Java 用Xposed挂接android类

我正在尝试使用Xposed框架连接到android.bluetooth.BluetoothGatt.writeCharacteristic方法。就我所知，我如何连接到动态链接的方法，比如Android的任何原生蓝牙类？我能够在jdb中找到该类并按如下方式打印其变量：

> stop in android.bluetooth.BluetoothGatt.writeCharacteristic
Set breakpoint android.bluetooth.BluetoothGatt.writeCharacteristic
> 
Breakpoint hit: "thread=main", 
android.bluetooth.BluetoothGatt.writeCharacteristic(), line=926 bci=0

main[1] dump characteristic.mValue
 characteristic.mValue = {
 116, 101, 115, 116, 49, 51, 51
 }

但是，当我尝试使用Xposed框架钩住类时，我收到以下错误：

I/Xposed  (11661): Loaded app: com.macdom.ble.blescanner
E/Xposed  (11661): java.lang.NoSuchMethodError: android.bluetooth.BluetoothGatt#writeCharacteristic()#bestmatch
E/Xposed  (11661):  at de.robv.android.xposed.XposedHelpers.findMethodBestMatch(XposedHelpers.java:440)
E/Xposed  (11661):  at com.example.test.xposed3.Xposed3.handleLoadPackage(Xposed3.java:34)
E/Xposed  (11661):  at de.robv.android.xposed.IXposedHookLoadPackage$Wrapper.handleLoadPackage(IXposedHookLoadPackage.java:34)
E/Xposed  (11661):  at de.robv.android.xposed.callbacks.XC_LoadPackage.call(XC_LoadPackage.java:61)
E/Xposed  (11661):  at de.robv.android.xposed.callbacks.XCallback.callAll(XCallback.java:106)
E/Xposed  (11661):  at de.robv.android.xposed.XposedInit$2.beforeHookedMethod(XposedInit.java:116)
E/Xposed  (11661):  at de.robv.android.xposed.XposedBridge.handleHookedMethod(XposedBridge.java:314)
E/Xposed  (11661):  at android.app.ActivityThread.handleBindApplication(<Xposed>)
E/Xposed  (11661):  at android.app.ActivityThread.access$1500(ActivityThread.java:151)
E/Xposed  (11661):  at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1364)
E/Xposed  (11661):  at android.os.Handler.dispatchMessage(Handler.java:102)
E/Xposed  (11661):  at android.os.Looper.loop(Looper.java:135)
E/Xposed  (11661):  at android.app.ActivityThread.main(ActivityThread.java:5254)
E/Xposed  (11661):  at java.lang.reflect.Method.invoke(Native Method)
E/Xposed  (11661):  at java.lang.reflect.Method.invoke(Method.java:372)
E/Xposed  (11661):  at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:903)
E/Xposed  (11661):  at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:698)
E/Xposed  (11661):  at de.robv.android.xposed.XposedBridge.main(XposedBridge.java:102)
I/Xposed  (11661): Calling com.macdom.ble.blescanner.a onStart()

I/Xposed（11661）：加载的应用程序：com.macdom.ble.blescanner
E/Xposed（11661）：java.lang.NoSuchMethodError:android.bluetooth.BluetoothGatt#writeCharacteristic（）#最佳匹配
E/Xposed（11661）：位于de.robv.android.Xposed.XposedHelpers.findMethodBestMatch（XposedHelpers.java:440）
E/Xposed（11661）：位于com.example.test.xposed3.xposed3.handleLoadPackage（xposed3.java:34）
E/Xposed（11661）：位于de.robv.android.Xposed.IXposedHookLoadPackage$Wrapper.handleLoadPackage（IXposedHookLoadPackage.java:34）
E/Xposed（11661）：位于de.robv.android.Xposed.callbacks.XC_LoadPackage.call（XC_LoadPackage.java:61）
E/Xposed（11661）：位于de.robv.android.Xposed.callbacks.XCallback.callAll（XCallback.java:106）
E/Xposed（11661）：位于de.robv.android.Xposed.XposedInit$2.beforeHookedMethod（XposedInit.java:116）
E/Xposed（11661）：位于de.robv.android.Xposed.XposedBridge.handleHookedMethod（XposedBridge.java:314）
E/Xposed（11661）：在android.app.ActivityThread.handleBindApplication（）上
E/Xposed（11661）：位于android.app.ActivityThread.access$1500（ActivityThread.java:151）
E/Xposed（11661）：位于android.app.ActivityThread$H.handleMessage（ActivityThread.java:1364）
E/Xposed（11661）：位于android.os.Handler.dispatchMessage（Handler.java:102）
E/Xposed（11661）：位于android.os.Looper.loop（Looper.java:135）
E/Xposed（11661）：位于android.app.ActivityThread.main（ActivityThread.java:5254）
E/Xposed（11661）：位于java.lang.reflect.Method.invoke（本机方法）
E/Xposed（11661）：位于java.lang.reflect.Method.invoke（Method.java:372）
E/Xposed（11661）：位于com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run（ZygoteInit.java:903）
E/Xposed（11661）：位于com.android.internal.os.ZygoteInit.main（ZygoteInit.java:698）
E/Xposed（11661）：位于de.robv.android.Xposed.XposedBridge.main（XposedBridge.java:102）
I/Xposed（11661）：调用com.macdom.ble.blescanner.a onStart（）

