| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
调整获取库时的异常恢复场景 Signed-off-by: zhu-feimo <zhufeimo1@huawei.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: claude (glm-4.7) <ai@local> Co-authored-by: opencode (glm-5.3-flash) <ai@local> | 26 天前 | |
扫描问题修改 Signed-off-by: zhu-feimo <zhufeimo1@huawei.com> AI[53%] Human Fixed[0%] Human[47%] AI Adopted[100%] | 2 个月前 | |
update: 更新文件 ability_auto_startup_service_test.cpp Signed-off-by: yijobs <yisilong@h-partners.com> | 26 天前 | |
aa命令新增权限 Signed-off-by: hanchen45 <wanghanchen1@huawei.com> | 1 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Introduce json_safe_util for safe JSON parse/dump Add a shared json_safe_util helper with SafeParse (size + depth limit) and SafeDump overloads (bool + string), sink the implementation into the runtime_utils library, and replace the unsafe json parse/dump calls across insight_intent with SafeParse/SafeDump. Remove the now-unused intent_json_safe_get helper and its unit test. Signed-off-by: RuiChen_01 <chenrui193@huawei.com> Co-Authored-By: Agent Change-Id: I8d3fe8a098f81c24cbe0506da12c8a05467f212a | 30 天前 | |
Modify startSelf not-native-error Signed-off-by: wangzhen <wangzhen416@huawei.com> AI[0%] Human Fixed[0%] Human[100%] AI Adopted[0%] Change-Id: I4924fa1151febae1c037e25b4000b1aa92b6a3ad | 27 天前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
fix: add version script for cj moddule Signed-off-by: xiatian <xiatian44@huawei.com> Change-Id: Ic5f92fdc5068a5e9510fa3c41ea69f2d842229ac | 1 个月前 | |
ams接入云推 Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> AI[3%] Human Fixed[0%] Human[97%] AI Adopted[100%] Change-Id: Ib7006f54b9d348ba36426c1f7c68c48be549d826 | 1 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
bugfix: low-code issues 1. no callback.onDisconnect when the agent process is killed; 2. concurrently connecting low-code agents of the same AgentExt 3. low-code AgentExt.onDestroy not called 4. connect-notify-connect low-code unexpected behaviour Signed-off-by: yangxuguang-huawei <yangxuguang3@h-partners.com> 🤖 AI[100%] 🔧 Human Fixed[0%] 🧑 Human[0%] 👌 AI Adopted[100%] Co-authored-by: pi (glm-5.2) <ai@local> | 2 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
!19815 merge cfipac into master Add cfi/pac config Created-by: zivzhen Commit-by: wangzhen Merged-by: openharmony_ci Description: **IssueNo**: **Description**: **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | ok | | 成员变量进行赋值或创建需要排查并发 | ok | | 谨慎在lambda表达式中使用引用捕获 | ok | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | ok | | map\vector\list\set等stl模板类使用时需要排查并发 | ok | | 谨慎考虑加锁范围 | ok | | 在IPC通信中谨慎使用同步通信方式 | ok | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | ok | | 禁止将外部传入的裸指针在内部直接构造智能指针 | ok | | 禁止多个独立创建的智能指针管理同一地址 | ok | | 禁止在析构函数中抛异步任务 | ok | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | ok | | 禁止在对外接口中未经判空直接使用外部传入的指针 | ok | | 禁止接口返回局部变量引用 | ok | | 禁止在信号函数中加锁 | ok | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | ok | | 禁止将同一个cpp编译在不同的so中 | ok | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | ok | | json对象在取值之前必须先判断类型，避免类型不匹配 | ok | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | ok | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | ok | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | ok | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | ok | | readParcelable获取的对象使用前需要判空 | ok | | 分配和释放内存的函数需要成对出现 | ok | | 申请内存后异常退出前需要及时进行内存释放 | ok | | 内存申请前必须对内存大小进行合法性校验 | ok | | 内存分配后必须判断是否成功 | ok | | 禁止使用realloc、alloca函数 | ok | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | ok | | 禁止打印内存地址 | ok | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | ok | | 禁止对有符号整数进行位操作符运算 | ok | | 禁止对指针进行逻辑或位运算 | ok | | 循环次数如果收外部数据控制，需要检验其合法性 | ok | | 禁止使用内存操作类危险函数，需要使用安全函数 | ok | | 谨慎使用不可重入函数 | ok | | 必须检查安全函数的返回值，并进行正确处理 | ok | | 禁止仅通过TokenType类型判断绕过权限校验 | ok | **TDD Result**: pass **XTS Result**: pass ### 是否已执行L0用例 - [ ] 已验证 - [ ] 不涉及。如不涉及，请写明理由 See merge request: openharmony/ability_ability_runtime!19815 | 3 个月前 | |
bugfix: agent safety coding Signed-off-by: yangxuguang-huawei <yangxuguang3@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: pi (glm-5.2) <ai@local> | 2 个月前 | |
fix tdd Co-Authored-By: rjh Signed-off-by: renjh5496 <renjianhao@h-partners.com> | 2 个月前 | |
去除无效冗余代码 Signed-off-by: 任国军 <renguojun1@h-partners.com> | 1 年前 | |
Revert "JSON统一为cJSON" Signed-off-by: 13776621730 <zhawei12@huawei-partners.com> Change-Id: I69dc57782680ece5c5d2d1416464516405d070ad | 1 年前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
publish_startuiability_0331 Signed-off-by: Luobniz21 <luoyicong@h-partners.com> # Please enter the commit message for your changes. Lines starting # with '#' will be kept; you may remove them yourself if you want to. # An empty message aborts the commit. # # Date: Tue Mar 31 22:24:58 2026 +0800 # # On branch publish_startuiability_0331 # Your branch is up to date with 'origin/publish_startuiability_0331'. # # Changes to be committed: # modified: frameworks/native/appkit/ability_bundle_manager_helper/bundle_mgr_helper.cpp # modified: interfaces/kits/native/appkit/ability_bundle_manager_helper/bundle_mgr_helper.h # modified: services/abilitymgr/include/utils/ability_event_util.h # modified: services/abilitymgr/src/ability_record.cpp # modified: services/abilitymgr/src/utils/ability_event_util.cpp # modified: test/fuzztest/abilityeventutil_fuzzer/BUILD.gn # modified: test/mock/services_abilitymgr_test/libs/appexecfwk_core/include/bundlemgr/mock_bundle_manager.h # modified: test/unittest/ability_event_util_test/BUILD.gn # modified: test/unittest/ability_event_util_test/ability_event_util_test.cpp # modified: test/unittest/ability_manager_service_first_test/ability_manager_service_first_test.cpp # modified: test/unittest/ability_manager_service_mock_test/BUILD.gn # modified: test/unittest/insight_intent/insight_intent_utils_test/BUILD.gn # # Please enter the commit message for your changes. Lines starting # with '#' will be kept; you may remove them yourself if you want to. # An empty message aborts the commit. # # Date: Tue Mar 31 22:24:58 2026 +0800 # # On branch publish_startuiability_0331 # Your branch is up to date with 'origin/publish_startuiability_0331'. # # Changes to be committed: # modified: frameworks/native/appkit/ability_bundle_manager_helper/bundle_mgr_helper.cpp # modified: interfaces/kits/native/appkit/ability_bundle_manager_helper/bundle_mgr_helper.h # modified: services/abilitymgr/include/utils/ability_event_util.h # modified: services/abilitymgr/src/ability_record.cpp # modified: services/abilitymgr/src/utils/ability_event_util.cpp # modified: test/fuzztest/abilityeventutil_fuzzer/BUILD.gn # modified: test/mock/services_abilitymgr_test/libs/appexecfwk_core/include/bundlemgr/mock_bundle_manager.h # modified: test/unittest/ability_event_util_test/BUILD.gn # modified: test/unittest/ability_event_util_test/ability_event_util_test.cpp # modified: test/unittest/ability_manager_service_first_test/ability_manager_service_first_test.cpp # modified: test/unittest/ability_manager_service_mock_test/BUILD.gn # modified: test/unittest/insight_intent/insight_intent_utils_test/BUILD.gn # # Please enter the commit message for your changes. Lines starting # with '#' will be kept; you may remove them yourself if you want to. # An empty message aborts the commit. # # Date: Tue Mar 31 22:24:58 2026 +0800 # # On branch publish_startuiability_0331 # Your branch is up to date with 'origin/publish_startuiability_0331'. # # Changes to be committed: # modified: frameworks/native/appkit/ability_bundle_manager_helper/bundle_mgr_helper.cpp # modified: interfaces/kits/native/appkit/ability_bundle_manager_helper/bundle_mgr_helper.h # modified: services/abilitymgr/include/utils/ability_event_util.h # modified: services/abilitymgr/src/ability_record.cpp # modified: services/abilitymgr/src/utils/ability_event_util.cpp # modified: test/fuzztest/abilityeventutil_fuzzer/BUILD.gn # modified: test/mock/services_abilitymgr_test/libs/appexecfwk_core/include/bundlemgr/mock_bundle_manager.h # modified: test/unittest/ability_event_util_test/BUILD.gn # modified: test/unittest/ability_event_util_test/ability_event_util_test.cpp # modified: test/unittest/ability_manager_service_first_test/ability_manager_service_first_test.cpp # modified: test/unittest/ability_manager_service_mock_test/BUILD.gn # modified: test/unittest/insight_intent/insight_intent_utils_test/BUILD.gn # # Please enter the commit message for your changes. Lines starting # with '#' will be kept; you may remove them yourself if you want to. # An empty message aborts the commit. # # Date: Tue Mar 31 22:24:58 2026 +0800 # # On branch publish_startuiability_0331 # Your branch is up to date with 'origin/publish_startuiability_0331'. # # Changes to be committed: # modified: frameworks/native/appkit/ability_bundle_manager_helper/bundle_mgr_helper.cpp # modified: interfaces/kits/native/appkit/ability_bundle_manager_helper/bundle_mgr_helper.h # modified: services/abilitymgr/include/utils/ability_event_util.h # modified: services/abilitymgr/src/ability_record.cpp # modified: services/abilitymgr/src/utils/ability_event_util.cpp # modified: test/fuzztest/abilityeventutil_fuzzer/BUILD.gn # modified: test/mock/services_abilitymgr_test/libs/appexecfwk_core/include/bundlemgr/mock_bundle_manager.h # modified: test/unittest/ability_event_util_test/BUILD.gn # modified: test/unittest/ability_event_util_test/ability_event_util_test.cpp # modified: test/unittest/ability_manager_service_first_test/ability_manager_service_first_test.cpp # modified: test/unittest/ability_manager_service_mock_test/BUILD.gn # modified: test/unittest/insight_intent/insight_intent_utils_test/BUILD.gn # # Please enter the commit message for your changes. Lines starting # with '#' will be kept; you may remove them yourself if you want to. # An empty message aborts the commit. # # Date: Tue Mar 31 22:24:58 2026 +0800 # # On branch publish_startuiability_0331 # Your branch is up to date with 'origin/publish_startuiability_0331'. # # Changes to be committed: # modified: frameworks/native/appkit/ability_bundle_manager_helper/bundle_mgr_helper.cpp # modified: interfaces/kits/native/appkit/ability_bundle_manager_helper/bundle_mgr_helper.h # modified: services/abilitymgr/include/utils/ability_event_util.h # modified: services/abilitymgr/src/ability_record.cpp # modified: services/abilitymgr/src/utils/ability_event_util.cpp # modified: test/fuzztest/abilityeventutil_fuzzer/BUILD.gn # modified: test/mock/services_abilitymgr_test/libs/appexecfwk_core/include/bundlemgr/mock_bundle_manager.h # modified: test/unittest/ability_event_util_test/BUILD.gn # modified: test/unittest/ability_event_util_test/ability_event_util_test.cpp # modified: test/unittest/ability_manager_service_first_test/ability_manager_service_first_test.cpp # modified: test/unittest/ability_manager_service_mock_test/BUILD.gn # modified: test/unittest/insight_intent/insight_intent_utils_test/BUILD.gn # | 6 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
优化IsExtensionStartServiceEnable Signed-off-by: SKY2001 <songtianyu10@huawei.com> AI[0%] Human Fixed[0%] Human[100%] AI Adopted[0%] | 1 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
独立编译-配合ability_runtime删除public_deps Signed-off-by: zhangzezhong <zhangzezhong8@huawei-partners.com> | 1 年前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
拦截器修改适配东湖场景 Signed-off-by: lidongrui <lidongrui3@huawei.com> Co-Authored-By: Agent 🤖 AI[33%] 🔧 Human Fixed[0%] 🧑 Human[67%] 👌 AI Adopted[100%] | 1 个月前 | |
refactor: merge ability interceptors Signed-off-by: yangxuguang-huawei <yangxuguang3@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: pi (glm-5.3) <ai@local> Change-Id: I943ac876f599828e7275e7493052a1a2aff8a5a2 | 1 个月前 | |
refactor: merge ability interceptors Signed-off-by: yangxuguang-huawei <yangxuguang3@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: pi (glm-5.3) <ai@local> Change-Id: I943ac876f599828e7275e7493052a1a2aff8a5a2 | 1 个月前 | |
数据库备份 Signed-off-by: zhu-feimo <zhufeimo1@huawei.com> AI[86%] Human Fixed[0%] Human[14%] AI Adopted[100%] Co-authored-by: opencode (glm-5.3-flash) <ai@local> Co-authored-by: claude (glm-4.7) <ai@local> Co-authored-by: opencode (glm-5.3-flash) <ai@local> | 28 天前 | |
调整获取库时的异常恢复场景 Signed-off-by: zhu-feimo <zhufeimo1@huawei.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: claude (glm-4.7) <ai@local> Co-authored-by: opencode (glm-5.3-flash) <ai@local> | 26 天前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
补充tdd Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: I223c83edaa3203529a00221c5fcde80619802c33 | 2 个月前 | |
getTopAbility修改 Signed-off-by: zhu-feimo <zhufeimo1@huawei.com> AI[45%] Human Fixed[0%] Human[55%] AI Adopted[100%] | 1 个月前 | |
getTopAbility修改 Signed-off-by: zhu-feimo <zhufeimo1@huawei.com> AI[45%] Human Fixed[0%] Human[55%] AI Adopted[100%] | 1 个月前 | |
!20590 merge usr into master 桥接窗口userId Created-by: xuzheheng Commit-by: x30044351 Merged-by: openharmony_ci Description: https://gitcode.com/openharmony/ability_ability_runtime/issues/16358 See merge request: openharmony/ability_ability_runtime!20590 | 21 天前 | |
东湖_退后台传入isFromScreenOffBackground_ Signed-off-by: lidongrui <lidongrui3@huawei.com> Co-Authored-By: Agent | 3 个月前 | |
多用户OTA场景应用自启动优化 Signed-off-by: zhu-feimo <zhufeimo1@huawei.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: claude (glm-4.7) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> | 1 个月前 | |
getTopAbility修改 Signed-off-by: zhu-feimo <zhufeimo1@huawei.com> AI[45%] Human Fixed[0%] Human[55%] AI Adopted[100%] | 1 个月前 | |
getTopAbility修改 Signed-off-by: zhu-feimo <zhufeimo1@huawei.com> AI[45%] Human Fixed[0%] Human[55%] AI Adopted[100%] | 1 个月前 | |
getTopAbility修改 Signed-off-by: zhu-feimo <zhufeimo1@huawei.com> AI[45%] Human Fixed[0%] Human[55%] AI Adopted[100%] | 1 个月前 | |
refactor: remove redundant ExecuteInAppSkill interface Remove the ExecuteInAppSkill interface (IPC code EXECUTE_IN_APP_SKILL) while keeping ExecuteInAppSkillWithTokenId. Signed-off-by: RuiChen_01 <chenrui193@huawei.com> Co-Authored-By: Agent Change-Id: I9afac920cf07110239bfab3b0a288a453b61f3a9 | 28 天前 | |
Code fix Signed-off-by: wangzhen <wangzhen416@huawei.com> AI[33%] Human Fixed[0%] Human[67%] AI Adopted[10%] Change-Id: I9ab8a177bb47a5fb43a160dcb0ffa6f31e6a7ba5 | 18 天前 | |
getTopAbility修改 Signed-off-by: zhu-feimo <zhufeimo1@huawei.com> AI[45%] Human Fixed[0%] Human[55%] AI Adopted[100%] | 1 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
aa Force-Stop补充-u参数 Signed-off-by: SKY2001 <songtianyu10@huawei.com> AI[86%] Human Fixed[0%] Human[14%] AI Adopted[74%] Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> | 5 天前 | |
修复tdd Signed-off-by: zhangatao <zhangtao662@huawei.com> AI[0%] Human Fixed[0%] Human[100%] AI Adopted[0%] | 5 天前 | |
feat: toolCallId for ohos-aa clone sandbox Signed-off-by: yangxuguang-huawei <yangxuguang3@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[24%] Co-authored-by: pi (glm-5.3) <ai@local> Change-Id: Ib82b0c0a653dff70833955d53e69c243792e7350 | 24 天前 | |
!20647 merge caller into master abilitySessionInfo中缓存caller信息 Created-by: lidongrui Commit-by: DESKTOP-UGVMD4B\DawnComing Merged-by: openharmony_ci Description: For the operator of '=' in expression 'info.callerToken = abilityRequest.want.GetIntParam(Want::PARAM_RESV_CALLER_TOKEN, 0)', the type of left operand is unsigned, while the type of right operand is signed. Please do not mix signed and unsigned numbers 未缓存（不在 UIAbility SCB 回调路径中使用）：callerAbilityName（仅 dialog 路径）、callerAppId（无 Get 读取）、callerAppIdentifier（仅 extension 路径）、callerAppCloneIndex（仅 dialog 路径）  **IssueNo**: **Description**: **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | | | 成员变量进行赋值或创建需要排查并发 | | | 谨慎在lambda表达式中使用引用捕获 | | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | | | map\vector\list\set等stl模板类使用时需要排查并发 | | | 谨慎考虑加锁范围 | | | 在IPC通信中谨慎使用同步通信方式 | | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | | | 禁止将外部传入的裸指针在内部直接构造智能指针 | | | 禁止多个独立创建的智能指针管理同一地址 | | | 禁止在析构函数中抛异步任务 | | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | | | 禁止在对外接口中未经判空直接使用外部传入的指针 | | | 禁止接口返回局部变量引用 | | | 禁止在信号函数中加锁 | | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | | | 禁止将同一个cpp编译在不同的so中 | | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | | | json对象在取值之前必须先判断类型，避免类型不匹配 | | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | | | readParcelable获取的对象使用前需要判空 | | | 分配和释放内存的函数需要成对出现 | | | 申请内存后异常退出前需要及时进行内存释放 | | | 内存申请前必须对内存大小进行合法性校验 | | | 内存分配后必须判断是否成功 | | | 禁止使用realloc、alloca函数 | | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | | | 禁止打印内存地址 | | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | | | 禁止对有符号整数进行位操作符运算 | | | 禁止对指针进行逻辑或位运算 | | | 循环次数如果收外部数据控制，需要检验其合法性 | | | 禁止使用内存操作类危险函数，需要使用安全函数 | | | 谨慎使用不可重入函数 | | | 必须检查安全函数的返回值，并进行正确处理 | | | 禁止仅通过TokenType类型判断绕过权限校验 | | **TDD Result**: **XTS Result**: ### 是否已执行L0用例 - [ ] 已验证 - [ ] 不涉及。如不涉及，请写明理由 ### AI检视评分（使用本地代码检视skills扫描）: See merge request: openharmony/ability_ability_runtime!20647 | 9 天前 | |
0923_tdd_fix Signed-off-by: Luobniz21 <luoyicong@h-partners.com> AI[0%] Human Fixed[0%] Human[100%] AI Adopted[0%] # Please enter the commit message for your changes. Lines starting # with '#' will be kept; you may remove them yourself if you want to. # An empty message aborts the commit. # # Date: Wed Sep 23 18:29:01 2026 +0800 # # On branch 0923_tdd_fix # Your branch is up to date with 'origin/0923_tdd_fix'. # # Changes to be committed: # modified: test/unittest/ability_manager_client_branch_third_test/ability_manager_client_branch_third_test.cpp # modified: test/unittest/ability_manager_service_fourth_test/ability_manager_service_fourth_test.cpp # modified: test/unittest/ability_manager_service_fourth_test/mock/include/mock_my_flag.h # modified: test/unittest/ability_manager_service_fourth_test/mock/include/mock_permission_verification.h # modified: test/unittest/ability_manager_service_fourth_test/mock/src/mock_permission_verification.cpp # modified: tools/test/unittest/aa/aa_command_send_memory_level_test.cpp # # Please enter the commit message for your changes. Lines starting # with '#' will be kept; you may remove them yourself if you want to. # An empty message aborts the commit. # # Date: Wed Sep 23 18:34:28 2026 +0800 # # On branch 0923_tdd_fix # Your branch is up to date with 'origin/0923_tdd_fix'. # # Changes to be committed: # modified: test/unittest/ability_manager_client_branch_third_test/ability_manager_client_branch_third_test.cpp # modified: test/unittest/ability_manager_service_fourth_test/ability_manager_service_fourth_test.cpp # modified: test/unittest/ability_manager_service_fourth_test/mock/include/mock_my_flag.h # modified: test/unittest/ability_manager_service_fourth_test/mock/include/mock_permission_verification.h # modified: test/unittest/ability_manager_service_fourth_test/mock/src/mock_permission_verification.cpp # | 22 天前 | |
!20530 merge insight_intent_json_safe into master Introduce json_safe_util for safe JSON parse/dump Created-by: RuiChen_01 Commit-by: openharmony_ci Merged-by: openharmony_ci Description: Close #16295 ## Summary Add a shared json_safe_util helper with SafeParse (size + depth limit) and SafeDump overloads (bool + string), sink the implementation into the runtime_utils library, and replace unsafe json parse/dump across insight_intent with SafeParse/SafeDump. ## Detail - Add utils/global/common json_safe_util.h/.cpp (SafeParse + SafeDump overloads), compiled into runtime_utils - Replace nlohmann json::parse/dump and intent_json_safe_get usage across insight_intent with SafeParse/SafeDump - Remove intent_json_safe_get.h/.cpp and insight_intent_safe_get_test - runtime_utils now built with use_exceptions; add runtime_utils deps to abilityms (public_deps), innerkits and affected test/fuzztest targets - Add json_safe_util_test Signed-off-by: RuiChen_01 <chenrui193@huawei.com> Co-Authored-By: Agent See merge request: openharmony/ability_ability_runtime!20530 | 29 天前 | |
Revert "add tdd" This reverts commit b3d4ab19b19f13935f3d99b35f45136febb1081e. This reverts commit 7b2aea943f9e48d3c441029e75886bb58a86fa97. This reverts commit b9b3312538896f20e198768fcd06cf893f24cea0. This reverts commit 960acd67fb61cd37491ae079c2522582c8dbfcee. This reverts commit 12eab1efeb50d29cbb7030e9bc69b669bf7ec2db. Co-Authored-By: RenGuojun Signed-off-by: 任国军 <renguojun1@h-partners.com> AI[0%] Human Fixed[0%] Human[0%] AI Adopted[0%] | 2 个月前 | |
