In writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "fixes": [ "https://android.googlesource.com/platform/frameworks/base/+/5d4afa0986cbc440f458b4b8db05fd176ef3e6d2" ], "vanir_signatures": [ { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5d4afa0986cbc440f458b4b8db05fd176ef3e6d2", "deprecated": false, "digest": { "length": 645.0, "function_hash": "197031481994101566219508069851168796477" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-0f3445e1" }, { "signature_type": "Line", "source": "https://android.googlesource.com/platform/frameworks/base/+/5d4afa0986cbc440f458b4b8db05fd176ef3e6d2", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "8710057734602589724238495662101708851", "45641357568298245125173563623645264979", "129274031936348687088841129287619637427", "91380904370788346272251560589841689373", "286514812833306607336458319614391022435", "28391794358376128860503089898749196666", "303280657525207784006585974869639351105", "311379858562860826834346601311582101657", "138208538466640653637097027462500004588", "176310271506228469316431343215940102340", "236072503954863224710151541798754702893", "161840848272330878411339504309822270938", "40934106841569910471914727437351395545", "274350460128229438177919591893949473908", "126992964958582632021534548932229657649", "107070292022373238912346967647996283444", "335736509233093604888487551467147038266", "310587073089704397619752312226677779482", "61337224500895711407033802843537262601", "46560460652284753351104904330092628515", "335623446956039715241720146667738854180", "210000191936398062742419723482489852436", "238126078482924052778471769022371161357", "236251024863224024354981191909379241738", "211747162421833048828638085591366102204", "41126299973773420169650406130975034278", "16262765784030315152543982290334075456", "184135481520404418535597867058758946187", "285968096538186454047092675665611512101", "287054927865602323953785957141324074557", "3909734333006842424075471898033648272", "19529213115450618708601577903441961146", "221403984171046147386597276547488653085", "123686510650307621404500094316696873139", "182897569379174521240216444874700982200", "56782177996008794685095845121440396654", "252150194271750412820988662423079558154", "332833837608540283747361257667264116142", "133646699322877515372835759004866197317", "256687918785454195789229983931255134019", "92472087060668407690116184845786356388", "177141923986877141885608546183323247057", "175364830655978596750332107192266222017", "277149092568364845320455129230762963541", "298993618133687066647093620614295748126", "4209664662937512118946292138551972866", "142087959513330079496601788845597480067", "14236844228660050128918159688089119331", "304564140886075054585834924340927724169", "93626375351473350869584997493016416157", "240346193709368918042209103040819612255", "331200354748785004675515884830340081886", "81163113975778149139332987541168919088", "24771532263376931257882216174994424416", "208976297791254917070859446389037187361", "339691104520603057550063091318629813301", "274293650926642832100957136187500452794", "55925952302038928683130037394257193820", "24317326888415638964678088753376247140", "285219307736242565718005648665574690988", "194742077849528554340398554867854284787", "337805684145432563124177034402157699755", "259435203254924495188323553949346655203", "153998865004913902568032777191014356271", "262956499975875354563046553393772590745", "337805684145432563124177034402157699755", "259435203254924495188323553949346655203", "240022531763599742841817696105195032220" ] }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp" }, "signature_version": "v1", "id": "ASB-A-213170822-1add6b45" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5d4afa0986cbc440f458b4b8db05fd176ef3e6d2", "deprecated": false, "digest": { "length": 1504.0, "function_hash": "47154337443925172571174620662753938755" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-23bbad4f" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5d4afa0986cbc440f458b4b8db05fd176ef3e6d2", "deprecated": false, "digest": { "length": 699.0, "function_hash": "217064457718270544846722988355868498965" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-4e6b0d3f" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5d4afa0986cbc440f458b4b8db05fd176ef3e6d2", "deprecated": false, "digest": { "length": 268.0, "function_hash": "107270308947790376384463592644042837426" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-4f4fa38d" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5d4afa0986cbc440f458b4b8db05fd176ef3e6d2", "deprecated": false, "digest": { "length": 213.0, "function_hash": "310480039244888032233879631418490980589" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-51c93400" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5d4afa0986cbc440f458b4b8db05fd176ef3e6d2", "deprecated": false, "digest": { "length": 444.0, "function_hash": "333839801935704548253391075267628783622" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-52d8c44f" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5d4afa0986cbc440f458b4b8db05fd176ef3e6d2", "deprecated": false, "digest": { "length": 171.0, "function_hash": "181678559858945687268180323106621635018" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-5bbf3096" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5d4afa0986cbc440f458b4b8db05fd176ef3e6d2", "deprecated": false, "digest": { "length": 1395.0, "function_hash": "118435990239311497494761084409373138360" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-8786b111" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5d4afa0986cbc440f458b4b8db05fd176ef3e6d2", "deprecated": false, "digest": { "length": 1674.0, "function_hash": "172083917029565656418008201367868973197" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-8ad9a12c" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5d4afa0986cbc440f458b4b8db05fd176ef3e6d2", "deprecated": false, "digest": { "length": 531.0, "function_hash": "55996615785667625272650651176753876330" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-9220a882" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5d4afa0986cbc440f458b4b8db05fd176ef3e6d2", "deprecated": false, "digest": { "length": 216.0, "function_hash": "75916157287261896798941250165241097535" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-99375c8a" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5d4afa0986cbc440f458b4b8db05fd176ef3e6d2", "deprecated": false, "digest": { "length": 440.0, "function_hash": "141884746483834496456224623810955939132" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-ac7d35f2" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5d4afa0986cbc440f458b4b8db05fd176ef3e6d2", "deprecated": false, "digest": { "length": 1410.0, "function_hash": "304432026075927737076201106074283126300" }, "target": { "file": "libs/androidfw/CursorWindow.cpp", "function": "CursorWindow::maybeInflate" }, "signature_version": "v1", "id": "ASB-A-213170822-c0593143" }, { "signature_type": "Line", "source": "https://android.googlesource.com/platform/frameworks/base/+/5d4afa0986cbc440f458b4b8db05fd176ef3e6d2", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "58336475266701150999581778282903883441", "191207246909614840618135748595827849828", "317765135916182142600744924951385541809", "243728771671726076716538101430912302232", "322172342951475848294818135383971229376", "216019402225825311129063438732426945724", "251295973387947274077255029428371597610", "130883803964170019872281942076974445856", "327398121626462924702975435711880435643", "325077902816429909050921199100668284837" ] }, "target": { "file": "libs/androidfw/CursorWindow.cpp" }, "signature_version": "v1", "id": "ASB-A-213170822-c55f0b8b" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5d4afa0986cbc440f458b4b8db05fd176ef3e6d2", "deprecated": false, "digest": { "length": 1063.0, "function_hash": "214842994572585979773878757428209246019" }, "target": { "file": "libs/androidfw/CursorWindow.cpp", "function": "CursorWindow::writeToParcel" }, "signature_version": "v1", "id": "ASB-A-213170822-ca9a998b" }, { "signature_type": "Line", "source": "https://android.googlesource.com/platform/frameworks/base/+/5d4afa0986cbc440f458b4b8db05fd176ef3e6d2", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "305455632223059535377376997747517219444", "110107765697246833654388684597219774018", "331565752241940953111333778857376700922" ] }, "target": { "file": "libs/androidfw/include/androidfw/CursorWindow.h" }, "signature_version": "v1", "id": "ASB-A-213170822-cc53f90a" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5d4afa0986cbc440f458b4b8db05fd176ef3e6d2", "deprecated": false, "digest": { "length": 389.0, "function_hash": "312313481629489733774570967920204623723" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-e8020585" } ], "severity": "High", "spl": "2023-08-01", "types": [ "ID" ] }
