)]}'
{"id":"LineageOS%2Fandroid_packages_apps_DocumentsUI~427555","triplet_id":"LineageOS%2Fandroid_packages_apps_DocumentsUI~lineage-20.0~I4de8bad7174273c9390da978e186ad6a85f27be5","project":"LineageOS/android_packages_apps_DocumentsUI","branch":"lineage-20.0","topic":"T_asb_2025-04","hashtags":[],"change_id":"I4de8bad7174273c9390da978e186ad6a85f27be5","subject":"Fix for SAF loophole in the lastAccessedStack.","status":"MERGED","created":"2025-04-16 21:44:42.000000000","updated":"2025-05-10 13:35:57.000000000","submitted":"2025-05-10 13:35:57.000000000","submitter":{"_account_id":15173,"name":"Kevin Haggerty","email":"haggertk@lineageos.org","username":"haggertk","avatars":[{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"427554-T_asb_2025-04","meta_rev_id":"596ea2d16d8ba4a62640c763a04e7c294c2f507f","_number":427555,"virtual_id_number":427555,"owner":{"_account_id":17656,"name":"Markus S","email":"mse1969@posteo.de","username":"mse1969","avatars":[{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]},"actions":{},"labels":{"Verified":{"all":[{"value":0,"_account_id":15173,"name":"Kevin Haggerty","email":"haggertk@lineageos.org","username":"haggertk","avatars":[{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]}],"values":{"-1":"Fails"," 0":"No score","+1":"Verified"},"description":"","default_value":0},"Code-Review":{"all":[{"value":0,"_account_id":15173,"name":"Kevin Haggerty","email":"haggertk@lineageos.org","username":"haggertk","avatars":[{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]}],"values":{"-2":"Do not submit","-1":"I would prefer that you didn\u0027t submit this"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me, approved"},"description":"","default_value":0},"CI":{"all":[{"value":0,"_account_id":15173,"name":"Kevin Haggerty","email":"haggertk@lineageos.org","username":"haggertk","avatars":[{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]}],"values":{"-1":"Fail"," 0":"No score","+1":"Pass"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{},"pending_reviewers":{},"reviewer_updates":[],"messages":[{"id":"79109124c376296f264d2a4021e42c0f039bc1d5","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":17656,"name":"Markus S","email":"mse1969@posteo.de","username":"mse1969","avatars":[{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]},"date":"2025-04-16 21:44:42.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"f6bcc9cbd57428872ae47bf185bb26217283f5d4","tag":"autogenerated:gerrit:setTopic","author":{"_account_id":17656,"name":"Markus S","email":"mse1969@posteo.de","username":"mse1969","avatars":[{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]},"date":"2025-04-16 21:45:04.000000000","message":"Topic set to T_asb_2025-04","accounts_in_message":[],"_revision_number":1},{"id":"f422a53f9704dc9dcbd95e58241eede34a264097","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":15173,"name":"Kevin Haggerty","email":"haggertk@lineageos.org","username":"haggertk","avatars":[{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]},"date":"2025-04-18 17:40:19.000000000","message":"Uploaded patch set 2: Patch Set 1 was rebased. Commit message was updated.","accounts_in_message":[],"_revision_number":2},{"id":"7eb098aab789e5003143d0add4987654a0669c0c","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":17656,"name":"Markus S","email":"mse1969@posteo.de","username":"mse1969","avatars":[{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]},"date":"2025-04-26 14:49:34.000000000","message":"Uploaded patch set 3: Patch Set 2 was rebased.","accounts_in_message":[],"_revision_number":3},{"id":"596ea2d16d8ba4a62640c763a04e7c294c2f507f","tag":"autogenerated:gerrit:merged","author":{"_account_id":15173,"name":"Kevin Haggerty","email":"haggertk@lineageos.org","username":"haggertk","avatars":[{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]},"date":"2025-05-10 13:35:57.000000000","message":"Change has been successfully pushed.","accounts_in_message":[],"_revision_number":4}],"current_revision_number":4,"current_revision":"db3f1075f18c3fdb26f9cd5fbc168a5a8465c2ff","revisions":{"e1ca7d16933590436b13c1ad3189c346b561671a":{"kind":"REWORK","_number":1,"created":"2025-04-16 21:44:42.000000000","uploader":{"_account_id":17656,"name":"Markus S","email":"mse1969@posteo.de","username":"mse1969","avatars":[{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]},"ref":"refs/changes/55/427555/1","fetch":{"anonymous http":{"url":"https://github.com/LineageOS/android_packages_apps_DocumentsUI","ref":"refs/changes/55/427555/1","commands":{"Branch":"git fetch https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/1 \u0026\u0026 git checkout -b change-427555 FETCH_HEAD","Checkout":"git fetch https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/1","Reset