android-security-12.0.0_r49 to android-security-12.0.0_r50 AOSP changelog

This only includes the Android Open Source Project changes and does not include any changes in any proprietary components included by Google or any hardware manufacturer. The raw log was generated using a modified version of this script written by JBQ and improved by Al Sutton.

Please do not copy this without attribution to this site and JBQ for the original script.

+- Project: platform/build

12aa0f0bd1 : Version bump to SSV1.210916.070 [core/build_id.mk]

+- Project: platform/external/aac

4c0620c : Increase patchParam array size by one and fix out-of-bounce write in resetLppTransposer().

+- Project: platform/external/freetype

597c3f6c8 : Cherrypick following three changes

+- Project: platform/frameworks/base

44004ea2218a : Merge "Resolve StatusHints image exploit across user." into rvc-dev am: 543e6febbf am: 8c3d465b5e
b639bf98be9e : Verify URI permissions in MediaMetadata
8208665ee84a : Remove unnecessary padding code
ec2c95628742 : Merge "Use Settings.System.getIntForUser instead of getInt to make sure user specific settings are used" into rvc-dev am: d198f5165c am: 886d492c8c
a458349ccaa8 : Visit URIs in themed remoteviews icons.
f2dcaa728393 : Fix PrivacyChip not visible issue
db5bc7bb0517 : Check URIs in sized remote views.
662c5030423d : Validate ComponentName for MediaButtonBroadcastReceiver
c452644f56da : Implement visitUris for RemoteViews ViewGroupActionAdd.
8b8f85c9d8dd : Check URIs in notification public version.
8ae9d480193f : Preserve flags for non-runtime permissions upon package update.
f88afd13d35e : On device lockdown, always show the keyguard
b3b9f6d9e5fe : Ensure policy has no absurdly long strings
350b8400a94e : Verify URI permissions for notification shortcutIcon.
ec3547b15e7a : Do not load drawable for wallet card if the card image icon iscreated with content URI.
b7886f31bf10 : ActivityManagerService: Allow openContentUri from vendor/system/product.
5f446d2ce101 : DO NOT MERGE: ActivityManager#killBackgroundProcesses can kill caller's own app only

+- Project: platform/packages/apps/ManagedProvisioning

f6e13256 : Remove factory-reset logic from post-suw syncauth

+- Project: platform/packages/modules/NeuralNetworks

12f3eaefb : Fix OOB read in parseInputs in ShimPreparedModel.cpp
522f457c9 : Fix OOB Read in setOperandValue

+- Project: platform/packages/modules/Permission

c20027257 : RESTRICT AUTOMERGE Finish ManagePermissionsActivity if device is not provisioned

+- Project: platform/packages/providers/TelephonyProvider

018b9649 : Update file permissions using canonical path

+- Project: platform/packages/services/Telecomm

92f4cd34f : [conflict] Resolve StatusHints image exploit across user. am: 49d19dd265 am: 2a10deb1a0

+- Project: platform/system/ca-certificates

b3632bf : Drop TrustCor certificates