Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 1a8e9cd9 authored by Anna Bauza's avatar Anna Bauza
Browse files

Flag removal: FixAvatarCrossUserLeak 

Bug: 341688848
Flag: EXEMPT removing android.multiuser.fix_avatar_cross_user_leak
Test: N/A
Change-Id: Iceafcc53a0147c2709e9bfedfe1eefac3e22d868
parent 4bf3ab68

core/java/android/content/pm/multiuser.aconfig

+0 −10
Original line number Diff line number Diff line
@@ -115,16 +115,6 @@ flag { 
  }

}



flag {

    name: "fix_avatar_cross_user_leak"

    namespace: "multiuser"

    description: "Fix cross-user picture uri leak for avatar picker apps."

    bug: "341688848"

    metadata {

        purpose: PURPOSE_BUGFIX

  }

}



flag {

    name: "fix_avatar_content_provider_null_authority"

    namespace: "multiuser"

packages/SettingsLib/src/com/android/settingslib/users/EditUserPhotoController.java

+4 −7
Original line number Diff line number Diff line
@@ -132,13 +132,10 @@ public class EditUserPhotoController { 
        Intent intent = new Intent(AVATAR_PICKER_ACTION);

        intent.addCategory(Intent.CATEGORY_DEFAULT);

        intent.putExtra(EXTRA_IS_USER_NEW, isUserNew);

        // Fix vulnerability b/341688848 by explicitly set the class name of avatar picker.

        if (Flags.fixAvatarCrossUserLeak()) {

        final String packageName =

                mActivity.getString(R.string.config_avatar_picker_package);

        final String className = mActivity.getString(R.string.config_avatar_picker_class);

        intent.setClassName(packageName, className);

        }

        intent.putExtra(EXTRA_FILE_AUTHORITY, mFileAuthority);

        mActivityStarter.startActivityForResult(intent, REQUEST_CODE_PICK_AVATAR);

    }