Forkserver does not work on Android

[domenukk]

@domenukk I am trying to build LibAFL/fuzzers/binary_only/frida_executable_libpng. I am still getting error[E0425]: cannot find function shmatin cratelibc. I see that you patched it a while ago. But now there is not forkserver.c it's not now forkserver.rs`. Do we need to add the wrapper to rust version of fork server as well? Using Mac M1.

Originally posted by @barhaterahul in #1625

[domenukk]

@barhaterahul This might have regressed in #3183 - can you try if it worked before that?

CC @Evian-Zhang

[wtdcode]

We should have an android runner.

I did this in Unicorn which works pretty well: https://github.com/unicorn-engine/unicorn/blob/f8c6db950420d2498700245269d0b647697c5666/.github/workflows/build-uc2.yml#L344

[barhaterahul]

I will check with older version!

[Evian-Zhang]

I see. I will check this as soon as possible. Sorry for late response.

It seems to be pretty easy to implement the ashmem in Rust. So don't worry, I'll write a patch tomorrow.

[barhaterahul]

Thanks @Evian-Zhang !! I checked with older version where both c and rust version of forkserver is there. It fails

log.txt

Here is the log if it is useful

[wtdcode]

Reproduced exactly here: https://github.com/AFLplusplus/LibAFL/actions/runs/15045873173/job/42288150005?pr=3233#step:8:235

[barhaterahul]

I was able to test @Evian-Zhang 's fix from here https://github.com/Evian-Zhang/LibAFL/tree/android-shmem .
and the error is not there anymore. :).
BTW,
Now, I am getting some other errors related unresolved imports.

frida_gum_sys_error.txt

[wtdcode]

frida_gum_sys_error seems previous CI error. Have you sync-ed main?

[barhaterahul]

i'll will check tomorrow thanks!!

[barhaterahul]

I can confirm, after patching the commits from Evian-Zhang(to fix android shmem issue ) to my local updated main as of today, I have unresolved imports still,

$CLANG_PATH=/Users/user/Library/Android/sdk/ndk/29.0.13113456/toolchains/llvm/prebuilt/darwin-x86_64/bin/aarch64-linux-android30-clang cargo  build --release --target=aarch64-linux-android
....
....
Compiling frida-gum v0.16.10
error[E0432]: unresolved imports `frida_gum_sys::g_main_context_iteration`, `frida_gum_sys::g_main_context_pending`, `frida_gum_sys::g_main_context_push_thread_default`, `frida_gum_sys::g_main_loop_new`
  --> /Users/user/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/frida-gum-0.16.10/src/script/context.rs:16:5
   |
16 |     g_main_context_iteration, g_main_context_pending, g_main_context_push_thread_default,
   |     ^^^^^^^^^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ no `g_main_context_push_thread_default` in the root
   |     |                         |
   |     |                         no `g_main_context_pending` in the root
   |     no `g_main_context_iteration` in the root
17 |     g_main_loop_new,
   |     ^^^^^^^^^^^^^^^ no `g_main_loop_new` in the root
   |
help: a similar name exists in the module
   |
16 |     _frida_g_main_context_iteration, g_main_context_pending, g_main_context_push_thread_default,
   |     +++++++
help: a similar name exists in the module
   |
16 |     g_main_context_iteration, _frida_g_main_context_pending, g_main_context_push_thread_default,
   |                               +++++++
help: a similar name exists in the module
   |
16 |     g_main_context_iteration, g_main_context_pending, _frida_g_main_context_push_thread_default,
   |                                                       +++++++

error[E0432]: unresolved import `frida_gum_sys::g_bytes_get_data`
  --> /Users/user/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/frida-gum-0.16.10/src/script/data.rs:20:5
   |
20 | use frida_gum_sys::g_bytes_get_data;
   |     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ no `g_bytes_get_data` in the root

For more information about this error, try `rustc --explain E0432`.
error: could not compile `frida-gum` (lib) due to 2 previous errors
warning: build failed, waiting for other jobs to finish...

[s1341]

It looks like some functions have been namespaced. Do you feel like submitting a PR to frida-rust?

[barhaterahul]

I will explore if I can do it, good chance to learn rust ;)