fix: Android 14+ compatibility #666

td2thinh · 2025-04-16T11:59:40Z

What type of PR is this? (check all applicable)

Description

Release 2.5.1 made a few changes regarding risk of Task Hijacking vulnerablity that broke full screen intent notifications on Android 14+, you can read the Android docs about this.

TLDR: The package was starting implicit Intents that the system can't access when the main activity exported attribute is set to false in release 2.5.1.

From Android 14+, specific types of foreground service are needed when starting a foreground service, therefore in order to use the microphone and the camera of the device when the app is in the background, additional service types must be added and thus the permissions for those types need to be added in the manifest as well.

Related Tickets & Documents

Proposed Changes:

The first commit made all Intent explicit by adding the package name and specifying the class name.
The second commit applies a few preventions against Task Hijacking from this page: https://docs.ostorlab.co/kb/APK_TASK_HIJACKING/index.html. You can read more about this vulnerablity here: https://developer.android.com/privacy-and-security/risks/strandhogg
Adding microphone and camera foreground service types to allow the use of microphone and camera when the app is in the background in Android 14+.

@ebsangam

## 2.5.2 * Add notification calling for Android `callingNotification`, thank @ebsangam hiennguyen92#662 * Add `logoUrl` properties (inside android prop) * Fixed issue DMTF IOS, thank @minn-ee hiennguyen92#577 * Fixed issue duplicate missing notification Android * Fixed some bugs.

td2thinh · 2025-05-20T13:04:07Z

@hiennguyen92 Please review this PR when you have the time.

patrikheinonen · 2025-05-28T18:40:23Z

we need this merged

Ndivhuwo · 2025-06-07T15:31:27Z

Agreed. Lets get this merged

td2thinh · 2025-06-07T16:49:42Z

Need reviews guys cause I'm not an Android dev by an means.

Cyrille-Dakhlia · 2025-06-07T20:36:54Z

True, we need this merged

quan-ngo-ts · 2025-06-24T10:00:09Z

tested on Android 15, google pixel device, if user deny the microphone permission and receive the call when screen is locked, accept the call will crash the app, the log is

AndroidRuntime: java.lang.RuntimeException: Unable to start service com.hiennv.flutter_callkit_incoming.OngoingNotificationService@b876f4e with Intent { cmp=com.quanngo.calltesting/com.hiennv.flutter_callkit_incoming.OngoingNotificationService (has extras) }: java.lang.SecurityException: Starting FGS with type microphone callerApp=ProcessRecord{5d9029e 4916:com.quanngo.calltesting/u0a306} targetSDK=34 requires permissions: all of the permissions allOf=true [android.permission.FOREGROUND_SERVICE_MICROPHONE] any of the permissions allOf=false [android.permission.CAPTURE_AUDIO_HOTWORD, android.permission.CAPTURE_AUDIO_OUTPUT, android.permission.CAPTURE_MEDIA_OUTPUT, android.permission.CAPTURE_TUNER_AUDIO_INPUT, android.permission.CAPTURE_VOICE_COMMUNICATION_OUTPUT, android.permission.RECORD_AUDIO]  and the app must be in the eligible state/exemptions to access the foreground only permission
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.app.ActivityThread.handleServiceArgs(ActivityThread.java:5246)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.app.ActivityThread.-$$Nest$mhandleServiceArgs(Unknown Source:0)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.app.ActivityThread$H.handleMessage(ActivityThread.java:2546)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.os.Handler.dispatchMessage(Handler.java:109)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.os.Looper.loopOnce(Looper.java:232)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.os.Looper.loop(Looper.java:317)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.app.ActivityThread.main(ActivityThread.java:8787)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at java.lang.reflect.Method.invoke(Native Method)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:591)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:871)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: Caused by: java.lang.SecurityException: Starting FGS with type microphone callerApp=ProcessRecord{5d9029e 4916:com.quanngo.calltesting/u0a306} targetSDK=34 requires permissions: all of the permissions allOf=true [android.permission.FOREGROUND_SERVICE_MICROPHONE] any of the permissions allOf=false [android.permission.CAPTURE_AUDIO_HOTWORD, android.permission.CAPTURE_AUDIO_OUTPUT, android.permission.CAPTURE_MEDIA_OUTPUT, android.permission.CAPTURE_TUNER_AUDIO_INPUT, android.permission.CAPTURE_VOICE_COMMUNICATION_OUTPUT, android.permission.RECORD_AUDIO]  and the app must be in the eligible state/exemptions to access the foreground only permission
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.os.Parcel.createExceptionOrNull(Parcel.java:3231)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.os.Parcel.createException(Parcel.java:3215)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.os.Parcel.readException(Parcel.java:3198)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.os.Parcel.readException(Parcel.java:3140)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.app.IActivityManager$Stub$Proxy.setServiceForeground(IActivityManager.java:7193)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.app.Service.startForeground(Service.java:863)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at com.hiennv.flutter_callkit_incoming.OngoingNotificationService.showOngoingCallNotification(OngoingNotificationService.kt:181)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at com.hiennv.flutter_callkit_incoming.OngoingNotificationService.onStartCommand(OngoingNotificationService.kt:40)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.app.ActivityThread.handleServiceArgs(ActivityThread.java:5228)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	... 9 more
06-24 16:30:27.607  1826  1866 W ActivityTaskManager:   Force finishing activity com.quanngo.calltesting/com.example.flutter_callkit_incoming_example.MainActivity

