Error: expected a pointer

[cvt126]

{'type': 'error', 'description': 'Error: expected a pointer', 'stack': 'Error: e
xpected a pointer\n at frida/runtime/core.js:471\n at script1.js:13', 'fil
eName': 'frida/runtime/core.js', 'lineNumber': 471, 'columnNumber': 1}

I user frida to hook one so file, what I cat to do?

[TheDauntless]

Please show us the script you are using.

Additionally, list your frida version and OS.

[enovella]

And highlight source code please :)

[cvt126]

import frida
import sys
rdev = frida.get_remote_device()
session = rdev.attach("com.hubox.project")
scr = """
send("get in");
Interceptor.attach(Module.findExportByName("libtiny.so","Java_com_zxy_libjpegturbo_JpegTurboCompressor_nativeCompress"), {
onEnter: function(args) {
ret=Memory.readUtf8String(args[1]);
send("arg0:"+args[0]);
send("arg1:"+ret);

},
onLeave:function(retval){

}

});

"""
script = session.create_script(scr)
def on_message(message ,data):
file=open(r'C:\Users\Administrator\Desktop\log.txt', 'a')
file.writelines(str(message)+"\n")
file.close()
print (message)
script.on("message" , on_message)
script.load()
sys.stdin.read()

[cvt126]

import frida
import sys
rdev = frida.get_remote_device()
session = rdev.attach("com.hubox.project")
scr = """
send("get in");
Interceptor.attach(Module.findExportByName("libtiny.so","Java_com_zxy_libjpegturbo_JpegTurboCompressor_nativeCompress"), {
onEnter: function(args) {
ret=Memory.readUtf8String(args[1]);
send("arg0:"+args[0]);
send("arg1:"+ret);

},
onLeave:function(retval){

}

});

"""
script = session.create_script(scr)
def on_message(message ,data):
file=open(r'C:\Users\Administrator\Desktop\log.txt', 'a')
file.writelines(str(message)+"\n")
file.close()
print (message)
script.on("message" , on_message)
script.load()
sys.stdin.read()

[cvt126]

I user frida 12.0.8 os is 6.0.1 andriod

[oMengLvRong]

You need to wait application load finish.
Try sleep(5);

[bartlomiejduda]

Here is my solution:
https://github.com/bartlomiejduda/Tools/blob/master/NEW%20Tools/Cocos2d/cocos2d_xxtea_script.js

[bartlomiejduda]

My previous solution has fixed the issue with hooking some Android app.
And afaik it works fine with other apps as well. ;)

BUT I've encountered the same issue while hooking some PC game. Turns out there is something wrong when spawning app instance with Frida from another directory than the game is installed.
So to fix this on PC, you have to "cd" to game's directory first and then try to spawn your instance.

For example:
cd GameName
and then:
frida -f GameName.exe -l "C:\Users\UserName\gamename_frida_hook.js"

[weibt8866]

Possible issues：
1、 The function (Interceptor.attach) parameter type is incorrect ,but they are right.
2、the so is unloaded, and you should hook dlopen like this：
function hook_dlopen() {
var dlopen = Module.findExportByName(null, "dlopen");
Interceptor.attach(dlopen, {
onEnter: function (args) {

        var so_name = args[0].readCString();
        if (so_name.indexOf(yourTargetSoName) >= 0){
            this.call_hook = true;
        }
    }, onLeave: function (retval) {
        if (this.call_hook) {hook your old func};
    }
});
// hight level Android hook==>android_dlopen_ext
var android_dlopen_ext = Module.findExportByName(null, "android_dlopen_ext");
Interceptor.attach(android_dlopen_ext, {
    onEnter: function (args) {
        
        var so_name = args[0].readCString();
        //console.log("hook_dlopen===>android_dlopen_ext==>onEnter==>"+so_name)
        if (so_name.indexOf(targetSoName) >= 0){
            this.call_hook = true;
            //console.log("hook_dlopen===>android_dlopen_ext==>onEnter==>"+so_name)
        } 
    }, onLeave: function (retval) {
        if (this.call_hook) {hook your old func}
    }
});

}