October/November/December 2024 ASBs for crDroid 9 #1200
+389
−112
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
In some situations (see bug for details) it's possible to enter the clipboard even while the device is locked, and from there access the provided intents. Users should not be able to access intents from this state; this change adds an additional check before showing the interactive UI. The behavior is identical to what we do when user setup is not complete (b/251778420): we show a toast to note that content has been copied, but no interactive UI. Interactive UI is only blocked when device is locked (i.e. requiring pin entry/password/biometric/etc), not if the keyguard is up but trivially dismissable. Bug: 317048495 Test: atest ClipboardListenerTest; verification using steps in linked bug as well as forcing text content to appear client-side, to verify that even if text content is received in the ClipboardListener, no interactive UI appears. (cherry picked from commit 2976ca8) (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:b9ffec803b31f1b57756105c9fbfd0cb672fcfde) Merged-In: I1a48cbe64852dce3fba69915ca11dad8878f66eb Change-Id: I1a48cbe64852dce3fba69915ca11dad8878f66eb
Bug: 340239088 Test: manually verified with the PoC app Flag: EXEMPT CVE (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:9e1c31ba46178a8cfc68a2dd9984b8223f694c81) Merged-In: I12fccb572e159a73785aa33a4f5204e094ccd1b7 Change-Id: I12fccb572e159a73785aa33a4f5204e094ccd1b7
…roid-security-13.0.0_r22 Android Security 13.0.0 Release 22 (12199512) * tag 'android-security-13.0.0_r22': [RESTRICT AUTOMERGE] Check whether installerPackageName contains only valid characters Prevent Sharing when FRP enforcement is in effect Update AccountManagerService checkKeyIntent. Fail parseUri if end is missing Change-Id: Iccd749146efb9d31b6f4caba8817f07038dffe4f
Change-Id: Ied023cea1828fe754362c241166412c107d4e818
Change-Id: Ie07318055a213fc8355a9ac8197a0c92c27e6bf2
…roid-security-13.0.0_r23 Android security 13.0.0 release 23 * tag 'android-security-13.0.0_r23': Restrict access to directories RESTRICT AUTOMERGE Clear app-provided shortcut icons Disallow device admin package and protected packages to be reinstalled as instant. Set no data transfer on function switch timeout for accessory mode Check more URIs in notifications RingtoneManager: allow video ringtone URI Remove authenticator data if it was disabled. Change-Id: I06facb522f9f84cff97eb166ed3ed4f9fc282e1f
Change-Id: I62f1d9fc7c6e65b8db5425bdfbfe217d74188494
…roid-security-13.0.0_r24 Android Security 13.0.0 Release 24 (12496786) * tag 'android-security-13.0.0_r24': Properly handle onNullBinding() in appwidget service. Block clipboard UI when device is locked Conflicts: packages/SystemUI/src/com/android/systemui/clipboardoverlay/ClipboardListener.java packages/SystemUI/tests/src/com/android/systemui/clipboardoverlay/ClipboardListenerTest.java Change-Id: I5b6dc92631dfc2d7b02a8ab8958dcb9c7d5ebf90
Bug: 360807442 Test: btest a.d.c.DevicePolicyManagementRoleHolderTest (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:da522df80568c158fe30896f9a571d05556ee51a) (cherry picked from https://googleplex-android-review.googlesource.com/q/commit:085f90a604ac24e45f44301257ae8a12da0054c1) Merged-In: I023f78cef11fb7e8e9a92e2896cf94c9fcd1113b Change-Id: I023f78cef11fb7e8e9a92e2896cf94c9fcd1113b
Change-Id: I0dc3b22c09cc6de253ca383a36ef255f29b92c6d
- Spoof PackageInfo signingInfo + signatures so that G suite apps do not complain anymore. Change-Id: I86f182c9e1d18b0e997803842577a90ef740cfd1 Signed-off-by: althafvly <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.