解决frida在nexus 6发生的错误

Android版本5.1.1
在Android 系统上 Frida高版本发生的错误

unused DT entry: type 0x6ffffef5 arg 0x1ddc
{"type":"error","description":"TypeError: api.art::mirror::Object::Clone is not a function","stack":"TypeError: api.art::mirror::Object::Clone is not a function\n    at cloneArtMethod (frida/node_modules/frida-java-bridge/lib/android.js:1557:1)\n    at ArtMethodMangler.resolveTarget (frida/node_modules/frida-java-bridge/lib/android.js:1328:1)\n    at klass.f (eval at makeMethod (frida/node_modules/frida-java-bridge/lib/class-factory.js:1444:1), :1:314)\n    at klass.f (frida/node_modules/frida-java-bridge/lib/class-factory.js:1297:1)\n    at klass.sendMessageDelayed.implementation (/internal-agent.js:221:31)\n    at f (eval at implement (frida/node_modules/frida-java-bridge/lib/class-factory.js:1868:1), :1:285)","fileName":"frida/node_modules/frida-java-bridge/lib/android.js","lineNumber":1557,"columnNumber":1}

切换到Frida 12.1.0 之后Android 端不报错
安装Windows端的Frida
安装命令

pip install frida==12.1.0
pip install frida-tools==1.2.0

frida-tools对应的frida版本

https://github.com/frida/frida-tools/commits?after=d1b3f6750e622ae8a9ec8f58585ba7fc60a978bf+34&author=oleavr

Windows注入js脚本时发生错误
错误内容

TypeError: undefined not callable (property 'art::mirror::Object::Clone' of [object Object])
    at [anon] (duk_js_call.c:2870)
    at E (frida/node_modules/frida-java/lib/android.js:729)
    at resolveArtTargetMethodId (frida/node_modules/frida-java/lib/class-factory.js:1651)
    at input:1
    at frida/node_modules/frida-java/index.js:320
    at input:1
TypeError: undefined not callable (property 'art::mirror::Object::Clone' of [object Object])
    at [anon] (duk_js_call.c:2870)
    at E (frida/node_modules/frida-java/lib/android.js:729)
    at resolveArtTargetMethodId (frida/node_modules/frida-java/lib/class-factory.js:1651)
    at input:1
    at frida/node_modules/frida-java/index.js:320
    at input:1

卸载xposed 之后的错误

TypeError: undefined not callable (property 'art::mirror::Object::Clone' of [object Object])
    at [anon] (duk_js_call.c:2870)
    at E (frida/node_modules/frida-java/lib/android.js:729)
    at resolveArtTargetMethodId (frida/node_modules/frida-java/lib/class-factory.js:1651)
    at input:1
    at frida/node_modules/frida-java/index.js:320
    at input:1

尝试卸载magisk中的所有模块，无效
重新刷机
手机系统更换到6.0.0 (MRA58N)
安装最新版的frida-server 运行成功…
先卸载Windows上之前的版本，再安装和手机上对应的版本，注入js脚本

这样就OK了

参考

https://www.gitmemory.com/issue/frida/frida-java/82/499325823
https://www.bountysource.com/issues/60963195-35-re-occurs
https://bbs.pediy.com/thread-246428.htm