From 63b7a3e0ab352f9685d12a5dc1f0b0fc843e1ac2 Mon Sep 17 00:00:00 2001
From: Daniel Micay <daniel.micay@grapheneos.org>
Date: Tue, 14 Jan 2025 22:08:50 -0500
Subject: [PATCH] fix edge case upstream lockscreen bug and harden against
 others

---
 static/releases.html | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/static/releases.html b/static/releases.html
index 4b564406..05fc06dd 100644
--- a/static/releases.html
+++ b/static/releases.html
@@ -554,6 +554,8 @@
                     <p>Changes since the 2025010700 release:</p>
 
                     <ul>
+                        <li>fix upstream Android lockscreen triggered by the combination of fully disabling animations (via Settings > Accessibility > Color and motion > Remove animations) and enabling always-on display (Settings > Display > Lock screen > Always show time and info) which due to a bug in the upstream code for handling disabling animations resulted in the user interface locking process getting stuck and not considering the device locked until it wakes again which bypassed restrictions on biometric unlocking since it can be done while asleep</li>
+                        <li>add protection against upstream lockscreen bugs bypassing restrictions on biometric unlocking while the device is asleep including the standard restrictions and our recently added 2-factor fingerprint unlock feature</li>
                         <li>kernel (Pixel 8, Pixel 8 Pro, Pixel 8a, Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold): enable hardware memory tagging for the main kernel allocators via the upstream Hardware Tag-Based KASAN implementation (which is intended for production usage, unlike the other KASAN modes)</li>
                         <li>kernel (Pixel 8, Pixel 8 Pro, Pixel 8a, Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold): switch KASAN fault handling from report to panic to use it as a hardening feature instead of only a bug finding tool</li>
                         <li>kernel (Pixel 8, Pixel 8 Pro, Pixel 8a, Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold): switch KASAN hardware memory tagging mode from synchronous to asymmetric for the initial deployment to reduce the performance cost and match our existing hardware memory tagging usage in userspace (synchronous mode is potentially more useful in the kernel than it is for userspace which is something we can investigate and potentially offer as an option)</li>