1. 3772a87 Merge cherrypicks of ['googleplex-android-review.googlesource.com/25705787', 'googleplex-android-review.googlesource.com/25828251', 'googleplex-android-review.googlesource.com/25949515', 'googleplex-android-review.googlesource.com/25842163', 'googleplex-android-review.googlesource.com/25891466'] into security-aosp-tm-release. by Android Build Coastguard Worker · 11 months ago
  2. b237168 Fix security vulnerability that creates user with no restrictions when accountOptions are too long. by Tetiana Meronyk · 12 months ago
  3. a6e78a3 Stop marking apps as privileged if they are not signed properly. by Alex Buynytskyy · 12 months ago
  4. 4cefba2 isUserInLockDown can be true when there are other strong auth requirements by Beverly · 11 months ago
  5. 6806ba4 Don't store invalid pkgs when migrating filters by Julia Reynolds · 1 year ago
  6. 00032f4 RESTRICT AUTOMERGE Added limitations for attributions to handle invalid cases by Kiran Ramachandra · 1 year ago
  7. e0fda2f Merge cherrypicks of ['googleplex-android-review.googlesource.com/24112148', 'googleplex-android-review.googlesource.com/25648374', 'googleplex-android-review.googlesource.com/25715852', 'googleplex-android-review.googlesource.com/25787790'] into security-aosp-tm-release. by Android Build Coastguard Worker · 12 months ago
  8. 95a92dc Close AccountManagerService.session after timeout. by Dmitry Dementyev · 12 months ago
  9. 8e2d1dc Disallow system apps to be installed/updated as instant. by Alex Buynytskyy · 1 year ago
  10. 03b7386 Validate package names passed to the installer. by Alex Buynytskyy · 1 year, 2 months ago
  11. eccd83c Resolve custom printer icon boundary exploit. by kumarashishg · 1 year, 5 months ago
  12. 09383fb Merge cherrypicks of ['googleplex-android-review.googlesource.com/23912846', 'googleplex-android-review.googlesource.com/25101850', 'googleplex-android-review.googlesource.com/25045512', 'googleplex-android-review.googlesource.com/23265596', 'googleplex-android-review.googlesource.com/24708466', 'googleplex-android-review.googlesource.com/25387217', 'googleplex-android-review.googlesource.com/25240034', 'googleplex-android-review.googlesource.com/25240035', 'googleplex-android-review.googlesource.com/25262286'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 1 month ago
  13. 9b10fd9 Handle screen capture disabled state for multiple users by Rubin Xu · 1 year, 2 months ago
  14. a035450 AudioService: anonymize Bluetooth MAC addresses by Eric Laurent · 1 year, 3 months ago
  15. e9ad19e Refactor the SADeviceState to AdiDeviceState by Vlad Popa · 1 year, 6 months ago
  16. eb7f3a6 Enforce persisted snoozed notifications limits by Valentin Iftime · 1 year, 2 months ago
  17. 3279205 [RESTRICT AUTOMERGE] Check permission of Autofill icon URIs by Tim Yu · 1 year, 4 months ago
  18. e23bf10 Restrict activity launch when caller is running in the background by Christophe Pinelli · 1 year, 8 months ago
  19. a176edb Unbind TileService onNullBinding by Fabián Kozynski · 1 year, 3 months ago
  20. c4fa7ae DO NOT MERGE: "Hide" /Android/data|obb|sanbox/ on shared storage by Sergey Nikolaienkov · 1 year, 6 months ago
  21. 653f7b0 DO NOT MERGE Disallow Wallpaper service to launch activity from background. by Nan Wu · 2 years, 1 month ago
  22. 90881fe Merge cherrypicks of ['googleplex-android-review.googlesource.com/22621774', 'googleplex-android-review.googlesource.com/24413934', 'googleplex-android-review.googlesource.com/24664788', 'googleplex-android-review.googlesource.com/24805434', 'googleplex-android-review.googlesource.com/24665127', 'googleplex-android-review.googlesource.com/25165838', 'googleplex-android-review.googlesource.com/25096532', 'googleplex-android-review.googlesource.com/25249793'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 2 months ago
  23. 1175720 Fix vulnerability that allowed attackers to start arbitary activities by William Leshner · 1 year, 2 months ago
  24. 3fdf954 Do not allow setting notification access across users. by Evan Chen · 1 year, 2 months ago