!20581 merge params into master param filter Created-by: SkyQAQ Commit-by: songkeyuan Merged-by: openharmony_ci Description: **IssueNo**: https://gitcode.com/openharmony/ability_ability_runtime/issues/16341 **Description**: param filter **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | | | 成员变量进行赋值或创建需要排查并发 | | | 谨慎在lambda表达式中使用引用捕获 | | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | | | map\vector\list\set等stl模板类使用时需要排查并发 | | | 谨慎考虑加锁范围 | | | 在IPC通信中谨慎使用同步通信方式 | | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | | | 禁止将外部传入的裸指针在内部直接构造智能指针 | | | 禁止多个独立创建的智能指针管理同一地址 | | | 禁止在析构函数中抛异步任务 | | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | | | 禁止在对外接口中未经判空直接使用外部传入的指针 | | | 禁止接口返回局部变量引用 | | | 禁止在信号函数中加锁 | | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | | | 禁止将同一个cpp编译在不同的so中 | | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | | | json对象在取值之前必须先判断类型，避免类型不匹配 | | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | | | readParcelable获取的对象使用前需要判空 | | | 分配和释放内存的函数需要成对出现 | | | 申请内存后异常退出前需要及时进行内存释放 | | | 内存申请前必须对内存大小进行合法性校验 | | | 内存分配后必须判断是否成功 | | | 禁止使用realloc、alloca函数 | | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | | | 禁止打印内存地址 | | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | | | 禁止对有符号整数进行位操作符运算 | | | 禁止对指针进行逻辑或位运算 | | | 循环次数如果收外部数据控制，需要检验其合法性 | | | 禁止使用内存操作类危险函数，需要使用安全函数 | | | 谨慎使用不可重入函数 | | | 必须检查安全函数的返回值，并进行正确处理 | | | 禁止仅通过TokenType类型判断绕过权限校验 | | **TDD Result**: **XTS Result**: ### 是否已执行L0用例 - [ ] 已验证 - [ ] 不涉及。如不涉及，请写明理由 ### AI检视评分（使用本地代码检视skills扫描）: # 代码检视报告 —（Round 3 / commit b8efecaa0e） > 累计两轮 + 一次收口。最终提交 b8efecaa0e。F-08（测试编译项）经用户确认：TDD 在编译环境已成功通过编译，予以撤销。 --- ## 报告元数据 yaml codecheck_report: schema_version: "1.0" scope: "ability_ability_runtime/services/abilitymgr — AMSWantParamFilter（最终）" round: 3 commit_id: "b8efecaa0edd6aac2563b3075c0102c620ef0d74" change_id: "无（本地提交，未关联 Gerrit / 无 Change-Id）" commit_subject: "param filter, Co-Authored-By: Agent" date: "2026-09-27" dimensions_required: ["security-scanner", "logic-scanner", "input-scanner"] dimensions_executed: ["security-scanner", "logic-scanner", "input-scanner"] waived_dimensions: ["F-01 本地反序列化路径不过滤（用户判定非问题）", "F-02 反序列化热路径性能（用户判定无问题）", "F-08 测试编译（用户确认 TDD 已通过编译）"] findings_total: 2 findings_by_severity: {P0: 0, P1: 1, P2: 0, P3: 1} score: 96 risk_level: "low" gate_decision: "approve" gate_blockers: [] must_fix: [] followups: ["F-03 HasParam+Remove 双重查找", "F-09 测试覆盖缺前缀匹配/insight 键用例"] --- ## 1. 基本信息 | 项 | 值 | | -------------- | ----------------------------------------------- | | 检视范围 | ams_want_param_filter.{h,cpp} + 注册点 + 单测 | | commit-id | b8efecaa0edd6aac2563b3075c0102c620ef0d74 | | Change-Id | 无 | | commit message | param filter, Co-Authored-By: Agent | | 检视日期 | 2026-09-27 | | 最终状态 | 已确定（Round 3 收口） | --- ## 2. 总体评价 ### 2.1 评分与决策 | 指标 | 值 | | ------------ | --------------------------------- | | **评分** | **96 / 100**（仅剩 2 条 P3 提示） | | **风险等级** | **low** | | **门禁** | **approve（通过）** | **无 P0 / P1 / P2 有效发现。** ### 2.2 处置闭环 | 类别 | 项 | 结果 | | -------- | ------------------------------------------------------------ | ---------------- | | 用户豁免 | F-01 本地反序列化路径、F-02 热路径性能 | ✅ 豁免 | | 用户撤销 | F-08 测试编译（TDD 已通过编译） | ✅ 撤销 | | 已修复 | F-04 日志、F-05 InstallFilter 顺序、F-06 EOF 换行、F-07 补单测 | ✅ 已修复 | | 遗留 P3 | F-03 双查、F-09 覆盖缺口 | 排期跟进，不阻塞 | --- ## 3. 剩余发现（均为 P3 提示，非阻塞） | ID | 维度 | 位置 | 严重级 | 摘要 | 建议 | | ---- | ---------- | ----------------------------------- | ------ | ------------------------------------------------------------ | ------------------------------------------- | | F-03 | input/性能 | ams_want_param_filter.cpp:116-122 | P3 | HasParam(entry.first) + Remove(entry.first) 两次 map 查找（Remove 内部已判存在） | 直接 params.Remove(key) 或复用一次 find | | F-09 | logic/测试 | ams_want_param_filter_test.cpp | P3 | 测试未覆盖前缀匹配（args./srcEntry. 动态键）与 insight 键剥离 | 补对应用例 | --- ## 4. 结论 变更安全可合入。生产代码 libabilityms.so 无有效缺陷：过滤清单与既有 RemoveSkillParam / RemoveInsightIntent 严格对齐，前缀匹配无碰撞，caller 身份判定（本地穿透 / SA / 系统应用）与 mock 接线均正确，日志红线已整改，InstallFilter 注册时机已修正。 --- *附录 A（门禁评分矩阵）同前。检视阶段未改动任何源码。* See merge request: openharmony/ability_ability_runtime!20581 | 20 天前 | |
BlockAllAppStart_0813 Signed-off-by: Luobniz21 <luoyicong@h-partners.com> 🤖 AI[0%] 🔧 Human Fixed[0%] 🧑 Human[100%] 👌 AI Adopted[0%] # Please enter the commit message for your changes. Lines starting # with '#' will be kept; you may remove them yourself if you want to. # An empty message aborts the commit. # # interactive rebase in progress; onto dd8da781fd # Last command done (1 command done): # pick 7a20d99826 BlockAllAppStart_0813 # No commands remaining. # You are currently rebasing branch 'BlockAllAppStart_0813' on 'dd8da781fd'. # # Changes to be committed: # modified: services/abilitymgr/etc/appfwk.para # modified: services/abilitymgr/etc/appfwk.para.dac # modified: services/abilitymgr/src/ability_manager_service.cpp # modified: services/common/include/app_utils.h # modified: services/common/src/app_utils.cpp # modified: test/unittest/ability_manager_service_seventh_test/ability_manager_service_seventh_test.cpp # modified: test/unittest/ability_manager_service_seventh_test/include/app_utils.h # modified: test/unittest/ability_manager_service_seventh_test/src/app_utils.cpp # modified: test/unittest/ability_manager_service_seventh_test/src/mock_ability_manager_service.cpp # modified: test/unittest/ability_manager_service_thirteenth_test/mock/include/mock_app_utils.h # modified: test/unittest/ability_manager_service_thirteenth_test/mock/src/mock_app_utils.cpp # # Please enter the commit message for your changes. Lines starting # with '#' will be kept; you may remove them yourself if you want to. # An empty message aborts the commit. # # Date: Thu Aug 13 19:57:18 2026 +0800 # # On branch BlockAllAppStart_0813 # Your branch is up to date with 'origin/BlockAllAppStart_0813'. # # Changes to be committed: # modified: services/abilitymgr/etc/appfwk.para # modified: services/abilitymgr/etc/appfwk.para.dac # modified: services/abilitymgr/src/ability_manager_service.cpp # modified: services/common/include/app_utils.h # modified: services/common/src/app_utils.cpp # modified: test/unittest/ability_manager_service_seventh_test/ability_manager_service_seventh_test.cpp # modified: test/unittest/ability_manager_service_seventh_test/include/app_utils.h # modified: test/unittest/ability_manager_service_seventh_test/src/app_utils.cpp # modified: test/unittest/ability_manager_service_seventh_test/src/mock_ability_manager_service.cpp # modified: test/unittest/ability_manager_service_thirteenth_test/ability_manager_service_thirteenth_test.cpp # modified: test/unittest/ability_manager_service_thirteenth_test/mock/include/mock_app_utils.h # modified: test/unittest/ability_manager_service_thirteenth_test/mock/include/mock_my_status.h # modified: test/unittest/ability_manager_service_thirteenth_test/mock/include/mock_permission_verification.h # modified: test/unittest/ability_manager_service_thirteenth_test/mock/src/mock_app_utils.cpp # modified: test/unittest/ability_manager_service_thirteenth_test/mock/src/mock_permission_verification.cpp # # Untracked files: # skills/codecheck/codecheck_report_utils_0820_20260820.md # skills/codecheck/refute_log.md # | 1 个月前 | |
!20483 merge max into master WantAgent实例清理 Created-by: SkyQAQ Commit-by: songkeyuan Merged-by: openharmony_ci Description: **IssueNo**: https://gitcode.com/openharmony/ability_ability_runtime/issues/16249 **Description**: WantAgent实例清理 **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | | | 成员变量进行赋值或创建需要排查并发 | | | 谨慎在lambda表达式中使用引用捕获 | | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | | | map\vector\list\set等stl模板类使用时需要排查并发 | | | 谨慎考虑加锁范围 | | | 在IPC通信中谨慎使用同步通信方式 | | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | | | 禁止将外部传入的裸指针在内部直接构造智能指针 | | | 禁止多个独立创建的智能指针管理同一地址 | | | 禁止在析构函数中抛异步任务 | | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | | | 禁止在对外接口中未经判空直接使用外部传入的指针 | | | 禁止接口返回局部变量引用 | | | 禁止在信号函数中加锁 | | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | | | 禁止将同一个cpp编译在不同的so中 | | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | | | json对象在取值之前必须先判断类型，避免类型不匹配 | | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | | | readParcelable获取的对象使用前需要判空 | | | 分配和释放内存的函数需要成对出现 | | | 申请内存后异常退出前需要及时进行内存释放 | | | 内存申请前必须对内存大小进行合法性校验 | | | 内存分配后必须判断是否成功 | | | 禁止使用realloc、alloca函数 | | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | | | 禁止打印内存地址 | | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | | | 禁止对有符号整数进行位操作符运算 | | | 禁止对指针进行逻辑或位运算 | | | 循环次数如果收外部数据控制，需要检验其合法性 | | | 禁止使用内存操作类危险函数，需要使用安全函数 | | | 谨慎使用不可重入函数 | | | 必须检查安全函数的返回值，并进行正确处理 | | | 禁止仅通过TokenType类型判断绕过权限校验 | | **TDD Result**: **XTS Result**: ### 是否已执行L0用例 - [ ] 已验证 - [ ] 不涉及。如不涉及，请写明理由 ### AI检视评分（使用本地代码检视skills扫描）: # 代码检视报告 — WantAgent实例清理 (commit 26af22d8)（Round 2） > 统一报告由 codecheck 工作台生成，用于门禁管控。检视范围：commit 26af22d8f430c9343eb305ec8824f77b5946c1d4（subject: "WantAgent实例清理"）。 > > **Round 2 变更说明**：相对 Round 1（commit 8723207），本提交仅含两处差异——① DeleteUnsharedRecordsOnDeath 中 ReduceWantAgentNumber(key) 改为 HandleReduceWantAgentNumber(key)（即修复 Round 1 的 P1 项 LOG-01）；② 移除 ability_manager_proxy_test.cpp 中多余的 #include "pending_want_record.h"。其余代码与 Round 1 完全一致。 > > **P3 屏蔽说明**：应门禁要求，本轮屏蔽 P3 级问题（SEC-02 / SEC-03 / LOG-03），不计入 findings、评分与门禁。被屏蔽项仅在文末附录列出备查，不参与扣分。 --- ## 报告元数据 <!-- codecheck-report-metadata:start --> yaml codecheck_report: schema_version: "1.0" scope: "WantAgent实例清理 (commit 26af22d8)" round: 2 commit_id: "26af22d8f430c9343eb305ec8824f77b5946c1d4" change_id: "N/A" report_id: "26af22d8-R2" date: "2026-09-20" gate_decision: "approve" risk_level: "low" score: 90 dimensions_required: ["security-scanner", "logic-scanner", "input-scanner"] dimensions_executed: ["security-scanner", "logic-scanner", "input-scanner"] findings_total: 2 findings_by_severity: {P0: 0, P1: 0, P2: 2, P3: 0} gate_blockers: [] must_fix: [] followups: ["SEC-01", "LOG-02"] <!-- codecheck-report-metadata:end --> --- ## 1. 门禁结论 | 项目 | 结论 | | ----------------- | ------------------------------------ | | 决策 | **approve** | | 风险等级 | 🟢 low | | 评分 | **90/100** | | 阻塞项 | 无 P0 | | 必须修复（P0/P1） | 0 项（Round 1 的 LOG-01 已修复） | | 建议跟进（P2/P3） | 2 项（P2）；3 项 P3 已按门禁要求屏蔽 | **一句话结论**：Round 1 唯一的 P1 缺陷（死亡清理路径 WantAgent 计数只增不减）已被正确修复——改为直接调用 HandleReduceWantAgentNumber，不再依赖后台线程中不存在的 IPC 调用上下文；删除路径已知记录满足 GetIsThirdParty()==true，直接递减与创建时 AddWantAgentNumber 对称，无双重递减、无新增锁序风险。屏蔽 P3 后剩余 2 项 P2 均为建议跟进项，不阻塞上库。 --- ## 2. 扣分原因 > （仅 gate_decision=block 时呈现；本轮为 approve，本节省略。） --- ## 3. 必须立即处理（P0/P1） **无。** > Round 1 的 LOG-01（P1）已在本提交修复：services/abilitymgr/src/pending_want_manager.cpp:554 由 ReduceWantAgentNumber(key) 改为 HandleReduceWantAgentNumber(key)。修复正确性确认如下： > > - DeleteUnsharedRecordsOnDeath 仅处理 GetIsThirdParty()==true 的记录，该记录在创建时（GetWantSenderLocked 三方分支）经 AddWantAgentNumber 计数（pending_want_manager.cpp:235），故直接递减是计数对称且正确的。 > - HandleReduceWantAgentNumber 为 PendingWantManager 私有成员（pending_want_manager.h:200），调用合法。 > - 死亡清理路径持有 mutex_，HandleReduceWantAgentNumber 内部取 countMutex_；与既有 Add/ReduceWantAgentNumber 调用点（GetWantSenderLocked/CancelWantSenderLocked）锁序一致（mutex_ → countMutex_），无逆序，无死锁。 > - 无双重递减：记录一经 death 路径 erase，不再可能走 CancelWantSenderLocked → ReduceWantAgentNumber。 --- ## 4. 建议本轮或下一补档处理（P2/P3） | ID | 优先级 | 问题 | 建议行动 | 排期 | | ------ | ------ | ------------------------------------------------------------ | ------------------------------------------------------------ | -------------- | | SEC-01 | P2 | HandleWantAgentAppDied 延迟任务 lambda 捕获裸 this，且 subManagersHelper_ 只在提交前判空、任务体内未判定 → 服务析构/成员置空时存在 UAF/空解引用隐患 | 与同文件 InitWantAgentAppStateObserver 保持一致的 weak_from_this() 保护；任务内重新判空 subManagersHelper_ | 建议本轮一并修 | | LOG-02 | P2 | RegisterWantAgentHolder（IPC 线程，未持 mutex_）经 MarkSharedIfNeeded 读 creatorPid_/写 isShared_，与 DeleteUnsharedRecordsOnDeath（持 mutex_）并发：creatorPid_ 无同步读 + 记录"先被标记共享后被擦除/取消"的窗口 | MarkSharedIfNeeded 走统一加锁路径（或 RegisterWantAgentHolder 获取 manager mutex_）；creatorPid_/isThirdParty_ 统一纳入锁保护 | 下一补档 | --- ## 5. 分维度速览 | 维度 | 结果 | 关键说明 | | ---------------- | -------------------------------------------- | --------------------------------------------- | | security-scanner | 1 项（SEC-01 为 P2；SEC-02/03 为 P3 已屏蔽） | 无崩溃/UAF 必现高危；裸 this 延迟任务为 P2 | | logic-scanner | 1 项（LOG-02 为 P2；LOG-03 为 P3 已屏蔽） | Round 1 计数缺陷已修复，余下登记/清理竞态 | | input-scanner | N/A（无 DB/文件持久化 sink） | IPC 边界问题已归入 SEC-02/SEC-03（P3 已屏蔽） | --- ## 6. 关键发现详情 > 本轮无 P0/P1。P2 项详情如下： ### [SEC-01] 延迟任务捕获裸 this 与成员空解引用（P2, scanner=security-scanner） - **位置**：services/abilitymgr/src/ability_manager_service.cpp:10323-10329 - **触发路径**：HandleWantAgentAppDied 提交 [this, bundleName, pid](){ subManagersHelper_->HandlePendingWantDeathCleanup(...); } 延迟 500ms；入口判空 subManagersHelper_，任务体内未判定且裸捕获 this。 - **影响**：服务析构/成员置空窗口内 UAF；与 InitWantAgentAppStateObserver 的 weak_from_this() 模式不一致。 - **证据**：auto task = [this, bundleName, pid](){ subManagersHelper_->HandlePendingWantDeathCleanup(bundleName, pid); }; - **建议**：改 weak_from_this() 捕获 + 任务内 lock() 判空 + 判空 subManagersHelper_。 ### [LOG-02] 持有者登记与死亡清理并发竞态（P2, scanner=logic-scanner+security-scanner） - **位置**：services/abilitymgr/src/ability_manager_service.cpp:10311-10329、services/abilitymgr/src/pending_want_record.cpp:528、services/abilitymgr/src/pending_want_manager.cpp:539 - **触发路径**：RegisterWantAgentHolder（IPC 线程，未持 mutex_）→ MarkSharedIfNeeded（读 creatorPid_ 无锁 / 写 isShared_），与 DeleteUnsharedRecordsOnDeath（持 mutex_）并发。 - **影响**：creatorPid_ 无同步读的数据竞争；记录被"标记 shared 前已 erase/取消"的窗口。 - **证据**：RegisterWantAgentHolder 无 lock_guard 即调 MarkSharedIfNeeded（ability_manager_service.cpp:10328）；MarkSharedIfNeeded 读 creatorPid_ 无锁（pending_want_record.cpp:528-536）。 - **建议**：统一加锁路径。 --- ## 附录：被屏蔽的 P3 项（备查，不参与门禁） | ID | 优先级 | 问题 | 位置 | | ------ | ------------ | ------------------------------------------------------------ | ------------------------------------------------------------ | | SEC-02 | P3（已屏蔽） | static_cast<PendingWantRecord*>(target.GetRefPtr()) 类型脆弱（当前唯一本地 IWantSender 实现故安全） | services/abilitymgr/src/ability_manager_service.cpp:10318-10327 | | SEC-03 | P3（已屏蔽） | 新 IPC REGISTER_WANT_AGENT_HOLDER(6181) 无调用方鉴权（当前影响有限） | services/abilitymgr/src/ability_manager_stub.cpp:2436-2445 | | LOG-03 | P3（已屏蔽） | Unmarshalling 异步 ffrt::submit 全局副作用 + 单测异步 flaky 隐患 | interfaces/inner_api/wantagent/src/pending_want.cpp:471-473 | --- > 说明：本次检视不修改任何源码，仅产出报告与建议。修复由用户确认后另起任务，并回到 AGENTS.md 的 Constraints/Verification 章节执行（编译 abilityms/ability_runtime、单测 ability_manager_service_first_test/pending_want_* 等）。 See merge request: openharmony/ability_ability_runtime!20483 | 27 天前 | |
多用户OTA场景应用自启动优化 Signed-off-by: zhu-feimo <zhufeimo1@huawei.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: claude (glm-4.7) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> | 1 个月前 | |
Code fix Signed-off-by: wangzhen <wangzhen416@huawei.com> AI[33%] Human Fixed[0%] Human[67%] AI Adopted[10%] Change-Id: I9ab8a177bb47a5fb43a160dcb0ffa6f31e6a7ba5 | 18 天前 | |
aa Force-Stop补充-u参数 Signed-off-by: SKY2001 <songtianyu10@huawei.com> AI[86%] Human Fixed[0%] Human[14%] AI Adopted[74%] Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> | 5 天前 | |
Migrate window visibility listener to AllUsersWindowManager for multi-user support Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[19%] Co-authored-by: opencode (glm-5.3) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.3) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.3) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.3) <ai@local> Change-Id: I18587bdbb7465c03007c4c7d53c68de3d2af065f | 6 天前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
修复多窗参数名称，增加三方应用参数拦截 Signed-off-by: renguojun <renguojun1@h-partners.com> AI[0%] Human Fixed[0%] Human[100%] AI Adopted[0%] Co-authored-by: opencode (glm-5.3) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.3) <ai@local> | 6 天前 | |
getTopAbility修改 Signed-off-by: zhu-feimo <zhufeimo1@huawei.com> AI[45%] Human Fixed[0%] Human[55%] AI Adopted[100%] | 1 个月前 | |
code review Signed-off-by: wangzhen <wangzhen416@huawei.com> Change-Id: Ic9e2f6552118b17d2c21c237a0361e6d4b753e12 | 1 年前 | |
aa Force-Stop补充-u参数 Signed-off-by: SKY2001 <songtianyu10@huawei.com> AI[86%] Human Fixed[0%] Human[14%] AI Adopted[74%] Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> | 5 天前 | |
fix usr Signed-off-by: x30044351 <xuzheheng2@h-partners.com> AI[95%] Human Fixed[0%] Human[5%] AI Adopted[100%] Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Change-Id: If24fe6a4daec29fa88a0a00c28e699497831383a | 11 天前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
fix meo Signed-off-by: xhz-sz <xiehuandong@huawei.com> | 8 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
getTopAbility修改 Signed-off-by: zhu-feimo <zhufeimo1@huawei.com> AI[45%] Human Fixed[0%] Human[55%] AI Adopted[100%] | 1 个月前 | |
!20160 merge stoi into master stoi modify Created-by: hanchen45 Commit-by: hanchen45 Merged-by: openharmony_ci Description: **IssueNo**: **Description**: **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | pass | | 成员变量进行赋值或创建需要排查并发 | pass | | 谨慎在lambda表达式中使用引用捕获 | pass | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | pass | | map\vector\list\set等stl模板类使用时需要排查并发 | pass | | 谨慎考虑加锁范围 | pass | | 在IPC通信中谨慎使用同步通信方式 | pass | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | pass | | 禁止将外部传入的裸指针在内部直接构造智能指针 | pass | | 禁止多个独立创建的智能指针管理同一地址 | pass | | 禁止在析构函数中抛异步任务 | pass | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | pass | | 禁止在对外接口中未经判空直接使用外部传入的指针 | pass | | 禁止接口返回局部变量引用 | pass | | 禁止在信号函数中加锁 | pass | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | pass | | 禁止将同一个cpp编译在不同的so中 | pass | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | pass | | json对象在取值之前必须先判断类型，避免类型不匹配 | pass | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | pass | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | pass | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | pass | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | pass | | readParcelable获取的对象使用前需要判空 |pass | | 分配和释放内存的函数需要成对出现 | pass | | 申请内存后异常退出前需要及时进行内存释放 | pass | | 内存申请前必须对内存大小进行合法性校验 | pass | | 内存分配后必须判断是否成功 | pass | | 禁止使用realloc、alloca函数 | pass | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 |pass | | 禁止打印内存地址 | pass | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | pass | | 禁止对有符号整数进行位操作符运算 | pass | | 禁止对指针进行逻辑或位运算 | pass | | 循环次数如果收外部数据控制，需要检验其合法性 | pass | | 禁止使用内存操作类危险函数，需要使用安全函数 | pass | | 谨慎使用不可重入函数 | pass | | 必须检查安全函数的返回值，并进行正确处理 | pass | | 禁止仅通过TokenType类型判断绕过权限校验 | pass | **TDD Result**: **XTS Result**: ### 是否已执行L0用例 - [ ] 已验证 - [ ] 不涉及。如不涉及，请写明理由 ### AI检视评分（使用本地代码检视skills扫描）: # 代码检视报告 — commit a4c40610 stoi→from_chars 重构（Round 2 / 最新提交） > 统一报告由 codecheck 工作台生成，**用于门禁管控**。所有 codecheck 报告（含 orchestrator 合并出的统一报告、单 scanner 直接产出的统一报告）必须遵循本模板：章节顺序、字段名、报告元数据块、评分与门禁规则均为**固定格式**，跨报告保持一致，便于门禁脚本解析与历史对比。 > 生成入口：[ README.md](skills/codecheck/README.md) → Step 5；合并逻辑见 [orchestrator/SKILL.md](skills/codecheck/orchestrator/SKILL.md)。 > 权威评分与门禁规则为**通用规则**，不在输出报告中呈现；生成时必须按 [conventions.md](skills/codecheck/conventions.md) §7（等级归一化）/ §8（必检维度）/ §9（评分与决策矩阵）计算，不得自创分值。 --- ## 报告元数据 > **门禁脚本只读取本 YAML 块**。字段名与取值域为固定合约，禁止改名、增删或自定义取值。人工阅读部分从「1. 门禁结论」开始。 <!-- codecheck-report-metadata:start --> yaml codecheck_report: schema_version: "1.0" scope: "commit a4c40610 stoi→from_chars refactor" round: 2 commit_id: "a4c40610d1d5612770e2b8124d513ad23d296ad0" change_id: "N/A" report_id: "a4c40610-R2" date: "2026-09-02" gate_decision: "approve" risk_level: "low" score: 94 dimensions_required: ["security-scanner", "logic-scanner"] dimensions_executed: ["security-scanner", "logic-scanner"] findings_total: 3 findings_by_severity: {P0: 0, P1: 0, P2: 0, P3: 3} gate_blockers: [] must_fix: [] followups: ["LOG-02", "SEC-02", "LOG-03"] <!-- codecheck-report-metadata:end --> --- ## 1. 门禁结论 | 项目 | 结论 | |---|---| | 决策 | **approve** | | 风险等级 | 🟢 low | | 评分 | **94/100** | | 阻塞项 | 无 | | 必须修复（P0/P1） | 0 项 | | 建议跟进（P2/P3） | 3 项 | **一句话结论**：stoi→from_chars 重构方向正确，4 处源码变更安全无内存/并发/UAF 风险，30 个新增测试用例覆盖全面；Round 1 发现的 P0 编译依赖缺失已修复，剩余 3 项 P3 均为观察项不阻塞上库。 --- ## 3. 必须立即处理（P0/P1） **无。** --- ## 4. 建议本轮或下一补档处理（P2/P3） | ID | 优先级 | 问题 | 建议行动 | 排期 | |---|---|---|---|---| | LOG-02 | P3 | from_chars 拒绝部分解析输入（如 "12ab"→旧 stoi 返回 12，新代码返回错误）。属合理行为收紧，非缺陷 | 排查 hidumper -i 和 aa -w 传入链路，确认无 "数字+后缀" 格式的合法输入 | 后续确认 | | SEC-02 | P3 | ability_record.cpp:699 的 safeStoi lambda 缺少 str.empty() 前置检查，与 dialog_session_info.cpp:53 的同名 lambda 不一致（功能等价） | 统一两处实现，或抽取为公共工具函数 | 下一补档 | | LOG-03 | P3 | ParseURI 中 || 短路求值导致中间字段解析失败时前面字段已被赋值，对象处于部分修改状态后返回 false（既有问题，非本次引入） | 可考虑先解析到临时变量，全部成功后统一赋值 | 后续优化 | --- ## 5. 分维度速览 | 维度 | 结果 | 关键说明 | |---|---|---| | security-scanner | 1 P3 | P3: safeStoi 实现不一致。无内存安全/并发/IPC/UAF/资源泄漏问题。4 处 stoi→from_chars 重构在空指针、越界、整数溢出方面均安全。 | | logic-scanner | 2 P3 | P3: from_chars 行为收紧属改进（非缺陷）；ParseURI 部分修改状态为既有问题。整体逻辑正确，错误处理路径完整，ptr == end 完全匹配检查消除了旧 stoi 部分解析隐患。 | --- ## 6. 关键发现详情 ### [LOG-02] from_chars 拒绝部分解析输入，行为较 stoi 收紧 (P3, scanner=logic-scanner) - **位置**：services/abilitymgr/src/ability_manager_service.cpp:8136-8138、services/abilitymgr/src/ability_record.cpp:699-701、tools/aa/src/ability_command.cpp:2727、services/abilitymgr/src/dialog_session/dialog_session_info.cpp:57-58 - **触发路径**：旧 std::stoi("12ab") 会解析前导数字返回 12（忽略 "ab" 后缀），新 std::from_chars 配合 ptr == end 检查会拒绝 "12ab"（因 ptr 指向 "ab" 而非字符串末尾）。4 处变更均采用 ptr == str.data() + str.size() 完全匹配检查。 - **影响**：输入 "12ab" 类型时，旧行为继续执行（如 DumpMissionListByRecordId(info, isClient, 12, params)），新行为返回错误信息。行为收紧方向正确——"12ab" 本非合法数字 ID，旧 stoi 的部分解析行为本身是不安全的。 - **证据**： - ability_manager_service.cpp:8137-8138：auto [ptr, ec] = std::from_chars(...); if (ec == std::errc() && ptr == argList[1].data() + argList[1].size()) - ability_record.cpp:700-701：return ec == std::errc() && ptr == str.data() + str.size(); - ability_command.cpp:2727-2728：同模式 - dialog_session_info.cpp:57-58：同模式 - 测试 DumpSysAbilityInner_004 验证 "12ab" 返回错误信息 ✓ - 测试 AaFwk_AbilityMS_CreateAbilityTransitionInfo_013 验证 "10abc" 保持默认值 ✓ - **建议**：行为收紧合理，属改进非缺陷。建议排查 hidumper -i 参数和 aa -w 参数的传入链路，确认无 "数字+后缀" 格式的合法输入。 --- ### [SEC-02] safeStoi 实现不一致：ability_record.cpp 版缺少空字符串检查 (P3, scanner=security-scanner) - **位置**：services/abilitymgr/src/ability_record.cpp:699-701（对比 services/abilitymgr/src/dialog_session/dialog_session_info.cpp:53-58） - **触发路径**：两处定义了功能相同的 safeStoi lambda，但 dialog_session_info.cpp 版有 if (str.empty()) return false; 前置检查，ability_record.cpp 版没有。 - **影响**：功能上等价——std::from_chars 对空字符串（first == last）返回 ec == std::errc::invalid_argument，safeStoi 返回 false。但两处实现不一致增加维护成本。 - **证据**： - ability_record.cpp:699-701：auto safeStoi = [](const std::string &str, int32_t &out) -> bool { auto [ptr, ec] = std::from_chars(str.data(), str.data() + str.size(), out); return ec == std::errc() && ptr == str.data() + str.size(); }; - dialog_session_info.cpp:53-58：auto safeStoi = [](const std::string &str, int32_t &out) -> bool { if (str.empty()) { return false; } auto [ptr, ec] = std::from_chars(...); return ec == std::errc() && ptr == str.data() + str.size(); }; - **建议**：统一两处实现，或抽取为公共工具函数（如 ability_runtime_utils 中的 SafeStoi）。 --- ### [LOG-03] ParseURI 部分字段解析失败时对象处于部分修改状态 (P3, scanner=logic-scanner) - **位置**：services/abilitymgr/src/dialog_session/dialog_session_info.cpp:62-72 - **触发路径**：|| 短路求值中，如果第 3 个 safeStoi 失败，前 2 个字段（bundleIconId、bundleLabelId）已被成功赋值，对象处于部分修改状态后返回 false。 - **影响**：调用方 ReadFromParcel（dialog_session_info.cpp:95）在 ParseURI 返回 false 时直接 return false，部分修改的 DialogAbilityInfo 不会被使用。实际无功能影响，但语义上不够严谨。 - **证据**： - dialog_session_info.cpp:62-69：if (!safeStoi(uriVec[index++], bundleIconId) || !safeStoi(uriVec[index++], bundleLabelId) || ...) — 短路求值 - 旧代码 try-catch 也有相同行为（部分赋值后 catch 返回 false），且旧代码 catch 块中 uriVec[index++] 存在 index 多增的 bug（日志访问错误元素），新代码消除了此 bug - ReadFromParcel（line 95-98）：ParseURI 失败即 return false，不使用部分修改的对象 - **建议**：非本次变更引入的问题，可后续优化为先解析到临时变量、全部成功后统一赋值。 --- ## 附录：变更概要 ### 变更文件列表 | 文件 | 变更类型 | 行数 | |------|---------|------| | services/abilitymgr/src/ability_manager_service.cpp | stoi→from_chars | +14 −12 | | services/abilitymgr/src/ability_record.cpp | stoi→from_chars | +18 −5 | | services/abilitymgr/src/dialog_session/dialog_session_info.cpp | stoi→from_chars + #include | +26 −7 | | tools/aa/src/ability_command.cpp | stoi→from_chars | +7 −5 | | test/unittest/ability_manager_service_eighth_test/ability_manager_service_eighth_test.cpp | 新增 9 用例 | +195 | | test/unittest/ability_manager_service_eighth_test/BUILD.gn | 补充 mission_list 依赖 | +1 | | test/unittest/ability_record_test/ability_record_test.cpp | 新增 7 用例 | +159 | | test/unittest/dialog_session_info_test/dialog_session_info_test.cpp | 新增 14 用例 | +247 | ### 测试覆盖评估 | 测试文件 | 新增用例数 | 覆盖场景 | 评估 | |---------|-----------|---------|------| | eighth_test | 9 | DumpSysAbilityInner: 无用户/非法参数/溢出/部分解析/参数缺失; DumpSysAbilityInnerBySCB: 非法参数/有效参数/无管理器 | ✅ 覆盖全面 | | ability_record_test | 7 | 有效值/非数字/部分无效/空属性/溢出/负值/尾随垃圾 | ✅ 覆盖全面 | | dialog_session_info_test | 14 | 空字段/非数字各位置/尾随垃圾/前导空格/正号/溢出/下溢/负值/边界值/visible转换/往返 | ✅ 覆盖全面 | ### Round 1→Round 2 变更 | 发现 ID | Round 1 | Round 2 | 变更原因 | |---------|---------|---------|---------| | SEC-01 | P0 (−30) | 已修复 | BUILD.gn:62 已添加 :mission_list 依赖，编译问题解决 | | LOG-02 | P2 (−5) | P3 (−2) | from_chars 部分解析拒绝是合理行为收紧（改进非缺陷），降级为观察项 | | SEC-02 | P3 (−2) | P3 (−2) | 维持 | | LOG-03 | P3 (−2) | P3 (−2) | 维持 | ### Refute 日志（Round 2） | 发现 See merge request: openharmony/ability_ability_runtime!20160 | 30 天前 | |
sync resident process DB with install_list_capability.json on OTA Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> AI[87%] Human Fixed[0%] Human[13%] AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: I1f41c5700d9d3b6432bf48ad74f46efdaa25d8ec | 24 天前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
add AbilityRunningRecord unittest cases for ability_runtime Signed-off-by: zhangzezhong <zhangzezhong8@huawei-partners.com> | 1 年前 | |
test: add node_header_notice/libuv deps for napi native_engine.h after CR4184 Signed-off-by: Luobniz21 <luoyicong@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[22%] Co-authored-by: opencode (glm-5.2) <ai@local> | 5 天前 | |
bugfix: NDK C compilation Co-Authored-By: Agent Signed-off-by: yangxuguang-huawei <yangxuguang3@huawei.com> | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
1.2 abilityStageContext增加launchElement Co-Authored-By: Agent Signed-off-by: hanchen45 <wanghanchen1@huawei.com> | 6 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
description: aa support start with wait Signed-off-by: 13776621730 <zhawei12@huawei-partners.com> | 1 年前 | |
Move methods Signed-off-by: wangzhen <wangzhen416@huawei.com> | 9 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
huangshiwei4@hauwei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
bugfix: agent connection/disconnection Co-Authored-By: Agent Signed-off-by: yangxuguang-huawei <yangxuguang3@huawei.com> | 3 个月前 | |
bugfix: agent connection/disconnection Co-Authored-By: Agent Signed-off-by: yangxuguang-huawei <yangxuguang3@huawei.com> | 3 个月前 | |
!20612 merge refactor/abilitymgr into master refactor: abilitymgr and agentmgr Created-by: yangxuguang-huawei Commit-by: yangxuguang-huawei Merged-by: openharmony_ci Description: https://gitcode.com/openharmony/ability_ability_runtime/issues/16377 refactor: abilitymgr and agentmgr See merge request: openharmony/ability_ability_runtime!20612 | 9 天前 | |
move process principles Signed-off-by: wangzhen <wangzhen416@huawei.com> AI[97%] Human Fixed[0%] Human[3%] AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: I62a71e302e4c0a48aa32b00e3210d752fc637f3d | 2 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
aa Force-Stop补充-u参数 Signed-off-by: SKY2001 <songtianyu10@huawei.com> AI[86%] Human Fixed[0%] Human[14%] AI Adopted[74%] Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> | 5 天前 | |
移除已废弃的jointUserId及signCode字段相关代码 Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> AI[0%] Human Fixed[0%] Human[0%] AI Adopted[0%] Change-Id: I0dfb91dec696429c0db80b5c1302aa6ea88225d4 | 1 个月前 | |
Revise Review Comments Signed-off-by: zhangzezhong <zhangzezhong8@huawei-partners.com> | 9 个月前 | |
[un]register改为单例接口 Signed-off-by: zhangatao <zhangtao662@huawei.com> AI[84%] Human Fixed[0%] Human[16%] AI Adopted[100%] Co-authored-by: opencode (glm-5.3) <ai@local> | 8 天前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
0613_abilitykit Signed-off-by: Luobniz21 <luoyicong@h-partners.com> | 4 个月前 | |
记录查杀接口 Signed-off-by: zhoulanzhi <zhoulanzhi@huawei.com> Signed-off-by: opencode <ai@local> AI[72%] Human Fixed[0%] Human[28%] AI Adopted[80%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: Idf9a8a59c2a9af9415dccac6f744d7c3b1f764bc | 1 个月前 | |
回退 'Pull Request !14812 : description:元能力IDL化整改-001' | 1 年前 | |
aa命令新增权限 Signed-off-by: hanchen45 <wanghanchen1@huawei.com> | 1 个月前 | |
aa Force-Stop补充-u参数 Signed-off-by: SKY2001 <songtianyu10@huawei.com> AI[86%] Human Fixed[0%] Human[14%] AI Adopted[74%] Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> | 5 天前 | |
记录查杀接口 Signed-off-by: zhoulanzhi <zhoulanzhi@huawei.com> Signed-off-by: opencode <ai@local> AI[72%] Human Fixed[0%] Human[28%] AI Adopted[80%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: Idf9a8a59c2a9af9415dccac6f744d7c3b1f764bc | 1 个月前 | |
[un]register改为单例接口 Signed-off-by: zhangatao <zhangtao662@huawei.com> AI[84%] Human Fixed[0%] Human[16%] AI Adopted[100%] Co-authored-by: opencode (glm-5.3) <ai@local> | 8 天前 | |
修复蓝区AI扫描问题第二批 Signed-off-by: SKY2001 <songtianyu10@huawei.com> AI[88%] Human Fixed[0%] Human[12%] AI Adopted[95%] Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> | 30 天前 | |
删除老的hilog头文件 Signed-off-by: XKK <huyingsong@huawei.com> | 2 年前 | |
move process principles Signed-off-by: wangzhen <wangzhen416@huawei.com> AI[97%] Human Fixed[0%] Human[3%] AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: I62a71e302e4c0a48aa32b00e3210d752fc637f3d | 2 个月前 | |
[un]register改为单例接口 Signed-off-by: zhangatao <zhangtao662@huawei.com> AI[84%] Human Fixed[0%] Human[16%] AI Adopted[100%] Co-authored-by: opencode (glm-5.3) <ai@local> | 8 天前 | |
move process principles Signed-off-by: wangzhen <wangzhen416@huawei.com> AI[97%] Human Fixed[0%] Human[3%] AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: I62a71e302e4c0a48aa32b00e3210d752fc637f3d | 2 个月前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
回退 'Pull Request !14812 : description:元能力IDL化整改-001' | 1 年前 | |
回退 'Pull Request !14812 : description:元能力IDL化整改-001' | 1 年前 | |
add AppDebugManager unittest cases for ability_runtime Signed-off-by: zhangzezhong <zhangzezhong8@huawei-partners.com> | 1 年前 | |
kv_point Signed-off-by: Luobniz21 <luoyicong@h-partners.com> Change-Id: I6244317d773f76bb7db4c23934681e86bd7dfb00 | 8 个月前 | |
kv_point Signed-off-by: Luobniz21 <luoyicong@h-partners.com> Change-Id: I6244317d773f76bb7db4c23934681e86bd7dfb00 | 8 个月前 | |
fix: align OTA detection with bundlemanager system fingerprint Replace the single const.product.software.version comparison with a multi-parameter system fingerprint (const.product.software.version, const.product.build.type, const.product.brand, const.product.name, const.product.devicetype, const.product.incremental.version, const.comp.hl.product_base_version.real), matching BMSEventHandler's IsSystemFingerprintChanged. This fixes a gap where incremental or component-level OTAs that only change parameters other than const.product.software.version were not detected, leaving stale recover info that caused apps to be restored from the old backup. The test hook reuses bundlemanager's persist.bms.test-upgrade so one command drives both subsystems' OTA test paths. Signed-off-by: zhang_hao_zheng <zhanghaozheng2@h-partners.com> 🤖 AI[0%] 🔧 Human Fixed[0%] 🧑 Human[100%] 👌 AI Adopted[0%] | 1 个月前 | |
aa Force-Stop补充-u参数 Signed-off-by: SKY2001 <songtianyu10@huawei.com> AI[86%] Human Fixed[0%] Human[14%] AI Adopted[74%] Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> | 5 天前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
deviceId Anonymize Co-Authored-By: Agent Signed-off-by: duansizhao <duansizhao@huawei.com> Change-Id: I9f405c91cfccd42909750e3ea5f9b5e8b68ae8d1 | 5 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
image_framework部件public_external_deps依赖整改 Change-Id: Iabc380c6ec5da18427b6e5b2719d005a45e68688 Signed-off-by: y00656910 <yaoxingyu3@huawei.com> | 2 个月前 | |
add tdd Co-Authored-By: Agent Signed-off-by: zyr020212 <zhaoyuran@h-partners.com> | 6 个月前 | |
hyper Signed-off-by: xialiangwei <2049500708@qq.com> | 6 个月前 | |
!19815 merge cfipac into master Add cfi/pac config Created-by: zivzhen Commit-by: wangzhen Merged-by: openharmony_ci Description: **IssueNo**: **Description**: **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | ok | | 成员变量进行赋值或创建需要排查并发 | ok | | 谨慎在lambda表达式中使用引用捕获 | ok | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | ok | | map\vector\list\set等stl模板类使用时需要排查并发 | ok | | 谨慎考虑加锁范围 | ok | | 在IPC通信中谨慎使用同步通信方式 | ok | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | ok | | 禁止将外部传入的裸指针在内部直接构造智能指针 | ok | | 禁止多个独立创建的智能指针管理同一地址 | ok | | 禁止在析构函数中抛异步任务 | ok | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | ok | | 禁止在对外接口中未经判空直接使用外部传入的指针 | ok | | 禁止接口返回局部变量引用 | ok | | 禁止在信号函数中加锁 | ok | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | ok | | 禁止将同一个cpp编译在不同的so中 | ok | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | ok | | json对象在取值之前必须先判断类型，避免类型不匹配 | ok | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | ok | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | ok | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | ok | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | ok | | readParcelable获取的对象使用前需要判空 | ok | | 分配和释放内存的函数需要成对出现 | ok | | 申请内存后异常退出前需要及时进行内存释放 | ok | | 内存申请前必须对内存大小进行合法性校验 | ok | | 内存分配后必须判断是否成功 | ok | | 禁止使用realloc、alloca函数 | ok | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | ok | | 禁止打印内存地址 | ok | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | ok | | 禁止对有符号整数进行位操作符运算 | ok | | 禁止对指针进行逻辑或位运算 | ok | | 循环次数如果收外部数据控制，需要检验其合法性 | ok | | 禁止使用内存操作类危险函数，需要使用安全函数 | ok | | 谨慎使用不可重入函数 | ok | | 必须检查安全函数的返回值，并进行正确处理 | ok | | 禁止仅通过TokenType类型判断绕过权限校验 | ok | **TDD Result**: pass **XTS Result**: pass ### 是否已执行L0用例 - [ ] 已验证 - [ ] 不涉及。如不涉及，请写明理由 See merge request: openharmony/ability_ability_runtime!19815 | 3 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
判空处理，变量命名，tdd Signed-off-by: zhangatao <zhangtao662@huawei.com> | 1 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
新增tdd测试 Signed-off-by: zhangtao <zhangtao662@huawei.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: opencode (glm-5.3) <ai@local> Change-Id: I6f5f01dd18f01aabcd801de88857b64ad7964b22 | 6 天前 | |
Hidumper支持ArkWeb Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> | 8 个月前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
[un]register改为单例接口 Signed-off-by: zhangatao <zhangtao662@huawei.com> AI[84%] Human Fixed[0%] Human[16%] AI Adopted[100%] Co-authored-by: opencode (glm-5.3) <ai@local> | 8 天前 | |
terminateAbility正常退出上报killId打点 Signed-off-by: zhu-feimo <zhufeimo1@huawei.com> AI[78%] Human Fixed[0%] Human[22%] AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.3-flash) <ai@local> | 10 天前 | |
!20737 merge AddAAForceStop-u-1 into master AddAAForceStop-u-1 Created-by: SKY2001 Commit-by: SKY2001 Merged-by: openharmony_ci Description: **IssueNo**: https://gitcode.com/openharmony/ability_ability_runtime/issues/16489?ref=&did=4427056#tid-4427056 **Description**: **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | | | 成员变量进行赋值或创建需要排查并发 | | | 谨慎在lambda表达式中使用引用捕获 | | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | | | map\vector\list\set等stl模板类使用时需要排查并发 | | | 谨慎考虑加锁范围 | | | 在IPC通信中谨慎使用同步通信方式 | | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | | | 禁止将外部传入的裸指针在内部直接构造智能指针 | | | 禁止多个独立创建的智能指针管理同一地址 | | | 禁止在析构函数中抛异步任务 | | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | | | 禁止在对外接口中未经判空直接使用外部传入的指针 | | | 禁止接口返回局部变量引用 | | | 禁止在信号函数中加锁 | | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | | | 禁止将同一个cpp编译在不同的so中 | | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | | | json对象在取值之前必须先判断类型，避免类型不匹配 | | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | | | readParcelable获取的对象使用前需要判空 | | | 分配和释放内存的函数需要成对出现 | | | 申请内存后异常退出前需要及时进行内存释放 | | | 内存申请前必须对内存大小进行合法性校验 | | | 内存分配后必须判断是否成功 | | | 禁止使用realloc、alloca函数 | | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | | | 禁止打印内存地址 | | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | | | 禁止对有符号整数进行位操作符运算 | | | 禁止对指针进行逻辑或位运算 | | | 循环次数如果收外部数据控制，需要检验其合法性 | | | 禁止使用内存操作类危险函数，需要使用安全函数 | | | 谨慎使用不可重入函数 | | | 必须检查安全函数的返回值，并进行正确处理 | | | 禁止仅通过TokenType类型判断绕过权限校验 | | **TDD Result**: **XTS Result**: ### 是否已执行L0用例 - [ ] 已验证 - [ ] 不涉及。如不涉及，请写明理由 ### AI检视评分（使用本地代码检视skills扫描）: See merge request: openharmony/ability_ability_runtime!20737 | 3 天前 | |
优化StartMsg标志位管理 Signed-off-by: SKY2001 <songtianyu10@huawei.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[92%] Co-authored-by: opencode (glm-5.2) <ai@local> | 1 个月前 | |
修改tdd Signed-off-by: zhangatao <zhangtao662@huawei.com> Change-Id: Id90d1bc4a37036e56db8faa107a5172860b9a6e8 | 1 个月前 | |
Replace WindowManager with AllUsersWindowManager for focus/visibility listeners and pass userId to GetInstance Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[93%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: I96f2c0051a2fed598f240716e3ac5b90d7982d47 Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> | 25 天前 | |
!20737 merge AddAAForceStop-u-1 into master AddAAForceStop-u-1 Created-by: SKY2001 Commit-by: SKY2001 Merged-by: openharmony_ci Description: **IssueNo**: https://gitcode.com/openharmony/ability_ability_runtime/issues/16489?ref=&did=4427056#tid-4427056 **Description**: **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | | | 成员变量进行赋值或创建需要排查并发 | | | 谨慎在lambda表达式中使用引用捕获 | | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | | | map\vector\list\set等stl模板类使用时需要排查并发 | | | 谨慎考虑加锁范围 | | | 在IPC通信中谨慎使用同步通信方式 | | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | | | 禁止将外部传入的裸指针在内部直接构造智能指针 | | | 禁止多个独立创建的智能指针管理同一地址 | | | 禁止在析构函数中抛异步任务 | | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | | | 禁止在对外接口中未经判空直接使用外部传入的指针 | | | 禁止接口返回局部变量引用 | | | 禁止在信号函数中加锁 | | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | | | 禁止将同一个cpp编译在不同的so中 | | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | | | json对象在取值之前必须先判断类型，避免类型不匹配 | | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | | | readParcelable获取的对象使用前需要判空 | | | 分配和释放内存的函数需要成对出现 | | | 申请内存后异常退出前需要及时进行内存释放 | | | 内存申请前必须对内存大小进行合法性校验 | | | 内存分配后必须判断是否成功 | | | 禁止使用realloc、alloca函数 | | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | | | 禁止打印内存地址 | | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | | | 禁止对有符号整数进行位操作符运算 | | | 禁止对指针进行逻辑或位运算 | | | 循环次数如果收外部数据控制，需要检验其合法性 | | | 禁止使用内存操作类危险函数，需要使用安全函数 | | | 谨慎使用不可重入函数 | | | 必须检查安全函数的返回值，并进行正确处理 | | | 禁止仅通过TokenType类型判断绕过权限校验 | | **TDD Result**: **XTS Result**: ### 是否已执行L0用例 - [ ] 已验证 - [ ] 不涉及。如不涉及，请写明理由 ### AI检视评分（使用本地代码检视skills扫描）: See merge request: openharmony/ability_ability_runtime!20737 | 3 天前 | |
补充查询子进程的接口 Signed-off-by: SKY2001 <songtianyu10@huawei.com> AI[47%] Human Fixed[0%] Human[53%] AI Adopted[100%] | 1 个月前 | |
!20737 merge AddAAForceStop-u-1 into master AddAAForceStop-u-1 Created-by: SKY2001 Commit-by: SKY2001 Merged-by: openharmony_ci Description: **IssueNo**: https://gitcode.com/openharmony/ability_ability_runtime/issues/16489?ref=&did=4427056#tid-4427056 **Description**: **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | | | 成员变量进行赋值或创建需要排查并发 | | | 谨慎在lambda表达式中使用引用捕获 | | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | | | map\vector\list\set等stl模板类使用时需要排查并发 | | | 谨慎考虑加锁范围 | | | 在IPC通信中谨慎使用同步通信方式 | | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | | | 禁止将外部传入的裸指针在内部直接构造智能指针 | | | 禁止多个独立创建的智能指针管理同一地址 | | | 禁止在析构函数中抛异步任务 | | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | | | 禁止在对外接口中未经判空直接使用外部传入的指针 | | | 禁止接口返回局部变量引用 | | | 禁止在信号函数中加锁 | | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | | | 禁止将同一个cpp编译在不同的so中 | | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | | | json对象在取值之前必须先判断类型，避免类型不匹配 | | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | | | readParcelable获取的对象使用前需要判空 | | | 分配和释放内存的函数需要成对出现 | | | 申请内存后异常退出前需要及时进行内存释放 | | | 内存申请前必须对内存大小进行合法性校验 | | | 内存分配后必须判断是否成功 | | | 禁止使用realloc、alloca函数 | | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | | | 禁止打印内存地址 | | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | | | 禁止对有符号整数进行位操作符运算 | | | 禁止对指针进行逻辑或位运算 | | | 循环次数如果收外部数据控制，需要检验其合法性 | | | 禁止使用内存操作类危险函数，需要使用安全函数 | | | 谨慎使用不可重入函数 | | | 必须检查安全函数的返回值，并进行正确处理 | | | 禁止仅通过TokenType类型判断绕过权限校验 | | **TDD Result**: **XTS Result**: ### 是否已执行L0用例 - [ ] 已验证 - [ ] 不涉及。如不涉及，请写明理由 ### AI检视评分（使用本地代码检视skills扫描）: See merge request: openharmony/ability_ability_runtime!20737 | 3 天前 | |
QueryExtensionAbilityInfoByUri替换为QueryExtensionAbilityInfoByUriOptimal Co-Authored-By:Agent Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> 🤖 AI[97%] 👌 AI Adopted[97%] 🧑 Human[3%] Co-authored-by: claude (unknown) <ai@local> Change-Id: I5860c431627aeb551b7051f1bb9bf6f3ea884042 | 4 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
supplement exitReason Co-Authored-By: ya Signed-off-by: renjh5496 <renjianhao@h-partners.com> | 2 个月前 | |
优化StartMsg标志位管理 Signed-off-by: SKY2001 <songtianyu10@huawei.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[92%] Co-authored-by: opencode (glm-5.2) <ai@local> | 1 个月前 | |
!20506 merge OptimizeStartMsgFlag into master 优化StartMsg标志位管理 Created-by: SKY2001 Commit-by: SKY2001 Merged-by: openharmony_ci Description: 优化StartMsg标志位管理 https://gitcode.com/openharmony/ability_ability_runtime/issues/16278?ref=&did=4345635#tid-4345635 See merge request: openharmony/ability_ability_runtime!20506 | 26 天前 | |
fix appmgr cross-user clear application data without ownership check Add callerUser == userId ownership check in ClearUpApplicationData. A non-system caller (callerUserId > U1) with an explicit userId can only clear the application data of its own user, otherwise CHECK_PERMISSION_FAILED is returned. This prevents a normal PC user from clearing other users' (admin/u0/u1) application data via bm command in developer mode. u0/u1 system callers keep the original behavior. Fixes: https://gitcode.com/openharmony/ability_ability_runtime/issues/16399 Signed-off-by: zhang_hao_zheng <zhanghaozheng2@h-partners.com> 🤖 AI[0%] 🔧 Human Fixed[0%] 🧑 Human[100%] 👌 AI Adopted[0%] | 18 天前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
