- a038841 Verify UID of incoming Zygote connections. by Martijn Coenen · 10 months ago
- 10aaf9a Fix security vulnerability of non-dynamic permission removal by Yi-an Chen · 8 months ago
- d6271c2 Fix security vulnerability allowing apps to start from background by Bishoy Gendy · 9 months ago
- e6c33e1 [PM] Send ACTION_PACKAGE_CHANGED when mimeGroups are changed by Ivan Chiang · 9 months ago
- fad3e27 Merge cherrypicks of ['googleplex-android-review.googlesource.com/25603480', 'googleplex-android-review.googlesource.com/26230695', 'googleplex-android-review.googlesource.com/26482549', 'googleplex-android-review.googlesource.com/26307234', 'googleplex-android-review.googlesource.com/26389309', 'googleplex-android-review.googlesource.com/26151073', 'googleplex-android-review.googlesource.com/26720245', 'googleplex-android-review.googlesource.com/26739898', 'googleplex-android-review.googlesource.com/26686523', 'googleplex-android-review.googlesource.com/26721087', 'googleplex-android-review.googlesource.com/26801741', 'googleplex-android-review.googlesource.com/26700367', 'googleplex-android-review.googlesource.com/26709088'] into security-aosp-tm-release. by Android Build Coastguard Worker · 9 months ago
- 7f4ba31 [RESTRICT AUTOMERGE] AccessibilityManagerService: remove uninstalled services from enabled list after service update. by Ameer Armaly · 10 months ago
- 0cf33ab Resolve message/conversation image Uris with the correct user id by Matías Hernández · 9 months ago
- e0d80b7 [CDM][CMD] Check permissions for CDM shell commands by Guojing Yuan · 1 year ago
- 6859539 Check hidden API exemptions by Hans Boehm · 12 months ago
- 51eecc3 Update media visibility on lock screen by Beth Thibodeau · 9 months ago
- 0c171d3 [DO NOT MERGE][Autofill Framework] Add in check for intent filter when by Haoran Zhang · 10 months ago
- f49d743 Add more checkKeyIntent checks to AccountManagerService. by Dmitry Dementyev · 9 months ago
- b75bb48 Hide window immediately if itself doesn't run hide animation by Riddle Hsu · 11 months ago
- 17dd112 Fix vulnerability in AttributionSource due to incorrect Binder call by Lokesh Kumar Goel · 10 months ago
- a724561 Fix error handling for non-dynamic permissions by Yi-an Chen · 10 months ago
- 9190962 Check for NLS bind permission when rebinding services by Valentin Iftime · 10 months ago
- c469a0d Verify URI permission for channel sound update from NotificationListenerService by Valentin Iftime · 11 months ago
- 2bc89d4 Added throttle when reporting shortcut usage by Pinyao Ting · 1 year, 1 month ago
- 8af2c4d2 Merge cherrypicks of ['googleplex-android-review.googlesource.com/26599510', 'googleplex-android-review.googlesource.com/26599511'] into security-aosp-tm-release. by Android Build Coastguard Worker · 10 months ago
- a25615a Revert "Refactor the SADeviceState to AdiDeviceState" by Eric Laurent · 10 months ago
- 090485d Revert "AudioService: anonymize Bluetooth MAC addresses" by Eric Laurent · 10 months ago
- 2744697 Merge cherrypicks of ['googleplex-android-review.googlesource.com/25102281'] into security-aosp-tm-release. by Android Build Coastguard Worker · 10 months ago
- 84d7b63 Prioritize system toasts by Valentin Iftime · 1 year, 2 months ago
- 3772a87 Merge cherrypicks of ['googleplex-android-review.googlesource.com/25705787', 'googleplex-android-review.googlesource.com/25828251', 'googleplex-android-review.googlesource.com/25949515', 'googleplex-android-review.googlesource.com/25842163', 'googleplex-android-review.googlesource.com/25891466'] into security-aosp-tm-release. by Android Build Coastguard Worker · 11 months ago
- b237168 Fix security vulnerability that creates user with no restrictions when accountOptions are too long. by Tetiana Meronyk · 12 months ago
- a6e78a3 Stop marking apps as privileged if they are not signed properly. by Alex Buynytskyy · 12 months ago
- 4cefba2 isUserInLockDown can be true when there are other strong auth requirements by Beverly · 11 months ago
