Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security Patches :D #1

Open
wants to merge 335 commits into
base: eleven
Choose a base branch
from
Open

Security Patches :D #1

wants to merge 335 commits into from

Conversation

Meghthedev
Copy link

No description provided.

android-build-team Robot and others added 30 commits October 2, 2019 03:14
Snap for 5912542 from 54d9d0e to rvc-release
6138f1a 
Change-Id: I4b55a2ff310a14ed17ad3d62ae2ada5bfa32275c
Snap for 5916059 from 202f953 to rvc-release
c8e77fe 
Change-Id: I5fbe4546d6a707d174f5b6bc22db46a68085b7f6
Snap for 5922838 from de3b5da to rvc-release
eb23747 
Change-Id: I5b0883ec104c5d3ab090f49da6d822847c3de774
Snap for 5926043 from 104be65 to rvc-release
ef55eb1 
Change-Id: Idaaecfaac2aac382da0ea5bd224d360141d742c3
Snap for 5929031 from 1b8afaf to rvc-release
a00dace 
Change-Id: I18d52fd96b8308847693e3ff58e6aa8e33b0fcf7
Snap for 5931403 from 04bcdde to rvc-release
4f44edd 
Change-Id: I40ac6616fffadeea7df849a803579860741cba8e
Snap for 5936682 from 8f16a72 to rvc-release
3b366bf 
Change-Id: I50a6a912523378e979d5f513f7411308fee3cf5d
Snap for 5939454 from 9c3840f to rvc-release
423bb12 
Change-Id: I43229b1c632f21e9025216c59d020d2f7b7aaec8
Snap for 5942013 from 2de15d3 to rvc-release
b247d86 
Change-Id: I02240e551989121f388f07aa1404106fa5ace9ce
Snap for 5945950 from 9d3d30c to rvc-release
18e38ab 
Change-Id: I9af471fb0d960cf825213bdeb6e7bba011c4a92d
Snap for 5954522 from 4d87005 to rvc-release
70e80c5 
Change-Id: Icd80a833de28d8d2cb30f2f157d8f9160fded30e
Snap for 5956624 from 997f623 to rvc-release
9c751ca 
Change-Id: I1c2072140c7e82c1da4b467e4a9dce156ed9fd8c
Snap for 5958914 from 4aa627b to rvc-release
241c30c 
Change-Id: I427cb39c3e1b5b3b3e67323dccb2d53ac0bf8b56
Snap for 5961709 from 1c37a9b to rvc-release
469eeef 
Change-Id: Ib6866113608449c2b7353093b3e771a4e4e703a2
Snap for 5968874 from 218c8fd to rvc-release
3940e03 
Change-Id: I1a1b3e026ff11d7bc70400d9adcc72588bc869de
Snap for 5969935 from 4a742ba to rvc-release
4401f4d 
Change-Id: I4b965ed165177868dae3be617e7b9078180d9aa2
Snap for 5972512 from 3b177ba to rvc-release
0516b72 
Change-Id: I7e347ee72757db56f2f138ca9d71d712f7049ad7
Snap for 5975424 from 39bb4b8 to rvc-release
0c7f5bc 
Change-Id: I5307b716d80a16ddae19eac0b56a429d4ec2c2f7
Snap for 5978242 from 9cc29b3 to rvc-release
6e2546a 
Change-Id: I5ff0a99663ca914348d8aaea3ebee5fab8e40c0a
Snap for 5984067 from f19e189 to rvc-release
8062dfc 
Change-Id: I62c00c3bd9e877129a6ed999cb683bc6e0209087
Snap for 5987274 from 1a7fb66 to rvc-release
99098fe 
Change-Id: I0174292087c8515213c0530ce08f26e0f1eb7eda
Snap for 5989825 from 13a6e57 to rvc-release
04f4fcd 
Change-Id: Ia6df9ac8e8b4c03072982430a98a605daa542a64
Snap for 5992631 from 3e60832 to rvc-release
7658ba5 
Change-Id: If826adce35f27834ee228890a6e42adae863754e
Snap for 5999026 from 2b0e30c to rvc-release
b99a8f1 
Change-Id: I0a4c934d2597095f9f80417fd8023de29b13052c
Snap for 6001908 from 881f7bf to rvc-release
5bb235e 
Change-Id: I76d76f3e6a52caf14d8abccaba76690db98d1029
Snap for 6004599 from edecd2d to rvc-release
2662c88 
Change-Id: Iad84abc72b74cd9696c3c963f95e73412d0330c5
Snap for 6007460 from ca68935 to rvc-release
eb1c1ba 
Change-Id: I27eae8f5c5ea6fba8ffd1c958f660933f1d4cb47
Revert submission
bbbe143 
Reason for revert: This causes a boot issue on Taimen (b/144480969). It wasn't caught by TreeHugger due to Taimen tests being disabled due to a different lab outage (b/144350336).