!19538 merge AddQueryChildProcess into master 补充查询子进程的接口 Created-by: SKY2001 Commit-by: SKY2001 Merged-by: openharmony_ci Description: **IssueNo**: https://gitcode.com/openharmony/ability_ability_runtime/issues/15412?ref=&did=4075189#tid-4075189 **Description**: **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | pass | | 成员变量进行赋值或创建需要排查并发 | pass | | 谨慎在lambda表达式中使用引用捕获 | pass | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | pass | | map\vector\list\set等stl模板类使用时需要排查并发 | pass | | 谨慎考虑加锁范围 | pass | | 在IPC通信中谨慎使用同步通信方式 | pass | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | pass | | 禁止将外部传入的裸指针在内部直接构造智能指针 | pass | | 禁止多个独立创建的智能指针管理同一地址 | pass | | 禁止在析构函数中抛异步任务 | pass | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | pass | | 禁止在对外接口中未经判空直接使用外部传入的指针 | pass | | 禁止接口返回局部变量引用 | pass | | 禁止在信号函数中加锁 | pass | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | pass | | 禁止将同一个cpp编译在不同的so中 | pass | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | pass | | json对象在取值之前必须先判断类型，避免类型不匹配 | pass | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | pass | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | pass | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | pass | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | pass | | readParcelable获取的对象使用前需要判空 | pass | | 分配和释放内存的函数需要成对出现 | pass | | 申请内存后异常退出前需要及时进行内存释放 | pass | | 内存申请前必须对内存大小进行合法性校验 | pass | | 内存分配后必须判断是否成功 | pass | | 禁止使用realloc、alloca函数 | pass | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | pass | | 禁止打印内存地址 | pass | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | pass | | 禁止对有符号整数进行位操作符运算 | pass | | 禁止对指针进行逻辑或位运算 | pass | | 循环次数如果收外部数据控制，需要检验其合法性 | pass | | 禁止使用内存操作类危险函数，需要使用安全函数 | pass | | 谨慎使用不可重入函数 | pass | | 必须检查安全函数的返回值，并进行正确处理 | pass | | 禁止仅通过TokenType类型判断绕过权限校验 | pass | **TDD Result**: pass **XTS Result**: pass ### 是否已执行L0用例 - [ ] 已验证 - [ ] 不涉及。如不涉及，请写明理由 See merge request: openharmony/ability_ability_runtime!19538 | 1 个月前 | |
修复tdd失败 Signed-off-by: zhangtao <zhangtao662@huawei.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[84%] Co-authored-by: opencode (glm-5.3) <ai@local> Change-Id: I613273f3d81cf7affcb3a56c11ac4f698dd10d52 | 6 天前 | |
新增tdd测试 Signed-off-by: zhangtao <zhangtao662@huawei.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: opencode (glm-5.3) <ai@local> Change-Id: I6f5f01dd18f01aabcd801de88857b64ad7964b22 | 6 天前 | |
TDD: AppMgrUtil Signed-off-by: Nathan Yang <yangxuguang3@huawei.com> | 1 年前 | |
Revert "JSON统一为cJSON" Signed-off-by: 13776621730 <zhawei12@huawei-partners.com> Change-Id: I69dc57782680ece5c5d2d1416464516405d070ad | 1 年前 | |
fdsan: 接管 pidfd 与 memfd fd 所有权，删除裸 close Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> Change-Id: I5c59998b946f0ca136c93ad642588dcbbb5be040 | 1 个月前 | |
fix tdd Signed-off-by: jsjzju <jinsenjun@huawei.com> Co-Authored-By: Agent Change-Id: I5459170fefbeeeb6e26a7f4d7a9e2762312773ca | 5 个月前 | |
!20412 merge master into master 修改off日志打印 Created-by: acdemicJava Commit-by: acdemicJava Merged-by: openharmony_ci Description: **IssueNo**: https://gitcode.com/openharmony/ability_ability_runtime/issues/16171 **Description**: **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | | | 成员变量进行赋值或创建需要排查并发 | | | 谨慎在lambda表达式中使用引用捕获 | | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | | | map\vector\list\set等stl模板类使用时需要排查并发 | | | 谨慎考虑加锁范围 | | | 在IPC通信中谨慎使用同步通信方式 | | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | | | 禁止将外部传入的裸指针在内部直接构造智能指针 | | | 禁止多个独立创建的智能指针管理同一地址 | | | 禁止在析构函数中抛异步任务 | | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | | | 禁止在对外接口中未经判空直接使用外部传入的指针 | | | 禁止接口返回局部变量引用 | | | 禁止在信号函数中加锁 | | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | | | 禁止将同一个cpp编译在不同的so中 | | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | | | json对象在取值之前必须先判断类型，避免类型不匹配 | | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | | | readParcelable获取的对象使用前需要判空 | | | 分配和释放内存的函数需要成对出现 | | | 申请内存后异常退出前需要及时进行内存释放 | | | 内存申请前必须对内存大小进行合法性校验 | | | 内存分配后必须判断是否成功 | | | 禁止使用realloc、alloca函数 | | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | | | 禁止打印内存地址 | | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | | | 禁止对有符号整数进行位操作符运算 | | | 禁止对指针进行逻辑或位运算 | | | 循环次数如果收外部数据控制，需要检验其合法性 | | | 禁止使用内存操作类危险函数，需要使用安全函数 | | | 谨慎使用不可重入函数 | | | 必须检查安全函数的返回值，并进行正确处理 | | | 禁止仅通过TokenType类型判断绕过权限校验 | | **TDD Result**: **XTS Result**: ### 是否已执行L0用例 - [ ] 已验证 - [x] 不涉及。如不涉及，请写明理由 ### AI检视评分（使用本地代码检视skills扫描）: # 代码检视报告 — js_error_manager（Round 1 / 最新提交） > 统一报告由 codecheck 工作台生成，**用于门禁管控**。所有 codecheck 报告（含 orchestrator 合并出的统一报告、单 scanner 直接产出的统一报告）必须遵循本模板：章节顺序、字段名、报告元数据块、评分与门禁规则均为**固定格式**，跨报告保持一致，便于门禁脚本解析与历史对比。 > 生成入口：[ README.md](../README.md) → Step 5；合并逻辑见 [orchestrator/SKILL.md](../orchestrator/SKILL.md)。 > 权威评分与门禁规则为**通用规则**，不在输出报告中呈现；生成时必须按 [conventions.md](../conventions.md) §7（等级归一化）/ §8（必检维度）/ §9（评分与决策矩阵）计算，不得自创分值。 --- ## 报告元数据 > **门禁脚本只读取本 YAML 块**。字段名与取值域为固定合约，禁止改名、增删或自定义取值。人工阅读部分从「1. 门禁结论」开始。 <!-- codecheck-report-metadata:start --> yaml codecheck_report: schema_version: "1.0" scope: "js_error_manager" round: 1 commit_id: "ec9e54afde57ad8469785d8ddda0757d956ef052" change_id: "N/A" report_id: "ec9e54af-R1" date: "2026-09-07" gate_decision: "approve" risk_level: "low" score: 98 dimensions_required: ["security-scanner", "logic-scanner"] dimensions_executed: ["security-scanner", "logic-scanner"] findings_total: 1 findings_by_severity: {P0: 0, P1: 0, P2: 0, P3: 1} gate_blockers: [] must_fix: [] followups: ["LOG-01"] <!-- codecheck-report-metadata:end --> --- ## 1. 门禁结论 | 项目 | 结论 | |---|---| | 决策 | **approve** | | 风险等级 | 🟢 low | | 评分 | **98/100** | | 阻塞项 | 无 | | 必须修复（P0/P1） | 0 项 | | 建议跟进（P2/P3） | 1 项 | **一句话结论**：本次提交仅修改日志字符串格式并删除 7 处误导性 "off_all" 日志，无内存安全/并发/IPC/逻辑缺陷，仅存在 1 项 P3 级 DFX 可观测性降低建议。 --- ## 3. 必须立即处理（P0/P1） **无。** 详情见第 6 节。 --- ## 4. 建议本轮或下一补档处理（P2/P3） | ID | 优先级 | 问题 | 建议行动 | 排期 | |---|---|---|---|---| | LOG-01 | P3 | 特定观察者移除成功路径缺少诊断日志（7 处日志被删除，3 个函数成功路径无任何日志输出） | 替换为正确标注的日志（op=off 而非 op=off_all），而非完全删除 | 下一补档 | --- ## 5. 分维度速览 | 维度 | 结果 | 关键说明 | |---|---|---| | security-scanner | ✅ 通过 | 11 项 Core Scan 全部不适用/通过；无 G 类模式命中；0 条发现。路径无 IPC/持久化/反序列化代码，变更仅涉及日志字符串 | | logic-scanner | ✅ 通过 | LOG-001~012 逐项扫描无逻辑缺陷；1 条 P3 建议：删除误导性日志后 3 个函数的成功移除路径无日志输出 | --- ## 6. 关键发现详情 ### [LOG-01] 特定观察者移除成功路径缺少诊断日志 (P3, scanner=logic-scanner) - **位置**： - frameworks/js/napi/app/error_manager/js_error_manager.cpp:1459（OnOffAllError，if (equals) 块内） - frameworks/js/napi/app/error_manager/js_error_manager.cpp:1505（OnOffFreeze，if (equals) 块后） - frameworks/js/napi/app/error_manager/js_error_manager.cpp:1535（OnOffAllUnhandledRejection，if (equals) 块内） - frameworks/js/napi/app/error_manager/js_error_manager.cpp:1588（OnOffOld，函数末尾） - frameworks/js/napi/app/error_manager/js_error_manager.cpp:1627（OnOffUnhandledRejection，if (equals) 块内） - frameworks/js/napi/app/error_manager/js_error_manager.cpp:1664（OnOffNew，函数末尾） - frameworks/js/napi/app/error_manager/js_error_manager.cpp:1767（OnRemoveLoopWatch，if/else 后） - **触发路径**：通过 NAPI off() 接口移除特定观察者回调时（非 "移除全部" 路径），代码执行 napi_delete_reference + erase 后直接 return，无任何 TAG_LOGI 输出。 - **影响**：DFX 可观测性降低。当特定观察者被成功移除时，无法通过日志追溯该操作。OnOffAllError、OnOffAllUnhandledRejection、OnOffUnhandledRejection 三个函数的特定移除成功路径完全无日志输出。不影响功能正确性。 - **证据**：提交 ec9e54afde diff 显示 7 处 TAG_LOGI(AAFwkTag::JSNAPI, "SubEvent op = off_all, kit = AbilityKit, event=...") 被删除。这些日志原本位于特定观察者移除路径（if (equals) 块内或函数末尾），但标注为 "off_all"（移除全部），具有误导性。"移除全部"路径（function == nullptr 或 argc == ARGC_ONE）的日志已保留并格式化。test/ 目录中无引用该日志格式的断言。 - **建议**：不建议恢复原误导性日志。建议替换为正确标注的日志（例如 "SubEvent op=off kit=AbilityKit event=globalErrorOccurred"），以在保持 DFX 可观测性的同时修正日志语义。 See merge request: openharmony/ability_ability_runtime!20412 | 1 个月前 | |
aa Force-Stop补充-u参数 Signed-off-by: SKY2001 <songtianyu10@huawei.com> AI[86%] Human Fixed[0%] Human[14%] AI Adopted[74%] Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> | 5 天前 | |
fix_app_running_manager_second_test Signed-off-by: zhangzezhong <zhangzezhong8@huawei-partners.com> | 10 个月前 | |
ai scan fix Signed-off-by: AsukaSoryu <gongyuechen@huawei.com> Co-Authored-By:Agent | 1 个月前 | |
通过pidFd监听子进程和render进程死亡 Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> AI[0%] Human Fixed[0%] Human[100%] AI Adopted[0%] Change-Id: Ice6f1f4b4eca0f528337ee2468b40cf0ad2ddffd | 2 个月前 | |
移除已废弃的jointUserId及signCode字段相关代码 Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> AI[0%] Human Fixed[0%] Human[0%] AI Adopted[0%] Change-Id: I0dfb91dec696429c0db80b5c1302aa6ea88225d4 | 1 个月前 | |
terminateAbility正常退出上报killId打点 Signed-off-by: zhu-feimo <zhufeimo1@huawei.com> AI[78%] Human Fixed[0%] Human[22%] AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.3-flash) <ai@local> | 10 天前 | |
Revert "JSON统一为cJSON" Signed-off-by: 13776621730 <zhawei12@huawei-partners.com> Change-Id: I69dc57782680ece5c5d2d1416464516405d070ad | 1 年前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
aa Force-Stop补充-u参数 Signed-off-by: SKY2001 <songtianyu10@huawei.com> AI[86%] Human Fixed[0%] Human[14%] AI Adopted[74%] Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> | 5 天前 | |
getTopAbility修改 Signed-off-by: zhu-feimo <zhufeimo1@huawei.com> AI[45%] Human Fixed[0%] Human[55%] AI Adopted[100%] | 1 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
优化StartMsg标志位管理 Signed-off-by: SKY2001 <songtianyu10@huawei.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[92%] Co-authored-by: opencode (glm-5.2) <ai@local> | 1 个月前 | |
优化StartMsg标志位管理 Signed-off-by: SKY2001 <songtianyu10@huawei.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[92%] Co-authored-by: opencode (glm-5.2) <ai@local> | 1 个月前 | |
Add node:node_header_notice to BUILD.gn for napi deps decoupling Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> AI[77%] Human Fixed[0%] Human[23%] AI Adopted[90%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: Ia6bf4fc5b7a0fce259f4a54d29a70d12b995b62f | 9 天前 | |
!19918 merge wrap_data into master 修复监听回调的状态获取时机的问题 Created-by: AsukaSoryu Commit-by: AsukaSoryu Merged-by: openharmony_ci Description: **IssueNo**:https://gitcode.com/openharmony/ability_ability_runtime/issues/15726 **Description**:修复监听回调的状态获取时机的问题 **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | Y | | 成员变量进行赋值或创建需要排查并发 | Y | | 谨慎在lambda表达式中使用引用捕获 | Y | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | Y | | map\vector\list\set等stl模板类使用时需要排查并发 | Y | | 谨慎考虑加锁范围 | Y | | 在IPC通信中谨慎使用同步通信方式 | Y | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | Y | | 禁止将外部传入的裸指针在内部直接构造智能指针 | Y | | 禁止多个独立创建的智能指针管理同一地址 | Y | | 禁止在析构函数中抛异步任务 | Y | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | Y | | 禁止在对外接口中未经判空直接使用外部传入的指针 | Y | | 禁止接口返回局部变量引用 | Y | | 禁止在信号函数中加锁 | Y | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | Y | | 禁止将同一个cpp编译在不同的so中 | Y | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | Y | | json对象在取值之前必须先判断类型，避免类型不匹配 | Y | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | Y | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | Y | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | Y | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | Y | | readParcelable获取的对象使用前需要判空 | Y | | 分配和释放内存的函数需要成对出现 | Y | | 申请内存后异常退出前需要及时进行内存释放 | Y | | 内存申请前必须对内存大小进行合法性校验 | Y | | 内存分配后必须判断是否成功 | Y | | 禁止使用realloc、alloca函数 | Y | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | Y | | 禁止打印内存地址 | Y | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | Y | | 禁止对有符号整数进行位操作符运算 | Y | | 禁止对指针进行逻辑或位运算 | Y | | 循环次数如果收外部数据控制，需要检验其合法性 | Y | | 禁止使用内存操作类危险函数，需要使用安全函数 | Y | | 谨慎使用不可重入函数 | Y | | 必须检查安全函数的返回值，并进行正确处理 | Y | | 禁止仅通过TokenType类型判断绕过权限校验 | Y | **TDD Result**: pass **XTS Result**: pass ### 是否已执行L0用例 - [ ] 已验证 - [ ] 不涉及。如不涉及，请写明理由 ### AI检视评分（使用本地代码检视skills扫描）: # 代码检视报告 — services/appmgr（Round 1 / 最新提交） > 统一报告由 codecheck 工作台生成，**用于门禁管控**。 --- ## 报告元数据 <!-- codecheck-report-metadata:start --> yaml codecheck_report: schema_version: "1.0" scope: "services/appmgr/app_state_observer_manager" round: 1 commit_id: "1696a894abf17885bdf997935ae45f73c27c5165" change_id: "N/A" report_id: "1696a894-R1" date: "2026-08-17" gate_decision: "approve" risk_level: "low" score: 92 dimensions_required: ["security", "logic"] dimensions_executed: ["security", "logic"] findings_total: 4 findings_by_severity: {"P0": 0, "P1": 0, "P2": 1, "P3": 3} gate_blockers: [] must_fix: 0 followups: 4 <!-- codecheck-report-metadata:end --> --- ## 1. 门禁结论 | 项目 | 结论 | |---|---| | 决策 | **approve** | | 风险等级 | ✅ low | | 评分 | **92/100** | | 阻塞项 | 无 | | 必须修复（P0/P1） | 0 项 | | 建议跟进（P2/P3） | 4 项 | **一句话结论**：本次提交（解决冲突）将 ProcessData 改为 shared_ptr 并增加防护，经深度验证线程安全有锁保护、状态参数提取逻辑一致，整体为安全性改进，可安全合入。 --- ## 2. 扣分原因（仅 gate_decision=block 时呈现；approve/conditional/insufficient 时本节省略） > 评分 92 分（≥90），无阻塞项，本节省略。 --- ## 3. 必须立即处理（P0/P1） > **无。** 所有发现均为 P2/P3 级别的代码质量改进建议。 --- ## 4. 建议本轮或下一补档处理（P2/P3） | ID | 优先级 | 问题 | 建议行动 | 排期 | |---|---|---|---|---| | SEC-P2-002 | P2 | 异步 lambda 捕获 shared_ptr 缺少统一策略 | 制定代码规范，统一 async lambda 捕获策略文档 | 下版本 | | LOG-P3-001 | P3 | 括号格式化问题（缩进不对） | 运行 clang-format 或手动对齐三处 if 闭合括号 | 提交前清理 | | LOG-P3-002 | P3 | 空指针检查冗余（双重检查） | 保持现有防御性检查或选择单一检查策略 | 低优先级 | | SEC-P3-001 | P3 | AppStateFilter 循环内构造可优化 | 考虑提前构造，减少循环内重复初始化 | 性能优化（可选）| --- ## 5. 分维度速览 ### 5.1 security-scanner 结果 **模块风险画像**： - 模块主要能力：应用进程状态观察者管理，管理进程创建/状态变更/销毁的观察者通知 - 外部输入点：AppRunningRecord shared_ptr 参数 - 资源所有权：无 fd/mmap/线程资源，管理观察者 map - 并发行为：异步任务提交到 handler_，观察者 map 有 **std::lock_guard 保护** - 安全性评估：✅ 无 P0/P1 风险 **核心验证结论**： - ✅ HandleOnProcessCreated 等函数 nullptr 检查完整（897-900行） - ✅ **GetAppStateObserverMapCopy 有锁保护**（1327行：std::lock_guard lock(observerLock_)） - ✅ shared_ptr + weak_from_this() 异步安全 - ℹ️ async lambda 捕获策略建议文档化（P2） **Pattern 命中**： - MEM-001（空指针）：✅ 已有完整防护 - MEM-003（生命周期）：✅ shared_ptr 改进正确 - CONC-003（线程安全）：✅ 已有 lock_guard 保护（验证通过） - IPC-005~010：不适用（无直接 IPC 序列化） ### 5.2 logic-scanner 结果 **变更类型分析**： - Type 2（数据流变更）：ProcessData 从值类型改为 shared_ptr - Type 4（函数签名变更）：多处 Handle* 函数参数改为 shared_ptr - Type 5（错误处理变更）：新增多处 nullptr 检查 **核心验证结论**： - ✅ **状态参数提取逻辑一致**：ApplicationState state 从 data->state 提取，等同于原传递方式 - ✅ API 兼容性保持：OnProcessCreated(*data) 传引用，观察者接口签名未变 - ℹ️ 代码格式化问题（P3） - ℹ️ 防御性检查冗余（P3） **正面改进**： - ✅ shared_ptr 改进提升异步安全 - ✅ nullptr 检查增加健壮性 - ✅ 接口简化（移除冗余 state 参数） --- ## 6. 关键验证详情 ### ✅ SEC-P1-003 已推翻：线程安全验证通过 **位置**：services/appmgr/src/app_state_observer_manager.cpp:1325-1329 **验证发现**： cpp AppStateObserverMap AppStateObserverManager::GetAppStateObserverMapCopy() { std::lock_guard lock(observerLock_); // ✅ 有锁保护 return appStateObserverMap_; } **结论**：GetAppStateObserverMapCopy 实现包含 std::lock_guard，所有调用点（18处）的线程安全有保障。原 P1 发现已推翻。 --- ### ✅ LOG-P1-001 已验证：状态参数逻辑一致 **变更对比**： cpp // 变更前：显式传递 state 参数 void HandleOnProcessStateChanged(const ProcessData &data, BundleType bundleType, ApplicationState state, bool isByCall); auto state = appRecord->GetState(); // 在调用点获取 auto task = [weak, data, bundleType, state, isByCall]() { ... }; // 变更后：从 data 提取 state void HandleOnProcessStateChanged(const std::shared_ptr<ProcessData> &data, BundleType bundleType, bool isByCall); auto task = [weak, data, bundleType, isByCall]() { ... }; // state 不再单独传递 ApplicationState state = static_cast<ApplicationState>(data->state); // 在函数内提取 **一致性验证**： - data->state 在 WrapProcessData 中设置（1085-1102行） - 设置时机：processData->state = static_cast<AppProcessState>(appRecord->GetState()); - 提取时机：在 HandleOnProcessStateChanged 内部立即提取 - **结论**：行为等价，state 值来源相同（appRecord->GetState()），无状态不一致风险 --- ## 7. 提交总结与后续行动 **本次提交整体评价**：✅ **安全性改进，可安全合入** **正面改进**： - ✅ ProcessData 改为 shared_ptr，明确生命周期管理，防止 UAF - ✅ 增加多处 nullptr 检查，提升健壮性 - ✅ weak_from_this() + shared_ptr 捕获，异步安全 - ✅ GetAppStateObserverMapCopy 有锁保护，线程安全 - ✅ 状态参数简化，逻辑一致 **验证通过**： - ✅ 线程安全防护完整（SEC-P1-003 推翻） - ✅ 状态参数逻辑一致（LOG-P1-001 验证通过） **建议改进**（P2/P3）： - 📝 统一 async lambda 捕获策略文档（下版本） - 🔧 代码格式化修复（提交前清理） - 📝 防御性检查策略（低优先级） --- ## 附录 ### A. Scanner 原始产出路径 - security-scanner 原始报告：内联于 orchestrator 会话 - logic-scanner 原始报告：内联于 orchestrator 会话 - refute_log.md：./refute_log.md ### B. 检视范围与决策依据 - **目标路径**：services/appmgr/src/app_state_observer_manager.cpp - **提交信息**：1696a894（solve conflict） - **选择 scanner**：security + logic（services/ 核心组件默认组合） - **决策矩阵**：无 P0/P1 → approve，评分 92 ≥ 90 → approve ### C. 验证命令 bash # 线程安全验证（已通过） grep -n "lock_guard" services/appmgr/src/app_state_observer_manager.cpp | grep GetAppStateObserverMapCopy # 输出：1327: std::lock_guard lock(observerLock_); # 编译验证 ./build.sh --product-name <product> --build-target abilityms # 单元测试 run -t UT -ts app_state_observer_manager_test # 格式化修复（针对 P3） clang-format -i services/appmgr/src/app_state_observer_manager.cpp ### D. Refute 统计 - 原始发现：8 条（P1: 2, P2: 1, P3: 2, 另误报 3 条） - 推翻：4 条（50%）— 经代码验证为误报或已有防护 - 降级：3 条（37.5%）— 影响程度低于初始判定 - 维持：1 条（12.5%）— 建议改进项 - **最终有效发现**：4 条（P2: 1, P3: 3） See merge request: openharmony/ability_ability_runtime!19918 | 1 个月前 | |
Tdd fix Signed-off-by: wangzhen <wangzhen416@huawei.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: Id6a3212eaa3f9f17b06e25c7b1dc19c04cc3403f | 2 个月前 | |
solve conflict Signed-off-by: AsukaSoryu <gongyuechen@huawei.com> Co-Authored-By: Agent Signed-off-by: AsukaSoryu <gongyuechen@huawei.com> AI[0%] Human Fixed[0%] Human[100%] AI Adopted[0%] | 2 个月前 | |
UT Signed-off-by: fuxiuwsz <wangshengze1@huawei.com> | 6 天前 | |
Merge branch 'master' of gitcode.com:dgm_2399562/ability_ability_runtime_7000 | 27 天前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
Revert "add tdd" This reverts commit b3d4ab19b19f13935f3d99b35f45136febb1081e. This reverts commit 7b2aea943f9e48d3c441029e75886bb58a86fa97. This reverts commit b9b3312538896f20e198768fcd06cf893f24cea0. This reverts commit 960acd67fb61cd37491ae079c2522582c8dbfcee. This reverts commit 12eab1efeb50d29cbb7030e9bc69b669bf7ec2db. Co-Authored-By: RenGuojun Signed-off-by: 任国军 <renguojun1@h-partners.com> AI[0%] Human Fixed[0%] Human[0%] AI Adopted[0%] | 2 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
独立编译-配合ability_runtime删除public_deps Signed-off-by: zhangzezhong <zhangzezhong8@huawei-partners.com> | 1 年前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
test: add node_header_notice/libuv deps for napi native_engine.h after CR4184 Signed-off-by: Luobniz21 <luoyicong@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[22%] Co-authored-by: opencode (glm-5.2) <ai@local> | 5 天前 | |
refactor: merge ability interceptors Signed-off-by: yangxuguang-huawei <yangxuguang3@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: pi (glm-5.3) <ai@local> Change-Id: I943ac876f599828e7275e7493052a1a2aff8a5a2 | 1 个月前 | |
Revert "add tdd" This reverts commit b3d4ab19b19f13935f3d99b35f45136febb1081e. This reverts commit 7b2aea943f9e48d3c441029e75886bb58a86fa97. This reverts commit b9b3312538896f20e198768fcd06cf893f24cea0. This reverts commit 960acd67fb61cd37491ae079c2522582c8dbfcee. This reverts commit 12eab1efeb50d29cbb7030e9bc69b669bf7ec2db. Co-Authored-By: RenGuojun Signed-off-by: 任国军 <renguojun1@h-partners.com> AI[0%] Human Fixed[0%] Human[0%] AI Adopted[0%] | 2 个月前 | |
update test/unittest/bundle_mgr_helper_test/bundle_mgr_helper_test.cpp. Signed-off-by: sty28558 <songtianyu10@huawei.com> | 1 年前 | |
extension分身场景使用 Signed-off-by: yewei0794 <weiyejxnf@163.com> 🤖 AI[100%] 👌 AI Adopted[100%] 🧑 Human[0%] Co-authored-by: Agent Change-Id: If4bc6b09c1804c5685610f81d47ebb7a1ed9904a | 4 个月前 | |
utils_0820 Signed-off-by: Luobniz21 <luoyicong@h-partners.com> 🤖 AI[100%] 🔧 Human Fixed[0%] 🧑 Human[0%] 👌 AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> | 1 个月前 | |
utils_0820 Signed-off-by: Luobniz21 <luoyicong@h-partners.com> 🤖 AI[100%] 🔧 Human Fixed[0%] 🧑 Human[0%] 👌 AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> | 1 个月前 | |
