工具：9.0_r11java

05-06 17:11:28.649 17375 17391 E TestRunner: android.security.cts.ListeningPortsTest$ListeningPortsAssertionError: 
05-06 17:11:28.649 17375 17391 E TestRunner: Found port listening on addr=127.0.0.1, port=10100, UID=1000 [com.android.keychain, com.itv.android.iptv, com.android.location.fused, com.android.providers.settings,com.launcher.idn, android, com.itv.android.iptv.tvclient,com.droidlogic, com.android.wallpaperbackup, com.droidlogic.BluetoothRemote, ] in /proc/net/tcp
05-06 17:11:28.649 17375 17391 E TestRunner: 	at android.security.cts.ListeningPortsTest.assertNoAccessibleListeningPorts(ListeningPortsTest.java:250)
05-06 17:11:28.649 17375 17391 E TestRunner: 	at android.security.cts.ListeningPortsTest.testNoListeningLoopbackTcpPorts(ListeningPortsTest.java:138)

【问题结论】

定位到subtitle端口监听某次提交，回退后测试passnode

AuthBlog：秋城https://www.cnblogs.com/houser0323

【分析详细】

1.定位节点inode
port=10100是十进制，/proc/net/tcp中port是十六进制，作一下转换10110-->2774,见下面2:处，对应inode为32905。android

console:/ # cat proc/net/tcp
  sl  local_address rem_address   st tx_queue rx_queue tr tm->when retrnsmt   uid  timeout inode
   0: 7632A8C0:EA60 00000000:0000 0A 00000000:00000000 00:00000000 00000000  1000        0 58215 1 00000000 100 0 0 10 0
   1: 00000000:1A85 00000000:0000 0A 00000000:00000000 00:00000000 00000000     0        0 33635 1 00000000 100 0 0 10 0
   2: 0100007F:2774 00000000:0000 0A 00000000:00000000 00:00000000 00000000  1000        0 32905 1 00000000 100 0 0 10 0

2.根据inode查找pid
进入/proc/[pid]/fd/目录下ls -l 查看socket端口号，因为咱们不知道在哪一个pid目录下，因此遍历一下
sh脚本或者终端输入shell命令for循环遍历查找32905节点的pid：shell

# for dir in `find /proc -name "fd" 2>/dev/null`
> do
> ls -l $dir | grep "socket\:\[32905\]" && echo $dir
> done

结果查找到pid为4085socket

lrwx------ 1 root root 64 2020-05-07 11:03 46 -> socket:[32905]
/proc/4085/task/4085/fd
lrwx------ 1 root root 64 2020-05-07 11:03 46 -> socket:[32905]
/proc/4085/task/4094/fd
......
lrwx------ 1 root root 64 2020-05-07 10:47 46 -> socket:[32905]
/proc/4085/fd

3.查看pid对应的程序tcp

console:/ # ps 4085
USER           PID  PPID     VSZ    RSS WCHAN            ADDR S NAME
system        4085  3024 1124392  82892 SyS_epoll_wait      0 S com.droidlogic.SubTitleService

至此定位结束，反馈给相应模块处理ide

【参考资料】

1.嵌入式设备上如何经过端口号定位到进程
https://blog.csdn.net/daizhongyin/article/details/90031132工具

2.获取tcp/udp端口对应的进程pid
https://blog.csdn.net/ChrisNiu1984/article/details/7022745oop