Commit Graph

2105 Commits

Author SHA1 Message Date
Tavi
d09584417e
Update CVE patchers
maybe some breakage

Signed-off-by: Tavi <tavi@divested.dev>
2024-06-20 15:27:45 -04:00
Tavi
f1c027ecac
Churn + Fixes
Signed-off-by: Tavi <tavi@divested.dev>
2024-06-19 23:57:56 -04:00
Tavi
fcd8808b35
Churn
Signed-off-by: Tavi <tavi@divested.dev>
2024-06-19 19:21:32 -04:00
Tavi
e6fc32e012
17.1: June ASB work
Signed-off-by: Tavi <tavi@divested.dev>
2024-06-19 18:14:14 -04:00
Tavi
203e27bc0c
15.1: June ASB work
Signed-off-by: Tavi <tavi@divested.dev>
2024-06-19 16:21:45 -04:00
Tavi
7e6c6ad5e5
16.0: June ASB picks
Signed-off-by: Tavi <tavi@divested.dev>
2024-06-19 16:11:38 -04:00
Tavi
416482ff52
Fixup + Churn
Signed-off-by: Tavi <tavi@divested.dev>
2024-06-18 01:10:49 -04:00
Tavi
39a015c55a
Fixups + Churn
Signed-off-by: Tavi <tavi@divested.dev>
2024-06-17 02:18:18 -04:00
Tavi
ba9e22dc77
Reconcile picks
Signed-off-by: Tavi <tavi@divested.dev>
2024-06-16 15:55:36 -04:00
Tavi
0b746cecf4
Fixup
Signed-off-by: Tavi <tavi@divested.dev>
2024-06-16 14:24:40 -04:00
Tavi
7357b970ef
Fixup + Churn
Signed-off-by: Tavi <tavi@divested.dev>
2024-06-13 23:08:32 -04:00
Tavi
3096e8ad9e
Update commons
Signed-off-by: Tavi <tavi@divested.dev>
2024-06-13 15:58:40 -04:00
Tavi
7f00fd1dde
20.0: June 2024 ASB picks
Signed-off-by: Tavi <tavi@divested.dev>
2024-06-13 15:11:11 -04:00
Tavi
c7b131ad60
14.1: June ASB picks
Signed-off-by: Tavi <tavi@divested.dev>
2024-06-07 12:05:00 -04:00
Tavi
8383cd716d
Update CVE patchers
Signed-off-by: Tavi <tavi@divested.dev>
2024-06-06 15:47:27 -04:00
Tavi
1636f68138
Update CVE patchers
Fixes https://github.com/Divested-Mobile/DivestOS-Build/issues/308

Signed-off-by: Tavi <tavi@divested.dev>
2024-06-03 16:27:15 -04:00
Tavi
fbc61bfcc7
17.1: reconcile picks
Signed-off-by: Tavi <tavi@divested.dev>
2024-06-03 14:39:13 -04:00
Tavi
f91f45a7bd
Update CVE patchers
Maybe some breakage

Signed-off-by: Tavi <tavi@divested.dev>
2024-06-01 12:35:18 -04:00
Tavi
97ad0c69fe
Update CVE patchers
This expands loose versioning for 4.9 and 4.14

compile tested:
- cheeseburger/4.4
- fajita/4.9
- flame/4.14
- FP4/4.19
- lemonadep/5.4
- bluejay/5.10

CVE-2023-52879/5.4 may need to be expanded to other 5.4 kernels

this also patches CVE-2024-1086 for 4.9, 4.14, and 5.10

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-31 20:55:45 -04:00
Tavi
4cf2b308ff Update CVE patchers
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-30 13:52:45 -04:00
Tavi
42a5da8f16
CI: enable shellcheck
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-29 12:04:44 -04:00
Tavi
03e48ad81b
Fixup
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-28 10:56:42 -04:00
Tavi
3e9d2b9bb0
Update CVE patchers
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-28 10:30:53 -04:00
Tavi
b5e04a00ae
Fixup
Closes https://github.com/Divested-Mobile/DivestOS-Build/issues/306

