Google GitGoogle Git
Sign in
android/platform/libcore/b58fce41891
commit
b58fce418916fe06eaeb2e85b6bd3d9bee43218d
[log]
author
John Wu <topjohnwu@google.com>
Wed Aug 31 00:31:26 2022 +0000
committer
John Wu <topjohnwu@google.com>
Mon Sep 12 21:45:58 2022 +0000
tree
df7d5549c318f77f8deaafdea6e5c755f15630fe
parent
fc6632537875efde4110fd4dba4fb5b2cc151bf2 [diff]
Enforce files loaded in DexFile to be read-only

Executables dynamically downloaded can be unexpectedly manipulated,
causing code injection. For apps targeting U+, we'd like to
introduce an enforcement in the platform to make sure files are
marked as read-only.

Test: m
Bug: 218865702
Change-Id: I700af94d47d12514fc345fdc28adf0a1397f6d66
11 files changed
tree: df7d5549c318f77f8deaafdea6e5c755f15630fe
  1. api/
  2. benchmarks/
  3. dalvik/
  4. dom/
  5. expectations/
  6. harmony-tests/
  7. json/
  8. jsr166-tests/
  9. libart/
  10. luni/
  11. metrictests/
  12. mmodules/
  13. ojluni/
  14. support/
  15. test-rules/
  16. tools/
  17. xml/
  18. Android.bp
  19. AndroidTest-core-tests.xml
  20. check-ojluni-files
  21. CleanSpec.mk
  22. EXPECTED_UPSTREAM
  23. Extras.bp
  24. JavaLibrary.bp
  25. known_oj_tags.txt
  26. libandroidio.map.txt
  27. LICENSE
  28. METADATA
  29. NativeCode.bp
  30. non_openjdk_java_files.bp
  31. NOTICE
  32. nullability_annotated_classes.txt
  33. nullability_warnings.txt
  34. openjdk_java_files.bp
  35. OWNERS
  36. PREUPLOAD.cfg
  37. README.md
  38. TEST_MAPPING
README.md

Android Core Library

Existing open bugs

File a new bug

File a new public bug

Import files from OpenJDK

Add nullability annotations

Run benchmark tests