td2thinh · 2025-06-24T11:33:41Z

tested on Android 15, google pixel device, if user deny the microphone permission and receive the call when screen is locked, accept the call will crash the app, the log is

AndroidRuntime: java.lang.RuntimeException: Unable to start service com.hiennv.flutter_callkit_incoming.OngoingNotificationService@b876f4e with Intent { cmp=com.quanngo.calltesting/com.hiennv.flutter_callkit_incoming.OngoingNotificationService (has extras) }: java.lang.SecurityException: Starting FGS with type microphone callerApp=ProcessRecord{5d9029e 4916:com.quanngo.calltesting/u0a306} targetSDK=34 requires permissions: all of the permissions allOf=true [android.permission.FOREGROUND_SERVICE_MICROPHONE] any of the permissions allOf=false [android.permission.CAPTURE_AUDIO_HOTWORD, android.permission.CAPTURE_AUDIO_OUTPUT, android.permission.CAPTURE_MEDIA_OUTPUT, android.permission.CAPTURE_TUNER_AUDIO_INPUT, android.permission.CAPTURE_VOICE_COMMUNICATION_OUTPUT, android.permission.RECORD_AUDIO]  and the app must be in the eligible state/exemptions to access the foreground only permission
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.app.ActivityThread.handleServiceArgs(ActivityThread.java:5246)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.app.ActivityThread.-$$Nest$mhandleServiceArgs(Unknown Source:0)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.app.ActivityThread$H.handleMessage(ActivityThread.java:2546)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.os.Handler.dispatchMessage(Handler.java:109)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.os.Looper.loopOnce(Looper.java:232)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.os.Looper.loop(Looper.java:317)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.app.ActivityThread.main(ActivityThread.java:8787)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at java.lang.reflect.Method.invoke(Native Method)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:591)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:871)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: Caused by: java.lang.SecurityException: Starting FGS with type microphone callerApp=ProcessRecord{5d9029e 4916:com.quanngo.calltesting/u0a306} targetSDK=34 requires permissions: all of the permissions allOf=true [android.permission.FOREGROUND_SERVICE_MICROPHONE] any of the permissions allOf=false [android.permission.CAPTURE_AUDIO_HOTWORD, android.permission.CAPTURE_AUDIO_OUTPUT, android.permission.CAPTURE_MEDIA_OUTPUT, android.permission.CAPTURE_TUNER_AUDIO_INPUT, android.permission.CAPTURE_VOICE_COMMUNICATION_OUTPUT, android.permission.RECORD_AUDIO]  and the app must be in the eligible state/exemptions to access the foreground only permission
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.os.Parcel.createExceptionOrNull(Parcel.java:3231)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.os.Parcel.createException(Parcel.java:3215)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.os.Parcel.readException(Parcel.java:3198)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.os.Parcel.readException(Parcel.java:3140)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.app.IActivityManager$Stub$Proxy.setServiceForeground(IActivityManager.java:7193)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.app.Service.startForeground(Service.java:863)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at com.hiennv.flutter_callkit_incoming.OngoingNotificationService.showOngoingCallNotification(OngoingNotificationService.kt:181)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at com.hiennv.flutter_callkit_incoming.OngoingNotificationService.onStartCommand(OngoingNotificationService.kt:40)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	at android.app.ActivityThread.handleServiceArgs(ActivityThread.java:5228)
06-24 16:30:27.604  4916  4916 E AndroidRuntime: 	... 9 more
06-24 16:30:27.607  1826  1866 W ActivityTaskManager:   Force finishing activity com.quanngo.calltesting/com.example.flutter_callkit_incoming_example.MainActivity

