{"id":"ASB-A-197296414","details":"In several functions of inputDispatcher.cpp, there is a possible way to make toasts clickable due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-197296414","CVE-2022-20444"],"modified":"2026-05-22T15:55:21.353668239Z","published":"2023-05-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-05-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/native/+/062a867e94dbf811ccca02e7a6a0f0e36465694a"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/3b8aa02ba51f26161519f6465515f619e663bbbf"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/d100067fd62adb4648e966b3306b9a2f3b1fd38e"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/native/+/a066d908f6fe28e63ae49327b57fcd31d63fba2d"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-05-01"}]}],"versions":["13-next"],"ecosystem_specific":{"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/3b8aa02ba51f26161519f6465515f619e663bbbf","https://android.googlesource.com/platform/frameworks/base/+/d100067fd62adb4648e966b3306b9a2f3b1fd38e"],"spl":"2023-05-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d100067fd62adb4648e966b3306b9a2f3b1fd38e","id":"ASB-A-197296414-13953a1a","target":{"file":"core/jni/android_view_SurfaceControl.cpp"},"signature_type":"Line","digest":{"line_hashes":["311953497148197029933324416290998037504","118246843358539241614015548138965597310","42710371276610711414791601201715173153","171134238578213140909844070041437706304","301818561232954363501294321942824960879","117274481847790116195683706567649776575","214026053996811510671851429925048764"],"threshold":0.9}},{"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/3b8aa02ba51f26161519f6465515f619e663bbbf","signature_version":"v1","id":"ASB-A-197296414-143a1ef9","target":{"file":"services/core/java/com/android/server/wm/WindowManagerService.java"},"signature_type":"Line","digest":{"line_hashes":["203029237438965823023356967191998218595","273395931675484147842503613739672896528","240040061624728186121887860315152888171","12852265208070752310092706472951411810"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/3b8aa02ba51f26161519f6465515f619e663bbbf","id":"ASB-A-197296414-86e5aaf8","target":{"function":"addWindow","file":"services/core/java/com/android/server/wm/WindowManagerService.java"},"signature_type":"Function","digest":{"function_hash":"131912696702732646749132710676099158388","length":11491}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/d100067fd62adb4648e966b3306b9a2f3b1fd38e","id":"ASB-A-197296414-8d9dc642","target":{"file":"core/java/android/view/SurfaceControl.java"},"signature_type":"Line","digest":{"line_hashes":["179833870550299361643224658453058537731","129112376122241756615726305678337968761","304234607324926376362905280437356736830","328161453624188286050773666798097142527","327414134263673412432225710113223232204","36821191322807758373304509005261886519","202939729348025061167271643899320791581","139178438079664789903727500123574382986","314047888469450165801136092425354257071","189991891994099775720685819681100013572"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/3b8aa02ba51f26161519f6465515f619e663bbbf","id":"ASB-A-197296414-d9674149","target":{"file":"services/core/java/com/android/server/wm/DisplayPolicy.java"},"signature_type":"Line","digest":{"line_hashes":["88366859409507379745598550312653226965","104868542856261014477726840668409689949","226754401329672733157234000386632238133","264208149383639883628341683210780265952","122306817153474500633591346451668489","104235581513073197520511415572108749634","311572538371573169767151076302679617470"],"threshold":0.9}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-197296414.json"}},{"package":{"name":"platform/frameworks/native","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"13-next:0"},{"fixed":"13-next:2023-05-01"}]}],"versions":["13-next"],"ecosystem_specific":{"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2","https://android.googlesource.com/platform/frameworks/native/+/062a867e94dbf811ccca02e7a6a0f0e36465694a","https://android.googlesource.com/platform/frameworks/native/+/a066d908f6fe28e63ae49327b57fcd31d63fba2d"],"spl":"2023-05-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2","id":"ASB-A-197296414-017824fb","target":{"function":"layer_state_t::write","file":"libs/gui/LayerState.cpp"},"signature_type":"Function","digest":{"function_hash":"85321956377719038305999607408543720900","length":4263}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2","id":"ASB-A-197296414-08ba9d31","target":{"file":"services/surfaceflinger/Layer.h"},"signature_type":"Line","digest":{"line_hashes":["150503157486821923868146077536255846043","192230278909438056148