Security Patches :D#7

Open

Megh-Rana wants to merge 208 commits intoCipherOS:elevenfrom

CipherOS-Revived:eleven

Commits on May 29, 2023

Revert "wifidisplay: restrict broadcast by the proper permission"

Jimmy Chen
authored and
Megh-Rana
committed
Revert "BG-FGS-start while-in-use permission restriction improve..."

Hui Yu
authored and
Megh-Rana
committed
Fix parsing code parcelling errors

Winson
authored and
Megh-Rana
committed
Bluetooth: Fix formatting in getAlias()

Hansong Zhang
authored and
Megh-Rana
committed
Backporting the change of ag/15629060 to rvc-dev

Evan Chen
authored and
Megh-Rana
committed
TIF: fix issue of using caller-aware methods after clearCallingIdentity()

shubang
authored and
Megh-Rana
committed

Commits on Jun 6, 2023

Changed INTERACT_ACROSS_PROFILES appop to be set per UID

kholoud mohamed
authored and
Megh-Rana
committed
Revert "Revert "BG-FGS-start while-in-use permission restriction improve...""

haggertk
authored and
Megh-Rana
committed
Fix NPE on getTitle()

cnchen
authored and
Megh-Rana
committed
Fix serialization bug in GpsNavigationMessage

Yu-Han Yang
authored and
Megh-Rana
committed
Do not show the notification footer until the user is set up.

Jeff DeCew
authored and
Megh-Rana
committed
DO NOT MERGE KeyStore ChunkedStreamer must tolerate update consuming 0 bytes.

Janis Danisevskis
authored and
Megh-Rana
committed
Disallow overlays for ResolverActivity

Collin Fijalkovich
authored and
Megh-Rana
committed
Import translations. DO NOT MERGE ANYWHERE

Bill Yi
authored and
Megh-Rana
committed
Prevent apps from spamming addAccountExplicitly.

Aseem Kumar
authored and
Megh-Rana
committed
Allow forcing status bar state changes and do so when the screen turns off.

Jeff DeCew
authored and
Megh-Rana
committed
Update deletion conditions for a package's UsageStats.

Varun Shah
authored and
Megh-Rana
committed
Revert "Revert "[pm] remove old stage dirs on low storage""

schfan-1
authored and
Megh-Rana
committed
RESTRICT AUTOMERGE Remove line of code that was mistakently left in.

Dave Mankoff
authored and
Megh-Rana
committed
[DO NOT MERGE] Controls - Do not recreate intent

mpietal79
authored and
Megh-Rana
committed
DO NOT MERGE Re-implement reading/writing Throwables from/to Parcel, without

zhanghai
authored and
Megh-Rana
committed
Don't crash if default supervision profile owner is not set

Tomasz Wasilczyk
authored and
Megh-Rana
committed
Don't abandon child sessions (1/n)

JW Wang
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE] Fix the inconsistency of protection level

kjackal
authored and
Megh-Rana
committed
Check group channels for FGSes

Julia Reynolds
authored and
Megh-Rana
committed
Handle onNullBinding

Fabian Kozynski
authored and
Megh-Rana
committed
Only allow trusted overlays to specify FLAG_SLIPPERY

vishniakou
authored and
Megh-Rana
committed
Add ALLOW_SLIPPERY_TOUCHES permission

vishniakou
authored and
Megh-Rana
committed
Revert "Revert "Revert "BG-FGS-start while-in-use permission restriction improve..."""

haggertk
authored and
Megh-Rana
committed
Prevent apps from creating blocked channel groups

Julia Reynolds
authored and
Megh-Rana
committed
Restrict AdbManager broadcasts to apps with MANAGE_DEBUGGING permission.

jdd510
authored and
Megh-Rana
committed
BG-FGS-start while-in-use permission restriction improvement.

