Will Verduzco · Dec 11, 2013 at 11:30 pm

Source Code Commits in Android 4.4.2 KOT49H Reveal Flash SMS Attack Fix and App Ops Removal

Just a few hours ago, we talked about how the source code for Android 4.4.2 had made its way into the AOSP. Now, the fine folks over at FunkyAndroid have once again created an exhaustive change log detailing all of the commits made between 4.4.1 and 4.4.2.

Nexus device owners who upgraded from 4.4.1 to 4.4.2 will attest to the small size of the incremental OTA. Accordingly, only four source code commits differentiate the two versions. But never fear, as these changes are actually significant. And if you haven’t already updated, they definitely warrant a few minutes of your time.

Chief among the fixes, 4.4.2 brings a solution to the previously covered low risk Flash SMS vulnerability. Although they went about “fixing” the problem the wrong way initially, we’re glad to see a legitimate solution appear. There is also a fix for the OOBE Denial-of-Service crash after receiving 0-byte WAP push messages, as well as reduced camera logging.

In addition to the fixes, the much loved App Ops program that we covered not too long ago has been further hidden away. As such, it is no longer accessible through the previous means. This change is entirely intentional, as Google always meant to keep the program for internal debugging. As stated by Google Framework Engineer Dianne Hackborn:

 That UI is (and it should be quite clear) not an end-user UI.  It was there for development purposes.  It wasn’t intended to be available.  The architecture is used for a growing number of things, but it is not intended to be exposed as a big low-level UI of a big bunch of undifferentiated knobs you can twiddle.  For example, it is used now for the per-app notification control, for keeping track of when location was accessed in the new location UI, for some aspects of the new current SMS app control, etc.

To get started, make your way over to the FunkyAndroid KOT49E Changelog and check out those commits. The complete (and miniscule) changelog can be found in its entirety at the bottom of this post. What are your thoughts on the update to 4.4.2? Are you glad that Google finally fixed the SMS and OOBE crash bugs? Despite Dianne’s explanation, are you still a little peeved about the further hiding of App Ops? Let us know in the comments below.

[Source FunkyAndroid | Via AndroidPolice]

Full Changelog, as reported by FunkyAndroid:

Project: platform/build

986567d : “KOT49H”
d470407 : “KOT49G”
5de4753 : .1 becomes .2
a7e544d : KOT49F

 

Project: platform/frameworks/opt/telephony

567ea11 : Fix OOBE crash/DoS after receiving 0-byte WAP push.

 

Project: platform/packages/apps/Camera2

3574026 : Reduce logging of flattened Preferences

 

Project: platform/packages/apps/Mms

d00f7cd : Android denial of service attack using class 0 SMS messages

 

Project: platform/packages/apps/Settings

37f06a4 : Put fragment in specific activity’s whitelist


_________
Want something on the XDA Portal? Send us a tip!

Will Verduzco

willverduzco is an editor on XDA-Developers, the largest community for Android users. Will Verduzco is the Portal Administrator for the XDA-Developers Portal. He has been addicted to mobile technology since the HTC Wizard. But starting with the Nexus One, his gadget love affair shifted to Google's little green robot. He is also a Johns Hopkins University graduate in neuroscience and is now currently studying to become a physician. View willverduzco's posts and articles here.
Eric Hulse · Jul 7, 2015 at 05:59 pm · 2 comments

T-Mobile Galaxy S6 Battery Woes

I've been using a T-Mobile Galaxy S6 since the device launched with T-mobile's service. However, over this past holiday weekend I knew I would be in an area without reliable T-Mobile service. So, I opened up T-Mobile's default "Device Unlock" app , pressed unlock, and placed my AT&T SIM card in the device. Everything seemed to be working fine: strong signal, great LTE, good voice calls - until day 3. On Sunday, my Galaxy S6 felt very hot to the touch and...

XDA NEWS
Brian Young · Jul 7, 2015 at 12:26 pm · 3 comments

Earthquake Early Warning in Your Pocket

Probably all of us reading this have a smartphone in our pocket. For many of us, the smartphone has become our primary method of reading and writing e-mails, messaging, and browsing the web. Though proclamations that "smartphones have replaced the personal computer" typically fall on deaf ears, the statements aren't without merit. Indeed, smartphones have "replaced"—or more accurately, "displaced"—PC's in several areas that they have traditionally been dominant. But how many of you look into your pocket, or on your desk, and...

XDA NEWS
Aamir Siddiqui · Jul 7, 2015 at 10:39 am · 2 comments

Sony: The OEM You Want To Save

In our recent Discuss article, we asked you readers on which OEM you would like to help. While the answers we received were varied, a lot of these responses and top comments stood out for helping one OEM: Sony. Some excerpts from our discussion are as below: And many more follow suit. Needless to say, many believe that Sony Mobile as a company is great and is worth saving. And all of these would be happy to hear that Sony will...

XDA NEWS
Share This