Google Launches Open-Source Patch Validation Tool

Google announced Vanir, an open-source static analysis tool that automates detection of missing security patches across Android, Wear, and Pixel codebases; the brief highlights its 97% accuracy, coverage of 95% of known vulnerabilities with public fixes, low false-alarm rate, and ease of integration into OEM build and test systems to speed up patch validation.