Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
499,111 Commits 3 Branches 0 Tags
92bc1bf5eb0a53e237992335280f7467b95ee4e0
Commit Graph

499111 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
TreeHugger Robot
92bc1bf5eb [automerger skipped] Merge "Always restart apps if base.apk gets updated." into qt-dev am: 1adea76f46 am: 972089ad30 -s ours am: 9cc48f64f0 -s ours 
am skip reason: skipped by user alexbuy

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/17111536

Change-Id: Ida01ae8138ab93aa2fad64c82ccd87ee1078b4ab
 2022-03-09 19:07:06 +00:00
TreeHugger Robot
9cc48f64f0 [automerger skipped] Merge "Always restart apps if base.apk gets updated." into qt-dev am: 1adea76f46 am: 972089ad30 -s ours 
am skip reason: skipped by user alexbuy

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/17111536

Change-Id: I164a1737563abdfe143ef461d94362c1e43981bd
 2022-03-09 18:44:10 +00:00
TreeHugger Robot
f8bc3f97ed Merge "Always restart apps if base.apk gets updated." into rvc-dev am: fe30ac3f0a 
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/17112304

Change-Id: I4cca0da70a5f0bc9bd9d60b863d6b4bcbd601ab2
 2022-03-09 06:56:58 +00:00
TreeHugger Robot
c759e6a989 Merge "Verify caller before auto granting slice permission" into qt-dev am: 3d226b76c1 am: b4fb5feffc am: 12448ab311 
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/17089346

Change-Id: I3ae47b70497d8dd3e12cd69ac2e1ec1cf63cb423
 2022-03-09 06:56:06 +00:00
TreeHugger Robot
fe30ac3f0a Merge "Always restart apps if base.apk gets updated." into rvc-dev 2022-03-09 06:43:41 +00:00
TreeHugger Robot
12448ab311 Merge "Verify caller before auto granting slice permission" into qt-dev am: 3d226b76c1 am: b4fb5feffc 
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/17089346

Change-Id: I5681e619f79ff7884af2f79feaacd2e1794913a4
 2022-03-09 06:33:56 +00:00
TreeHugger Robot
972089ad30 Merge "Always restart apps if base.apk gets updated." into qt-dev am: 1adea76f46 
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/17111536

Change-Id: Ia35c96940c76b46ff5754f493e4f0c64df211483
 2022-03-09 06:21:41 +00:00
TreeHugger Robot
1adea76f46 Merge "Always restart apps if base.apk gets updated." into qt-dev 2022-03-09 06:09:58 +00:00
TreeHugger Robot
b4fb5feffc Merge "Verify caller before auto granting slice permission" into qt-dev am: 3d226b76c1 
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/17089346

Change-Id: I20932910644a9d4ca4b3a46c4e4b9f96d504adf6
 2022-03-09 06:08:50 +00:00
TreeHugger Robot
3d226b76c1 Merge "Verify caller before auto granting slice permission" into qt-dev 2022-03-09 05:41:31 +00:00
Alex Buynytskyy
52a4337a47 Always restart apps if base.apk gets updated. 
Bug: 219044664
Fixes: 219044664
Test: atest PackageManagerShellCommandTest
Change-Id: I27a0c5009b2d5f1ea51618b9acfa1e6ccee71296
Merged-In: I27a0c5009b2d5f1ea51618b9acfa1e6ccee71296
 2022-03-09 00:51:17 +00:00
Alex Buynytskyy
a5dd59db6d Always restart apps if base.apk gets updated. 
Bug: 219044664
Fixes: 219044664
Test: atest PackageManagerShellCommandTest
Change-Id: I27a0c5009b2d5f1ea51618b9acfa1e6ccee71296
Merged-In: I27a0c5009b2d5f1ea51618b9acfa1e6ccee71296
 2022-03-09 00:48:11 +00:00
TreeHugger Robot
cf13bbbc3d [automerger skipped] Merge "[DO NOT MERGE] Keyguard - Treat messsages to lock with priority" into rvc-dev am: 508167f720 -s ours 
am skip reason: Merged-In I7585a0a5eeb308e0e32a4f77f581556d883b5cda with SHA-1 563fdf4259 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16371387