{ "fixes": [ "https://android.googlesource.com/platform/frameworks/base/+/548b0a183859fb023dee7ecd7d9f05bf7fed00f8" ], "vanir_signatures": [ { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/548b0a183859fb023dee7ecd7d9f05bf7fed00f8", "deprecated": false, "digest": { "length": 645.0, "function_hash": "197031481994101566219508069851168796477" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-0b0e5362" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/548b0a183859fb023dee7ecd7d9f05bf7fed00f8", "deprecated": false, "digest": { "length": 444.0, "function_hash": "333839801935704548253391075267628783622" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-29467764" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/548b0a183859fb023dee7ecd7d9f05bf7fed00f8", "deprecated": false, "digest": { "length": 440.0, "function_hash": "141884746483834496456224623810955939132" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-4526578a" }, { "signature_type": "Line", "source": "https://android.googlesource.com/platform/frameworks/base/+/548b0a183859fb023dee7ecd7d9f05bf7fed00f8", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "8710057734602589724238495662101708851", "45641357568298245125173563623645264979", "129274031936348687088841129287619637427", "91380904370788346272251560589841689373", "286514812833306607336458319614391022435", "28391794358376128860503089898749196666", "303280657525207784006585974869639351105", "311379858562860826834346601311582101657", "138208538466640653637097027462500004588", "176310271506228469316431343215940102340", "236072503954863224710151541798754702893", "161840848272330878411339504309822270938", "40934106841569910471914727437351395545", "274350460128229438177919591893949473908", "126992964958582632021534548932229657649", "107070292022373238912346967647996283444", "335736509233093604888487551467147038266", "310587073089704397619752312226677779482", "61337224500895711407033802843537262601", "46560460652284753351104904330092628515", "335623446956039715241720146667738854180", "210000191936398062742419723482489852436", "238126078482924052778471769022371161357", "236251024863224024354981191909379241738", "211747162421833048828638085591366102204", "41126299973773420169650406130975034278", "16262765784030315152543982290334075456", "184135481520404418535597867058758946187", "285968096538186454047092675665611512101", "287054927865602323953785957141324074557", "3909734333006842424075471898033648272", "19529213115450618708601577903441961146", "221403984171046147386597276547488653085", "123686510650307621404500094316696873139", "182897569379174521240216444874700982200", "56782177996008794685095845121440396654", "252150194271750412820988662423079558154", "332833837608540283747361257667264116142", "133646699322877515372835759004866197317", "256687918785454195789229983931255134019", "92472087060668407690116184845786356388", "177141923986877141885608546183323247057", "175364830655978596750332107192266222017", "277149092568364845320455129230762963541", "298993618133687066647093620614295748126", "4209664662937512118946292138551972866", "142087959513330079496601788845597480067", "14236844228660050128918159688089119331", "304564140886075054585834924340927724169", "93626375351473350869584997493016416157", "240346193709368918042209103040819612255", "331200354748785004675515884830340081886", "81163113975778149139332987541168919088", "24771532263376931257882216174994424416", "208976297791254917070859446389037187361", "339691104520603057550063091318629813301", "274293650926642832100957136187500452794", "55925952302038928683130037394257193820", "24317326888415638964678088753376247140", "285219307736242565718005648665574690988", "194742077849528554340398554867854284787", "337805684145432563124177034402157699755", "259435203254924495188323553949346655203", "153998865004913902568032777191014356271", "262956499975875354563046553393772590745", "337805684145432563124177034402157699755", "259435203254924495188323553949346655203", "240022531763599742841817696105195032220" ] }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp" }, "signature_version": "v1", "id": "ASB-A-213170822-64340fd9" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/548b0a183859fb023dee7ecd7d9f05bf7fed00f8", "deprecated": false, "digest": { "length": 389.0, "function_hash": "312313481629489733774570967920204623723" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-91cad530" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/548b0a183859fb023dee7ecd7d9f05bf7fed00f8", "deprecated": false, "digest": { "length": 