Compatibility framework changes (Android 14)

ACCESS_SHARED_IDENTITY

Grants access to the launching app's identity if the app opted-in to sharing its identity by launching this activity with an instance of ActivityOptions on which ActivityOptions.setShareIdentityEnabled(boolean) was invoked with a value of true, or if the launched activity's uid is the same as the launching app's. When this change is enabled and one of these requirements is met, the activity can access the launching app's uid and package name with Activity.getLaunchedFromUid() and Activity.getLaunchedFromPackage(), respectively.

ALWAYS_SANDBOX_DISPLAY_APIS

When enabled, applies Display API sandboxing to a package regardless of windowing mode. The Display APIs will always provide the app bounds.

To learn more about this change, see the section in the Android 12 behavior changes page about Display methods that were deprecated.

ANR_PRE_UDC_APIS_ON_SLOW_RESPONSES

When enabled, triggers an "Application Not Responding" (ANR) message when apps are slow to respond on APIs and functionality from Android 13 (API level 33) or lower.

AUTHORITY_ACCESS_CHECK_CHANGE_ID

For apps targeting Android 14 and higher, enables checking for authority access for the calling UID on all sync-related APIs.

CAMERA_MIC_INDICATORS_NOT_PRESENT

Indicates that this device supports camera and microphone indicators. Will be false if present, because the CompatChanges#isChangeEnabled method returns true if the Change ID is not present.

DEFAULT_RESCIND_BAL_FG_PRIVILEGES_BOUND_SERVICE

When an app sends a PendingIntent using PendingIntent#send() or similar methods, the app must now opt in if it wants to grant its own background activity launch privileges to start the pending intent.

To learn more about this change, see the section in the Android 14 behavior changes page about additional restrictions on starting activities from the background.

DETACH_THROWS_ISE_ONLY

Flag to gate correct exception thrown by #detachImage.

#detachImage is documented as throwing IllegalStateException in the event of an error; a native helper method to this threw RuntimeException if the surface was abandoned while detaching the Image.

This previously undocumented exception behavior continues through Android 13 (API level 33).

After Android 13 (API level 33), the native helper method only throws IllegalStateExceptions in accordance with the documentation.

When this change is enabled, #detachImage only throws an IllegalStateException if it runs into errors while detaching the image. Behavior remains unchanged for apps targeting Android 13 (API level 33) and lower.

DOWNSCALED

This change is the gatekeeper of all per-app buffer downscaling changes. Disabling this change prevents the following scaling factors from working:

• DOWNSCALE_30
• DOWNSCALE_35
• DOWNSCALE_40
• DOWNSCALE_45
• DOWNSCALE_50
• DOWNSCALE_55
• DOWNSCALE_60
• DOWNSCALE_65
• DOWNSCALE_70
• DOWNSCALE_75
• DOWNSCALE_80
• DOWNSCALE_85
• DOWNSCALE_90

When this change is enabled for an app package, the app is forcibly resized to the highest enabled scaling factor. For example, 80% is used if both 80% and 70% are enabled.

DOWNSCALE_30

When DOWNSCALED is also enabled, enabling this change for a package forces the app to assume it's running on a display with 30% vertical and horizontal resolution of the real display.

DOWNSCALE_35

When DOWNSCALED is also enabled, enabling this change for a package forces the app to assume it's running on a display with 35% vertical and horizontal resolution of the real display.

DOWNSCALE_40

When DOWNSCALED is also enabled, enabling this change for a package forces the app to assume it's running on a display with 40% vertical and horizontal resolution of the real display.

DOWNSCALE_45

When DOWNSCALED is also enabled, enabling this change for a package forces the app to assume it's running on a display with 45% vertical and horizontal resolution of the real display.

DOWNSCALE_50

When DOWNSCALED is also enabled, enabling this change for a package forces the app to assume it's running on a display with 50% vertical and horizontal resolution of the real display.