Change-Id: I3374b4ede6fd1e64284bad78d3b6d3c520a73e63
(cherry picked from commit 4ccf5a2)
Merge cherrypicks of [9734022, 9734337, 9733748, 9733749, 9734338, 97…
9e89640 
…34339, 9734401, 9734402, 9734403, 9734404, 9734405, 9734023, 9734456, 9734340, 9733750, 9733999, 9733853, 9734000, 9734117, 9734341, 9734342, 9734049, 9734343, 9734458, 9734001] into rvc-release

Change-Id: I4867e9abc3641e81e0d5f266d53fb619dc606d28
Snap for 6013487 from 7703348 to rvc-release
7484167 
Change-Id: I83fc3da0ad026ae9015487b84a3e5596ed89b70f
Hai Shalom and others added 29 commits July 23, 2020 23:04
[WPA3-Enterprise] Fix connection issues to ECDSA networks
41a7999 
Fix connection issues with ECDSA networks. The initialization of
the Suite-B ciphers was not performed due to a bug in the logic
that checked if KeyStore is required for the connection.

Bug: 161570436
Test: atest WifiKeyStoreTest
Test: Connect to WPA3-Enterprise 192-bit ECDSA and RSA networks
Test: Connect to WPA2-Enterprise network
Change-Id: I34489a69f91802cc9bf0c64ae3734ae237ead47b
Merged-In: I34489a69f91802cc9bf0c64ae3734ae237ead47b
(cherry picked from commit 27e757a)
Merge cherrypicks of [12222001, 12222002, 12222003, 12221903, 1222171…
6295916 
…0, 12221711, 12221712, 12221713, 12221714, 12221715, 12221922] into rvc-release

Change-Id: I5d22e8a6b74e0f6e77e5dcd88e7c65985b1f20c4
@anisassigoogle
[Suggestion] Check foreground user for API call
65bfcc0 
Also, squashes the follow up commit to create a single CL for
backporting:
=======
PasspointManager: Don't allow bg user to modify passpoint profiles
Also, add safety net logging for this bug.
=======

Bug: 174749461
Test: atest com.android.server.wifi
Change-Id: Ifc79ffeb04a7be99a9c60d9414b72e88275c0514
Merged-In: Ifc79ffeb04a7be99a9c60d9414b72e88275c0514
(cherry picked from commit e799efb)
(cherry picked from commit 23685b8)
(cherry picked from commit 1ffc81e)
@zhujiatai @aviraxp
Fix abnormal wake up caused by WifiConnectivityManager
1590c96 
When wifi is toggled off when disconnected, the Watchdog Timer will
still work after at most 20mins, this will wake up the phone from
sleep.

