LSPosed module: Miracast Enabler v2.0.0

Rewrite from KernelSU shell scripts to LSPosed/Xposed module.
Hooks Android's hidden Wi-Fi Display framework to enable native Miracast.

- FrameworkResourceHook: force config_enableWifiDisplay = true
- SystemServerHook: grant WFD permissions, force wifi_display feature
- DisplayManagerHook: ensure WifiDisplayAdapter initializes, force FEATURE_STATE_ON
- MediaRouterHook: unhide WFD routes in Settings Cast UI
- MiracastTileService: Quick Settings tile for scan/connect/disconnect
- SettingsActivity: resolution, HDCP, display source, GPU composition
- WfdManager: reflection wrapper for hidden DisplayManager WFD APIs
This commit is contained in:
sssnake
2026-04-03 06:21:46 -07:00
parent 7daa3e9002
commit b1e4ffd828
25 changed files with 1246 additions and 1 deletions

View File

@@ -0,0 +1,37 @@
package com.miracast.enabler;
import de.robv.android.xposed.IXposedHookLoadPackage;
import de.robv.android.xposed.IXposedHookZygoteInit;
import de.robv.android.xposed.XposedBridge;
import de.robv.android.xposed.callbacks.XC_LoadPackage;
import com.miracast.enabler.hooks.FrameworkResourceHook;
import com.miracast.enabler.hooks.DisplayManagerHook;
import com.miracast.enabler.hooks.SystemServerHook;
import com.miracast.enabler.hooks.MediaRouterHook;
public class MainHook implements IXposedHookLoadPackage, IXposedHookZygoteInit {
private static final String TAG = "MiracastEnabler";
@Override
public void initZygote(StartupParam startupParam) {
XposedBridge.log(TAG + ": initZygote");
FrameworkResourceHook.hookZygote();
}
@Override
public void handleLoadPackage(XC_LoadPackage.LoadPackageParam lpparam) {
switch (lpparam.packageName) {
case "android":
XposedBridge.log(TAG + ": hooking system_server");
SystemServerHook.hook(lpparam);
DisplayManagerHook.hook(lpparam);
break;
case "com.android.settings":
XposedBridge.log(TAG + ": hooking Settings");
MediaRouterHook.hookSettings(lpparam);
break;
}
}
}

View File

@@ -0,0 +1,78 @@
package com.miracast.enabler.hooks;
import de.robv.android.xposed.XC_MethodHook;
import de.robv.android.xposed.XposedBridge;
import de.robv.android.xposed.XposedHelpers;
import de.robv.android.xposed.callbacks.XC_LoadPackage;
/**
* Hooks in system_server targeting WifiDisplayAdapter and WifiDisplayController
* to ensure the WFD stack initializes and scans correctly.
*
* On some builds, WifiDisplayController.requestStartScan() has additional
* gating checks beyond the resource flag. This hook ensures scanning proceeds.
*/
public class DisplayManagerHook {
private static final String TAG = "MiracastEnabler/Display";
public static void hook(XC_LoadPackage.LoadPackageParam lpparam) {
hookWifiDisplayFeatureState(lpparam);
hookWifiDisplayController(lpparam);
}
/**
* Hook WifiDisplayStatus.getFeatureState() to always return FEATURE_STATE_ON (3).
* This ensures that any code checking the feature state (Settings, SystemUI)
* sees WFD as fully enabled.
*/
private static void hookWifiDisplayFeatureState(XC_LoadPackage.LoadPackageParam lpparam) {
try {
XposedHelpers.findAndHookMethod(
"android.hardware.display.WifiDisplayStatus",
lpparam.classLoader,
"getFeatureState",
new XC_MethodHook() {
@Override
protected void afterHookedMethod(MethodHookParam param) {
param.setResult(3); // FEATURE_STATE_ON
}
}
);
XposedBridge.log(TAG + ": hooked WifiDisplayStatus.getFeatureState -> ON");
} catch (Throwable t) {
XposedBridge.log(TAG + ": failed to hook getFeatureState");
XposedBridge.log(t);
}
}
/**
* Hook WifiDisplayController to ensure scanning is not blocked by
* vendor-specific checks (e.g., missing WFD IE support flag).
*/
private static void hookWifiDisplayController(XC_LoadPackage.LoadPackageParam lpparam) {
try {
Class<?> controllerClass = XposedHelpers.findClass(
"com.android.server.display.WifiDisplayController",
lpparam.classLoader
);
// Log when scan starts to confirm the WFD stack is active
XposedHelpers.findAndHookMethod(
controllerClass,
"requestStartScan",
new XC_MethodHook() {
@Override
protected void beforeHookedMethod(MethodHookParam param) {
XposedBridge.log(TAG + ": WifiDisplayController.requestStartScan() called");
}
}
);
XposedBridge.log(TAG + ": hooked WifiDisplayController");
} catch (Throwable t) {
// Controller class name may differ or not exist — non-fatal
XposedBridge.log(TAG + ": WifiDisplayController hook skipped: " + t.getMessage());
}
}
}