To":"git fetch https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/1 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"042ca54352cf693b782ecf1dd5f9e75154272d73","subject":"Restrict initial location for ACTION_OPEN_DOCUMENT/_TREE","web_links":[{"name":"GitHub","tooltip":"Open in GitWeb","url":"https://github.com/LineageOS/android_packages_apps_DocumentsUI/commit/042ca54352cf693b782ecf1dd5f9e75154272d73"}]}],"author":{"name":"Aditya Singh","email":"adityasngh@google.com","date":"2025-01-24 06:02:41.000000000","tz":-480},"committer":{"name":"mse1969","email":"mse1969@posteo.de","date":"2025-04-16 20:38:48.000000000","tz":120},"subject":"Fix for SAF loophole in the lastAccessedStack.","message":"Fix for SAF loophole in the lastAccessedStack.\n\nWhen loading the last accessed stack, the code did not check if the file\npath (uri) should be blocked, thereby allowing an attacker to bypass the\nscoped storage restriction put on initial uri.\nThis change adds the check when loading last accessed stack.\n\nBug: 352294617\nTest: Manual as per http://b/352294617#comment4\nFlag: EXEMPT bugfix\n(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:1c8ce190df41eb77fdfce5830caec4b117ed0ddf)\nMerged-In: I4de8bad7174273c9390da978e186ad6a85f27be5\nChange-Id: I4de8bad7174273c9390da978e186ad6a85f27be5\n","web_links":[{"name":"GitHub","tooltip":"Open in GitWeb","url":"https://github.com/LineageOS/android_packages_apps_DocumentsUI/commit/e1ca7d16933590436b13c1ad3189c346b561671a"}],"resolve_conflicts_web_links":[{"name":"GitHub","tooltip":"Open in GitWeb","url":"https://github.com/LineageOS/android_packages_apps_DocumentsUI/commit/e1ca7d16933590436b13c1ad3189c346b561671a"}]},"branch":"refs/heads/lineage-20.0"},"c9f5da20bd7da4606ac8f38232dd0d7f00e07c1d":{"kind":"TRIVIAL_REBASE_WITH_MESSAGE_UPDATE","_number":2,"created":"2025-04-18 17:40:19.000000000","uploader":{"_account_id":15173,"name":"Kevin Haggerty","email":"haggertk@lineageos.org","username":"haggertk","avatars":[{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]},"ref":"refs/changes/55/427555/2","fetch":{"anonymous http":{"url":"https://github.com/LineageOS/android_packages_apps_DocumentsUI","ref":"refs/changes/55/427555/2","commands":{"Branch":"git fetch https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/2 \u0026\u0026 git checkout -b change-427555 FETCH_HEAD","Checkout":"git fetch https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/2","Reset To":"git fetch https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/2 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"845d62562330bb4b83d008ca7c1378225aea7637","subject":"Restrict initial location for ACTION_OPEN_DOCUMENT/_TREE","web_links":[{"name":"GitHub","tooltip":"Open in GitWeb","url":"https://github.com/LineageOS/android_packages_apps_DocumentsUI/commit/845d62562330bb4b83d008ca7c1378225aea7637"}]}],"author":{"name":"Aditya Singh","email":"adityasngh@google.com","date":"2025-01-24 06:02:41.000000000","tz":-480},"committer":{"name":"Kevin F. Haggerty","email":"haggertk@lineageos.org","date":"2025-04-18 14:04:22.000000000","tz":-360},"subject":"Fix for SAF loophole in the lastAccessedStack.","message":"Fix for SAF loophole in the lastAccessedStack.\n\nWhen loading the last accessed stack, the code did not check if the file\npath (uri) should be blocked, thereby allowing an attacker to bypass the\nscoped storage restriction put on initial uri.\nThis change adds the check when loading last accessed stack.\n\nBug: 352294617 \nTest: Manual as per http://b/352294617#comment4\nFlag: EXEMPT bugfix\n(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:1c8ce190df41eb77fdfce5830caec4b117ed0ddf)\nMerged-In: I4de8bad7174273c9390da978e186ad6a85f27be5\nChange-Id: I4de8bad7174273c9390da978e186ad6a85f27be5\n","web_links":[{"name":"GitHub","tooltip":"Open in GitWeb","url":"https://github.com/LineageOS/android_packages_apps_DocumentsUI/commit/c9f5da20bd7da4606ac8f38232dd0d7f00e07c1d"}],"resolve_conflicts_web_links":[{"name":"GitHub","tooltip":"Open in GitWeb","url":"https://github.com/LineageOS/android_packages_apps_DocumentsUI/commit/c9f5da20bd7da4606ac8f38232dd0d7f00e07c1d"}]},"branch":"refs/heads/lineage-20.0"},"b807a2b1dccb5f9b7c97d82e158c634d54007b67":{"kind":"TRIVIAL_REBASE","_number":3,"created":"2025-04-26 14:49:34.000000000","uploader":{"_account_id":17656,"name":"Markus S","email":"mse1969@posteo.de","username":"mse1969","avatars":[{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/faf0a883d71780207ed87e774bfbaff0.