Commit graph

  • 0cd1e0b172 gitlab-ci: include fdroid in bandit scans Hans-Christoph Steiner 2018-09-04 18:47:29 +02:00
  • 8b17076525 jenkins-build-all: error msg when buildserver VM not found Hans-Christoph Steiner 2018-09-05 14:37:06 +02:00
  • b254472a99 Merge branch 'exclude-filter' into 'master' Hans-Christoph Steiner 2018-09-05 12:39:23 +00:00
  • de5455e273 Merge branch 'minor-security-fixups' into 'master' Marcus 2018-09-04 11:05:25 +00:00
  • 8f48976cb9 Merge branch 'drop-pickle-for-json' into 'master' Hans-Christoph Steiner 2018-09-03 21:10:26 +00:00
  • 9bccb2c73e temp fallback to built-in ElementTree if defusedxml is not there Hans-Christoph Steiner 2018-09-03 23:02:31 +02:00
  • cf4c9cb4ee buildserver now needs python3-defusedxml Hans-Christoph Steiner 2018-09-03 22:42:31 +02:00
  • 11b3e5be3a update: throw exception for APKs with invalid Application ID Hans-Christoph Steiner 2018-09-01 12:19:45 +02:00
  • 5d161cc9fd validate appid when reading metadata files Hans-Christoph Steiner 2018-09-01 12:08:37 +02:00
  • 3011953d0e convert apkcache from pickle to JSON Hans-Christoph Steiner 2018-09-03 18:07:40 +02:00
  • 74776e026f gradlew-fdroid: add gradle 4.10 Marcus Hoffmann 2018-09-03 14:47:36 +02:00
  • d7b249272a makebuildserver: add gradle 4.10 Marcus Hoffmann 2018-09-03 14:44:33 +02:00
  • c7d5050091 Merge branch 'bandit-scanner-and-fixes' into 'master' Hans-Christoph Steiner 2018-08-30 13:06:07 +00:00
  • cd22eceb68 replace unneeded eval() call and support negative versionCodes Hans-Christoph Steiner 2018-08-29 16:07:02 +02:00
  • 2f78e162e0 remove unused YamlLoader optimization Michael Pöhn 2018-08-29 11:25:01 +02:00
  • aee84fdc73 use yaml.safe_load for parsing metadata Michael Pöhn 2018-08-29 00:33:58 +02:00
  • 3ffe2860f3 gitlab-ci: add 'bandit' security scanner to all runs Hans-Christoph Steiner 2018-08-29 17:48:06 +02:00
  • 4d13a904f3 use defusedxml to avoid DoS attacks while loading XML Hans-Christoph Steiner 2018-08-29 17:27:04 +02:00
  • cc94ebca30 use global constant for the 'xmlns:android' XML namespace Hans-Christoph Steiner 2018-08-29 17:11:41 +02:00
  • 3e1d313b7c mark manually sanitized input so bandit doesn't complain Hans-Christoph Steiner 2018-08-29 17:20:01 +02:00
  • 2edc68d6cd mark all required permissions so bandit doesn't complain Hans-Christoph Steiner 2018-08-29 14:54:37 +02:00
  • 8d3e82913e mark all required usages of MD5 so bandit doesn't complain Hans-Christoph Steiner 2018-08-29 14:53:58 +02:00
  • a089614225 checkupdates: remove magic number 99999999 from HTTP checks Hans-Christoph Steiner 2018-08-29 13:00:53 +02:00
  • 5d77fd97ee use posixpath.join() for paths on the buildserver Hans-Christoph Steiner 2018-08-29 15:43:16 +02:00
  • 4503e7a92a replace unneeded eval() call and support negative versionCodes Hans-Christoph Steiner 2018-08-29 16:07:02 +02:00
  • f0d27e1fa5 Merge branch 'remove-unused-YamlLoader-optimisation' into 'master' Hans-Christoph Steiner 2018-08-29 11:12:02 +00:00
  • ee4945cb84 remove unused YamlLoader optimization Michael Pöhn 2018-08-29 11:25:01 +02:00
  • 6b3cf72b68 Merge branch 'safe_yaml_parsing' into 'master' Hans-Christoph Steiner 2018-08-29 07:37:43 +00:00
  • e7a34807f7 use yaml.safe_load for parsing metadata Michael Pöhn 2018-08-29 00:33:58 +02:00
  • 1a8c77e815 Merge branch 'jarsigner-and-keytool-lookup-regression' into 'master' Michael Pöhn 2018-08-21 01:28:22 +00:00
  • 4dcfa95d6e fix: jarsigner and keytool lookup regression Michael Pöhn 2018-08-21 03:05:43 +02:00
  • 3546e8d38d generate all po files Nicco Kunzmann 2018-08-20 23:05:55 +02:00
  • c766129f8b Merge branch 'master' into 'master' Michael Pöhn 2018-08-20 10:57:45 +00:00
  • 81641b4628 Fixed precommit checks Cyril Russo 2018-08-20 11:17:36 +02:00