Change-Id: I0ea46e642b9aa0b93bab454ce0f39df192bcb194
 2022-03-08 19:44:40 +00:00
Matt Pietal
77d8bbe5c5 [automerger skipped] [DO NOT MERGE] Keyguard - Treat messsages to lock with priority am: 21e48cf26b -s ours 
am skip reason: Merged-In I7585a0a5eeb308e0e32a4f77f581556d883b5cda with SHA-1 563fdf4259 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16371387

Change-Id: Id9c3e2bc4cd1aad42e5f021510008a8f233c869a
 2022-03-08 19:44:26 +00:00
TreeHugger Robot
508167f720 Merge "[DO NOT MERGE] Keyguard - Treat messsages to lock with priority" into rvc-dev 2022-03-08 19:20:39 +00:00
TreeHugger Robot
d4ef6e49a1 Merge "[RESTRICT AUTOMERGE] Do not resume activity if behind a translucent task" into rvc-qpr-dev 2022-03-08 04:06:49 +00:00
TreeHugger Robot
f36ed930cd [automerger skipped] Merge "[RESTRICT AUTOMERGE] Do not resume activity if behind a translucent task" into qt-dev am: 88bdf80af8 am: c0d12c6b4a -s ours am: 9d5c0bf1b1 -s ours 
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16812573

Change-Id: I50789965770642edef8730349b6e386b9587963c
 2022-03-07 09:25:46 +00:00
Jeff Chang
92e566d24f [automerger skipped] [RESTRICT AUTOMERGE] Do not resume activity if behind a translucent task am: f2d4787451 am: 72aa97e7eb -s ours am: 75ced03a04 -s ours 
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16812573

Change-Id: I3e41f8de655e5de2beae89e08a58cb27c0039358
 2022-03-07 09:25:36 +00:00
TreeHugger Robot
711b63a3ea Merge "[RESTRICT AUTOMERGE] Do not resume activity if behind a translucent task" into rvc-dev am: 057b8a994b 
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16811765

Change-Id: I7f86a6587b14f63d8e4c472de9e2d38f1892084e
 2022-03-07 09:25:16 +00:00
Jeff Chang
fc2e453887 [automerger skipped] [RESTRICT AUTOMERGE] Do not resume activity if behind a translucent task am: 43b8bcc014 -s ours 
am skip reason: skipped by user chengjeff

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16811765

Change-Id: I33edd649c842c5070e030861adb0128aa5fddc48
 2022-03-07 09:25:01 +00:00
Jeff Chang
8b7e0c52e8 [RESTRICT AUTOMERGE] Do not resume activity if behind a translucent task 
The top-focusable activity resides in the RESUMED state while the app
process is newly created and attached. The behavior may enable UI
hijacking attacks against apps implementing authentication.

This CL disallows the system to resume the activity for the case if it
is not visible or is occluded by other translucent tasks.

Bug: 211481342
Test: atest CtsWindowManagerDeviceTestCases:ActivityLifecycleTests
Change-Id: I7903494cf928b5b5613700262b7c5fff10f3c5a0
 2022-03-07 16:48:32 +08:00
TreeHugger Robot
9d5c0bf1b1 [automerger skipped] Merge "[RESTRICT AUTOMERGE] Do not resume activity if behind a translucent task" into qt-dev am: 88bdf80af8 am: c0d12c6b4a -s ours 
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16812573

Change-Id: I42e33f1e2c07b5522809cb48c09c5d8013262cf1
 2022-03-07 06:17:56 +00:00
Jeff Chang
75ced03a04 [automerger skipped] [RESTRICT AUTOMERGE] Do not resume activity if behind a translucent task am: f2d4787451 am: 72aa97e7eb -s ours 
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16812573