Hui Yu
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE] Add hide-non-system-overlay flag for HarmfulAppWarningActivity

Jeff Chang
authored and
Megh-Rana
committed
Filter notification APIs by user

Julia Reynolds
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE] Do not resume activity if behind a translucent task

Jeff Chang
authored and
Megh-Rana
committed
[DO NOT MERGE] Keyguard - Treat messsages to lock with priority

mpietal79
authored and
Megh-Rana
committed
Verify caller before auto granting slice permission

pinyaoting
authored and
Megh-Rana
committed
Always restart apps if base.apk gets updated.

alexbuy
authored and
Megh-Rana
committed
Update GeofenceHardwareRequestParcelable to match parcel/unparcel format.

David Christie
authored and
Megh-Rana
committed
DO NOT MERGE Add an OEM configurable limit for zen rules

Julia Reynolds
authored and
Megh-Rana
committed
Fix security hole in GateKeeperResponse

Ayush Sharma
authored and
Megh-Rana
committed
Prevent non-admin users from deleting system apps.

Oli Lan
authored and
Megh-Rana
committed
Fix NPE

JW Wang
authored and
Megh-Rana
committed
[rvc] RESTRICT AUTOMERGE Add finalizeWorkProfileProvisioning.

jscott1989
authored and
Megh-Rana
committed
limit TelecomManager#registerPhoneAccount to 10; api doc update

Thomas Stuart
authored and
Megh-Rana
committed
Disallow PAP authentication when MPPE is requested

RemiNVG
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE] StorageManagerService: don't ignore failures to prepare user storage

ebiggers
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE] UserDataPreparer: reboot to recovery if preparing user storage fails

ebiggers
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE] UserDataPreparer: reboot to recovery for system user only

ebiggers
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE] Ignore errors preparing user storage for existing users

ebiggers
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE] Log to EventLog on prepareUserStorage failure

ebiggers
authored and
Megh-Rana
committed
Crash invalid FGS notifications

Julia Reynolds
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE]Only allow system and same app to apply relinquishTaskIdentity

Jeff Chang
authored and
Megh-Rana
committed
DO NOT MERGE Suppress notifications when device enter lockdown

wenhao1006
authored and
Megh-Rana
committed
Make sure callingPackage belongs to callingUid when checking BG-FGS restrictions.

Hui Yu
authored and
Megh-Rana
committed
Clear mInterface before calling resetIkeState()

lucaslin
authored and
Megh-Rana
committed
Remove package title from notification access confirmation intent

Raphael Kim
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE]Prevent set intent on non-leaf tasks

Jeff Chang
authored and
Megh-Rana
committed
Stop using invalid URL to prevent unexpected crash

chiachangwang
authored and
Megh-Rana
committed
Only allow the system server to connect to sync adapters

Makoto Onuki
authored and
Megh-Rana
committed
Fix duplicate permission privilege escalation

Manjeet Rulhania
authored and
Megh-Rana
committed
Parcel: recycle recycles

smore-lore
authored and
Megh-Rana
committed
Remove package name from SafetyNet logs

Manjeet Rulhania
authored and
Megh-Rana
committed
Restrict getInputMethodWindowVisibleHeight

adrianroos
authored and
Megh-Rana
committed
Limit the number of concurrently snoozed notifications

Julia Reynolds
authored and
Megh-Rana
committed
Stop crashing the system on hitting the alarm limit

Suprabh Shukla
authored and
Megh-Rana
committed
Block FullScreenIntent while device is in use if notification has a silencing GroupAlertBehavior.

Jeff DeCew
authored and
Megh-Rana
committed
DO NOT MERGE - Exclude TYPE_PRIVATE_PRESENTATION app visiblity

Linus Tufvesson
authored and
Megh-Rana
committed
Store DND rule owners

Julia Reynolds
authored and
Megh-Rana
committed
Fix NPE when deleting old zen rules

Julia Reynolds
authored and
Megh-Rana
committed
Enforce zen rule limit on a package level.

