Skip to content

Android 12: Security and performance - Unsafe intent launches #16093

@ashiagr

Description

@ashiagr

Parent #16062

Unsafe intent launches

The goal of this task is to detect and fix unsafe launches from the app.

Found atleast two unsafe launches from the app:

From Login Lib

D/StrictMode: StrictMode policy violation: android.os.strictmode.UnsafeIntentLaunchViolation: Launch of unsafe intent: Intent { (has extras) }
        at android.os.StrictMode.onUnsafeIntentLaunch(StrictMode.java:2330)
        at android.content.Intent.prepareToLeaveProcess(Intent.java:11450)
        at android.content.Intent.prepareToLeaveProcess(Intent.java:11368)
        at android.app.Activity.startIntentSenderForResultInner(Activity.java:5654)
        at android.app.Activity.autofillClientAuthenticate(Activity.java:8546)
        at android.view.autofill.AutofillManager.authenticate(AutofillManager.java:2224)
        at android.view.autofill.AutofillManager.access$2500(AutofillManager.java:176)
        at android.view.autofill.AutofillManager$AutofillManagerClient.lambda$authenticate$3(AutofillManager.java:3506)
        at android.view.autofill.AutofillManager$AutofillManagerClient$$ExternalSyntheticLambda1.run(Unknown Source:12)
        at android.os.Handler.handleCallback(Handler.java:938)
        at android.os.Handler.dispatchMessage(Handler.java:99)
        at android.os.Looper.loopOnce(Looper.java:201)
        at android.os.Looper.loop(Looper.java:288)
        at android.app.ActivityThread.main(ActivityThread.java:7839)
        at java.lang.reflect.Method.invoke(Native Method)
        at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:548)
        at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:1003)

EditPostActivity

D/StrictMode: StrictMode policy violation: android.os.strictmode.UnsafeIntentLaunchViolation: Launch of unsafe intent: Intent { cmp=org.wordpress.android.prealpha/org.wordpress.android.ui.posts.EditPostActivity (has extras) }
        at android.os.StrictMode.onUnsafeIntentLaunch(StrictMode.java:2330)
        at android.content.Intent.prepareToLeaveProcess(Intent.java:11450)
        at android.content.Intent.prepareToLeaveProcess(Intent.java:11368)
        at android.app.Activity.finish(Activity.java:6463)
        at android.app.Activity.finish(Activity.java:6499)
        at org.wordpress.android.ui.posts.EditPostActivity.lambda$startObserving$8$EditPostActivity(EditPostActivity.java:898)
        at org.wordpress.android.ui.posts.-$$Lambda$EditPostActivity$0mYQlvvtdaW0SjEuv-bQkUzqaXY.invoke(Unknown Source:4)
        at org.wordpress.android.viewmodel.Event.applyIfNotHandled(Event.kt:26)
        at org.wordpress.android.ui.posts.EditPostActivity.lambda$startObserving$9$EditPostActivity(EditPostActivity.java:884)
        at org.wordpress.android.ui.posts.-$$Lambda$EditPostActivity$SR4BjYkthqVIkINAm1tyLY480sk.onChanged(Unknown Source:4)
        at androidx.lifecycle.LiveData.considerNotify(LiveData.java:133)
        at androidx.lifecycle.LiveData.dispatchingValue(LiveData.java:151)
        at androidx.lifecycle.LiveData.setValue(LiveData.java:309)
        at androidx.lifecycle.MutableLiveData.setValue(MutableLiveData.java:50)
        at androidx.lifecycle.LiveData$1.run(LiveData.java:93)
        at android.os.Handler.handleCallback(Handler.java:938)
        at android.os.Handler.dispatchMessage(Handler.java:99)
        at android.os.Looper.loopOnce(Looper.java:201)
        at android.os.Looper.loop(Looper.java:288)
        at android.app.ActivityThread.main(ActivityThread.java:7839)
        at java.lang.reflect.Method.invoke(Native Method)
        at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:548)
        at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:1003)

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions