)]}'
{
  "commit": "d29fcd1eff251a5fc97656ad73d3a26aa7d7e303",
  "tree": "b1945b51005b7cf168a517f6598aa60778b9806b",
  "parents": [
    "aeb5f7cf3e054e594418b1f8cb9543629d006d22"
  ],
  "author": {
    "name": "Radu Macovei",
    "email": "radumacovei@google.com",
    "time": "Fri Feb 13 06:17:42 2026 -0800"
  },
  "committer": {
    "name": "Android Build Coastguard Worker",
    "email": "android-build-coastguard-worker@google.com",
    "time": "Thu Apr 09 14:00:12 2026 -0700"
  },
  "message": "Use loadSafeLabel to prevent UI spoofing in CertInstaller\n\nChange appInfo.loadLabel(pm) to appInfo.loadSafeLabel(pm) in\ngetCallingAppLabel(). This ensures that the application label is\nproperly sanitized by the system, stripping potentially harmful\ncharacters like newlines.\n\nThis addresses a vulnerability where a malicious application could use a\ncrafted label to push the CA certificate installation warning\noff-screen, potentially tricking users into installing untrusted CA\ncertificates. Using loadSafeLabel is a more direct fix within the\nexisting method.\n\nThis change corrects an erroneous behavior and is considered a low-risk\nbug fix.\n\nBug: 471127462\nTest: Manually tested by installing the PoC app from the bug report. Verified that the dialog now displays the calling app name correctly without pushing down the warning message.\nFlag: EXEMPT BUGFIX\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:0034ca47f9c3552e0f2d5e361f210eb92e6db805\nUse loadSafeLabel to prevent UI spoofing in CertInstaller\n\nChange appInfo.loadLabel(pm) to appInfo.loadSafeLabel(pm) in\ngetCallingAppLabel(). This ensures that the application label is\nproperly sanitized by the system, stripping potentially harmful\ncharacters like newlines.\n\nThis addresses a vulnerability where a malicious application could use a\ncrafted label to push the CA certificate installation warning\noff-screen, potentially tricking users into installing untrusted CA\ncertificates. Using loadSafeLabel is a more direct fix within the\nexisting method.\n\nThis change corrects an erroneous behavior and is considered a low-risk\nbug fix.\n\nBug: 471127462\nTest: Manually tested by installing the PoC app from the bug report. Verified that the dialog now displays the calling app name correctly without pushing down the warning message.\nFlag: EXEMPT BUGFIX\nCherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:41228b5ffcfc45257a37fe818aa54ae8c5004b3b\nMerged-In: I2c897b106318f001cc3d5c92fe12e9dbf9d90c95\nChange-Id: I2c897b106318f001cc3d5c92fe12e9dbf9d90c95\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "883c897fd65734416d04b2a494a55644ea4d8a24",
      "old_mode": 33188,
      "old_path": "src/com/android/certinstaller/CertInstaller.java",
      "new_id": "1eff53fcb6fb3d80e74f249f1c9869d5a02479b4",
      "new_mode": 33188,
      "new_path": "src/com/android/certinstaller/CertInstaller.java"
    }
  ]
}