DOWNSCALE_55

When DOWNSCALED is also enabled, enabling this change for a package forces the app to assume it's running on a display with 55% vertical and horizontal resolution of the real display.

DOWNSCALE_60

When DOWNSCALED is also enabled, enabling this change for a package forces the app to assume it's running on a display with 60% vertical and horizontal resolution of the real display.

DOWNSCALE_65

When DOWNSCALED is also enabled, enabling this change for a package forces the app to assume it's running on a display with 65% vertical and horizontal resolution of the real display.

DOWNSCALE_70

When DOWNSCALED is also enabled, enabling this change for a package forces the app to assume it's running on a display with 70% vertical and horizontal resolution of the real display.

DOWNSCALE_75

When DOWNSCALED is also enabled, enabling this change for a package forces the app to assume it's running on a display with 75% vertical and horizontal resolution of the real display.

DOWNSCALE_80

When DOWNSCALED is also enabled, enabling this change for a package forces the app to assume it's running on a display with 80% vertical and horizontal resolution of the real display.

DOWNSCALE_85

When DOWNSCALED is also enabled, enabling this change for a package forces the app to assume it's running on a display with 85% vertical and horizontal resolution of the real display.

DOWNSCALE_90

When DOWNSCALED is also enabled, enabling this change for a package forces the app to assume it's running on a display with 90% vertical and horizontal resolution of the real display.

DYNAMIC_RECEIVER_EXPLICIT_EXPORT_REQUIRED

When enabled, requires an app to explicitly set either Context.RECEIVER_EXPORTED or Context.RECEIVER_NOT_EXPORTED when registering a receiver for an unprotected broadcast in code.

To learn more, see the section on Safer exporting of context-registered receivers.

ENABLE_PLATFORM_MDNS_BACKEND

Apps targeting Android 14 or higher use a platform-integrated mDNS implementation as backend, while apps targeting previous versions continue to use a legacy Network service discovery (NSD) backend (with a legacy native daemon as NsdManager backend).

ENABLE_SELF_CERTIFIED_CAPABILITIES_DECLARATION

The self-certified capabilities check is enabled for apps targeting Android 14 or higher. See NetworkCapabilities for more details.

ENFORCE_PACKAGE_VISIBILITY_FILTERING

For apps targeting Android 14 and higher, requires apps to declare package visibility needs in the manifest in order to access the AccountManager APIs.

ENFORCE_READ_ONLY_JAVA_DCL

For apps targeting Android 14 and higher, requires all dynamically-loaded files to be marked as read-only. This prevents files that are dynamically loaded from being unexpectedly overwritten by malicious actors.

ENFORCE_STRICT_QUERY_BUILDER

When enabled, the SQLiteQueryBuilder verifies all CalendarProvider2 query selections against malicious arguments.

FGS_TYPE_CHECK_FOR_INSTANT_APPS

When enabled, instant apps must specify appropriate foreground service types for any services that are declared in the app's manifest file.

To learn more about this change, see the page describing the changes to foreground service types.

FGS_TYPE_NONE_DEPRECATION_CHANGE_ID

When enabled, apps targeting Android 14 and higher that start a foreground service using the deprecated FOREGROUND_SERVICE_TYPE_NONE type results in a warning in the log.

To learn more about this change, see the page describing the changes to foreground service types.

FGS_TYPE_NONE_DISABLED_CHANGE_ID

When enabled, apps targeting Android 14 and higher that start a foreground service using the deprecated FOREGROUND_SERVICE_TYPE_NONE type results in an exception.

To learn more about this change, see the page describing the changes to foreground service types.

FGS_TYPE_PERMISSION_CHANGE_ID

When enabled, apps targeting Android 14 and higher that start a foreground service without the required permissions associated with that foreground service's type results in a SecurityException.

To learn more about this change, see the page describing the changes to foreground service types.

