)]}'
{
  "commit": "585e7556fcec4c1cc1e76ad767412c158a64b5df",
  "tree": "b8434827f55a81f47d87b5314af3a2fa31e1e17d",
  "parents": [
    "f7398bb64526b0a0fd12a764be49f9d2d038727e"
  ],
  "author": {
    "name": "Albert Kong",
    "email": "albertkong@google.com",
    "time": "Fri Apr 10 13:56:51 2026 -0700"
  },
  "committer": {
    "name": "Android Build Coastguard Worker",
    "email": "android-build-coastguard-worker@google.com",
    "time": "Thu Jul 09 18:21:11 2026 -0700"
  },
  "message": "Fix URI grant persistence bypass\n\nPrevent IOException during XML serialization by checking string lengths\nbefore writing to the grants file. This stops a malicious app from\nindefinitely persisting a URI grant after revocation by providing an\noverly long URI.\n\nhashtag:b/262884935\nFixes: 262884935\nTest: atest UriGrantsManagerServiceTests\nFlag: EXEMPT BUGFIX\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:23a398d0f7a171f5f97c5f13052f9ee3bcf7c298\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:89932dbb52489cadcf7a2a10b0d63161a7134dbe\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:8e15f3d9bd60b25a6ff55689c3f69052a970d75e\nMerged-In: I9f211dbfad84ce23222f256d4a8b18d976624345\nChange-Id: I9f211dbfad84ce23222f256d4a8b18d976624345\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "3479b6c926da45a9bfe2569bad188c85f675fad8",
      "old_mode": 33188,
      "old_path": "services/core/java/com/android/server/uri/UriGrantsManagerService.java",
      "new_id": "b9cd58bbf4895ea786f3bb4af6cb9538f565b940",
      "new_mode": 33188,
      "new_path": "services/core/java/com/android/server/uri/UriGrantsManagerService.java"
    },
    {
      "type": "modify",
      "old_id": "0ff23eab472a7f081c4e6dd7cc24f9e2e61b7db5",
      "old_mode": 33188,
      "old_path": "services/core/java/com/android/server/uri/UriPermission.java",
      "new_id": "1aeaf6e399ba5e5afde79b91b8c2a5a836225d37",
      "new_mode": 33188,
      "new_path": "services/core/java/com/android/server/uri/UriPermission.java"
    },
    {
      "type": "modify",
      "old_id": "f5494534716a17b3dc7c52d50dc9a8d40c09941b",
      "old_mode": 33188,
      "old_path": "services/tests/servicestests/src/com/android/server/uri/UriGrantsManagerServiceTest.java",
      "new_id": "884d762911d873eed7da63235ab83d332e43433c",
      "new_mode": 33188,
      "new_path": "services/tests/servicestests/src/com/android/server/uri/UriGrantsManagerServiceTest.java"
    }
  ]
}