Manifest 导出组件被修改时的风险评估方法

#!/bin/bash
set -euo pipefail
APK_ORIG="$1"
APK_CAND="$2"
if [[ ! -f "$APK_ORIG" || ! -f "$APK_CAND" ]]; then
  echo "Usage: $0 <original.apk> <candidate.apk>" >&2
  exit 1
fi
echo "=== Verifying candidate APK ===" >&2
apksigner verify --verbose "$APK_CAND" > /tmp/cand_verify.txt 2>&1 || {
  echo "apksigner verification FAILED" >&2
}
grep -q "Verified" /tmp/cand_verify.txt || {
  echo "Signature or structure mismatch detected." >&2
  exit 2
}
aapt dump xmltree "$APK_ORIG" AndroidManifest.xml > /tmp/orig_manifest.xml 2>/dev/null
aapt dump xmltree "$APK_CAND" AndroidManifest.xml > /tmp/cand_manifest.xml 2>/dev/null
echo "=== Exportable component diff ===" >&2
diff -u <(grep -E 'E: (activity|service|receiver|provider)' /tmp/orig_manifest.xml || true) \
        <(grep -E 'E: (activity|service|receiver|provider)' /tmp/cand_manifest.xml || true) || {
  COMPONENT_DIFF=1
}
if [[ -n "${COMPONENT_DIFF:-}" ]]; then
  echo "Component declarations differ; review exported/permission/intent-filter details." >&2
  exit 3
fi
echo "No exportable component declaration differences found." >&2
exit 0