android-security-12.0.0_r39 to android-security-12.0.0_r40 AOSP changelog

This only includes the Android Open Source Project changes and does not include any changes in any proprietary components included by Google or any hardware manufacturer. The raw log was generated using a modified version of this script written by JBQ and improved by Al Sutton.

Please do not copy this without attribution to this site and JBQ for the original script.

+- Project: platform/build

0eed992f12 : Version bump to SSV1.210916.043 [core/build_id.mk]
78b0efb91d : Version bump to SSV1.210916.042 [core/build_id.mk]
7d2d11be7e : Version bump to SSV1.210916.041 [core/build_id.mk]
a95a5c2804 : Version bump to SSV1.210916.040 [core/build_id.mk]

+- Project: platform/external/dtc

82a1119 : FROMGIT: libfdt: fdt_offset_ptr(): Fix comparison warnings

+- Project: platform/frameworks/av

e194faf030 : Add missing bounds checks
21b89e6f71 : Cache MMAP client silenced state.

+- Project: platform/frameworks/base

7fa32b4da4a1 : Enforce zen rule limit on a package level.
3387b58a4cee : DO NOT MERGE - Exclude TYPE_PRIVATE_PRESENTATION app visiblity
a1baa08b7660 : Fix Notification redaction when power cycling a non-dozing device while occluded.
4c3f9e0e37b3 : Remove package name from SafetyNet logs
7e4ff66597eb : Block FullScreenIntent while device is in use if notification has a silencing GroupAlertBehavior.
3b46cef1534b : Parcel: recycle recycles
57a8e0a0e674 : Stop crashing the system on hitting the alarm limit
75de5a1f802b : Fix duplicate permission privilege escalation
a1419335dd86 : Restrict getInputMethodWindowVisibleHeight
dae26dc8d76c : Only allow the system server to connect to sync adapters
470adfc31db4 : Stop using invalid URL to prevent unexpected crash
949573ea9a6a : Remove package title from notification access confirmation intent
e1f3cb213291 : Make CheckOp return allowed if any attr tag for a package is excluded
6830e754640c : Allow system server uid to bypass location restriction
b8c108aeca38 : Disallow privileged apps to bypass location restriction
52756d57d5f4 : DO NOT MERGE. Add a permissions check to LocationManagerService.
18ade10fb8ca : Clear mInterface before calling resetIkeState()
5dd54b0d8492 : Make sure callingPackage belongs to callingUid when checking BG-FGS restrictions.
43f588e6f6af : DO NOT MERGE Suppress notifications when device enter lockdown
caa025154e78 : [RESTRICT AUTOMERGE]Only allow system and same app to apply relinquishTaskIdentity
6a7ce3a5178d : DO NOT MERGE: WM: Call Transaction#sanitize
9c1af7826df2 : Remove package name from SafetyNet logs
937c44ec16bc : Parcel: recycle recycles
8538f06f29d3 : Fix duplicate permission privilege escalation
e86156084bcf : Only allow the system server to connect to sync adapters
d8f82ebc74c7 : Stop using invalid URL to prevent unexpected crash
acc83ab08d46 : Remove package title from notification access confirmation intent
4648456345b6 : Make CheckOp return allowed if any attr tag for a package is excluded
9f5ca339b0f3 : Allow system server uid to bypass location restriction
14b0649e2656 : Disallow privileged apps to bypass location restriction
f796ac71c3c5 : DO NOT MERGE. Add a permissions check to LocationManagerService.
90fece0bec5e : Clear mInterface before calling resetIkeState()
05cd832c241a : Make sure callingPackage belongs to callingUid when checking BG-FGS restrictions.
627dcb8bdbff : DO NOT MERGE Suppress notifications when device enter lockdown
6ae9525c7fd6 : [RESTRICT AUTOMERGE]Only allow system and same app to apply relinquishTaskIdentity
621168ea0711 : DO NOT MERGE: WM: Call Transaction#sanitize
0cdf822948bc : Update ServiceState broadcast for location permissions
750bcc99f65b : Add excludedPackages parameter to broadcast

+- Project: platform/hardware/interfaces

ed6faa58f : Fix array out of bound in audioTransportToHal.

+- Project: platform/packages/providers/MediaProvider

8d5cc67ac : isDataOrObbPath blocks access to Android/[data|obb] dirs only

+- Project: platform/system/nfc

0cd2b0c0 : The length of a packet should be non-zero