1.4.0
[1.4.0] - 2026-08-21
Added
- ContentProvider Diagnostics IPC Telemetry: Reliable cross-process diagnostic communication between hooked processes (Google Photos) and the module settings UI via
DiagnosticsProvider, resolving blank status display across modern Xposed/LSPosed environments. - Fail-Closed IPC Access Control & Anti-Spoofing: Enforced caller UID validation, restricted telemetry updates to authorized scope packages passing
ScopePolicy, and verified reported package ownership against calling UID. - Dedicated Telemetry Dispatcher: Bounded single-thread daemon background executor (
ThreadPoolExecutorwithDiscardOldestPolicy) for non-blocking diagnostic reporting without main-thread stalls or ANR risks. - GrapheneOS Compatibility Isolation: Soft-denylisted Sandboxed Google Play compatibility packages (
app.grapheneos.gmscompat*) inScopePolicyto ensure process isolation. - Per-Method Hook Idempotency: Independent atomic hook registration tracking in
FeatureSpooferpreventing duplicate method hooks upon retry. - Enriched Device & System Property Overrides: Comprehensive
ro.*property coverage across system, vendor, odm, and system_ext partitions, and support for Android 17 (SDK 37) diagnostics.
Changed
- Bumped version to
1.4.0(versionCode 9). - Safe type-casting in
FeatureSpoofer.filterAndAugmentFeatureswith explicit preservation of unnamed OpenGL ES version metadata (reqGlEsVersion).
Fixed
- Android 11+ diagnostics delivery: Hooked-process status and VERIFY telemetry now reach the module UI even when Android 11+ package visibility (AppsFilter) blocks ContentProvider resolution, via an explicit-broadcast fallback authenticated by a per-install token with fail-closed authorization.
Verification
Release signing certificate SHA-256 fingerprint:
37:18:6E:5C:26:94:E5:53:E5:FA:B1:F7:78:7C:04:DB:CD:43:84:AB:84:96:3E:60:BE:9C:3C:CB:6B:A9:07:B1
APK SHA-256:
e02d501f654333be235338c3852bf1bd68c1356d91d0b709269a9e590f590f1f