- 6806ba4 Don't store invalid pkgs when migrating filters by Julia Reynolds · 1 year ago
- 00032f4 RESTRICT AUTOMERGE Added limitations for attributions to handle invalid cases by Kiran Ramachandra · 1 year ago
- e0fda2f Merge cherrypicks of ['googleplex-android-review.googlesource.com/24112148', 'googleplex-android-review.googlesource.com/25648374', 'googleplex-android-review.googlesource.com/25715852', 'googleplex-android-review.googlesource.com/25787790'] into security-aosp-tm-release. by Android Build Coastguard Worker · 12 months ago
- 95a92dc Close AccountManagerService.session after timeout. by Dmitry Dementyev · 12 months ago
- 8e2d1dc Disallow system apps to be installed/updated as instant. by Alex Buynytskyy · 1 year ago
- 03b7386 Validate package names passed to the installer. by Alex Buynytskyy · 1 year, 2 months ago
- eccd83c Resolve custom printer icon boundary exploit. by kumarashishg · 1 year, 5 months ago
- 09383fb Merge cherrypicks of ['googleplex-android-review.googlesource.com/23912846', 'googleplex-android-review.googlesource.com/25101850', 'googleplex-android-review.googlesource.com/25045512', 'googleplex-android-review.googlesource.com/23265596', 'googleplex-android-review.googlesource.com/24708466', 'googleplex-android-review.googlesource.com/25387217', 'googleplex-android-review.googlesource.com/25240034', 'googleplex-android-review.googlesource.com/25240035', 'googleplex-android-review.googlesource.com/25262286'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 1 month ago
- 9b10fd9 Handle screen capture disabled state for multiple users by Rubin Xu · 1 year, 2 months ago
- a035450 AudioService: anonymize Bluetooth MAC addresses by Eric Laurent · 1 year, 3 months ago
- e9ad19e Refactor the SADeviceState to AdiDeviceState by Vlad Popa · 1 year, 6 months ago
- eb7f3a6 Enforce persisted snoozed notifications limits by Valentin Iftime · 1 year, 2 months ago
- 3279205 [RESTRICT AUTOMERGE] Check permission of Autofill icon URIs by Tim Yu · 1 year, 4 months ago
- e23bf10 Restrict activity launch when caller is running in the background by Christophe Pinelli · 1 year, 8 months ago
- a176edb Unbind TileService onNullBinding by Fabián Kozynski · 1 year, 2 months ago
- c4fa7ae DO NOT MERGE: "Hide" /Android/data|obb|sanbox/ on shared storage by Sergey Nikolaienkov · 1 year, 6 months ago
- 653f7b0 DO NOT MERGE Disallow Wallpaper service to launch activity from background. by Nan Wu · 2 years, 1 month ago
- 90881fe Merge cherrypicks of ['googleplex-android-review.googlesource.com/22621774', 'googleplex-android-review.googlesource.com/24413934', 'googleplex-android-review.googlesource.com/24664788', 'googleplex-android-review.googlesource.com/24805434', 'googleplex-android-review.googlesource.com/24665127', 'googleplex-android-review.googlesource.com/25165838', 'googleplex-android-review.googlesource.com/25096532', 'googleplex-android-review.googlesource.com/25249793'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 2 months ago
- 1175720 Fix vulnerability that allowed attackers to start arbitary activities by William Leshner · 1 year, 2 months ago
- 3fdf954 Do not allow setting notification access across users. by Evan Chen · 1 year, 2 months ago
- a3047b5 RESTRICT AUTOMERGE by Nan Wu · 1 year, 4 months ago
- 707fc94 [SB][Privacy] Fetch current active appops on startup. by Caitlin Shkuratov · 1 year, 4 months ago
- 9532b69 [CDM] Validate component name length before requesting notification access. by Raphael Kim · 1 year, 3 months ago
- 6a9250e Truncate user data to a limit of 500 characters by Tetiana Meronyk · 1 year, 4 months ago
- d42f8d7 DO NOT MERGE Ensure finish lockscreen when usersetup incomplete by Aaron Liu · 1 year, 5 months ago
- a985b63 Dismiss keyguard when simpin auth'd and... by Aaron Liu · 1 year, 9 months ago
