Commit Graph

  • 6cf8fec057 update: correct error message about Android AppID Hans-Christoph Steiner 2018-09-24 15:48:31 +02:00
  • ecb6987cda jenkins: ensure valid locale is set before running Hans-Christoph Steiner 2018-09-24 12:15:46 +02:00
  • 6d842b8429 Merge branch 'androguard-optimizations' into 'master' Hans-Christoph Steiner 2018-09-21 14:59:23 +00:00
  • 11d46072ab use androguard primitives to speed up finding debuggable flag Hans-Christoph Steiner 2018-09-18 15:59:49 +02:00
  • a3cecc16a3 use partial androguard binary XML parsing to speed up APK ID lookup Hans-Christoph Steiner 2018-09-18 15:29:24 +02:00
  • fa09337b4b APK_ID_TRIPLET_REGEX only matches first line of aapt output Hans-Christoph Steiner 2018-09-18 15:20:37 +02:00
  • f11b2e8d45 point out the easy way to generate the locale files Hans-Christoph Steiner 2018-09-20 11:35:07 +02:00
  • 5c6097f9e0 Merge branch 'gradle-4.10.2' into 'master' Hans-Christoph Steiner 2018-09-21 06:49:01 +00:00
  • bf0501797f makebuildserver: add Gradle 4.10.2 relan 2018-09-21 07:38:27 +03:00
  • 2272bab4f1 Merge branch 'fix-locale-setup' into 'master' Hans-Christoph Steiner 2018-09-20 09:37:09 +00:00
  • d2f850e2df jenkins: switch to box name as generated by basebox project Hans-Christoph Steiner 2018-09-19 23:41:15 +02:00
  • 39c339e5a1 jenkins: force local basebox, do not download from Vagrant Cloud Hans-Christoph Steiner 2018-09-19 09:06:30 +02:00
  • ee509782a2 buildserver: apt-transport-https needs ca-certificates Hans-Christoph Steiner 2018-09-19 08:51:12 +02:00
  • d9e9cc20aa gitlab-ci: install python3-defusedxml in debian_testing and ubuntu_lts Hans-Christoph Steiner 2018-09-18 17:07:30 +02:00
  • ffcd8c3bd4 Merge branch 'gradle-4.10.1' into 'master' Hans-Christoph Steiner 2018-09-19 06:30:11 +00:00
  • 7c9c1d4aaf add gradle 4.10.1 to makebuildserver and gradlew-fdroid Michael Pöhn 2018-09-19 00:03:01 +02:00
  • d3bf347a97 Merge branch 'update-basebox-to-fdroid-basebox-stretch64' into 'master' Hans-Christoph Steiner 2018-09-18 12:59:44 +00:00
  • 4af9199c92 update basebox to fdroid/basebox-stretch64 Michael Pöhn 2018-09-18 12:50:22 +02:00
  • 4a69a37d8e Merge branch 'fix-aapt-28-scraping' into 'master' Michael Pöhn 2018-09-18 09:38:13 +00:00
  • 4c4da3d176 update: remove 'SET' debug antifeature, closes #565 Hans-Christoph Steiner 2018-09-18 09:42:06 +02:00
  • 92c4f048de update: test scan_apk() with both aapt and androguard Hans-Christoph Steiner 2018-09-17 23:25:03 +02:00
  • 3e0d1beb09 update: finish porting permissions regex to remove group names Hans-Christoph Steiner 2018-09-17 23:11:19 +02:00
  • 807bf3d26b build: reuse common methods for getting metadata from APKs Hans-Christoph Steiner 2018-09-17 22:44:53 +02:00
  • 487c4d02f3 handle package: line output from aapt v28 Hans-Christoph Steiner 2018-09-17 23:12:51 +02:00
  • d1acef0405 tests: generate aapt output for every version to make tests easy Hans-Christoph Steiner 2018-09-05 15:08:04 +02:00
  • c95cbfdf9c Merge branch 'use_available_buildserver_box' into 'master' Michael Pöhn 2018-09-18 08:52:51 +00:00
  • 566bf7c776 Merge branch '482-upgrade-buildserver-to-stretch' into 'master' Hans-Christoph Steiner 2018-09-17 18:18:03 +00:00
  • 6f889a08d7 jenkins: switch to locally generated stretch64 basebox Hans-Christoph Steiner 2018-09-11 12:57:31 +02:00
  • fd7cc2c954 document how to avoid downloading from vagrant cloud Hans-Christoph Steiner 2018-07-28 16:48:15 +02:00
  • 6d0797eb5e allow using remote boxes from vagrant cloud Michael Pöhn 2018-09-13 11:08:51 +02:00
  • 98806d7c01 configure headless openjdk to run without gtk accessability dependencies Michael Pöhn 2018-08-21 12:55:31 +02:00
  • 9136080def update default mirror to deb.debian.org Michael Pöhn 2018-07-29 13:43:48 +02:00
  • 5e4eb294c5 switch to fdroid-stretch64 basebox; remove baseboxurl form makebuildserver Michael Pöhn 2018-07-28 16:48:15 +02:00
