filter deviceIdentifiers for subscriptionInfo if callers without perm
Fix a security issue that app can read iccId of sim card(s) without requiring READ_PRIVILEGED_PHONE_STATE permission when calling hidden API SubscriptionManager.getAllActiveSubscriptionInfoList. Apply deviceIdentifier filter to remove those info if the caller does not have proper permissions. The previous fix forgot to reassign returned value with filtered result. Bug: 183612370 Test: Manual Change-Id: I592a100f274bfe8a9f1b17b9a4c54ae2aadd6fdb (cherry picked from commit 9845ef56) Merged-In:I592a100f274bfe8a9f1b17b9a4c54ae2aadd6fdb
Loading
Please register or sign in to comment