1063.0, "function_hash": "214842994572585979773878757428209246019" }, "target": { "file": "libs/androidfw/CursorWindow.cpp", "function": "CursorWindow::writeToParcel" }, "signature_version": "v1", "id": "ASB-A-213170822-9ef5d96c" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/548b0a183859fb023dee7ecd7d9f05bf7fed00f8", "deprecated": false, "digest": { "length": 531.0, "function_hash": "55996615785667625272650651176753876330" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-a619b16e" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/548b0a183859fb023dee7ecd7d9f05bf7fed00f8", "deprecated": false, "digest": { "length": 1517.0, "function_hash": "130048221005011239218040429000744893209" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-bcd23202" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/548b0a183859fb023dee7ecd7d9f05bf7fed00f8", "deprecated": false, "digest": { "length": 1410.0, "function_hash": "304432026075927737076201106074283126300" }, "target": { "file": "libs/androidfw/CursorWindow.cpp", "function": "CursorWindow::maybeInflate" }, "signature_version": "v1", "id": "ASB-A-213170822-c91c6fc0" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/548b0a183859fb023dee7ecd7d9f05bf7fed00f8", "deprecated": false, "digest": { "length": 171.0, "function_hash": "181678559858945687268180323106621635018" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-c9c73ed4" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/548b0a183859fb023dee7ecd7d9f05bf7fed00f8", "deprecated": false, "digest": { "length": 216.0, "function_hash": "75916157287261896798941250165241097535" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-d0096ecc" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/548b0a183859fb023dee7ecd7d9f05bf7fed00f8", "deprecated": false, "digest": { "length": 213.0, "function_hash": "310480039244888032233879631418490980589" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-d74587d0" }, { "signature_type": "Line", "source": "https://android.googlesource.com/platform/frameworks/base/+/548b0a183859fb023dee7ecd7d9f05bf7fed00f8", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "305455632223059535377376997747517219444", "110107765697246833654388684597219774018", "331565752241940953111333778857376700922" ] }, "target": { "file": "libs/androidfw/include/androidfw/CursorWindow.h" }, "signature_version": "v1", "id": "ASB-A-213170822-d9b2e586" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/548b0a183859fb023dee7ecd7d9f05bf7fed00f8", "deprecated": false, "digest": { "length": 1364.0, "function_hash": "22771646132314862114834652588709908566" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-e1091dd3" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/548b0a183859fb023dee7ecd7d9f05bf7fed00f8", "deprecated": false, "digest": { "length": 268.0, "function_hash": "107270308947790376384463592644042837426" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-e9850bf6" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/548b0a183859fb023dee7ecd7d9f05bf7fed00f8", "deprecated": false, "digest": { "length": 1687.0, "function_hash": "24254063035060419813921618350132255319" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-f59b2a35" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/548b0a183859fb023dee7ecd7d9f05bf7fed00f8", "deprecated": false, "digest": { "length": 699.0, "function_hash": "217064457718270544846722988355868498965" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-fc1c4739" }, { "signature_type": "Line", "source": "https://android.googlesource.com/platform/frameworks/base/+/548b0a183859fb023dee7ecd7d9f05bf7fed00f8", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "58336475266701150999581778282903883441", "191207246909614840618135748595827849828", "317765135916182142600744924951385541809", "243728771671726076716538101430912302232", "322172342951475848294818135383971229376", "216019402225825311129063438732426945724", "251295973387947274077255029428371597610", "130883803964170019872281942076974445856", "327398121626462924702975435711880435643", "325077902816429909050921199100668284837" ] }, "target": { "file": "libs/androidfw/CursorWindow.cpp" }, "signature_version": "v1", "id": "ASB-A-213170822-fe5e6990" } ], "severity": "High", "spl": "2023-08-01", "types": [ "ID" ] }