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-27 12:36:17 -04:00
Tavi
a136f27ae6
Fixup
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-26 22:50:29 -04:00
Tavi
028541103d
Fixup
Manually checked 3.4 and 4.4
Likely still more breakage

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-26 19:26:14 -04:00
Tavi
d2330cce15
Update CVE patchers
This probably breaks all of them

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-26 18:29:36 -04:00
Tavi
ec9a38452d
21.0: trying to compile
frameworks/base/core/java/android/util/NtpTrustedTime.java:275: error: cannot find symbol
            final ContentResolver resolver = getContext().getContentResolver();

frameworks/base/core/java/android/content/pm/SpecialRuntimePermAppUtils.java:38: error: method checkPermission in class PermissionManager cannot be applied to given types;
        return PermissionManager.checkPermission(Manifest.permission.INTERNET, Process.myPid(), Process.myUid())

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-20 19:23:31 -04:00
Tavi
23a2127669
21.0: More work
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-20 18:50:40 -04:00
Tavi
07951955d3
21.0: more work
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-20 18:13:59 -04:00
Tavi
26f1ce99a9
21.0: more work
packages/apps/Settings done

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-20 14:13:53 -04:00
Tavi
afe1135384
Cleanup
- Removes unused files/patches
- Removes many guards, these likely don't work anyway due to patchsets having dependencies
- No functional change

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-20 13:25:08 -04:00
Tavi
d98f33a337 21.0: Initial bringup
TODO:
- f/w/b
- settings

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-20 11:53:38 -04:00
Tavi
ce0dac994c
Fixup
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-19 15:17:27 -04:00
Tavi
dd9f51c8ee
Update CVE patchers
maybe some breakage

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-19 12:35:44 -04:00
Tavi
1607155923
Backport the server choices patch to 18.1 and 19.1
Tested working on 20.0

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-18 17:31:59 -04:00
Tavi
9ddc388f03
Churn
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-18 16:49:16 -04:00
Tavi
67e962e0f6
20.0: Updater: Add server choices
Also fixes .onion support

TODO: Test and backport to previous branches

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-18 13:00:15 -04:00
Tavi
79df8d06d0
Update CVE patchers
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-14 15:34:02 -04:00
Tavi
674c84855d
Churn
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-13 19:00:38 -04:00
Tavi
055af41678
Fixup
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-11 13:51:51 -04:00
Tavi
9c2914272a
Reconcile
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-11 13:39:40 -04:00
Tavi
d782ef887b
Reconcile
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-11 12:33:31 -04:00
Tavi
151caed4da
Reconcile
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-11 12:29:37 -04:00
Tavi
0dcdeb029a
Import Q_asb_2024-04 and R_asb_2024-05 + fixups
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-11 11:14:58 -04:00
Tavi
c31e67b2f8
May ASB work
untested

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-10 19:56:31 -04:00
Tavi
e195e38150
16.0: switch to latest hardened_malloc revision
kipper compiles

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-10 19:26:53 -04:00
Tavi
ae523985ca
Correct ordering
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-09 14:23:03 -04:00
Tavi
0c88720caa
14.1: work on integrating hardened_malloc
untested as all currently supported 14.1 devices are 32-bit

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-09 13:46:19 -04:00
Tavi
31a147ab98
Update CVE patchers
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-09 13:24:43 -04:00
Tavi
90b8722b67
Fixup handling of Tensor kernels
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-09 12:23:17 -04:00
Tavi
319f57d098
Enable BPF JIT hardening by default
as per GrapheneOS, eg.
65f68fd04f

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-09 12:16:26 -04:00
Tavi
28d2113957
15.1: switch to latest hardened_malloc revision and enable it
verified working on bullhead via:
- top
- /proc/self/maps with -DLABEL_MEMORY
- Sanitizer Test App and logcat

