summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* revert back to default Android adb iconreplicant-6.0-beta-0002replicant-6.0Wolfgang Wiedmeyer2017-02-121-5/+15
| | | | Signed-off-by: Wolfgang Wiedmeyer <wolfgit@wiedmeyer.de>
* Merge branch 'cm-13.0' of ↵Wolfgang Wiedmeyer2017-02-11150-468/+1942
|\ | | | | | | https://github.com/LineageOS/android_frameworks_base into replicant-6.0
| * resolve merge conflicts of 89aa6fb to mnc-dr-devHugo Benichi2017-02-031-0/+9
| | | | | | | | | | Change-Id: I9e4e538081600be6a8199060bcb0d4040c071a22 (cherry picked from commit a0cfb157ecf69c948e37db5a9df6cb8a8102874c)
| * Fix idmap leak in zygote processneo.chae2017-02-031-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix a idmap leak in AssetManager::addSystemOverlays. And, The fix could also prevent fd leak of idmap. Test: none Bug: 32691930 Signed-off-by: Hyangseok Chae <neo.chae@lge.com> (cherry picked from commit 6a742a38509693f8b39ee9a5ad2803fca12688bf) Change-Id: Idc4af77db2b0cb739bd6b009b6af0f9123be1aac (cherry picked from commit 0244ca8d10dfc27e14f481fe649b89f7638c48eb)
| * Zygote: Additional whitelisting for legacy devices.Narayan Kamath2017-02-031-0/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | On M and below, we provide a blanket whitelist for all files under "/vendor/zygote_whitelist". This path is whitelisted purely to allow this patch to be applied easily on legacy devices and configurations. Note that this does not amount to a loosening of our security policy because whitelisted files are reopened anyway. Bug: 32691930 Test: manual Change-Id: If5b53f6f0a707f8d36603c09bfd3f72dbfbbbb99 (cherry picked from commit 5e2f7c6229d7191183888d685b57a7d0a2835fce)
| * Zygote: Additional whitelists for runtime overlay / other static resources.Narayan Kamath2017-02-031-3/+41
| | | | | | | | | | | | | | | | | | | | | | | | | | Partially cherry picked from commit 1c15c635785c64a. These files are safe to reopen for the same reason that files in /system/framework are. They're regular files and will not change after the first zygote fork. Bug: 32618130 Change-Id: I119e0bfcbf397cb331064adf148d92a5cd3ea92f (cherry picked from commit 4e8ba1d73eee1311bb78144be43862b393548d5d)
| * Zygote : Block SIGCHLD during fork.Narayan Kamath2017-02-031-5/+24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix merge conflict into mnc-mr2-release We close the android logging related sockets prior as late as possible before every fork to avoid having to whitelist them. If one of the zygote's children dies after this point (but prior to the fork), we can end up reopening the logging sockets from the SIGCHLD signal handler. To prevent this from happening, block SIGCHLD during this critical section. Bug: 32693692 Test: Manual (cherry picked from commit e9a525829a354c92983a35455ccab16d1b0d3892) Zygote: Unblock SIGCHLD in the parent after fork. Follow up to change e9a525829a354c92983a. Allows the zygote to receive SIGCHLD again and prevents the zygote from getting into a zombie state if it's killed. Contributed-By: rhed_jao <rhed_jao@htc.com> Bug: 32693692 Test: manual (cherry picked from commit 1480dc3e97b661f5bfa3a5c2fbce72385b8d2be6) Change-Id: If89903a29c84dfc9b056f9e19618046874bba689
| * DO NOT MERGE) ExifInterface: Provide backward compatibilitySungsoo2017-02-031-2/+1
| | | | | | | | | | | | | | | | | | | | ExifInterface.saveAttribute() didn't throw UnsupportedOperationException before. Use IOException instead of UnsupportedOperationException for backward compatibility. Bug: 30936376, Bug: 32068647, Bug: 31319086 Change-Id: Iacc7b4d91d49edd7bece8f2e738a633a91025eca (cherry picked from commit 7ce9243087b04bce719e1f3d10a14b9b26b8ea81)
| * Do not crash on malformed DHCP packets.Hugo Benichi2017-02-032-35/+181
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes possible crashes with malformed DHCP packets. It is part of Android Security Bulletin of January 2017 and mitigates CVE CVE-2017-0389. Squash of: Author: Lorenzo Colitti <lorenzo@google.com> Date: Wed Mar 02 13:31:52 2016 +0900 Don't crash if we get a DHCP packet with the wrong port. This should only happen if we get a packet in the small time window between binding the packet socket and programming the BPF filter on it. Bug: 26696823 Change-Id: I481f1bc74bbaeb9646d96e1841d2a69acdb47d62 Author: Hugo Benichi <hugobenichi@google.com> Date: Wed Oct 05 18:33:21 2016 +0900 Catch runtime exceptions when parsing DHCP packets This patch adds a try catch all to DHCP packet parsing so that DhcpClient does not choke on malformed packets, brinding down with it the whole framework. Test: added new unit tests catching the issue fixed in this patch. Bug: 31850211 Change-Id: I3c50a149fed6b2cbc4f40bb4f0e5bb2b56859b44 Author: Hugo Benichi <hugobenichi@google.com> Date: Wed Oct 05 21:07:19 2016 +0900 Reject DHCP packets with no magic cookie This patch adds an explicit check in the DHCP packet parser for rejecting packets without a magic cookie, instead of relying on the top-level try-catch-all in the parser. This allows to add to DHCP error metrics this specific error. It also allows to add two poor man's fuzzing tests that tries to find additional gaps in the DHCP packet parser by - trying to parse all subslices of a valid offer packet. - trying to parse random byte arrays. Test: covered by previously introduced malformed DHCP packet unit tests + additional fuzzing tests. Bug: 31850211 Change-Id: If53c9ba9df78d7604ec018c9d67c237ae59c4833 Change-Id: Ic5a8fa4feb46cca325cb5c47616ee63b22d2e7c8 mh0rst: Backported to cm-13.0.
