In several functions of inputDispatcher.cpp, there is a possible way to make toasts clickable due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "vanir_signatures": [ { "digest": { "threshold": 0.9, "line_hashes": [ "311953497148197029933324416290998037504", "118246843358539241614015548138965597310", "42710371276610711414791601201715173153", "171134238578213140909844070041437706304", "301818561232954363501294321942824960879", "117274481847790116195683706567649776575", "214026053996811510671851429925048764" ] }, "id": "ASB-A-197296414-13953a1a", "source": "https://android.googlesource.com/platform/frameworks/base/+/d100067fd62adb4648e966b3306b9a2f3b1fd38e", "deprecated": false, "signature_version": "v1", "target": { "file": "core/jni/android_view_SurfaceControl.cpp" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "203029237438965823023356967191998218595", "273395931675484147842503613739672896528", "240040061624728186121887860315152888171", "12852265208070752310092706472951411810" ] }, "id": "ASB-A-197296414-143a1ef9", "source": "https://android.googlesource.com/platform/frameworks/base/+/3b8aa02ba51f26161519f6465515f619e663bbbf", "deprecated": false, "signature_version": "v1", "target": { "file": "services/core/java/com/android/server/wm/WindowManagerService.java" }, "signature_type": "Line" }, { "digest": { "length": 11491.0, "function_hash": "131912696702732646749132710676099158388" }, "id": "ASB-A-197296414-86e5aaf8", "source": "https://android.googlesource.com/platform/frameworks/base/+/3b8aa02ba51f26161519f6465515f619e663bbbf", "deprecated": false, "signature_version": "v1", "target": { "file": "services/core/java/com/android/server/wm/WindowManagerService.java", "function": "addWindow" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "179833870550299361643224658453058537731", "129112376122241756615726305678337968761", "304234607324926376362905280437356736830", "328161453624188286050773666798097142527", "327414134263673412432225710113223232204", "36821191322807758373304509005261886519", "202939729348025061167271643899320791581", "139178438079664789903727500123574382986", "314047888469450165801136092425354257071", "189991891994099775720685819681100013572" ] }, "id": "ASB-A-197296414-8d9dc642", "source": "https://android.googlesource.com/platform/frameworks/base/+/d100067fd62adb4648e966b3306b9a2f3b1fd38e", "deprecated": false, "signature_version": "v1", "target": { "file": "core/java/android/view/SurfaceControl.java" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "88366859409507379745598550312653226965", "104868542856261014477726840668409689949", "226754401329672733157234000386632238133", "264208149383639883628341683210780265952", "122306817153474500633591346451668489", "104235581513073197520511415572108749634", "311572538371573169767151076302679617470" ] }, "id": "ASB-A-197296414-d9674149", "source": "https://android.googlesource.com/platform/frameworks/base/+/3b8aa02ba51f26161519f6465515f619e663bbbf", "deprecated": false, "signature_version": "v1", "target": { "file": "services/core/java/com/android/server/wm/DisplayPolicy.java" }, "signature_type": "Line" } ], "fixes": [ "https://android.googlesource.com/platform/frameworks/base/+/3b8aa02ba51f26161519f6465515f619e663bbbf", "https://android.googlesource.com/platform/frameworks/base/+/d100067fd62adb4648e966b3306b9a2f3b1fd38e" ], "spl": "2023-05-01", "severity": "High", "types": [ "EoP" ] }
{ "vanir_signatures": [ { "digest": { "length": 4263.0, "function_hash": "85321956377719038305999607408543720900" }, "id": "ASB-A-197296414-017824fb", "source": "https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/LayerState.cpp", "function": "layer_state_t::write" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "150503157486821923868146077536255846043", "192230278909438056148274588834615062094", "287376412953239765977738891553233042108", "56478940036073037896362339311273138129", "53404380652404682681012273592579667626", "321093200651623695105854718657202513231", "46251325052834908945048416257586168562", "28984688094810427493772657130775496579", "55456630170415686492883120791465611937" ] }, "id": "ASB-A-197296414-08ba9d31", "source": "https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/Layer.h" }, "signature_type": "Line" }, { "digest": { "length": 