Yuri Lin
authored and
Megh-Rana
committed
DO NOT MERGE

Aseem Kumar
authored and
Megh-Rana
committed
switch TelecomManager List getters to ParceledListSlice

Thomas Stuart
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE] Do not send new Intent to non-exported activity when navigateUpTo

Louis Chang
authored and
Megh-Rana
committed
Do not send AccessibilityEvent if notification is for different user.

Daniel-Norman
authored and
Megh-Rana
committed
DO NOT MERGE Fix auto-grant of AR runtime permission if device is upgrading from pre-Q

Ganesh Olekar
authored and
Megh-Rana
committed
Check rule package name in ZenModeHelper.addAutomaticRule

Yuri Lin
authored and
Megh-Rana
committed
Trim any long string inputs that come in to AutomaticZenRule

Yuri Lin
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE] Check permission for VoiceInteraction

Ivan Chiang
authored and
Megh-Rana
committed
Fix system zen rules by using owner package name if caller is system

Yuri Lin
authored and
Megh-Rana
committed
[DO NOT MERGE] Do not dismiss keyguard after SIM PUK unlock

mpietal79
authored and
Megh-Rana
committed
Change InputWindowInfo::isTrustedOverlay() to be permission and flag based

lzye
authored and
Megh-Rana
committed
Add mechanism for a task's windows to be trusted overlays

Winson Chung
authored and
Megh-Rana
committed
DO NOT MERGE: Revert "Map TYPE_TRUSTED_APPLICATION_OVERLAY to system window type for A11y"

Winson Chung
authored and
Megh-Rana
committed
SurfaceControl: Add setDropInputMode api

Vishnu Nair
authored and
Megh-Rana
committed
Drop input for toast and child surfaces

Vishnu Nair
authored and
Megh-Rana
committed
Revert "Prevent non-admin users from deleting system apps."

Oli Lan
authored and
Megh-Rana
committed
Limit the size of NotificationChannel and NotificationChannelGroup

Julia Reynolds
authored and
Megh-Rana
committed
Prevent non-admin users from deleting system apps.

Oli Lan
authored and
Megh-Rana
committed
Include all enabled services when FEEDBACK_ALL_MASK.

Daniel-Norman
authored and
Megh-Rana
committed
[pm] forbid deletion of protected packages

schfan-1
authored and
Megh-Rana
committed
Fix NPE

Julia Reynolds
authored and
Megh-Rana
committed
Fix a security issue in app widget service.

pinyaoting
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE] Allow activity to be reparent while allowTaskReparenting is applied

Jeff Chang
authored and
Megh-Rana
committed
[DO NOT MERGE] Update window with FLAG_SECURE when bouncer is showing

mpietal79
authored and
Megh-Rana
committed
[Do Not Merge] Ignore malformed shortcuts

pinyaoting
authored and
Megh-Rana
committed
[DO NOT MERGE] Fix permanent denial of service via setComponentEnabledSetting

Rhed Jao
authored and
Megh-Rana
committed
Add safety checks on KEY_INTENT mismatch.

haok-ggl
authored and
Megh-Rana
committed
Validate package name passed to setApplicationRestrictions.

Oli Lan
authored and
Megh-Rana
committed
[DO NOT MERGE] Revert "Check rule package name in ZenModeHelper.addAutomaticRule"

Yuri Lin
authored and
Megh-Rana
committed
[DO NOT MERGE] Revert "Fix system zen rules by using owner package name if caller is system"

Yuri Lin
authored and
Megh-Rana
committed
Limit lengths of fields in Condition to a max length.

Yuri Lin
authored and
Megh-Rana
committed
Limit length and number of MIME types you can set

William Loh
authored and
Megh-Rana
committed
Disable all A11yServices from an uninstalled package.