274588834615062094","287376412953239765977738891553233042108","56478940036073037896362339311273138129","53404380652404682681012273592579667626","321093200651623695105854718657202513231","46251325052834908945048416257586168562","28984688094810427493772657130775496579","55456630170415686492883120791465611937"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2","id":"ASB-A-197296414-20996f60","target":{"function":"layer_state_t::read","file":"libs/gui/LayerState.cpp"},"signature_type":"Function","digest":{"function_hash":"47999266247089916333572079584543408710","length":4589}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/a066d908f6fe28e63ae49327b57fcd31d63fba2d","id":"ASB-A-197296414-21b07fa9","target":{"file":"services/surfaceflinger/Layer.cpp"},"signature_type":"Line","digest":{"line_hashes":["182343705348232120542497903909418263646","293296482189617147873206747674749452485","237524562363994132015089312757465028287","9627624306546448896085780212882523696","229264037369727249799805271628392450974","19238505725022334829452612580440780094","278850048609891731271640105039241402843"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/062a867e94dbf811ccca02e7a6a0f0e36465694a","id":"ASB-A-197296414-4be5d5f1","target":{"file":"services/inputflinger/dispatcher/InputDispatcher.h"},"signature_type":"Line","digest":{"line_hashes":["14223165169724752704493091077474481795","109220899226424915473461402143190989699","53161946974861240269573065313569469784"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2","id":"ASB-A-197296414-51d461c6","target":{"file":"libs/gui/LayerState.cpp"},"signature_type":"Line","digest":{"line_hashes":["97891594220133498413498556973634993304","312400283738509249279063376659246212502","309155527811924280094561492196769849647","108721135001065426597384863351467655676","75237198365249348510669056879189912112","12816836733618491194802252620444167196","204093029630329300999255930888451224322","147217022334432587230381913324021737664","24012440828944764682617147552231899505","275702179339186073146370520395828169439","82596084728377708195470225859619544912","99800199866854349304788700887315016188","165591363783187852599662109297152259176","222688799037533881176123017043377065991","204509146465589454512991438693435662053","81071600884264335458320980388699276581"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2","id":"ASB-A-197296414-535bc3e8","target":{"function":"Layer::Layer","file":"services/surfaceflinger/Layer.cpp"},"signature_type":"Function","digest":{"function_hash":"316218290662285181593402033383964223039","length":3087}},{"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2","signature_version":"v1","id":"ASB-A-197296414-66d94154","target":{"function":"layer_state_t::merge","file":"libs/gui/LayerState.cpp"},"signature_type":"Function","digest":{"function_hash":"18569852635370369374051890919335183130","length":5603}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/062a867e94dbf811ccca02e7a6a0f0e36465694a","id":"ASB-A-197296414-6e8dc09e","target":{"function":"InputDispatcher::findTouchedWindowTargetsLocked","file":"services/inputflinger/dispatcher/InputDispatcher.cpp"},"signature_type":"Function","digest":{"function_hash":"88119932256767721261038169942284130089","length":10708}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/062a867e94dbf811ccca02e7a6a0f0e36465694a","id":"ASB-A-197296414-861d4249","target":{"file":"libs/gui/include/gui/WindowInfo.h"},"signature_type":"Line","digest":{"line_hashes":["146798800178739352469124347011906234427","245602362079099061653406197394632852620","51387750034090090580032974441621595710","231393063820076494076567479978024360725","295082229469293770702386947711250849053","217954679336350079190014285922532245856"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/a066d908f6fe28e63ae49327b57fcd31d63fba2d","id":"ASB-A-197296414-91c0c463","target":{"function":"Layer::fillInputInfo","file":"services/surfaceflinger/Layer.cpp"},"signature_type":"Function","digest":{"function_hash":"118519813756734484830310669490578439881","length":1356}},{"deprecated":true,"source":"https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2","signature_version":"v1","id":"ASB-A-197296414-b20ea639","match_only_versions":["13-next"],"target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp"},"signature_type":"Line","digest":{"line_hashes":["171601302486197886842521910413250858297","98214352276649790019357862828545060387","250220979490401785789538850583655074615","192648178616938825789525318967689511659"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/062a867e94dbf811ccca02e7a6a0f0e36465694a","id":"ASB-A-197296414-b6a46b50","target":{"file":"services/inputflinger