{ "fixes": [ "https://android.googlesource.com/platform/frameworks/base/+/3af48e4421c86c4ba5a4c68bd21a93df7b31574f" ], "vanir_signatures": [ { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/3af48e4421c86c4ba5a4c68bd21a93df7b31574f", "deprecated": false, "digest": { "length": 213.0, "function_hash": "310480039244888032233879631418490980589" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-061bd9e5" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/3af48e4421c86c4ba5a4c68bd21a93df7b31574f", "deprecated": false, "digest": { "length": 1687.0, "function_hash": "24254063035060419813921618350132255319" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-22090a9f" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/3af48e4421c86c4ba5a4c68bd21a93df7b31574f", "deprecated": false, "digest": { "length": 216.0, "function_hash": "75916157287261896798941250165241097535" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-3560e1ca" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/3af48e4421c86c4ba5a4c68bd21a93df7b31574f", "deprecated": false, "digest": { "length": 645.0, "function_hash": "197031481994101566219508069851168796477" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-461ece32" }, { "signature_type": "Line", "source": "https://android.googlesource.com/platform/frameworks/base/+/3af48e4421c86c4ba5a4c68bd21a93df7b31574f", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "58336475266701150999581778282903883441", "191207246909614840618135748595827849828", "317765135916182142600744924951385541809", "243728771671726076716538101430912302232", "322172342951475848294818135383971229376", "216019402225825311129063438732426945724", "251295973387947274077255029428371597610", "130883803964170019872281942076974445856", "327398121626462924702975435711880435643", "325077902816429909050921199100668284837" ] }, "target": { "file": "libs/androidfw/CursorWindow.cpp" }, "signature_version": "v1", "id": "ASB-A-213170822-4ebb1e69" }, { "signature_type": "Line", "source": "https://android.googlesource.com/platform/frameworks/base/+/3af48e4421c86c4ba5a4c68bd21a93df7b31574f", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "8710057734602589724238495662101708851", "45641357568298245125173563623645264979", "129274031936348687088841129287619637427", "91380904370788346272251560589841689373", "286514812833306607336458319614391022435", "28391794358376128860503089898749196666", "303280657525207784006585974869639351105", "311379858562860826834346601311582101657", "138208538466640653637097027462500004588", "176310271506228469316431343215940102340", "236072503954863224710151541798754702893", "161840848272330878411339504309822270938", "40934106841569910471914727437351395545", "274350460128229438177919591893949473908", "126992964958582632021534548932229657649", "107070292022373238912346967647996283444", "335736509233093604888487551467147038266", "310587073089704397619752312226677779482", "61337224500895711407033802843537262601", "46560460652284753351104904330092628515", "335623446956039715241720146667738854180", "210000191936398062742419723482489852436", "238126078482924052778471769022371161357", "236251024863224024354981191909379241738", "211747162421833048828638085591366102204", "41126299973773420169650406130975034278", "16262765784030315152543982290334075456", "184135481520404418535597867058758946187", "285968096538186454047092675665611512101", "287054927865602323953785957141324074557", "3909734333006842424075471898033648272", "19529213115450618708601577903441961146", "221403984171046147386597276547488653085", "123686510650307621404500094316696873139", "182897569379174521240216444874700982200", "56782177996008794685095845121440396654", "252150194271750412820988662423079558154", "332833837608540283747361257667264116142", "133646699322877515372835759004866197317", "256687918785454195789229983931255134019", "92472087060668407690116184845786356388", "177141923986877141885608546183323247057", "175364830655978596750332107192266222017", "277149092568364845320455129230762963541", "298993618133687066647093620614295748126", "4209664662937512118946292138551972866", "142087959513330079496601788845597480067", "14236844228660050128918159688089119331", "304564140886075054585834924340927724169", "93626375351473350869584997493016416157", "240346193709368918042209103040819612255", "331200354748785004675515884830340081886", "81163113975778149139332987541168919088", "24771532263376931257882216174994424416", "208976297791254917070859446389037187361", "339691104520603057550063091318629813301", "274293650926642832100957136187500452794", "55925952302038928683130037394257193820", "24317326888415638964678088753376247140", "285219307736242565718005648665574690988", "194742077849528554340398554867854284787", "337805684145432563124177034402157699755", "259435203254924495188323553949346655203", "153998865004913902568032777191014356271", "262956499975875354563046553393772590745", "337805684145432563124177034402157699755", "259435203254924495188323553949346655203", "240022531763599742841817696105195032220" ] }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp" }, "signature_version": "v1", "id": "ASB-A-213170822-52c101dc" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/3af48e4421c86c4ba5a4c68bd21a93df7b31574f", "deprecated": false, "digest": { "length": 389.0, "function_hash": "312313481629489733774570967920204623723" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-552200b5" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/3af48e4421c86c4ba5a4c68bd21a93df7b31574f", "deprecated": false, "digest": { "length": 268.0, "function_hash": "107270308947790376384463592644042837426" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-7d98fc6e" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/3af48e4421c86c4ba5a4c68bd21a93df7b31574f", "deprecated": false, "digest": { "length": 440.0, "function_hash": "141884746483834496456224623810955939132" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-883682cf" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/3af48e4421c86c4ba5a4c68bd21a93df7b31574f", "deprecated": false, "digest": { "length": 444.0, "function_hash": "333839801935704548253391075267628783622" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-ad541607" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/3af48e4421c86c4ba5a4c68bd21a93df7b31574f", "deprecated": false, "digest": { "length": 531.0, "function_hash": "55996615785667625272650651176753876330" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-bfdbb87f" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/3af48e4421c86c4ba5a4c68bd21a93df7b31574f", "deprecated": false, "digest": { "length": 1364.0, "function_hash": "22771646132314862114834652588709908566" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-c7ccdefb" }, { "signature_type": "Line", "source": "https://android.googlesource.com/platform/frameworks/base/+/3af48e4421c86c4ba5a4c68bd21a93df7b31574f", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "305455632223059535377376997747517219444", "110107765697246833654388684597219774018", "331565752241940953111333778857376700922" ] }, "target": { "file": "libs/androidfw/include/androidfw/CursorWindow.h" }, "signature_version": "v1", "id": "ASB-A-213170822-cf627407" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/3af48e4421c86c4ba5a4c68bd21a93df7b31574f", "deprecated": false, "digest": { "length": 1517.0, "function_hash": "130048221005011239218040429000744893209" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-e4362069" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/3af48e4421c86c4ba5a4c68bd21a93df7b31574f", "deprecated": false, "digest": { "length": 699.0, "function_hash": "217064457718270544846722988355868498965" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-f6c61594" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/3af48e4421c86c4ba5a4c68bd21a93df7b31574f", "deprecated": false, "digest": { "length": 1410.0, "function_hash": "304432026075927737076201106074283126300" }, "target": { "file": "libs/androidfw/CursorWindow.cpp", "function": "CursorWindow::maybeInflate" }, "signature_version": "v1", "id": "ASB-A-213170822-f8c117e7" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/3af48e4421c86c4ba5a4c68bd21a93df7b31574f", "deprecated": false, "digest": { "length": 171.0, "function_hash": "181678559858945687268180323106621635018" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-fa160a87" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/3af48e4421c86c4ba5a4c68bd21a93df7b31574f", "deprecated": false, "digest": { "length": 1063.0, "function_hash": "214842994572585979773878757428209246019" }, "target": { "file": "libs/androidfw/CursorWindow.cpp", "function": "CursorWindow::writeToParcel" }, "signature_version": "v1", "id": "ASB-A-213170822-ff7ddc3b" } ], "severity": "High", "spl": "2023-08-01", "types": [ "ID" ] }