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-09 11:18:05 -04:00
Tavi
1fdedf21a5
Update CVE patchers
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-08 14:09:13 -04:00
Tavi
4c48bf84e1 19.1+: fixup rebrand
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-08 12:54:23 -04:00
Tavi
abddd5231f
Quick verify of patchWorkspace for 14.1 through 19.1
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-08 12:51:25 -04:00
Tavi
59bf3b75c7
17.1: Import and verify picks
https://review.lineageos.org/c/LineageOS/android_frameworks_base/+/353117
https://review.lineageos.org/q/topic:Q_asb_2023-03
https://review.lineageos.org/q/topic:Q_asb_2023-04
https://review.lineageos.org/q/topic:Q_asb_2023-05
https://review.lineageos.org/q/topic:Q_asb_2023-06
https://review.lineageos.org/q/topic:Q_asb_2023-07
https://review.lineageos.org/q/topic:Q_asb_2023-08
	accounted for via patches:
	https://review.lineageos.org/c/LineageOS/android_system_ca-certificates/+/376560
	https://review.lineageos.org/c/LineageOS/android_system_ca-certificates/+/376561
	https://review.lineageos.org/c/LineageOS/android_system_ca-certificates/+/376562
https://review.lineageos.org/q/topic:Q_asb_2023-09
https://review.lineageos.org/q/topic:Q_asb_2023-10
https://review.lineageos.org/q/topic:Q_asb_2023-11
	accounted for via patches:
	https://review.lineageos.org/c/LineageOS/android_system_ca-certificates/+/376563
	accounted for via manifest change:
	https://review.lineageos.org/c/LineageOS/android_external_webp/+/376568
https://review.lineageos.org/q/topic:Q_asb_2023-12
https://review.lineageos.org/q/topic:Q_asb_2024-01
https://review.lineageos.org/q/topic:Q_asb_2024-02
https://review.lineageos.org/q/topic:Q_asb_2024-03

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-08 12:26:07 -04:00
Tavi
f6ad120484
Fixup 082bc48c
these were not accounted for via manifest

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-08 11:13:09 -04:00
Tavi
1816472bac
17.1: reconcile picks
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-08 11:01:06 -04:00
Tavi
bea8f92380
18.1: Import and verify picks
https://review.lineageos.org/q/topic:R_asb_2024-03
https://review.lineageos.org/q/topic:R_asb_2024-04

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-08 09:07:38 -04:00
Tavi
0f6b9e9baa
Fixup
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-08 08:49:13 -04:00
Tavi
268ae82d1e
20.0: Switch to latest (prebuilt) OpenEUICC
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-08 08:47:09 -04:00
Tavi
1a0e13a70d
20.0: Import picks
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-07 19:49:55 -04:00
Tavi
082bc48c32
16.0: Import and verify picks
https://review.lineageos.org/q/topic:P_asb_2022-05
https://review.lineageos.org/q/topic:P_asb_2022-06
https://review.lineageos.org/q/topic:P_asb_2022-07
https://review.lineageos.org/q/topic:P_asb_2022-08
https://review.lineageos.org/q/topic:P_asb_2022-09
https://review.lineageos.org/q/topic:P_asb_2022-10
https://review.lineageos.org/q/topic:P_asb_2022-11
https://review.lineageos.org/q/topic:P_asb_2022-12
https://review.lineageos.org/q/topic:P_asb_2023-01
https://review.lineageos.org/q/topic:P_asb_2023-02
https://review.lineageos.org/q/topic:P_asb_2023-03
https://review.lineageos.org/q/topic:P_asb_2023-04
https://review.lineageos.org/q/topic:P_asb_2023-05
https://review.lineageos.org/q/topic:P_asb_2023-06
https://review.lineageos.org/q/topic:P_asb_2023-07
	accounted for via manifest change:
	https://review.lineageos.org/c/LineageOS/android_external_freetype/+/361250
https://review.lineageos.org/q/topic:P_asb_2023-08
	accounted for via manifest change:
	https://review.lineageos.org/c/LineageOS/android_external_freetype/+/364606
	accounted for via patches:
	https://review.lineageos.org/c/LineageOS/android_system_ca-certificates/+/365328
https://review.lineageos.org/q/topic:P_asb_2023-09
https://review.lineageos.org/q/topic:P_asb_2023-10
https://review.lineageos.org/q/topic:P_asb_2023-11
	accounted for via patches:
	https://review.lineageos.org/c/LineageOS/android_system_ca-certificates/+/374916
https://review.lineageos.org/q/topic:P_asb_2023-12
https://review.lineageos.org/q/topic:P_asb_2024-01
https://review.lineageos.org/q/topic:P_asb_2024-02
https://review.lineageos.org/q/topic:P_asb_2024-03
https://review.lineageos.org/q/topic:P_asb_2024-04