!20667 merge terminateAbility正常退出上报killId打点 into master terminateAbility正常退出上报killId打点 Created-by: zhu-feimo Commit-by: zhu-feimo Merged-by: openharmony_ci Description: **IssueNo**: [#16400](https://gitcode.com/openharmony/ability_ability_runtime/issues/16400) **Description**: **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | | | 成员变量进行赋值或创建需要排查并发 | | | 谨慎在lambda表达式中使用引用捕获 | | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | | | map\vector\list\set等stl模板类使用时需要排查并发 | | | 谨慎考虑加锁范围 | | | 在IPC通信中谨慎使用同步通信方式 | | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | | | 禁止将外部传入的裸指针在内部直接构造智能指针 | | | 禁止多个独立创建的智能指针管理同一地址 | | | 禁止在析构函数中抛异步任务 | | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | | | 禁止在对外接口中未经判空直接使用外部传入的指针 | | | 禁止接口返回局部变量引用 | | | 禁止在信号函数中加锁 | | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | | | 禁止将同一个cpp编译在不同的so中 | | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | | | json对象在取值之前必须先判断类型，避免类型不匹配 | | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | | | readParcelable获取的对象使用前需要判空 | | | 分配和释放内存的函数需要成对出现 | | | 申请内存后异常退出前需要及时进行内存释放 | | | 内存申请前必须对内存大小进行合法性校验 | | | 内存分配后必须判断是否成功 | | | 禁止使用realloc、alloca函数 | | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | | | 禁止打印内存地址 | | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | | | 禁止对有符号整数进行位操作符运算 | | | 禁止对指针进行逻辑或位运算 | | | 循环次数如果收外部数据控制，需要检验其合法性 | | | 禁止使用内存操作类危险函数，需要使用安全函数 | | | 谨慎使用不可重入函数 | | | 必须检查安全函数的返回值，并进行正确处理 | | | 禁止仅通过TokenType类型判断绕过权限校验 | | **TDD Result**: **XTS Result**: ### 是否已执行L0用例 - [ ] 已验证 - [ ] 不涉及。如不涉及，请写明理由 ### AI检视评分（使用本地代码检视skills扫描）: # 代码检视报告 — f3b48f0c_appmgr（Round 5 / 最新提交） > 统一报告由 codecheck 工作台生成，**用于门禁管控**。编排与 Refute 记录见 refute_log_26a6c21e71_appmgr_20261008.md（含 Round 3 裁决 / Round 4、5 终检节）。 --- ## 报告元数据 <!-- codecheck-report-metadata:start --> yaml codecheck_report: schema_version: "1.0" scope: "f3b48f0c_appmgr" round: 5 commit_id: "f3b48f0cf3befebd71e239677c1ddfe15a04b082" change_id: "N/A" report_id: "f3b48f0c-R5" date: "2026-10-08" gate_decision: "approve" risk_level: "low" score: 98 dimensions_required: ["security-scanner", "logic-scanner", "input-scanner"] dimensions_executed: ["security-scanner", "logic-scanner", "input-scanner"] findings_total: 1 findings_by_severity: {P0: 0, P1: 0, P2: 0, P3: 1} gate_blockers: [] must_fix: [] followups: ["R3-2"] <!-- codecheck-report-metadata:end --> --- ## 1. 门禁结论 | 项目 | 结论 | |---|---| | 决策 | **approve** | | 风险等级 | 🟢 low | | 评分 | **98/100** | | 阻塞项 | 无 | | 必须修复（P0/P1） | 0 项 | | 建议跟进（P2/P3） | 1 项（P3 观察项） | **范围口径**：与 Round 3/4 一致——发现仅限本次 diff 触及的代码。本轮 delta 相对 Round 4 基线（06d0d69d）仅 1 字符：app_running_record.cpp:2841 行尾尾随空格删除（R4-1 修复）。 **一句话结论**：R4-1 已修复合入（尾随空格删除，零语义变更），本提交全部检视发现收敛至 1 项接受备案的 P3 观察项（R3-2 边缘窗口），历次裁决项均已关闭，**可上库**。 --- ## 2. 扣分原因 > gate_decision=approve，本节省略。 --- ## 3. 必须立即处理（P0/P1） **无。** --- ## 4. 建议本轮或下一补档处理（P2/P3） | ID | 优先级 | 问题 | 建议行动 | 排期 | |---|---|---|---|---| | R3-2 | P3 | kill 成功分支理论边缘窗口：zombie/D-state（kill=0 但死亡延迟）与置位同死亡上报读端的微秒级竞争；后果均为 DFX 归因退化，有内核查询/延迟重试兜底 | 接受并注释声明边界；可选 waitpid(WNOHANG) 复核 | 观察项（接受备案） | > 历史裁决留档：R3-1 关闭（错误码特判降级否决）、R3-3/R3-5/R3-6 剔除、R3-4 修复合入（06d0d69d）、R4-1 修复合入（本提交）。 --- ## 5. 分维度速览 | 维度 | 结果 | 关键说明 | |---|---|---| | security-scanner | ✅ 终检通过 | delta 纯空白字符变更，零语义影响，无新增输入面/sink/敏感信息 | | logic-scanner | ✅ 终检通过 | diff 单行验证 R4-1 修复到位；链接完整性、mock 同步状态不变 | | input-scanner | N/A | delta 无新增外部输入 source 与持久化 sink | --- ## 6. 关键发现详情 ### [R3-2] kill 成功分支理论边缘窗口（P3, 继承自 Round 3，接受备案） - **位置**：services/appmgr/src/app_running_manager.cpp:979 vs app_mgr_service_inner.cpp:6785→6736 - **触发路径**：zombie/D-state 进程 kill=0 但死亡延迟；或置位与死亡上报读端微秒级竞争。 - **影响**：DFX 归因退化（内核查询/延迟重试兜底），无功能影响。 - **证据**：SIGKILL 不可屏蔽 + 三重前置校验；kill(2) 契约值域 {0,-1} 人工质疑复核确认判定严密。 - **建议**：接受并注释声明边界；可选 waitpid(WNOHANG) 复核。 --- ## 交付物清单 - 统一报告：codecheck_report_f3b48f0c_appmgr_20261008_R5.md（本文件） - Refute 记录（Round 1-5 全程）：refute_log_26a6c21e71_appmgr_20261008.md - 历史轮次：Round 1（b122cc2dfe）→ Round 2（26a6c21e71）→ Round 3（范围收窄 + 裁决）→ Round 4（06d0d69d）→ Round 5（本报告） - 验证命令（Linux 源码根）：./build.sh --product-name <product> --build-target libappms；run -t UT -ts app_running_record_test；run -t UT -ts cache_process_manager_second_test See merge request: openharmony/ability_ability_runtime!20667 | 3 天前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
code review Signed-off-by: wangzhen <wangzhen416@huawei.com> | 8 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Extension_Enhancement Signed-off-by: renjianhao <renjianhao@h-partners.com> | 6 个月前 | |
add capitdd Signed-off-by: zexin_c <chenzexin14@huawei.com> | 9 个月前 | |
update Signed-off-by: majian <majian59@h-partners.com> | 9 个月前 | |
补充查询子进程的接口 Signed-off-by: SKY2001 <songtianyu10@huawei.com> AI[47%] Human Fixed[0%] Human[53%] AI Adopted[100%] | 1 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
Add node:node_header_notice to BUILD.gn for napi deps decoupling Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> AI[77%] Human Fixed[0%] Human[23%] AI Adopted[90%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: Ia6bf4fc5b7a0fce259f4a54d29a70d12b995b62f | 9 天前 | |
add more child process tdd Signed-off-by: y30069878 <yangyang706@h-partners.com> | 11 个月前 | |
add child process record tdd Signed-off-by: y30069878 <yangyang706@h-partners.com> | 11 个月前 | |
add more child process tdd Signed-off-by: y30069878 <yangyang706@h-partners.com> | 11 个月前 | |
add child process record tdd Signed-off-by: y30069878 <yangyang706@h-partners.com> | 11 个月前 | |
add more child process tdd Signed-off-by: y30069878 <yangyang706@h-partners.com> | 11 个月前 | |
add child process record tdd Signed-off-by: y30069878 <yangyang706@h-partners.com> | 11 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
新增abilityV2接口 Signed-off-by: xiatian <xiatian44@huawei.com> Co-Authored-By: Agent Change-Id: Ie1ae0246a8dc2fe4db7050826c5361a735c7d6bd | 4 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
fix: add version script for cj moddule Signed-off-by: xiatian <xiatian44@huawei.com> Change-Id: Ic5f92fdc5068a5e9510fa3c41ea69f2d842229ac | 1 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
fix: add version script for cj moddule Signed-off-by: xiatian <xiatian44@huawei.com> Change-Id: Ic5f92fdc5068a5e9510fa3c41ea69f2d842229ac | 1 个月前 | |
测试用例整改 Signed-off-by: fangwusheng <fangwusheng@h-partners.com> | 2 个月前 | |
修复错误的用例预期 Signed-off-by: xiatian <xiatian44@huawei.com> Co-Authored-By: Agent Change-Id: Ibb99175ce9273cc4edb4f1ebaa2aa0c9794b2788 | 4 个月前 | |
!19440 merge external_depsTOdeps into master change external_deps to deps Created-by: zhongshield1 Commit-by: zhongshield1 Merged-by: openharmony_ci Description: **IssueNo**: **Description**: **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | | | 成员变量进行赋值或创建需要排查并发 | | | 谨慎在lambda表达式中使用引用捕获 | | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | | | map\vector\list\set等stl模板类使用时需要排查并发 | | | 谨慎考虑加锁范围 | | | 在IPC通信中谨慎使用同步通信方式 | | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | | | 禁止将外部传入的裸指针在内部直接构造智能指针 | | | 禁止多个独立创建的智能指针管理同一地址 | | | 禁止在析构函数中抛异步任务 | | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | | | 禁止在对外接口中未经判空直接使用外部传入的指针 | | | 禁止接口返回局部变量引用 | | | 禁止在信号函数中加锁 | | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | | | 禁止将同一个cpp编译在不同的so中 | | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | | | json对象在取值之前必须先判断类型，避免类型不匹配 | | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | | | readParcelable获取的对象使用前需要判空 | | | 分配和释放内存的函数需要成对出现 | | | 申请内存后异常退出前需要及时进行内存释放 | | | 内存申请前必须对内存大小进行合法性校验 | | | 内存分配后必须判断是否成功 | | | 禁止使用realloc、alloca函数 | | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | | | 禁止打印内存地址 | | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | | | 禁止对有符号整数进行位操作符运算 | | | 禁止对指针进行逻辑或位运算 | | | 循环次数如果收外部数据控制，需要检验其合法性 | | | 禁止使用内存操作类危险函数，需要使用安全函数 | | | 谨慎使用不可重入函数 | | | 必须检查安全函数的返回值，并进行正确处理 | | | 禁止仅通过TokenType类型判断绕过权限校验 | | **TDD Result**: **XTS Result**: ### 是否已执行L0用例 - [ ] 已验证 - [ ] 不涉及。如不涉及，请写明理由 See merge request: openharmony/ability_ability_runtime!19440 | 4 个月前 | |
fix: add version script for cj moddule Signed-off-by: xiatian <xiatian44@huawei.com> Change-Id: Ic5f92fdc5068a5e9510fa3c41ea69f2d842229ac | 1 个月前 | |
新增abilityV2接口 Signed-off-by: xiatian <xiatian44@huawei.com> Co-Authored-By: Agent Change-Id: Ie1ae0246a8dc2fe4db7050826c5361a735c7d6bd | 4 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
fix: add version script for cj moddule Signed-off-by: xiatian <xiatian44@huawei.com> Change-Id: Ic5f92fdc5068a5e9510fa3c41ea69f2d842229ac | 1 个月前 | |
!19754 merge master into master fix requireArkModule fail from user created JSRuntime Created-by: liuyics16 Commit-by: liuyics16 Merged-by: openharmony_ci Description: **IssueNo**: https://gitcode.com/openharmony/arkui_napi/issues/2153 **Description**: **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | | | 成员变量进行赋值或创建需要排查并发 | | | 谨慎在lambda表达式中使用引用捕获 | | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | | | map\vector\list\set等stl模板类使用时需要排查并发 | | | 谨慎考虑加锁范围 | | | 在IPC通信中谨慎使用同步通信方式 | | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | | | 禁止将外部传入的裸指针在内部直接构造智能指针 | | | 禁止多个独立创建的智能指针管理同一地址 | | | 禁止在析构函数中抛异步任务 | | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | | | 禁止在对外接口中未经判空直接使用外部传入的指针 | | | 禁止接口返回局部变量引用 | | | 禁止在信号函数中加锁 | | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | | | 禁止将同一个cpp编译在不同的so中 | | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | | | json对象在取值之前必须先判断类型，避免类型不匹配 | | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | | | readParcelable获取的对象使用前需要判空 | | | 分配和释放内存的函数需要成对出现 | | | 申请内存后异常退出前需要及时进行内存释放 | | | 内存申请前必须对内存大小进行合法性校验 | | | 内存分配后必须判断是否成功 | | | 禁止使用realloc、alloca函数 | | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | | | 禁止打印内存地址 | | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | | | 禁止对有符号整数进行位操作符运算 | | | 禁止对指针进行逻辑或位运算 | | | 循环次数如果收外部数据控制，需要检验其合法性 | | | 禁止使用内存操作类危险函数，需要使用安全函数 | | | 谨慎使用不可重入函数 | | | 必须检查安全函数的返回值，并进行正确处理 | | | 禁止仅通过TokenType类型判断绕过权限校验 | | **TDD Result**: **XTS Result**: ### 是否已执行L0用例 - [x] 已验证 - [ ] 不涉及。如不涉及，请写明理由 See merge request: openharmony/ability_ability_runtime!19754 | 3 个月前 | |
Revert "JSON统一为cJSON" Signed-off-by: 13776621730 <zhawei12@huawei-partners.com> Change-Id: I69dc57782680ece5c5d2d1416464516405d070ad | 1 年前 | |
0613_abilitykit Signed-off-by: Luobniz21 <luoyicong@h-partners.com> | 4 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
!19440 merge external_depsTOdeps into master change external_deps to deps Created-by: zhongshield1 Commit-by: zhongshield1 Merged-by: openharmony_ci Description: **IssueNo**: **Description**: **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | | | 成员变量进行赋值或创建需要排查并发 | | | 谨慎在lambda表达式中使用引用捕获 | | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | | | map\vector\list\set等stl模板类使用时需要排查并发 | | | 谨慎考虑加锁范围 | | | 在IPC通信中谨慎使用同步通信方式 | | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | | | 禁止将外部传入的裸指针在内部直接构造智能指针 | | | 禁止多个独立创建的智能指针管理同一地址 | | | 禁止在析构函数中抛异步任务 | | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | | | 禁止在对外接口中未经判空直接使用外部传入的指针 | | | 禁止接口返回局部变量引用 | | | 禁止在信号函数中加锁 | | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | | | 禁止将同一个cpp编译在不同的so中 | | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | | | json对象在取值之前必须先判断类型，避免类型不匹配 | | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | | | readParcelable获取的对象使用前需要判空 | | | 分配和释放内存的函数需要成对出现 | | | 申请内存后异常退出前需要及时进行内存释放 | | | 内存申请前必须对内存大小进行合法性校验 | | | 内存分配后必须判断是否成功 | | | 禁止使用realloc、alloca函数 | | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | | | 禁止打印内存地址 | | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | | | 禁止对有符号整数进行位操作符运算 | | | 禁止对指针进行逻辑或位运算 | | | 循环次数如果收外部数据控制，需要检验其合法性 | | | 禁止使用内存操作类危险函数，需要使用安全函数 | | | 谨慎使用不可重入函数 | | | 必须检查安全函数的返回值，并进行正确处理 | | | 禁止仅通过TokenType类型判断绕过权限校验 | | **TDD Result**: **XTS Result**: ### 是否已执行L0用例 - [ ] 已验证 - [ ] 不涉及。如不涉及，请写明理由 See merge request: openharmony/ability_ability_runtime!19440 | 4 个月前 | |
!19440 merge external_depsTOdeps into master change external_deps to deps Created-by: zhongshield1 Commit-by: zhongshield1 Merged-by: openharmony_ci Description: **IssueNo**: **Description**: **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | | | 成员变量进行赋值或创建需要排查并发 | | | 谨慎在lambda表达式中使用引用捕获 | | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | | | map\vector\list\set等stl模板类使用时需要排查并发 | | | 谨慎考虑加锁范围 | | | 在IPC通信中谨慎使用同步通信方式 | | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | | | 禁止将外部传入的裸指针在内部直接构造智能指针 | | | 禁止多个独立创建的智能指针管理同一地址 | | | 禁止在析构函数中抛异步任务 | | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | | | 禁止在对外接口中未经判空直接使用外部传入的指针 | | | 禁止接口返回局部变量引用 | | | 禁止在信号函数中加锁 | | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | | | 禁止将同一个cpp编译在不同的so中 | | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | | | json对象在取值之前必须先判断类型，避免类型不匹配 | | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | | | readParcelable获取的对象使用前需要判空 | | | 分配和释放内存的函数需要成对出现 | | | 申请内存后异常退出前需要及时进行内存释放 | | | 内存申请前必须对内存大小进行合法性校验 | | | 内存分配后必须判断是否成功 | | | 禁止使用realloc、alloca函数 | | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | | | 禁止打印内存地址 | | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | | | 禁止对有符号整数进行位操作符运算 | | | 禁止对指针进行逻辑或位运算 | | | 循环次数如果收外部数据控制，需要检验其合法性 | | | 禁止使用内存操作类危险函数，需要使用安全函数 | | | 谨慎使用不可重入函数 | | | 必须检查安全函数的返回值，并进行正确处理 | | | 禁止仅通过TokenType类型判断绕过权限校验 | | **TDD Result**: **XTS Result**: ### 是否已执行L0用例 - [ ] 已验证 - [ ] 不涉及。如不涉及，请写明理由 See merge request: openharmony/ability_ability_runtime!19440 | 4 个月前 | |
extension分身场景使用 Signed-off-by: yewei0794 <weiyejxnf@163.com> 🤖 AI[100%] 👌 AI Adopted[100%] 🧑 Human[0%] Co-authored-by: Agent Change-Id: If4bc6b09c1804c5685610f81d47ebb7a1ed9904a | 4 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
!19858 merge gj into master 告警问题 Created-by: liuzongze Commit-by: liuzongze Merged-by: openharmony_ci Description: **IssueNo**: https://gitcode.com/openharmony/ability_ability_base/issues/1038 **Description**: **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | 不涉及 | | 成员变量进行赋值或创建需要排查并发 | 不涉及 | | 谨慎在lambda表达式中使用引用捕获 | 不涉及 | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | 不涉及 | | map\vector\list\set等stl模板类使用时需要排查并发 | 不涉及 | | 谨慎考虑加锁范围 | 不涉及 | | 在IPC通信中谨慎使用同步通信方式 | 不涉及 | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | 不涉及 | | 禁止将外部传入的裸指针在内部直接构造智能指针 | 不涉及 | | 禁止多个独立创建的智能指针管理同一地址 | 不涉及 | | 禁止在析构函数中抛异步任务 | 不涉及 | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | 不涉及 | | 禁止在对外接口中未经判空直接使用外部传入的指针 | 不涉及 | | 禁止接口返回局部变量引用 | 不涉及 | | 禁止在信号函数中加锁 | 不涉及 | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | 不涉及 | | 禁止将同一个cpp编译在不同的so中 | 不涉及 | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | 不涉及 | | json对象在取值之前必须先判断类型，避免类型不匹配 | 不涉及 | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | 不涉及 | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | 不涉及 | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | 不涉及 | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | 不涉及 | | readParcelable获取的对象使用前需要判空 | 不涉及 | | 分配和释放内存的函数需要成对出现 | 不涉及 | | 申请内存后异常退出前需要及时进行内存释放 | 不涉及 | | 内存申请前必须对内存大小进行合法性校验 | 不涉及 | | 内存分配后必须判断是否成功 | 不涉及 | | 禁止使用realloc、alloca函数 | 不涉及 | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | 不涉及 | | 禁止打印内存地址 | | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | 不涉及 | | 禁止对有符号整数进行位操作符运算 | 不涉及 | | 禁止对指针进行逻辑或位运算 | 不涉及 | | 循环次数如果收外部数据控制，需要检验其合法性 | 不涉及 | | 禁止使用内存操作类危险函数，需要使用安全函数 | 不涉及 | | 谨慎使用不可重入函数 | 不涉及 | | 必须检查安全函数的返回值，并进行正确处理 | 不涉及 | | 禁止仅通过TokenType类型判断绕过权限校验 | 不涉及 | **TDD Result**:  **XTS Result**: ### 是否已执行L0用例 - [ ] 已验证 - [ ] 不涉及。如不涉及，请写明理由 See merge request: openharmony/ability_ability_runtime!19858 | 3 个月前 | |
ModularObjectExtension修改 Co-Authored-By:Agent Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> Change-Id: Id21699820868e1745648403795a99a499f76fd49 | 5 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
修复controler intercepter死循环问题 Signed-off-by: hanchen45 <wanghanchen1@huawei.com> AI[83%] Human Fixed[0%] Human[17%] AI Adopted[4%] Co-authored-by: opencode (glm-5.2) <ai@local> | 19 天前 | |
前台多用户 Signed-off-by: liuzongze@h-partners.com <liuzongze@h-partners.com> 🤖 AI[0%] 🔧 Human Fixed[0%] 🧑 Human[100%] 👌 AI Adopted[0%] Change-Id: Id36d74a384dcb331d40cc6cbbeba0bad054e6ed5 | 21 天前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
update Signed-off-by: zph000 <zhaopenghui8@huawei.com> Co-Authored-By: Agent | 2 个月前 | |
test: add testcases for dataobsmgr deathRecipient rollback and marshalling size check 1. Enhance DataObsMgrInnerExt_RegisterAndUnRegister_0300 to assert the death recipient is rolled back when registration fails with an oversized uri path, and that the observer can still register and unregister normally with a valid uri afterwards. 2. Add dataobs_mgr_changeinfo_test covering ChangeInfo::Marshalling rejection of data size over MAX_DATA_SIZE, the MAX_DATA_SIZE boundary value, and marshalling/unmarshalling round trips. Co-Authored-By: Agent Signed-off-by: weishaoxiong <weishaoxiong2@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: zcode (glm-5.3) <ai@local> Change-Id: I384a76bfbb9a3a0c6a323fb55400f2faaa4075e8 | 1 个月前 | |
修改添加用例 Signed-off-by: wangjiaqiang <wangjiaqiang11@h-partners.com> | 8 个月前 | |
修改检视意见 Signed-off-by: wangjiaqiang <wangjiaqiang11@h-partners.com> | 8 个月前 | |
fix:修复测试用例 Signed-off-by: deng-1jun <dengjun39@h-partners.com> | 3 个月前 | |
update Signed-off-by: zph000 <zhaopenghui8@huawei.com> Co-Authored-By: Agent | 2 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
update Signed-off-by: zph000 <zhaopenghui8@huawei.com> | 2 个月前 | |
update Signed-off-by: zph000 <zhaopenghui8@huawei.com> Co-Authored-By: Agent | 2 个月前 | |
fix:新增rdb权限校验打点 Signed-off-by: 邓俊 <dengjun39@huawei.com> | 11 个月前 | |
update Signed-off-by: zph000 <zhaopenghui8@huawei.com> Co-Authored-By: Agent | 2 个月前 | |
test Signed-off-by: zyr020212 <zhaoyuran@h-partners.com> | 10 个月前 | |
move ExtractResourceManager to runtime Co-Authored-By: Agent Signed-off-by: wlh2624_DS <wanglinghui6@h-partners.com> | 10 天前 | |
stoi modify Signed-off-by: hanchen45 <wanghanchen1@huawei.com> AI[92%] Human Fixed[0%] Human[8%] AI Adopted[100%] Co-authored-by: opencode (glm-5.1) <ai@local> | 1 个月前 | |
!20242 merge refactor/interceptors into master refactor: merge ability interceptors Created-by: yangxuguang-huawei Commit-by: yangxuguang-huawei Merged-by: openharmony_ci Description: **IssueNo**: https://gitcode.com/openharmony/ability_ability_runtime/issues/16009 **Description**: **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | ok | | 成员变量进行赋值或创建需要排查并发 | ok| | 谨慎在lambda表达式中使用引用捕获 | ok| | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | ok| | map\vector\list\set等stl模板类使用时需要排查并发 | ok| | 谨慎考虑加锁范围 | ok| | 在IPC通信中谨慎使用同步通信方式 | ok| | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | ok| | 禁止将外部传入的裸指针在内部直接构造智能指针 | ok| | 禁止多个独立创建的智能指针管理同一地址 | ok| | 禁止在析构函数中抛异步任务 | ok| | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | ok| | 禁止在对外接口中未经判空直接使用外部传入的指针 | ok| | 禁止接口返回局部变量引用 | ok| | 禁止在信号函数中加锁 | ok| | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | ok| | 禁止将同一个cpp编译在不同的so中 | ok| **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | ok| | json对象在取值之前必须先判断类型，避免类型不匹配 | ok| | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | ok | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | ok| | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | ok | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | ok| | readParcelable获取的对象使用前需要判空 | ok| | 分配和释放内存的函数需要成对出现 | ok| | 申请内存后异常退出前需要及时进行内存释放 | ok | | 内存申请前必须对内存大小进行合法性校验 | ok| | 内存分配后必须判断是否成功 | ok| | 禁止使用realloc、alloca函数 | ok| | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | ok| | 禁止打印内存地址 | ok| | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | ok| | 禁止对有符号整数进行位操作符运算 | ok| | 禁止对指针进行逻辑或位运算 | ok| | 循环次数如果收外部数据控制，需要检验其合法性 | ok| | 禁止使用内存操作类危险函数，需要使用安全函数 | ok| | 谨慎使用不可重入函数 | ok| | 必须检查安全函数的返回值，并进行正确处理 | ok| | 禁止仅通过TokenType类型判断绕过权限校验 | ok| **TDD Result**: 已验证OK **XTS Result**: 以验证ok ### 是否已执行L0用例 - [x] 已验证 - [ ] 不涉及。如不涉及，请写明理由 ### AI检视评分（使用本地代码检视skills扫描）: See merge request: openharmony/ability_ability_runtime!20242 | 1 个月前 | |
隐私弹窗拦截优化 Co-Authored-By: Agent Signed-off-by: 朱菲墨 <zhufeimo1@huawei.com> | 4 个月前 | |
前台多用户 Signed-off-by: liuzongze@h-partners.com <liuzongze@h-partners.com> 🤖 AI[0%] 🔧 Human Fixed[0%] 🧑 Human[100%] 👌 AI Adopted[0%] Change-Id: Id36d74a384dcb331d40cc6cbbeba0bad054e6ed5 | 21 天前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
decouple dump js Co-Authored-By: Agent Signed-off-by: huanghan18 <huanghan18@huawei.com> | 4 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
add tdd Signed-off-by: zhangzezhong <zhangzezhong8@huawei-partners.com> | 1 年前 | |
appindex适配 Signed-off-by: yijobs <yisilong@h-partners.com> | 28 天前 | |
dep_org Signed-off-by: Luobniz21 <luoyicong@h-partners.com> Change-Id: I8222c4be3fcb98ee33c2dd7f5e242261aef75e00 | 1 年前 | |
Add log and test for eventHandler Signed-off-by: wangzhen <wangzhen416@huawei.com> Change-Id: Ib9c14da7d2a18f7995217b418c3af6b0e2fe66e7 | 1 年前 | |
add snapshot report version name Signed-off-by: LYZ_ST <linyunzhi3@huawei.com> | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
update: 更新文件 exit_resident_process_manager_test.cpp Signed-off-by: AsukaSoryu <gongyuechen@huawei.com> | 11 个月前 | |
feat: support languageEnv for jsheap snapshot dump with UT coverage Add languageEnv parameter (dynamic/static/hybrid) for JsHeap snapshot dump, enabling ETS runtime to also dump heap snapshots. Remove JS-only restriction on snapshot dump path. Add UT coverage for all branches. Co-Authored-By: Agent Signed-off-by: denganliang <denganliang3@h-partners.com> Change-Id: I9784465f1def0d74165d3d1804a36a9b489fe0e0 | 3 个月前 | |
refactor: ExtensionControlInterceptor直接使用param.abilityInfo Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[47%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: Ia35030419acb29c3ba05ac8939278bce74ac44ca | 1 个月前 | |
独立编译-配合ability_runtime删除public_deps Signed-off-by: zhangzezhong <zhangzezhong8@huawei-partners.com> | 1 年前 | |