View File

@@ -0,0 +1,52 @@
package com.miracast.enabler.hooks;
import android.content.res.Resources;
import de.robv.android.xposed.XC_MethodHook;
import de.robv.android.xposed.XposedBridge;
import de.robv.android.xposed.XposedHelpers;
/**
* Hooks Resources.getBoolean() globally (in zygote) so that every process —
* including system_server, Settings, and SystemUI — sees
* config_enableWifiDisplay = true and
* config_wifiDisplaySupportsProtectedBuffers = true.
*
* This is the primary mechanism: WifiDisplayAdapter in DisplayManagerService
* checks these resources at startup to decide whether to register the WFD
* display adapter at all.
*/
public class FrameworkResourceHook {
private static final String TAG = "MiracastEnabler/Resource";
public static void hookZygote() {
try {
XposedHelpers.findAndHookMethod(
Resources.class,
"getBoolean",
int.class,
new XC_MethodHook() {
@Override
protected void afterHookedMethod(MethodHookParam param) {
int resId = (int) param.args[0];
try {
Resources res = (Resources) param.thisObject;
String name = res.getResourceEntryName(resId);
if ("config_enableWifiDisplay".equals(name)) {
param.setResult(true);
} else if ("config_wifiDisplaySupportsProtectedBuffers".equals(name)) {
param.setResult(true);
}
} catch (Resources.NotFoundException ignored) {
}
}
}
);
XposedBridge.log(TAG + ": hooked Resources.getBoolean");
} catch (Throwable t) {
XposedBridge.log(TAG + ": failed to hook Resources.getBoolean");
XposedBridge.log(t);
}
}
}

