Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 1c21f50d authored by Kunal Malhotra's avatar Kunal Malhotra Committed by Automerger Merge Worker
Browse files

Merge "Checking if package belongs to UID before registering broadcast... 

Merge "Checking if package belongs to UID before registering broadcast receiver" into sc-qpr1-dev am: cb603fa9 am: 0be797c6 am: 126a0dc5

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/20640127



Change-Id: Iaf8d206a570011174300f4538ad7cae581696a93
Signed-off-by: default avatarAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
parents 87bdfeea 126a0dc5

services/core/java/com/android/server/am/ActiveServices.java

+5 −0
Original line number Diff line number Diff line
@@ -3411,6 +3411,11 @@ public final class ActiveServices { 
                            throw new SecurityException("BIND_EXTERNAL_SERVICE failed, "

                                    + className + " is not an isolatedProcess");

                        }

                        if (AppGlobals.getPackageManager().getPackageUid(callingPackage,

                                0, userId) != callingUid) {

                            throw new SecurityException("BIND_EXTERNAL_SERVICE failed, "

                                    + "calling package not owned by calling UID ");

                        }

                        // Run the service under the calling package's application.

                        ApplicationInfo aInfo = AppGlobals.getPackageManager().getApplicationInfo(

                                callingPackage, ActivityManagerService.STOCK_PM_FLAGS, userId);