{ "fixes": [ "https://android.googlesource.com/platform/frameworks/base/+/5b0232d7e1c2087839d9bc029943c8780b2484ab" ], "vanir_signatures": [ { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5b0232d7e1c2087839d9bc029943c8780b2484ab", "deprecated": false, "digest": { "length": 268.0, "function_hash": "107270308947790376384463592644042837426" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-29fa1394" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5b0232d7e1c2087839d9bc029943c8780b2484ab", "deprecated": false, "digest": { "length": 1364.0, "function_hash": "22771646132314862114834652588709908566" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-45634718" }, { "signature_type": "Line", "source": "https://android.googlesource.com/platform/frameworks/base/+/5b0232d7e1c2087839d9bc029943c8780b2484ab", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "305455632223059535377376997747517219444", "110107765697246833654388684597219774018", "331565752241940953111333778857376700922" ] }, "target": { "file": "libs/androidfw/include/androidfw/CursorWindow.h" }, "signature_version": "v1", "id": "ASB-A-213170822-5d4dc3b7" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5b0232d7e1c2087839d9bc029943c8780b2484ab", "deprecated": false, "digest": { "length": 213.0, "function_hash": "310480039244888032233879631418490980589" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-6cd2d884" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5b0232d7e1c2087839d9bc029943c8780b2484ab", "deprecated": false, "digest": { "length": 216.0, "function_hash": "75916157287261896798941250165241097535" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-78c2c046" }, { "signature_type": "Line", "source": "https://android.googlesource.com/platform/frameworks/base/+/5b0232d7e1c2087839d9bc029943c8780b2484ab", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "8710057734602589724238495662101708851", "45641357568298245125173563623645264979", "129274031936348687088841129287619637427", "91380904370788346272251560589841689373", "286514812833306607336458319614391022435", "28391794358376128860503089898749196666", "303280657525207784006585974869639351105", "311379858562860826834346601311582101657", "138208538466640653637097027462500004588", "176310271506228469316431343215940102340", "236072503954863224710151541798754702893", "161840848272330878411339504309822270938", "40934106841569910471914727437351395545", "274350460128229438177919591893949473908", "126992964958582632021534548932229657649", "107070292022373238912346967647996283444", "335736509233093604888487551467147038266", "310587073089704397619752312226677779482", "61337224500895711407033802843537262601", "46560460652284753351104904330092628515", "335623446956039715241720146667738854180", "210000191936398062742419723482489852436", "238126078482924052778471769022371161357", "236251024863224024354981191909379241738", "211747162421833048828638085591366102204", "41126299973773420169650406130975034278", "16262765784030315152543982290334075456", "184135481520404418535597867058758946187", "285968096538186454047092675665611512101", "287054927865602323953785957141324074557", "3909734333006842424075471898033648272", "19529213115450618708601577903441961146", "221403984171046147386597276547488653085", "123686510650307621404500094316696873139", "182897569379174521240216444874700982200", "56782177996008794685095845121440396654", "252150194271750412820988662423079558154", "332833837608540283747361257667264116142", "133646699322877515372835759004866197317", "256687918785454195789229983931255134019", "92472087060668407690116184845786356388", "177141923986877141885608546183323247057", "175364830655978596750332107192266222017", "277149092568364845320455129230762963541", "298993618133687066647093620614295748126", "4209664662937512118946292138551972866", "142087959513330079496601788845597480067", "14236844228660050128918159688089119331", "304564140886075054585834924340927724169", "93626375351473350869584997493016416157", "240346193709368918042209103040819612255", "331200354748785004675515884830340081886", "81163113975778149139332987541168919088", "24771532263376931257882216174994424416", "208976297791254917070859446389037187361", "339691104520603057550063091318629813301", "274293650926642832100957136187500452794", "55925952302038928683130037394257193820", "24317326888415638964678088753376247140", "285219307736242565718005648665574690988", "194742077849528554340398554867854284787", "337805684145432563124177034402157699755", "259435203254924495188323553949346655203", "153998865004913902568032777191014356271", "262956499975875354563046553393772590745", "337805684145432563124177034402157699755", "259435203254924495188323553949346655203", "240022531763599742841817696105195032220" ] }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp" }, "signature_version": "v1", "id": "ASB-A-213170822-7fd28ac4" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5b0232d7e1c2087839d9bc029943c8780b2484ab", "deprecated": false, "digest": { "length": 