Using CountQuotaTrack to limit how frequent an app can request aspect
ratio change via PictureInPictureParams, which could result flood of PiP
resizing requests and freeze the PiP window.

Note that CountQuotaTrack is initialized out of the WM lock to avoid
dead lock with the AM one.

Bug: 283103220
Test: Manually, using the POC app
Test: Manually, switching YT PiP video functions at a regular rate
Test: atest WindowOrganizerTests ActivityThreadTest
Merged-In: Icb7dd17bbf7df573a9bb28f3dc56e90e78384f4f
Change-Id: Icb7dd17bbf7df573a9bb28f3dc56e90e78384f4f

Apply similar fix for WallpaperService to TextToSpeech Service,
Job Service, Print Service, Sync Service and MediaRoute2Provider Service

Bug: 232798473, 232798676, 336490997
Test: Manual test. BackgroundActivityLaunchTest
Change-Id: Ib113e45aa18296b4475b90d6dcec5dd5664f4c80

Test: Cherry pick of http://ag/27094197
Bug: 294105066
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:2ce2e54a040342373e401f9c2e70035ede4e63ad)
Merged-In: I7d54534696fd73f3b94c5b4250142eed9341c5d8
Merged-In: I7de666b9c807f0458bf0df291bab4da2cb98f886
Change-Id: I7d54534696fd73f3b94c5b4250142eed9341c5d8

* changes:
  RESTRICT AUTOMERGE - Revert "Refactor the SADeviceState to AdiDeviceState"
  RESTRICT AUTOMERGE - Revert "AudioService: anonymize Bluetooth MAC addresses"

Revert submission 25286114-anon_bt_address_sc_dev

Reason for revert: b/329515274
Reverted changes: /q/submissionid:25286114-anon_bt_address_sc_dev

Change-Id: I808f111cbc0c493edde92906e7b7700b48b05c5f
Merged-In: I97a97fea0952227a9663e7001c9f031fb3cc725e

Revert submission 25286114-anon_bt_address_sc_dev

Reason for revert: b/329515274
Reverted changes: /q/submissionid:25286114-anon_bt_address_sc_dev

Change-Id: Icd29d064dda03923637b362bb62eeaf2eeebcec2
Merged-In: I016a65db2e2f9a60a80bd63aebf5f6267e31f88b

The original removePermission() code in PermissionManagerService
missed a logical negation operator when handling non-dynamic
permissions, causing both
testPermissionPermission_nonDynamicPermission_permissionUnchanged and
testRemovePermission_dynamicPermission_permissionRemoved tests in
DynamicPermissionsTest to fail.

The corresponding test DynamicPermissionsTest is also updated in the
other CL: ag/27073864

Bug: 321711213
Test: DynamicPermissionsTest on sc-dev and tm-dev locally
Change-Id: Id573b75cdcfce3a1df5731ffb00c4228c513e686
Merged-In: Ia146d4098643d9c473f8c83d33a8a125a53101fc

Bug: 329230490

Change-Id: I1af123d3a3e8c0e7a56686a3b66e74a7196a91b4
Test: manual

Merge "[RESTRICT AUTOMERGE][PM] Send ACTION_PACKAGE_CHANGED when mimeGroups are changed" into sc-dev

Bug: 317048338
Test: Using the steps in b/317048338#comment12
Change-Id: Ia91199fdb23beed27bde687fdca8fe5d3a5a4759
(cherry picked from commit c5fc8ea9)
Merged-In: Ia91199fdb23beed27bde687fdca8fe5d3a5a4759

Override handleShellCommand instead of onShellCommand because
Binder.onShellCommand checks the necessary permissions of the caller.

Bug: 313428840

Test: manually tested CDM shell commands
Change-Id: I5539b3594feb5544c458c0fd1061b51a0a808900
Merged-In: I5539b3594feb5544c458c0fd1061b51a0a808900
(cherry picked from commit 1761a0fe)

Merge "[RESTRICT AUTOMERGE] AccessibilityManagerService: remove uninstalled services from enabled list after service update." into sc-dev

Merge "[DO NOT MERGE][Autofill Framework] Add in check for intent filter when setting/updating service" into sc-dev

Merge "[DO NOT MERGE][CDM] Fix a security issue that allow 3p apps to skip prompt by setSkipPrompt" into sc-dev

[RESTRICT AUTOMERGE] AccessibilityManagerService: remove uninstalled services from enabled list after service update.