| * Public volumes belong to a single user.Jeff Sharkey2017-02-032-2/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When a public (vfat) device is inserted, it's strongly associated with the current foreground user, and no other users should be able to access it, since otherwise that would be a cross-user data leak. To use the device under a different user, switch users and then eject/remount the device. Test: verified user isolation of USB drive Bug: 32523490 Change-Id: I590c791996f1fea8d78f625dc942d149f1f41614 (cherry picked from commit 8b38d083c42e2706e1ff5a1410fa61d1f5dea3f5) (cherry picked from commit 47e62b7fe6807a274ba760a8fecfd624fe792da9)
| * Automatic translation importAbhisek Devkota2017-02-032-2/+3
| | | | | | | | Change-Id: Ifa3700c8e74716373712ebb84270eecbc3d94f45
| * Automatic translation importAbhisek Devkota2017-02-028-15/+29
| | | | | | | | Change-Id: Id277710144095d2411baed890eeff40899482491
| * Automatic translation importAbhisek Devkota2017-01-2788-741/+137
| | | | | | | | Change-Id: Ib115f3813214bfffb935cf522d0e31e8c95be4de
| * Revert "Add overlay option for Settings.System.ACCELEROMETER_ROTATION_ANGLES"Zhao Wei Liew2017-01-242-10/+0
| | | | | | | | | | | | | | | | | | | | | | | | The default of 11 (90, 270 and 360 degrees) is perfectly fine. Thus, this overlay is pretty useless. Only 1 device currently uses this (and not due to any major issue), so we aren't losing anything by removing this overlay. This reverts commit 936c4bfa7c64ce4403d519d0f0df72523da1ec21. Change-Id: I7eb81d00af1672638689daddd1e78c7e12b21c4d
| * base: Switch to LineageOS ADB iconJoey Rizzoli2016-12-311-15/+5
| | | | | | | | | | | | | | Credit: @vazguard Change-Id: I8362cb30fa3ca3d10798e4723458e127d3dab327 Signed-off-by: Joey Rizzoli <joey@lineageos.it>
| * Telephony: Don't crash for too long baseband versionMichael W2016-12-301-0/+6
| | | | | | | | | | | | | | | | Add a check and truncate the baseband version when it's longer than the allowed value for a SystemProperty (currently 91) Change-Id: I845b331650eb4446aa251e48d7594ecb10146d54 Reference: BugDumps 13-20161216-22 L#22
| * Revert "Add CM PlatLogo (1/2)"Zhao Wei Liew2016-12-298-266/+4
| | | | | | | | | | | | | | | | As part of the rebrand to LineageOS. This reverts commit aed50cbe3c3dbe175dac695764df586d8dda14c9. Change-Id: I7ee6125f6c8d4ec8e57e5a1673bf2e095a11cb76
| * Revert "Update ADB status bar icon"Zhao Wei Liew2016-12-291-22/+19
| | | | | | | | | | | | | | | | Bring in the new icon when it's done. This reverts commit 5ead120b6274841fe4a4c7552c44383e611478a7. Change-Id: I92ebb56b2bff9c03868002f6ef12ae017d197e7e
| * Merge "Automatic translation import" into cm-13.0Abhisek Devkota2016-12-283-9/+9
| |\
| | * Automatic translation importinky@build012016-12-243-9/+9
| | | | | | | | | | | | | | | Change-Id: Id213522b9303ea0bde8b5620cf88fbdb36414015 Ticket: -
| * | StatusBarIconView: Enable notification icon count by defaultZhao Wei Liew2016-12-231-2/+2
| | | | | | | | | | | | | | | | | | This used to be enabled by default in previous releases. Change-Id: I24766bed58d081a0dd4763b9602379ff6435e092
| * | SettingsProvider: Remove def_notif_count overlayZhao Wei Liew2016-12-231-3/+0
| |/ | | | | | | | | | | This is no longer used. Change-Id: Ifd8eaa1d9d1f156dbfa4fdf278f95213ee32271e
| * Automatic translation importblinky@build012016-12-22103-7/+1041
| | | | | | | | | | Change-Id: I251ee7b9d1508a91692a8a8c1ba863730fcf125b Ticket: -
