*************************************************************** *************************************************************** 111 file changed, 1586 insertions(+), 556 deletions(-) *************************************************************** *************************************************************** ========platform/art between android-7.0.0_r6..android-7.0.0_r14========= compiler/optimizing/inliner.cc | 5 +- test/613-inlining-dex-cache/expected.txt | 1 + test/613-inlining-dex-cache/info.txt | 2 + test/613-inlining-dex-cache/run | 20 +++++ test/613-inlining-dex-cache/src-ex/B.java | 18 +++++ .../src-ex/LoadedByAppClassLoader.java | 22 ++++++ test/613-inlining-dex-cache/src/B.java | 20 +++++ test/613-inlining-dex-cache/src/Main.java | 85 ++++++++++++++++++++++ 8 files changed, 172 insertions(+), 1 deletion(-) 7300ad4 Pass the right class loader when inlining. ========platform/build between android-7.0.0_r6..android-7.0.0_r14========= core/build_id.mk | 2 +- core/version_defaults.mk | 11 ++++++----- 2 files changed, 7 insertions(+), 6 deletions(-) 2af2da3 NBD90Z c363420 NBD90Y 661444a NBD90X 18da38c NBD90W 2b41208 Update comments around PLATFORM_SECURITY_LEVEL (nyc-dev) Bug: 29881091 d6c83b7 Update Security String to 2016-10-05 to Platform and CTS for October Security Updates (rebased) baa9303 Update Security String to 2016-10-01 to platform and CTS for October Security 80fbf8c NBD90V a178721 Update comments around PLATFORM_SECURITY_LEVEL (nyc-dev) Bug: 29881091 7c44cd2 Update Security String to 2016-10-05 to Platform and CTS for October Security Updates (rebased) 7c98a41 Update Security String to 2016-10-01 to platform and CTS for October Security e802356 NBD90U 79c7788 NBD90T 740f963 Fix build prefix to avoid duplicate build registries ========device/asus/fugu-kernel between android-7.0.0_r6..android-7.0.0_r14========= bzImage | Bin 5277200 -> 5277280 bytes 1 file changed, 0 insertions(+), 0 deletions(-) ce36384 fugu: update prebuilt kernel [ DO NOT MERGE ] ========device/google/dragon-kernel between android-7.0.0_r6..android-7.0.0_r14========= Image.fit | Bin 7773832 -> 7773976 bytes 1 file changed, 0 insertions(+), 0 deletions(-) fa4bb86 ryu: update prebuilt kernel ========device/htc/flounder-kernel between android-7.0.0_r6..android-7.0.0_r14========= Image.gz-dtb | Bin 7261845 -> 7252938 bytes 1 file changed, 0 insertions(+), 0 deletions(-) b03bbc5 flounder: update kernel prebuilt (Oct 2016 Security) ========device/huawei/angler between android-7.0.0_r6..android-7.0.0_r14========= media_codecs_performance.xml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) 907884c media: update media_codecs_performance.xml ce2bbf0 media: update media_codecs_performance.xml ========device/huawei/angler-kernel between android-7.0.0_r6..android-7.0.0_r14========= Image.gz-dtb | Bin 11286702 -> 11291202 bytes 1 file changed, 0 insertions(+), 0 deletions(-) 7fa9443 angler: update prebuilt kernel [ DO NOT MERGE ] 1b011f1 angler: update prebuilt kernel [ DO NOT MERGE ] ========device/lge/bullhead-kernel between android-7.0.0_r6..android-7.0.0_r14========= Image.gz-dtb | Bin 10868019 -> 10866969 bytes 1 file changed, 0 insertions(+), 0 deletions(-) a5277ca bullhead: update prebuilt kernel [ DO NOT MERGE ] 4d0df9d bullhead: update prebuilt kernel [ DO NOT MERGE ] de944c1 bullhead: update prebuilt kernel [ DO NOT MERGE ] fe97c47 bullhead: update prebuilt kernel [ DO NOT MERGE ] ========device/moto/shamu between android-7.0.0_r6..android-7.0.0_r14========= device.mk | 10 ++++++++++ 1 file changed, 10 insertions(+) bead262 Revert "Path fix for backend connection to FE upon call disconnection" e655ce7 Path fix for backend connection to FE upon call disconnection d2117b6 shamu: Set default values for audio HAL. ========device/moto/shamu-kernel between android-7.0.0_r6..android-7.0.0_r14========= zImage-dtb | Bin 7250167 -> 7251567 bytes 1 file changed, 0 insertions(+), 0 deletions(-) 6e9b011 shamu: update prebuilt kernel [ DO NOT MERGE ] ========platform/external/icu between android-7.0.0_r6..android-7.0.0_r14========= .../cts/coverage/text/LocaleDisplayNamesTest.java | 17 +++++++++++++++++ icu4c/source/data/region/tr.txt | 2 +- icu4c/source/stubdata/icudt56l.dat | Bin 22197648 -> 22197616 bytes icu4j/main/shared/data/icudata.jar | Bin 9931404 -> 9931402 bytes 4 files changed, 18 insertions(+), 1 deletion(-) 64801af Changed Turkish translation for Cyprus, cts tests 745f26a Changed Turkish translation for Cyprus, generated binaries 649ea10 Changed Turkish translation for Cyprus, source only ========platform/external/skia between android-7.0.0_r6..android-7.0.0_r14========= src/codec/SkJpegCodec.cpp | 11 ++++++----- tests/CodexTest.cpp | 29 +++++++++++++++++++++++++++++ 2 files changed, 35 insertions(+), 5 deletions(-) 30ae072 Fix rewinding bug in SkJpegCodec (cherry picked from Skia) ========platform/frameworks/av between android-7.0.0_r6..android-7.0.0_r14========= media/libmediaplayerservice/MediaPlayerService.cpp | 10 ++++ media/libmediaplayerservice/MediaPlayerService.h | 1 + .../codecs/m4v_h263/dec/SoftMPEG4.cpp | 22 ++++++++- .../codecs/m4v_h263/enc/SoftMPEG4Encoder.cpp | 4 ++ media/libstagefright/id3/ID3.cpp | 57 ++++++++++++++++------ services/audioflinger/Effects.cpp | 23 +++++++++ services/audioflinger/Threads.cpp | 48 +++++++++++++----- services/audioflinger/Threads.h | 5 ++ services/soundtrigger/SoundTriggerHwService.cpp | 38 ++++++++++++--- 9 files changed, 171 insertions(+), 37 deletions(-) 3f1c6d1 MediaPlayerService: allow next player to be NULL 6b9e494 AudioFlinger: Account for frames dropped in suspend mode 60a3e68 AudioFlinger: Prevent offload underrun during active playback c4c6ccc Fix build breakage caused by commit 940829f69b52d6038db66a9c727534636ecc456d. 97cbb2d Add EFFECT_CMD_SET_PARAM parameter checking f19f97e soundtrigger: add size check on sound model and recogntion data 24f0663 MediaPlayerService: avoid invalid static cast c4ff129 better validation lengths of strings in ID3 tags 3717882 SoftMPEG4: Check the buffer size before writing the reference frame. f62a2b6 MediaPlayerService: allow next player to be NULL 28055a7 Fix build breakage caused by commit 940829f69b52d6038db66a9c727534636ecc456d. d705d85 Add EFFECT_CMD_SET_PARAM parameter checking 84c6abf soundtrigger: add size check on sound model and recogntion data 11833ac MediaPlayerService: avoid invalid static cast 23bc140 better validation lengths of strings in ID3 tags 2d1f61f SoftMPEG4: Check the buffer size before writing the reference frame. ========platform/frameworks/base between android-7.0.0_r6..android-7.0.0_r14========= .../accessibilityservice/AccessibilityService.java | 8 +- .../accessibilityservice/GestureDescription.java | 160 ++++++++++++++++++--- .../IAccessibilityServiceConnection.aidl | 2 +- .../hardware/fingerprint/FingerprintManager.java | 21 ++- .../fingerprint/IFingerprintServiceReceiver.aidl | 2 +- core/java/android/os/Process.java | 21 ++- core/java/android/provider/Settings.java | 9 +- .../java/android/text/SpannableStringInternal.java | 3 +- core/java/android/util/ArraySet.java | 50 ++++--- core/java/android/util/MemoryIntArray.java | 50 ++++--- core/java/android/view/TextureView.java | 54 +++---- core/java/android/view/View.java | 3 + core/java/android/widget/AbsListView.java | 38 +++-- core/java/android/widget/GridView.java | 107 +++++++------- core/java/android/widget/ListView.java | 119 +++++++-------- .../android/internal/view/FloatingActionMode.java | 9 +- .../android/internal/widget/LockPatternUtils.java | 4 +- .../internal/widget/ResolverDrawerLayout.java | 2 +- core/jni/android_util_MemoryIntArray.cpp | 8 -- core/res/res/layout/alert_dialog_material.xml | 1 + .../graphics/drawable/DrawableContainer.java | 2 +- media/java/android/media/ImageReader.java | 26 ++++ media/jni/android_media_ImageReader.cpp | 18 +++ .../android/keyguard/KeyguardUpdateMonitor.java | 8 +- .../com/android/settingslib/SuggestionParser.java | 4 +- .../systemui/qs/external/TileLifecycleManager.java | 18 +++ .../systemui/qs/external/TileServiceManager.java | 9 +- .../android/systemui/statusbar/BaseStatusBar.java | 18 +-- .../statusbar/ExpandableNotificationRow.java | 34 +++-- .../systemui/statusbar/phone/PhoneStatusBar.java | 1 - .../systemui/statusbar/phone/QSTileHost.java | 16 +-- .../statusbar/phone/StatusBarIconController.java | 8 +- .../statusbar/phone/StatusBarIconList.java | 7 +- .../stack/NotificationStackScrollLayout.java | 45 ++++-- .../statusbar/stack/StackScrollAlgorithm.java | 14 +- .../accessibility/AccessibilityManagerService.java | 16 ++- .../com/android/server/AlarmManagerService.java | 7 +- .../com/android/server/LocationManagerService.java | 13 +- .../com/android/server/LockSettingsService.java | 6 + .../android/server/am/ActivityManagerService.java | 21 ++- .../java/com/android/server/am/ActivityStack.java | 10 ++ .../android/server/am/ActivityStackSupervisor.java | 2 +- .../java/com/android/server/am/BroadcastQueue.java | 5 + .../server/fingerprint/AuthenticationClient.java | 6 +- .../server/fingerprint/FingerprintService.java | 2 +- .../android/server/location/GpsXtraDownloader.java | 22 ++- .../android/server/pm/PackageManagerService.java | 6 + services/net/java/android/net/apf/ApfFilter.java | 16 ++- 48 files changed, 687 insertions(+), 344 deletions(-) 81a0e13 LocationManager - Handle Shutdown for right User 9725a59 DO NOT MERGE ANYWHERE: ImageReader: Add discardFreeBuffers method b439040 Properly close fd backing a MemoryIntArray 6c7bda6 Backup system QS tiles DO NOT MERGE 628bf23 Sanity check ICMP6 router advertisement packets 8da0528 update shared libraries for system apps a8a8675 Cherry pick TextureView fixes 6f761da Eliminate next-alarm-clock broadcast flapping 496a581 DO NOT MERGE -- Fix finishing activity in non-focused stack ed42959 Make sure IME focus is synced to View focus 086ec0f Fix double status bar icons d7789d0 Force AlertDialogLayout to have gravity start|top 535eb07 ChooserActivity: Cannot start app that the icon overflows the layout 37e9867 FloatingActionMode: Fix screen coordinates. b341e02 Set up view state before attaching, jump drawables if needed 33c9b5f Fixed a bug where notifications could reappear 7f5d46a Fixed a bug where the headsup would be stuck disappearing c662295 Enforce consistent sizes for arrays in SpannableStringInternal 5a5b2a49 DO NOT MERGE -- Correctly finish activity in non-focused stack d7a94a8 Fix vulnerability in LockSettings service 97a619d DO NOT MERGE: Clean up when recycling a pid with a pending launch 9e96728 Limit capabilities of a11y gesture dispatch. 9b0ae9f Process: Fix communication with zygote. 1d482ed DO NOT MERGE: Fix vulnerability where large GPS XTRA data can be injected. -Can potentially crash system with OOM. Bug: 29555864 6ced050 Bind fingerprint when we start authentication 38ba968 Fix vulnerability in LockSettings service d244887 DO NOT MERGE: Clean up when recycling a pid with a pending launch d9a7562 Limit capabilities of a11y gesture dispatch. c8a462e Process: Fix communication with zygote. 24fa845 DO NOT MERGE: Fix vulnerability where large GPS XTRA data can be injected. -Can potentially crash system with OOM. Bug: 29555864 b55f2e5 Bind fingerprint when we start authentication 904e596 Try to mitigate issue #31016187: system_server crash in ArraySet. 71c5b44 Avoid potential re-entry as a result of child mutation c4d27e9 Added error handling to settings suggestions list ========platform/frameworks/native between android-7.0.0_r6..android-7.0.0_r14========= cmds/servicemanager/Android.mk | 2 +- cmds/servicemanager/service_manager.c | 7 ++++ include/gui/BufferQueueConsumer.h | 3 ++ include/gui/BufferQueueCore.h | 5 +++ include/gui/ConsumerBase.h | 3 ++ include/gui/IGraphicBufferConsumer.h | 5 +++ libs/gui/BufferQueueConsumer.cpp | 6 +++ libs/gui/BufferQueueCore.cpp | 10 +++++ libs/gui/ConsumerBase.cpp | 9 ++++ libs/gui/IGraphicBufferConsumer.cpp | 22 ++++++++++ libs/gui/tests/BufferQueue_test.cpp | 77 +++++++++++++++++++++++++++++++++++ 11 files changed, 148 insertions(+), 1 deletion(-) 9b8b9a6 DO NOT MERGE ANYWHERE: BufferQueue consumers: Add discardFreeBuffer method a08cb88 ServiceManager: Allow system services running as secondary users to add services f369622 ServiceManager: Restore basic uid check 6b19f00 ServiceManager: Allow system services running as secondary users to add services e7d5681 ServiceManager: Restore basic uid check ========platform/frameworks/opt/net/wifi between android-7.0.0_r6..android-7.0.0_r14========= .../com/android/server/wifi/anqp/ANQPFactory.java | 158 ++++++++++++--------- .../android/server/wifi/anqp/VenueNameElement.java | 8 +- 2 files changed, 91 insertions(+), 75 deletions(-) 92a1fa7 VenueNameElement: fix off-by-one enum bounds check 2c82860 ANQPFactory: catch all potential parsing errors 5a6c3b4 VenueNameElement: fix off-by-one enum bounds check 5d76c86 ANQPFactory: catch all potential parsing errors ========platform/frameworks/opt/telephony between android-7.0.0_r6..android-7.0.0_r14========= src/java/com/android/internal/telephony/cat/CatService.java | 1 - 1 file changed, 1 deletion(-) 8590a94 Remove flag from intent sent from Catservice to StkApp. ========platform/hardware/ril between android-7.0.0_r6..android-7.0.0_r14========= libril/RilSapSocket.cpp | 15 +++++++++++++-- 1 file changed, 13 insertions(+), 2 deletions(-) 916e84e Replace variable-length arrays on stack with malloc. f1f2724 Replace variable-length arrays on stack with malloc. ========platform/libcore between android-7.0.0_r6..android-7.0.0_r14========= .../java/libcore/java/util/zip/ZipFileTest.java | 49 ++++++++++++++++++++++ ojluni/src/main/java/java/util/zip/ZipFile.java | 8 ++++ ojluni/src/main/native/java_util_zip_ZipFile.c | 7 ++++ ojluni/src/main/native/zip_util.c | 33 ++++++--------- 4 files changed, 76 insertions(+), 21 deletions(-) f0de41a ZipFile: Never change file offset during I/O operations. ========platform/packages/apps/Dialer between android-7.0.0_r6..android-7.0.0_r14========= src/com/android/dialer/util/TelecomUtil.java | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) 7f6e414 [Cherry-pick] Use the correct handleMmi function ========platform/packages/apps/Email between android-7.0.0_r6..android-7.0.0_r14========= .../com/android/email/provider/AttachmentProvider.java | 14 +++++++++----- 1 file changed, 9 insertions(+), 5 deletions(-) 19df2a4 Limit account id and id to longs 0bb048c Limit account id and id to longs ========platform/packages/apps/Settings between android-7.0.0_r6..android-7.0.0_r14========= .../settings/bluetooth/BluetoothSettings.java | 9 ++++---- src/com/android/settings/wifi/WifiSettings.java | 24 +++++++++++++++++++--- 2 files changed, 25 insertions(+), 8 deletions(-) 54967fd Fix NullPointerException when refreshing wifi preferences. 662943f Remove preference "Searching for Wi-Fi networks..." 575e991 Fix multiple bluetooth devices bug 1a4f137 Don't remove wifi preferences when updating AP to avoid GC. ========platform/packages/apps/Stk between android-7.0.0_r6..android-7.0.0_r14========= AndroidManifest.xml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) 7490cc5 Make stk app FBE aware. ========platform/packages/providers/TelephonyProvider between android-7.0.0_r6..android-7.0.0_r14========= .../android/providers/telephony/MmsProvider.java | 37 ++++++++++++++++------ 1 file changed, 28 insertions(+), 9 deletions(-) 6a33615 30481342: Security Vulnerability - TOCTOU in MmsProvider allows access to files as phone (radio) uid ac80481 30481342: Security Vulnerability - TOCTOU in MmsProvider allows access to files as phone (radio) uid ========platform/system/bt between android-7.0.0_r6..android-7.0.0_r14========= audio_a2dp_hw/audio_a2dp_hw.c | 27 ++++++++++++--------------- btif/src/btif_dm.c | 1 - 2 files changed, 12 insertions(+), 16 deletions(-) 30a8f58 audio_a2dp_hw: Always update frame counter in out_write ea06f02 Disable auto-pairing for hands-free devices ========platform/system/core between android-7.0.0_r6..android-7.0.0_r14========= include/sysutils/FrameworkListener.h | 1 + libsysutils/src/FrameworkListener.cpp | 17 ++++++++++++++--- 2 files changed, 15 insertions(+), 3 deletions(-) 9544ee2 Fix vold vulnerability in FrameworkListener bbceed5 Fix vold vulnerability in FrameworkListener ========platform/system/media between android-7.0.0_r6..android-7.0.0_r14========= camera/src/camera_metadata.c | 73 ++++++++++++++++++++++++++++++++++---------- 1 file changed, 57 insertions(+), 16 deletions(-) a0cbcf8 Camera: Prevent data size overflow 8188864 Camera metadata: Check for inconsistent data count d2c8e5a Camera: Prevent data size overflow 2577301 Camera metadata: Check for inconsistent data count