4589.0, "function_hash": "47999266247089916333572079584543408710" }, "id": "ASB-A-197296414-20996f60", "source": "https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/LayerState.cpp", "function": "layer_state_t::read" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "182343705348232120542497903909418263646", "293296482189617147873206747674749452485", "237524562363994132015089312757465028287", "9627624306546448896085780212882523696", "229264037369727249799805271628392450974", "19238505725022334829452612580440780094", "278850048609891731271640105039241402843" ] }, "id": "ASB-A-197296414-21b07fa9", "source": "https://android.googlesource.com/platform/frameworks/native/+/a066d908f6fe28e63ae49327b57fcd31d63fba2d", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/Layer.cpp" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "14223165169724752704493091077474481795", "109220899226424915473461402143190989699", "53161946974861240269573065313569469784" ] }, "id": "ASB-A-197296414-4be5d5f1", "source": "https://android.googlesource.com/platform/frameworks/native/+/062a867e94dbf811ccca02e7a6a0f0e36465694a", "deprecated": false, "signature_version": "v1", "target": { "file": "services/inputflinger/dispatcher/InputDispatcher.h" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "97891594220133498413498556973634993304", "312400283738509249279063376659246212502", "309155527811924280094561492196769849647", "108721135001065426597384863351467655676", "75237198365249348510669056879189912112", "12816836733618491194802252620444167196", "204093029630329300999255930888451224322", "147217022334432587230381913324021737664", "24012440828944764682617147552231899505", "275702179339186073146370520395828169439", "82596084728377708195470225859619544912", "99800199866854349304788700887315016188", "165591363783187852599662109297152259176", "222688799037533881176123017043377065991", "204509146465589454512991438693435662053", "81071600884264335458320980388699276581" ] }, "id": "ASB-A-197296414-51d461c6", "source": "https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/LayerState.cpp" }, "signature_type": "Line" }, { "digest": { "length": 3087.0, "function_hash": "316218290662285181593402033383964223039" }, "id": "ASB-A-197296414-535bc3e8", "source": "https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/Layer.cpp", "function": "Layer::Layer" }, "signature_type": "Function" }, { "digest": { "length": 5603.0, "function_hash": "18569852635370369374051890919335183130" }, "id": "ASB-A-197296414-66d94154", "source": "https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/LayerState.cpp", "function": "layer_state_t::merge" }, "signature_type": "Function" }, { "digest": { "length": 10708.0, "function_hash": "88119932256767721261038169942284130089" }, "id": "ASB-A-197296414-6e8dc09e", "source": "https://android.googlesource.com/platform/frameworks/native/+/062a867e94dbf811ccca02e7a6a0f0e36465694a", "deprecated": false, "signature_version": "v1", "target": { "file": "services/inputflinger/dispatcher/InputDispatcher.cpp", "function": "InputDispatcher::findTouchedWindowTargetsLocked" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "146798800178739352469124347011906234427", "245602362079099061653406197394632852620", "51387750034090090580032974441621595710", "231393063820076494076567479978024360725", "295082229469293770702386947711250849053", "217954679336350079190014285922532245856" ] }, "id": "ASB-A-197296414-861d4249", "source": "https://android.googlesource.com/platform/frameworks/native/+/062a867e94dbf811ccca02e7a6a0f0e36465694a", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/include/gui/WindowInfo.h" }, "signature_type": "Line" }, { "digest": { "length": 1356.0, "function_hash": "118519813756734484830310669490578439881" }, "id": "ASB-A-197296414-91c0c463", "source": "https://android.googlesource.com/platform/frameworks/native/+/a066d908f6fe28e63ae49327b57fcd31d63fba2d", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/Layer.cpp", "function": "Layer::fillInputInfo" }, "signature_type": "Function" }, { "match_only_versions": [ "13-next" ], "digest": { "threshold": 0.9, "line_hashes": [ "171601302486197886842521910413250858297", "98214352276649790019357862828545060387", "250220979490401785789538850583655074615", "192648178616938825789525318967689511659" ] }, "id": "ASB-A-197296414-b20ea639", "source": "https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2", "deprecated": true, "signature_version": "v1", "target": { "file": "services/surfaceflinger/SurfaceFlinger.cpp" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "336162857937250634926912381912405812033", "108076827672701571458481865564472077211", "196658454795965882892010648300936310237", "247357969604541603093130288732864664092", "107545591960451041774907258753576756000", "72297194117227670856172228248081809290", "223042750717111427067879406118987761030", "89495782372620506404899490754545552362", "93718173520294698051548017376713524214", "173539744006739864687673624440682154804", "195777757636595575455154517084229761402" ] }, "id": "ASB-A-197296414-b6a46b50", "source": "https://android.googlesource.com/platform/frameworks/native/+/062a867e94dbf811ccca02e7a6a0f0e36465694a", "deprecated": false, "signature_version": "v1", "target": { "file": "services/inputflinger/dispatcher/InputDispatcher.cpp" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "286011966806782017106290