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-07 19:43:19 -04:00
Tavi
7162b237d3
14.1: Import and verify picks
https://review.lineageos.org/q/topic:n-asb-2021-09
https://review.lineageos.org/q/topic:n-asb-2021-10
https://review.lineageos.org/q/topic:n-asb-2021-11
https://review.lineageos.org/q/topic:n-asb-2021-12
https://review.lineageos.org/q/topic:n-asb-2022-01
https://review.lineageos.org/q/topic:n-asb-2022-02
https://review.lineageos.org/q/topic:n-asb-2022-03
https://review.lineageos.org/q/topic:n-asb-2022-04
https://review.lineageos.org/q/topic:n-asb-2022-05
https://review.lineageos.org/q/topic:n-asb-2022-06
https://review.lineageos.org/q/topic:n-asb-2022-07
https://review.lineageos.org/q/topic:n-asb-2022-08
https://review.lineageos.org/q/topic:n-asb-2022-09
https://review.lineageos.org/q/topic:n-asb-2022-10
https://review.lineageos.org/q/topic:n-asb-2022-11
https://review.lineageos.org/q/topic:n-asb-2022-12
https://review.lineageos.org/q/topic:n-asb-2023-01
https://review.lineageos.org/q/topic:n-asb-2023-02
https://review.lineageos.org/q/topic:n-asb-2023-03
https://review.lineageos.org/q/topic:n-asb-2023-04
https://review.lineageos.org/q/topic:n-asb-2023-05
https://review.lineageos.org/q/topic:n-asb-2023-06
https://review.lineageos.org/q/topic:n-asb-2023-07
	accounted for via manifest change:
	https://review.lineageos.org/c/LineageOS/android_external_freetype/+/360899
https://review.lineageos.org/q/topic:n-asb-2023-08
https://review.lineageos.org/q/topic:n-asb-2023-09
https://review.lineageos.org/q/topic:n-asb-2023-10
https://review.lineageos.org/q/topic:n-asb-2023-11
	was missing:
	https://review.lineageos.org/c/LineageOS/android_packages_providers_TelephonyProvider/+/376079
https://review.lineageos.org/q/topic:n-asb-2023-12
https://review.lineageos.org/q/topic:n-asb-2024-01
https://review.lineageos.org/q/topic:n-asb-2024-02
https://review.lineageos.org/q/topic:n-asb-2024-03
https://review.lineageos.org/q/topic:n-asb-2024-04
https://review.lineageos.org/q/topic:n-asb-2024-05

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-07 17:45:58 -04:00
Tavi
2d7a1ea25c
Update CVE patchers
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-07 08:22:30 -04:00
Tavi
83b8410de8
Extra patch for 17.1
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-07 06:05:28 -04:00
Tavi
321de1adbc
17.1: switch to latest hardened_malloc revision
+ dedupe the other hmalloc patches

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-06 19:29:31 -04:00
Tavi
11b5815f14
18.1: switch to latest hardened_malloc revision
+ other fixes

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-06 16:30:20 -04:00
Tavi
2c90c48637
19.1: switch to latest hardened_malloc revision
+ other fixes

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-06 14:26:31 -04:00
Tavi
c26af5a755
Various dependency updates
- 14.1: update ffmpeg to @syphyr's latest
- 19.1: update SecureCamera to the latest
- 20.0: switch to latest hardened_malloc revision
- 14.1 through 19.1: pin vendor revisions