  25. a3047b5 RESTRICT AUTOMERGE by Nan Wu · 1 year, 4 months ago
  26. 707fc94 [SB][Privacy] Fetch current active appops on startup. by Caitlin Shkuratov · 1 year, 4 months ago
  27. 9532b69 [CDM] Validate component name length before requesting notification access. by Raphael Kim · 1 year, 3 months ago
  28. 6a9250e Truncate user data to a limit of 500 characters by Tetiana Meronyk · 1 year, 4 months ago
  29. d42f8d7 DO NOT MERGE Ensure finish lockscreen when usersetup incomplete by Aaron Liu · 1 year, 5 months ago
  30. a985b63 Dismiss keyguard when simpin auth'd and... by Aaron Liu · 1 year, 9 months ago
  31. d203ccf Merge cherrypicks of ['googleplex-android-review.googlesource.com/23905843', 'googleplex-android-review.googlesource.com/23918399', 'googleplex-android-review.googlesource.com/24404277', 'googleplex-android-review.googlesource.com/20064768', 'googleplex-android-review.googlesource.com/24046929', 'googleplex-android-review.googlesource.com/24573549', 'googleplex-android-review.googlesource.com/24342145', 'googleplex-android-review.googlesource.com/23623415', 'googleplex-android-review.googlesource.com/24608667', 'googleplex-android-review.googlesource.com/24182288', 'googleplex-android-review.googlesource.com/24757286', 'googleplex-android-review.googlesource.com/24058898', 'googleplex-android-review.googlesource.com/24805388', 'googleplex-android-review.googlesource.com/22465041', 'googleplex-android-review.googlesource.com/24945646', 'googleplex-android-review.googlesource.com/24555955'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 3 months ago
  32. 1a42ae5 Check URI permissions for resumable media artwork by Beth Thibodeau · 1 year, 5 months ago
  33. f4644b5 Stop using deprecated getParcelable method in AccountManagerService. by Dmitry Dementyev · 1 year, 3 months ago
  34. b0f6558 Move startWatchingModeWithFlags to the native supported binder calls by Evan Severson · 1 year, 9 months ago
  35. 17f0869 Updated: always show the keyguard on device lockdown by Beverly Tai · 1 year, 3 months ago
  36. 9e0c05e Adding in verification of calling UID in onShellCommand by Kunal Malhotra · 1 year, 11 months ago
  37. 2510373 Revert "On device lockdown, always show the keyguard" by Beverly Tai · 1 year, 3 months ago
  38. a5e5536 Validate userId when publishing shortcuts by Pinyao Ting · 1 year, 5 months ago
  39. 0ec7b11 Use readUniqueFileDescriptor in incidentd service by Pawan Wagh · 1 year, 7 months ago
  40. ae768fb Restrict number of shortcuts can be added through addDynamicShortcuts by Pinyao Ting · 1 year, 7 months ago
  41. 1120bc7 Require permission to unlock keyguard by Marzia Favaro · 1 year, 5 months ago
  42. d21ffbe Disable priority conversation widget for secondary users by Julia Reynolds · 1 year, 5 months ago
  43. f229f0e Validate URI-based shortcut icon at creation time. by Pinyao Ting · 1 year, 6 months ago
  44. 40e4ea7 RESTRICT AUTOMERGE: Drop invalid data. by Kweku Adams · 2 years, 3 months ago
  45. fe6fef4 Visit Uris related to Notification style extras by Matías Hernández · 1 year, 5 months ago
  46. d98abee Fix bypass BAL via `requestGeofence` by Lifu Tang · 1 year, 6 months ago
  47. b7bd7df Visit Uris added by WearableExtender by Matías Hernández · 1 year, 6 months ago
  48. 51640ed Merge cherrypicks of ['googleplex-android-review.googlesource.com/24308837', 'googleplex-android-review.googlesource.com/24310393', 'googleplex-android-review.googlesource.com/23982977', 'googleplex-android-review.googlesource.com/24424817', 'googleplex-android-review.googlesource.com/24270326'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 4 months ago
  49. 35ebd43 RESTRICT AUTOMERGE Unset StrongAuthFlags when unlocking a user profile by Haining Chen · 1 year, 9 months ago
  50. 4895c85 [SettingsProvider] verify ringtone URI before setting by Songchun Fan · 1 year, 4 months ago
  51. 442b439 DO NOT MERGE Fix BAL via notification.publicVersion by Nan Wu · 1 year, 6 months ago