064443719196892", "159776566307547458953421988277689086597", "214906120592212027662295357829623398679", "16762512894130637708299257594409313144", "304106857839242008931344648656268418947", "277976763031604279920159330272697880096", "91330178860709430704607251398660511149" ] }, "id": "ASB-A-197296414-b6ae683b", "source": "https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/Layer.cpp" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "100569728241379393243498560263148968163", "333639272135675446666071639987160529917", "324247707693181264662448406169943643313", "43574945068599628332563508417376035989" ] }, "id": "ASB-A-197296414-caf43b32", "source": "https://android.googlesource.com/platform/frameworks/native/+/a066d908f6fe28e63ae49327b57fcd31d63fba2d", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/Layer.h" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "334163400372649011446966178117757651514", "287544603732600962723665890104980934041", "114179110197550599042460465320969308455", "322710320279530979612725802119481060586", "247073107840712055612750994906455496393", "245026349079990182062786780711037852076", "88767474208908839947842550485092414487", "106584093719390382319183027201576876973", "191031778708812909978295053447985090898", "94845948927339852806096559570535267802", "62147343740144972207645873344929530629" ] }, "id": "ASB-A-197296414-d9d3358c", "source": "https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/include/gui/LayerState.h" }, "signature_type": "Line" }, { "digest": { "length": 1966.0, "function_hash": "49818536195286255682228227376010569513" }, "id": "ASB-A-197296414-d9ead08f", "source": "https://android.googlesource.com/platform/frameworks/native/+/062a867e94dbf811ccca02e7a6a0f0e36465694a", "deprecated": false, "signature_version": "v1", "target": { "file": "services/inputflinger/dispatcher/InputDispatcher.cpp", "function": "InputDispatcher::findFocusedWindowTargetsLocked" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "185276140152056688418684206868928528495", "283344791535725216088788784478437626414", "122882202201830061564215419130595702791", "107234050801171928837743955564451277465" ] }, "id": "ASB-A-197296414-e3c67001", "source": "https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/include/gui/SurfaceComposerClient.h" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "68924646896661750941083574119415162789" ] }, "id": "ASB-A-197296414-e623c55c", "source": "https://android.googlesource.com/platform/frameworks/native/+/062a867e94dbf811ccca02e7a6a0f0e36465694a", "deprecated": false, "signature_version": "v1", "target": { "file": "services/inputflinger/tests/InputDispatcher_test.cpp" }, "signature_type": "Line" }, { "digest": { "length": 11100.0, "function_hash": "295695829612194455255951840791356293117" }, "id": "ASB-A-197296414-fe614d3e", "source": "https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/SurfaceFlinger.cpp", "function": "SurfaceFlinger::setClientStateLocked" }, "signature_type": "Function" }, { "digest": { "length": 1160.0, "function_hash": "147177294975359552386236408853655551126" }, "id": "ASB-A-197296414-ff2161d6", "source": "https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/LayerState.cpp", "function": "layer_state_t::layer_state_t" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2", "https://android.googlesource.com/platform/frameworks/native/+/062a867e94dbf811ccca02e7a6a0f0e36465694a", "https://android.googlesource.com/platform/frameworks/native/+/a066d908f6fe28e63ae49327b57fcd31d63fba2d" ], "spl": "2023-05-01", "severity": "High", "types": [ "EoP" ] }
{ "vanir_signatures": [ { "digest": { "threshold": 0.9, "line_hashes": [ "274250021002336664820476559574429761921", "328429529577705123693953727569467032596", "78373320504654268722626683840064504069", "105945758530465813433184880365374830523" ] }, "id": "ASB-A-197296414-54e910fa", "source": "https://android.googlesource.com/platform/frameworks/base/+/55c1473bf2fedaacf7bb8ac068e6f9b1a625b5e0", "deprecated": false, "signature_version": "v1", "target": { "file": "services/core/java/com/android/server/wm/WindowManagerService.java" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "179833870550299361643224658453058537731", "78038897886852440938130017935586635386", "121636028308718306402181246539815926521", "40506096930622502289667039751546420548", "321954266236148362971600545714334624668", "267823585691711147043056112624694923708", "91601604676543592496901393277868292534", "276063466254883982987000950949428048107", "77400634208466527640613541421555140892", "36821191322807758373304509005261886519", "202939729348025061167271643899320791581", "139178438079664789903727500123574382986", "314047888469450165801136092425354257071", "189991891994099775720685819681100013572" ] }, "id": "ASB-A-197296414-7997beb5", "source": "https://android.googlesource.com/platform/frameworks/base/+/fad4624dd82c6623d34137d051b76603533ddfc0", "deprecated": false, "signature_version": "v1", "target": { "file": "core/java/android/view/SurfaceControl.java" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "88366859409507379745598550312653226965", "265485485580819519425770261930635776119", "193458388312314157185927738731725940560", "169682011899694344653524900136185212722", "209247006156520135414919465455632668230", "189885709426762610526399389761134554638", "74176406977870527701917233686822607423" ] }, "id": "ASB-A-197296414-89c1d5d3", "source": "https://android.googlesource.com/platform/frameworks/base/+/55c1473bf2fedaacf7bb8ac068e6f9b1a625b5e0", "deprecated": false, "signature_version": "v1", "target": { "file": "services/core/java/com/android/server/wm/DisplayPolicy.java" }, "signature_type": "Line" }, { "digest": { "length": 10412.0, "function_hash": "116407828784510617370529456046600076501" }, "id": "ASB-A-197296414-8bdbf3c5", "source": "https://android.googlesource.com/platform/frameworks/base/+/55c1473bf2fedaacf7bb8ac068e6f9b1a625b5e0", "deprecated": false, "signature_version": "v1", "target": { "file": "services/core/java/com/android/server/wm/WindowManagerService.java", "function": "addWindow" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "311953497148197029933324416290998037504", "118246843358539241614015548138965597310", "42710371276610711414791601201715173153", "205363274732472721891039768664624031456", "88657395150969015236795111864363873816", "77216003140544815108555887206088508807", "166985329352765192808886944748006235976", "313123107633988086848876538416378787127", "111303023665289406622176341513279729981", "22121813102405613255099915607719925795", "255494677026818551270184308431418868415" ] }, "id": "ASB-A-197296414-cea660dd", "source": "https://android.googlesource.com/platform/frameworks/base/+/fad4624dd82c6623d34137d051b76603533ddfc0", "deprecated": false, "signature_version": "v1", "target": { "file": "core/jni/android_view_SurfaceControl.cpp" }, "signature_type": "Line" } ], "fixes": [ "https://android.googlesource.com/platform/frameworks/base/+/55c1473bf2fedaacf7bb8ac068e6f9b1a625b5e0", "https://android.googlesource.com/platform/frameworks/base/+/fad4624dd82c6623d34137d051b76603533ddfc0" ], "spl": "2023-05-01", "severity": "High", "types": [ "EoP" ] }
{ "vanir_signatures": [ { "digest": { "length": 10220.0, "function_hash": "95658283118458550235256002802770838491" }, "id": "ASB-A-197296414-0b1362ec", "source": "https://android.googlesource.com/platform/frameworks/native/+/0f13fe552dcca56a7597a354a6b94587981c3d12", "deprecated": false, "signature_version": "v1", "target": { "file": "services/inputflinger/dispatcher/InputDispatcher.cpp", "function": "InputDispatcher::findTouchedWindowTargetsLocked" }, "signature_type": "Function" }, { "digest": { "length": 2369.0, "function_hash": "37073698488131293179170254576105649147" }, "id": "ASB-A-197296414-0fed7aa4", "source": "https://android.googlesource.com/platform/frameworks/native/+/cbe9c105fcdeba79f1722616e8b576c1d45c93a6", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/Layer.cpp", "function": "Layer::fillInputInfo" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "269152015230492767675400859873267479562", "112408395187673591380666817602596364722", "102247903890090525480103485599486047670" ] }, "id": "ASB-A-197296414-2ac87cf1", "source": "https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/SurfaceComposerClient.cpp" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "110644423627844684930463918181683248301", "334476555289034577931734495050954194735", "139813982187768011200437011358096087110", "339361912602781209922697639298272221565", "50891430653008681251491333837882776136", "94737173544894181961741378860989059474", "49541037522153199499701636333844290620" ] }, "id": "ASB-A-197296414-3150d731", "source": "https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/Layer.cpp" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "78765940826292357361889811474012550313", "29586408741585845623919379813596901030", "57587654368262487689741237204216459100", "84719886112124960572445178176900874769" ] }, "id": "ASB-A-197296414-3805bbcf", "source": "https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13", "deprecated": false, "signature_version": "v1", "target": { "file": "include/input/InputWindow.h" }, "signature_type": "Line" }, { "digest": { "length": 5150.0, "function_hash": "90667564292522968995914015025588740588" }, "id": "ASB-A-197296414-39bc83a5", "source": "https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/LayerState.cpp", "function": "layer_state_t::merge" }, "signature_type": "Function" }, { "digest": { "length": 