Git-Mirrors/DivestOS
1
0
Fork 0
mirror of https://github.com/Divested-Mobile/DivestOS-Build.git synced 2024-09-29 12:45:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
2,422 Commits 1 Branch 0 Tags 101 MiB
474f2911f2
Commit Graph

2150 Commits

Author SHA1 Message Date
Tavi
2187d4bf36
Better patching of CVE-2024-36971 
4.6 and higher is impacted
need backport for 4.9 and 4.14

not patched kernels:
	LineageOS-17.1
		kernel_xiaomi_sm6150

	LineageOS-19.1
		kernel_xiaomi_sm8150

	LineageOS-20.0
		kernel_fairphone_sdm632
		kernel_google_msm-4.14
		kernel_google_msm-4.9
		kernel_oneplus_sdm845
		kernel_oneplus_sm8150
		kernel_razer_sdm845
		kernel_samsung_exynos9810
		kernel_sony_sdm845
		kernel_xiaomi_msm8937
		kernel_xiaomi_sdm845
		kernel_xiaomi_sm6150
		kernel_xiaomi_vayu

Signed-off-by: Tavi <tavi@divested.dev>
 2024-08-05 20:25:40 -04:00
Tavi
aed895e1ad
More backports 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-08-05 16:49:08 -04:00
Tavi
d2d0c48a25
Reconcile picks 
no effective change:
https://review.lineageos.org/q/topic:%22P_asb_2024-05%22

gains 8 patches:
https://review.lineageos.org/q/topic:%22Q_asb_2024-06%22
https://review.lineageos.org/q/topic:%22Q_asb_2024-07%22

Signed-off-by: Tavi <tavi@divested.dev>
 2024-08-05 16:27:33 -04:00
Tavi
f07e0f4722
Update CVE patchers 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-08-05 16:01:39 -04:00
Tavi
2bb4d94f88
Fixup + Churn 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-08-01 00:28:48 -04:00
Tavi
9c4c46478d
Disable 72ff1b1a for now due to more compatibility issues 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-31 22:19:53 -04:00
Tavi
094b4f4f41 Update CVE patchers 
Likely breakage

Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-31 22:19:43 -04:00
Tavi
72ff1b1a4d
16.0+: Relaxed fix for DNS leaks with app based VPNs from GrapheneOS 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-31 20:50:20 -04:00
Tavi
5fb3319508
Update commons 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-31 20:31:27 -04:00
Tavi
59b9517c08
Update CVE patchers 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-29 18:28:29 -04:00
Tavi
9f5886d80b
Fixup 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-27 18:31:21 -04:00
Tavi
c45060675e
Going the distance... [pt3] 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-27 18:00:56 -04:00
Tavi
33ee2a1c28
Update CVE patchers 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-24 17:24:31 -04:00
Tavi
1f65053495
Fixup 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-18 21:44:00 -04:00
Tavi
e6f816f4a0
Update CVE patchers 
Likely breakage
CVE-2022-48781 maybe change to 5.16-^5.17

Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-18 14:34:16 -04:00
Tavi
3400a35eb1
15.1: July 2024 ASB work 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-17 17:57:47 -04:00
Tavi
105767c7a7
Reconcile picks 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-17 17:46:34 -04:00
Tavi
85e5812290
16.0: July 2024 ASB work 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-17 17:43:18 -04:00
Tavi
da2091f118
Fixup 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-17 15:48:24 -04:00
Tavi
218493fc4a
17.1: July 2024 ASB work 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-17 14:18:36 -04:00
Tavi
6dee42d038
Fixup 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-17 10:26:36 -04:00
Tavi
bcfba01d60
Reconcile picks 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-16 18:37:07 -04:00
Tavi
83d7f9a807
Fixup 
TODO: replace with 3.10 patch instead

Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-16 14:00:24 -04:00
Tavi
837cfbbf48
18.1: July ASB work 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-15 15:50:17 -04:00
Tavi
30b658da98
Reconcile picks 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-14 16:53:44 -04:00
Tavi
7182e4d63a
19.1: July 2024 ASB work 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-14 13:40:10 -04:00
Tavi
236a403d12
Fixup + Churn 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-13 18:46:53 -04:00
Tavi
f0de4dbf4c
Update CVE patchers 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-11 14:14:49 -04:00
Tavi
9efddf820f
20.0: July 2024 ASB picks 
ce7b9fd0f5
d39bbaa57e
df49ae67f1
a0afe17e81
cb2db1244c
93a2c9a876
ed52683e9c
09e6330796

Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-11 13:26:47 -04:00
Tavi
ef65af8a8e
Update CVE patchers 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-10 15:50:57 -04:00
Tavi
a970293398
Update CVE patchers 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-08 14:43:28 -04:00
Tavi
9d69c5aee8
Update CVE patchers 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-06 12:47:56 -04:00
Tavi
fa6322126d
Update CVE patchers 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-05 13:35:38 -04:00
Tavi
093df020a2
14.1: July ASB picks 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-04 09:19:46 -04:00
Tavi
1e2d7e9218
Update CVE patchers 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-02 09:50:28 -04:00
Tavi
a7ce9de6e8
Update CVE patchers 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-07-01 10:29:36 -04:00
Tavi
c7c759afd4
20.0: Add "Smart Pixels" screen filter feature 
never starts, missing something

de9aa33971
af0aa9c4c3

aa5684f586

not used
dbc6f643b9
50d3f972a9

Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-29 11:56:16 -04:00
Tavi
4b5bd17510
Update CVE patchers 
likely some breakage

Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-27 01:01:08 -04:00
Tavi
2e84510f6f
Fixup 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-25 21:57:56 -04:00
Tavi
e96e53ff68
Backport CarrierConfig2 to 18.1 and 19.1 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-25 08:40:49 -04:00
Tavi
637ace8214
Fixup 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-25 04:19:17 -04:00
Tavi
2850ff678a Runtime control of CarrierConfig2 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-25 04:19:06 -04:00
Tavi
4328ec6c65
20.0: Switch to CarrierConfig2 from GrapheneOS 
And provide latest Google CarrierSettings to all devices
Tested working to enable VoLTE on additional carriers

Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-24 09:47:53 -04:00
Tavi
336ac67fd9
Fixup 3e2b2e0c 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-22 20:47:23 -04:00
Tavi
3e2b2e0c4f
Reconcile picks + Fixup 
Fixes https://github.com/Divested-Mobile/DivestOS-Build/issues/313

Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-22 20:46:16 -04:00
Tavi
d09584417e
Update CVE patchers 
maybe some breakage

Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-20 15:27:45 -04:00
Tavi
f1c027ecac
Churn + Fixes 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-19 23:57:56 -04:00
Tavi
fcd8808b35
Churn 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-19 19:21:32 -04:00
Tavi
e6fc32e012
17.1: June ASB work 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-19 18:14:14 -04:00
Tavi
203e27bc0c
15.1: June ASB work 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-19 16:21:45 -04:00
Tavi
7e6c6ad5e5
16.0: June ASB picks 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-19 16:11:38 -04:00
Tavi
416482ff52
Fixup + Churn 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-18 01:10:49 -04:00
Tavi
39a015c55a
Fixups + Churn 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-17 02:18:18 -04:00
Tavi
ba9e22dc77
Reconcile picks 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-16 15:55:36 -04:00
Tavi
0b746cecf4
Fixup 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-16 14:24:40 -04:00
Tavi
7357b970ef
Fixup + Churn 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-13 23:08:32 -04:00
Tavi
3096e8ad9e
Update commons 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-13 15:58:40 -04:00
Tavi
7f00fd1dde
20.0: June 2024 ASB picks 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-13 15:11:11 -04:00
Tavi
c7b131ad60
14.1: June ASB picks 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-07 12:05:00 -04:00
Tavi
8383cd716d
Update CVE patchers 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-06 15:47:27 -04:00
Tavi
1636f68138
Update CVE patchers 
Fixes https://github.com/Divested-Mobile/DivestOS-Build/issues/308

Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-03 16:27:15 -04:00
Tavi
fbc61bfcc7
17.1: reconcile picks 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-03 14:39:13 -04:00
Tavi
f91f45a7bd
Update CVE patchers 
Maybe some breakage

Signed-off-by: Tavi <tavi@divested.dev>
 2024-06-01 12:35:18 -04:00
Tavi
97ad0c69fe
Update CVE patchers 
This expands loose versioning for 4.9 and 4.14

compile tested:
- cheeseburger/4.4
- fajita/4.9
- flame/4.14
- FP4/4.19
- lemonadep/5.4
- bluejay/5.10