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-06 12:31:17 -04:00
Tavi
8ce5a0e671
Update CVE patchers
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-05 12:01:44 -04:00
Tavi
fbb58c1de7
Fixup
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-04 22:35:00 -04:00
Tavi
1738fbeb3b
Add felix
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-04 22:18:20 -04:00
Tavi
f1bdd32aa5
Handle tangorpro junk
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-04 20:58:49 -04:00
Tavi
f3ef9bf874
Add lynx & tangorpro
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-04 19:58:41 -04:00
Tavi
180ad2d17d
Fixup
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-03 10:33:17 -04:00
Tavi
7fcfd8782f
Update commons
Signed-off-by: Tavi <tavi@divested.dev>
2024-05-03 08:56:50 -04:00
Tavi
5b05eb4100
Update CVE patchers
maybe breakage

Signed-off-by: Tavi <tavi@divested.dev>
2024-05-03 08:50:55 -04:00
Tavi
7a42c9eb17
Update CVE patchers
Signed-off-by: Tavi <tavi@divested.dev>
2024-04-30 16:50:36 -04:00
Tavi
94c0f5fa4d
Update CVE patchers
Signed-off-by: Tavi <tavi@divested.dev>
2024-04-27 11:56:40 -04:00
Tavi
a19f71a8b8
Tweaks
Signed-off-by: Tavi <tavi@divested.dev>
2024-04-22 10:08:01 -04:00
Tavi
44358b5ba2
Update CVE patchers
maybe some breakage

Signed-off-by: Tavi <tavi@divested.dev>
2024-04-22 09:22:16 -04:00
Tavi
5be2789897
2024
Signed-off-by: Tavi <tavi@divested.dev>
2024-04-22 07:52:49 -04:00
Tavi
a16b5a89c7
Update CVE patchers
Signed-off-by: Tavi <tavi@divested.dev>
2024-04-16 08:41:35 -04:00
Tavi
aa52315312
Picks
Signed-off-by: Tavi <tavi@divested.dev>
2024-04-14 13:54:25 -04:00
steadfasterX
fb8ee6e2eb functions: do not fail if not building pixel devices
Signed-off-by: steadfasterX <steadfasterX@users.noreply.github.com>
2024-04-10 11:45:45 -04:00
Tavi
25da5b3f74
Update CVE patchers
Signed-off-by: Tavi <tavi@divested.dev>
2024-04-10 11:21:10 -04:00
Tavi
fce6f95a73
Churn
Signed-off-by: Tavi <tavi@divested.dev>
2024-04-10 08:27:30 -04:00
Tavi
570d2edfee
Update CVE patchers
Signed-off-by: Tavi <tavi@divested.dev>
2024-04-10 08:16:01 -04:00
Tavi
e7de509de5
Record current checkouts
Signed-off-by: Tavi <tavi@divested.dev>
2024-04-10 08:15:58 -04:00
Tavi
e1e6d55cc6
Improve 78cb11ac
Signed-off-by: Tavi <tavi@divested.dev>
2024-04-10 07:48:20 -04:00
Tavi
78cb11acd7 tensor stuff
Signed-off-by: Tavi <tavi@divested.dev>
2024-04-10 07:24:29 -04:00
Tavi
741e5a7ca3
Fixup
also 16.0 probably needs a backport of IsRecoveryMode
compile tested on 20.0

Signed-off-by: Tavi <tavi@divested.dev>
2024-04-09 16:40:05 -04:00
Tavi
3f430b038e
18.1: April ASB picks
1 extra patch

Signed-off-by: Tavi <tavi@divested.dev>
2024-04-09 16:29:38 -04:00
Tavi
4f8cfc8a41
you want it, you got it!
now compile it yourself.

Signed-off-by: Tavi <tavi@divested.dev>
2024-04-09 16:25:54 -04:00
Tavi
f5d06ea9aa
Refresh defconfig paths
Signed-off-by: Tavi <tavi@divested.dev>
2024-04-09 13:31:34 -04:00
Tavi
ea83b47d59
apex signing updates
untested

Signed-off-by: Tavi <tavi@divested.dev>
2024-04-09 13:25:56 -04:00
Tavi
835fbb7d2c
Fixup
Signed-off-by: Tavi <tavi@divested.dev>
2024-04-08 15:12:49 -04:00
Tavi
9d6325e2a0
15.1: April ASB work
Signed-off-by: Tavi <tavi@divested.dev>
2024-04-08 13:36:38 -04:00