Timeline for Android source code for extracting entries from an APK during installation process
Current License: CC BY-SA 4.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 20 at 8:33 | comment | added | kampias | Thank you for the two instances mentioned, but I am looking specifically for when the AndroidManifest.xml is being extracted. I also noticed that the behavior is different if it is Android 8 than Android 11. | |
| Nov 15, 2023 at 21:30 | comment | added | Robert | The different ZIP algorithms used for accessing APK entries were the cause of the Janus vulnerability (CVE-2017-13156) as different algorithms had a different view on the APK which allowed to modify the APK without invalidating the APK signature. That was the reason Google developen APK signature v2 format (which signs the whole ZIP file content). | |
| Nov 13, 2023 at 19:27 | history | answered | Irfan Latif | CC BY-SA 4.0 |