Bug: 326485767
Test: atest AccessibilityEndToEndTest#testUpdateServiceWithoutIntent_disablesService
Change-Id: I5e59296fcad68e62b34c74ee5fd80b6ad6b46fa1

setting/updating service

For test, I registered two tests around on ABTD. CtsAutoFillServiceTestCases module is passing except three known failures:

Test run link:
- https://android-build.corp.google.com/builds/abtd/run/L33300030002610600
- https://android-build.corp.google.com/builds/abtd/run/L58100030002616607


Bug: b/324874908
Test: atest CtsAutoFillServiceTestCases
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:141d9d050346bfc4673c429382deb1b3d210f6ad)
Merged-In: I51c2e3788ac29ff4d6b86aa2a735ff2ea1463a77
Change-Id: I51c2e3788ac29ff4d6b86aa2a735ff2ea1463a77

Test: atest CtsPackageManagerTestCases:PackageManagerShellCommandMultiUserTest
Test: atest CtsPackageManagerTestCases:PackageManagerTest
Bug: 297517712
Merged-In: I271a3526ea4555249e3a2797605269257330e0e9
Change-Id: I271a3526ea4555249e3a2797605269257330e0e9

Refuse to deal with newlines and null characters in
HiddenApiSettings.update(). Also disallow nulls in process start
arguments.

Bug: 316153291
Test: Treehugger for now
Change-Id: I83cd60e46407a4a082f9f3c80e937dbd522dbac4
(cherry picked from commit 7ba059e2)

Another verification is needed after Bundle modification.
Bug: 321941232
Test: manual

Change-Id: I9e45d758a2320328da5664b6341eafe6f285f297

AttributionSource uses Binder.getCallingUid to verify the UID of the
caller from another process. However, getCallingUid does not always
behave as expected. If the AttributionSource is unparceled outside a
transaction thread, which is quite possible, getCallingUid will return
the UID of the current process instead. If this is a system process,
the UID check gets bypassed entirely, meaning any uid can be provided.

This patch fixes the vulnerability by enforcing that the AttributionSource
be unparceled in a transaction only. If it is not, a SecurityException
will be thrown.

Bug: 267231571
Test: Smoke test on cuttlefish.
Test: v2/android-virtual-infra/test_mapping/presubmit-avd
Change-Id: Iee28c3901ee1041e00dca444c37c90d619e19b26
Merged-In: I3f228064fbd62e1c907f1ebe870cb61102f788f0
Merged-In: Ic301a8518b8e57e1c9a2c9f2f845e51dca145257

Media carousel visibility on lock screen follows the notification
setting - if notifications are disabled on lock screen, hide media carousel
everywhere, not just in the keyguard layout

Bug: 314333719
Test: manual
Test: atest MediaHierarchyManagerTest
Flag: NONE

Change-Id: I4f618e4013db894291e6fca9d49bceb1cb7e4bd9
Merged-In: I4f618e4013db894291e6fca9d49bceb1cb7e4bd9

Bug: 317503801
Test: atest ExpandableNotificationRowTest
Change-Id: I11c5b39f2d9d8f0788acab43640a6d4abcd5a179
Merged-In: I11c5b39f2d9d8f0788acab43640a6d4abcd5a179

Fix: 329230490

Change-Id: I6e4dd33cbf98293d7efa0a40c0668d6c5242059a
Test: CTS

Before, the test gets root implicitly via DeviceSetup which
wasn't intented.

Change-Id: Ib227960223dca1f4b4b73601d1e36ccd93d078e5
Merged-In: I4b86fd5ee31f746942a2bf073a29cb2180a39f27
Test: presubmit
Bug: 330749511