531.0, "function_hash": "55996615785667625272650651176753876330" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-81412abd" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5b0232d7e1c2087839d9bc029943c8780b2484ab", "deprecated": false, "digest": { "length": 645.0, "function_hash": "197031481994101566219508069851168796477" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-87f72a1b" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5b0232d7e1c2087839d9bc029943c8780b2484ab", "deprecated": false, "digest": { "length": 699.0, "function_hash": "217064457718270544846722988355868498965" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-8f5c2032" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5b0232d7e1c2087839d9bc029943c8780b2484ab", "deprecated": false, "digest": { "length": 1687.0, "function_hash": "24254063035060419813921618350132255319" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-9c13d4a7" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5b0232d7e1c2087839d9bc029943c8780b2484ab", "deprecated": false, "digest": { "length": 1063.0, "function_hash": "214842994572585979773878757428209246019" }, "target": { "file": "libs/androidfw/CursorWindow.cpp", "function": "CursorWindow::writeToParcel" }, "signature_version": "v1", "id": "ASB-A-213170822-ca61900b" }, { "signature_type": "Line", "source": "https://android.googlesource.com/platform/frameworks/base/+/5b0232d7e1c2087839d9bc029943c8780b2484ab", "deprecated": false, "digest": { "threshold": 0.9, "line_hashes": [ "58336475266701150999581778282903883441", "191207246909614840618135748595827849828", "317765135916182142600744924951385541809", "243728771671726076716538101430912302232", "322172342951475848294818135383971229376", "216019402225825311129063438732426945724", "251295973387947274077255029428371597610", "130883803964170019872281942076974445856", "327398121626462924702975435711880435643", "325077902816429909050921199100668284837" ] }, "target": { "file": "libs/androidfw/CursorWindow.cpp" }, "signature_version": "v1", "id": "ASB-A-213170822-d1cbc5b0" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5b0232d7e1c2087839d9bc029943c8780b2484ab", "deprecated": false, "digest": { "length": 389.0, "function_hash": "312313481629489733774570967920204623723" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-d63620dd" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5b0232d7e1c2087839d9bc029943c8780b2484ab", "deprecated": false, "digest": { "length": 171.0, "function_hash": "181678559858945687268180323106621635018" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-e55c07c2" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5b0232d7e1c2087839d9bc029943c8780b2484ab", "deprecated": false, "digest": { "length": 1517.0, "function_hash": "130048221005011239218040429000744893209" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-e6fc19c2" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5b0232d7e1c2087839d9bc029943c8780b2484ab", "deprecated": false, "digest": { "length": 1410.0, "function_hash": "304432026075927737076201106074283126300" }, "target": { "file": "libs/androidfw/CursorWindow.cpp", "function": "CursorWindow::maybeInflate" }, "signature_version": "v1", "id": "ASB-A-213170822-f08ecaeb" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5b0232d7e1c2087839d9bc029943c8780b2484ab", "deprecated": false, "digest": { "length": 444.0, "function_hash": "333839801935704548253391075267628783622" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-fd00a3df" }, { "signature_type": "Function", "source": "https://android.googlesource.com/platform/frameworks/base/+/5b0232d7e1c2087839d9bc029943c8780b2484ab", "deprecated": false, "digest": { "length": 440.0, "function_hash": "141884746483834496456224623810955939132" }, "target": { "file": "libs/androidfw/tests/CursorWindow_test.cpp", "function": "TEST" }, "signature_version": "v1", "id": "ASB-A-213170822-ff0a3cfe" } ], "severity": "High", "spl": "2023-08-01", "types": [ "ID" ] }