DESCRIPTION

▼ Resurrection Remix Nougat Ver 5.8.5 Changelog

▼ 10/30/2019

▪ project art/
▪ 3b2e1a4c8 Use conservative permissions when creating files in ART

▪ project build/
▪ 282ab4177 Bump Security String to 2019-10-05
▪ e8925b942 Bump Security String to 2019-09-05
▪ 223e60a15 Bump Security String to 2019-08-05
▪ 21215343c Bump Security String to 2019-07-05
▪ c2c95568d Bump Security String to 2019-06-05
▪ 350faa76c Bump Security String to 2019-05-05
▪ 48d92cb90 Bump Security String to 2019-04-05
▪ 16156be89 Bump Security Patch Level to 2019-03-01
▪ 8cc03ddf7 Bump Security Patch Level to 2019-02-05
▪ ca2786380 Bump Security Patch Level to 2019-01-05
▪ 21898b00a Bump Security Patch Level to 2018-12-05
▪ 993e7b354 Security string to 2018-11-05
▪ 8307b98ff Security string to 2018-10-05
▪ fa97a0099 Security string to 2018-09-05
▪ f4545f8cf Security string to 2018-08-05
▪ 60f5334c6 Security string to 2018-07-05
▪ b847eac06 Bump security string to 2018-06-05
▪ b9c7b248a Bump security patch level to 2018-05-05
▪ 610a48de7 Bump security patch level to 2018-04-05
▪ 78eb8a0cb Bump security patch level to 2018-03-05
▪ 3d9222ecb Specify –max_timestamp when calling brillo_update_payload.
▪ 29c615547 Bump security patch level to 2018-02-05
▪ 0c543e78a Bump security patch level to 2018-01-05

▪ project external/skia/
▪ c904b7508 RESTRICT AUTOMERGE: Add SkAndroidFrameworkUtils::SafetyNetLog
▪ 3a0463f3d RESTRICT AUTOMERGE: Fix heap buffer overflow
▪ 6a2dd62c9 BACKPORT: Cherry-pick "begin cleanup of malloc porting layer"

▪ project frameworks/av/
▪ 8965dfb9f m4v_h263: add a test for invalid/negative value
▪ bc1df0fd3 Fix OOB access in mpeg4/h263 decoder
▪ bd5912f01 AMR WB encoder: prevent OOB write in ACELP_4t64_fx
▪ 7873cd785 httplive: detect oom if playlist is infinite
▪ d59ed0520 Fix overflow/dos in 3gg text description parsing
▪ db946e431 DO NOT MERGE: audiopolicy: Remove raw pointer references to AudioMix
▪ d32aa6911 Remove unused AVIExtractor source
▪ e13ddea36 AudioFlinger: Prevent multiple effect chains with same sessionId
▪ ce84d3f42 audio: ensure effect chain with specific session id is unique
▪ df8d0cc8c NuPlayerCCDecoder: fix memory OOB
▪ 3c0c6ac22 Reserve enough space for RTSP CSD
▪ e77d1b098 CTS error while media dump()
▪ 5b785ed46 MediaExtractor: stop rendering when an error occurs
▪ 2c92c7cca Check for overflow of crypto size
▪ bd95fd861 Fix information disclosure in mediadrmserver
▪ 0eb7d1b27 M3UParser: handle missing EXT-X-MEDIA URIs
▪ 72571e873 M3UParser: make url on demand
▪ b1b78838a Fix possible out of bounds read
▪ 870cfd3d9 Speed up id3v2 unsynchronization
▪ c80e94222 Add check preventing div0 issue
▪ 52ef9c9c7 Sanitize effect descriptors for AudioPolicyService binder calls.
▪ 3c6018b31 Init gain config to prevent uninit leak.
▪ 792b8f950 Handle bad bitrate index in mp3dec.
▪ da1898d8e better mpeg2 TS elementary stream Access Unit parsing
▪ 382514d56 Revert "libmediaplayerservice: fix deadlock on gapless start failure"
▪ 94cf0118d Prevent MediaPlayerService::Client's use-after-free
▪ 62ad7e8e3 Check NAL size before looking inside
▪ f73d2d313 M3UParser: detect variant streams without EXT-X-STREAM-INF
▪ c4679dd41 AACExtractor: check bounds during seek
▪ a82698766 httplive: check for malformed EXT-X-STREAM-INF
▪ 926922841 Apply input buffer validation also to AVC and MPEG4 encoders
▪ 04b559a4e IAudioPolicyService: Add attribute tags sanitization
▪ 767cd0ff7 Fix the UAF bug caused by a dead stack variable
▪ 0341044b0 Fix edge case when applying id3 unsynchronization
▪ c1546f1cf Add EFFECT_CMD_SET_PARAM parameter checking to Preset Reverb
▪ 151a88fe0 Validate decryption key length to decrypt function.
▪ e48fa31cb stagefright: MP4Extractor: allow 10% overhead on default sample size
▪ 5254266cc Access AVCDEC context after create fail check
▪ 9cb488b51 SoftAVCDec: Handle zero length input without EOS
▪ c31435036 Access HEVC context after create fail check

