Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 9505e075 authored by Michael W's avatar Michael W
Browse files

fw/av: Require service UID for LIST_AUDIO_SESSIONS 

* Should prevent an information disclosure

Change-Id: I83e1dc2d175c37fdc6057c2ddca94ad4d7d5b6c4
parent fc4b421a

media/libaudioclient/IAudioPolicyService.cpp

+2 −1
Original line number Diff line number Diff line
@@ -1371,7 +1371,8 @@ status_t BnAudioPolicyService::onTransact( 
        case LIST_AUDIO_VOLUME_GROUPS:

        case GET_VOLUME_GROUP_FOR_ATTRIBUTES:

        case SET_RTT_ENABLED:

        case SET_ALLOWED_CAPTURE_POLICY: {

        case SET_ALLOWED_CAPTURE_POLICY:

        case LIST_AUDIO_SESSIONS: {

            if (!isServiceUid(IPCThreadState::self()->getCallingUid())) {

                ALOGW("%s: transaction %d received from PID %d unauthorized UID %d",

                      __func__, code, IPCThreadState::self()->getCallingPid(),