- d203ccf Merge cherrypicks of ['googleplex-android-review.googlesource.com/23905843', 'googleplex-android-review.googlesource.com/23918399', 'googleplex-android-review.googlesource.com/24404277', 'googleplex-android-review.googlesource.com/20064768', 'googleplex-android-review.googlesource.com/24046929', 'googleplex-android-review.googlesource.com/24573549', 'googleplex-android-review.googlesource.com/24342145', 'googleplex-android-review.googlesource.com/23623415', 'googleplex-android-review.googlesource.com/24608667', 'googleplex-android-review.googlesource.com/24182288', 'googleplex-android-review.googlesource.com/24757286', 'googleplex-android-review.googlesource.com/24058898', 'googleplex-android-review.googlesource.com/24805388', 'googleplex-android-review.googlesource.com/22465041', 'googleplex-android-review.googlesource.com/24945646', 'googleplex-android-review.googlesource.com/24555955'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 3 months ago
- 1a42ae5 Check URI permissions for resumable media artwork by Beth Thibodeau · 1 year, 5 months ago
- f4644b5 Stop using deprecated getParcelable method in AccountManagerService. by Dmitry Dementyev · 1 year, 3 months ago
- b0f6558 Move startWatchingModeWithFlags to the native supported binder calls by Evan Severson · 1 year, 9 months ago
- 17f0869 Updated: always show the keyguard on device lockdown by Beverly Tai · 1 year, 3 months ago
- 9e0c05e Adding in verification of calling UID in onShellCommand by Kunal Malhotra · 1 year, 11 months ago
- 2510373 Revert "On device lockdown, always show the keyguard" by Beverly Tai · 1 year, 3 months ago
- a5e5536 Validate userId when publishing shortcuts by Pinyao Ting · 1 year, 5 months ago
- 0ec7b11 Use readUniqueFileDescriptor in incidentd service by Pawan Wagh · 1 year, 7 months ago
- ae768fb Restrict number of shortcuts can be added through addDynamicShortcuts by Pinyao Ting · 1 year, 7 months ago
- 1120bc7 Require permission to unlock keyguard by Marzia Favaro · 1 year, 5 months ago
- d21ffbe Disable priority conversation widget for secondary users by Julia Reynolds · 1 year, 5 months ago
- f229f0e Validate URI-based shortcut icon at creation time. by Pinyao Ting · 1 year, 6 months ago
- 40e4ea7 RESTRICT AUTOMERGE: Drop invalid data. by Kweku Adams · 2 years, 3 months ago
- fe6fef4 Visit Uris related to Notification style extras by Matías Hernández · 1 year, 5 months ago
- d98abee Fix bypass BAL via `requestGeofence` by Lifu Tang · 1 year, 6 months ago
- b7bd7df Visit Uris added by WearableExtender by Matías Hernández · 1 year, 6 months ago
- 51640ed Merge cherrypicks of ['googleplex-android-review.googlesource.com/24308837', 'googleplex-android-review.googlesource.com/24310393', 'googleplex-android-review.googlesource.com/23982977', 'googleplex-android-review.googlesource.com/24424817', 'googleplex-android-review.googlesource.com/24270326'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 4 months ago
- 35ebd43 RESTRICT AUTOMERGE Unset StrongAuthFlags when unlocking a user profile by Haining Chen · 1 year, 9 months ago
- 4895c85 [SettingsProvider] verify ringtone URI before setting by Songchun Fan · 1 year, 4 months ago
- 442b439 DO NOT MERGE Fix BAL via notification.publicVersion by Nan Wu · 1 year, 6 months ago
- 387d258 Use type safe API of readParcelableArray by kumarashishg · 1 year, 5 months ago
- 935eb5e [DO NOT MERGE] Check caller's uid in backupAgentCreated callback by Piyush Mehrotra · 1 year, 5 months ago
- 08f9c38 Merge cherrypicks of ['googleplex-android-review.googlesource.com/24405148'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 4 months ago
- 035ae46 Merge cherrypicks of ['googleplex-android-review.googlesource.com/21027430', 'googleplex-android-review.googlesource.com/23502366', 'googleplex-android-review.googlesource.com/23877018', 'googleplex-android-review.googlesource.com/23785419', 'googleplex-android-review.googlesource.com/23818219', 'googleplex-android-review.googlesource.com/23835332', 'googleplex-android-review.googlesource.com/23436487', 'googleplex-android-review.googlesource.com/24057913', 'googleplex-android-review.googlesource.com/23982566', 'googleplex-android-review.googlesource.com/24301063', 'googleplex-android-review.googlesource.com/24359722'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 5 months ago