  • c005d8c5f4 more detailed error message and handling when fetching buildserverid in build.py Michael Pöhn 2018-06-27 01:05:45 +02:00
  • a5ef08f57d more general regex for updating debian repo urls in buildserver provisions Michael Pöhn 2018-06-26 11:25:07 +02:00
  • aa86e56338 updated buildserver provisions to stretch Michael Pöhn 2018-06-26 10:53:42 +02:00
  • ba92623c1e Merge branch 'vmtools_561' into 'master' Michael Pöhn 2018-09-13 08:50:21 +00:00
  • 1b95452c14 vmtools: use whatever buildserver box is available Marcus Hoffmann 2018-09-12 14:04:09 +02:00
  • 1e90b6118e vmtools: fix comment typos Marcus Hoffmann 2018-09-12 12:56:25 +02:00
  • b0cce0b8c4 vmtools: actually use the chosen provider Marcus Hoffmann 2018-09-12 12:51:08 +02:00
  • ad9a07b47e Merge branch 'little-security-fixes' into 'master' Hans-Christoph Steiner 2018-09-07 13:32:32 +00:00
  • 9d12b1dc61 add strict, tested validation of Android/F-Droid package names Hans-Christoph Steiner 2018-09-07 14:17:39 +02:00
  • 3ab66efcfe update: max image size of 16 mil pixels to stop image bomb attacks Hans-Christoph Steiner 2018-09-05 20:36:37 +02:00
  • 0cd1e0b172 gitlab-ci: include fdroid in bandit scans Hans-Christoph Steiner 2018-09-04 18:47:29 +02:00
  • 8b17076525 jenkins-build-all: error msg when buildserver VM not found Hans-Christoph Steiner 2018-09-05 14:37:06 +02:00
  • b254472a99 Merge branch 'exclude-filter' into 'master' Hans-Christoph Steiner 2018-09-05 12:39:23 +00:00
  • de5455e273 Merge branch 'minor-security-fixups' into 'master' Marcus 2018-09-04 11:05:25 +00:00
  • 8f48976cb9 Merge branch 'drop-pickle-for-json' into 'master' Hans-Christoph Steiner 2018-09-03 21:10:26 +00:00
  • 9bccb2c73e temp fallback to built-in ElementTree if defusedxml is not there Hans-Christoph Steiner 2018-09-03 23:02:31 +02:00
  • cf4c9cb4ee buildserver now needs python3-defusedxml Hans-Christoph Steiner 2018-09-03 22:42:31 +02:00
  • 11b3e5be3a update: throw exception for APKs with invalid Application ID Hans-Christoph Steiner 2018-09-01 12:19:45 +02:00
  • 5d161cc9fd validate appid when reading metadata files Hans-Christoph Steiner 2018-09-01 12:08:37 +02:00
  • 3011953d0e convert apkcache from pickle to JSON Hans-Christoph Steiner 2018-09-03 18:07:40 +02:00
  • 74776e026f gradlew-fdroid: add gradle 4.10 Marcus Hoffmann 2018-09-03 14:47:36 +02:00
  • d7b249272a makebuildserver: add gradle 4.10 Marcus Hoffmann 2018-09-03 14:44:33 +02:00
  • c7d5050091 Merge branch 'bandit-scanner-and-fixes' into 'master' Hans-Christoph Steiner 2018-08-30 13:06:07 +00:00
  • cd22eceb68 replace unneeded eval() call and support negative versionCodes Hans-Christoph Steiner 2018-08-29 16:07:02 +02:00
  • 2f78e162e0 remove unused YamlLoader optimization Michael Pöhn 2018-08-29 11:25:01 +02:00
  • aee84fdc73 use yaml.safe_load for parsing metadata Michael Pöhn 2018-08-29 00:33:58 +02:00
  • 3ffe2860f3 gitlab-ci: add 'bandit' security scanner to all runs Hans-Christoph Steiner 2018-08-29 17:48:06 +02:00
  • 4d13a904f3 use defusedxml to avoid DoS attacks while loading XML Hans-Christoph Steiner 2018-08-29 17:27:04 +02:00
  • cc94ebca30 use global constant for the 'xmlns:android' XML namespace Hans-Christoph Steiner 2018-08-29 17:11:41 +02:00
  • 3e1d313b7c mark manually sanitized input so bandit doesn't complain Hans-Christoph Steiner 2018-08-29 17:20:01 +02:00
  • 2edc68d6cd mark all required permissions so bandit doesn't complain Hans-Christoph Steiner 2018-08-29 14:54:37 +02:00
  • 8d3e82913e mark all required usages of MD5 so bandit doesn't complain Hans-Christoph Steiner 2018-08-29 14:53:58 +02:00
  • a089614225 checkupdates: remove magic number 99999999 from HTTP checks Hans-Christoph Steiner 2018-08-29 13:00:53 +02:00
  • 5d77fd97ee use posixpath.join() for paths on the buildserver Hans-Christoph Steiner 2018-08-29 15:43:16 +02:00