View File

@@ -0,0 +1,114 @@
package com.miracast.enabler.hooks;
import de.robv.android.xposed.XC_MethodHook;
import de.robv.android.xposed.XposedBridge;
import de.robv.android.xposed.XposedHelpers;
import de.robv.android.xposed.callbacks.XC_LoadPackage;
/**
* Hooks in the Settings app to make WFD (Miracast) sinks visible
* in the Cast / Connected Devices UI.
*
* Android Settings checks WifiDisplayStatus.getFeatureState() to decide
* whether to show the Wi-Fi Display settings section. We force it to
* FEATURE_STATE_ON so the WFD option appears.
*
* We also hook in Settings to ensure the WifiDisplaySettings fragment
* is reachable and not filtered out.
*/
public class MediaRouterHook {
private static final String TAG = "MiracastEnabler/Router";
public static void hookSettings(XC_LoadPackage.LoadPackageParam lpparam) {
hookFeatureStateInSettings(lpparam);
hookWifiDisplaySettings(lpparam);
}
/**
* In the Settings process, hook WifiDisplayStatus.getFeatureState()
* to return FEATURE_STATE_ON. This makes the Wi-Fi Display section
* appear in Cast preferences.
*/
private static void hookFeatureStateInSettings(XC_LoadPackage.LoadPackageParam lpparam) {
try {
XposedHelpers.findAndHookMethod(
"android.hardware.display.WifiDisplayStatus",
lpparam.classLoader,
"getFeatureState",
new XC_MethodHook() {
@Override
protected void afterHookedMethod(MethodHookParam param) {
param.setResult(3); // FEATURE_STATE_ON
}
}
);
XposedBridge.log(TAG + ": hooked getFeatureState in Settings");
} catch (Throwable t) {
XposedBridge.log(TAG + ": failed to hook getFeatureState in Settings");
XposedBridge.log(t);
}
}
/**
* Try to hook the WifiDisplaySettings fragment to ensure it initializes
* even if the Settings app tries to hide it based on device config.
*/
private static void hookWifiDisplaySettings(XC_LoadPackage.LoadPackageParam lpparam) {
// On AOSP Settings, WifiDisplaySettings is a PreferenceFragment that
// checks isAvailable() based on the feature state. Since we already
// hook getFeatureState, this should work. But some OEMs override
// the availability check separately.
String[] possibleClasses = {
"com.android.settings.wfd.WifiDisplaySettings",
"com.android.settings.display.WifiDisplaySettings",
"com.android.settings.connecteddevice.WifiDisplaySettings",
};
for (String className : possibleClasses) {
try {
Class<?> clazz = XposedHelpers.findClass(className, lpparam.classLoader);
XposedHelpers.findAndHookMethod(
clazz,
"isAvailable",
new XC_MethodHook() {
@Override
protected void afterHookedMethod(MethodHookParam param) {
param.setResult(true);
}
}
);
XposedBridge.log(TAG + ": hooked " + className + ".isAvailable()");
return;
} catch (Throwable ignored) {
}
}
// Also try hooking the preference controller that gates WFD visibility
String[] controllerClasses = {
"com.android.settings.wfd.WifiDisplayPreferenceController",
"com.android.settings.display.WifiDisplayPreferenceController",
};
for (String className : controllerClasses) {
try {
Class<?> clazz = XposedHelpers.findClass(className, lpparam.classLoader);
XposedHelpers.findAndHookMethod(
clazz,
"getAvailabilityStatus",
new XC_MethodHook() {
@Override
protected void afterHookedMethod(MethodHookParam param) {
param.setResult(0); // AVAILABLE = 0
}
}
);
XposedBridge.log(TAG + ": hooked " + className + ".getAvailabilityStatus()");
return;
} catch (Throwable ignored) {
}
}
XposedBridge.log(TAG + ": no WifiDisplaySettings class found to hook (non-fatal)");
}
}

