DESCRIPTION

* art
7b62719 Use conservative permissions when creating files in ART [Calin Juravle]

* build
8fd7de1 Bump Security String to 2019-10-05 [Vasyl Gello]
3e9cd7c Bump Security String to 2019-09-05 [Kevin F. Haggerty]
932a149 Bump Security String to 2019-08-05 [Vasyl Gello]
3eb6b1f Bump Security String to 2019-07-05 [Vasyl Gello]
b3b3777 Bump Security String to 2019-06-05 [syphyr]
c177793 Bump Security String to 2019-05-05 [Vasyl Gello]
891f1c9 Bump Security String to 2019-04-05 [Vasyl Gello]
d1145e6 Bump Security Patch Level to 2019-03-01 [Tim Schumacher]
29d09bd Bump Security Patch Level to 2019-02-05 [syphyr]
e272d76 Bump Security Patch Level to 2019-01-05 [syphyr]
40e05d1 Bump Security Patch Level to 2018-12-05 [Vasyl Gello]
b93e56e Security string to 2018-11-05 [syphyr]
f81f950 Security string to 2018-10-05 [syphyr]
e19c3dd Security string to 2018-09-05 [syphyr]
ebd9b13 Security string to 2018-08-05 [syphyr]
88b5b89 Security string to 2018-07-05 [MSe]
1101b10 Bump security string to 2018-06-05 [MSe]
8ab7866 Bump security patch level to 2018-05-05 [MSe]
c9db38f Bump security patch level to 2018-04-05 [Moritz Horstmann]
46564f9 Bump security patch level to 2018-03-05 [Moritz Horstmann]
188cc71 Specify –max_timestamp when calling brillo_update_payload. [Tao Bao]

* external/skia
631fa5b RESTRICT AUTOMERGE: Add SkAndroidFrameworkUtils::SafetyNetLog [Leon Scroggins III]
9f48bb1 RESTRICT AUTOMERGE: Fix heap buffer overflow [Leon Scroggins III]
617e3a5 BACKPORT: Cherry-pick "begin cleanup of malloc porting layer" [Mike Reed]

* frameworks/av
c06fa8f m4v_h263: add a test for invalid/negative value [Dongwon Kang]
28882bb Fix OOB access in mpeg4/h263 decoder [Marco Nelissen]
8486cec Remove unused AVIExtractor source [Ray Essick]
abaff31 AudioFlinger: Prevent multiple effect chains with same sessionId [Andy Hung]
8b242b7 audio: ensure effect chain with specific session id is unique [Weiyin Jiang]
c5d8e0c NuPlayerCCDecoder: fix memory OOB [Wei Jia]
78a7f89 Reserve enough space for RTSP CSD [Ray Essick]
4caaecd CTS error while media dump() [ray-cy.lee]
c3e4c1c MediaExtractor: stop rendering when an error occurs [akirilov]
9aba6f1 Check for overflow of crypto size [Marco Nelissen]
98855d9 Fix information disclosure in mediadrmserver [Jeff Tinker]
cf355e9 M3UParser: handle missing EXT-X-MEDIA URIs [Robert Shih]
3b4956f M3UParser: make url on demand [Robert Shih]
98a9f13 Fix possible out of bounds read [Marco Nelissen]
d1eadb5 Speed up id3v2 unsynchronization [Robert Shih]
15c9eef Add check preventing div0 issue [Ryszard Grzesica]
d226c50 Init gain config to prevent uninit leak. [jiabin]
9e01cc2 Handle bad bitrate index in mp3dec. [Dongwon Kang]
891cf42 better mpeg2 TS elementary stream Access Unit parsing [Ray Essick]
7037ca4 Revert "libmediaplayerservice: fix deadlock on gapless start failure" [Moritz Horstmann]
f41c977 Prevent MediaPlayerService::Client's use-after-free [Pawin Vongmasa]
787a0a1 Check NAL size before looking inside [Ray Essick]
2c7538d M3UParser: detect variant streams without EXT-X-STREAM-INF [Robert Shih]
97153b0 AACExtractor: check bounds during seek [Robert Shih]