CVE-2023-52879/5.4 may need to be expanded to other 5.4 kernels

this also patches CVE-2024-1086 for 4.9, 4.14, and 5.10

Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-31 20:55:45 -04:00
Tavi
4cf2b308ff Update CVE patchers 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-30 13:52:45 -04:00
Tavi
42a5da8f16
CI: enable shellcheck 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-29 12:04:44 -04:00
Tavi
03e48ad81b
Fixup 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-28 10:56:42 -04:00
Tavi
3e9d2b9bb0
Update CVE patchers 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-28 10:30:53 -04:00
Tavi
b5e04a00ae
Fixup 
Closes https://github.com/Divested-Mobile/DivestOS-Build/issues/306

Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-27 12:36:17 -04:00
Tavi
a136f27ae6
Fixup 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-26 22:50:29 -04:00
Tavi
028541103d
Fixup 
Manually checked 3.4 and 4.4
Likely still more breakage

Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-26 19:26:14 -04:00
Tavi
d2330cce15
Update CVE patchers 
This probably breaks all of them

Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-26 18:29:36 -04:00
Tavi
ec9a38452d
21.0: trying to compile 
frameworks/base/core/java/android/util/NtpTrustedTime.java:275: error: cannot find symbol
            final ContentResolver resolver = getContext().getContentResolver();

frameworks/base/core/java/android/content/pm/SpecialRuntimePermAppUtils.java:38: error: method checkPermission in class PermissionManager cannot be applied to given types;
        return PermissionManager.checkPermission(Manifest.permission.INTERNET, Process.myPid(), Process.myUid())

Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-20 19:23:31 -04:00
Tavi
23a2127669
21.0: More work 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-20 18:50:40 -04:00
Tavi
07951955d3
21.0: more work 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-20 18:13:59 -04:00
Tavi
26f1ce99a9
21.0: more work 
packages/apps/Settings done

Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-20 14:13:53 -04:00
Tavi
afe1135384
Cleanup 
- Removes unused files/patches
- Removes many guards, these likely don't work anyway due to patchsets having dependencies
- No functional change

Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-20 13:25:08 -04:00
Tavi
d98f33a337 21.0: Initial bringup 
TODO:
- f/w/b
- settings

Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-20 11:53:38 -04:00
Tavi
ce0dac994c
Fixup 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-19 15:17:27 -04:00
Tavi
dd9f51c8ee
Update CVE patchers 
maybe some breakage

Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-19 12:35:44 -04:00
Tavi
1607155923
Backport the server choices patch to 18.1 and 19.1 
Tested working on 20.0

Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-18 17:31:59 -04:00
Tavi
9ddc388f03
Churn 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-18 16:49:16 -04:00
Tavi
67e962e0f6
20.0: Updater: Add server choices 
Also fixes .onion support

TODO: Test and backport to previous branches

Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-18 13:00:15 -04:00
Tavi
79df8d06d0
Update CVE patchers 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-14 15:34:02 -04:00
Tavi
674c84855d
Churn 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-13 19:00:38 -04:00
Tavi
055af41678
Fixup 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-11 13:51:51 -04:00
Tavi
9c2914272a
Reconcile 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-11 13:39:40 -04:00
Tavi
d782ef887b
Reconcile 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-11 12:33:31 -04:00
Tavi
151caed4da
Reconcile 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-11 12:29:37 -04:00
Tavi
0dcdeb029a
Import Q_asb_2024-04 and R_asb_2024-05 + fixups 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-11 11:14:58 -04:00
Tavi
c31e67b2f8
May ASB work 
untested

Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-10 19:56:31 -04:00
Tavi
e195e38150
16.0: switch to latest hardened_malloc revision 
kipper compiles

Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-10 19:26:53 -04:00
Tavi
ae523985ca
Correct ordering 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-09 14:23:03 -04:00
Tavi
0c88720caa
14.1: work on integrating hardened_malloc 
untested as all currently supported 14.1 devices are 32-bit

Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-09 13:46:19 -04:00
Tavi
31a147ab98
Update CVE patchers 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-09 13:24:43 -04:00
Tavi
90b8722b67
Fixup handling of Tensor kernels 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-09 12:23:17 -04:00
Tavi
319f57d098
Enable BPF JIT hardening by default 
as per GrapheneOS, eg.
65f68fd04f

Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-09 12:16:26 -04:00
Tavi
28d2113957
15.1: switch to latest hardened_malloc revision and enable it 
verified working on bullhead via:
- top
- /proc/self/maps with -DLABEL_MEMORY
- Sanitizer Test App and logcat

Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-09 11:18:05 -04:00
Tavi
1fdedf21a5
Update CVE patchers 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-08 14:09:13 -04:00
Tavi
4c48bf84e1 19.1+: fixup rebrand 
Signed-off-by: Tavi <tavi@divested.dev>
 2024-05-08 12:54:23 -04:00