| * Fix "Error parsing XML: not well-formed"Omico2016-12-231-1/+1
| | | | | | | | | | | | frameworks/base/packages/SystemUI/res/values-zh-rTW/cm_strings.xml:65: error: Error parsing XML: not well-formed (invalid token) Change-Id: Ic29b77776c48d4a663656bf6ea40c8c4f0253414
| * Automatic translation importblinky@build012016-12-214-34/+78
| | | | | | | | | | Change-Id: Ic49d5ed34f92ca0298510b6ca8a3a279a0ea6e4d Ticket: -
| * Automatic translation importclyde@build012016-12-2045-0/+945
| | | | | | | | | | Change-Id: Icd3adceb4cfd523f56b7072934a037a203fd0b81 Ticket: -
| * Automatic translation importblinky@build012016-12-182-2/+2
| | | | | | | | | | Change-Id: I7eff0ec212cba24f97f35bddf3310e39b5fd1ce6 Ticket: -
| * Automatic translation importclyde@build012016-12-164-0/+96
| | | | | | | | | | Change-Id: I86e57b89e58d2cf5985e62b8d582f49285c265f3 Ticket: -
| * Automatic translation importpinky@build012016-12-153-3/+3
| | | | | | | | | | Change-Id: I53e8f93c43ddb93433c81d457e9721c0fff07b81 Ticket: -
* | Camera: Working barcode scanning with software renderingreplicant-6.0-beta-0001replicant-6.0-alpha-0006Wolfgang Wiedmeyer2017-01-042-1/+64
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Barcode scanner apps expect YUV as preview format. However, the software renderer cannot handle YUV. Thus, RGB 565 is used. Barcode scanner apps only need the first plane Y which is basically greyscale. The solution is a conversion from RGB to greyscale of preview frames that are requested by apps for processing. Apps request preview frames via onPreviewFrame(). The conversion is done using native code for optimal speed. The conversion algorithm is based on the implementations in the RGBLuminanceSource class of ZXing[1] and the RGB565LuminanceSource class of FastBarcodeScanner[2]. Signed-off-by: Wolfgang Wiedmeyer <wolfgit@wiedmeyer.de> [1] https://github.com/zxing/zxing/blob/cc16a72c85e4958ce406af9547764e5eee9adb6e/core/src/main/java/com/google/zxing/RGBLuminanceSource.java [2] https://github.com/tschaumburg/FastBarcodeScanner/blob/5a4c166a722730d0099d4c6a1c15d312b93547da/tracking-barcode-scanner/src/main/java/dk/schaumburgit/trackingbarcodescanner/RGB565LuminanceSource.java
* | LockPatternUtils: userId is requiredWolfgang Wiedmeyer2016-12-161-2/+2
| | | | | | | | Signed-off-by: Wolfgang Wiedmeyer <wolfgit@wiedmeyer.de>
* | remove analytics supportDaniel Micay2016-12-161-2/+0
| |
* | defend against lockscreen brute forcingDaniel Micay2016-12-162-0/+7
| |
* | support separate encryption/lockscreen passwordsDaniel Micay2016-12-163-3/+77
| | | | | | | | | | | | | | | | | | | | | | | | This adds the necessary infrastructure for allowing users to opt-in to a distinct device encryption passphrase. The passwords are still tied together by default. This makes it possible to use a complex encryption passphrase without losing the convenience of a very simple lockscreen pin. This feature can be combined with a forced reboot after a chosen number of failed unlocking attempts to prevent brute-forcing by requiring the entry of the encryption password instead.
* | enable advanced reboot menu by defaultWolfgang Wiedmeyer2016-12-141-1/+1
| | | | | | | | Signed-off-by: Wolfgang Wiedmeyer <wolfgit@wiedmeyer.de>
* | Revert "Keyguard: switch to cm-specific device provisioned flag"Wolfgang Wiedmeyer2016-12-133-17/+11
| | | | | | | | This reverts commit ab5c226f688080d714f3eee987bd97e13cc348d5.
* | Revert "Keyguard: Register for the correct CMSW completed Uri"Wolfgang Wiedmeyer2016-12-131-1/+1
| | | | | | | | This reverts commit cbd2e76d14e07e4c01d0e451fced038272b897bc.
* | Revert "PhoneWindowManager : Check CM_SETUP_WIZARD_COMPLETED for ↵Wolfgang Wiedmeyer2016-12-131-2/+2
| | | | | | | | | | | | | | | | | | isUserSetupComplete" CyanogenMod's Setup Wizard is currently no in use. But if we fix the setup wizard and use it, this commit needs to be reverted. This reverts commit d4c6db9ce9020148d41234d5f28f0d57cc98f41c.
* | Merge branch 'cm-13.0' of ↵Wolfgang Wiedmeyer2016-12-132-10/+19
|\ \ | |/ | | | | https://github.com/CyanogenMod/android_frameworks_base into replicant-6.0
| * DO NOT MERGE) ExifInterface: Close the file when an exception happensSungsoo2016-12-121-1/+3
| | | | | | | | | | | | | | | | CYNGNOS-3312 Bug: 32068647, Bug: 30936376 Change-Id: I22fa2384348c890ca726d2b1632cd54e59d25a8f (cherry picked from commit cb17930077de640411407636eebc000e2d06dd9c) (cherry picked from commit 2c79cada8897dcb171b8227b4ea91c292400702f)
| * DO NOT MERGE Isolated processes don't get precached system service bindersChristopher Tate2016-12-121-9/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | More specifically, they get a PackageManager binder -- necessary for Android process startup and configuration -- but none of the other usual preloaded service binders. CYNGNOS-3312 Bug 30202228 Change-Id: I3810649f504cd631665ece338a83d2e54d41ad05 (cherry picked from commit 2c61c57ac53cbb270b4e76b9d04465f8a3f6eadc) (cherry picked from commit f4d23f30c92bc80808f57677caab0282c8d28dc6) (cherry picked from commit 9357830a380c8174ce5130941a7a53915d680819)
* | Merge branch 'cm-13.0' of ↵Wolfgang Wiedmeyer2016-12-121522-6171/+101203
|\ \ | |/ | | | | https://github.com/CyanogenMod/android_frameworks_base into replicant-6.0
| * Automatic translation importclyde@build012016-12-041-1/+1
| | | | | | | | | | Change-Id: If3346af7ccc0e84d99d03b1c50f6b9e413d984b7 Ticket: -
| * Support for MODE_ASK in commandlineamtlib-dot-dll2016-12-031-1/+8
| | | | | | | | Change-Id: Idaf46295aff58259c786de4a4fef9c475c363cff
| * AppOps: Do not prune apps that are not presentJorge Ruesga2016-12-031-4/+11
| | | | | | | | | | | | | | | | | | | | | | Do not prune apps that are not currently present in the device (like USB memory ones). While booting, they are not available but must not be purged from AppOps, because they are still present in the Android app database. Issue-Id: CYAN-2811 Change-Id: I6680cbdf0022812b45d966dffee754399e92accb Signed-off-by: Jorge Ruesga <jorge@ruesga.com>
| * Automatic translation importinky@build012016-12-027-17/+17
| | | | | | | | | | Change-Id: Ic80541e78c8570809868ce067a5176acb9d6a5a2 Ticket: -
| * Automatic translation importinky@build012016-11-2910-201/+21
| | | | | | | | | | Change-Id: I38a02ada64c66994c99ba5aee59a522931227337 Ticket: -
| * Themes: Don't cache explicitly themed resourcesBharadwaj Narasimha2016-11-281-26/+1
| | | | | | | | | | | | | | | | | | When a nav bar should be unchanged in the process of customization(like changing icons,fonts) the nav bar changes due to explicitly caching themed resources. Change-Id: I3135fac9df82a0551879908f6bf24deba0da0339
| * Build: use UserHandle.isApp for M compatibilityZhao Wei Liew2016-11-271-1/+1
| | | | | | | | Change-Id: Ie4511c547d9afe2697e1ac3519f41a9b19784f18
| * Make Build.TYPE and Build.FINGERPRINT consistent for apps.Danny Baumann2016-11-252-0/+43
| | | | | | | | | | | | | | | | | | | | Some apps (namely Android Wear) like to do comparisons between TYPE and FINGERPRINT and throw errors on inconsistencies. As our fingerprints are almost always taken from stock ROMs, they don't really match our builds, causing said comparisons to fail. Avoid those failures by taking build type out of fingerprint for apps. Change-Id: I8e8db64de7ea224572ecb3695c85abea91e0e29f