Android 与 iOS 加固证据为何不能混用：包格式、签名与平台信号的差异解读

#!/usr/bin/env python3
"""校验证据记录的平台字段与候选包的类型是否一致"""
import json
import zipfile
import sys
import os

def detect_package_type(package_path):
    if not zipfile.is_zipfile(package_path):
        return None
    with zipfile.ZipFile(package_path, 'r') as zf:
        names = zf.namelist()
        if any(name == 'AndroidManifest.xml' for name in names):
            return 'android'
        payload_dir = any(name.startswith('Payload/') for name in names)
        has_app_bundle = any('.app/' in name for name in names)
        if payload_dir and has_app_bundle:
            return 'ios'
    return None

if len(sys.argv) != 3:
    print("Usage: check_platform.py <evidence.json> <package_path>")
    sys.exit(1)

evidence_file = sys.argv[1]
package_path = sys.argv[2]

if not os.path.isfile(evidence_file):
    print("Evidence file not found")
    sys.exit(2)

with open(evidence_file, 'r') as f:
    evidence = json.load(f)

expected_platform = evidence.get('platform') or evidence.get('platform', '')
if expected_platform not in ('android', 'ios'):
    print("Evidence platform field is missing or invalid")
    sys.exit(3)

detected = detect_package_type(package_path)
if detected is None:
    print("Candidate package type could not be determined")
    sys.exit(4)

if expected_platform != detected:
    print(f"Platform mismatch: evidence expects {expected_platform} but package is {detected}")
    sys.exit(5)
else:
    print("Platform field matches candidate package type")
    sys.exit(0)