Potential for transparent activity leak with setDeviceCredentialAllowed [143091227]

Fixed

Bug

[AOSP] assigned

Status Update

No update yet.

Description

ma...@gmail.com

created issue #1

Oct 22, 2019 05:58PM

Running on Samsung A50 Android 9 or Emulator Nexus 5X API 27

Android Studio 3.5.1
compileSdkVersion 29
minSdkVersion 21
targetSdkVersion 29

def biometric_version = "1.0.0-rc01"
implementation "androidx.biometric:biometric:$biometric_version"

Scenario 1:
- No biometric or device credentials (PIN, pattern, password) configured
- Biometric prompt not showing
- Activity is not responding (can't tap on button or textfields)

Scenario 2:
- Device credential configured (Pattern)
- Biometric prompt showing pattern authentication
- Tap on Cancel
- Activity is not responding (can't tap on button or textfields)

I can see in the logs "Authentication canceled by user" for both scenario
When fingerprint is configured ans prompt ask for fingerprint if I cancel the activity is responding
It occurs only for device credentials when setDeviceCredentialAllowed(true)

Comments

vi...@google.com <vi...@google.com> Oct 23, 2019 06:21AM

Assigned to vi...@google.com.

vi...@google.com <vi...@google.com> #2Oct 23, 2019 10:37AM

Project: platform/frameworks/support
Branch: androidx-main

commit c73bd92631a2ff341f89001bc9143c7b998333e8
Author: Sanura N'Jaka <sanura@google.com>
Date: Thu Aug 18 18:03:13 2022

Add project dependency constraint between lifecycle-viewmodel and lifecycle-viewmodel-savedstate

Added bi-directional project version constraint between
lifecycle-viewmodel and lifecycle-viewmodel-savedstate.
If both artifacts are in the dependency tree, their
versions should match. This will now be enforced by gradle
automatically bumping up either version to meet constraint.

Test: N/A
Bug: 242871265
Change-Id: I3ab2abf9b6b1861038afc0e651da80e4ee75efb8

M lifecycle/lifecycle-viewmodel-savedstate/build.gradle

https://android-review.googlesource.com/2189976

ma...@gmail.com <ma...@gmail.com> #3Oct 24, 2019 09:17PM

Project: platform/frameworks/support
Branch: androidx-main

commit e7a81dc92c9c56b31455c75161a8becf49f761e3
Author: Sanura N'Jaka <sanura@google.com>
Date: Wed Aug 17 22:44:55 2022

Add project dependency constraint between lifecycle-runtime and lifecycle-runtime-compose

Added bi-directional project version constraint between
lifecycle-runtime and lifecycle-runtime-compose. If both
artifacts are in the dependency tree, their versions
should match. This will now be enforced by gradle
automatically bumping up either version to meet constraint.

Test: N/A
Bug: 242871265
Change-Id: I0f6b3928ac0b338b0fcc6835828dd43fadee8c0d

M lifecycle/lifecycle-runtime-compose/build.gradle
M lifecycle/lifecycle-runtime/build.gradle

https://android-review.googlesource.com/2189951

MyApplication.zip

14 MB

Download

video.webm

6.5 MB

Download

ma...@gmail.com <ma...@gmail.com> #4Oct 24, 2019 09:48PM

Project: platform/frameworks/support
Branch: androidx-main

commit b671082b2d2ba47ca41f33646780e797ac6689cc
Author: Sanura N'Jaka <sanura@google.com>
Date: Wed Aug 17 20:02:11 2022

Add project dependency constraint between lifecycle-common and lifecycle-runtime

Added bi-directional project version constraint between lifecycle-common and
lifecycle-runtime. If both artifacts are in the dependency tree, their versions
should match. This will now be enforced by gradle automatically bumping up
either version to meet constraint.

Test: N/A
Bug: 242871265
Change-Id: I98fea6d1a6b2cde61b0cf5c7822cd98b6218c578

M lifecycle/lifecycle-runtime/build.gradle
M lifecycle/lifecycle-common/build.gradle

https://android-review.googlesource.com/2188999

vi...@google.com <vi...@google.com> #5Oct 25, 2019 11:11AM

Reassigned to kc...@google.com.

Project: platform/frameworks/support
Branch: androidx-main

commit f9794b48f28888fa27810c9b758062461d632454
Author: Sanura N'Jaka <sanura@google.com>
Date: Wed Aug 17 22:26:13 2022

Add project dependency constraint between lifecycle-runtime and lifecycle-runtime-testing

Added bi-directional project version constraint between
lifecycle-runtime and lifecycle-runtime-testing. If both
artifacts are in the dependency tree, their versions
should match. This will now be enforced by gradle
automatically bumping up either version to meet constraint.

