filter deviceIdentifiers for subscriptionInfo if callers without perm
Fix a security issue that app can read iccId of sim card(s) without requiring READ_PRIVILEGED_PHONE_STATE permission when calling hidden API SubscriptionManager.getAllActiveSubscriptionInfoList. Apply deviceIdentifier filter to remove those info if the caller does not have proper permissions. Bug: 183612370 Test: Manual Merged-in: If7d243c40d187008f8cb314b162228cbad1702a4 Change-Id: If7d243c40d187008f8cb314b162228cbad1702a4 (cherry picked from commit f6bb9b20) (cherry picked from commit 0f869d07)
Loading
Please register or sign in to comment