FORCE_DISABLE_HEVC_SUPPORT

Force disable an app from supporting the HEVC media capability. Apps should declare their supported media capabilities in their manifest but this flag can be used to force an app into not supporting HEVC, hence forcing transcoding while accessing media encoded in HEVC. Setting this flag will override any OS level defaults for apps. It is disabled by default, meaning that the OS defaults take precedence. Setting this flag and FORCE_ENABLE_HEVC_SUPPORT is an undefined state and will result in the OS ignoring both flags.

FORCE_ENABLE_HEVC_SUPPORT

Force enable an app to support the HEVC media capability Apps should declare their supported media capabilities in their manifest but this flag can be used to force an app into supporting HEVC, hence avoiding transcoding while accessing media encoded in HEVC. Setting this flag will override any OS level defaults for apps. It is disabled by default, meaning that the OS defaults would take precedence. Setting this flag and FORCE_DISABLE_HEVC_SUPPORT is an undefined state and will result in the OS ignoring both flags.

FORCE_NON_RESIZE_APP

Forces the packages it is applied to to be non-resizable.

FORCE_RESIZE_APP

Forces the packages it is applied to to be resizeable. We only allow resizing in fullscreen windowing mode, but not forcing the app into resizeable multi-windowing mode.

GWP_ASAN

Enables sampled native memory bug detection in apps.

To learn more about using GWP-ASan, see the GWP-ASan guide.

IMPLICIT_INTENTS_ONLY_MATCH_EXPORTED_COMPONENTS

For apps targeting Android 14 and higher, components must be exported in order to invoke them through implicit intents. If a component is not exported and invoked, it will be removed from the list of receivers. This applies specifically to activities and broadcasts.

KEYSTORE_OPERATION_CREATION_MAY_FAIL

When enabled, keystore operation creation might fail according to the new pruning strategy. Keystore used to work under the assumption that the creation of cryptographic operations always succeeds. However, the KeyMint backend has only a limited number of operation slots.

In order to keep up the appearance of "infinite" operation slots, the Keystore daemon would prune least recently used operations if there was no available operation slot. As a result, good operations could be terminated prematurely. This opened up AndroidKeystore up to denial-of-service (DoS) and unintended livelock. For example, if multiple apps woke up at the same time due to power management optimizations and attempted to perform crypto operations, they start terminating each others operations without making any progress.

To break out of livelocks and to discourage DoS attempts, we have changed the pruning strategy for such that it prefers clients that use few operation slots briefly. As a result, single operations that don't linger inactive for more than 5 seconds will almost always conclude unhampered by the pruning strategy. There are still some operations related to file system encryption that can prune even these operations, but those cases are extremely rare. As a side effect of this new pruning strategy operation, creation can now fail if the client has a lower pruning power than all of the existing operations.

Pruning strategy: To find a suitable candidate, we compute the malus for the caller and each existing operation. The malus is the inverse of the pruning power (caller) or pruning resistance (existing operation). For the caller to be able to prune an operation, it must find an operation with a malus higher than its own. For more details on the pruning strategy, see the implementation of operation.rs. On Android 11 (API level 30) and lower, KeyStore2 will poll the Keystore daemon for a free operation slot. For apps targeting Android 11 (API level 30) and lower, it will still look like cipher and signature object initialization always succeeds—however, it may take longer to get an operation. All Android versions benefit from fairer operation slot scheduling and a better chance to successfully conclude an operation.

NATIVE_HEAP_ZERO_INIT

Enable automatic zero-initialization of native heap memory allocations.

NATIVE_MEMTAG_ASYNC

Enable asynchronous (ASYNC) memory tag checking in this process. This flag only affects hardware supporting the ARM Memory Tagging Extension (MTE).

NATIVE_MEMTAG_SYNC

Enables synchronous (SYNC) memory tag checking in this process. This flag only affects hardware supporting the ARM Memory Tagging Extension (MTE). If both NATIVE_MEMTAG_ASYNC and this option are enabled, this option takes precedence and MTE is enabled in SYNC mode.

