[firebase_messaging]: Android crash : java.lang.SecurityException - Package com.gbox.com.google.android.gm does not belong to 10149

[Tom3652]

Is there an existing issue for this?

• I have searched the existing issues.

Which plugins are affected?

Messaging

Which platforms are affected?

Android

Description

I have received a very weird crash on my Android app.
I am actually not sure that this is a crash from firebase_messaging but since it's quite present in the StackTrace, it might be a good lead since i have not found anything on internet related to this error.

Reproducing the issue

I have no clue on how to reproduce it but it seems to be linked to the display of Notification when the app is in background according to Crashlytics

Firebase Core version

3.9.0

Flutter Version

3.27.1

Relevant Log Output

Fatal Exception: java.lang.SecurityException: Package com.gbox.com.google.android.gm does not belong to 10149
       at android.os.Parcel.createException(Parcel.java:2088)
       at android.os.Parcel.readException(Parcel.java:2056)
       at android.os.Parcel.readException(Parcel.java:2004)
       at android.app.INotificationManager$Stub$Proxy.enqueueNotificationWithTag(INotificationManager.java:2775)
       at java.lang.reflect.Method.invoke(Method.java)
       at com.vlite.sdk.ІӀӏ.v0$q.f(SourceFile:26)
       at com.vlite.sdk.servicehook.a.g(SourceFile:5)
       at com.vlite.sdk.ІӀӏ.l.p(SourceFile:2)
       at com.vlite.sdk.ІӀӏ.l.invoke(SourceFile:12)
       at java.lang.reflect.Proxy.invoke(Proxy.java:1006)
       at $Proxy9.enqueueNotificationWithTag()
       at android.app.NotificationManager.notifyAsUser(NotificationManager.java:494)
       at android.app.NotificationManager.notify(NotificationManager.java:444)
       at com.google.firebase.messaging.DisplayNotification.showNotification(DisplayNotification.java:177)
       at com.google.firebase.messaging.DisplayNotification.handleNotification(DisplayNotification.java:111)
       at com.google.firebase.messaging.FirebaseMessagingService.dispatchMessage(FirebaseMessagingService.java:229)
       at com.google.firebase.messaging.FirebaseMessagingService.passMessageIntentToSdk(FirebaseMessagingService.java:193)
       at com.google.firebase.messaging.FirebaseMessagingService.handleMessageIntent(FirebaseMessagingService.java:179)
       at com.google.firebase.messaging.FirebaseMessagingService.handleIntent(FirebaseMessagingService.java:168)
       at com.google.firebase.messaging.EnhancedIntentService.lambda$processIntent$0(EnhancedIntentService.java:82)
       at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1167)
       at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:641)
       at com.google.android.gms.common.util.concurrent.zza.run(com.google.android.gms:play-services-basement@@18.3.0:2)
       at java.lang.Thread.run(Thread.java:929)
Caused by android.os.RemoteException: Remote stack trace:
	at android.app.AppOpsManager.checkPackage(AppOpsManager.java:5185)
	at com.android.server.notification.NotificationManagerService.isCallerInstantApp(NotificationManagerService.java:8078)
	at com.android.server.notification.NotificationManagerService.checkDisqualifyingFeatures(NotificationManagerService.java:5623)
	at com.android.server.notification.NotificationManagerService.enqueueNotificationInternal(NotificationManagerService.java:5359)
	at com.android.server.notification.NotificationManagerService$10.enqueueNotificationWithTag(NotificationManagerService.java:2731)
callee: null 1360/3107

Flutter dependencies

Expand Flutter dependencies snippet

Replace this line with the contents of your `flutter pub deps -- --style=compact`.

Additional context and comments

This has happened on V1938A phone under Android 10

[SelaseKay]

Hi @Tom3652, thank you for reporting this issue. Based on the stack trace, this crash appears to originate from the Android system's notification handling rather than being directly caused by firebase_messaging. I also noticed references to com.vlite.sdk. Could you confirm if this library is part of your project?

[Tom3652]

Hi @SelaseKay !

I also noticed references to com.vlite.sdk. Could you confirm if this library is part of your project?

No it's not, that's why i am putting it here because i don't know what is this package at all... The only thing i have recognized in the trace is firebase_messsaging

[Nek-12]

Based on my research, Vlite sdk is a chinese hacking tool used to crack apps. A hacker tampered with the application and leaked the stacktrace to crashlytics.

Additionally, it may be related to HarmonyOS development which runs Android apps in their emulated environment.

[SelaseKay]

Hi @Tom3652, since this doesn't seem to be directly related to FlutterFire, I'll close the issue for now. Please feel free to reopen it if you have any additional information.