▪ project frameworks/base/
▪ 2220ad0464d [RESTRICT AUTOMERGE] Pass correct realCallingUid to startActivity() from startActivityInPackage
▪ ee74536f5fb Fix Layout.primaryIsTrailingPreviousAllLineOffsets
▪ ce86d78df0a HidProfile: sync isPreferred() with HidHostService
▪ 4437916fcdd Clear the Parcel before writing an exception during a transaction
▪ 189e29a80ad Protect VPN dialogs against overlay.
▪ 0d6e5a8872a Make Lock task default behaviour consistent with Settings.
▪ 3bb36c66dfe [BACKPORT]NetworkManagement : Add ability to restrict app vpn usage
▪ 805756e9e50 Adding SUPL NI Emergency Extension Time
▪ fccc83cdbeb Add cross user permission check – areNotificationsEnabledForPackage
▪ 403758f5a0e Limit IsSeparateProfileChallengeAllowed to system callers
▪ 31ba4c5e368 Permission Check For DPM.getPermittedAccessibilityServices
▪ 3247c1f21db Added missing permission check to isPackageDeviceAdminOnAnyUser.
▪ 026d3368115 DO NOT MERGE – SUPL ES Extension – Safer Init and Not After Boot
▪ d2e3b34dc8d Select only preinstalled Spell Checker Services
▪ f427f09ccf5 RESTRICT AUTOMERGE Do not linkify text with RLO/LRO characters.
▪ 4c4a443e607 RESTRICT AUTOMERGE: Recover shady content:// paths.
▪ 42eda822198 Pass userId through to singleton ContentProviders
▪ d469d75131c Changing SUPL_ES=1 for SUPL end point control
▪ 953e98c64aa Verify number of Map entries written to Parcel
▪ e55da6fbdae RESTRICT AUTOMERGE: Hide overlay windows when requesting media projection permission.
▪ d27e09fa5d1 Add support for search in DownloadManager.
▪ c167e43ef4e DO NOT MERGE. Extend SQLiteQueryBuilder for update and delete.
▪ e1f8a89aee4 DO NOT MERGE. Persistable Uri grants still require permissions.
▪ 8ea7e6c4930 Always create grant structures when persistable.
▪ 73a6f775d92 DO NOT MERGE. Execute "strict" queries with extra parentheses.
▪ 07a763826ff Fix crash during cursor moving on BiDi text
▪ 64bc54db94c Optimise the hit test algorithm
▪ d18b5100884 Fix TrackInfo parcel write
▪ efa2db2d13a Resolve inconsistent parcel read in NanoAppFilter
▪ 0f45bd06bd6 Make safe label more safe
▪ a4e61056903 ResStringPool: Prevenet boot loop from se fix
▪ 2d3500fa829 Fix DynamicRefTable::load security bug
▪ bb8fa637ae7 DO NOT MERGE Truncate newline and tab characters in BluetoothDevice name
▪ 0f9eafe384c Rework thumbnail cleanup
▪ 851699c3056 ResStringPool: Fix security vulnerability
▪ d0f21c981b3 Add NETWORK_STACK permission
▪ 8c867d6abfa Copy PermissionChecker from support lib and use in RcognitionService
▪ f39dfe2b093 Fixed Security Vulnerability of DcParamObject
▪ aa439aa36fc Add permission check to setAllowOnlyVpnForUids
▪ 176a23722b4 Verify last array's length in readFromParcel
▪ 6b346667540 Update internal ViewPager's SavedState to match Support Library version
▪ e5c8f9968ad Adjust URI host parsing to stop on character.
▪ ff097fb22bd Check for null-terminator in ResStringPool::string8At
▪ 4c072e05489 [RTT] ParcelableRttResults parcel code fix
▪ 976161364ee Fix VerifyCredentialResponse parcelling code
▪ aced8553bbd DO NOT MERGE Backporting potential usb tapjacking precaution.
▪ 15e90cf9da0 mtp: fix double free of thumbnail data
▪ 3af34178526 Throw OOME if Bitmap.nativeCreate fails
▪ 8d0700f2881 Adjust Uri host parsing to use last instead of first @.