  52. 387d258 Use type safe API of readParcelableArray by kumarashishg · 1 year, 5 months ago
  53. 935eb5e [DO NOT MERGE] Check caller's uid in backupAgentCreated callback by Piyush Mehrotra · 1 year, 5 months ago
  54. 08f9c38 Merge cherrypicks of ['googleplex-android-review.googlesource.com/24405148'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 4 months ago
  55. 035ae46 Merge cherrypicks of ['googleplex-android-review.googlesource.com/21027430', 'googleplex-android-review.googlesource.com/23502366', 'googleplex-android-review.googlesource.com/23877018', 'googleplex-android-review.googlesource.com/23785419', 'googleplex-android-review.googlesource.com/23818219', 'googleplex-android-review.googlesource.com/23835332', 'googleplex-android-review.googlesource.com/23436487', 'googleplex-android-review.googlesource.com/24057913', 'googleplex-android-review.googlesource.com/23982566', 'googleplex-android-review.googlesource.com/24301063', 'googleplex-android-review.googlesource.com/24359722'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 5 months ago
  56. 3467e6c Revert "Dismiss keyguard when simpin auth'd and..." by Aaron Liu · 1 year, 5 months ago
  57. b72b66a Import translations. DO NOT MERGE ANYWHERE by Bill Yi · 1 year, 6 months ago
  58. ff86ff2 RESTRICT AUTOMERGE: SettingsProvider: exclude secure_frp_mode from resets by Eric Biggers · 1 year, 5 months ago
  59. 86c8421 Add userId check before loading icon in Device Controls by Anton Potapov · 1 year, 6 months ago
  60. 3287ac2d Fixing DatabaseUtils to detect malformed UTF-16 strings by Kunal Malhotra · 1 year, 7 months ago
  61. 7212a4b Disallow loading icon from content URI to PipMenu by Hongwei Wang · 1 year, 7 months ago
  62. 08becc8 [DO NOT MERGE] Verify URI Permissions in Autofill RemoteViews by Tim Yu · 1 year, 6 months ago
  63. 2d88a5c Do not share key mappings with JNI object by Josep del Rio · 1 year, 6 months ago
  64. 5a3d0c1 Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS. by Ioana Alexandru · 1 year, 8 months ago
  65. d26544e Add placeholder when media control title is blank by Beth Thibodeau · 1 year, 7 months ago
  66. 88cf23c RingtoneManager: verify default ringtone is audio by Jean-Michel Trivi · 2 years, 1 month ago
  67. 3e09cce Merge cherrypicks of ['googleplex-android-review.googlesource.com/23476871', 'googleplex-android-review.googlesource.com/23733070', 'googleplex-android-review.googlesource.com/23474146', 'googleplex-android-review.googlesource.com/23905843', 'googleplex-android-review.googlesource.com/23905120', 'googleplex-android-review.googlesource.com/23834726'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 6 months ago
  68. c1cf4b9 Improve user handling when querying for resumable media by Beth Thibodeau · 1 year, 6 months ago
  69. f810d81 Update AccountManagerService checkKeyIntentParceledCorrectly. by Dmitry Dementyev · 1 year, 6 months ago
  70. 109e58b [DO NOT MERGE] Update quickshare intent rather than recreating by Miranda Kephart · 1 year, 8 months ago
  71. 05b1ada Forbid granting access to NLSes with too-long component names by Matías Hernández · 1 year, 7 months ago
  72. 7428962 Ignore virtual presentation windows - RESTRICT AUTOMERGE by Achim Thesmann · 1 year, 7 months ago
  73. 3752277 Merge cherrypicks of ['googleplex-android-review.googlesource.com/23892525'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 6 months ago
  74. 20aedba DO NOT MERGE Revert "Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS." by Ioana Alexandru · 1 year, 6 months ago
