GrapheneOS / os-issue-tracker

Issue tracker for GrapheneOS Android Open Source Project hardening work. Standalone projects like Auditor, AttestationServer and hardened_malloc have their own dedicated trackers.
https://grapheneos.org/
352 stars 19 forks source link

Pixel Camera app crashes the system (Pixel 9 Pro Fold) #4010

Open username55321 opened 6 days ago

username55321 commented 6 days ago

Pixel Camera crashes the system when trying to switch to dual screen mode on the Pixel 9 Pro Fold. Exploit compability is enabled for the app. Network is blocked.

type: crash
SystemUptimeMs: 155030
Process: system_server
Build: google/comet/comet:14/AD1A.240905.004/2024091700:user/release-keys
Crash-Handler: com.android.internal.os.RuntimeInit$KillApplicationHandler
Loading-Progress: 1.0
Dropped-Count: 0

java.lang.SecurityException: Permission Denial: starting Intent { act=android.intent.action.MAIN cat=[android.intent.category.SECONDARY_HOME] flg=0x10000100 pkg=com.android.launcher3 cmp=com.android.launcher3/.secondarydisplay.SecondaryDisplayLauncher (has extras) } from null (pid=1377, uid=1000) with launchTaskDisplayArea=DefaultTaskDisplayArea@211102615
    at com.android.server.wm.SafeActivityOptions.checkPermissions(SafeActivityOptions.java:305)
    at com.android.server.wm.SafeActivityOptions.getOptions(SafeActivityOptions.java:194)
    at com.android.server.wm.ActivityStarter.executeRequest(ActivityStarter.java:1161)
    at com.android.server.wm.ActivityStarter.execute(ActivityStarter.java:780)
    at com.android.server.wm.ActivityStartController.startHomeActivity(ActivityStartController.java:195)
    at com.android.server.wm.RootWindowContainer.startHomeOnTaskDisplayArea(RootWindowContainer.java:1476)
    at com.android.server.wm.RootWindowContainer.lambda$startHomeOnDisplay$11(RootWindowContainer.java:1409)
    at com.android.server.wm.RootWindowContainer.$r8$lambda$DFaa7QLApF8rlf4uiy_4K0Hxf2Y(RootWindowContainer.java:0)
    at com.android.server.wm.RootWindowContainer$$ExternalSyntheticLambda38.apply(R8$$SyntheticClass:0)
    at com.android.server.wm.TaskDisplayArea.reduceOnAllTaskDisplayAreas(TaskDisplayArea.java:506)
    at com.android.server.wm.DisplayArea.reduceOnAllTaskDisplayAreas(DisplayArea.java:565)
    at com.android.server.wm.DisplayArea.reduceOnAllTaskDisplayAreas(DisplayArea.java:565)
    at com.android.server.wm.DisplayArea.reduceOnAllTaskDisplayAreas(DisplayArea.java:565)
    at com.android.server.wm.WindowContainer.reduceOnAllTaskDisplayAreas(WindowContainer.java:2487)
    at com.android.server.wm.RootWindowContainer.startHomeOnDisplay(RootWindowContainer.java:1408)
    at com.android.server.wm.RootWindowContainer.startHomeOnDisplay(RootWindowContainer.java:1395)
    at com.android.server.wm.RootWindowContainer.startSystemDecorations(RootWindowContainer.java:2694)
    at com.android.server.wm.RootWindowContainer.onDisplayAdded(RootWindowContainer.java:2685)
    at android.hardware.display.DisplayManagerGlobal$DisplayListenerDelegate.handleDisplayEventInner(DisplayManagerGlobal.java:1255)
    at android.hardware.display.DisplayManagerGlobal$DisplayListenerDelegate.lambda$sendDisplayEvent$0(DisplayManagerGlobal.java:1222)
    at android.hardware.display.DisplayManagerGlobal$DisplayListenerDelegate.$r8$lambda$U7s70EKugVQNzFVIVvJsNmT_WdQ(Unknown Source:0)
    at android.hardware.display.DisplayManagerGlobal$DisplayListenerDelegate$$ExternalSyntheticLambda0.run(D8$$SyntheticClass:0)
    at android.os.Handler.handleCallback(Handler.java:959)
    at android.os.Handler.dispatchMessage(Handler.java:100)
    at android.os.Looper.loopOnce(Looper.java:232)
    at android.os.Looper.loop(Looper.java:317)
    at android.os.HandlerThread.run(HandlerThread.java:85)
    at com.android.server.ServiceThread.run(ServiceThread.java:46)
    at com.android.server.UiThread.run(UiThread.java:45)
matchboxbananasynergy commented 6 days ago

Is this consistently reproducible?

username55321 commented 6 days ago

Is this consistently reproducible?

Yes it is for me, its been happening for a while now.