/dispatcher/InputDispatcher.cpp"},"signature_type":"Line","digest":{"line_hashes":["336162857937250634926912381912405812033","108076827672701571458481865564472077211","196658454795965882892010648300936310237","247357969604541603093130288732864664092","107545591960451041774907258753576756000","72297194117227670856172228248081809290","223042750717111427067879406118987761030","89495782372620506404899490754545552362","93718173520294698051548017376713524214","173539744006739864687673624440682154804","195777757636595575455154517084229761402"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2","id":"ASB-A-197296414-b6ae683b","target":{"file":"services/surfaceflinger/Layer.cpp"},"signature_type":"Line","digest":{"line_hashes":["286011966806782017106290064443719196892","159776566307547458953421988277689086597","214906120592212027662295357829623398679","16762512894130637708299257594409313144","304106857839242008931344648656268418947","277976763031604279920159330272697880096","91330178860709430704607251398660511149"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/a066d908f6fe28e63ae49327b57fcd31d63fba2d","id":"ASB-A-197296414-caf43b32","target":{"file":"services/surfaceflinger/Layer.h"},"signature_type":"Line","digest":{"line_hashes":["100569728241379393243498560263148968163","333639272135675446666071639987160529917","324247707693181264662448406169943643313","43574945068599628332563508417376035989"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2","id":"ASB-A-197296414-d9d3358c","target":{"file":"libs/gui/include/gui/LayerState.h"},"signature_type":"Line","digest":{"line_hashes":["334163400372649011446966178117757651514","287544603732600962723665890104980934041","114179110197550599042460465320969308455","322710320279530979612725802119481060586","247073107840712055612750994906455496393","245026349079990182062786780711037852076","88767474208908839947842550485092414487","106584093719390382319183027201576876973","191031778708812909978295053447985090898","94845948927339852806096559570535267802","62147343740144972207645873344929530629"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/062a867e94dbf811ccca02e7a6a0f0e36465694a","id":"ASB-A-197296414-d9ead08f","target":{"function":"InputDispatcher::findFocusedWindowTargetsLocked","file":"services/inputflinger/dispatcher/InputDispatcher.cpp"},"signature_type":"Function","digest":{"function_hash":"49818536195286255682228227376010569513","length":1966}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2","id":"ASB-A-197296414-e3c67001","target":{"file":"libs/gui/include/gui/SurfaceComposerClient.h"},"signature_type":"Line","digest":{"line_hashes":["185276140152056688418684206868928528495","283344791535725216088788784478437626414","122882202201830061564215419130595702791","107234050801171928837743955564451277465"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/062a867e94dbf811ccca02e7a6a0f0e36465694a","id":"ASB-A-197296414-e623c55c","target":{"file":"services/inputflinger/tests/InputDispatcher_test.cpp"},"signature_type":"Line","digest":{"line_hashes":["68924646896661750941083574119415162789"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2","id":"ASB-A-197296414-fe614d3e","target":{"function":"SurfaceFlinger::setClientStateLocked","file":"services/surfaceflinger/SurfaceFlinger.cpp"},"signature_type":"Function","digest":{"function_hash":"295695829612194455255951840791356293117","length":11100}},{"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/native/+/9cf4a4d4e57d059a4e4119f0a8f2a8be237f28c2","signature_version":"v1","id":"ASB-A-197296414-ff2161d6","target":{"function":"layer_state_t::layer_state_t","file":"libs/gui/LayerState.cpp"},"signature_type":"Function","digest":{"function_hash":"147177294975359552386236408853655551126","length":1160}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-197296414.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-05-01"}]}],"versions":["11"],"ecosystem_specific":{"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/55c1473bf2fedaacf7bb8ac068e6f9b1a625b5e0","https://android.googlesource.com/platform/frameworks/base/+/fad4624dd82c6623d34137d051b76603533ddfc0"],"spl":"2023-05-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/55c1473bf2fedaacf7bb8ac068e6f9b1a625b5e0","id":"ASB-A-197296414-54e910fa","target":{"file":"services/core/java/com/android/server/wm/WindowManagerService.java"},"signature_type":"Line","digest":{"line_hashes":["274250021002336664820476559574429761921","328429529577705123693953727569467032596","78373320504654268722626683840064504069","105945758530465813433184880365374830523"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fad4624dd82c6623d34137d051b76603533ddfc0","id":"ASB-A-197296414-7997beb5","target":{"file":"core/java/android/view/SurfaceControl.java"},"signature_type":"Line","digest":{"line_hashes":["179833870550299361643224658453058537731","78038897886852440938130017935586635386","121636028308718306402181246539815926521","40506096930622502289667039751546420548","321954266236148362971600545714334624668","267823585691711147043056112624694923708","91601604676543592496901393277868292534","276063466254883982987000950949428048107","77400634208466527640613541421555140892","36821191322807758373304509005261886519","202939729348025061167271643899320791581","139178438079664789903727500123574382986","314047888469450165801136092425354257071","189991891994099775720685819681100013572"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/55c1473bf2fedaacf7bb8ac068e6f9b1a625b5e0","id":"ASB-A-197296414-89c1d5d3","target":{"file":"services/core/java/com/android/server/wm/DisplayPolicy.java"},"signature_type":"Line","digest":{"line_hashes":["88366859409507379745598550312653226965","265485485580819519425770261930635776119","193458388312314157185927738731725940560","169682011899694344653524900136185212722","209247006156520135414919465455632668230","189885709426762610526399389761134554638","74176406977870527701917233686822607423"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/55c1473bf2fedaacf7bb8ac068e6f9b1a625b5e0","id":"ASB-A-197296414-8bdbf3c5","target":{"function":"addWindow","file":"services/core/java/com/android/server/wm/WindowManagerService.java"},"signature_type":"Function","digest":{"function_hash":"116407828784510617370529456046600076501","length":10412}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/fad4624dd82c6623d34137d051b76603533ddfc0","id":"ASB-A-197296414-cea660dd","target":{"file":"core/jni/android_view_SurfaceControl.cpp"},"signature_type":"Line","digest":{"line_hashes":["311953497148197029933324416290998037504","118246843358539241614015548138965597310","42710371276610711414791601201715173153","205363274732472721891039768664624031456","88657395150969015236795111864363873816","77216003140544815108555887206088508807","166985329352765192808886944748006235976","313123107633988086848876538416378787127","111303023665289406622176341513279729981","22121813102405613255099915607719925795","255494677026818551270184308431418868415"],"threshold":0.9}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-197296414.json"}},{"package":{"name":"platform/frameworks/native","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2023-05-01"}]}],"versions":["11"],"ecosystem_specific":{"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13","https://android.googlesource.com/platform/frameworks/native/+/0f13fe552dcca56a7597a354a6b94587981c3d12","https://android.googlesource.com/platform/frameworks/native/+/cbe9c105fcdeba79f1722616e8b576c1d45c93a6"],"spl":"2023-05-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/0f13fe552dcca56a7597a354a6b94587981c3d12","id":"ASB-A-197296414-0b1362ec","target":{"function":"InputDispatcher::findTouchedWindowTargetsLocked","file":"services/inputflinger/dispatcher/InputDispatcher.cpp"},"signature_type":"Function","digest":{"function_hash":"95658283118458550235256002802770838491","length":10220}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/cbe9c105fcdeba79f1722616e8b576c1d45c93a6","id":"ASB-A-197296414-0fed7aa4","target":{"function":"Layer::fillInputInfo","file":"services/surfaceflinger/Layer.cpp"},"signature_type":"Function","digest":{"function_hash":"37073698488131293179170254576105649147","length":2369}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13","id":"ASB-A-197296414-2ac87cf1","target":{"file":"libs/gui/SurfaceComposerClient.cpp"},"signature_type":"Line","digest":{"line_hashes":["269152015230492767675400859873267479562","112408395187673591380666817602596364722","102247903890090525480103485599486047670"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13","id":"ASB-A-197296414-3150d731","target":{"file":"services/surfaceflinger/Layer.cpp"},"signature_type":"Line","digest":{"line_hashes":["110644423627844684930463918181683248301","334476555289034577931734495050954194735","139813982187768011200437011358096087110","339361912602781209922697639298272221565","50891430653008681251491333837882776136","94737173544894181961741378860989059474","49541037522153199499701636333844290620"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13","id":"ASB-A-197296414-3805bbcf","target":{"file":"include/input/InputWindow.h"},"signature_type":"Line","digest":{"line_hashes":["78765940826292357361889811474012550313","29586408741585845623919379813596901030","57587654368262487689741237204216459100","84719886112124960572445178176900874769"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