Daniel-Norman
authored and
Megh-Rana
committed
[DO NOT MERGE] Fix conditionId string trimming in AutomaticZenRule

Yuri Lin
authored and
Megh-Rana
committed
RESTRICT AUTOMERGE Validate permission tree size on permission update

Nate Myren
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE] Trim the activity info of another uid if no privilege

Louis Chang
authored and
Megh-Rana
committed
RESTRICT AUTOMERGE Revoke SYSTEM_ALERT_WINDOW on upgrade past api 23

Nate Myren
authored and
Megh-Rana
committed
Add protections against queueing a UsbRequest when the underlying UsbDeviceConnection is closed.

Khoa Hong
authored and
Megh-Rana
committed
Fix sharing to another profile where an app has multiple targets

Liahav Eitan
authored and
Megh-Rana
committed
Ensure that only SysUI can override pending intent launch flags

Winson Chung
authored and
Megh-Rana
committed
Make Activites touch opaque - DO NOT MERGE

Linus Tufvesson
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE] Correct the behavior of ACTION_PACKAGE_DATA_CLEARED

kjackal
authored and
Megh-Rana
committed
Convert argument to intent in ChooseTypeAndAccountActivity

Dmitry Dementyev
authored and
Megh-Rana
committed
Use rule package name in addAutomaticZenRule; specify "android" for all system apps

Yuri Lin
authored and
Megh-Rana
committed
Revert "[RESTRICT AUTOMERGE] Trim the activity info of another uid if no privilege"

Louis Chang
authored and
Megh-Rana
committed
Move service initialization

Julia Reynolds
authored and
Megh-Rana
committed
Stop managed profile owner granting READ_SMS

acjohnstong
authored and
Megh-Rana
committed
Enable user graularity for lockdown mode

wenhao1006
authored and
Megh-Rana
committed
RESTRICT AUTOMERGE Revoke dev perm if app is upgrading to post 23 and perm has pre23 flag

Nate Myren
authored and
Megh-Rana
committed
Reconcile WorkSource parcel and unparcel code.

Michael Wright
authored and
Megh-Rana
committed
Revert "Ensure that only SysUI can override pending intent launch flags"

Winson Chung
authored and
Megh-Rana
committed
Checking if package belongs to UID before registering broadcast receiver

Kunal Malhotra
authored and
Megh-Rana
committed
Fix checkKeyIntentParceledCorrectly's bypass

haok-ggl
authored and
Megh-Rana
committed
Encode Intent scheme when serializing to URI string RESTRICT AUTOMERGE

Winson Chiu
authored and
Megh-Rana
committed
[DO NOT MERGE] Backport BAL restrictions from S to R, this blocks apps from using Alarm

Christophe Pinelli
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE] Strip part of the activity info of another uid if no privilege

Louis Chang
authored and
Megh-Rana
committed
Add a limit on channel group creation

Julia Reynolds
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE] Fix bypass BG-FGS and BAL via package manager APIs

Rhed Jao
authored and
Megh-Rana
committed
Revert "Make Activites touch opaque - DO NOT MERGE"

jwdunlap
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE][pm] prevent system app downgrades of versions lower than preload

schfan-1
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE][pm] still allow debuggable for system app downgrades

schfan-1
authored and
Megh-Rana
committed
Checks if AccessibilityServiceInfo is within parcelable size.

Daniel-Norman
authored and
Megh-Rana
committed
Uri: check authority and scheme as part of determining URI path

ohodson
authored and
Megh-Rana
committed
enforce stricter rules when registering phoneAccounts

Thomas Stuart
authored and
Megh-Rana
committed
Make Activites touch opaque - DO NOT MERGE

Linus Tufvesson
authored and
Megh-Rana
committed
Trim strings added to persistent snoozed notification storage.