View File

@@ -0,0 +1,110 @@
package com.miracast.enabler.hooks;
import android.content.pm.PackageManager;
import de.robv.android.xposed.XC_MethodHook;
import de.robv.android.xposed.XposedBridge;
import de.robv.android.xposed.XposedHelpers;
import de.robv.android.xposed.callbacks.XC_LoadPackage;
/**
* Hooks in system_server to:
* 1. Force hasSystemFeature("android.software.wifi_display") = true
* 2. Grant CONFIGURE_WIFI_DISPLAY and CONTROL_WIFI_DISPLAY permissions
* to our package so the QS tile can control WFD.
*/
public class SystemServerHook {
private static final String TAG = "MiracastEnabler/System";
private static final String OUR_PACKAGE = "com.miracast.enabler";
public static void hook(XC_LoadPackage.LoadPackageParam lpparam) {
hookSystemFeature(lpparam);
hookPermissions(lpparam);
}
private static void hookSystemFeature(XC_LoadPackage.LoadPackageParam lpparam) {
try {
XposedHelpers.findAndHookMethod(
"android.app.ApplicationPackageManager",
lpparam.classLoader,
"hasSystemFeature",
String.class,
new XC_MethodHook() {
@Override
protected void afterHookedMethod(MethodHookParam param) {
String feature = (String) param.args[0];
if ("android.software.wifi_display".equals(feature)
|| "android.hardware.wifi.direct".equals(feature)) {
param.setResult(true);
}
}
}
);
XposedBridge.log(TAG + ": hooked hasSystemFeature");
} catch (Throwable t) {
XposedBridge.log(TAG + ": failed to hook hasSystemFeature");
XposedBridge.log(t);
}
}
private static void hookPermissions(XC_LoadPackage.LoadPackageParam lpparam) {
// Try multiple permission check paths — the class name varies by Android version
String[] permClasses = {
"com.android.server.pm.permission.PermissionManagerServiceImpl",
"com.android.server.pm.permission.PermissionManagerService",
};
for (String className : permClasses) {
try {
Class<?> clazz = XposedHelpers.findClass(className, lpparam.classLoader);
XposedHelpers.findAndHookMethod(
clazz,
"checkPermission",
String.class, String.class, int.class,
new XC_MethodHook() {
@Override
protected void afterHookedMethod(MethodHookParam param) {
String perm = (String) param.args[0];
String pkg = (String) param.args[1];
if (OUR_PACKAGE.equals(pkg) && isWfdPermission(perm)) {
param.setResult(PackageManager.PERMISSION_GRANTED);
}
}
}
);
XposedBridge.log(TAG + ": hooked permissions via " + className);
return;
} catch (Throwable ignored) {
}
}
// Fallback: hook the UID-based checkUidPermission
try {
XposedHelpers.findAndHookMethod(
"android.app.ActivityManager",
lpparam.classLoader,
"checkComponentPermission",
String.class, int.class, int.class, boolean.class,
new XC_MethodHook() {
@Override
protected void afterHookedMethod(MethodHookParam param) {
String perm = (String) param.args[0];
if (perm != null && isWfdPermission(perm)) {
param.setResult(PackageManager.PERMISSION_GRANTED);
}
}
}
);
XposedBridge.log(TAG + ": hooked permissions via ActivityManager fallback");
} catch (Throwable t) {
XposedBridge.log(TAG + ": failed to hook permissions");
XposedBridge.log(t);
}
}
private static boolean isWfdPermission(String perm) {
return "android.permission.CONFIGURE_WIFI_DISPLAY".equals(perm)
|| "android.permission.CONTROL_WIFI_DISPLAY".equals(perm);
}
}

View File

@@ -0,0 +1,81 @@
package com.miracast.enabler.tile;
import android.content.Context;
import android.content.Intent;
import android.hardware.display.DisplayManager;
import android.os.Build;
import android.service.quicksettings.Tile;
import android.service.quicksettings.TileService;
import com.miracast.enabler.util.WfdManager;
/**
* Quick Settings tile for Miracast.
*
* Tap behavior:
* - If disconnected: opens the Cast settings screen (where WFD sinks appear)
* - If connected: disconnects the current WFD session
*
* The tile state reflects the current WFD connection status.
*/
public class MiracastTileService extends TileService {
private WfdManager wfdManager;
@Override
public void onCreate() {
super.onCreate();
wfdManager = new WfdManager(this);
}
@Override
public void onStartListening() {
super.onStartListening();
updateTileState();
}
@Override
public void onClick() {
super.onClick();
int state = wfdManager.getConnectionState();
if (state == WfdManager.STATE_CONNECTED) {
wfdManager.disconnect();
updateTileState();
} else {
// Open Cast settings where WFD sinks will now appear
Intent intent = new Intent("android.settings.CAST_SETTINGS");
intent.addFlags(Intent.FLAG_ACTIVITY_NEW_TASK);
startActivityAndCollapse(intent);
}
}
@Override
public void onStopListening() {
super.onStopListening();
}
private void updateTileState() {
Tile tile = getQsTile();
if (tile == null) return;
int state = wfdManager.getConnectionState();
switch (state) {
case WfdManager.STATE_CONNECTED:
tile.setState(Tile.STATE_ACTIVE);
String displayName = wfdManager.getActiveDisplayName();
tile.setSubtitle(displayName != null ? displayName : "Connected");
break;
case WfdManager.STATE_CONNECTING:
tile.setState(Tile.STATE_ACTIVE);
tile.setSubtitle("Connecting...");
break;
default:
tile.setState(Tile.STATE_INACTIVE);
tile.setSubtitle(null);
break;
}
tile.updateTile();
}
}