  • 4503e7a92a replace unneeded eval() call and support negative versionCodes Hans-Christoph Steiner 2018-08-29 16:07:02 +02:00
  • f0d27e1fa5 Merge branch 'remove-unused-YamlLoader-optimisation' into 'master' Hans-Christoph Steiner 2018-08-29 11:12:02 +00:00
  • ee4945cb84 remove unused YamlLoader optimization Michael Pöhn 2018-08-29 11:25:01 +02:00
  • 6b3cf72b68 Merge branch 'safe_yaml_parsing' into 'master' Hans-Christoph Steiner 2018-08-29 07:37:43 +00:00
  • e7a34807f7 use yaml.safe_load for parsing metadata Michael Pöhn 2018-08-29 00:33:58 +02:00
  • 1a8c77e815 Merge branch 'jarsigner-and-keytool-lookup-regression' into 'master' Michael Pöhn 2018-08-21 01:28:22 +00:00
  • 4dcfa95d6e fix: jarsigner and keytool lookup regression Michael Pöhn 2018-08-21 03:05:43 +02:00
  • 3546e8d38d generate all po files Nicco Kunzmann 2018-08-20 23:05:55 +02:00
  • c766129f8b Merge branch 'master' into 'master' Michael Pöhn 2018-08-20 10:57:45 +00:00
  • 81641b4628 Fixed precommit checks Cyril Russo 2018-08-20 11:17:36 +02:00
  • 4303b0fac1 Apply suggestion from @uniqx to using shutil.which instead of iterating path by hand Cyril Russo 2018-08-17 20:14:54 +02:00
  • ace33bcfc0 Reverted the change in the default config.py Improved the detection of keytool and jarsigner by also searching the PATH environment variable Cyril Russo 2018-08-17 16:46:46 +02:00
  • 4f21045cad Fix keytool not found on MacOSX (when using Java from Apple) Fix keytool parsing error due to localisation keytool -list command. Always fallback to english so the parsing makes sense. Cyril Russo 2018-08-17 15:32:29 +02:00
  • 05be4bc814 Merge branch '471-lint-check-unknown-keys' into 'master' Hans-Christoph Steiner 2018-08-14 10:50:59 +00:00
  • 53bd5acb09 Merge branch 'make-python-tests-run-independent-of-cwd' into 'master' Hans-Christoph Steiner 2018-08-14 10:34:47 +00:00
  • fb16823a4a Merge branch 'master' into 'master' Hans-Christoph Steiner 2018-08-14 10:32:10 +00:00
  • 82563850b7 fix test metadata case for Builds app field Michael Pöhn 2018-08-08 15:03:58 +02:00
  • 6a06944945 better exception and waring message when yaml metadata checks fail; build flags check optional Michael Pöhn 2018-08-08 02:18:19 +02:00
  • 0d005ab83a make parse_yaml_metadata ignore empty input Michael Pöhn 2018-08-08 01:26:46 +02:00
  • e83221eb03 improve yaml build flag check cost; added unit test for unknown app fields, builds flags checks when parsing yaml Michael Pöhn 2018-08-08 00:59:25 +02:00
  • 25b4a47951 check for unknown app fields and build flags when parsing yml Michael Pöhn 2018-08-05 23:41:12 +02:00
  • f53d1abcce fix: make sure ensure_final_value always has a clearly defined return value Michael Pöhn 2018-08-14 11:07:44 +02:00
  • 7d5f4d3ab9 added cwd setup boiler-plate to *.TestCase where missing Michael Pöhn 2018-08-14 10:34:13 +02:00
  • f153a61277 made build.TestCase run independant of cwd Michael Pöhn 2018-08-14 10:10:19 +02:00
  • 37e0dce73b made index.TestCase run independant of cwd Michael Pöhn 2018-08-14 10:08:03 +02:00
  • edb8d105b0 made update.TestCase run independent of cwd Michael Pöhn 2018-08-08 02:36:38 +02:00
  • 64c5d176da Merge branch 'examples_char_limits' into 'master' Michael Pöhn 2018-08-12 20:31:55 +00:00
  • bc1766c7ce examples/config.py: update char_limit defaults Marcus Hoffmann 2018-08-12 18:09:46 +02:00
  • 9b0f7f9d04 makebuildserver: add build-tools 28.0.2 Marcus Hoffmann 2018-08-10 20:54:02 +02:00
  • cf3665b328 Merge branch 'facebook_sdk' into 'master' Marcus 2018-08-10 13:36:44 +00:00
  • a6dfbc6e2e scanner: add facebook sdk to forbidden libraries Marcus Hoffmann 2018-07-27 18:01:01 +02:00
  • 1b37b521c8 common: fix tests when running without any Android SDK installed Hans-Christoph Steiner 2018-08-07 14:51:42 +02:00
  • f1814b7c73 Merge branch '541-ci-tests-dont-execute-majority-of-python-test-cases' into 'master' Hans-Christoph Steiner 2018-08-07 08:42:42 +00:00