2064.0, "function_hash": "197661302591114403200552601797231985500" }, "id": "ASB-A-197296414-447d4158", "source": "https://android.googlesource.com/platform/frameworks/native/+/0f13fe552dcca56a7597a354a6b94587981c3d12", "deprecated": false, "signature_version": "v1", "target": { "file": "services/inputflinger/dispatcher/InputDispatcher.cpp", "function": "InputDispatcher::findFocusedWindowTargetsLocked" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "126986805733289649538417554294105305776", "260882624212253221161633240585377370470", "311836382889566102266877895673417042785", "291157230031493436689321748156602037230", "191174235153054945455846432732653566063", "257677755566205524146568505749464632828", "140868773142698208071740103051574566227", "134807452305407089575376323824197912519", "4724012566126506132421597844953848620", "333816177602011247027239831127648721974", "62112395992441585782336578085962872984", "111674099190765509995692558237096818840", "261794808382178831710546480234020305147", "306548908652953074978967504015598080979", "292517974228906096314499383460717898331" ] }, "id": "ASB-A-197296414-4825a6e0", "source": "https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/include/gui/LayerState.h" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "107246722638095229420722775886904366686", "316536198040328116913682417580413452317", "99147079992365162531362492503025406105" ] }, "id": "ASB-A-197296414-4f53dd32", "source": "https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/include/gui/SurfaceComposerClient.h" }, "signature_type": "Line" }, { "digest": { "length": 2874.0, "function_hash": "324437854366794011773192376446497869605" }, "id": "ASB-A-197296414-50eab7a0", "source": "https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/LayerState.cpp", "function": "layer_state_t::write" }, "signature_type": "Function" }, { "digest": { "length": 2923.0, "function_hash": "177146722034585823706254519202780949690" }, "id": "ASB-A-197296414-5cb25997", "source": "https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/LayerState.cpp", "function": "layer_state_t::read" }, "signature_type": "Function" }, { "digest": { "length": 9772.0, "function_hash": "203795082578269184732950689954948407100" }, "id": "ASB-A-197296414-5e654052", "source": "https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/SurfaceFlinger.cpp", "function": "SurfaceFlinger::setClientStateLocked" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "143255663302348209826963127594818665377", "73934884261644113592575042112554590415", "61690637407035033067404382651882172214", "259495312013845175838424260884633941536" ] }, "id": "ASB-A-197296414-8b9f0394", "source": "https://android.googlesource.com/platform/frameworks/native/+/cbe9c105fcdeba79f1722616e8b576c1d45c93a6", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/Layer.h" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "323268881144054206043808568620523809369", "270450720948143680092234906862591531757", "250220979490401785789538850583655074615", "299528391378617941128290108252291769813" ] }, "id": "ASB-A-197296414-a8395b0c", "source": "https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/SurfaceFlinger.cpp" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "24017612679613604963611341087367510659", "218502148837140259731768525170824789772", "79375958336077023109433097144417560124", "267990361919601474916148625163204819841", "267357482444027364756627846960008931989", "101792458537159383112842581175951734150", "264671417626899090870092748554636030266" ] }, "id": "ASB-A-197296414-b576a1b6", "source": "https://android.googlesource.com/platform/frameworks/native/+/0f13fe552dcca56a7597a354a6b94587981c3d12", "deprecated": false, "signature_version": "v1", "target": { "file": "services/inputflinger/tests/InputDispatcher_test.cpp" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "125724775784833165799871999697886011530", "109639850369244922925147474906783594182", "129718680731276671423555968686533361189", "338641716319148729367919294818669823873", "107545591960451041774907258753576756000", "72297194117227670856172228248081809290", "48055512065909234871829372021194144335", "56268812313462911376129521409854863240", "100148932531210696003199354027265351776", "84984307548476407159215466687525388927", "274770921376172655021099730707366217114" ] }, "id": "ASB-A-197296414-d35bf47b", "source": "https://android.googlesource.com/platform/frameworks/native/+/0f13fe552dcca56a7597a354a6b94587981c3d12", "deprecated": false, "signature_version": "v1", "target": { "file": "services/inputflinger/dispatcher/InputDispatcher.cpp" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "42307165690869018218049612825368696034", "198514284164174325934248399540426464571", "156056944192992467108301982514531846112", "122496601891720427843011620000365022741", "137287664393483891012046633672387374289", "125851612503898630110013620967476769490", "122910796159153481025650656603807989028" ] }, "id": "ASB-A-197296414-d38ae17b", "source": "https://android.googlesource.com/platform/frameworks/native/+/cbe9c105fcdeba79f1722616e8b576c1d45c93a6", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/Layer.cpp" }, "signature_type": "Line" }, { "digest": { "length": 