NepTools v2.9.6

NepTools v2.9.6 (versionCode 55) - Release Notes

This release delivers extensive security hardening, performance optimizations, memory leak remediations, and power management improvements across the entire application.

Security & Architecture Hardening

• Password Vault & Biometric Key Isolation:
  • Eliminated raw plaintext 256-bit AES encryption key serialization over Android Intent IPC during biometric setup.
  • Encryption keys are resolved directly in-process within active memory, shielding cryptographic secrets from system activity manager buffers and core dumps.
  • Upgraded clipboard purging to invoke native clearPrimaryClip() on Android 9+ (API 28+).
• LAN Drop Wi-Fi Transfer Hardening:
  • Configured scoped FileProvider path mapping (Download/NepTools/) to prevent IllegalArgumentException on opening or sharing incoming files.
  • Enforced authentication rate-limiting penalties across all endpoints to prevent brute-force attacks on transfer PINs.
  • Stripped wildcard Access-Control-Allow-Origin headers from file downloads and JSON endpoints.
• Native Security Layer (C++):
  • Guarded ptrace(PTRACE_TRACEME) checks with execution state flags to eliminate false-positive debugger tampering alerts on repeated background evaluations.
• Package Integrity & Signature Verification:
  • Added support for signingCertificateHistory on Android 9+ to verify single-signer production application fingerprints accurately.
  • Normalized package identity verification against .debug build variants in the in-app updater.
• Forex Statutory Peg Preservation:
  • Fixed currency sync worker to enforce Nepal Rastra Bank statutory fixed peg (1 INR = 1.60 NPR) in background cache updates.

Performance & Power Management

• Radio Streaming Battery Optimization:
  • Coordinated CPU PARTIAL_WAKE_LOCK and high-performance WifiLock lifecycles: locks are released immediately when playback pauses, on transient audio focus loss, or upon stream errors, preventing background battery drain.
• Batch PDF Conversion & Memory Efficiency:
  • Implemented single-pass batch rendering (renderPagesBatch) in the PDF-to-Image engine, eliminating redundant file disk copies during multi-page exports.
  • Added inSampleSize downsampling (capped to 2400px) and explicit page recycling to prevent Out-Of-Memory (OOM) errors during high-resolution camera photo PDF conversions.
• Main Thread Offloading:
  • Offloaded midnight date rollover ephemeris calculations and notification dispatching in DailyDateAlarmReceiver using goAsync() with background coroutines.

Package Integrity

• SHA256: F2B887E14DF28F810E2EEED75159A18F9DE23D264BED4C64889AC4680D1E8205