13","id":"ASB-A-197296414-39bc83a5","target":{"function":"layer_state_t::merge","file":"libs/gui/LayerState.cpp"},"signature_type":"Function","digest":{"function_hash":"90667564292522968995914015025588740588","length":5150}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/0f13fe552dcca56a7597a354a6b94587981c3d12","id":"ASB-A-197296414-447d4158","target":{"function":"InputDispatcher::findFocusedWindowTargetsLocked","file":"services/inputflinger/dispatcher/InputDispatcher.cpp"},"signature_type":"Function","digest":{"function_hash":"197661302591114403200552601797231985500","length":2064}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13","id":"ASB-A-197296414-4825a6e0","target":{"file":"libs/gui/include/gui/LayerState.h"},"signature_type":"Line","digest":{"line_hashes":["126986805733289649538417554294105305776","260882624212253221161633240585377370470","311836382889566102266877895673417042785","291157230031493436689321748156602037230","191174235153054945455846432732653566063","257677755566205524146568505749464632828","140868773142698208071740103051574566227","134807452305407089575376323824197912519","4724012566126506132421597844953848620","333816177602011247027239831127648721974","62112395992441585782336578085962872984","111674099190765509995692558237096818840","261794808382178831710546480234020305147","306548908652953074978967504015598080979","292517974228906096314499383460717898331"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13","id":"ASB-A-197296414-4f53dd32","target":{"file":"libs/gui/include/gui/SurfaceComposerClient.h"},"signature_type":"Line","digest":{"line_hashes":["107246722638095229420722775886904366686","316536198040328116913682417580413452317","99147079992365162531362492503025406105"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13","id":"ASB-A-197296414-50eab7a0","target":{"function":"layer_state_t::write","file":"libs/gui/LayerState.cpp"},"signature_type":"Function","digest":{"function_hash":"324437854366794011773192376446497869605","length":2874}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13","id":"ASB-A-197296414-5cb25997","target":{"function":"layer_state_t::read","file":"libs/gui/LayerState.cpp"},"signature_type":"Function","digest":{"function_hash":"177146722034585823706254519202780949690","length":2923}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13","id":"ASB-A-197296414-5e654052","target":{"function":"SurfaceFlinger::setClientStateLocked","file":"services/surfaceflinger/SurfaceFlinger.cpp"},"signature_type":"Function","digest":{"function_hash":"203795082578269184732950689954948407100","length":9772}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/cbe9c105fcdeba79f1722616e8b576c1d45c93a6","id":"ASB-A-197296414-8b9f0394","target":{"file":"services/surfaceflinger/Layer.h"},"signature_type":"Line","digest":{"line_hashes":["143255663302348209826963127594818665377","73934884261644113592575042112554590415","61690637407035033067404382651882172214","259495312013845175838424260884633941536"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13","id":"ASB-A-197296414-a8395b0c","target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp"},"signature_type":"Line","digest":{"line_hashes":["323268881144054206043808568620523809369","270450720948143680092234906862591531757","250220979490401785789538850583655074615","299528391378617941128290108252291769813"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/0f13fe552dcca56a7597a354a6b94587981c3d12","id":"ASB-A-197296414-b576a1b6","target":{"file":"services/inputflinger/tests/InputDispatcher_test.cpp"},"signature_type":"Line","digest":{"line_hashes":["24017612679613604963611341087367510659","218502148837140259731768525170824789772","79375958336077023109433097144417560124","267990361919601474916148625163204819841","267357482444027364756627846960008931989","101792458537159383112842581175951734150","264671417626899090870092748554636030266"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/0f13fe552dcca56a7597a354a6b94587981c3d12","id":"ASB-A-197296414-d35bf47b","target":{"file":"services/inputflinger/dispatcher/InputDispatcher.cpp"},"signature_type":"Line","digest":{"line_hashes":["125724775784833165799871999697886011530","109639850369244922925147474906783594182","129718680731276671423555968686533361189","338641716319148729367919294818669823873","107545591960451041774907258753576756000","72297194117227670856172228248081809290","48055512065909234871829372021194144335","56268812313462911376129521409854863240","100148932531210696003199354027265351776","84984307548476407159215466687525388927","274770921376172655021099730707366217114"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/cbe9c105fcdeba79f1722616e8b