DESCRIPTION

CHANGELOG:

* art/
da6efa922 Use conservative permissions when creating files in ART

* build/
3cf3d892c Bump Security String to 2019-10-05
01f2e7045 Bump Security String to 2019-09-05
e43254cc3 Bump Security String to 2019-08-05
59e701f82 Bump Security String to 2019-07-05
443e747cd Bump Security String to 2019-06-05
5a56f0f93 Bump Security String to 2019-05-05
00bcf51d6 Bump Security String to 2019-04-05
68cb6f884 Bump Security Patch Level to 2019-03-01
a2130f051 Bump Security Patch Level to 2019-02-05
8ba0e0086 Bump Security Patch Level to 2019-01-05
be5ad7d9b Bump Security Patch Level to 2018-12-05
098afecdf Security string to 2018-11-05
60c959c62 Security string to 2018-10-05
d96c74c1d Security string to 2018-09-05
b23a13a8d Security string to 2018-08-05

* external/skia/
7a72f8de2 RESTRICT AUTOMERGE: Add SkAndroidFrameworkUtils::SafetyNetLog
4fa7a2dbb RESTRICT AUTOMERGE: Fix heap buffer overflow
8d4186dd9 BACKPORT: Cherry-pick "begin cleanup of malloc porting layer"

* external/v8/
8b1aabf5c Fix type confusion in libpac
634c2565c Fix Integer Overflow in libpac
396a7f277 Fix type confusion in libpac
4a036d30e Fix OOB Access in libpac
d2d908554 Fix OOB read in libpac ast-numbering.cc
dfd36ae55 Fix type confusion in libpac

* frameworks/base/
c17d1f7d1e5 [RESTRICT AUTOMERGE] Pass correct realCallingUid to startActivity() from startActivityInPackage
498b72241e6 Fix Layout.primaryIsTrailingPreviousAllLineOffsets
7d99c92c0cc HidProfile: sync isPreferred() with HidHostService
b04397ffb9f Clear the Parcel before writing an exception during a transaction
cdb575a2a6b Protect VPN dialogs against overlay.
464233189ce Make Lock task default behaviour consistent with Settings.
06571f9255c [BACKPORT]NetworkManagement : Add ability to restrict app vpn usage
191a041ebcd Add cross user permission check – areNotificationsEnabledForPackage
0a60c1cd943 Limit IsSeparateProfileChallengeAllowed to system callers
dd7b4708201 Permission Check For DPM.getPermittedAccessibilityServices
05eac9d46d5 Added missing permission check to isPackageDeviceAdminOnAnyUser.
6961f507629 DO NOT MERGE – SUPL ES Extension – Safer Init and Not After Boot
0e34ec17e0c Select only preinstalled Spell Checker Services
833fe20c274 RESTRICT AUTOMERGE Do not linkify text with RLO/LRO characters.
bfb40938119 RESTRICT AUTOMERGE: Recover shady content:// paths.
22cd594995d Pass userId through to singleton ContentProviders
b20196262e9 Changing SUPL_ES=1 for SUPL end point control
efd6a9e5782 Verify number of Map entries written to Parcel
3f801c25481 Add support for search in DownloadManager.
fb7919e6736 DO NOT MERGE. Extend SQLiteQueryBuilder for update and delete.
20f769bddf1 DO NOT MERGE. Persistable Uri grants still require permissions.
9058b12aba4 Always create grant structures when persistable.
0294ea8cc1f DO NOT MERGE. Execute "strict" queries with extra parentheses.
5c069eb5b55 Fix crash during cursor moving on BiDi text
56171dfc947 Optimise the hit test algorithm
60cd2dbf878 Fix TrackInfo parcel write
94f50d99b03 Resolve inconsistent parcel read in NanoAppFilter
47633144ae5 Make safe label more safe
78d7ec28088 ResStringPool: Prevenet boot loop from se fix
52cd2ba657a Fix DynamicRefTable::load security bug

* frameworks/native/
64c7ca237 Fix race between SensorManager ctor and callback
0286e9efa Free mObjects if no objects left to realloc on resize
0c208debf libbinder: readCString: no ubsan sub-overflow
9abdb59f8 libbinder: Status: check dataPosition sets.
bd5c54949 Sanitize InputMessage before sending

* libcore/
13717c08c Fix hostname parsing in java.net.URLStreamHandler.

* packages/apps/Contacts/
fed41c471 Patch URI vulnerability in contact photo editing

* packages/apps/Messaging/
da11db6 Messaging ignores file URIs shared via intent
df3639e Revert "Messaging: Request external storage permission before handling shared files"

* packages/apps/PackageInstaller/
10435883 RESTRICT AUTOMERGE: Always use safe labels

* packages/apps/Settings/
77d3824d2b Make ScreenPinningSettings behaviour consistent with lock tasks.
8dd3e3c150 Do not allow draw on top for App notification settings
164b157b07 [BACKPORT]Settings: per-app VPN data restriction
1015c9fd97 Do not allow draw on top for default sms picker.
019371c76d BACKPORT: Disable changing lock when device is not provisioned.
13e4019bd1 Merge translations of Bluetooth confirmation text
bc999727f6 DO NOT MERGE Fix unexpected behavior in Bluetooth pairing

* packages/services/Telecomm/
583d1915 Add flag to default dialer change dialog

* packages/services/Telephony/
23f3b071 Fix potential NPE in EmergencyCallbackModeExitDialog.
8400e46b DO NOT MERGE Revise security requirements for TelephonyManager#endCall.

* system/core/
4ba1ce468 Fix a memory leak in gatekeeper.

* system/netd/
612b4b3 [BACKPORT]NetD : Allow passing in interface names for vpn app restriction

※Please make a backup of your device before installing or updating ROM