View File

@@ -0,0 +1,73 @@
package com.miracast.enabler.ui;
import android.content.Context;
import android.os.Build;
import android.os.Bundle;
import androidx.appcompat.app.AppCompatActivity;
import androidx.preference.ListPreference;
import androidx.preference.Preference;
import androidx.preference.PreferenceCategory;
import androidx.preference.PreferenceFragmentCompat;
import androidx.preference.PreferenceManager;
import com.miracast.enabler.R;
public class SettingsActivity extends AppCompatActivity {
@Override
protected void onCreate(Bundle savedInstanceState) {
super.onCreate(savedInstanceState);
if (savedInstanceState == null) {
getSupportFragmentManager()
.beginTransaction()
.replace(android.R.id.content, new SettingsFragment())
.commit();
}
}
public static class SettingsFragment extends PreferenceFragmentCompat {
@Override
public void onCreatePreferences(Bundle savedInstanceState, String rootKey) {
// World-readable so XSharedPreferences can read from hook processes
getPreferenceManager().setSharedPreferencesMode(Context.MODE_WORLD_READABLE);
setPreferencesFromResource(R.xml.preferences, rootKey);
setupDisplaySource();
setupDeviceInfo();
}
private void setupDisplaySource() {
// Only show display source option on foldable devices
PreferenceCategory displayCategory = findPreference("display_category");
if (displayCategory == null) return;
String device = Build.DEVICE;
boolean isFoldable = "rango".equals(device)
|| "comet".equals(device)
|| "cometl".equals(device)
|| "felix".equals(device);
if (!isFoldable) {
getPreferenceScreen().removePreference(displayCategory);
}
}
private void setupDeviceInfo() {
Preference devicePref = findPreference("status_device");
if (devicePref != null) {
String info = Build.MODEL + " (" + Build.DEVICE + ")"
+ "\nAndroid " + Build.VERSION.RELEASE
+ " (API " + Build.VERSION.SDK_INT + ")"
+ "\nSoC: " + Build.SOC_MODEL;
devicePref.setSummary(info);
}
Preference hookPref = findPreference("status_hooks");
if (hookPref != null) {
hookPref.setSummary("Reboot after enabling module in LSPosed");
}
}
}
}