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]},"ref":"refs/changes/55/427555/3","fetch":{"anonymous http":{"url":"https://github.com/LineageOS/android_packages_apps_DocumentsUI","ref":"refs/changes/55/427555/3","commands":{"Branch":"git fetch https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/3 \u0026\u0026 git checkout -b change-427555 FETCH_HEAD","Checkout":"git fetch https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/3","Reset To":"git fetch https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/3 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"a3a5aec0363461fbef7ec4dca9397f6f23081de6","subject":"Restrict initial location for ACTION_OPEN_DOCUMENT/_TREE","web_links":[{"name":"GitHub","tooltip":"Open in GitWeb","url":"https://github.com/LineageOS/android_packages_apps_DocumentsUI/commit/a3a5aec0363461fbef7ec4dca9397f6f23081de6"}]}],"author":{"name":"Aditya Singh","email":"adityasngh@google.com","date":"2025-01-24 06:02:41.000000000","tz":-480},"committer":{"name":"mse1969","email":"mse1969@posteo.de","date":"2025-04-26 14:47:41.000000000","tz":120},"subject":"Fix for SAF loophole in the lastAccessedStack.","message":"Fix for SAF loophole in the lastAccessedStack.\n\nWhen loading the last accessed stack, the code did not check if the file\npath (uri) should be blocked, thereby allowing an attacker to bypass the\nscoped storage restriction put on initial uri.\nThis change adds the check when loading last accessed stack.\n\nBug: 352294617 \nTest: Manual as per http://b/352294617#comment4\nFlag: EXEMPT bugfix\n(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:1c8ce190df41eb77fdfce5830caec4b117ed0ddf)\nMerged-In: I4de8bad7174273c9390da978e186ad6a85f27be5\nChange-Id: I4de8bad7174273c9390da978e186ad6a85f27be5\n","web_links":[{"name":"GitHub","tooltip":"Open in GitWeb","url":"https://github.com/LineageOS/android_packages_apps_DocumentsUI/commit/b807a2b1dccb5f9b7c97d82e158c634d54007b67"}],"resolve_conflicts_web_links":[{"name":"GitHub","tooltip":"Open in GitWeb","url":"https://github.com/LineageOS/android_packages_apps_DocumentsUI/commit/b807a2b1dccb5f9b7c97d82e158c634d54007b67"}]},"branch":"refs/heads/lineage-20.0"},"db3f1075f18c3fdb26f9cd5fbc168a5a8465c2ff":{"kind":"TRIVIAL_REBASE","_number":4,"created":"2025-05-10 13:35:57.000000000","uploader":{"_account_id":15173,"name":"Kevin Haggerty","email":"haggertk@lineageos.org","username":"haggertk","avatars":[{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d32","height":32},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d56","height":56},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d100","height":100},{"url":"https://www.gravatar.com/avatar/258edfac858c1ce5f056ed4ca050a578.jpg?d\u003didenticon\u0026r\u003dpg\u0026s\u003d120","height":120}]},"ref":"refs/changes/55/427555/4","fetch":{"anonymous http":{"url":"https://github.com/LineageOS/android_packages_apps_DocumentsUI","ref":"refs/changes/55/427555/4","commands":{"Branch":"git fetch https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/4 \u0026\u0026 git checkout -b change-427555 FETCH_HEAD","Checkout":"git fetch https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/4","Reset To":"git fetch https://github.com/LineageOS/android_packages_apps_DocumentsUI refs/changes/55/427555/4 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"4bf59a5c325d4417817e2e59022e45f4128d8eab","subject":"Restrict initial location for ACTION_OPEN_DOCUMENT/_TREE","web_links":[{"name":"GitHub","tooltip":"Open in GitWeb","url":"https://github.com/LineageOS/android_packages_apps_DocumentsUI/commit/4bf59a5c325d4417817e2e59022e45f4128d8eab"}]}],"author":{"name":"Aditya Singh","email":"adityasngh@google.com","date":"2025-01-24 06:02:41.000000000","tz":-480},"committer":{"name":"Android Build Coastguard Worker","email":"android-build-coastguard-worker@google.com","date":"2025-02-06 05:21:42.000000000","tz":-480},"subject":"Fix for SAF loophole in the lastAccessedStack.","message":"Fix for SAF loophole in the lastAccessedStack.\n\nWhen loading the last accessed stack, the code did not check if the file\npath (uri) should be blocked, thereby allowing an attacker to bypass the\nscoped storage restriction put on initial uri.\nThis change adds the check when loading last accessed stack.\n\nBug: 352294617 \nTest: Manual as per http://b/352294617#comment4\nFlag: EXEMPT bugfix\n(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:1c8ce190df41eb77fdfce5830caec4b117ed0ddf)\nMerged-In: I4de8bad7174273c9390da978e186ad6a85f27be5\nChange-Id: I4de8bad7174273c9390da978e186ad6a85f27be5\n","web_links":[{"name":"GitHub","tooltip":"Open in GitWeb","url":"https://github.com/LineageOS/android_packages_apps_DocumentsUI/commit/db3f1075f18c3fdb26f9cd5fbc168a5a8465c2ff"}],"resolve_conflicts_web_links":[{"name":"GitHub","tooltip":"Open in GitWeb","url":"https://github.com/LineageOS/android_packages_apps_DocumentsUI/commit/db3f1075f18c3fdb26f9cd5fbc168a5a8465c2ff"}]},"branch":"refs/heads/lineage-20.0"}},"requirements":[],"submit_records":[],"submit_requirements":[]}