Change-Id: I3f8ff56668d075ae1ebd2f41ac218a00518f0d41
 2022-03-07 06:17:42 +00:00
TreeHugger Robot
c0d12c6b4a Merge "[RESTRICT AUTOMERGE] Do not resume activity if behind a translucent task" into qt-dev am: 88bdf80af8 
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16812573

Change-Id: I26265a8e10ee86d63273f8b6e8759c9e63eabc64
 2022-03-07 06:00:48 +00:00
Jeff Chang
72aa97e7eb [RESTRICT AUTOMERGE] Do not resume activity if behind a translucent task am: f2d4787451 
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16812573

Change-Id: I1e4c3d42668d5f6459f4a07436edb7ff46f3e90f
 2022-03-07 06:00:36 +00:00
TreeHugger Robot
88bdf80af8 Merge "[RESTRICT AUTOMERGE] Do not resume activity if behind a translucent task" into qt-dev 2022-03-07 05:40:46 +00:00
TreeHugger Robot
057b8a994b Merge "[RESTRICT AUTOMERGE] Do not resume activity if behind a translucent task" into rvc-dev 2022-03-07 04:32:08 +00:00
Pinyao Ting
3c92d74d7d Verify caller before auto granting slice permission 
Currently SliceManagerService#checkSlicePermission does not verify the
caller's identity. This leads to a security vulnerability because
checkSlicePermission does more than checking the permission as opposed
to simply return a boolean value -- it additionally grants slice access
under a certain condition. A malicious app can spoof the calling package
to acquire slice access.

This CL verifies the caller before granting slice access.

Bug: 208232850, 179699767
Test: manual
Change-Id: I2539c9ff5ea977c91bb58185c95280b4d533a520
Merged-In: I2539c9ff5ea977c91bb58185c95280b4d533a520
(cherry picked from commit 5bd2196c53)
 2022-03-05 05:02:49 +00:00
Julia Reynolds
3837076d84 [automerger skipped] Filter notification APIs by user am: 4d7ca1dbce -s ours am: e749344386 -s ours am: c6e84150fa -s ours 
am skip reason: skipped by user juliacr

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16873520

Change-Id: Ic580d121962d8dc16006587c1bab71e49f35aecf
 2022-03-03 00:19:11 +00:00
Julia Reynolds
c6e84150fa [automerger skipped] Filter notification APIs by user am: 4d7ca1dbce -s ours am: e749344386 -s ours 
am skip reason: skipped by user juliacr

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16873520

Change-Id: I4c10dba86fd3bd50268060f5ac96e3877f63ec07
 2022-03-02 23:56:41 +00:00
Julia Reynolds
e749344386 [automerger skipped] Filter notification APIs by user am: 4d7ca1dbce -s ours 
am skip reason: skipped by user juliacr

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16873520

Change-Id: I329ef6cde3dff1ee646f39507e3a487472948c93
 2022-03-02 23:35:43 +00:00
TreeHugger Robot
9aeec3e862 [automerger skipped] Merge "Filter notification APIs by user" into rvc-dev am: b4ed0a3467 -s ours 
am skip reason: Merged-In I2eba0a592fa33ed25e1ac3919f1b2631e5db4258 with SHA-1 24076b8571 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16873394

Change-Id: Iceacc21b04ae932509950bc99db46a63a39806a5
 2022-03-02 18:57:08 +00:00
Julia Reynolds
4372e063b7 [automerger skipped] Filter notification APIs by user am: 3456555b7c -s ours 
am skip reason: Merged-In I2eba0a592fa33ed25e1ac3919f1b2631e5db4258 with SHA-1 24076b8571 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16873394

Change-Id: I9b072cdec6c313b5e4fb43f397ff03d2978b9e55
 2022-03-02 18:57:00 +00:00
TreeHugger Robot
0ffd60007c Merge "Filter notification APIs by user" into rvc-qpr-dev 2022-03-02 18:47:09 +00:00
TreeHugger Robot
b4ed0a3467 Merge "Filter notification APIs by user" into rvc-dev 2022-03-02 18:36:08 +00:00
Vishnu Nair
b5d28939ac Drop input for toast and child surfaces am: 55c1473bf2 
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16502616