  • 4303b0fac1 Apply suggestion from @uniqx to using shutil.which instead of iterating path by hand Cyril Russo 2018-08-17 20:14:54 +02:00
  • ace33bcfc0 Reverted the change in the default config.py Improved the detection of keytool and jarsigner by also searching the PATH environment variable Cyril Russo 2018-08-17 16:46:46 +02:00
  • 4f21045cad Fix keytool not found on MacOSX (when using Java from Apple) Fix keytool parsing error due to localisation keytool -list command. Always fallback to english so the parsing makes sense. Cyril Russo 2018-08-17 15:32:29 +02:00
  • 05be4bc814 Merge branch '471-lint-check-unknown-keys' into 'master' Hans-Christoph Steiner 2018-08-14 10:50:59 +00:00
  • 53bd5acb09 Merge branch 'make-python-tests-run-independent-of-cwd' into 'master' Hans-Christoph Steiner 2018-08-14 10:34:47 +00:00
  • fb16823a4a Merge branch 'master' into 'master' Hans-Christoph Steiner 2018-08-14 10:32:10 +00:00
  • 82563850b7 fix test metadata case for Builds app field Michael Pöhn 2018-08-08 15:03:58 +02:00
  • 6a06944945 better exception and waring message when yaml metadata checks fail; build flags check optional Michael Pöhn 2018-08-08 02:18:19 +02:00
  • 0d005ab83a make parse_yaml_metadata ignore empty input Michael Pöhn 2018-08-08 01:26:46 +02:00
  • e83221eb03 improve yaml build flag check cost; added unit test for unknown app fields, builds flags checks when parsing yaml Michael Pöhn 2018-08-08 00:59:25 +02:00
  • 25b4a47951 check for unknown app fields and build flags when parsing yml Michael Pöhn 2018-08-05 23:41:12 +02:00
  • f53d1abcce fix: make sure ensure_final_value always has a clearly defined return value Michael Pöhn 2018-08-14 11:07:44 +02:00
  • 7d5f4d3ab9 added cwd setup boiler-plate to *.TestCase where missing Michael Pöhn 2018-08-14 10:34:13 +02:00
  • f153a61277 made build.TestCase run independant of cwd Michael Pöhn 2018-08-14 10:10:19 +02:00
  • 37e0dce73b made index.TestCase run independant of cwd Michael Pöhn 2018-08-14 10:08:03 +02:00
  • edb8d105b0 made update.TestCase run independent of cwd Michael Pöhn 2018-08-08 02:36:38 +02:00
  • 64c5d176da Merge branch 'examples_char_limits' into 'master' Michael Pöhn 2018-08-12 20:31:55 +00:00
  • bc1766c7ce examples/config.py: update char_limit defaults Marcus Hoffmann 2018-08-12 18:09:46 +02:00
  • 9b0f7f9d04 makebuildserver: add build-tools 28.0.2 Marcus Hoffmann 2018-08-10 20:54:02 +02:00
  • cf3665b328 Merge branch 'facebook_sdk' into 'master' Marcus 2018-08-10 13:36:44 +00:00
  • a6dfbc6e2e scanner: add facebook sdk to forbidden libraries Marcus Hoffmann 2018-07-27 18:01:01 +02:00
  • 1b37b521c8 common: fix tests when running without any Android SDK installed Hans-Christoph Steiner 2018-08-07 14:51:42 +02:00
  • f1814b7c73 Merge branch '541-ci-tests-dont-execute-majority-of-python-test-cases' into 'master' Hans-Christoph Steiner 2018-08-07 08:42:42 +00:00
  • 55466f1166 fix fixtures in tests/metadata/dump Michael Pöhn 2018-08-07 00:02:07 +02:00
  • 5d5617bf40 fix: minor bugs in testcases for: common, metadata, update Michael Pöhn 2018-08-06 22:13:40 +02:00
  • 28ec93c587 fix: run all testcase in tests/run-tests Michael Pöhn 2018-08-06 16:12:10 +02:00
  • a01d11ba64 Merge branch '530-lint-issue-with-disable' into 'master' Hans-Christoph Steiner 2018-08-03 09:07:09 +00:00
  • 09d507839b Merge branch '513-set-locale-explicitly-when-using-keytool' into 'master' Hans-Christoph Steiner 2018-08-03 09:04:23 +00:00
  • 74ae6a6a3b set locale explicitly when using keytool Michael Pöhn 2018-08-03 04:36:00 +02:00
  • 14730be812 bump RELEASE_COMMIT_ID for fixing metadata_v0 test Michael Pöhn 2018-08-02 18:18:07 +02:00
  • 1e7d9b854d never interpret "disable" as bool in yaml metadata Michael Pöhn 2018-08-02 17:31:58 +02:00
  • 545872f184 Merge branch 'patch-1' into 'master' Michael Pöhn 2018-07-30 22:56:57 +00:00