* frameworks/base
2b37b7d [RESTRICT AUTOMERGE] Pass correct realCallingUid to startActivity() from startActivityInPackage [Bryan Ferris]
fb053ea Fix Layout.primaryIsTrailingPreviousAllLineOffsets [Mihai Popa]
ffbf5cf HidProfile: sync isPreferred() with HidHostService [Chienyuan]
a10f182 Clear the Parcel before writing an exception during a transaction [Michael Wachenschwanz]
99f7612 Protect VPN dialogs against overlay. [Chalard Jean]
f67b029 Make Lock task default behaviour consistent with Settings. [Jonathan Scott]
b51451d [BACKPORT]NetworkManagement : Add ability to restrict app vpn usage [Uldiniad]
0bedf68 Adding SUPL NI Emergency Extension Time [WyattRiley]
11c33f9 Add cross user permission check – areNotificationsEnabledForPackage [Julia Reynolds]
d79fcec Limit IsSeparateProfileChallengeAllowed to system callers [Pavel Grafov]
5fd2f22 Permission Check For DPM.getPermittedAccessibilityServices [Eran Messeri]
e157318 Added missing permission check to isPackageDeviceAdminOnAnyUser. [Varun Shah]
c3b2f91 DO NOT MERGE – SUPL ES Extension – Safer Init and Not After Boot [WyattRiley]
b48658f Select only preinstalled Spell Checker Services [Guliz Tuncay]
22d50ff RESTRICT AUTOMERGE Do not linkify text with RLO/LRO characters. [Tony Mak]
55f80ad RESTRICT AUTOMERGE: Recover shady content:// paths. [Jeff Sharkey]
0e4de5a Pass userId through to singleton ContentProviders [Robin Lee]
a1e3b6f Changing SUPL_ES=1 for SUPL end point control [Wayne Lin]
a67d47e Verify number of Map entries written to Parcel [Michael Wachenschwanz]
3f0da63 Add support for search in DownloadManager. [Ben Lin]
221a1b6 DO NOT MERGE. Extend SQLiteQueryBuilder for update and delete. [Jeff Sharkey]
1c4bd8a DO NOT MERGE. Persistable Uri grants still require permissions. [Jeff Sharkey]
c6d797a Always create grant structures when persistable. [Jeff Sharkey]
609808b DO NOT MERGE. Execute "strict" queries with extra parentheses. [Jeff Sharkey]
bb03e2c Fix crash during cursor moving on BiDi text [Seigo Nonaka]
9884510 Optimise the hit test algorithm [Mihai Popa]
d8376ec Fix TrackInfo parcel write [Robert Shih]
c7e02ae Resolve inconsistent parcel read in NanoAppFilter [Arthur Ishiguro]
6e49449 Make safe label more safe [Todd Kennedy]
ef94a2b ResStringPool: Prevenet boot loop from se fix [Ryan Mitchell]
f4fcac0 Fix DynamicRefTable::load security bug [Ryan Mitchell]
8958df0 DO NOT MERGE Truncate newline and tab characters in BluetoothDevice name [Hansong Zhang]
10248ad ResStringPool: Fix security vulnerability [rtmitchell@google.com]
c7a464d Add NETWORK_STACK permission [Rebecca Silberstein]
d132873 Copy PermissionChecker from support lib and use in RcognitionService [Eugene Susla]
7ffd4e0 Fixed Security Vulnerability of DcParamObject [Pengquan Meng]
18b529c Add permission check to setAllowOnlyVpnForUids [Rubin Xu]
7367438 Verify last array's length in readFromParcel [Fyodor Kupolov]
97b2fa4 Update internal ViewPager's SavedState to match Support Library version [Alan Viverette]
4ad9d8f Check for null-terminator in ResStringPool::string8At [Adam Lesinski]
c966348 [RTT] ParcelableRttResults parcel code fix [Etan Cohen]
5a31cfb Fix VerifyCredentialResponse parcelling code [Rubin Xu]

* frameworks/native
30bbf0c Fix race between SensorManager ctor and callback [Brian Duddie]
5b0a8f2 Free mObjects if no objects left to realloc on resize [Michael Wachenschwanz]
eb8f001 libbinder: readCString: no ubsan sub-overflow [Steven Moreland]
9f1fcf6 libbinder: Status: check dataPosition sets. [Bryan Ferris]
b1e1e42 Sanitize InputMessage before sending [Siarhei Vishniakou]
1f564ce Increment when attempting to read protected Parcel Data [Michael Wachenschwanz]
c47106f Disallow reading object data from Parcels with non-object reads [Michael Wachenschwanz]
6253b8c Don't pad before calling writeInPlace(). [Martijn Coenen]

* libcore
708837c Fix hostname parsing in java.net.URLStreamHandler. [Pete Bentley]

* packages/apps/Contacts
2746c42 Patch URI vulnerability in contact photo editing [Gary Mai]

* packages/apps/PackageInstaller
0bb83ba RESTRICT AUTOMERGE: Always use safe labels [Todd Kennedy]

* packages/apps/Settings
22c09a5 Make ScreenPinningSettings behaviour consistent with lock tasks. [Jonathan Scott]
44a56c2 Do not allow draw on top for App notification settings [Raff Tsai]
454de18 [BACKPORT]Settings: per-app VPN data restriction [Uldiniad]
df665b3 Do not allow draw on top for default sms picker. [Fan Zhang]
31808ac BACKPORT: Disable changing lock when device is not provisioned. [Doris Ling]
d7d8070 Merge translations of Bluetooth confirmation text [Antony Sargent]
9ed53c9 DO NOT MERGE Fix unexpected behavior in Bluetooth pairing [Hansong Zhang]

* system/core
3dae1ef Fix a memory leak in gatekeeper. [Janis Danisevskis]
7f90d9f String16: remove integer overflows [Steven Moreland]

※Please make a backup of your device before installing or updating ROM