Signed-off-by: zhujiatai <zhujiatai@xiaomi.com>
Change-Id: I73333041932d3240783cd3a2ceb2f6243ccde2d6
@haggertk
Merge tag 'android-11.0.0_r32' into staging/lineage-18.1_merge-androi…
5f3c73c 
…d-11.0.0_r32

Android 11.0.0 Release 32 (RQ2A.210305.006)

* tag 'android-11.0.0_r32':
  Import translations. DO NOT MERGE ANYWHERE
  Import translations. DO NOT MERGE ANYWHERE
  Import translations. DO NOT MERGE ANYWHERE
  Import translations. DO NOT MERGE ANYWHERE
  [Suggestion] Check foreground user for API call
  ConnectToNetworkNotification: Disallow connect from lock screen
  Import translations. DO NOT MERGE ANYWHERE
  Import translations. DO NOT MERGE ANYWHERE
  Import translations. DO NOT MERGE ANYWHERE
  WifiConfigManager: protect CONFIGURED_NETWORKS_CHANGED_ACTION with permissions
  WifiConfigManager: protect CONFIGURED_NETWORKS_CHANGED_ACTION with permissions
  WifiConfigManager: protect CONFIGURED_NETWORKS_CHANGED_ACTION with permissions

Change-Id: If87fc14f1cd8c50478380ffe14381bdbaafd835b
@AgentFabulous @npjohnson
wifi: Add StaState API [2/2]
94c32fb 
Change-Id: I1f51ae6189a909132f566ebddfb6f9cbdf9acb2d
@haggertk
Merge tag 'android-11.0.0_r38' into staging/lineage-18.1_merge-androi…
47d398c 
…d-11.0.0_r38

Android 11.0.0 Release 38 (RQ3A.210605.005)

* tag 'android-11.0.0_r38':
  Import translations. DO NOT MERGE ANYWHERE
  Import translations. DO NOT MERGE ANYWHERE
  Import translations. DO NOT MERGE ANYWHERE
  Revert "Use EUI64 IPv6 link-local address generation only when randomizing MAC"
  Import translations. DO NOT MERGE ANYWHERE
  Import translations. DO NOT MERGE ANYWHERE
  Import translations. DO NOT MERGE ANYWHERE
  Import translations. DO NOT MERGE ANYWHERE
  [Suggestion] Check foreground user for API call
  [Suggestion] Check foreground user for API call
  [Suggestion] Check foreground user for API call
  [Suggestion] Check foreground user for API call
  [Suggestion] Check foreground user for API call
  Use EUI64 IPv6 link-local address generation only when randomizing MAC
  Use EUI64 IPv6 link-local address generation only when randomizing MAC

Change-Id: I0d6fd03b12e03393ed849256743e0103aeeb1905
@luca020400
[WifiTrackerLib] Add wifi standard to WifiEntry.ConnectedInfo
0084b65 
Add wifi standard field to WifiEntry.ConnectedInfo for displaying in
Network Details page.

Bug: 117216087
Test: build
Change-Id: Ibd4a9b229abc83965c1d7186a4149937e8d2b118
@mikeNG
WiFi: Ignore connectivity scans during WFD session
0fd2226 
Any scans will impact WiFi performance including WFD
performance. So during WFD session, ignore all connectivity
scans initiated internally by wifi work source.

This change will not impact any scan triggered due to user
activity and will allow those scans.

Change-Id: I6a855a8c4853a21fb0ff054c6a5155719ee12b3d
CRs-Fixed: 2136506
@haggertk
Merge tag 'android-security-11.0.0_r49' into staging/lineage-18.1_mer…
368d569 
…ge-android-security-11.0.0_r49

Android security 11.0.0 release 49

* tag 'android-security-11.0.0_r49':
  [Suggestion] Check foreground user for API call
  [WPA3-Enterprise] Fix connection issues to ECDSA networks
  Revert submission

Change-Id: Id1d558af01bed46cac49903e15299d12c19d3568
[DO NOT MERGE] wifi: remove certificates for network factory reset
9500902 
When a user does network factory reset, wifi certificate should
also be cleared as these certificates are also personal credentials.

