filter deviceIdentifiers for subscriptionInfo if callers without perm
Fix a security issue that app can read iccId of sim card(s) without requiring READ_PRIVILEGED_PHONE_STATE permission when calling hidden API SubscriptionManager.getAllActiveSubscriptionInfoList. Apply deviceIdentifier filter to remove those info if the caller does not have proper permissions. The previous fix forgot to reassign returned value with filtered result. Bug: 183612370 Test: Manual Change-Id: I592a100f274bfe8a9f1b17b9a4c54ae2aadd6fdb Merged-in: I592a100f274bfe8a9f1b17b9a4c54ae2aadd6fdb
Loading
-
mentioned in commit 3d48641f
-
mentioned in commit 57ae48c1
-
mentioned in commit 35e6b797
-
mentioned in commit b0b9b9ba
-
mentioned in commit 4be272cf
-
mentioned in commit 2e425797
-
mentioned in commit e87634c4
-
mentioned in commit 3369535e
-
mentioned in commit 75ed7799
-
mentioned in commit ff848ef8
-
mentioned in commit f4fdacc4
Please register or sign in to comment