Anonymize bt addresses in listAudioPorts
Fix a security bypass where listAudioPorts would provide BT MAC addresses without the required permission. If a client doesn't have BLUETOOTH_CONNECT, partially redact the address. To avoid performance issues, this change: - Caches uids which hold the permission, invalidating them on the package manager cache invalidation sysprop - Ensures we only call the check outside of any locks in audioserver. Soaking for backport on main, a better solution to follow. Test: Manual repro using the POC app Test: atest avatar:'AshaTest#test_music_start' Bug: 285588444 Bug: 372111389 Flag: EXEMPT security Change-Id: I5b7bbd98c6fc6a754438314c43c4998278e49db4
Loading
Please register or sign in to comment