Test: N/A
Bug: 242871265
Change-Id: I3ef6323dbdd3da20bad912e1bd7b9000e6832b7d

M lifecycle/lifecycle-runtime-testing/build.gradle
M lifecycle/lifecycle-runtime/build.gradle

https://android-review.googlesource.com/2188586

Message last modified on Nov 8, 2019 10:03PM

kc...@google.com <kc...@google.com> #6Oct 25, 2019 05:54PM

Reassigned to an...@google.com.

Project: platform/frameworks/support
Branch: androidx-main

commit 34098809c70a985495ec836f286a7b8d8245808f
Author: Sanura N'Jaka <sanura@google.com>
Date: Wed Aug 17 22:16:45 2022

Add project dependency constraint between lifecycle-runtime and lifecycle-runtime-ktx

Added bi-directional project version constraint between
lifecycle-runtime and lifecycle-runtime-ktx. If both
artifacts are in the dependency tree, their versions
should match. This will now be enforced by gradle
automatically bumping up either version to meet constraint.

Test: N/A
Bug: 242871265
Change-Id: Id0a3eae91e652a3bdb7a64d1f17dd5c30e7fa03f

M lifecycle/lifecycle-runtime/build.gradle
M lifecycle/lifecycle-runtime-ktx/build.gradle

https://android-review.googlesource.com/2188585

cu...@google.com <cu...@google.com> #7Oct 25, 2019 09:05PM

Reassigned to cu...@google.com.

Project: platform/frameworks/support
Branch: androidx-main

commit e048cb40ff636b9d2abef88f5e67269b77c85b41
Author: Sanura N'Jaka <sanura@google.com>
Date: Thu Aug 18 17:50:35 2022

Add project dependency constraint between lifecycle-viewmodel and lifecycle-viewmodel-ktx

Added bi-directional project version constraint between
lifecycle-viewmodel and lifecycle-viewmodel-ktx. If both
artifacts are in the dependency tree, their versions
should match. This will now be enforced by gradle
automatically bumping up either version to meet constraint.

Test: N/A
Bug: 242871265
Change-Id: Iddf75acaeb3648cbb8b49d1a80fb7dc3258f9af1

M lifecycle/lifecycle-viewmodel/build.gradle
M lifecycle/lifecycle-viewmodel-ktx/build.gradle

https://android-review.googlesource.com/2189945

cu...@google.com <cu...@google.com> Oct 28, 2019 06:21PM

Accepted by cu...@google.com.

ap...@google.com <ap...@google.com> #8Oct 28, 2019 09:27PM

Marked as fixed.

Project: platform/frameworks/support
Branch: androidx-main

commit aad31661faf4f14036a23a5d0b73147dda032094
Author: Sanura N'Jaka <sanura@google.com>
Date: Thu Aug 18 17:45:05 2022

Add project dependency constraint between lifecycle-reactivestreams and lifecycle-reactivestreams-ktx

Added bi-directional project version constraint between
lifecycle-reactivestreams and lifecycle-reactivestreams-ktx.
If both artifacts are in the dependency tree, their versions
should match. This will now be enforced by gradle
automatically bumping up either version to meet constraint.

Test: N/A
Bug: 242871265
Change-Id: I8e39eed1d37def3dcc3aa38ef1f4edd1583f40c1

M lifecycle/lifecycle-reactivestreams/build.gradle
M lifecycle/lifecycle-reactivestreams-ktx/build.gradle

https://android-review.googlesource.com/2189943

an...@google.com <an...@google.com> #9Nov 26, 2019 06:07PM

Project: platform/frameworks/support
Branch: androidx-main

commit f83ce34e8fddb3eb499f98c1262c346d11ee0205
Author: Sanura N'Jaka <sanura@google.com>
Date: Thu Aug 18 17:28:49 2022

Add project dependency constraint between lifecycle-livedata and lifecycle-livedata-core

Added bi-directional project version constraint between
lifecycle-lifedata and lifecycle-livedata-core. If both
artifacts are in the dependency tree, their versions
should match. This will now be enforced by gradle
automatically bumping up either version to meet constraint.

Test: N/A
Bug: 242871265
Change-Id: I3e67cbe8fa8bbc3999f0f463f22b484ea66ba988

M lifecycle/lifecycle-livedata-core/build.gradle
M lifecycle/lifecycle-livedata/build.gradle

https://android-review.googlesource.com/2189937