Merge "Enforce package visibility to the api checkUriPermission" into sc-dev (293b6bf6) · Commits · e / os / android_frameworks_base

services/core/java/com/android/server/am/ActivityManagerService.java

+10 −0

Original line number	Diff line number	Diff line
		@@ -5684,6 +5684,16 @@ public class ActivityManagerService extends IActivityManager.Stub
		if (pid == MY_PID) {
		return PackageManager.PERMISSION_GRANTED;
		}
		try {
		if (uid != 0) { // bypass the root
		final String[] packageNames = getPackageManager().getPackagesForUid(uid);
		if (ArrayUtils.isEmpty(packageNames)) {
		// The uid is not existed or not visible to the caller.
		return PackageManager.PERMISSION_DENIED;
		}
		}
		} catch (RemoteException e) {
		}
		return mUgmInternal.checkUriPermission(new GrantUri(userId, uri, modeFlags), uid, modeFlags)
		? PackageManager.PERMISSION_GRANTED : PackageManager.PERMISSION_DENIED;
		}