WFS - Implicit PendingIntent Vulnerability - Play Console

Watch Face Studio
1

It looks like WFS needs quick fix for Implicit PendingIntent Vulnerability. It’s also possible that future app releases / updates will not be approved because of this. The error message only started showing today but we have been using WFS 1.0.12 for some time now.

image
image1826×711 55.4 KB

Google Help Centre article:
Remediation for Implicit PendingIntent Vulnerability - Google Help

2

Yeah, I am also facing the same issue. This is could be a problem for future submission on the Play Store. A quick hotfix is needed…

3

Are you getting this on your watch or on your companion Android app?

I’ll report this to the WFS Team.

Ron

4

Hi Ron,
it’s watch app issue - ComplicationHelperActivity.onRequestPermissionResult

  • androidx.wear.watchface.ComplicationHelperActivity.onRequestPermissionsResult

Tomas

5

Same here.
This issue refers to the Watch Face file.

6

This is new. I also have it to published watch face and even to approved but unpublished watch face.

7

Same here.
This error message shows up in Google Play Console under “Production” tab for my most recent watch faces created with WFS 1.0.12, but there is no such error on slightly older watch faces created with older WFS version 1.0.3, that’s interesting.

Google might decide to start suspending apps which don’t fully comply, so this should be fixed as soon as possible.

8

The strange thing is that this error doesn’t always appear.

For example, I have two watch faces created with the same version of WFS (1.0.12):

  • One watch face has this error and the other has no error.

(same complications and structure)

9

Same here. Even with the watch faces made with Android Studio.

10

I have the same message. All watchfaces created with WFS (1.0.12).

Screenshot 2022-02-23 135847
Screenshot 2022-02-23 1358471017×270 16.4 KB

11

You got this messages just with new uploads or also with untouched faces existing already on the market? I just asked because currently i don’t have this issue on any of my faces.

Note: I don’t use the companion app workaround.

:thinking:

12

androidx.wear.watchface.ComplicationHelperActivity.onRequestPermissionsResult

It has to be something on custom complication permissions implementation so when you use 1.0.12 but not using custom complications like SHORT_TEXT or LONG_TEXT it will not trigger this error.

1 Like
13

Ah ok … got it. Thx.

14

A planned update of WFS will be released tomorrow Feb 24th*. The Watch Face Studio team thinks the androidx they used will fix this. Once you rebuild with the newer version let us know if it does not fix this problem so they can prepare a hotfix.

*Please note that the documentation for the update is not finished.

Ron
Samsung Developer Relations

4 Likes
15

Will be the AOD issue fixed too? :thinking:

16

I’ve just rebuilt one of my watch faces with the new version of WFS and uploaded it to Google Play. I don’t see that ***PendingIntent error now. I think it solved the problem.
Many thanks to WFS developers for being fast with the issue solution.

17

AOD issue still remains. :frowning:

18

Yes because it’s firmware issue :slight_smile:

19

Yes, the issue for “PendingIntent Vulnerability” is solved by the new watch face studio (version 1.1.9)

20

Thanks @r.liechty_SDR for quickly pinging this to WFS team. Error is fixed. Other than that, we can now add more than 6 styles, we can now view and drag the arrangement of the images. I wish there will be no new errors that will arise. I hope in the coming WFS updates covers most of the requested fixes and changes. [UPDATE] I saw post from @Peter. Thanks for the list!