Ioana Alexandru
authored and
Megh-Rana
committed
Limit the number of shortcuts per app that can be retained by system

pinyaoting
authored and
Megh-Rana
committed
Fix WindowInputTests#testOverlapWindow failing (1/2)

arthurhung
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE] [SettingsProvider] mem limit should be checked before settings are updated

schfan-1
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE][SettingsProvider] key size limit for mutating settings

schfan-1
authored and
Megh-Rana
committed

Commits on Jun 12, 2023

Prevent sharesheet from previewing unowned URIs

Mark Renouf
authored and
Megh-Rana
committed
[DO NOT MERGE] Wait for preloading images to complete before inflating notifications

Valentin Iftime
authored and
Megh-Rana
committed
[DO NOT MERGE] Prevent RemoteViews crashing SystemUi

Valentin Iftime
authored and
Megh-Rana
committed
Check key intent for selectors and prohibited flags

g-brnlee
authored and
Megh-Rana
committed
Handle invalid data during job loading.

kwadkore
authored and
Megh-Rana
committed
Allow filtering of services

Julia Reynolds
authored and
Megh-Rana
committed
Enforce DevicePolicyManager.setUserControlDisabledPackages in AppStandbyController

acjohnstong
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE] Add BubbleMetadata detection to block FSI

Jeff DeCew
authored and
Megh-Rana
committed
Remove Activity if it enters PiP without window

hwwang-google
authored and
Megh-Rana
committed

Commits on Jul 14, 2023

Passpoint Add more check to limit the config size

Nate(Qiang) Jiang
authored and
Megh-Rana
committed
Sanitize VPN label to prevent HTML injection

Lucas Lin
authored and
Megh-Rana
committed
Limit the number of supported v1 and v2 signers

mpgroover
authored and
Megh-Rana
committed

Commits on Jul 16, 2023

DO NOT MERGE: Add size check on PPS#policy

Nate(Qiang) Jiang
authored and
Megh-Rana
committed
DO NOT MERGE: Limit the ServiceFriendlyNames

Nate(Qiang) Jiang
authored and
Megh-Rana
committed
Only allow NEW_TASK flag when adjusting pending intents

Winson Chung
authored and
Megh-Rana
committed
DO NOT MERGE Dismiss keyguard when simpin auth'd and...

Aaron Liu
authored and
Megh-Rana
committed
DO NOT MERGE Increase notification channel limit.

Ioana Alexandru
authored and
Megh-Rana
committed
Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS.

Ioana Alexandru
authored and
Megh-Rana
committed
Truncate ShortcutInfo Id

András Kurucz
authored and
Megh-Rana
committed
Visit URIs in landscape/portrait custom remote views.

Ioana Alexandru
authored and
Megh-Rana
committed

Commits on Oct 9, 2023

DO NOT MERGE: ActivityManager#killBackgroundProcesses can kill caller's own app only

Jing Ji
authored and
Megh-Rana
committed
ActivityManagerService: Allow openContentUri from vendor/system/product.

gborgera2
authored and
Megh-Rana
committed
Verify URI permissions for notification shortcutIcon.

Ioana Alexandru
authored and
Megh-Rana
committed
On device lockdown, always show the keyguard

Beverly
authored and
Megh-Rana
committed
Ensure policy has no absurdly long strings

Pavel Grafov
authored and
Megh-Rana
committed
Implement visitUris for RemoteViews ViewGroupActionAdd.

Ioana Alexandru
authored and
Megh-Rana
committed
Check URIs in notification public version.

Ioana Alexandru
authored and
Megh-Rana
committed
Verify URI permissions in MediaMetadata

Michael Mikhail
authored and
Megh-Rana
committed
Use Settings.System.getIntForUser instead of getInt to make sure user specific settings are used

chandrusekar47
authored and
Megh-Rana
committed
Resolve StatusHints image exploit across user.

Pranav Madapurmath
authored and
Megh-Rana
committed
DO NOT MERGE Revert "Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS."

Ioana Alexandru
authored and
Megh-Rana
committed
DO NOT MERGE Grant carrier privileges if package has carrier config access.

