Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 0be797c6 authored by Kunal Malhotra's avatar Kunal Malhotra Committed by Automerger Merge Worker
Browse files

Merge "Checking if package belongs to UID before registering broadcast... 

Merge "Checking if package belongs to UID before registering broadcast receiver" into sc-qpr1-dev am: cb603fa9

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/20640127



Change-Id: Id2f1cd95122ed0e7fe4302f84f5b925518adb182
Signed-off-by: default avatarAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
parents a637f188 cb603fa9

services/core/java/com/android/server/am/ActiveServices.java

+5 −0
Original line number Diff line number Diff line
@@ -3201,6 +3201,11 @@ public final class ActiveServices { 
                            throw new SecurityException("BIND_EXTERNAL_SERVICE failed, "

                                    + className + " is not an isolatedProcess");

                        }

                        if (AppGlobals.getPackageManager().getPackageUid(callingPackage,

                                0, userId) != callingUid) {

                            throw new SecurityException("BIND_EXTERNAL_SERVICE failed, "

                                    + "calling package not owned by calling UID ");

                        }

                        // Run the service under the calling package's application.

                        ApplicationInfo aInfo = AppGlobals.getPackageManager().getApplicationInfo(

                                callingPackage, ActivityManagerService.STOCK_PM_FLAGS, userId);