NEVER_SANDBOX_DISPLAY_APIS

When enabled, prevents Display API sandboxing from applying to a letterbox or SCM activity. The Display APIs will continue to provide DisplayArea bounds.

To learn more about this change, see the section in the Android 12 behavior changes page about Display methods that were deprecated.

OVERRIDE_CAMERA_RESIZABLE_AND_SDK_CHECK

When enabled this change id forces the packages it is applied to ignore the current value of android:resizeableActivity as well as target SDK equal to or below M and consider the activity as non-resizeable. In this case, the value of camera rotate and crop will only depend on the needed compensation considering the current display rotation.

OVERRIDE_CAMERA_ROTATE_AND_CROP_DEFAULTS

When enabled this change id forces the packages it is applied to override the default camera rotate and crop behavior and always return CaptureRequest.SCALER_ROTATE_AND_CROP_NONE. The default behavior along with all possible override combinations is discussed in the table below.

OVERRIDE_MIN_ASPECT_RATIO

This change is the gatekeeper of all changes that force a given minimum aspect ratio. Enabling this change allows the following minimum aspect ratios to be applied:

• OVERRIDE_MIN_ASPECT_RATIO_LARGE
• OVERRIDE_MIN_ASPECT_RATIO_MEDIUM
• OVERRIDE_MIN_ASPECT_RATIO_PORTRAIT_ONLY

When this change is enabled for an app package, the minimum aspect ratio given in the app's manifest is overridden to the largest enabled aspect ratio unless the app's manifest value is higher.

OVERRIDE_MIN_ASPECT_RATIO_LARGE

When OVERRIDE_MIN_ASPECT_RATIO is also enabled, enabling this change for a package sets the activity's minimum aspect ratio to a large value as defined by OVERRIDE_MIN_ASPECT_RATIO_LARGE_VALUE.

OVERRIDE_MIN_ASPECT_RATIO_MEDIUM

When OVERRIDE_MIN_ASPECT_RATIO is also enabled, enabling this change for a package sets the activity's minimum aspect ratio to a medium value as defined by OVERRIDE_MIN_ASPECT_RATIO_MEDIUM_VALUE.

OVERRIDE_MIN_ASPECT_RATIO_PORTRAIT_ONLY

When OVERRIDE_MIN_ASPECT_RATIO is also enabled, enabling this change for a package limits any other changes that force an activity's minimum aspect ratio to a certain value—such as OVERRIDE_MIN_ASPECT_RATIO_LARGE and OVERRIDE_MIN_ASPECT_RATIO_MEDIUM—to activities that also have a portrait orientation.

RATE_LIMIT_TOASTS

Enables rate limiting on the number of Toast.show() calls to prevent overburdening the user with too many toasts in a limited time. Any attempt to show more toasts than allowed in a certain time frame will result in the toast being discarded.

REJECT_NEGATIVE_NETWORK_ESTIMATES

When enabled, requires that estimated network bytes are nonnegative.

REQUIRE_NETWORK_CONSTRAINT_FOR_NETWORK_JOB_WORK_ITEMS

For apps targeting Android 14 and higher, requires the hosting job to specify a network constraint if the included JobWorkItem indicates network usage.

REQUIRE_NETWORK_PERMISSIONS_FOR_CONNECTIVITY_JOBS

For apps targeting Android 14 and higher, requires apps to specify both the INTERNET and ACCESS_NETWORK_STATE permissions when scheduling a job with a connectivity constraint.

THROW_ON_INVALID_DATA_TRANSFER_IMPLEMENTATION

For apps targeting Android 14 and higher, the system throws an exception if an app doesn't properly implement all the necessary data transfer APIs.

USE_EXPERIMENTAL_COMPONENT_ALIAS

When enabled, the system allows the "android" package to use component aliases.