If the permission is granted beforehand, all is working as intended? I think this could be easily avoided by having a check for microphone access before showing the incoming call notification. The proper way is to add try-catch and error handling in the native code. I currently don't have the time to work on this.

shimulxx · 2025-06-30T11:46:10Z

Waiting for fixing issue....

hiennguyen92 and others added 3 commits April 7, 2025 18:22

fix: make all intents explicit

8db2d86

fix: avoid task hijacking

be47640

td2thinh mentioned this pull request Apr 16, 2025

I am receiving a report regarding a security vulnerability. #651

Closed

td2thinh changed the title ~~Fix/android14 compatibility~~ fix: Android 14+ compatibility Apr 17, 2025

td2thinh added 2 commits May 7, 2025 15:35

fix: background microphone and camera for Android 14+

f5d369a

feat: update readme regarding Android 14+

508c27b

This was referenced May 28, 2025

Android 14 Samsung, device no wake up when receiving notification (call or decline) #680

Open

Android 14 + Call when lock screen #679

Closed

Ndivhuwo approved these changes Jun 7, 2025

View reviewed changes

td2thinh requested a review from Ndivhuwo June 7, 2025 17:24

fix: update README locked device permission

1fcb356

Ndivhuwo approved these changes Jun 8, 2025

View reviewed changes

hiennguyen92 changed the base branch from master to dev June 30, 2025 09:02

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Uh oh!

fix: Android 14+ compatibility #666

fix: Android 14+ compatibility #666

Uh oh!

td2thinh commented Apr 16, 2025 •

edited

Loading

Uh oh!

td2thinh commented May 20, 2025

Uh oh!

patrikheinonen commented May 28, 2025

Uh oh!

Ndivhuwo commented Jun 7, 2025

Uh oh!

td2thinh commented Jun 7, 2025

Uh oh!

Cyrille-Dakhlia commented Jun 7, 2025

Uh oh!

quan-ngo-ts commented Jun 24, 2025

Uh oh!

td2thinh commented Jun 24, 2025

Uh oh!

shimulxx commented Jun 30, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

Uh oh!

Uh oh!

fix: Android 14+ compatibility #666

Are you sure you want to change the base?

fix: Android 14+ compatibility #666

Uh oh!

Conversation

td2thinh commented Apr 16, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What type of PR is this? (check all applicable)

Description

Related Tickets & Documents

Proposed Changes:

Uh oh!

td2thinh commented May 20, 2025

Uh oh!

patrikheinonen commented May 28, 2025

Uh oh!

Ndivhuwo commented Jun 7, 2025

Uh oh!

td2thinh commented Jun 7, 2025

Uh oh!

Cyrille-Dakhlia commented Jun 7, 2025

Uh oh!

quan-ngo-ts commented Jun 24, 2025

Uh oh!

td2thinh commented Jun 24, 2025

Uh oh!

shimulxx commented Jun 30, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

td2thinh commented Apr 16, 2025 •

edited

Loading