android-security-12.0.0_r41 to android-security-12.0.0_r42 AOSP changelog

This only includes the Android Open Source Project changes and does not include any changes in any proprietary components included by Google or any hardware manufacturer. The raw log was generated using a modified version of this script written by JBQ and improved by Al Sutton.

Please do not copy this without attribution to this site and JBQ for the original script.

+- Project: platform/build

c866c51468 : Version bump to SSV1.210916.050 [core/build_id.mk]
ab4cb02845 : Version bump to SSV1.210916.049 [core/build_id.mk]
3afa11f99c : Version bump to SSV1.210916.048 [core/build_id.mk]

+- Project: platform/external/dtc

91e997e : libfdt: fdt_path_offset_namelen: Reject empty paths

+- Project: platform/frameworks/av

e8e5514ec1 : libstagefright: fix heap use after free issue

+- Project: platform/frameworks/base

e17ba4ff6d5b : Revert "Make Activites touch opaque - DO NOT MERGE"
ae5ead8d22d5 : Revert "Limit lengths of fields in Condition to a max length."
bd47421f9a1e : [DO NOT MERGE] Revert "Check rule package name in ZenModeHelper.addAutomaticRule"
d34de452ed1d : [DO NOT MERGE] Revert "Fix system zen rules by using owner package name if caller is system"
eee64e56826e : Validate package name passed to setApplicationRestrictions.
583f87f33318 : SurfaceControl: Add setDropInputMode api
db92de2db19c : Add safety checks on KEY_INTENT mismatch.
5a173bdc4896 : [DO NOT MERGE] Fix permanent denial of service via setComponentEnabledSetting
8be40a86ee7a : Lower per-app notificationchannel limit
ccd82652d1db : [Do Not Merge] Ignore malformed shortcuts
d9d78c2aa8fe : Prevent exfiltration of system files via avatar picker.
723936bc7c63 : [DO NOT MERGE] Update window with FLAG_SECURE when bouncer is showing
65fdb1111cb8 : [RESTRICT AUTOMERGE] Allow activity to be reparent while allowTaskReparenting is applied
8d31bc04fb92 : Fix a security issue in app widget service.
563c3ab219b9 : Fix NPE
174bec5165da : Limit lengths of fields in Condition to a max length.
029b7edb3c03 : [pm] forbid deletion of protected packages
5832af28806d : Include all enabled services when FEEDBACK_ALL_MASK.
7b03ed854e59 : Limit the size of NotificationChannel and NotificationChannelGroup
6b560dcc92f5 : Prevent non-admin users from deleting system apps.
ea4adc194778 : Revert "Prevent exfiltration of system files via user image settings."
c85e5d3ff38a : Revert "Prevent non-admin users from deleting system apps."
205efdcb27b0 : Make Activites touch opaque - DO NOT MERGE
d85f41a51fcf : Drop input for toast and child surfaces

+- Project: platform/frameworks/minikin

ee13242 : Fix OOB crash for registerLocaleList
3638855 : Fix OOB read for registerLocaleList

+- Project: platform/frameworks/native

b9ecbbdded : Initialize DrawingState::trustedOverlay to false in constructor
6e6fa67c1a : SurfaceFlinger: Implement drop input modes
9f3eae98ef : InputFlinger: Add DROP_INPUT feature flags
2c2a47826b : SurfaceControl: Add setDropInputMode api

+- Project: platform/hardware/nxp/nfc

a709318 : OOBR in NxpMfcReader::SendIncDecRestoreCmdPart2

+- Project: platform/packages/apps/EmergencyInfo

85574cbd : Prevent exfiltration of system files via avatar picker.
5ffe0aa7 : Revert "Prevent exfiltration of system files via user image settings."

+- Project: platform/packages/apps/Settings

a6e4500bd2 : [DO NOT MERGE] Add FLAG_SECURE for ChooseLockPassword and Pattern

+- Project: platform/packages/modules/Wifi

0a6d7c530b : [DO NOT MERGE] passpoint: validate decorated identity prefix
d5e71249b3 : Give the location mode exemption for emergency location service

+- Project: platform/packages/services/Telecomm

ed91aca11 : Hide overlay windows when showing phone account enable/disable screen.