v1.3.2-english

TianshangGuard v1.3.2 (English)

Release Date: 2026-06-28
Package: com.tianshang.guard.en
Language: English
Version: versionCode=8, versionName=1.3.2-en

---

Security Audit Fixes (38 vulnerabilities across 2 rounds)

Round 1: 18 vulnerabilities

Critical (4)

• SQL injection: EncryptedDatabaseProvider path and passphrase sanitization
• Buffer overflow: DnsPacketHandler IP checksum bounds check
• Response truncation: GuardVpnService use remaining() instead of limit()
• UTF-8 truncation: ByteTokenizer multi-byte character safe truncation

High (6)

• Race condition: Bm25Engine feedback index synchronization
• Thread safety: OnnxMlEngine use ConcurrentHashMap
• Resource leak: DohClient response body properly closed
• Memory leak: LocalDnsEngine coroutine scope cancellation
• Whitelist bypass: HomographDetector homograph detection
• Keepalive encoding: GuardVpnService DNS label encoding

Medium (8)

• Visibility, IP regex, signature bypass, duplicate key, integer overflow, threshold protection, log sanitization

Round 2: 20 vulnerabilities

Critical (2)

• VPN restart cancellation: restartRunnable cancellable on stopVpn()
• ONNX session leak: close old OrtSession on model reload

High (7)

• File stream leak: handlePackets() finally block closes streams
• @volatile: LocalDnsEngine shared field visibility
• BK-tree race: double-checked locking
• Rate limiter race: canLaunchAlert() synchronized
• pendingRunnables leak: consume() cleanup
• State race: MlEngineWithFallback.getState() synchronized
• Certificate pinning: Cloudflare DoH endpoint pins

Medium (6)

• TTL expiry, BootReceiver DI, SQL sanitization, certificate pinning, clearFeedbackIndex sync

Low (5)

• Integer overflow, regex reuse, clear() fix

---

Build Info

• Build: SUCCESS
• Real device test: PASS
• Memory: ~88 MB PSS

---

Download

• TianshangGuard-v1.3.2-english.apk — English UI + English SMS phishing detection