  • da0c541dec Lint - the error should hint that the right word is Categories Licaon_Kter 2018-07-30 22:56:57 +00:00
  • bd1af5d07e Merge branch 'signatures-clean-up-globals' into 'master' Michael Pöhn 2018-07-30 21:11:31 +00:00
  • 5e6cb548af Merge branch 'gradle_4.9' into 'master' Marcus 2018-07-30 21:10:11 +00:00
  • 91a7b91845 add gradle 4.9 Marcus Hoffmann 2018-07-30 22:54:09 +02:00
  • 27d382e1f4 clean up globals in signatures.py Michael Pöhn 2018-07-30 13:07:07 +02:00
  • 1beb7f0432 signatures: Don't pass config to extract mimi89999 2018-07-29 17:43:45 +02:00
  • 44f21fbf15 Merge branch 'signatures_argument_error' into 'master' Michel Le Bihan 2018-07-29 16:02:56 +00:00
  • d76c5dc859
    signatures: Don't pass config to extract mimi89999 2018-07-29 17:43:45 +02:00
  • 481a6274f0 Merge branch 'archive_icons' into 'master' Hans-Christoph Steiner 2018-07-27 13:09:13 +00:00
  • 2aaa097962 Merge branch 'fix_532' into 'master' Marcus 2018-07-25 18:11:56 +00:00
  • 753e9c8175 scanner: properly combine all gradle compile commands with flavors Marcus Hoffmann 2018-07-25 18:59:22 +02:00
  • c44ab190bd scanner: fix reformatting fail Marcus Hoffmann 2018-07-25 18:05:04 +02:00
  • 797958c0b1 Merge branch 'build_tools_28.0.1' into 'master' Marcus 2018-07-25 15:53:18 +00:00
  • 2e77392005 makebuildserver: add newest build tools Marcus Hoffmann 2018-07-25 17:20:25 +02:00
  • 7bdffde804 build: replace exclude with filter during source tar creation Areeb Jamal 2018-07-25 19:01:28 +05:30
  • 957b6b8d19
    update: populate app level info for archive only from archived apks Marcus Hoffmann 2018-07-18 22:49:56 +02:00
  • e8306fbde0 Merge branch 'master' into 'master' Hans-Christoph Steiner 2018-07-18 15:32:35 +00:00
  • 17cd4a3137 gitlab-ci: pylint<2.0 workaround to avoid typed-ast's gcc requirement 1.0.9 Hans-Christoph Steiner 2018-07-18 17:11:21 +02:00
  • 757adb6098 bump to v1.0.9 Hans-Christoph Steiner 2018-07-18 17:20:44 +02:00
  • cf2c4d785c update: more reliable handling of XMLNS with androguard Hans-Christoph Steiner 2018-07-17 12:32:18 +02:00
  • a6248fd108 update: pass resourceIds through if they can't be deferenced Hans-Christoph Steiner 2018-07-13 15:43:20 +02:00
  • b95e7b3737 update: little trick to avoid some cases of XML app icons Hans-Christoph Steiner 2018-07-13 15:38:26 +02:00
  • f92ad7af9b update: support versionCode values in hex Hans-Christoph Steiner 2018-07-13 12:01:34 +02:00
  • 53b906d00a update: handle random drawable folder names when parsing icons Hans-Christoph Steiner 2018-07-13 11:28:11 +02:00
  • 60ee69b8bd gitlab-ci: pylint<2.0 workaround to avoid typed-ast's gcc requirement Hans-Christoph Steiner 2018-07-18 17:11:21 +02:00
  • 84dfd6b06a update: more reliable handling of XMLNS with androguard Hans-Christoph Steiner 2018-07-17 12:32:18 +02:00
  • 4352aa2792 update: pass resourceIds through if they can't be deferenced Hans-Christoph Steiner 2018-07-13 15:43:20 +02:00
  • 0e0a5019ab update: little trick to avoid some cases of XML app icons Hans-Christoph Steiner 2018-07-13 15:38:26 +02:00
  • 75e9a9e176 update: support versionCode values in hex Hans-Christoph Steiner 2018-07-13 12:01:34 +02:00
  • c8e61aa02d update: handle random drawable folder names when parsing icons Hans-Christoph Steiner 2018-07-13 11:28:11 +02:00
  • a9cc7f6358 update translation template with latest strings Hans-Christoph Steiner 2018-07-13 11:05:56 +02:00
  • 56a5d868f1 update: purge --editor and --interactive, they were removed in 2013 Hans-Christoph Steiner 2018-07-13 11:04:37 +02:00
  • be54f1e82a Merge branch 'improve_gradlew-fdroid' into 'master' Hans-Christoph Steiner 2018-07-13 16:53:50 +00:00
  • 7023f372fd gradlew-fdroid: tabs -> spaces Marcus Hoffmann 2018-07-13 17:02:48 +02:00