Bug: 231985227
Test: atest FrameworksWifiTests
Merged-In: I0334064347080e43096d01f00cf516804812d0c0
Change-Id: I0334064347080e43096d01f00cf516804812d0c0
(cherry picked from commit dbf6810)
Merged-In: I0334064347080e43096d01f00cf516804812d0c0
Merge cherrypicks of [19693677] into security-aosp-rvc-release.
7163495 
Change-Id: If18ba75250d79d8cd97c785377430f3e6c94d933
@haggertk
Merge tag 'android-security-11.0.0_r61' of https://android.googlesour…
6056af9 
…ce.com/platform/frameworks/opt/net/wifi into staging/lineage-18.1_merge_android-security-11.0.0_r61

Android security 11.0.0 release 61

* tag 'android-security-11.0.0_r61' of https://android.googlesource.com/platform/frameworks/opt/net/wifi:
  [DO NOT MERGE] wifi: remove certificates for network factory reset

Change-Id: I230e0eaf1009d05d2f3fb9e7ea0eb8bec7b3a5b2
[RESTRICT AUTOMERGE] Only handle saveToStore from the WifiNetworkSugg…
e0a036b 
…estionsManager

Suggestion app may add a list of passpoint suggestions, only saveToStore
once to reduce the number of writing xml.
Also remove the suggestions which trigger the OOM exception

Bug: 245299920
Test: atest com.android.server.wifi
Merged-In: I8fd038c41399f9f04dda278a6e67b8a5d1d42e44
Change-Id: I8fd038c41399f9f04dda278a6e67b8a5d1d42e44
(cherry picked from commit 543a0f9)
Merged-In: I8fd038c41399f9f04dda278a6e67b8a5d1d42e44
Merge cherrypicks of [20293997] into security-aosp-rvc-release.
85d4d2a 
Change-Id: Icda65eee458f1296fd320f60a7e38f67c09e318e
[DO NOT MERGE] wifi: Reset to default SAP configuration when doing fa…
8c2a436 
…ctory reset

Bug: 241927115
Test: atest -c FrameworksWifiTests
Change-Id: Ifdab8dd4bfec9012ed5c052e1b468aacc7cf9749
Merged-In: Ia212666450fd9fe3a95393defa2fb56383bab83a
(cherry picked from commit 08358df)
Merged-In: Ifdab8dd4bfec9012ed5c052e1b468aacc7cf9749
Merge cherrypicks of ['ag/19693686'] into security-aosp-rvc-release.
7efdc1a 
Change-Id: If9a5a949114d712d5edbc861a19ccf8a0f49aa7c
@haggertk
Merge tag 'android-security-11.0.0_r63' of https://android.googlesour…
3535c43 
…ce.com/platform/frameworks/opt/net/wifi into staging/lineage-18.1_merge_android-security-11.0.0_r63

Android security 11.0.0 release 63

* tag 'android-security-11.0.0_r63' of https://android.googlesource.com/platform/frameworks/opt/net/wifi:
  [RESTRICT AUTOMERGE] Only handle saveToStore from the WifiNetworkSuggestionsManager

Change-Id: I31a3fe67807fc8f38d6c10dda470dd7a597cb432
Revert "[DO NOT MERGE] wifi: remove certificates for network factory …
2b280ab 
…reset"

This reverts commit dbf6810.

Reason for revert: functional regression

Change-Id: Ie61d52973c9e67e6cdfa0c320024952a2b0c2d46
(cherry picked from commit d8275ec)
Merged-In: Ie61d52973c9e67e6cdfa0c320024952a2b0c2d46
Merge cherrypicks of ['googleplex-android-review.googlesource.com/213…
b2df9dd 
…00837'] into security-aosp-rvc-release.