- 3467e6c Revert "Dismiss keyguard when simpin auth'd and..." by Aaron Liu · 1 year, 5 months ago
- b72b66a Import translations. DO NOT MERGE ANYWHERE by Bill Yi · 1 year, 6 months ago
- ff86ff2 RESTRICT AUTOMERGE: SettingsProvider: exclude secure_frp_mode from resets by Eric Biggers · 1 year, 5 months ago
- 86c8421 Add userId check before loading icon in Device Controls by Anton Potapov · 1 year, 6 months ago
- 3287ac2d Fixing DatabaseUtils to detect malformed UTF-16 strings by Kunal Malhotra · 1 year, 7 months ago
- 7212a4b Disallow loading icon from content URI to PipMenu by Hongwei Wang · 1 year, 7 months ago
- 08becc8 [DO NOT MERGE] Verify URI Permissions in Autofill RemoteViews by Tim Yu · 1 year, 6 months ago
- 2d88a5c Do not share key mappings with JNI object by Josep del Rio · 1 year, 6 months ago
- 5a3d0c1 Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS. by Ioana Alexandru · 1 year, 8 months ago
- d26544e Add placeholder when media control title is blank by Beth Thibodeau · 1 year, 7 months ago
- 88cf23c RingtoneManager: verify default ringtone is audio by Jean-Michel Trivi · 2 years, 1 month ago
- 3e09cce Merge cherrypicks of ['googleplex-android-review.googlesource.com/23476871', 'googleplex-android-review.googlesource.com/23733070', 'googleplex-android-review.googlesource.com/23474146', 'googleplex-android-review.googlesource.com/23905843', 'googleplex-android-review.googlesource.com/23905120', 'googleplex-android-review.googlesource.com/23834726'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 6 months ago
- c1cf4b9 Improve user handling when querying for resumable media by Beth Thibodeau · 1 year, 6 months ago
- f810d81 Update AccountManagerService checkKeyIntentParceledCorrectly. by Dmitry Dementyev · 1 year, 6 months ago
- 109e58b [DO NOT MERGE] Update quickshare intent rather than recreating by Miranda Kephart · 1 year, 8 months ago
- 05b1ada Forbid granting access to NLSes with too-long component names by Matías Hernández · 1 year, 7 months ago
- 7428962 Ignore virtual presentation windows - RESTRICT AUTOMERGE by Achim Thesmann · 1 year, 7 months ago
- 3752277 Merge cherrypicks of ['googleplex-android-review.googlesource.com/23892525'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 6 months ago
- 20aedba DO NOT MERGE Revert "Verify URI permissions for EXTRA_REMOTE_INPUT_HISTORY_ITEMS." by Ioana Alexandru · 1 year, 6 months ago
- 593ee4d Merge cherrypicks of ['googleplex-android-review.googlesource.com/20321691', 'googleplex-android-review.googlesource.com/22915959', 'googleplex-android-review.googlesource.com/22599577', 'googleplex-android-review.googlesource.com/23083139', 'googleplex-android-review.googlesource.com/23031226', 'googleplex-android-review.googlesource.com/23090199', 'googleplex-android-review.googlesource.com/23327545', 'googleplex-android-review.googlesource.com/23410117', 'googleplex-android-review.googlesource.com/23210299', 'googleplex-android-review.googlesource.com/23352460', 'googleplex-android-review.googlesource.com/23386456', 'googleplex-android-review.googlesource.com/23389120', 'googleplex-android-review.googlesource.com/23473144', 'googleplex-android-review.googlesource.com/23430378', 'googleplex-android-review.googlesource.com/23449211', 'googleplex-android-review.googlesource.com/23475240', 'googleplex-android-review.googlesource.com/23439342', 'googleplex-android-review.googlesource.com/23505029'] into security-aosp-tm-release. by Android Build Coastguard Worker · 1 year, 7 months ago
- e17fd14 Merge "Resolve StatusHints image exploit across user." into sc-v2-dev am: e371b3018f by Pranav Madapurmath · 1 year, 7 months ago
- 1272eec Remove unnecessary padding code by Lee Shombert · 1 year, 7 months ago