▪ project frameworks/native/
▪ c0acd416a Fix race between SensorManager ctor and callback
▪ bcc5357b4 Free mObjects if no objects left to realloc on resize
▪ 1d068094d libbinder: readCString: no ubsan sub-overflow
▪ dcda70034 libbinder: Status: check dataPosition sets.
▪ 27a4c3b8a Sanitize InputMessage before sending
▪ 8112e67db Increment when attempting to read protected Parcel Data
▪ 95e3724c5 Disallow reading object data from Parcels with non-object reads
▪ d953c9130 Don't pad before calling writeInPlace().

▪ project packages/apps/Contacts/
▪ 82807c64b Patch URI vulnerability in contact photo editing

▪ project packages/apps/Messaging/
▪ 2e95b9f Messaging ignores file URIs shared via intent
▪ daefa00 Revert "Messaging: Request external storage permission before handling shared files"

▪ project packages/apps/PackageInstaller/
▪ 311451f6 RESTRICT AUTOMERGE: Always use safe labels

▪ project packages/apps/Settings/
▪ 00774a3a66 Make ScreenPinningSettings behaviour consistent with lock tasks.
▪ aa81155e09 Do not allow draw on top for App notification settings
▪ cdc1b81267 [BACKPORT]Settings: per-app VPN data restriction
▪ 1a6d82e1d7 Do not allow draw on top for default sms picker.
▪ 0dc4bdba1f BACKPORT: Disable changing lock when device is not provisioned.
▪ a4d6ddf37e Merge translations of Bluetooth confirmation text
▪ 119ac801e5 DO NOT MERGE Fix unexpected behavior in Bluetooth pairing
▪ a626383e37 Reword bluetooth confirmation dialog

▪ project packages/services/Telecomm/
▪ 03c6e41b Add flag to default dialer change dialog

▪ project packages/services/Telephony/
▪ cac4e89d Fix potential NPE in EmergencyCallbackModeExitDialog.
▪ a49773d1 DO NOT MERGE Revise security requirements for TelephonyManager#endCall.
▪ 8e91810f Enhanced permission checks for TelephonyManager#endCall() API.

▪ project system/core/
▪ f8f64b40c Fix a memory leak in gatekeeper.
▪ b16c92bd5 String16: remove integer overflows
▪ e3410934d libnetutil: Check dhcp respose packet length

※Please make a backup of your device before installing or updating ROM