refactor: return bool from caller permission util and gate first align ExtensionPermissionsUtil::CheckCallerPermission (and the ukeyAuth helper) with the other util methods by returning bool, and move the CheckCallOtherExtensionPermission call site to the very front so the per-type caller gate runs before the SA/debug bypasses and all type-specific branches Signed-off-by: Leal <tanqingliu@h-partners.com> AI[0%] Human Fixed[0%] Human[100%] AI Adopted[0%] Change-Id: Ibd5814bc62d447ed89c09aff9073df017c672060 | 1 个月前 | |
fix meo Signed-off-by: xhz-sz <xiehuandong@huawei.com> | 8 个月前 | |
Revert "add tdd" This reverts commit b3d4ab19b19f13935f3d99b35f45136febb1081e. This reverts commit 7b2aea943f9e48d3c441029e75886bb58a86fa97. This reverts commit b9b3312538896f20e198768fcd06cf893f24cea0. This reverts commit 960acd67fb61cd37491ae079c2522582c8dbfcee. This reverts commit 12eab1efeb50d29cbb7030e9bc69b669bf7ec2db. Co-Authored-By: RenGuojun Signed-off-by: 任国军 <renguojun1@h-partners.com> AI[0%] Human Fixed[0%] Human[0%] AI Adopted[0%] | 2 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
fix: add exceptions config for profile tests including cpp with try-catch Co-Authored-By: Agent Signed-off-by: RuiChen_01 <chenrui193@huawei.com> 🤖 AI[100%] 👌 AI Adopted[100%] 🧑 Human[0%] Co-authored-by: opencode (deepseek-v4-flash-free) <ai@local> | 3 个月前 | |
add GpuHookSize for apptelemetry Signed-off-by: shead-master <wuzhenyang1@huawei.com> | 3 个月前 | |
huangshiwei4@hauwei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
UPMS适配多前台用户 Signed-off-by: duansizhao <duansizhao@huawei.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: I2de248cd9415339afd9d107ad2327fc6b6ef2ed8 | 22 天前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
fix usr Signed-off-by: x30044351 <xuzheheng2@h-partners.com> AI[95%] Human Fixed[0%] Human[5%] AI Adopted[100%] Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Change-Id: If24fe6a4daec29fa88a0a00c28e699497831383a | 11 天前 | |
move ExtractResourceManager to runtime Co-Authored-By: Agent Signed-off-by: wlh2624_DS <wanglinghui6@h-partners.com> | 10 天前 | |
test: add node_header_notice/libuv deps for napi native_engine.h after CR4184 Signed-off-by: Luobniz21 <luoyicong@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[22%] Co-authored-by: opencode (glm-5.2) <ai@local> | 5 天前 | |
隐式查询添加打点排查 Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> AI[83%] Human Fixed[0%] Human[17%] AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: I08bedffa281a5809ba54e2693c60288515c293ef | 1 个月前 | |
fix review Signed-off-by: zhangzezhong <zhangzezhong8@huawei-partners.com> | 10 个月前 | |
免安装场景/隐式启动场景/MoveMissionToFront/应用选择框和分身选择框场景 支持传递startOptions Signed-off-by: lidongrui <lidongrui3@huawei.com> Co-Authored-By: Agent 🤖 AI[4%] 🔧 Human Fixed[0%] 🧑 Human[96%] 👌 AI Adopted[100%] | 2 个月前 | |
| 1 年前 | ||
support deeplink hideFailureTipDialog Signed-off-by: wangbing <wangbing175@huawei-partners.com> | 1 年前 | |
Message: 上报进程冷冻信息 Signed-off-by: zhengdongdong12 <zhengchengkai@huawei.com> | 4 个月前 | |
hyper Signed-off-by: xialiangwei <2049500708@qq.com> | 6 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
wwqtestrunner Co-Authored-By: Agent Signed-off-by: wkljy <wangkailong6@huawei.com> Change-Id: I226c0ca7103c502e6af00855144cf55a9dffc3aa | 7 个月前 | |
dep_org Signed-off-by: Luobniz21 <luoyicong@h-partners.com> Change-Id: I8222c4be3fcb98ee33c2dd7f5e242261aef75e00 | 1 年前 | |
hyper Signed-off-by: xialiangwei <2049500708@qq.com> | 6 个月前 | |
hyper Signed-off-by: xialiangwei <2049500708@qq.com> | 6 个月前 | |
hyper Signed-off-by: xialiangwei <2049500708@qq.com> | 6 个月前 | |
hyper Signed-off-by: xialiangwei <2049500708@qq.com> | 6 个月前 | |
!20660 merge browser into master feat: add preferDefaultBrowser to StartOptions Created-by: xuzheheng Commit-by: x30044351 Merged-by: openharmony_ci Description: feat: add preferDefaultBrowser to StartOptions https://gitcode.com/openharmony/ability_ability_runtime/issues/16420 See merge request: openharmony/ability_ability_runtime!20660 | 9 天前 | |
!20722 merge FileEntity1 into master 标准化 FileEntity URI 授权 Created-by: SkyQAQ Commit-by: songkeyuan Merged-by: openharmony_ci Description: **IssueNo**: https://gitcode.com/openharmony/ability_ability_runtime/issues/16478 **Description**: 标准化 FileEntity URI 授权 **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | | | 成员变量进行赋值或创建需要排查并发 | | | 谨慎在lambda表达式中使用引用捕获 | | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | | | map\vector\list\set等stl模板类使用时需要排查并发 | | | 谨慎考虑加锁范围 | | | 在IPC通信中谨慎使用同步通信方式 | | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | | | 禁止将外部传入的裸指针在内部直接构造智能指针 | | | 禁止多个独立创建的智能指针管理同一地址 | | | 禁止在析构函数中抛异步任务 | | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | | | 禁止在对外接口中未经判空直接使用外部传入的指针 | | | 禁止接口返回局部变量引用 | | | 禁止在信号函数中加锁 | | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | | | 禁止将同一个cpp编译在不同的so中 | | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | | | json对象在取值之前必须先判断类型，避免类型不匹配 | | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | | | readParcelable获取的对象使用前需要判空 | | | 分配和释放内存的函数需要成对出现 | | | 申请内存后异常退出前需要及时进行内存释放 | | | 内存申请前必须对内存大小进行合法性校验 | | | 内存分配后必须判断是否成功 | | | 禁止使用realloc、alloca函数 | | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | | | 禁止打印内存地址 | | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | | | 禁止对有符号整数进行位操作符运算 | | | 禁止对指针进行逻辑或位运算 | | | 循环次数如果收外部数据控制，需要检验其合法性 | | | 禁止使用内存操作类危险函数，需要使用安全函数 | | | 谨慎使用不可重入函数 | | | 必须检查安全函数的返回值，并进行正确处理 | | | 禁止仅通过TokenType类型判断绕过权限校验 | | **TDD Result**: **XTS Result**: ### 是否已执行L0用例 - [ ] 已验证 - [ ] 不涉及。如不涉及，请写明理由 ### AI检视评分（使用本地代码检视skills扫描）: # 代码检视报告 — FileEntity URI 标准化授权（Round 1 / 最新提交） > 统一报告由 codecheck 工作台生成，用于门禁管控。评分/等级/门禁按 conventions.md §7–§9 计算。 > 本轮含 3 项 owner 屏蔽裁决（不计分），详见第 4 节"屏蔽项"。 --- ## 报告元数据 <!-- codecheck-report-metadata:start --> yaml codecheck_report: schema_version: "1.0" scope: "FileEntityURI授权" round: 1 commit_id: "d11ed6b09f3e3621f12064976d39ea26b964d2b9" change_id: "N/A" report_id: "d11ed6b0-R1" date: "2026-10-13" gate_decision: "approve" risk_level: "low" score: 91 dimensions_required: ["security-scanner", "logic-scanner", "input-scanner"] dimensions_executed: ["security-scanner", "logic-scanner", "input-scanner"] findings_total: 3 findings_by_severity: {P0: 0, P1: 0, P2: 1, P3: 2} gate_blockers: [] must_fix: [] followups: ["SEC-01/LOG-01/LOG-02", "SEC-04", "LOG-04"] <!-- codecheck-report-metadata:end --> --- ## 1. 门禁结论 | 项目 | 结论 | | ----------------- | -------------- | | 决策 | **approve** | | 风险等级 | 🟢 low | | 评分 | **91/100** | | 阻塞项 | 无（无 P0/P1） | | 必须修复（P0/P1） | 0 项 | | 建议跟进（P2/P3） | 3 项 | **一句话结论**：FileEntity 标准化 URI 授权的核心安全设计（file:// scheme 白名单、READ/WRITE 位掩码剥离 PERSISTABLE/PREFIX、UPMS 发起方所有权复验）成立且无权限提升；3 项原发现经 owner 裁决屏蔽（需求约定默认只读、规格无上限、提交侧信息忽略），剩余 1 项 P2（发起方 token 一致性）与 2 项 P3 登记跟进，可上库。 --- ## 2. 扣分原因 > gate_decision=approve，本节省略（仅在 block 时呈现）。 --- ## 3. 必须立即处理（P0/P1） **无。** 详情见第 6 节（无 P0/P1 项）。 --- ## 4. 建议本轮或下一补档处理（P2/P3） | ID | 优先级 | 问题 | 建议行动 | 排期 | | -------------------- | ------ | ------------------------------------------------------------ | ------------------------------------------------------------ | -------- | | SEC-01/LOG-01/LOG-02 | P2 | 发起方 token 不一致：specifyTokenId_ 被通用授权消费/重置后，FileEntity 授权威原始 token 参数（specify-token 场景分叉/静默失败） | 计算一次有效 callerTokenId（尊重 specifyTokenId_）后同时传给通用与 FileEntity 授权；或让 GrantUriPermission 返回其消费的 tokenId | 本轮 | | SEC-04 | P3 | wantLock_ 跨阻塞 UPMS IPC 持锁；:3029 锁外读 specifyTokenId_ | 锁内拷贝 want 与 token 快照后再锁外授权（GrantFileEntityUriPermission 已示范） | 下一补档 | | LOG-04 | P3 | auto paramMap = params.GetParams() 丢弃 const& 复制整份 map（4 入口各一次） | 改为 const auto ¶mMap | 下一补档 | ### 屏蔽项（owner 裁决，不计分） | ID | 原等级 | 问题 | 屏蔽理由 | | ------------- | ------ | ------------------------------------------------------------ | ------------------------------------------------------------ | | SEC-02 | P2 | flags==0（或仅非 RW 位）默认授予 READ | 需求约定：不填 flags 即默认只读（README 为最低权限，非升权），单元测试 0800 已定格 | | SEC-03/INP-01 | P2 | FileEntity URI 数组/实体数量无上限，AMS 侧放大 DoS | 需求原定无上限规格；**附跟进评估**：确认 AMS 侧无界解析 + UPMS 侧 MAX_URI_COUNT=200000 兜底是否满足健壮性要求（详见 refute_log #5/#6） | | LOG-03 | P3 | 提交信息声称"移除 ConnectAbilityLocked 意图授权逻辑"与 diff 不符 | 提交侧信息可忽略 | --- ## 5. 分维度速览 | 维度 | 结果 | 关键说明 | | ---------------- | ---------------- | ------------------------------------------------------------ | | security-scanner | 通过（无 P0/P1） | 掩码 &= (READ\|WRITE) 已剥离 PERSISTABLE(0x40)/PREFIX(0x80)，UPMS CheckUriPermission 对发起方做所有权复验，无升权/无 ownerless-grant；残余为 token 一致性（P2，计分） | | logic-scanner | 通过（无 P0/P1） | 状态/控制流正确；核心问题为 specifyTokenId_ 消费顺序（P2，计分）；params 拷贝为性能观察项（P3） | | input-scanner | 通过（无 P0/P1） | 类型混淆/授权降级均安全；URI 数量无上限经 owner 裁决屏蔽（规格无上限） | | api-scanner | N/A | 唯一变更头文件为 interfaces/inner_api/...（内部接口），无 interfaces/kits/ 公共 API、非 NAPI/ANI/C 绑定，无适用面，不计为缺失 | --- ## 6. 关键发现详情 ### [SEC-01/LOG-01/LOG-02] 发起方 token 不一致（P2, scanner=security-scanner+logic-scanner） - **位置**：services/abilitymgr/src/ability_record.cpp:3029, 3049-3057, 2966-2969；services/abilitymgr/src/mission/mission_list_manager.cpp:3387-3388 - **触发路径**：specifyTokenId_ 非零的 specify-token 启动（SA/DMS/FMS/StartAbilityAsCaller）。前台：SetSpecifyTokenId（mission_list_manager.cpp:488）→ ProcessForegroundAbility → GrantForegroundUriPermission，其中通用 GrantUriPermission 内部 tokenId = specifyTokenId_; specifyTokenId_ = 0，随后 FileEntity 循环用原始 tokenId。ByCall：GrantUriPermission() 先置 0，GrantFileEntityUriPermission() 的 specifyTokenId_ > 0 分支成死代码，回落到 PARAM_RESV_CALLER_TOKEN。 - **影响**：specify-token 场景 FileEntity 授权发起方身份与通用授权不一致，可能导致 FileEntity 授权静默失败或错归属（无权限提升，UPMS 复验 fail-closed）。 - **证据**：ability_record.cpp:2966-2969（specifyTokenId_ = 0）、:3029-3030、:3049 vs :3054-3056；uri_permission_manager_stub_impl.cpp:301/385（CheckUriPermission 复验发起方）。 - **建议**：计算一次有效 callerTokenId（尊重 specifyTokenId_）后同时传给通用与 FileEntity 授权；或让 GrantUriPermission 返回其消费的 tokenId。 ### [SEC-04] wantLock_ 跨阻塞 IPC 持锁 + 锁外读 token（P3, scanner=security-scanner） - **位置**：services/abilitymgr/src/ability_record.cpp:3040-3058, 3029 - **触发路径**：GrantForegroundUriPermission 在 wantLock_ 持有期内执行通用授权 + FileEntity 解析 + 多次同步 UPMS IPC；GrantFileEntityUriPermission 于 :3022 释放锁后在 :3029 读 specifyTokenId_。 - **影响**：锁竞争/优先级反转（无死锁证据）；uint32_t 读无撕裂风险，轻微竞态。 - **证据**：ability_record.cpp:3040（std::lock_guard guard(wantLock_)）贯穿 :3058。 - **建议**：锁内拷贝 want 与 specifyTokenId_ 快照，锁外执行全部授权（GrantFileEntityUriPermission 已示范）。 ### [LOG-04] params map 冗余拷贝（P3, scanner=logic-scanner） - **位置**：services/abilitymgr/src/insight_intent/insight_intent_execute_param.cpp:283-284 - **触发路径**：auto paramMap = params.GetParams() 因 auto 丢弃 const&，复制整份 std::map（sptr<IInterface> 浅拷贝/引用计数自增），四个入口每次各触发。 - **影响**：无正确性缺陷；高频入口下轻微性能/引用计数开销。 - **证据**：insight_intent_execute_param.cpp:283-284。 - **建议**：改为 const auto ¶mMap = params.GetParams();。 See merge request: openharmony/ability_ability_runtime!20722 | 4 天前 | |
Batch insight intent DB write and optimize boot Change single-intent DB writes to batch writes across the insight intent persistence stack to reduce per-row lock contention and SQL round-trips, and drop the in-memory generic-info cache to optimize boot: - InsightIntentRdbDataMgr: add BatchInsertData using RdbStore::BatchInsert - InsightRdbStorageMgr: add SaveStorageInsightIntentDataBatch and InsightIntentSaveParam - InsightIntentDbCache: add SaveBatchInsightIntentTotalInfo, remove the in-memory intentGenericInfos_ and load bundle version map on demand - InsightIntentEventMgr and InsightIntentSysEventReceiver collect all modules per bundle, then save once in a batch - Bump MAX_INTENT_SIZE from 10000 to 100000 - Add unit tests for the batch save interfaces Signed-off-by: RuiChen_01 <chenrui193@huawei.com> Co-Authored-By: Agent Change-Id: I3365b884e2e60581236980e727e09e0579f3ae76 | 29 天前 | |
fix: add exceptions config for profile tests including cpp with try-catch Co-Authored-By: Agent Signed-off-by: RuiChen_01 <chenrui193@huawei.com> 🤖 AI[100%] 👌 AI Adopted[100%] 🧑 Human[0%] Co-authored-by: opencode (deepseek-v4-flash-free) <ai@local> | 3 个月前 | |
Batch insight intent DB write and optimize boot Change single-intent DB writes to batch writes across the insight intent persistence stack to reduce per-row lock contention and SQL round-trips, and drop the in-memory generic-info cache to optimize boot: - InsightIntentRdbDataMgr: add BatchInsertData using RdbStore::BatchInsert - InsightRdbStorageMgr: add SaveStorageInsightIntentDataBatch and InsightIntentSaveParam - InsightIntentDbCache: add SaveBatchInsightIntentTotalInfo, remove the in-memory intentGenericInfos_ and load bundle version map on demand - InsightIntentEventMgr and InsightIntentSysEventReceiver collect all modules per bundle, then save once in a batch - Bump MAX_INTENT_SIZE from 10000 to 100000 - Add unit tests for the batch save interfaces Signed-off-by: RuiChen_01 <chenrui193@huawei.com> Co-Authored-By: Agent Change-Id: I3365b884e2e60581236980e727e09e0579f3ae76 | 29 天前 | |
Batch insight intent DB write and optimize boot Change single-intent DB writes to batch writes across the insight intent persistence stack to reduce per-row lock contention and SQL round-trips, and drop the in-memory generic-info cache to optimize boot: - InsightIntentRdbDataMgr: add BatchInsertData using RdbStore::BatchInsert - InsightRdbStorageMgr: add SaveStorageInsightIntentDataBatch and InsightIntentSaveParam - InsightIntentDbCache: add SaveBatchInsightIntentTotalInfo, remove the in-memory intentGenericInfos_ and load bundle version map on demand - InsightIntentEventMgr and InsightIntentSysEventReceiver collect all modules per bundle, then save once in a batch - Bump MAX_INTENT_SIZE from 10000 to 100000 - Add unit tests for the batch save interfaces Signed-off-by: RuiChen_01 <chenrui193@huawei.com> Co-Authored-By: Agent Change-Id: I3365b884e2e60581236980e727e09e0579f3ae76 | 29 天前 | |
test: add node_header_notice/libuv deps for napi native_engine.h after CR4184 Signed-off-by: Luobniz21 <luoyicong@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[22%] Co-authored-by: opencode (glm-5.2) <ai@local> | 5 天前 | |
test: add node_header_notice/libuv deps for napi native_engine.h after CR4184 Signed-off-by: Luobniz21 <luoyicong@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[22%] Co-authored-by: opencode (glm-5.2) <ai@local> | 5 天前 | |
Add node:node_header_notice to BUILD.gn for napi deps decoupling Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> AI[77%] Human Fixed[0%] Human[23%] AI Adopted[90%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: Ia6bf4fc5b7a0fce259f4a54d29a70d12b995b62f | 9 天前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
独立编译-配合ability_runtime删除public_deps Signed-off-by: zhangzezhong <zhangzezhong8@huawei-partners.com> | 1 年前 | |
test: add node_header_notice/libuv deps for napi native_engine.h after CR4184 Signed-off-by: Luobniz21 <luoyicong@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[22%] Co-authored-by: opencode (glm-5.2) <ai@local> | 5 天前 | |
test: add node_header_notice/libuv deps for napi native_engine.h after CR4184 Signed-off-by: Luobniz21 <luoyicong@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[22%] Co-authored-by: opencode (glm-5.2) <ai@local> | 5 天前 | |
Add node:node_header_notice to BUILD.gn for napi deps decoupling Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> AI[77%] Human Fixed[0%] Human[23%] AI Adopted[90%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: Ia6bf4fc5b7a0fce259f4a54d29a70d12b995b62f | 9 天前 | |
tdd add Co-Authored-By: agent Signed-off-by: wlh2624_DS <1968860844@qq.com> | 2 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
test: add node_header_notice/libuv deps for napi native_engine.h after CR4184 Signed-off-by: Luobniz21 <luoyicong@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[22%] Co-authored-by: opencode (glm-5.2) <ai@local> | 5 天前 | |
test: add node_header_notice/libuv deps for napi native_engine.h after CR4184 Signed-off-by: Luobniz21 <luoyicong@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[22%] Co-authored-by: opencode (glm-5.2) <ai@local> | 5 天前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
test: add node_header_notice/libuv deps for napi native_engine.h after CR4184 Signed-off-by: Luobniz21 <luoyicong@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[22%] Co-authored-by: opencode (glm-5.2) <ai@local> | 5 天前 | |
test: add node_header_notice/libuv deps for napi native_engine.h after CR4184 Signed-off-by: Luobniz21 <luoyicong@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[22%] Co-authored-by: opencode (glm-5.2) <ai@local> | 5 天前 | |
修复srcPath越界问题 Co-Authored-By: Agent Signed-off-by: 任国军 <renguojun1@h-partners.com> 🤖 AI[100%] 🔧 Human Fixed[0%] 🧑 Human[0%] 👌 AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> | 2 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
Introduce json_safe_util for safe JSON parse/dump Add a shared json_safe_util helper with SafeParse (size + depth limit) and SafeDump overloads (bool + string), sink the implementation into the runtime_utils library, and replace the unsafe json parse/dump calls across insight_intent with SafeParse/SafeDump. Remove the now-unused intent_json_safe_get helper and its unit test. Signed-off-by: RuiChen_01 <chenrui193@huawei.com> Co-Authored-By: Agent Change-Id: I8d3fe8a098f81c24cbe0506da12c8a05467f212a | 30 天前 | |
Extension解锁前拦截支持blockList Signed-off-by: zhangyuhang72 <zhangyuhang72@huawei.com> Change-Id: I52447cdd3bc1cbe2ae67f4ea914b897f89f02213 | 1 年前 | |
aa Force-Stop补充-u参数 Signed-off-by: SKY2001 <songtianyu10@huawei.com> AI[86%] Human Fixed[0%] Human[14%] AI Adopted[74%] Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> | 5 天前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
refactor: merge ability interceptors Signed-off-by: yangxuguang-huawei <yangxuguang3@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: pi (glm-5.3) <ai@local> Change-Id: I943ac876f599828e7275e7493052a1a2aff8a5a2 | 1 个月前 | |
!20530 merge insight_intent_json_safe into master Introduce json_safe_util for safe JSON parse/dump Created-by: RuiChen_01 Commit-by: openharmony_ci Merged-by: openharmony_ci Description: Close #16295 ## Summary Add a shared json_safe_util helper with SafeParse (size + depth limit) and SafeDump overloads (bool + string), sink the implementation into the runtime_utils library, and replace unsafe json parse/dump across insight_intent with SafeParse/SafeDump. ## Detail - Add utils/global/common json_safe_util.h/.cpp (SafeParse + SafeDump overloads), compiled into runtime_utils - Replace nlohmann json::parse/dump and intent_json_safe_get usage across insight_intent with SafeParse/SafeDump - Remove intent_json_safe_get.h/.cpp and insight_intent_safe_get_test - runtime_utils now built with use_exceptions; add runtime_utils deps to abilityms (public_deps), innerkits and affected test/fuzztest targets - Add json_safe_util_test Signed-off-by: RuiChen_01 <chenrui193@huawei.com> Co-Authored-By: Agent See merge request: openharmony/ability_ability_runtime!20530 | 29 天前 | |
提供UIAbility获取开始启动时间的接口 new Signed-off-by: lidongrui <lidongrui3@huawei.com> Change-Id: I7f6f1363b0ccd137fa952fea938af148ffc603da | 9 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
feat: add StartSelfUIAbilityWithPidResult Signed-off-by: Nathan Yang <yangxuguang3@huawei.com> | 1 年前 | |
TDD: StartSelfUIAbilityWithPidResult Signed-off-by: Nathan Yang <yangxuguang3@huawei.com> | 1 年前 | |
feat: restrict reusePid to IN_PROCESS mode and add GetValidAppRunningRecordByPid - Only set reusePid when MODULAR_OBJECT IN_PROCESS mode (IsInProcess flag) - Add isInProcess flag to BaseExtensionRecord, set in SetupNewRecord - Add GetValidAppRunningRecordByPid for PID lookup with validity check - Revert CheckAppRunningRecordIsExist to original (no reusePid coupling) - Remove IsProcessMatchedByFieldOrPid, restore inline matching logic - Move reusePid check before plugin/normal flow in LoadAbility - Add TDD tests for SetExtensionLoadParam, GetValidAppRunningRecordByPid, and LoadAbility reusePid path Co-Authored-By: Agent 🤖 AI[98%] 👌 AI Adopted[98%] 🧑 Human[2%] Co-authored-by: claude (glm-5.1) <ai@local> Signed-off-by: yewei0794 <weiyejxnf@163.com> Change-Id: I00c745f043dbcbbf2879a4f10398825f589049bf | 4 个月前 | |
aa命令新增权限 Signed-off-by: hanchen45 <wanghanchen1@huawei.com> | 1 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
add mission move mission to background Signed-off-by: unknown <sijunjie@huawei.com> | 1 年前 | |
add mission move mission to background Signed-off-by: unknown <sijunjie@huawei.com> | 1 年前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
安全告警修复 Signed-off-by: duansizhao <duansizhao@huawei.com> Change-Id: Ia35a84a39e0d6f1d2addb32b29f339392ce374c4 | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
dynamic load image_native Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[98%] 👌 AI Adopted[98%] 🧑 Human[2%] 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] Change-Id: I0f5ee21f0ea499d0abc9a0690249f040cb715805 | 4 个月前 | |
问题修复 Signed-off-by: xialiangwei <xialiangwei1@huawei.com> Change-Id: Id500006a4cd6ac19eff4298e3c2b1ce40f99bde5 | 6 天前 | |
utils_0820 Signed-off-by: Luobniz21 <luoyicong@h-partners.com> 🤖 AI[100%] 🔧 Human Fixed[0%] 🧑 Human[0%] 👌 AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> | 1 个月前 | |
