Android Keyboard Shortcut Icon Reflection Injection Fix (Bug 331180422)

From this webpage screenshot, we can extract the following key information about the vulnerability: 1. Submission Details: - Submission ID: 4677d3ee0ec2d31acc6108fea7be6cced971da37 - Submitter: Ben Murdoch - Submission Time: August 30, 2024, 17:22:59 (UTC+0000) - Submitter's Time: September 12, 2024, 03:55:45 (UTC+0000) 2. Submission Description: - Title: RESTRICT AUTOMERGE Clear app-provided shortcut icons - Description: When displaying keyboard shortcuts provided by applications, clear any icons that may have been set (this is only possible via reflection and not intended for external system use). 3. Bug ID: 331180422 4. Test Information: - Test Device: Verify on device - Test Link: cherry picked from 5. Merge Information: - Merged into: If7e291eb2254c3cbec23673c65e7477e6ad45b09 6. Change ID: - Change ID: If7e291eb2254c3cbec23673c65e7477e6ad45b09 7. File Changes: - File Path: core/java/android/view/KeyboardShortcutInfo.java - File Path: packages/SystemUI/src/com/android/systemui/statusbar/KeyboardShortcutListSearch.java - File Path: packages/SystemUI/src/com/android/systemui/statusbar/KeyboardShortcuts.java 8. Tree Information: - Tree ID: 647c5edaa6230baa49e311c1312a443d4c1bd98f 9. File List: - File Path: .prebuilt info/ - File Path: apct-tests/ - File Path: apex/ - File Path: api/ - File Path: boot/ - File Path: cmds/ - File Path: config/ - File Path: core/ - File Path: data/ - File Path: docs/ - File Path: drm/ - File Path: errorprone/ - File Path: graphics/ - File Path: identity/ - File Path: keystore/ - File Path: libs/ - File Path: location/ - File Path: media/ - File Path: mime/ - File Path: mms/ - File Path: native/ - File Path: nfc-extras/ - File Path: obex/ - File Path: omapi/ - File Path: opengl/ - File Path: packages/ - File Path: proto/ - File Path: rs/ - File Path: samples/ - File Path: sax/ - File Path: services/ - File Path: startup/ - File Path: telecomm/ - File Path: telephony/ - File Path: test-base/ - File Path: test-legacy/ - File Path: test-mock/ - File Path: test-runner/ - File Path: tests/ - File Path: tools/ - File Path: wifi/ - File Path: .clang-format - File Path: .gitignore - File Path: .mailmap - File Path: Android.bp - File Path: Android.mk - File Path: BATTERY_STATS_OWNERS - File Path: BROADCASTS_OWNERS - File Path: CleanSpec.mk - File Path: framework-jarjar-rules.txt - File Path: GAME_MANAGER_OWNERS - File Path: INPUT_OWNERS - File Path: lint-baseline.xml - File Path: METADATA - File Path: MODULE_LICENSE_APACHE2 - File Path: MULTIUSER_OWNERS - File Path: NOTICE 易 - File Path: OWNERS - File Path: OWNERS.md - File Path: PACKAGE_MANAGER_OWNERS - File Path: pathmap.mk - File Path: PERFORMANCE_OWNERS - File Path: PREUPLOAD.cfg - File Path: ProtoLibraries.bp - File Path: TEST_MAPPING - File Path: TestProtoLibraries.bp - File Path: TRACE_OWNERS - File Path: WEAR_OWNERS - File Path: ZYGOTE_OWNERS These details help us understand the context, purpose, and system impact of this submission.

Goal Reached Thanks to every supporter — we hit 100%!

Android Keyboard Shortcut Icon Reflection Injection Fix (Bug 331180422)