Change-Id: I5834fdb9e3559023a96cde91067bb1e988a01034
 2022-02-16 23:07:36 +00:00
Vishnu Nair
c3db8e7986 Merge "SurfaceControl: Add setDropInputMode api" into rvc-dev am: 5aa3d21693 
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16502615

Change-Id: Iaa14f9d4821db682816503421f445cc02b5d665c
 2022-02-16 19:34:31 +00:00
Vishnu Nair
55c1473bf2 Drop input for toast and child surfaces 
Toasts that do not have the trustedOverlay flag should not receive input.
These windows should not have any children, so force this hierarchy of
windows to drop all input by setting a flag on the toast window state
which will apply the DROP_INPUT flag on all windows with an input
channel. This is to prevent malicious apps from parenting surfaces with
input channels to the toast window.

Test: show toast and check if input feature flag DROP_INPUT id set via dumpsys
Bug: b/197296414

Change-Id: I316b76b685ca5030fd8aa91283555efcce4d6994
Merged-In: I316b76b685ca5030fd8aa91283555efcce4d6994
 2022-02-16 19:01:10 +00:00
Vishnu Nair
5aa3d21693 Merge "SurfaceControl: Add setDropInputMode api" into rvc-dev 2022-02-16 19:00:06 +00:00
Vishnu Nair
fad4624dd8 SurfaceControl: Add setDropInputMode api 
Introduces an API to drop input events on this SurfaceControl. This
policy will be inherited by its children. The caller must hold the
ACCESS_SURFACE_FLINGER permission.

Options include:
ALL: SurfaceControl and its children will not receive any
input regardless of whether it has a valid input channel.

These policies are used to enable features that allow for a less trusted
interaction model between apps. See the bug for more details.

Note: this backport doesn't include the oclude mode since its not
needed for the security fix.

Test: atest libgui_test InputDispatcherDropInputFeatureTest
Bug: 197296414

Merged-In: Ifcb4133306a43874e74e8fb0f42b60842daf6f25
Change-Id: Ifcb4133306a43874e74e8fb0f42b60842daf6f25
 2022-02-16 18:58:11 +00:00
Julia Reynolds
4d7ca1dbce Filter notification APIs by user 
Specifically getActiveNotifications and
getHistoricalNotifications

Test: atest NotificationManagerServiceTest
Bug: 214999128
Change-Id: I2eba0a592fa33ed25e1ac3919f1b2631e5db4258
Merged-In: I2eba0a592fa33ed25e1ac3919f1b2631e5db4258
 2022-02-16 16:46:32 +00:00
Julia Reynolds
3456555b7c Filter notification APIs by user 
Specifically getActiveNotifications and
getHistoricalNotifications

Test: atest NotificationManagerServiceTest
Bug: 214999128
Change-Id: I2eba0a592fa33ed25e1ac3919f1b2631e5db4258
Merged-In: I2eba0a592fa33ed25e1ac3919f1b2631e5db4258
 2022-02-15 03:33:34 +00:00
Julia Reynolds
24076b8571 Filter notification APIs by user 
Specifically getActiveNotifications and
getHistoricalNotifications

Test: atest NotificationManagerServiceTest
Bug: 214999128
Change-Id: I2eba0a592fa33ed25e1ac3919f1b2631e5db4258
Merged-In: I2eba0a592fa33ed25e1ac3919f1b2631e5db4258
 2022-02-15 03:33:17 +00:00
TreeHugger Robot
413b806a7c [automerger skipped] Merge "[DO NOT MERGE] Keyguard - Treat messsages to lock with priority" into pi-dev am: 5e2939bd21 -s ours am: 6a4864ee21 -s ours am: d9a89e476c -s ours am: 2a6c047393 -s ours 
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16371299

