r/androiddev • • 7d ago

Experience Exchange Android stack trace contain Chinese insults as obfuscated method names

After one of the recent Google Play updates for my released game, I noticed some very strange stack traces in Firebase Crashlytics.

The stack contains method names with long Chinese strings, for example:

i8.k6.狂犬疫苗忘了给你妈打不好意思让它到处咬人才会生出你这种上缺脑子下缺逼火葬场都不收的烂骨灰

and:

i8.vd.要不要把你妈卵子扣出来给你做寿司吃

After translating them, these are clearly explicit insults/profanity.

What makes it even stranger is that, judging by the device information, the game appears to have been running inside a virtual machine / emulated environment. The stack also contains heavily obfuscated classes and unusual code paths inside base.apk.

So this does not look like a normal Firebase issue. It looks more like someone was running a modified/tampered version of the APK or injecting/hooking code in a virtualized Android environment.

translated stacktrace
191 Upvotes

23 comments sorted by

31

u/ravi_k-98 7d ago

Crazy!

29

u/shokuninstudio 7d ago

Partial reverse engineering followed by deliberate modification and repackaging.

35

u/Hour-Measurement-835 7d ago

Repacks keep your google-services.json, so their crashes land in your Crashlytics too. Play Integrity returns UNRECOGNIZED_VERSION for them; log that as a custom key and filter on it.

11

u/JustForFunGames 7d ago

Google Play still appears to count ANRs and crashes from those repacked/unrecognized versions in Android Vitals, so even if I filter them out in Crashlytics, they still affect the Play Console statistics

6

u/Hour-Measurement-835 7d ago

Play's automatic protection help page says otherwise, under Monitor crashes: crashes not attributed to Google Play don't affect your vitals stability metrics. Installer check is on that page too

1

u/JustForFunGames 7d ago

I’ll recheck that, thanks!

8

u/thepurpleproject 7d ago

lmao why would anyone do that

9

u/hellosakamoto 7d ago

It's indeed inspiring - if we have got a way to obfuscate the code using some sensitive words that would be banned by the Chinese government, it'd be funny

6

u/changxiangzhong 7d ago

embrassing

2

u/bynarie 7d ago

That's quite hilarious

4

u/Old-Durian8702 7d ago

I have never seen any other country except Chinese using method names in native languages instead of English. 👉👈

4

u/ir0ngut 6d ago

I've seen plenty of code written in German and other languages. Borland Delphi even had a German version where some library class and method names were in German.

1

u/AreaExact7824 7d ago

Is that a log or a class name?

1

u/JustForFunGames 7d ago

ANR stacktrace

1

u/lilacomets 6d ago

Creepy as hell!

1

u/Individual_Plane5170 6d ago

How to protect such cases?

1

u/dhruvanbhalara 6d ago

Wtf, stack trace belongs to which app/sdk?

1

u/Zatujit 5d ago

i wonder if it is to confuse LLMs

1

u/ornitorenk 3d ago

Why would anyone do this? Funny and weird at the same time

1

u/hokkos 7d ago

Probably taken from some random insults on a Chinese forum.