Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 126a0dc5 authored by Kunal Malhotra's avatar Kunal Malhotra Committed by Automerger Merge Worker
Browse files

Merge "Checking if package belongs to UID before registering broadcast... 

Merge "Checking if package belongs to UID before registering broadcast receiver" into sc-qpr1-dev am: cb603fa9 am: 0be797c6

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/20640127



Change-Id: If728a52e1480ab03bce862e518755790b7a2345e
Signed-off-by: default avatarAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
parents 3271ef39 0be797c6

services/core/java/com/android/server/am/ActiveServices.java

+5 −0
Original line number Diff line number Diff line
@@ -3411,6 +3411,11 @@ public final class ActiveServices { 
                            throw new SecurityException("BIND_EXTERNAL_SERVICE failed, "

                                    + className + " is not an isolatedProcess");

                        }

                        if (AppGlobals.getPackageManager().getPackageUid(callingPackage,

                                0, userId) != callingUid) {

                            throw new SecurityException("BIND_EXTERNAL_SERVICE failed, "

                                    + "calling package not owned by calling UID ");

                        }

                        // Run the service under the calling package's application.

                        ApplicationInfo aInfo = AppGlobals.getPackageManager().getApplicationInfo(

                                callingPackage, ActivityManagerService.STOCK_PM_FLAGS, userId);