Change-Id: Ie2c4ec5f9a60a3b921681dd2b9b026e8713ad618
 2022-02-11 23:00:11 +00:00
TreeHugger Robot
2a6c047393 [automerger skipped] Merge "[DO NOT MERGE] Keyguard - Treat messsages to lock with priority" into pi-dev am: 5e2939bd21 -s ours am: 6a4864ee21 -s ours am: d9a89e476c -s ours 
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16371299

Change-Id: I7cb0e66b4c5651c28a3cf38ac94c698737e25786
 2022-02-11 22:42:38 +00:00
TreeHugger Robot
d9a89e476c [automerger skipped] Merge "[DO NOT MERGE] Keyguard - Treat messsages to lock with priority" into pi-dev am: 5e2939bd21 -s ours am: 6a4864ee21 -s ours 
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16371299

Change-Id: I910c6754829f45d012104c992bcbc2a026622c1a
 2022-02-11 22:29:13 +00:00
TreeHugger Robot
6a4864ee21 [automerger skipped] Merge "[DO NOT MERGE] Keyguard - Treat messsages to lock with priority" into pi-dev am: 5e2939bd21 -s ours 
am skip reason: subject contains skip directive

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/16371299

Change-Id: I44b5939f05d3d4bb3f7d78e79e32403de64e47f1
 2022-02-11 22:12:20 +00:00
TreeHugger Robot
5e2939bd21 Merge "[DO NOT MERGE] Keyguard - Treat messsages to lock with priority" into pi-dev 2022-02-11 21:55:06 +00:00
Matt Pietal
21e48cf26b [DO NOT MERGE] Keyguard - Treat messsages to lock with priority 
When switching users and attempting to lock the device, the sysui main
thread becomes overwhelmed with events, creating a significant lag
between the time a message is posted and processed on the main
thread. This can be dangerous when these events are critical for
security, such as calls coming from PhoneWindowManager#lockNow() that
call KeyguardViewMediator#doKeyguardTimeout(). On older devices with
slower CPUs and less memory, the delay in processing can be
significant (15 - 30s).

The result of not prioritizing these events leads to a window of time
where a guest user can switch back to the owner, and gain access to
the owner's homescreen without needing to unlock the device with the
owner's credentials.

As a mitigation, prioritize two events originating in two specific
methods to make sure the device locks as soon as possible as well as
have the system server preemptively update its local cache.

Bug: 151095871
Test: Very manual race condition - follow steps listed in bug
Change-Id: I7585a0a5eeb308e0e32a4f77f581556d883b5cda
Merged-In: I7585a0a5eeb308e0e32a4f77f581556d883b5cda
(cherry picked from commit 28c53ab8bc)
 2022-02-11 20:23:48 +00:00
Matt Pietal
563fdf4259 [DO NOT MERGE] Keyguard - Treat messsages to lock with priority 
When switching users and attempting to lock the device, the sysui main
thread becomes overwhelmed with events, creating a significant lag
between the time a message is posted and processed on the main
thread. This can be dangerous when these events are critical for
security, such as calls coming from PhoneWindowManager#lockNow() that
call KeyguardViewMediator#doKeyguardTimeout(). On older devices with
slower CPUs and less memory, the delay in processing can be
significant (15 - 30s).

The result of not prioritizing these events leads to a window of time
where a guest user can switch back to the owner, and gain access to
the owner's homescreen without needing to unlock the device with the
owner's credentials.

As a mitigation, prioritize two events originating in two specific
methods to make sure the device locks as soon as possible as well as
have the system server preemptively update its local cache.

Bug: 151095871
Test: Very manual race condition - follow steps listed in bug
Change-Id: I7585a0a5eeb308e0e32a4f77f581556d883b5cda
Merged-In: I7585a0a5eeb308e0e32a4f77f581556d883b5cda
(cherry picked from commit 28c53ab8bc)
 2022-02-11 17:04:02 +00:00