Aishwarya Mallampati
authored and
Megh-Rana
committed
Ignore virtual presentation windows - RESTRICT AUTOMERGE

Achim Thesmann
authored and
Megh-Rana
committed
Forbid granting access to NLSes with too-long component names

Matías Hernández
authored and
Megh-Rana
committed
Update AccountManagerService checkKeyIntentParceledCorrectly.

Dmitry Dementyev
authored and
Megh-Rana
committed
Improve user handling when querying for resumable media

Beth Thibodeau
authored and
Megh-Rana
committed
RingtoneManager: verify default ringtone is audio

jmtrivi
authored and
Megh-Rana
committed
Add placeholder when media control title is blank

Beth Thibodeau
authored and
Megh-Rana
committed
Import translations. DO NOT MERGE ANYWHERE

Bill Yi
authored and
Megh-Rana
committed
Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS.

Ioana Alexandru
authored and
Megh-Rana
committed
Do not share key mappings with JNI object

Josep del Rio
authored and
Megh-Rana
committed
[DO NOT MERGE] Verify URI Permissions in Autofill RemoteViews

Tim Yu
authored and
Megh-Rana
committed
Fix KCM key mapping cloning

Josep del Rio
authored and
Megh-Rana
committed
Disallow loading icon from content URI to PipMenu

hwwang-google
authored and
Megh-Rana
committed
Fixing DatabaseUtils to detect malformed UTF-16 strings

Kunal Malhotra
authored and
Megh-Rana
committed
Add userId check before loading icon in Device Controls

Anton Potapov
authored and
Megh-Rana
committed
RESTRICT AUTOMERGE: SettingsProvider: exclude secure_frp_mode from resets

ebiggers
authored and
Megh-Rana
committed
[RESTRICT AUTOMERGE] Ignore small source rect hint

hwwang-google
authored and
Megh-Rana
committed
Revert "DO NOT MERGE Dismiss keyguard when simpin auth'd and..."

Aaron Liu
authored and
Megh-Rana
committed

Commits on Dec 1, 2023

DO NOT MERGE Fix BAL via notification.publicVersion

Nan Wu
authored and
Megh-Rana
committed
[DO NOT MERGE] Check caller's uid in backupAgentCreated callback

piee199
authored and
Megh-Rana
committed
Use type safe API of readParcelableArray

199ashish
authored and
Megh-Rana
committed
RESTRICT AUTOMERGE Make log reader thread a class member

Vova Sharaienko
authored and
Megh-Rana
committed
[SettingsProvider] verify ringtone URI before setting

schfan-1
authored and
Megh-Rana
committed

Commits on Dec 18, 2023

Visit Uris added by WearableExtender

Matías Hernández
authored and
Megh-Rana
committed
Fix bypass BAL via `requestGeofence`

Lifu Tang
authored and
Megh-Rana
committed
Visit Uris related to Notification style extras

Matías Hernández
authored and
Megh-Rana
committed
RESTRICT AUTOMERGE: Drop invalid data.

kwadkore
authored and
Megh-Rana
committed
Validate URI-based shortcut icon at creation time.

pinyaoting
authored and
Megh-Rana
committed
Require permission to unlock keyguard

Marzia Favaro
authored and
Megh-Rana
committed
Restrict number of shortcuts can be added through addDynamicShortcuts

pinyaoting
authored and
Megh-Rana
committed
Use readUniqueFileDescriptor in incidentd service

waghpawan
authored and
Megh-Rana
committed
Validate userId when publishing shortcuts

pinyaoting
authored and
Megh-Rana
committed
Revert "On device lockdown, always show the keyguard"

Beverly Tai
authored and
Megh-Rana
committed
Adding in verification of calling UID in onShellCommand

Kunal Malhotra
authored and
Megh-Rana
committed
Updated: always show the keyguard on device lockdown

Beverly Tai
authored and
Megh-Rana
committed
RESTRICT AUTOMERGE: Check URI permissions for resumable media artwork

Beth Thibodeau
authored and
Megh-Rana
committed