  75. 593ee4d Merge cherrypicks of ['googleplex-android-review.googlesource.com/20321691', 'googleplex-android-review.googlesource.com/22915959', 'googleplex-android-review.googlesource.com/22599577', 'googleplex-android-review.googlesource.com/23083139', 'googleplex-android-review.googlesource.com/23031226', 'googleplex-android-review.googlesource.com/23090199', 'googleplex-android-review.googlesource.com/23327545', 'googleplex-android-review.googlesource.com/23410117', 'googleplex-android-review.googlesource.com/23210299', 'googleplex-android-review.googlesource.com/23352460', 'googleplex-android-review.googlesource.com/23386456', 'googleplex-android-review.googlesource.com/23389120', 'googleplex-android-review.googlesource.com/23473144', 'googleplex-android-review.googlesource.com/23430378', 'googleplex-android-review.googlesource.com/23449211', 'googleplex-android-review.googlesource.com/23475240', 'googleplex-android-review.googlesource.com/23439342', 'googleplex-android-review.googlesource.com/23505029'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 7 months ago
  76. e17fd14 Merge "Resolve StatusHints image exploit across user." into sc-v2-dev am: e371b3018f by Pranav Madapurmath · 1 year, 7 months ago
  77. 1272eec Remove unnecessary padding code by Lee Shombert · 1 year, 7 months ago
  78. badb243 Use Settings.System.getIntForUser instead of getInt to make sure user specific settings are used by Chandru S · 1 year, 8 months ago
  79. 0c3b7ec DO NOT MERGE Verify URI permissions in MediaMetadata by Michael Mikhail · 1 year, 7 months ago
  80. 9b58aee Visit URIs in themed remoteviews icons. by Ioana Alexandru · 1 year, 7 months ago
  81. 155b146 Check URIs in sized remote views. by Ioana Alexandru · 1 year, 7 months ago
  82. 70ec64d Update Pip launches to not enter pinned task if in background. by Hani Kazmi · 1 year, 7 months ago
  83. 49773f9 Fix PrivacyChip not visible issue by Johannes Gallmann · 1 year, 7 months ago
  84. 06e772e Validate ComponentName for MediaButtonBroadcastReceiver by Iván Budnik · 1 year, 9 months ago
  85. a654297 Implement visitUris for RemoteViews ViewGroupActionAdd. by Ioana Alexandru · 1 year, 8 months ago
  86. 726247f Check URIs in notification public version. by Ioana Alexandru · 1 year, 8 months ago
  87. e7ccba6 Preserve flags for non-runtime permissions upon package update. by Hai Zhang · 1 year, 7 months ago
  88. d18d8b3 On device lockdown, always show the keyguard by Beverly · 1 year, 8 months ago
  89. ed3f25b Ensure policy has no absurdly long strings by Pavel Grafov · 1 year, 9 months ago
  90. cb6282e Verify URI permissions for notification shortcutIcon. by Ioana Alexandru · 1 year, 8 months ago
  91. 7a5e51c Do not load drawable for wallet card if the card image icon iscreated by Silin Huang · 1 year, 9 months ago
  92. d10b27e ActivityManagerService: Allow openContentUri from vendor/system/product. by Austin Borger · 1 year, 9 months ago
  93. 5b7edbf DO NOT MERGE: ActivityManager#killBackgroundProcesses can kill caller's own app only by Jing Ji · 2 years, 2 months ago
  94. a267ee1 Merge cherrypicks of ['googleplex-android-review.googlesource.com/20219552', 'googleplex-android-review.googlesource.com/20946190', 'googleplex-android-review.googlesource.com/20460002', 'googleplex-android-review.googlesource.com/22390145', 'googleplex-android-review.googlesource.com/22616881', 'googleplex-android-review.googlesource.com/21327525', 'googleplex-android-review.googlesource.com/22621774', 'googleplex-android-review.googlesource.com/22898060', 'googleplex-android-review.googlesource.com/17738545', 'googleplex-android-review.googlesource.com/21253698', 'googleplex-android-review.googlesource.com/22787457', 'googleplex-android-review.googlesource.com/22509574', 'googleplex-android-review.googlesource.com/22895638'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 8 months ago
  95. 91bfcbb Visit URIs in landscape/portrait custom remote views. by Ioana Alexandru · 1 year, 8 months ago
  96. 1aec7fe [RESTRICT AUTOMERGE] Prevent installing apps in policy restricted work profile using ADB by Sumedh Sen · 1 year, 9 months ago
  97. 3a44806 Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS. by Ioana Alexandru · 1 year, 8 months ago
  98. fa539c8 [1-time permissions] Use internal api to check proc states by Evan Severson · 1 year, 11 months ago
  99. c00b7e7 Watch uid proc state instead of importance for 1-time permissions by Evan Severson · 2 years, 9 months ago
  100. fc1b999 Truncate ShortcutInfo Id by András Kurucz · 1 year, 8 months ago