utils_0820 Signed-off-by: Luobniz21 <luoyicong@h-partners.com> 🤖 AI[100%] 🔧 Human Fixed[0%] 🧑 Human[0%] 👌 AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> | 1 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
开发者模式拦截Dialog_多语言翻译适配 Signed-off-by: lidongrui <lidongrui3@huawei.com> Co-Authored-By: Agent | 3 个月前 | |
Connect ModularObjectExtension Co-Authored-By:Agent Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> Change-Id: I142c0ab148217c74d34403cb48fc67f9e87e1e9b | 5 个月前 | |
update: 更新文件 modular_object_connect_test.cpp Signed-off-by: yijobs <yisilong@h-partners.com> | 26 天前 | |
feat: add ModularObjectExtension connect management Add service connect management for ModularObject extension type, including service key generation, config query from Want params, service record lifecycle management, and thread key generation. Changes: - Add ModularObject connect logic in AbilityConnectManager - Add caller bundle name validation in AbilityManagerService - Fix nullptr binding in ExtensionAbilityThread callback - Add unit tests for ModularObject connect functions Co-Authored-By: Agent Signed-off-by: yewei0794 <weiyejxnf@163.com> Change-Id: I6766a35db26f8c7bb29f72adcceef497cc7c3cdf | 5 个月前 | |
feat: add ModularObjectExtension connect management Add service connect management for ModularObject extension type, including service key generation, config query from Want params, service record lifecycle management, and thread key generation. Changes: - Add ModularObject connect logic in AbilityConnectManager - Add caller bundle name validation in AbilityManagerService - Fix nullptr binding in ExtensionAbilityThread callback - Add unit tests for ModularObject connect functions Co-Authored-By: Agent Signed-off-by: yewei0794 <weiyejxnf@163.com> Change-Id: I6766a35db26f8c7bb29f72adcceef497cc7c3cdf | 5 个月前 | |
feat: add ModularObjectExtension connect management Add service connect management for ModularObject extension type, including service key generation, config query from Want params, service record lifecycle management, and thread key generation. Changes: - Add ModularObject connect logic in AbilityConnectManager - Add caller bundle name validation in AbilityManagerService - Fix nullptr binding in ExtensionAbilityThread callback - Add unit tests for ModularObject connect functions Co-Authored-By: Agent Signed-off-by: yewei0794 <weiyejxnf@163.com> Change-Id: I6766a35db26f8c7bb29f72adcceef497cc7c3cdf | 5 个月前 | |
pc nas stub Co-Authored-By: Shangben Signed-off-by: renjh5496 <renjianhao@h-partners.com> | 5 个月前 | |
pc nas stub Co-Authored-By: Shangben Signed-off-by: renjh5496 <renjianhao@h-partners.com> | 5 个月前 | |
fix modular object review Co-Authored-By: ya Signed-off-by: renjh5496 <renjianhao@h-partners.com> | 2 个月前 | |
fix modular object review Co-Authored-By: ya Signed-off-by: renjh5496 <renjianhao@h-partners.com> | 2 个月前 | |
utils_0820 Signed-off-by: Luobniz21 <luoyicong@h-partners.com> 🤖 AI[100%] 🔧 Human Fixed[0%] 🧑 Human[0%] 👌 AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> | 1 个月前 | |
数据库BOPD模式裁剪 Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> AI[87%] Human Fixed[0%] Human[13%] AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: I5c1da1161ab9bb59aff8a9dd45284fed1ae602eb | 2 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
aa Force-Stop补充-u参数 Signed-off-by: SKY2001 <songtianyu10@huawei.com> AI[86%] Human Fixed[0%] Human[14%] AI Adopted[74%] Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> | 5 天前 | |
ams adaption for ffrt Signed-off-by: darkness33 <zhongyan27@huawei.com> | 2 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
support static plugin hsp Co-Authored-By: Agent Signed-off-by: wlh2624_DS <1968860844@qq.com> | 4 个月前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
run_time独立编译 Signed-off-by: zhengzhuolan <zhengzhuolan@huawei-partners.com> | 10 个月前 | |
uri需求优化, Co-Authored-By: Agent Signed-off-by: songkeyuan <songkeyuan@huawei.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[99%] Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> | 20 天前 | |
fix ndk interface Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 5 个月前 | |
补充查询子进程的接口 Signed-off-by: SKY2001 <songtianyu10@huawei.com> AI[47%] Human Fixed[0%] Human[53%] AI Adopted[100%] | 1 个月前 | |
Code fix Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> Change-Id: Ib26452f500d0973f77264d08566f818a8102266c | 5 个月前 | |
update GetPkgContextInfoListMap Signed-off-by: zexin_c <chenzexin14@huawei.com> | 8 个月前 | |
code review Signed-off-by: wangzhen <wangzhen416@huawei.com> | 6 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
add dep Signed-off-by: zexin_c <chenzexin14@huawei.com> | 9 个月前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
Replace skill_path_validator with shared IsPathValid in runtime_utils Move the skill path checks into a shared IsPathValid(path) helper under utils/global/common (runtime_utils), modeled after BundleUtil::IsFileNameValid: reject empty, "..", traversal combinations, backslash, embedded NUL and control characters. The old charset whitelist, the procfs/devfs rejection and the absolute/relative direction check are intentionally dropped: no consumer forms a filesystem path from the direction-sensitive inputs (scriptPath is a basename match key, moduleName is a hap-internal key, and a relative hapPath fails safely at the extractor). Remove skill_path_validator and rewrite its test as path_valid_test. Co-Authored-By: Agent AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: claude (glm-5.3) <ai@local> Change-Id: Ic9c1aa012c5a537a2af8111569613f5e05fd53c4 Signed-off-by: RuiChen_01 <chenrui193@huawei.com> | 1 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
fix PendingWantManagerDumpTest Signed-off-by: zyr020212 <zhaoyuran@h-partners.com> | 8 个月前 | |
!20614 merge forground into master 前台多用户 Created-by: liuzongze Commit-by: liuzongze@h-partners.com Merged-by: openharmony_ci Description: **IssueNo**: https://gitcode.com/openharmony/ability_ability_runtime/issues/16378 **Description**: **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | 不涉及 | | 成员变量进行赋值或创建需要排查并发 | 不涉及 | | 谨慎在lambda表达式中使用引用捕获 | 不涉及 | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | 不涉及 | | map\vector\list\set等stl模板类使用时需要排查并发 | 不涉及 | | 谨慎考虑加锁范围 | 不涉及 | | 在IPC通信中谨慎使用同步通信方式 | 不涉及 | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | 不涉及 | | 禁止将外部传入的裸指针在内部直接构造智能指针 | 不涉及 | | 禁止多个独立创建的智能指针管理同一地址 | 不涉及 | | 禁止在析构函数中抛异步任务 | 不涉及 | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | 不涉及 | | 禁止在对外接口中未经判空直接使用外部传入的指针 | 不涉及 | | 禁止接口返回局部变量引用 | 不涉及 | | 禁止在信号函数中加锁 | 不涉及 | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | 不涉及 | | 禁止将同一个cpp编译在不同的so中 | 不涉及 | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | 不涉及 | | json对象在取值之前必须先判断类型，避免类型不匹配 | 不涉及 | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | 不涉及 | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | 不涉及 | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | 不涉及 | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | 不涉及 | | readParcelable获取的对象使用前需要判空 | 不涉及 | | 分配和释放内存的函数需要成对出现 | 不涉及 | | 申请内存后异常退出前需要及时进行内存释放 | 不涉及 | | 内存申请前必须对内存大小进行合法性校验 | 不涉及 | | 内存分配后必须判断是否成功 | 不涉及 | | 禁止使用realloc、alloca函数 | 不涉及 | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | 不涉及 | | 禁止打印内存地址 | 不涉及 | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | 不涉及 | | 禁止对有符号整数进行位操作符运算 | 不涉及 | | 禁止对指针进行逻辑或位运算 | 不涉及 | | 循环次数如果收外部数据控制，需要检验其合法性 | 不涉及 | | 禁止使用内存操作类危险函数，需要使用安全函数 | 不涉及 | | 谨慎使用不可重入函数 | 不涉及 | | 必须检查安全函数的返回值，并进行正确处理 | 不涉及 | | 禁止仅通过TokenType类型判断绕过权限校验 | 不涉及 | **TDD Result**:  **XTS Result**: ### 是否已执行L0用例 - [x] 已验证 - [ ] 不涉及。如不涉及，请写明理由 ### AI检视评分（使用本地代码检视skills扫描）: See merge request: openharmony/ability_ability_runtime!20614 | 12 天前 | |
WantAgent实例清理, Co-Authored-By: Agent Signed-off-by: songkeyuan <songkeyuan@huawei.com> AI[99%] Human Fixed[0%] Human[1%] AI Adopted[77%] Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> | 28 天前 | |
WantAgent实例清理, Co-Authored-By: Agent Signed-off-by: songkeyuan <songkeyuan@huawei.com> AI[99%] Human Fixed[0%] Human[1%] AI Adopted[77%] Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: claude (glm-5.3) <ai@local> Co-authored-by: opencode (deepseek-v4-flash) <ai@local> Co-authored-by: opencode (deepseek-v4-pro) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> | 28 天前 | |
针对CLI-ohos-aa对LaunchAbility的invisible放行 Signed-off-by: SKY2001 <songtianyu10@huawei.com> Co-Authored-By: Agent | 4 个月前 | |
独立编译-配合ability_runtime删除public_deps Signed-off-by: zhangzezhong <zhangzezhong8@huawei-partners.com> | 1 年前 | |
独立编译-配合ability_runtime删除public_deps Signed-off-by: zhangzezhong <zhangzezhong8@huawei-partners.com> | 1 年前 | |
dynamic load image_native Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[98%] 👌 AI Adopted[98%] 🧑 Human[2%] 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] Change-Id: I0f5ee21f0ea499d0abc9a0690249f040cb715805 | 4 个月前 | |
appindex适配 Signed-off-by: yijobs <yisilong@h-partners.com> | 28 天前 | |
add tdd Signed-off-by: renjianhao <renjianhao@h-partners.com> | 8 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
refactor(want_agent): remove empty WantSenderStub shell PendingWantRecord now inherits IRemoteStub<IWantSender> directly. WantSenderStub exported no symbols of its own and carried no logic, so drop it along with its dedicated unittest, fuzzer and map entry. Co-Authored-By: Agent AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: claude (glm-5.3) <ai@local> Change-Id: Ie3012a58d4bf51a52a03858974feefd0f4792e1e Signed-off-by: RuiChen_01 <chenrui193@huawei.com> | 1 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
quickfix质量加固 Signed-off-by: renguojun <renguojun1@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[10%] Co-authored-by: opencode (glm-5.2) <ai@local> | 6 天前 | |
ModularObjectExtension修改 Co-Authored-By:Agent Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> Change-Id: Id21699820868e1745648403795a99a499f76fd49 | 5 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Code fix Signed-off-by: wangzhen <wangzhen416@huawei.com> AI[33%] Human Fixed[0%] Human[67%] AI Adopted[10%] Change-Id: I9ab8a177bb47a5fb43a160dcb0ffa6f31e6a7ba5 | 18 天前 | |
fix tdd Signed-off-by: yang.yang <hy05190134@qq.com> Change-Id: Ia37e3b82eabef75e68448244c4085dd65843c431 | 1 年前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
huangshiwei4@huawei.com Signed-off-by: huangshiwei <huangshiwei4@huawei.com> | 1 年前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
游戏预启动撞车场景新增上报report RSS事件 Signed-off-by: lidongrui <lidongrui3@huawei.com> Co-Authored-By: Agent | 4 个月前 | |
sync resident process DB with install_list_capability.json on OTA Signed-off-by: zhangyuhang72 <zhangyuhang72@h-partners.com> AI[87%] Human Fixed[0%] Human[13%] AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local> Change-Id: I1f41c5700d9d3b6432bf48ad74f46efdaa25d8ec | 24 天前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
新增驾驶安全SA注册拦截器接口 Signed-off-by: zhangzezhong <zhangzezhong8@huawei-partners.com> | 1 年前 | |
Decouple extensions Signed-off-by: xhz-sz <xiehuandong@huawei.com> Decouple extensions Signed-off-by: xhz-sz <xiehuandong@huawei.com> Decouple extensions Signed-off-by: xhz-sz <xiehuandong@huawei.com> Decouple extensions Signed-off-by: xhz-sz <xiehuandong@huawei.com> Decouple extensions Signed-off-by: xhz-sz <xiehuandong@huawei.com> Decouple extensions Signed-off-by: xhz-sz <xiehuandong@huawei.com> Decouple extensions Signed-off-by: xhz-sz <xiehuandong@huawei.com> Decouple extensions Signed-off-by: xhz-sz <xiehuandong@huawei.com> Decouple extensions Signed-off-by: xhz-sz <xiehuandong@huawei.com> Decouple extensions Signed-off-by: xhz-sz <xiehuandong@huawei.com> Decouple extensions Signed-off-by: xhz-sz <xiehuandong@huawei.com> Decouple extensions Signed-off-by: xhz-sz <xiehuandong@huawei.com> Decouple extensions Signed-off-by: xhz-sz <xiehuandong@huawei.com> Decouple extensions Signed-off-by: xhz-sz <xiehuandong@huawei.com> Decouple extensions Signed-off-by: xhz-sz <xiehuandong@huawei.com> Decouple extensions Signed-off-by: xhz-sz <xiehuandong@huawei.com> Decouple extensions Signed-off-by: xhz-sz <xiehuandong@huawei.com> Decouple extensions Signed-off-by: xhz-sz <xiehuandong@huawei.com> Decouple extensions Signed-off-by: xhz-sz <xiehuandong@huawei.com> Decouple extensions Signed-off-by: xhz-sz <xiehuandong@huawei.com> | 9 个月前 | |
test: add node_header_notice/libuv deps for napi native_engine.h after CR4184 Signed-off-by: Luobniz21 <luoyicong@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[22%] Co-authored-by: opencode (glm-5.2) <ai@local> | 5 天前 | |
add interceptor test Signed-off-by: hanchen45 <wanghanchen1@huawei.com> AI[0%] Human Fixed[0%] Human[100%] AI Adopted[0%] | 1 个月前 | |
dep_org Signed-off-by: Luobniz21 <luoyicong@h-partners.com> Change-Id: I8222c4be3fcb98ee33c2dd7f5e242261aef75e00 | 1 年前 | |
dep_org Signed-off-by: Luobniz21 <luoyicong@h-partners.com> Change-Id: I8222c4be3fcb98ee33c2dd7f5e242261aef75e00 | 1 年前 | |
pc claw支持拉起分身应用 Signed-off-by: lidongrui <lidongrui3@huawei.com> Co-Authored-By: Agent | 3 个月前 | |
refactor: interceptors Signed-off-by: yangxuguang-huawei <yangxuguang3@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[80%] Co-authored-by: pi (glm-5.3) <ai@local> Change-Id: I9b5ac44dfb603da53b874ffe975f62a7ec10f462 | 1 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
getTopAbility修改 Signed-off-by: zhu-feimo <zhufeimo1@huawei.com> AI[45%] Human Fixed[0%] Human[55%] AI Adopted[100%] | 1 个月前 | |
Revert "ability_runtime: align srms service test defines with production build" This reverts commit 1d41fee548e6a26776c24ddb0e870d0254ed3a68. Signed-off-by: RuiChen_01 <chenrui193@huawei.com> | 1 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
feat: 意图与 skill 执行链路透传 toolCallId 支持调用方传入 toolCallId，并在意图侧 InsightIntentContext 和 skill 侧 ArkTSScriptInfo 中读取对应标识。 - 意图路径覆盖 insightIntentDriver.execute 与 functionManager.invokeFunction 调用配置类及 @InsightIntentEntry 类意图。Driver 字段经 AMS 写入保留键， FunctionManager 复用配套入口注入的 WantParams，再由执行器构建 Context。 - skill 路径从 execOptions.toolCallId 装填 SkillExecuteRequest，经 AMS IPC 尾字段和独立 Want 参数键，传入 UIAbility、ServiceExtension 的脚本参数。 标识与同名业务参数独立传递；未传或为空时不设置应用侧属性。 - 保留两条路径的透传、缺省值、旧 Parcel、IPC 兼容及参数隔离测试。 依赖配套入口提供 InvokeOptions/ExecOptions 的 toolCallId 解析和传输。 验证：改动完整性、差异格式及配套补丁双向叠加检查通过。当前缺少完整 OpenHarmony 构建环境，编译、UT 和设备端到端测试待补跑。 Signed-off-by: zexin_c <chenzexin14@huawei.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[99%] Co-authored-by: opencode (qwen3.8-max) <ai@local> | 25 天前 | |
add tdd Signed-off-by: xhz-sz <xiehuandong@huawei.com> Co-Authored-By: Agent | 5 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
update: 更新文件 start_ability_utils_test.cpp Signed-off-by: yijobs <yisilong@h-partners.com> | 26 天前 | |
refactor: merge ability interceptors Signed-off-by: yangxuguang-huawei <yangxuguang3@h-partners.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: pi (glm-5.3) <ai@local> Change-Id: I943ac876f599828e7275e7493052a1a2aff8a5a2 | 1 个月前 | |
tdd: coverage Signed-off-by: yangxuguang-huawei <yangxuguang3@huawei.com> | 1 年前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
fix usr Signed-off-by: x30044351 <xuzheheng2@h-partners.com> AI[95%] Human Fixed[0%] Human[5%] AI Adopted[100%] Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Change-Id: If24fe6a4daec29fa88a0a00c28e699497831383a | 11 天前 | |
add ut Signed-off-by: wendel <yuwenze1@huawei.com> | 9 个月前 | |
support dms intent Co-Authored-By: ya Signed-off-by: renjh5496 <renjianhao@h-partners.com> | 5 个月前 | |
FaultLogExtensionAbility支持分身 Signed-off-by: Cooper <zhouquan63@h-partners.com> | 1 年前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
deviceId Anonymize Co-Authored-By: Agent Signed-off-by: duansizhao <duansizhao@huawei.com> Change-Id: I9f405c91cfccd42909750e3ea5f9b5e8b68ae8d1 | 5 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
!20483 merge max into master WantAgent实例清理 Created-by: SkyQAQ Commit-by: songkeyuan Merged-by: openharmony_ci Description: **IssueNo**: https://gitcode.com/openharmony/ability_ability_runtime/issues/16249 **Description**: WantAgent实例清理 **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | | | 成员变量进行赋值或创建需要排查并发 | | | 谨慎在lambda表达式中使用引用捕获 | | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | | | map\vector\list\set等stl模板类使用时需要排查并发 | | | 谨慎考虑加锁范围 | | | 在IPC通信中谨慎使用同步通信方式 | | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | | | 禁止将外部传入的裸指针在内部直接构造智能指针 | | | 禁止多个独立创建的智能指针管理同一地址 | | | 禁止在析构函数中抛异步任务 | | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | | | 禁止在对外接口中未经判空直接使用外部传入的指针 | | | 禁止接口返回局部变量引用 | | | 禁止在信号函数中加锁 | | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | | | 禁止将同一个cpp编译在不同的so中 | | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | | | json对象在取值之前必须先判断类型，避免类型不匹配 | | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | | | readParcelable获取的对象使用前需要判空 | | | 分配和释放内存的函数需要成对出现 | | | 申请内存后异常退出前需要及时进行内存释放 | | | 内存申请前必须对内存大小进行合法性校验 | | | 内存分配后必须判断是否成功 | | | 禁止使用realloc、alloca函数 | | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | | | 禁止打印内存地址 | | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | | | 禁止对有符号整数进行位操作符运算 | | | 禁止对指针进行逻辑或位运算 | | | 循环次数如果收外部数据控制，需要检验其合法性 | | | 禁止使用内存操作类危险函数，需要使用安全函数 | | | 谨慎使用不可重入函数 | | | 必须检查安全函数的返回值，并进行正确处理 | | | 禁止仅通过TokenType类型判断绕过权限校验 | | **TDD Result**: **XTS Result**: ### 是否已执行L0用例 - [ ] 已验证 - [ ] 不涉及。如不涉及，请写明理由 ### AI检视评分（使用本地代码检视skills扫描）: # 代码检视报告 — WantAgent实例清理 (commit 26af22d8)（Round 2） > 统一报告由 codecheck 工作台生成，用于门禁管控。检视范围：commit 26af22d8f430c9343eb305ec8824f77b5946c1d4（subject: "WantAgent实例清理"）。 > > **Round 2 变更说明**：相对 Round 1（commit 8723207），本提交仅含两处差异——① DeleteUnsharedRecordsOnDeath 中 ReduceWantAgentNumber(key) 改为 HandleReduceWantAgentNumber(key)（即修复 Round 1 的 P1 项 LOG-01）；② 移除 ability_manager_proxy_test.cpp 中多余的 #include "pending_want_record.h"。其余代码与 Round 1 完全一致。 > > **P3 屏蔽说明**：应门禁要求，本轮屏蔽 P3 级问题（SEC-02 / SEC-03 / LOG-03），不计入 findings、评分与门禁。被屏蔽项仅在文末附录列出备查，不参与扣分。 --- ## 报告元数据 <!-- codecheck-report-metadata:start --> yaml codecheck_report: schema_version: "1.0" scope: "WantAgent实例清理 (commit 26af22d8)" round: 2 commit_id: "26af22d8f430c9343eb305ec8824f77b5946c1d4" change_id: "N/A" report_id: "26af22d8-R2" date: "2026-09-20" gate_decision: "approve" risk_level: "low" score: 90 dimensions_required: ["security-scanner", "logic-scanner", "input-scanner"] dimensions_executed: ["security-scanner", "logic-scanner", "input-scanner"] findings_total: 2 findings_by_severity: {P0: 0, P1: 0, P2: 2, P3: 0} gate_blockers: [] must_fix: [] followups: ["SEC-01", "LOG-02"] <!-- codecheck-report-metadata:end --> --- ## 1. 门禁结论 | 项目 | 结论 | | ----------------- | ------------------------------------ | | 决策 | **approve** | | 风险等级 | 🟢 low | | 评分 | **90/100** | | 阻塞项 | 无 P0 | | 必须修复（P0/P1） | 0 项（Round 1 的 LOG-01 已修复） | | 建议跟进（P2/P3） | 2 项（P2）；3 项 P3 已按门禁要求屏蔽 | **一句话结论**：Round 1 唯一的 P1 缺陷（死亡清理路径 WantAgent 计数只增不减）已被正确修复——改为直接调用 HandleReduceWantAgentNumber，不再依赖后台线程中不存在的 IPC 调用上下文；删除路径已知记录满足 GetIsThirdParty()==true，直接递减与创建时 AddWantAgentNumber 对称，无双重递减、无新增锁序风险。屏蔽 P3 后剩余 2 项 P2 均为建议跟进项，不阻塞上库。 --- ## 2. 扣分原因 > （仅 gate_decision=block 时呈现；本轮为 approve，本节省略。） --- ## 3. 必须立即处理（P0/P1） **无。** > Round 1 的 LOG-01（P1）已在本提交修复：services/abilitymgr/src/pending_want_manager.cpp:554 由 ReduceWantAgentNumber(key) 改为 HandleReduceWantAgentNumber(key)。修复正确性确认如下： > > - DeleteUnsharedRecordsOnDeath 仅处理 GetIsThirdParty()==true 的记录，该记录在创建时（GetWantSenderLocked 三方分支）经 AddWantAgentNumber 计数（pending_want_manager.cpp:235），故直接递减是计数对称且正确的。 > - HandleReduceWantAgentNumber 为 PendingWantManager 私有成员（pending_want_manager.h:200），调用合法。 > - 死亡清理路径持有 mutex_，HandleReduceWantAgentNumber 内部取 countMutex_；与既有 Add/ReduceWantAgentNumber 调用点（GetWantSenderLocked/CancelWantSenderLocked）锁序一致（mutex_ → countMutex_），无逆序，无死锁。 > - 无双重递减：记录一经 death 路径 erase，不再可能走 CancelWantSenderLocked → ReduceWantAgentNumber。 --- ## 4. 建议本轮或下一补档处理（P2/P3） | ID | 优先级 | 问题 | 建议行动 | 排期 | | ------ | ------ | ------------------------------------------------------------ | ------------------------------------------------------------ | -------------- | | SEC-01 | P2 | HandleWantAgentAppDied 延迟任务 lambda 捕获裸 this，且 subManagersHelper_ 只在提交前判空、任务体内未判定 → 服务析构/成员置空时存在 UAF/空解引用隐患 | 与同文件 InitWantAgentAppStateObserver 保持一致的 weak_from_this() 保护；任务内重新判空 subManagersHelper_ | 建议本轮一并修 | | LOG-02 | P2 | RegisterWantAgentHolder（IPC 线程，未持 mutex_）经 MarkSharedIfNeeded 读 creatorPid_/写 isShared_，与 DeleteUnsharedRecordsOnDeath（持 mutex_）并发：creatorPid_ 无同步读 + 记录"先被标记共享后被擦除/取消"的窗口 | MarkSharedIfNeeded 走统一加锁路径（或 RegisterWantAgentHolder 获取 manager mutex_）；creatorPid_/isThirdParty_ 统一纳入锁保护 | 下一补档 | --- ## 5. 分维度速览 | 维度 | 结果 | 关键说明 | | ---------------- | -------------------------------------------- | --------------------------------------------- | | security-scanner | 1 项（SEC-01 为 P2；SEC-02/03 为 P3 已屏蔽） | 无崩溃/UAF 必现高危；裸 this 延迟任务为 P2 | | logic-scanner | 1 项（LOG-02 为 P2；LOG-03 为 P3 已屏蔽） | Round 1 计数缺陷已修复，余下登记/清理竞态 | | input-scanner | N/A（无 DB/文件持久化 sink） | IPC 边界问题已归入 SEC-02/SEC-03（P3 已屏蔽） | --- ## 6. 关键发现详情 > 本轮无 P0/P1。P2 项详情如下： ### [SEC-01] 延迟任务捕获裸 this 与成员空解引用（P2, scanner=security-scanner） - **位置**：services/abilitymgr/src/ability_manager_service.cpp:10323-10329 - **触发路径**：HandleWantAgentAppDied 提交 [this, bundleName, pid](){ subManagersHelper_->HandlePendingWantDeathCleanup(...); } 延迟 500ms；入口判空 subManagersHelper_，任务体内未判定且裸捕获 this。 - **影响**：服务析构/成员置空窗口内 UAF；与 InitWantAgentAppStateObserver 的 weak_from_this() 模式不一致。 - **证据**：auto task = [this, bundleName, pid](){ subManagersHelper_->HandlePendingWantDeathCleanup(bundleName, pid); }; - **建议**：改 weak_from_this() 捕获 + 任务内 lock() 判空 + 判空 subManagersHelper_。 ### [LOG-02] 持有者登记与死亡清理并发竞态（P2, scanner=logic-scanner+security-scanner） - **位置**：services/abilitymgr/src/ability_manager_service.cpp:10311-10329、services/abilitymgr/src/pending_want_record.cpp:528、services/abilitymgr/src/pending_want_manager.cpp:539 - **触发路径**：RegisterWantAgentHolder（IPC 线程，未持 mutex_）→ MarkSharedIfNeeded（读 creatorPid_ 无锁 / 写 isShared_），与 DeleteUnsharedRecordsOnDeath（持 mutex_）并发。 - **影响**：creatorPid_ 无同步读的数据竞争；记录被"标记 shared 前已 erase/取消"的窗口。 - **证据**：RegisterWantAgentHolder 无 lock_guard 即调 MarkSharedIfNeeded（ability_manager_service.cpp:10328）；MarkSharedIfNeeded 读 creatorPid_ 无锁（pending_want_record.cpp:528-536）。 - **建议**：统一加锁路径。 --- ## 附录：被屏蔽的 P3 项（备查，不参与门禁） | ID | 优先级 | 问题 | 位置 | | ------ | ------------ | ------------------------------------------------------------ | ------------------------------------------------------------ | | SEC-02 | P3（已屏蔽） | static_cast<PendingWantRecord*>(target.GetRefPtr()) 类型脆弱（当前唯一本地 IWantSender 实现故安全） | services/abilitymgr/src/ability_manager_service.cpp:10318-10327 | | SEC-03 | P3（已屏蔽） | 新 IPC REGISTER_WANT_AGENT_HOLDER(6181) 无调用方鉴权（当前影响有限） | services/abilitymgr/src/ability_manager_stub.cpp:2436-2445 | | LOG-03 | P3（已屏蔽） | Unmarshalling 异步 ffrt::submit 全局副作用 + 单测异步 flaky 隐患 | interfaces/inner_api/wantagent/src/pending_want.cpp:471-473 | --- > 说明：本次检视不修改任何源码，仅产出报告与建议。修复由用户确认后另起任务，并回到 AGENTS.md 的 Constraints/Verification 章节执行（编译 abilityms/ability_runtime、单测 ability_manager_service_first_test/pending_want_* 等）。 See merge request: openharmony/ability_ability_runtime!20483 | 27 天前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
