)]}'
{
  "commit": "6297ade0c50c05ffc4770480a31100a45163966b",
  "tree": "1a16ff644920b3fb12d0725dd695e53e8a86ea52",
  "parents": [
    "81b4778db87b337f24e7c879c182f3e677dcf2c5"
  ],
  "author": {
    "name": "Tetiana Meronyk",
    "email": "tetianameronyk@google.com",
    "time": "Thu Aug 24 16:27:30 2023 +0000"
  },
  "committer": {
    "name": "Android Build Coastguard Worker",
    "email": "android-build-coastguard-worker@google.com",
    "time": "Fri Nov 10 18:29:12 2023 +0000"
  },
  "message": "Truncate user data to a limit of 500 characters\n\nFix vulnerability that allows creating users with no restrictions. This is done by creating an intent to create a user and putting extras that are too long to be serialized. It causes IOException and the restrictions are not written in the file.\n\nBy truncating the string values when writing them to the file, we ensure that the exception does not happen and it can be recorded correctly.\n\nBug: 293602317\nTest: install app provided in the bug, open app and click add. Check logcat to see there is no more IOException. Reboot the device by either opening User details page or running adb shell dumpsys user | grep -A12 heen and see that the restrictions are in place.\n(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:48d45b507df64708a214a800082b970c8b2bf827)\nMerged-In: I633dc10974a64ef2abd07e67ff2d209847129989\nChange-Id: I633dc10974a64ef2abd07e67ff2d209847129989\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "0f321cdbbb0510afef5ea8a7a62d58be0f108e7a",
      "old_mode": 33188,
      "old_path": "services/core/java/com/android/server/pm/UserManagerService.java",
      "new_id": "1fa838212f4e636e56a1f9b8bdadf88822d87da9",
      "new_mode": 33188,
      "new_path": "services/core/java/com/android/server/pm/UserManagerService.java"
    }
  ]
}