View File

@@ -0,0 +1,159 @@
package com.miracast.enabler.util;
import android.content.Context;
import android.hardware.display.DisplayManager;
import android.util.Log;
import java.lang.reflect.Method;
/**
* Wrapper around Android's hidden DisplayManager Wi-Fi Display APIs.
* Uses reflection since these methods are @hide.
*
* Key hidden methods on DisplayManager:
* - connectWifiDisplay(String address)
* - disconnectWifiDisplay()
* - startWifiDisplayScan()
* - stopWifiDisplayScan()
* - getWifiDisplayStatus() -> WifiDisplayStatus
*
* WifiDisplayStatus has:
* - getFeatureState() -> int (0=unavail, 1=disabled, 2=off, 3=on)
* - getActiveDisplay() -> WifiDisplay (or null)
* - getAvailableDisplays() -> WifiDisplay[]
* - getScanState() -> int (0=not scanning, 1=scanning)
* - getActiveDisplayState() -> int (0=disconnected, 1=connecting, 2=connected)
*/
public class WfdManager {
private static final String TAG = "MiracastEnabler/Wfd";
public static final int STATE_DISCONNECTED = 0;
public static final int STATE_CONNECTING = 1;
public static final int STATE_CONNECTED = 2;
private final DisplayManager displayManager;
public WfdManager(Context context) {
displayManager = (DisplayManager) context.getSystemService(Context.DISPLAY_SERVICE);
}
public void startScan() {
try {
Method m = DisplayManager.class.getMethod("startWifiDisplayScan");
m.invoke(displayManager);
} catch (Throwable t) {
Log.e(TAG, "startWifiDisplayScan failed", t);
}
}
public void stopScan() {
try {
Method m = DisplayManager.class.getMethod("stopWifiDisplayScan");
m.invoke(displayManager);
} catch (Throwable t) {
Log.e(TAG, "stopWifiDisplayScan failed", t);
}
}
public void connect(String address) {
try {
Method m = DisplayManager.class.getMethod("connectWifiDisplay", String.class);
m.invoke(displayManager, address);
} catch (Throwable t) {
Log.e(TAG, "connectWifiDisplay failed", t);
}
}
public void disconnect() {
try {
Method m = DisplayManager.class.getMethod("disconnectWifiDisplay");
m.invoke(displayManager);
} catch (Throwable t) {
Log.e(TAG, "disconnectWifiDisplay failed", t);
}
}
/**
* Returns the current WFD connection state:
* STATE_DISCONNECTED (0), STATE_CONNECTING (1), or STATE_CONNECTED (2)
*/
public int getConnectionState() {
try {
Object status = getWifiDisplayStatus();
if (status == null) return STATE_DISCONNECTED;
Method m = status.getClass().getMethod("getActiveDisplayState");
return (int) m.invoke(status);
} catch (Throwable t) {
Log.e(TAG, "getConnectionState failed", t);
return STATE_DISCONNECTED;
}
}
/**
* Returns the friendly name of the currently connected display, or null.
*/
public String getActiveDisplayName() {
try {
Object status = getWifiDisplayStatus();
if (status == null) return null;
Method getActive = status.getClass().getMethod("getActiveDisplay");
Object display = getActive.invoke(status);
if (display == null) return null;
Method getName = display.getClass().getMethod("getFriendlyDisplayName");
return (String) getName.invoke(display);
} catch (Throwable t) {
Log.e(TAG, "getActiveDisplayName failed", t);
return null;
}
}
/**
* Returns an array of available WifiDisplay objects, or null.
*/
public Object[] getAvailableDisplays() {
try {
Object status = getWifiDisplayStatus();
if (status == null) return null;
Method m = status.getClass().getMethod("getAvailableDisplays");
return (Object[]) m.invoke(status);
} catch (Throwable t) {
Log.e(TAG, "getAvailableDisplays failed", t);
return null;
}
}
/**
* Get the device address from a WifiDisplay object.
*/
public static String getDisplayAddress(Object wifiDisplay) {
try {
Method m = wifiDisplay.getClass().getMethod("getDeviceAddress");
return (String) m.invoke(wifiDisplay);
} catch (Throwable t) {
return null;
}
}
/**
* Get the friendly name from a WifiDisplay object.
*/
public static String getDisplayName(Object wifiDisplay) {
try {
Method m = wifiDisplay.getClass().getMethod("getFriendlyDisplayName");
return (String) m.invoke(wifiDisplay);
} catch (Throwable t) {
return null;
}
}
private Object getWifiDisplayStatus() {
try {
Method m = DisplayManager.class.getMethod("getWifiDisplayStatus");
return m.invoke(displayManager);
} catch (Throwable t) {
Log.e(TAG, "getWifiDisplayStatus failed", t);
return null;
}
}
}