Skip to content

rhurta/MasterKeyDualFix

 
 

Repository files navigation

Master Key dual fix
by Tungstwenty


Fixes 2 separate vulnerabilities that exist on the APK parsing code
that allow signed files to be tampered with.
One of these (bug 8219321)is known as the "Master Key" vulnerability, and can be found
in several places including this one: http://forum.xda-developers.com/showthread.php?t=2359943
The other (bug 9695860) is also related with Zip (or APK) files parsing and although it's been
fixed by Google on the codebase (https://android.googlesource.com/platform/libcore/+/9edf43dfcc35c761d97eb9156ac4254152ddbc55),
it's likely to take even longer to reach the stock roms (if ever).

Follow this thread for additional info: http://forum.xda-developers.com/showthread.php?t=2365294

This project uses:
- Xposed framework, by rovo89
- Original code snippets from AOSP
- Icons generated with Android Asset Studio: http://android-ui-utils.googlecode.com/hg/asset-studio/dist/index.html

About

Xposed patch for android bugs 8219321 and 9695860

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published