576c1d45c93a6","id":"ASB-A-197296414-d38ae17b","target":{"file":"services/surfaceflinger/Layer.cpp"},"signature_type":"Line","digest":{"line_hashes":["42307165690869018218049612825368696034","198514284164174325934248399540426464571","156056944192992467108301982514531846112","122496601891720427843011620000365022741","137287664393483891012046633672387374289","125851612503898630110013620967476769490","122910796159153481025650656603807989028"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13","id":"ASB-A-197296414-e55d8d84","target":{"function":"Layer::Layer","file":"services/surfaceflinger/Layer.cpp"},"signature_type":"Function","digest":{"function_hash":"113546214982164736915450771724249400237","length":2491}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13","id":"ASB-A-197296414-e943f58d","target":{"file":"services/surfaceflinger/Layer.h"},"signature_type":"Line","digest":{"line_hashes":["150503157486821923868146077536255846043","246538288030826416552539764643614864482","269580248648597779370167926163570093575","38604518672786190834103623131781099367","147693139548321044492227221737285274178","157998631244604278369271497364652319490","82595396020273490695172662037692845675","15613206381574308866506859256283618526","225267120491089238054876821147789903010"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/0f13fe552dcca56a7597a354a6b94587981c3d12","id":"ASB-A-197296414-f43a08bf","target":{"file":"services/inputflinger/dispatcher/InputDispatcher.h"},"signature_type":"Line","digest":{"line_hashes":["303257600826695467064320337582540044028","314261386033770506136846073634374121440","283507409566447710683245427301608684875"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/122c4d2da0405be75ae8c249e19ba692722c6e13","id":"ASB-A-197296414-fb5f92b7","target":{"file":"libs/gui/LayerState.cpp"},"signature_type":"Line","digest":{"line_hashes":["287745337528452127607584493540565844897","324497472409075541431215460581495409682","18178742509267460039439688849632149140","227351648590916612916411469978529292321","158842002262602617582051932635241222666","180021774590099881893998875471752520950","63483294824671648632675098867167893867","188291689759418592812831486199948408741","295221713365475021585111867798197840006","39439887402080538269885460355966662447"],"threshold":0.9}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-197296414.json"}},{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-05-01"}]}],"versions":["12"],"ecosystem_specific":{"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/base/+/6ac8376cd79ff485dd5531fca3dff2b093c5ea15"],"spl":"2023-05-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6ac8376cd79ff485dd5531fca3dff2b093c5ea15","id":"ASB-A-197296414-ddb09159","target":{"file":"services/core/java/com/android/server/wm/DisplayPolicy.java"},"signature_type":"Line","digest":{"line_hashes":["88366859409507379745598550312653226965","104868542856261014477726840668409689949","226754401329672733157234000386632238133","264208149383639883628341683210780265952","122306817153474500633591346451668489","104235581513073197520511415572108749634","311572538371573169767151076302679617470"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/6ac8376cd79ff485dd5531fca3dff2b093c5ea15","id":"ASB-A-197296414-f63ff79e","target":{"file":"services/core/java/com/android/server/wm/WindowManagerService.java"},"signature_type":"Line","digest":{"line_hashes":["274250021002336664820476559574429761921","328429529577705123693953727569467032596","78373320504654268722626683840064504069","105945758530465813433184880365374830523"],"threshold":0.9}},{"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/base/+/6ac8376cd79ff485dd5531fca3dff2b093c5ea15","signature_version":"v1","id":"ASB-A-197296414-f73dbcb7","target":{"function":"addWindow","file":"services/core/java/com/android/server/wm/WindowManagerService.java"},"signature_type":"Function","digest":{"function_hash":"153260362683901620278532799697055478626","length":11521}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-197296414.json"}},{"package":{"name":"platform/frameworks/native","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"12:0"},{"fixed":"12:2023-05-01"}]}],"versions":["12"],"ecosystem_specific":{"severity":"High","fixes":["https://android.googlesource.com/platform/frameworks/native/+/212dcf44f696158778939aad4619e320148890eb","https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a","https://android.googlesource.com/platform/frameworks/native/+/9b0d13dc443a102358ad740549ade0b83fe7e522"],"spl":"2023-05-01","types":["EoP"],"vanir_signatures":[{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/212dcf44f696158778939aad4619e320148890eb","id":"ASB-A-197296