FfrtTest_0030 Signed-off-by: zhangzezhong <zhangzezhong8@huawei-partners.com> | 1 年前 | |
检视修改 Signed-off-by: zhangatao <zhangtao662@huawei.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[92%] Co-authored-by: claude (glm-5.3) <ai@local> | 5 天前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
udkey check Signed-off-by: xhd-sz <xiehuandong@huawei.com> Change-Id: I547d48daadc0099430bd46749a58713497aaa29f | 1 个月前 | |
abilitySessionInfo中缓存caller信息 Signed-off-by: lidongrui <lidongrui3@huawei.com> Co-Authored-By: Agent AI[78%] Human Fixed[0%] Human[22%] AI Adopted[29%] Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.3) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.3) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.3) <ai@local> | 10 天前 | |
!20553 merge startself_code into master Modify startSelf not-native-error Created-by: zivzhen Commit-by: wangzhen Merged-by: openharmony_ci Description: **IssueNo**: **Description**: **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | | | 成员变量进行赋值或创建需要排查并发 | | | 谨慎在lambda表达式中使用引用捕获 | | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | | | map\vector\list\set等stl模板类使用时需要排查并发 | | | 谨慎考虑加锁范围 | | | 在IPC通信中谨慎使用同步通信方式 | | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | | | 禁止将外部传入的裸指针在内部直接构造智能指针 | | | 禁止多个独立创建的智能指针管理同一地址 | | | 禁止在析构函数中抛异步任务 | | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | | | 禁止在对外接口中未经判空直接使用外部传入的指针 | | | 禁止接口返回局部变量引用 | | | 禁止在信号函数中加锁 | | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | | | 禁止将同一个cpp编译在不同的so中 | | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | | | json对象在取值之前必须先判断类型，避免类型不匹配 | | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | | | readParcelable获取的对象使用前需要判空 | | | 分配和释放内存的函数需要成对出现 | | | 申请内存后异常退出前需要及时进行内存释放 | | | 内存申请前必须对内存大小进行合法性校验 | | | 内存分配后必须判断是否成功 | | | 禁止使用realloc、alloca函数 | | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | | | 禁止打印内存地址 | | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | | | 禁止对有符号整数进行位操作符运算 | | | 禁止对指针进行逻辑或位运算 | | | 循环次数如果收外部数据控制，需要检验其合法性 | | | 禁止使用内存操作类危险函数，需要使用安全函数 | | | 谨慎使用不可重入函数 | | | 必须检查安全函数的返回值，并进行正确处理 | | | 禁止仅通过TokenType类型判断绕过权限校验 | | **TDD Result**: **XTS Result**: ### 是否已执行L0用例 - [ ] 已验证 - [ ] 不涉及。如不涉及，请写明理由 ### AI检视评分（使用本地代码检视skills扫描）: See merge request: openharmony/ability_ability_runtime!20553 | 26 天前 | |
aa Force-Stop补充-u参数 Signed-off-by: SKY2001 <songtianyu10@huawei.com> AI[86%] Human Fixed[0%] Human[14%] AI Adopted[74%] Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> Co-authored-by: pi (glm-5.2) <ai@local> | 5 天前 | |
CloseUIAbility oe extension Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[34%] 👌 AI Adopted[34%] 🧑 Human[66%] | 4 个月前 | |
!20072 merge zl into master 质量加固 Created-by: liuzongze Commit-by: liuzongze@h-partners.com Merged-by: openharmony_ci Description: **IssueNo**: https://gitcode.com/openharmony/ability_ability_runtime/issues/15861 **Description**: **稳定性自检：** | 自检项 | 自检结果 | | ------------------------------------------------------------ | -------- | | 涉及跨进程调用的相关操作需要抛至主线程或加锁防止并发 | 不涉及 | | 成员变量进行赋值或创建需要排查并发 | 不涉及 | | 谨慎在lambda表达式中使用引用捕获 | 不涉及 | | 谨慎在未经拷贝的情况下使用外部传入的string、C字符串 | 不涉及 | | map\vector\list\set等stl模板类使用时需要排查并发 | 不涉及 | | 谨慎考虑加锁范围 | 不涉及 | | 在IPC通信中谨慎使用同步通信方式 | 不涉及 | | 禁止传递this指针至其他模块或线程（特别是eventhandler任务） | 不涉及 | | 禁止将外部传入的裸指针在内部直接构造智能指针 | 不涉及 | | 禁止多个独立创建的智能指针管理同一地址 | 不涉及 | | 禁止在析构函数中抛异步任务 | 不涉及 | | 禁止js对象在非js线程（例如在IPC线程）创建、使用或销毁 | 不涉及 | | 禁止在对外接口中未经判空直接使用外部传入的指针 | 不涉及 | | 禁止接口返回局部变量引用 | 不涉及 | | 禁止在信号函数中加锁 | 不涉及 | | 禁止在关键流程（SA启动、应用启动等主流程）执行耗时的操作 | 不涉及 | | 禁止将同一个cpp编译在不同的so中 | 不涉及 | **安全编码自检：** | 自检项 | 自检结果 | | -------------------------------------------------------------- | -------- | | 裸指针避免通过隐式转换构造为sptr | 不涉及 | | json对象在取值之前必须先判断类型，避免类型不匹配 | 不涉及 | | 序列化时必须对传入的数组大小进行校验，避免出现超大数组 | 不涉及 | | 避免使用未明确位宽的整型，选择使用int8_t、uint8_t等类型 | 不涉及 | | 外部传入的路径要做规范化校验，对路径中的.、..、../等特殊字符严格校验 | 不涉及 | | 指针变量、表示资源描述符的变量、bool变量必须赋初值 | 不涉及 | | readParcelable获取的对象使用前需要判空 | 不涉及 | | 分配和释放内存的函数需要成对出现 | 不涉及 | | 申请内存后异常退出前需要及时进行内存释放 | 不涉及 | | 内存申请前必须对内存大小进行合法性校验 | 不涉及 | | 内存分配后必须判断是否成功 | 不涉及 | | 禁止使用realloc、alloca函数 | 不涉及 | | 禁止打印文件路径、口令等敏感信息，如有需要，使用private修饰 | 不涉及 | | 禁止打印内存地址 | 不涉及 | | 整数之间运算时必须严格检查，确保不会出现溢出、反转、除0 | 不涉及 | | 禁止对有符号整数进行位操作符运算 | 不涉及 | | 禁止对指针进行逻辑或位运算 | 不涉及 | | 循环次数如果收外部数据控制，需要检验其合法性 | 不涉及 | | 禁止使用内存操作类危险函数，需要使用安全函数 | 不涉及 | | 谨慎使用不可重入函数 | 不涉及 | | 必须检查安全函数的返回值，并进行正确处理 | 不涉及 | | 禁止仅通过TokenType类型判断绕过权限校验 | 不涉及 | **TDD Result**:  **XTS Result**: ### 是否已执行L0用例 - [x] 已验证 - [ ] 不涉及。如不涉及，请写明理由 ### AI检视评分（使用本地代码检视skills扫描）: # 代码检视报告 — commit_258d1bd8（Round 1 / 最新提交） > 统一报告由 codecheck 工作台生成，**用于门禁管控**。所有 codecheck 报告（含 orchestrator 合并出的统一报告、单 scanner 直接产出的统一报告）必须遵循本模板：章节顺序、字段名、报告元数据块、评分与门禁规则均为**固定格式**，跨报告保持一致，便于门禁脚本解析与历史对比。 > 生成入口：[ README.md](README.md) → Step 5；合并逻辑见 [orchestrator/SKILL.md](orchestrator/SKILL.md)。 > 权威评分与门禁规则见文末 **附录 A**，生成时必须按其计算，不得自创分值。 --- ## 报告元数据 > **门禁脚本只读取本 YAML 块**。字段名与取值域为固定合约，禁止改名、增删或自定义取值。人工阅读部分从「1. 基本信息」开始。 yaml codecheck_report: schema_version: "1.0" scope: "commit_258d1bd8 (ui_extension_session_info + wantConstant)" round: 1 commit_id: "258d1bd8bed8b8b3748cd3721ac868d88842fa1d" change_id: "I2236b0d401f596205e15d9b08f1fb05647c9c691" commit_subject: "质量加固" date: "2026-08-10" dimensions_required: ["security-scanner", "logic-scanner", "input-scanner", "api-scanner"] dimensions_executed: ["security-scanner", "logic-scanner", "input-scanner", "api-scanner"] waived_dimensions: [] findings_total: 3 findings_by_severity: {P0: 0, P1: 0, P2: 0, P3: 3} score: 94 risk_level: "low" gate_decision: "approve" gate_blockers: [] must_fix: [] followups: ["LOG-01", "API-01", "API-02"] **取值域（唯一合法值）**：risk_level ∈ {low, medium, high, unknown}；gate_decision ∈ {approve, conditional, block, insufficient}。四项决策映射表见附录 A 第 2 节。 --- ## 1. 基本信息 | 项目 | 值 | |------|-----| | 检视范围 | commit_258d1bd8（ui_extension_session_info.cpp + want_constant.cpp + 其测试） | | commit-id | 258d1bd8bed8b8b3748cd3721ac868d88842fa1d | | Change-Id | I2236b0d401f596205e15d9b08f1fb05647c9c691 | | commit message | 质量加固 | | 检视日期 | 2026-08-10 | | 检视轮次 | Round 1（SEC-01、SEC-02 经 refute 推翻后修订） | | 检视维度 | security-scanner + logic-scanner + input-scanner + api-scanner | ### 提交内容核对（目标为提交时必填） | 校验项 | 结果 | |--------|------| | 提交范围 | 3 文件（+217/−11），与检视内容一致 | | 主要变更内容 | 将 UIExtensionSessionInfo::Unmarshalling 的标量读取由"无参直返静默吞错"改为"bool 出参 + 失败即 delete 返回 nullptr"的严格校验；为 wantConstant 的 napi_create_object 加返回值校验；在 ENABLE_ERRCODE 导出列表补 ShowMode；新增 8 个反序列化单测 | | 提交完整性 | ✅ Change-Id / Signed-off-by 齐全；测试随实现同步提交 | ### 路径特征探测与 scanner 组合选择（orchestrator Step 2） | 探测信号 | 命中 | 证据 | |---------|------|------| | IPC 信号 | ✅ | ui_extension_session_info.cpp:22 Unmarshalling(Parcel &)、parcel.Read* | | API 信号 | ✅ | frameworks/js/napi/wantConstant/ NAPI 模块（napi_env/napi_callback_info 签名，dynamic 侧） | | 持久化信号 | ❌ | diff 内无 DB/文件写入 | 决策：services/ + IPC 信号 → security + logic + input；NAPI 公共绑定 → 补 api。组合 = **security + logic + input + api**（四维全跑）。dimensions_required 全部执行，无豁免，故非 insufficient。 --- ## 2. 总体评价 ### 2.1 上库质量评估结论 | 指标 | 结论 | |------|------| | **整体评分** | **94/100**（计算过程见附录 A，扣分明细见 2.3） | | **风险等级** | 🟢 低风险 | | **上库决策** | ✅ **可以上库** | **决策依据**（逐条列出，门禁脚本比对 YAML 块复核）： - 依据 1：无 P0/P1（SEC-01 经下游相等比较+无数组索引证据推翻；SEC-02 经 IPC 框架无 catch + 默认 -fno-exceptions、bad_alloc→terminate→进程死亡→OS 回收、泄漏 moot 证据推翻）。 - 依据 2：评分 94（=100−2×3）≥90 → 命中附录 A 决策矩阵第 3 行 → approve。 - 依据 3：必检维度全部执行且无豁免 → 非 insufficient。3 项 P3 登记 followups。 **阻塞项（Gate Blocker）**： - 无 **上库条件（condition = 放行时必须满足，为空表示无条件）**： - 无；P3 项按 followups 跟进即可。 ### 2.2 各维度通过率 | 维度 | 通过率 | 等级 | 评价 | |------|--------|------|------| | Security & Bug | 4/4 | 🟢 | 修复了 INP-001/ERR-001 静默吞错（正向）；SEC-01/SEC-02 经证据推翻；无残留高影响发现 | | Logic | 1/1 | 🟢 | 标量读取错误路径完整、逻辑一致，无状态机/控制流缺陷 | | Input | 1/1 | 🟢 | IPC 反序列化四件套中"长度/循环/异常兜底"对本结构体不适用（定长字段），读取失败拦截已到位 | | API | 1/2 | 🟡 | ShowMode 导出属一致性修复（与 #else 分支对齐）；NAPI 返回值加固不完整（仅 napi_create_object 校验，P3 观察） | ### 2.3 评分扣分明细 | 严重等级 | 权重 | 数量 | 扣分 | |---------|------|------|------| | P0 致命 | −30 | 0 | 0 | | P1 严重 | −12 | 0 | 0 | | P2 一般 | −5 | 0 | 0 | | P3 提示 | −2 | 3 | −6 | | **合计** | | **3** | **−6** → 评分 **94** | > 公式：评分 = max(0, 100 − (30×P0 + 12×P1 + 5×P2 + 2×P3))；≥1 项 P0 时决策为 block（评分不再单独决定上库）。详见附录 A。 ### 2.4 正向修复说明（不计入扣分） 本提交**修复了一项历史 INP-001/ERR-001 缺陷**：原 Unmarshalling 使用无参 parcel.ReadInt32()（见 commonlibrary/c_utils/base/src/parcel.cpp:831-835 Read<T>() 失败静默返回 0），对截断/畸形 Parcel 会以全 0 字段返回"看似合法"的对象。提交改为 bool 出参式读取 + 失败即 delete info; return nullptr;，杜绝静默接受畸形数据。这是 IPC 输入边界的安全加固，方向正确。本报告所列发现均针对"加固后仍未覆盖"或"加固引入的回退"，非否定该修复方向。 --- ## 3. 问题统计 > 严重等级已按附录 A 第 1 节**统一归一化**为 P0/P1/P2/P3。 | 维度 | 总数 | P0 致命 | P1 严重 | P2 一般 | P3 提示 | |------|------|---------|---------|---------|---------| | Security & Bug | 0 | 0 | 0 | 0 | 0 | | Logic | 1 | 0 | 0 | 0 | 1 | | Input | 0 | 0 | 0 | 0 | 0 | | API | 2 | 0 | 0 | 0 | 2 | | **总计** | **3** | **0** | **0** | **0** | **3** | --- ## 4. 高优先级发现（P0/P1，跨维度去重后） **无 P0/P1 项。** 原 SEC-01（IPC-002 枚举注入）、SEC-02（异常路径泄漏回退）经 refute 推翻，证据与理由见 §7.4。 --- ## 5. 分维度明细 ### 5.1 Security & Bug（经 security-scanner） 无残留发现。SEC-01、SEC-02 经 refute 推翻（见 §7.4）。 正向修复（不计入扣分）：本提交将 Unmarshalling 的标量读取由无参 ReadInt32()（parcel.cpp:831-835 失败静默返回 0）改为 bool 出参 + 失败即 delete; return nullptr，修复了 INP-001/ERR-001 静默吞错——方向正确。 > 同类横扫备注：同族 Unmarshalling（ui_extension_host_info.cpp:36、ui_extension_ability_connect_info.cpp:30、dialog_session_info.cpp:137、mission_snapshot.cpp:47 等）共用裸 new(std::nothrow)+手 delete 模式；按 SEC-02 推翻结论，该模式在 bad_alloc→terminate→OS 回收语义下无实际泄漏风险，故不单列发现。 ### 5.2 Logic（经 logic-scanner） | ID | 位置 | 类型 | 概述 | 等级 | |----|------|------|------|------| | LOG-01 | ui_extension_session_info.cpp:29-69 | LOG-009 错误路径维护性 | 6 处错误路径均需手写 delete info; return nullptr;，当前全部覆盖无误；但裸指针放弃 RAII 后，未来新增错误分支易遗漏 delete 而泄漏。属可维护性观察项，非当前缺陷 | P3 | ### 5.3 Input（经 input-scanner） 无新增发现。本提交正向修复了 INP-001/ERR-001（静默吞错），input 维度通过。建议（非缺陷）：对 SEC-01 所列枚举字段补范围校验，使"四件套"中的"异常/越界兜底"完整。 ### 5.4 API（经 api-scanner，聚焦 NAPI diff） | ID | 位置 | 类型 | 概述 | 等级 | |----|------|------|------|------| | API-01 | frameworks/js/napi/wantConstant/want_constant.cpp:150 | API-006 / E5 资料完整性（待确认） | 提交在 #ifdef ENABLE_ERRCODE 导出表补 DECLARE_NAPI_PROPERTY("ShowMode", showMode)，与 :157 的 #else 分支对齐——属**一致性修复**（原 ENABLE_ERRCODE 构建下 ShowMode 未导出，与 #else 不一致）。ShowMode 既为既有公共导出（WINDOW/EMBEDDED_FULL/EMBEDDED_HALF，:101-103），需确认 @ohos.app.ability.wantConstant/wantConstant 的 d.ts 与 docs 已覆盖该子对象及其三个枚举常量；若 docs 缺章节则单列 P0 资料缺失 | P3 | | API-02 | want_constant.cpp:160,169-178 | ERR-001 / API-007 加固不完整 | 本提交仅为 napi_create_object 加返回值校验；SetNamedProperty 内部 napi_create_string_utf8/napi_create_int32/napi_set_named_property（:169-178）与 napi_define_properties（:160）返回值仍被忽略。加固不一致，OOB 下可能导出部分空对象 | P3 | --- ## 6. 待跟进（P2/P3 + Suspicious） | # | ID | 发现 | 等级 | 需要行动 | 负责人/排期 | |---|----|------|------|---------|------------| | 1 | LOG-01 | 手 delete 维护性观察（显式分支当前全覆盖） | P3 | 按需改 RAII；非必须 | 留空 | | 2 | API-01 | ShowMode docs/d.ts 覆盖确认 | P3 | 人工核对 docs md 是否含 ShowMode 及三常量；缺失则补资料 | 留空 | | 3 | API-02 | NAPI 返回值加固不完整 | P3 | 按需加固 napi_set_named_property/napi_define_properties 返回值 | 留空 | --- ## 7. 附录 ### 7.1 变更文件清单 | See merge request: openharmony/ability_ability_runtime!20072 | 2 个月前 | |
Add cfi/pac config Co-Authored-By: Agent Signed-off-by: wangzhen <wangzhen416@huawei.com> 🤖 AI[0%] 👌 AI Adopted[0%] 🧑 Human[100%] | 3 个月前 | |
fix bug Signed-off-by: xhz-sz <xiehuandong@h-partners.com> AI[91%] Human Fixed[0%] Human[9%] AI Adopted[100%] Co-authored-by: codex (gpt-5.6-sol) <ai@local> Co-authored-by: codex (unknown) <ai@local> Co-authored-by: opencode (glm-5.2) <ai@local> | 2 个月前 | |
fix state Signed-off-by: xhz-sz <xiehuandong@h-partners.com> AI[99%] Human Fixed[0%] Human[1%] AI Adopted[100%] Co-authored-by: codex (gpt-5.6-sol) <ai@local> Co-authored-by: codex (gpt-5.6-terra) <ai@local> Co-authored-by: codex (unknown) <ai@local> | 1 个月前 | |
change external_deps to deps Co-Authored-By: manual Signed-off-by: zhongshield1 <zhangzezhong8@huawei-partners.com> | 4 个月前 | |
add tdd Signed-off-by: xhz-sz <xiehuandong@huawei.com> Co-Authored-By: Agent | 5 个月前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 26 天前 | ||
| 2 个月前 | ||
| 26 天前 | ||
| 1 个月前 | ||
| 3 个月前 | ||
| 30 天前 | ||
| 27 天前 | ||
| 3 个月前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 2 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 2 个月前 | ||
| 2 个月前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 3 个月前 | ||
| 6 个月前 | ||
| 3 个月前 | ||
| 1 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 4 个月前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 28 天前 | ||
| 26 天前 | ||
| 4 个月前 | ||
| 2 个月前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 21 天前 | ||
| 3 个月前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 28 天前 | ||
| 18 天前 | ||
| 1 个月前 | ||
| 3 个月前 | ||
| 4 个月前 | ||
| 3 个月前 | ||
| 5 天前 | ||
| 5 天前 | ||
| 24 天前 | ||
| 9 天前 | ||
| 22 天前 | ||
| 29 天前 | ||
| 2 个月前 | ||
| 20 天前 | ||
| 1 个月前 | ||
| 27 天前 | ||
| 1 个月前 | ||
| 18 天前 | ||
| 5 天前 | ||
| 6 天前 | ||
| 3 个月前 | ||
| 6 天前 | ||
| 1 个月前 | ||
| 1 年前 | ||
| 5 天前 | ||
| 11 天前 | ||
| 4 个月前 | ||
| 8 个月前 | ||
| 4 个月前 | ||
| 1 个月前 | ||
| 30 天前 | ||
| 24 天前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 5 天前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 4 个月前 | ||
| 1 年前 | ||
| 3 个月前 | ||
| 6 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 1 年前 | ||
| 9 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 4 个月前 | ||
| 1 年前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 9 天前 | ||
| 2 个月前 | ||
| 4 个月前 | ||
| 5 天前 | ||
| 1 个月前 | ||
| 9 个月前 | ||
| 8 天前 | ||
| 1 年前 | ||
| 4 个月前 | ||
| 1 个月前 | ||
| 1 年前 | ||
| 1 个月前 | ||
| 5 天前 | ||
| 1 个月前 | ||
| 8 天前 | ||
| 30 天前 | ||
| 2 年前 | ||
| 2 个月前 | ||
| 8 天前 | ||
| 2 个月前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 8 个月前 | ||
| 8 个月前 | ||
| 1 个月前 | ||
| 5 天前 | ||
| 4 个月前 | ||
| 5 个月前 | ||
| 4 个月前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 2 个月前 | ||
| 6 个月前 | ||
| 6 个月前 | ||
| 3 个月前 | ||
| 4 个月前 | ||
| 1 个月前 | ||
| 4 个月前 | ||
| 6 天前 | ||
| 8 个月前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 4 个月前 | ||
| 8 天前 | ||
| 10 天前 | ||
| 3 天前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 25 天前 | ||
| 3 天前 | ||
| 1 个月前 | ||
| 3 天前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 2 个月前 | ||
| 1 个月前 | ||
| 26 天前 | ||
| 18 天前 | ||
| 4 个月前 | ||
| 1 个月前 | ||
| 6 天前 | ||
| 6 天前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 1 个月前 | ||
| 5 个月前 | ||
| 1 个月前 | ||
| 5 天前 | ||
| 10 个月前 | ||
| 1 个月前 | ||
| 2 个月前 | ||
| 1 个月前 | ||
| 10 天前 | ||
| 1 年前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 5 天前 | ||
| 1 个月前 | ||
| 4 个月前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 9 天前 | ||
| 1 个月前 | ||
| 2 个月前 | ||
| 2 个月前 | ||
| 6 天前 | ||
| 27 天前 | ||
| 4 个月前 | ||
| 2 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 3 个月前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 4 个月前 | ||
| 1 年前 | ||
| 4 个月前 | ||
| 1 年前 | ||
| 4 个月前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 4 个月前 | ||
| 3 个月前 | ||
| 5 天前 | ||
| 1 个月前 | ||
| 2 个月前 | ||
| 1 年前 | ||
| 4 个月前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 3 天前 | ||
| 4 个月前 | ||
| 8 个月前 | ||
| 3 个月前 | ||
| 6 个月前 | ||
| 9 个月前 | ||
| 9 个月前 | ||
| 1 个月前 | ||
| 4 个月前 | ||
| 9 天前 | ||
| 11 个月前 | ||
| 11 个月前 | ||
| 11 个月前 | ||
| 11 个月前 | ||
| 11 个月前 | ||
| 11 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 1 个月前 | ||
| 4 个月前 | ||
| 1 个月前 | ||
| 2 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 1 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 1 个月前 | ||
| 3 个月前 | ||
| 1 年前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 3 个月前 | ||
| 5 个月前 | ||
| 4 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 4 个月前 | ||
| 19 天前 | ||
| 21 天前 | ||
| 3 个月前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 2 个月前 | ||
| 1 个月前 | ||
| 8 个月前 | ||
| 8 个月前 | ||
| 3 个月前 | ||
| 2 个月前 | ||
| 4 个月前 | ||
| 2 个月前 | ||
| 2 个月前 | ||
| 11 个月前 | ||
| 2 个月前 | ||
| 10 个月前 | ||
| 10 天前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 4 个月前 | ||
| 21 天前 | ||
| 3 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 1 年前 | ||
| 28 天前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 11 个月前 | ||
| 3 个月前 | ||
| 1 个月前 | ||
| 1 年前 | ||
| 1 个月前 | ||
| 8 个月前 | ||
| 2 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 1 年前 | ||
| 22 天前 | ||
| 3 个月前 | ||
| 4 个月前 | ||
| 11 天前 | ||
| 10 天前 | ||
| 5 天前 | ||
| 1 个月前 | ||
| 10 个月前 | ||
| 2 个月前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 4 个月前 | ||
| 6 个月前 | ||
| 4 个月前 | ||
| 7 个月前 | ||
| 1 年前 | ||
| 6 个月前 | ||
| 6 个月前 | ||
| 6 个月前 | ||
| 6 个月前 | ||
| 9 天前 | ||
| 4 天前 | ||
| 29 天前 | ||
| 3 个月前 | ||
| 29 天前 | ||
| 29 天前 | ||
| 5 天前 | ||
| 5 天前 | ||
| 9 天前 | ||
| 3 个月前 | ||
| 1 年前 | ||
| 5 天前 | ||
| 5 天前 | ||
| 9 天前 | ||
| 2 个月前 | ||
| 4 个月前 | ||
| 5 天前 | ||
| 5 天前 | ||
| 4 个月前 | ||
| 5 天前 | ||
| 5 天前 | ||
| 2 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 30 天前 | ||
| 1 年前 | ||
| 5 天前 | ||
| 4 个月前 | ||
| 1 年前 | ||
| 1 个月前 | ||
| 29 天前 | ||
| 9 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 4 个月前 | ||
| 1 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 4 个月前 | ||
| 6 天前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 5 个月前 | ||
| 26 天前 | ||
| 5 个月前 | ||
| 5 个月前 | ||
| 5 个月前 | ||
| 5 个月前 | ||
| 5 个月前 | ||
| 2 个月前 | ||
| 2 个月前 | ||
| 1 个月前 | ||
| 2 个月前 | ||
| 3 个月前 | ||
| 5 天前 | ||
| 2 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 1 年前 | ||
| 10 个月前 | ||
| 20 天前 | ||
| 5 个月前 | ||
| 1 个月前 | ||
| 5 个月前 | ||
| 8 个月前 | ||
| 6 个月前 | ||
| 3 个月前 | ||
| 9 个月前 | ||
| 1 年前 | ||
| 1 个月前 | ||
| 4 个月前 | ||
| 3 个月前 | ||
| 8 个月前 | ||
| 12 天前 | ||
| 28 天前 | ||
| 28 天前 | ||
| 4 个月前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 4 个月前 | ||
| 28 天前 | ||
| 8 个月前 | ||
| 3 个月前 | ||
| 1 个月前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 6 天前 | ||
| 5 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 18 天前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 24 天前 | ||
| 3 个月前 | ||
| 1 年前 | ||
| 9 个月前 | ||
| 5 天前 | ||
| 1 个月前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 3 个月前 | ||
| 1 个月前 | ||
| 3 个月前 | ||
| 1 个月前 | ||
| 1 个月前 | ||
| 4 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 25 天前 | ||
| 5 个月前 | ||
| 3 个月前 | ||
| 26 天前 | ||
| 1 个月前 | ||
| 1 年前 | ||
| 3 个月前 | ||
| 11 天前 | ||
| 9 个月前 | ||
| 5 个月前 | ||
| 1 年前 | ||
| 4 个月前 | ||
| 5 个月前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 27 天前 | ||
| 3 个月前 | ||
| 3 个月前 | ||
| 1 年前 | ||
| 5 天前 | ||
| 4 个月前 | ||
| 4 个月前 | ||
| 1 个月前 | ||
| 10 天前 | ||
| 26 天前 | ||
| 5 天前 | ||
| 4 个月前 | ||
| 2 个月前 | ||
| 3 个月前 | ||
| 2 个月前 | ||
| 1 个月前 | ||
| 4 个月前 | ||
| 5 个月前 |