JavaShroud v0.11.0

JavaShroud v0.11

This release advances the public line to 0.11 and presents the former “Native Max” work under the clearer Native hardening name.

Highlights

• Adds authenticated outer-stub packing for the complete inner Native kernel.
• Binds Native payloads to VMBC resources, bootstrap metadata, resource paths, dispatcher profiles, and artifact identity.
• Hardens Windows PE64 and Linux ELF64 in-memory loader validation across sections, relocations, symbols, imports, initializers, and executable entrypoints.
• Extends Mach-O metadata, rebase / bind, export, and initializer validation while retaining fail-closed behavior at the current macOS execution boundary.
• Expands runtime and reverse-evidence gates for payload, header, profile, bootstrap-index, resource-path, and manifest-mesh tampering.
• Streamlines the Chinese and English READMEs around capabilities, VMBC / NBVM, Native hardening, compatibility, and build usage.

Release Validation

The tag-triggered GitHub Actions workflow rebuilds the engine, Native components, frontend bundle, and Wails Windows package before publishing javashroud-windows-amd64.zip.

JavaShroud v0.9.3-dev

JavaShroud v0.9.2-dev

This development release bumps the engine version to 0.9.2-dev and the VBC capability version to 4.55.

• Adds guarded native VM support for engine-generated ConstantDynamic LDC values from condy-constant-indirection.
• Keeps method-virtualization strict all-compatible coverage intact for max-method virtualization instead of skipping condy-bearing methods.
• Preserves fail-closed behavior for unknown ConstantDynamic bootstrap shapes.
• Validates the previously failing real-JAR pair/max slice for demo.jar under E:\XiangMu\TestJar.

GitHub Releases are published by .github/workflows/release.yml from v* tags. Use v0.9.2-dev for this release line; bare tags such as 0.9.2-dev are not release workflow triggers.

Verification

.\gradlew :core-engine:test --tests io.github.hht0rro.javashroud.MethodVirtualizationThresholdTest --no-build-cache --stacktrace
.\gradlew :core-engine:test --fail-fast --no-build-cache --stacktrace
python scripts\real_jar_matrix.py --engine build\core-engine\libs\obfuscator-engine-0.9.2-dev.jar --fixtures E:\XiangMu\TestJar\demo.jar --mode pair --include-native --combo-param-profiles max --limit 8 --offset 140 --work-dir build\real-jar-matrix-v092-pair-max-140-148-demo --run-timeout 60 --run-attempts 2 --obfuscate-timeout 300 --ignore-testjar-pool-flake

The matrix slice includes pair-condy-constant-indirection__method-virtualization-params-max, which previously failed during obfuscation with unsupported org.objectweb.asm.ConstantDynamic LDC input.

Prior Line

v0.9.1-dev preserved the prior sealed VM ABI when fullconfig processed older VBC4-sealed artifacts while keeping fresh inputs on the current VBC4 max-strength/native-only path.

JavaShroud v0.9.2-dev

JavaShroud v0.9.2-dev

This development release bumps the engine version to 0.9.2-dev and the VBC capability version to 4.55.

• Adds guarded native VM support for engine-generated ConstantDynamic LDC values from condy-constant-indirection.
• Keeps method-virtualization strict all-compatible coverage intact for max-method virtualization instead of skipping condy-bearing methods.
• Preserves fail-closed behavior for unknown ConstantDynamic bootstrap shapes.
• Validates the previously failing real-JAR pair/max slice for demo.jar under E:\XiangMu\TestJar.

GitHub Releases are published by .github/workflows/release.yml from v* tags. Use v0.9.2-dev for this release line; bare tags such as 0.9.2-dev are not release workflow triggers.

Verification

.\gradlew :core-engine:test --tests io.github.hht0rro.javashroud.MethodVirtualizationThresholdTest --no-build-cache --stacktrace
.\gradlew :core-engine:test --fail-fast --no-build-cache --stacktrace
python scripts\real_jar_matrix.py --engine build\core-engine\libs\obfuscator-engine-0.9.2-dev.jar --fixtures E:\XiangMu\TestJar\demo.jar --mode pair --include-native --combo-param-profiles max --limit 8 --offset 140 --work-dir build\real-jar-matrix-v092-pair-max-140-148-demo --run-timeout 60 --run-attempts 2 --obfuscate-timeout 300 --ignore-testjar-pool-flake

The matrix slice includes pair-condy-constant-indirection__method-virtualization-params-max, which previously failed during obfuscation with unsupported org.objectweb.asm.ConstantDynamic LDC input.

Prior Line

v0.9.1-dev preserved the prior sealed VM ABI when fullconfig processed older VBC4-sealed artifacts while keeping fresh inputs on the current VBC4 max-strength/native-only path.

JavaShroud v0.9.1-dev

JavaShroud v0.9.1-dev

This development release keeps the engine version at 0.9.1-dev and the VBC capability version at 4.54.

• Preserves the prior sealed VM ABI when fullconfig processes older VBC4-sealed artifacts.
• Keeps fresh inputs and artifacts generated by the current run on the current VBC4 max-strength/native-only path.
• Covers fullconfig validation across every JAR under E:\XiangMu\TestJar, including already shrouded fixtures and no-main library behavior.

GitHub Releases are published by .github/workflows/release.yml from v* tags. Use v0.9.1-dev for this release line; the legacy bare 0.9.1-dev tag is not a release workflow trigger.

v0.8.4-dev

Merge remote-tracking branch 'JavaShroud/main' into dev

v0.8.3-dev

fix: enable https protocol in native image

v0.8.2-dev

Fix native auto target compilation

v0.8.1-dev

JavaShroud Dev 0.8.1

v0.8.0-dev

JavaShroud Dev 0.8.0

v0.7.6-dev

JavaShroud Dev 0.7.6