This repository was archived by the owner on Jan 4, 2025. It is now read-only.

Q_asb_2024-07#2

Open

omansh-krishn wants to merge 26 commits intoResurrectionRemix-Revived:Qfrom

omansh-krishn:Q

Commits on Aug 4, 2024

Resolve custom printer icon boundary exploit.

199ashish
authored and
omansh-krishn
committed
Add PackageInstaller SessionParams restrictions

Winson
authored and
omansh-krishn
committed
Validate package names passed to the installer.

alexbuy
authored and
omansh-krishn
committed
Disallow system apps to be installed/updated as instant.

alexbuy
authored and
omansh-krishn
committed
Close AccountManagerService.session after timeout.

Dmitry Dementyev
authored and
omansh-krishn
committed
isUserInLockDown can be true when there are other strong auth requirements

Beverly
authored and
omansh-krishn
committed
Fix security vulnerability that creates user with no restrictions when accountOptions are too long.

Tetiana Meronyk
authored and
omansh-krishn
committed

Commits on Aug 6, 2024

[BACKPORT] Prioritize system toasts

Valentin Iftime
authored and
omansh-krishn
committed
Don't try to show the current toast again while it's showing.

jtomljanovic
authored and
omansh-krishn
committed
DO NOT MERGE: ActivityManager#killBackgroundProcesses can kill caller's own app only

Jing Ji
authored and
omansh-krishn
committed
DO NOT MERGE: Fix ActivityManager#killBackgroundProcesses permissions

Jing Ji
authored and
omansh-krishn
committed
Verify URI permission for channel sound update from NotificationListenerService

Valentin Iftime
authored and
omansh-krishn
committed
Added throttle when reporting shortcut usage

pinyaoting
authored and
omansh-krishn
committed
Prevend user spoofing in isRequestPinItemSupported

pinyaoting
authored and
omansh-krishn
committed
Check for NLS bind permission when rebinding services

Valentin Iftime
authored and
omansh-krishn
committed
Fix error handling for non-dynamic permissions

Yi-an Chen
authored and
omansh-krishn
committed
Add more checkKeyIntent checks to AccountManagerService.

Dmitry Dementyev
authored and
omansh-krishn
committed
[DO NOT MERGE][Autofill Framework] Add in check for intent filter when

haoranzhang-beep
authored and
omansh-krishn
committed
Check hidden API exemptions

hboehm
authored and
omansh-krishn
committed
Add StatusBarNotification::getNormalizedUserId

Julia Reynolds
authored and
omansh-krishn
committed
Add Context.createContextAsUser()

Makoto Onuki
authored and
omansh-krishn
committed
Explicitly take flags in createContextAsUser()

Makoto Onuki
authored and
omansh-krishn
committed
Resolve message/conversation image Uris with the correct user id

Matías Hernández
authored and
omansh-krishn
committed
[RESTRICT AUTOMERGE] AccessibilityManagerService: remove uninstalled services from enabled list after service update.

ameerarmaly
authored and
omansh-krishn
committed
[BACKPORT] Verify UID of incoming Zygote connections.

Martijn Coenen
authored and
omansh-krishn
committed
Fix security vulnerability of non-dynamic permission removal

Yi-an Chen
authored and
omansh-krishn
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Q_asb_2024-07#2

Q_asb_2024-07#2
omansh-krishn wants to merge 26 commits intoResurrectionRemix-Revived:Qfrom
omansh-krishn:Q

Commits on Aug 4, 2024

Resolve custom printer icon boundary exploit.

Add PackageInstaller SessionParams restrictions

Validate package names passed to the installer.

Disallow system apps to be installed/updated as instant.

Close AccountManagerService.session after timeout.

isUserInLockDown can be true when there are other strong auth requirements

Fix security vulnerability that creates user with no restrictions when accountOptions are too long.

Commits on Aug 6, 2024

[BACKPORT] Prioritize system toasts

Don't try to show the current toast again while it's showing.

DO NOT MERGE: ActivityManager#killBackgroundProcesses can kill caller's own app only

DO NOT MERGE: Fix ActivityManager#killBackgroundProcesses permissions

Verify URI permission for channel sound update from NotificationListenerService

Added throttle when reporting shortcut usage

Prevend user spoofing in isRequestPinItemSupported

Check for NLS bind permission when rebinding services

Fix error handling for non-dynamic permissions

Add more checkKeyIntent checks to AccountManagerService.

[DO NOT MERGE][Autofill Framework] Add in check for intent filter when

Check hidden API exemptions

Add StatusBarNotification::getNormalizedUserId

Add Context.createContextAsUser()

Explicitly take flags in createContextAsUser()

Resolve message/conversation image Uris with the correct user id

[RESTRICT AUTOMERGE] AccessibilityManagerService: remove uninstalled services from enabled list after service update.

[BACKPORT] Verify UID of incoming Zygote connections.

Fix security vulnerability of non-dynamic permission removal