HmnDev-Tech/shevery 14.6.5

Shevery 14.6.5

on GitHub

Overview

Shevery 14.6.5 (versionCode 1068) brings a full Rust rewrite of the native layer, stronger IPC and binder security enforcement, expanded Dhizuku UserService support, new manager usability and diagnostics features, and dynamic commit-count versioning.

Highlights

Native Rust Architecture

• Rewrote the legacy C/C++ native layer (starter, rish, adb_pairing) in Rust, removing BoringSSL and libc++ native build dependencies:
  • starter: SELinux context transition, cgroup v1/v2 setup, process enumeration, and app_process launch.
  • rish: PTY management, raw termios, SIGWINCH self-pipe handling, and JNI bridges.
  • adb_pairing & ADB crypto: pure-Rust SPAKE2 (curve25519-dalek), HKDF-SHA256, AES-128-GCM, packet framing/checksums, and RSA-2048 Montgomery public key encoding.
  • Stealth & module helpers: Rust Stealth APK binary swapper, AXML manifest patcher, DEX header fixer, APK v2 Merkle digest, SHA-256 tree fingerprinter, and FD tail reader.
• Integrated cargo-ndk across all four ABIs (arm64-v8a, armeabi-v7a, x86, x86_64).

Security Hardening

• Enforced callingUid validation across SheveryProvider and privileged IPC endpoints, plus package ownership validation in ClientManager.
• Extended android.app.Service in DhizukuService with caller authentication on all binder calls.
• Enforced custom module access permissions, blocked cwd/environment injection, and hardened the adb shim.
• Zeroized SPAKE2 secret material, added nonce overflow guards, and closed leaked file descriptors across rish/starter.

Manager, Diagnostics & Compatibility

• Smart Logs Diagnostics: added Shevery smart logs viewer with copy and download support.
• Appearance & Settings: added experimental Autoscale option, custom TCP port support (#385), optional home diagnostics card (#389), firewall search and auto-block, and app search in Hide Developer options.
• Dhizuku & Device Owner: added isolated :dhizuku_user_service process with UserService lifecycle, remoteProcess, lock-task listeners, real versions, scope auth, and API-level-guarded DevicePolicyManager delegation scopes.
• Localization: completed zh-rTW and zh-rCN translations and aligned Chinese READMEs with side-by-side install guidance.

Tooling, Refactoring & Tests

• Updated build.gradle so gitCommitCount (versionCode) dynamically computes the total repository commit count via git rev-list --count HEAD (1068 in this release), and bumped Shevery-API to 14.6.5.
• Upgraded Gradle, AGP, Kotlin, AndroidX, Material3 (1.5.0-rc01), and Rust dependencies.
• Migrated non-critical manager, server, common, and stub utilities from Java to Kotlin.
• Expanded unit test coverage across API, manager, server, errorprotect, tasker, and Rust crates.

Bug Fixes

• Fixed UTF-8 byte overflow when patching AXML manifest labels in Stealth builds.
• Removed unconditional || true fallback in AdbMdns.isLocalAddress.
• Fixed diagnostics state retention inside LazyListScope items on Home.
• Fixed Kotlin and Material3 1.5.0-rc01 compilation regressions (ShizukuSettings, Logger, ToggleButtonDefaults.colors, ExposedDropdownMenu).

Verification & Assets

• Built and APK-signature verified by GitHub Actions workflow Build Android APK #43706160539 on main.
• Full Changelog: 14.6.4...14.6.5