Change-Id: I7b1e0596b64de9a7127290f44bdd4608e5746be3
Revert "Revert "[DO NOT MERGE] wifi: remove certificates for network …
13b569e 
…factory reset""

Bug: 231985227
This reverts commit d8275ec.

Reason for revert: re-release security patch

Change-Id: I91ec19ee9f70a676de96b86c212416f171e15943
(cherry picked from commit 625419f)
Merged-In: I91ec19ee9f70a676de96b86c212416f171e15943
Merge cherrypicks of ['googleplex-android-review.googlesource.com/213…
d08e383 
…10542'] into security-aosp-rvc-release.

Change-Id: I0961929c80d9abc988884dc6fc810493b2595c0a
@haggertk
Merge tag 'android-security-11.0.0_r64' of https://android.googlesour…
f9b6f7f 
…ce.com/platform/frameworks/opt/net/wifi into staging/lineage-18.1_merge_android-security-11.0.0_r64

Android Security 11.0.0 Release 64 (9383110)

* tag 'android-security-11.0.0_r64' of https://android.googlesource.com/platform/frameworks/opt/net/wifi:
  [DO NOT MERGE] wifi: Reset to default SAP configuration when doing factory reset

Change-Id: I0c28fa2fd423bd535d3bca5ca8ad920e1bb98e9f
@haggertk
Merge tag 'android-security-11.0.0_r65' of https://android.googlesour…
a9131e4 
…ce.com/platform/frameworks/opt/net/wifi into staging/lineage-18.1_merge_android-security-11.0.0_r65

Android security 11.0.0 release 65

* tag 'android-security-11.0.0_r65' of https://android.googlesource.com/platform/frameworks/opt/net/wifi:
  Revert "[DO NOT MERGE] wifi: remove certificates for network factory reset"

Change-Id: I998fba6a2dcef441b8a1b7af5bacb8ed1e985d63
@haggertk
Merge tag 'android-security-11.0.0_r66' of https://android.googlesour…
16ad3c5 
…ce.com/platform/frameworks/opt/net/wifi into staging/lineage-18.1_merge_android-security-11.0.0_r66

Android Security 11.0.0 Release 66 (9682389)

* tag 'android-security-11.0.0_r66' of https://android.googlesource.com/platform/frameworks/opt/net/wifi:
  Revert "Revert "[DO NOT MERGE] wifi: remove certificates for network factory reset""

Change-Id: I27df3ef2356ebc33401cbfb777eb51abcc70ba42
@Meghthedev
Merge branch 'lineage-18.1' into eleven
040b0f0
@Meghthedev
DO NOT MERGE: Add pre-share key check for wapi
e3e1479 
Bug: 275339978
Test: atest com.androi.server.wifi
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:07d112fb45449e06233b71e877e835084c76f220)
Merged-In: Ibd3ee52c5993a541abb7b373e4052091d13e9c4f
Change-Id: Ibd3ee52c5993a541abb7b373e4052091d13e9c4f
@Meghthedev
DO NOT MERGE: Limit the number of Passpoint per App
4234b31 
Reject the suggestion passpoint with ServiceFriendlyNames

Bug: 274445194
Test: atest com.android.server.wifi
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:b081fc592709895f0e745ad33b41174b3b2ad399)
Merged-In: I30606e9bb4eba54b5b9111de4982c0cfb565b3dc
Change-Id: I30606e9bb4eba54b5b9111de4982c0cfb565b3dc
@Meghthedev
DO NOT MERGE: Update password check for WAPI
0c86ede 
Do not allow arbitrarily large passwords.

Bug: 275339978
Test: compile
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:2cfaee8ef94211cdef61f407d953017e091c21d3)
Merged-In: Ic997738f59b8959852856417a87634638bb3f025
Change-Id: Ic997738f59b8959852856417a87634638bb3f025
@Meghthedev Meghthedev mentioned this pull request Oct 11, 2023
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@Meghthedev @zhujiatai @haggertk @AgentFabulous