以下是导致java.lang.NoSuchMethodError错误的代码：

package com.example.test.xposed3；
导入java.lang.reflect.Method；
导入静态de.robv.android.xposed.XposedHelpers.findAndHookMethod；
导入静态de.robv.android.xposed.XposedHelpers.findClass；
导入de.robv.android.xposed.IXposedHookLoadPackage；
导入de.robv.android.xposed.XposedBridge；
导入de.robv.android.xposed.XC_MethodHook；
导入de.robv.android.xposed.XposedHelpers；
导入de.robv.android.xposed.callbacks.XC_加载包；
导入de.robv.android.xposed.callbacks.XC_LoadPackage.LoadPackageParam；
公共类Xposed3实现了IXposedHookLoadPackage{
public void handleLoadPackage（最终LoadPackageParam lpparam）抛出可丢弃{
如果（！lpparam.packageName.equals（“com.macdom.ble.blescanner”））
返回；
log（“加载的应用程序：+lpparam.packageName”）；
findAndHookMethod（“com.macdom.ble.blescanner.a”，lpparam.classLoader，“onStart”，新的XC_MethodHook（）{
@凌驾
protected void beforeHookedMethod（MethodHookParam参数）抛出可丢弃的{
log（“调用com.macdom.ble.blescanner.a onStart（）”；
}
});
类BluetoothGatt=findClass（“android.bluetooth.BluetoothGatt”，lpparam.classLoader）；
方法writeCharacteristic=XposedHelpers.findMethodBestMatch（BluetoothGatt，“writeCharacteristic”）；
hookMethod（writeCharacteristic，新的XC_MethodHook（）{
@凌驾
protected void beforeHookedMethod（MethodHookParam参数）抛出可丢弃的{
log（“调用android.bluetooth.BluetoothGatt writeCharacteristic（）”；
}
});
}
}

package com.example.test.xposed3;

import java.lang.reflect.Method;

import static de.robv.android.xposed.XposedHelpers.findAndHookMethod;
import static de.robv.android.xposed.XposedHelpers.findClass;

import de.robv.android.xposed.IXposedHookLoadPackage;
import de.robv.android.xposed.XposedBridge;
import de.robv.android.xposed.XC_MethodHook;
import de.robv.android.xposed.XposedHelpers;
import de.robv.android.xposed.callbacks.XC_LoadPackage;
import de.robv.android.xposed.callbacks.XC_LoadPackage.LoadPackageParam;

public class Xposed3 implements IXposedHookLoadPackage {
    public void handleLoadPackage(final LoadPackageParam lpparam) throws Throwable {
        if (!lpparam.packageName.equals("com.macdom.ble.blescanner"))
            return;

        XposedBridge.log("Loaded app: " + lpparam.packageName);

        findAndHookMethod("com.macdom.ble.blescanner.a", lpparam.classLoader, "onStart", new XC_MethodHook() {
            @Override
            protected void beforeHookedMethod(MethodHookParam param) throws Throwable {
                XposedBridge.log("Calling com.macdom.ble.blescanner.a onStart()");
            }
        });

        Class<?> BluetoothGatt = findClass("android.bluetooth.BluetoothGatt", lpparam.classLoader);
        Method writeCharacteristic = XposedHelpers.findMethodBestMatch(BluetoothGatt, "writeCharacteristic");
        XposedBridge.hookMethod(writeCharacteristic, new XC_MethodHook() {
            @Override
            protected void beforeHookedMethod(MethodHookParam param) throws Throwable {
                XposedBridge.log("Calling android.bluetooth.BluetoothGatt writeCharacteristic()");
            }
        });
    }
}