414-020dd659","target":{"function":"InputDispatcher::findFocusedWindowTargetsLocked","file":"services/inputflinger/dispatcher/InputDispatcher.cpp"},"signature_type":"Function","digest":{"function_hash":"170158385538549742031318560372591454135","length":1968}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/212dcf44f696158778939aad4619e320148890eb","id":"ASB-A-197296414-0a26e5c7","target":{"file":"services/inputflinger/tests/InputDispatcher_test.cpp"},"signature_type":"Line","digest":{"line_hashes":["68924646896661750941083574119415162789"],"threshold":0.9}},{"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/native/+/9b0d13dc443a102358ad740549ade0b83fe7e522","signature_version":"v1","id":"ASB-A-197296414-0df08f5c","target":{"file":"services/surfaceflinger/Layer.cpp"},"signature_type":"Line","digest":{"line_hashes":["128057172000698684731284910354226977118","288719078066427121728756809084295846482","319377678347460250753268413465234178296","254217541972828983813140758487056114064","229264037369727249799805271628392450974","19238505725022334829452612580440780094","150028946346068791804412881516749544449"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a","id":"ASB-A-197296414-1a225f7e","target":{"file":"include/input/InputWindow.h"},"signature_type":"Line","digest":{"line_hashes":["160474123671948444186042064455534919845","231393063820076494076567479978024360725","295082229469293770702386947711250849053","250303189181371627927185081410081643429"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/9b0d13dc443a102358ad740549ade0b83fe7e522","id":"ASB-A-197296414-20d6b3fd","target":{"file":"services/surfaceflinger/Layer.h"},"signature_type":"Line","digest":{"line_hashes":["100569728241379393243498560263148968163","333639272135675446666071639987160529917","324247707693181264662448406169943643313","31485650172828613309020580814212773163"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a","id":"ASB-A-197296414-291d1bcd","target":{"file":"libs/gui/include/gui/LayerState.h"},"signature_type":"Line","digest":{"line_hashes":["126986805733289649538417554294105305776","138483878539640683271924455254639517428","204332114220807243893036472636941690678","278719410775083585129922885556841685274","208782102399465692838426836369055984339","218140701409267659201492117015240076837","322710320279530979612725802119481060586","128024335823506177662904591559860372578","274992878132763414603910536690457950978","129508961755394525259725417546551849431"],"threshold":0.9}},{"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a","signature_version":"v1","id":"ASB-A-197296414-3d1a922c","target":{"file":"services/surfaceflinger/Layer.h"},"signature_type":"Line","digest":{"line_hashes":["150503157486821923868146077536255846043","54243180276589643976825071566385902738","72899625709712413219664730780877552208","14700148968977320761317422849949106877","161056368111136838033721912815391962984","321093200651623695105854718657202513231","46251325052834908945048416257586168562","28984688094810427493772657130775496579","55456630170415686492883120791465611937"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a","id":"ASB-A-197296414-48f851c6","target":{"function":"SurfaceFlinger::setClientStateLocked","file":"services/surfaceflinger/SurfaceFlinger.cpp"},"signature_type":"Function","digest":{"function_hash":"44791309334450844456675503081552095819","length":10777}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a","id":"ASB-A-197296414-665d8349","target":{"function":"Layer::Layer","file":"services/surfaceflinger/Layer.cpp"},"signature_type":"Function","digest":{"function_hash":"11953062359817261094016458723671715009","length":3025}},{"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/native/+/212dcf44f696158778939aad4619e320148890eb","signature_version":"v1","id":"ASB-A-197296414-7aaec1b5","target":{"file":"services/inputflinger/dispatcher/InputDispatcher.h"},"signature_type":"Line","digest":{"line_hashes":["283718874269985999838426022969052832419","51251977788229206806022933377775339714","126837267791215027000989397833006808577"],"threshold":0.9}},{"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a","signature_version":"v1","match_only_versions":["12"],"id":"ASB-A-197296414-8c12cbca","target":{"file":"libs/gui/include/gui/SurfaceComposerClient.h"},"signature_type":"Line","digest":{"line_hashes":["76518896870437984326428166302289206920","200770302279035742138173073642108196466","277544257460464788250713010166820282964"],"threshold":0.9}},{"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a","signature_version":"v1","id":"ASB-A-197296414-96673344","target":{"function":"layer_state_t::write","file":"libs/gui/LayerState.cpp"},"signature_type":"Function","digest":{"function_hash":"41371028096339871784330770802911533255","length":4214}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a","id":"ASB-A-197296414-98cb4fb0","target":{"file":"libs/gui/LayerState.cpp"},"signature_type":"Line","digest":{"line_hashes":["298664290227875740322768330979081618160","233245596182232249907971972357066927970","262534343098190442132875127168875722230","97891594220133498413498556973634993304","151441872578660305457531961771794725484","22357882456286152800894525762774698098","215037684153096092482007146620708182471","68518735567229351848542944932575623480","135442729657009682330099330438211567409","298848547558368093270880320019324191833","63483294824671648632675098867167893867","71708163981613363559965199103830168148","71123869964882303498309773307374328809","270492860421457519514673011562344475171"],"threshold":0.9}},{"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a","signature_version":"v1","match_only_versions":["12"],"id":"ASB-A-197296414-9e49ce6f","target":{"file":"libs/gui/SurfaceComposerClient.cpp"},"signature_type":"Line","digest":{"line_hashes":["197733401230434456479201278707380213534","139693618548597008343948120197127366634","173554347626147405001252391215442234083"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/212dcf44f696158778939aad4619e320148890eb","id":"ASB-A-197296414-a2b083d1","target":{"function":"InputDispatcher::findTouchedWindowTargetsLocked","file":"services/inputflinger/dispatcher/InputDispatcher.cpp"},"signature_type":"Function","digest":{"function_hash":"57193990605608597521120757250696957075","length":10747}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a","id":"ASB-A-197296414-a2c4078c","target":{"function":"layer_state_t::merge","file":"libs/gui/LayerState.cpp"},"signature_type":"Function","digest":{"function_hash":"149279643520259506020275478305822036482","length":5417}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a","id":"ASB-A-197296414-bab776f0","target":{"function":"layer_state_t::layer_state_t","file":"libs/gui/LayerState.cpp"},"signature_type":"Function","digest":{"function_hash":"310078888850522111761749299876166062159","length":1179}},{"deprecated":false,"source":"https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a","signature_version":"v1","match_only_versions":["12"],"id":"ASB-A-197296414-bcd4da6f","target":{"file":"services/surfaceflinger/SurfaceFlinger.cpp"},"signature_type":"Line","digest":{"line_hashes":["323268881144054206043808568620523809369","98779104345064156101547132151575297941","179822568014372232274488548937893906184","116184968234886107223067764056518569240"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/9b0d13dc443a102358ad740549ade0b83fe7e522","id":"ASB-A-197296414-c303dad8","target":{"function":"Layer::fillInputInfo","file":"services/surfaceflinger/Layer.cpp"},"signature_type":"Function","digest":{"function_hash":"99290924107739358157298668195577893222","length":1618}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/212dcf44f696158778939aad4619e320148890eb","id":"ASB-A-197296414-c7dafb4b","target":{"file":"services/inputflinger/dispatcher/InputDispatcher.cpp"},"signature_type":"Line","digest":{"line_hashes":["172924485298204459113482071952089115547","108076827672701571458481865564472077211","196658454795965882892010648300936310237","73438592253036149637500746161491925422","70181756603853357992114614105071825607","246083550843570280361092657794544084196","59344089315733278487449250510462459841","321126885415896690753674664850848277737","93718173520294698051548017376713524214","173539744006739864687673624440682154804","117992797414711509173323356240980508112","301455594360887011291094967540406652664","121461113836229417085292454854067647489"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a","id":"ASB-A-197296414-df3050f7","target":{"file":"services/surfaceflinger/Layer.cpp"},"signature_type":"Line","digest":{"line_hashes":["131119015513166263991513640345848514329","51568116969163411195940740636801508041","178687044438696054566210048875444062561","233027224164873481779008981674432153817","230998103931701092711981792551313853350","336821434684908142779599167314489810890","255672355358265899108335699165716834181"],"threshold":0.9}},{"deprecated":false,"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/native/+/77daf700ce9707d147d2cc3075d6e6bbc1a4280a","id":"ASB-A-197296414-f88cdbc1","target":{"function":"layer_state_t::read","file":"libs/gui/LayerState.cpp"},"signature_type":"Function","digest":{"function_hash":"231766209262677052582461870599862035356","length":4531}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-197296414.json"}}],"schema_version":"1.7.5"}