2491.0, "function_hash": "113546214982164736915450771724249400237" }, "id": "ASB-A-197296414-e55d8d84", "source": "https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/Layer.cpp", "function": "Layer::Layer" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "150503157486821923868146077536255846043", "246538288030826416552539764643614864482", "269580248648597779370167926163570093575", "38604518672786190834103623131781099367", "147693139548321044492227221737285274178", "157998631244604278369271497364652319490", "82595396020273490695172662037692845675", "15613206381574308866506859256283618526", "225267120491089238054876821147789903010" ] }, "id": "ASB-A-197296414-e943f58d", "source": "https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/Layer.h" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "303257600826695467064320337582540044028", "314261386033770506136846073634374121440", "283507409566447710683245427301608684875" ] }, "id": "ASB-A-197296414-f43a08bf", "source": "https://android.googlesource.com/platform/frameworks/native/+/0f13fe552dcca56a7597a354a6b94587981c3d12", "deprecated": false, "signature_version": "v1", "target": { "file": "services/inputflinger/dispatcher/InputDispatcher.h" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "287745337528452127607584493540565844897", "324497472409075541431215460581495409682", "18178742509267460039439688849632149140", "227351648590916612916411469978529292321", "158842002262602617582051932635241222666", "180021774590099881893998875471752520950", "63483294824671648632675098867167893867", "188291689759418592812831486199948408741", "295221713365475021585111867798197840006", "39439887402080538269885460355966662447" ] }, "id": "ASB-A-197296414-fb5f92b7", "source": "https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/LayerState.cpp" }, "signature_type": "Line" } ], "fixes": [ "https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13", "https://android.googlesource.com/platform/frameworks/native/+/0f13fe552dcca56a7597a354a6b94587981c3d12", "https://android.googlesource.com/platform/frameworks/native/+/cbe9c105fcdeba79f1722616e8b576c1d45c93a6" ], "spl": "2023-05-01", "severity": "High", "types": [ "EoP" ] }
{ "vanir_signatures": [ { "digest": { "threshold": 0.9, "line_hashes": [ "88366859409507379745598550312653226965", "104868542856261014477726840668409689949", "226754401329672733157234000386632238133", "264208149383639883628341683210780265952", "122306817153474500633591346451668489", "104235581513073197520511415572108749634", "311572538371573169767151076302679617470" ] }, "id": "ASB-A-197296414-ddb09159", "source": "https://android.googlesource.com/platform/frameworks/base/+/6ac8376cd79ff485dd5531fca3dff2b093c5ea15", "deprecated": false, "signature_version": "v1", "target": { "file": "services/core/java/com/android/server/wm/DisplayPolicy.java" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "274250021002336664820476559574429761921", "328429529577705123693953727569467032596", "78373320504654268722626683840064504069", "105945758530465813433184880365374830523" ] }, "id": "ASB-A-197296414-f63ff79e", "source": "https://android.googlesource.com/platform/frameworks/base/+/6ac8376cd79ff485dd5531fca3dff2b093c5ea15", "deprecated": false, "signature_version": "v1", "target": { "file": "services/core/java/com/android/server/wm/WindowManagerService.java" }, "signature_type": "Line" }, { "digest": { "length": 11521.0, "function_hash": "153260362683901620278532799697055478626" }, "id": "ASB-A-197296414-f73dbcb7", "source": "https://android.googlesource.com/platform/frameworks/base/+/6ac8376cd79ff485dd5531fca3dff2b093c5ea15", "deprecated": false, "signature_version": "v1", "target": { "file": "services/core/java/com/android/server/wm/WindowManagerService.java", "function": "addWindow" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/platform/frameworks/base/+/6ac8376cd79ff485dd5531fca3dff2b093c5ea15" ], "spl": "2023-05-01", "severity": "High", "types": [ "EoP" ] }
