Skip to content

v3.0 unisoc-framework.jar: ODM Framework Extension (Complete Decompile)

Choose a tag to compare

@lexs201992-gif lexs201992-gif released this 11 Oct 21:21
· 113 commits to main since this release
Immutable release. Only release title and notes can be modified.
97aa747

Release v3.0

Title: v3.0 — unisoc-framework.jar: ODM Framework Extension (Complete Decompile)

Body:

## v3.0 — unisoc-framework.jar

### What's new
- **`unisoc-framework/`** — Complete decompile of `/system/system_ext/framework/unisoc-framework.jar`
  - 20+ packages, 100+ classes
  - Network: `ILinkTurboManager`, `INetworkAdapterService` (33 methods), `INetworkReachableNotifier`
  - FOTA: `IUniSilentReboot`, `UniPowerOnWakeup` (native RTC wake), `ShutdownCountdownActivity`
  - Performance: `UnisocProcessCpuTracker`, `AppWatchdogImpl`, `UnisocBinderTracker`
  - Telephony: `IUniTelephony`, SIM lock controllers (7 operators), UICC handlers
  - UI hooks: `UnisocChoreographerImpl`, `UnisocViewRootImpl`
  - Internal: `UnisocBgThread`, `UniPowerOnWakeup`

- **`unipnp/`** — IUnionPnP HAL (interface + Stub + Proxy, 3 smali files)
- **`Vintf/`** — All HAL manifests (18 files) + compatibility matrix
- **`init/`** — `unionpnp.rc` (service definition, root)

### Architecture documented
- Full sensor → decisor → transport → actuator pipeline
- CPU/GPU/IO: `CpuTracker` → `ProxyManagerService` → `IUnionPnP` → kernel
- Network: `NetworkAdapterService` (QoS, MPTCP, SLA whitelists) + `LinkTurbo` (bonding)
- FOTA: `PowerOnWakeup` (RTC) → `SilentReboot` → `ShutdownCountdown` (fallback)
- Debug backdoors: shell commands, reflection, per-UID properties, `sendCmdsToDaemon`

### Assets
- `unisoc-framework.jar` (original binary)
- `classes.dex` (decompiled)

### NOT a CVE. NOT an exploit.
Architecture documentation of ODM control surface.
All components are legitimate vendor features.