{ "vanir_signatures": [ { "digest": { "length": 1968.0, "function_hash": "170158385538549742031318560372591454135" }, "id": "ASB-A-197296414-020dd659", "source": "https://android.googlesource.com/platform/frameworks/native/+/212dcf44f696158778939aad4619e320148890eb", "deprecated": false, "signature_version": "v1", "target": { "file": "services/inputflinger/dispatcher/InputDispatcher.cpp", "function": "InputDispatcher::findFocusedWindowTargetsLocked" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "68924646896661750941083574119415162789" ] }, "id": "ASB-A-197296414-0a26e5c7", "source": "https://android.googlesource.com/platform/frameworks/native/+/212dcf44f696158778939aad4619e320148890eb", "deprecated": false, "signature_version": "v1", "target": { "file": "services/inputflinger/tests/InputDispatcher_test.cpp" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "128057172000698684731284910354226977118", "288719078066427121728756809084295846482", "319377678347460250753268413465234178296", "254217541972828983813140758487056114064", "229264037369727249799805271628392450974", "19238505725022334829452612580440780094", "150028946346068791804412881516749544449" ] }, "id": "ASB-A-197296414-0df08f5c", "source": "https://android.googlesource.com/platform/frameworks/native/+/9b0d13dc443a102358ad740549ade0b83fe7e522", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/Layer.cpp" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "160474123671948444186042064455534919845", "231393063820076494076567479978024360725", "295082229469293770702386947711250849053", "250303189181371627927185081410081643429" ] }, "id": "ASB-A-197296414-1a225f7e", "source": "https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a", "deprecated": false, "signature_version": "v1", "target": { "file": "include/input/InputWindow.h" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "100569728241379393243498560263148968163", "333639272135675446666071639987160529917", "324247707693181264662448406169943643313", "31485650172828613309020580814212773163" ] }, "id": "ASB-A-197296414-20d6b3fd", "source": "https://android.googlesource.com/platform/frameworks/native/+/9b0d13dc443a102358ad740549ade0b83fe7e522", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/Layer.h" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "126986805733289649538417554294105305776", "138483878539640683271924455254639517428", "204332114220807243893036472636941690678", "278719410775083585129922885556841685274", "208782102399465692838426836369055984339", "218140701409267659201492117015240076837", "322710320279530979612725802119481060586", "128024335823506177662904591559860372578", "274992878132763414603910536690457950978", "129508961755394525259725417546551849431" ] }, "id": "ASB-A-197296414-291d1bcd", "source": "https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/include/gui/LayerState.h" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "150503157486821923868146077536255846043", "54243180276589643976825071566385902738", "72899625709712413219664730780877552208", "14700148968977320761317422849949106877", "161056368111136838033721912815391962984", "321093200651623695105854718657202513231", "46251325052834908945048416257586168562", "28984688094810427493772657130775496579", "55456630170415686492883120791465611937" ] }, "id": "ASB-A-197296414-3d1a922c", "source": "https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/Layer.h" }, "signature_type": "Line" }, { "digest": { "length": 10777.0, "function_hash": "44791309334450844456675503081552095819" }, "id": "ASB-A-197296414-48f851c6", "source": "https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/SurfaceFlinger.cpp", "function": "SurfaceFlinger::setClientStateLocked" }, "signature_type": "Function" }, { "digest": { "length": 3025.0, "function_hash": "11953062359817261094016458723671715009" }, "id": "ASB-A-197296414-665d8349", "source": "https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/Layer.cpp", "function": "Layer::Layer" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "283718874269985999838426022969052832419", "51251977788229206806022933377775339714", "126837267791215027000989397833006808577" ] }, "id": "ASB-A-197296414-7aaec1b5", "source": "https://android.googlesource.com/platform/frameworks/native/+/212dcf44f696158778939aad4619e320148890eb", "deprecated": false, "signature_version": "v1", "target": { "file": "services/inputflinger/dispatcher/InputDispatcher.h" }, "signature_type": "Line" }, { "match_only_versions": [ "12" ], "digest": { "threshold": 0.9, "line_hashes": [ "76518896870437984326428166302289206920", "200770302279035742138173073642108196466", "277544257460464788250713010166820282964" ] }, "id": "ASB-A-197296414-8c12cbca", "source": "https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/include/gui/SurfaceComposerClient.h" }, "signature_type": "Line" }, { "digest": { "length": 4214.0, "function_hash": "41371028096339871784330770802911533255" }, "id": "ASB-A-197296414-96673344", "source": "https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/LayerState.cpp", "function": "layer_state_t::write" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "298664290227875740322768330979081618160", "233245596182232249907971972357066927970", "262534343098190442132875127168875722230", "97891594220133498413498556973634993304", "151441872578660305457531961771794725484", "22357882456286152800894525762774698098", "215037684153096092482007146620708182471", "68518735567229351848542944932575623480", "135442729657009682330099330438211567409", "298848547558368093270880320019324191833", "63483294824671648632675098867167893867", "71708163981613363559965199103830168148", "71123869964882303498309773307374328809", "270492860421457519514673011562344475171" ] }, "id": "ASB-A-197296414-98cb4fb0", "source": "https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/LayerState.cpp" }, "signature_type": "Line" }, { "match_only_versions": [ "12" ], "digest": { "threshold": 0.9, "line_hashes": [ "197733401230434456479201278707380213534", "139693618548597008343948120197127366634", "173554347626147405001252391215442234083" ] }, "id": "ASB-A-197296414-9e49ce6f", "source": "https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/SurfaceComposerClient.cpp" }, "signature_type": "Line" }, { "digest": { "length": 10747.0, "function_hash": "57193990605608597521120757250696957075" }, "id": "ASB-A-197296414-a2b083d1", "source": "https://android.googlesource.com/platform/frameworks/native/+/212dcf44f696158778939aad4619e320148890eb", "deprecated": false, "signature_version": "v1", "target": { "file": "services/inputflinger/dispatcher/InputDispatcher.cpp", "function": "InputDispatcher::findTouchedWindowTargetsLocked" }, "signature_type": "Function" }, { "digest": { "length": 5417.0, "function_hash": "149279643520259506020275478305822036482" }, "id": "ASB-A-197296414-a2c4078c", "source": "https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/LayerState.cpp", "function": "layer_state_t::merge" }, "signature_type": "Function" }, { "digest": { "length": 1179.0, "function_hash": "310078888850522111761749299876166062159" }, "id": "ASB-A-197296414-bab776f0", "source": "https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/LayerState.cpp", "function": "layer_state_t::layer_state_t" }, "signature_type": "Function" }, { "match_only_versions": [ "12" ], "digest": { "threshold": 0.9, "line_hashes": [ "323268881144054206043808568620523809369", "98779104345064156101547132151575297941", "179822568014372232274488548937893906184", "116184968234886107223067764056518569240" ] }, "id": "ASB-A-197296414-bcd4da6f", "source": "https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/SurfaceFlinger.cpp" }, "signature_type": "Line" }, { "digest": { "length": 1618.0, "function_hash": "99290924107739358157298668195577893222" }, "id": "ASB-A-197296414-c303dad8", "source": "https://android.googlesource.com/platform/frameworks/native/+/9b0d13dc443a102358ad740549ade0b83fe7e522", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/Layer.cpp", "function": "Layer::fillInputInfo" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "172924485298204459113482071952089115547", "108076827672701571458481865564472077211", "196658454795965882892010648300936310237", "73438592253036149637500746161491925422", "70181756603853357992114614105071825607", "246083550843570280361092657794544084196", "59344089315733278487449250510462459841", "321126885415896690753674664850848277737", "93718173520294698051548017376713524214", "173539744006739864687673624440682154804", "117992797414711509173323356240980508112", "301455594360887011291094967540406652664", "121461113836229417085292454854067647489" ] }, "id": "ASB-A-197296414-c7dafb4b", "source": "https://android.googlesource.com/platform/frameworks/native/+/212dcf44f696158778939aad4619e320148890eb", "deprecated": false, "signature_version": "v1", "target": { "file": "services/inputflinger/dispatcher/InputDispatcher.cpp" }, "signature_type": "Line" }, { "digest": { "threshold": 0.9, "line_hashes": [ "131119015513166263991513640345848514329", "51568116969163411195940740636801508041", "178687044438696054566210048875444062561", "233027224164873481779008981674432153817", "230998103931701092711981792551313853350", "336821434684908142779599167314489810890", "255672355358265899108335699165716834181" ] }, "id": "ASB-A-197296414-df3050f7", "source": "https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a", "deprecated": false, "signature_version": "v1", "target": { "file": "services/surfaceflinger/Layer.cpp" }, "signature_type": "Line" }, { "digest": { "length": 4531.0, "function_hash": "231766209262677052582461870599862035356" }, "id": "ASB-A-197296414-f88cdbc1", "source": "https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a", "deprecated": false, "signature_version": "v1", "target": { "file": "libs/gui/LayerState.cpp", "function": "layer_state_t::read" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/platform/frameworks/native/+/212dcf44f696158778939aad4619e320148890eb", "https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a", "https://android.googlesource.com/platform/frameworks/native/+/9b0d13dc443a102358ad740549ade0b83fe7e522" ], "spl": "2023-05-01", "severity": "High", "types": [ "EoP" ] }