Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 5a6369bd authored by mayankkk's avatar mayankkk Committed by Evelyn Torres
Browse files

Don't allow non-system uids to use "android" as calling package. 

Bug: 310632322
Test: atest ./BroadcastsSecurityTest/src/android/app/cts/broadcasts/BroadcastRegistrationTest.java
Flag: EXEMPT bugfix
(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:84e975cf12759d04863e35abf51a94356c6b4c25)
Merged-In: I83537fde6cad2073e767d56c27cd25b82f29c235
Change-Id: I83537fde6cad2073e767d56c27cd25b82f29c235
parent 0e2e1e8b

services/core/java/com/android/server/am/ActivityManagerService.java

+1 −2
Original line number Diff line number Diff line
@@ -12484,8 +12484,7 @@ public class ActivityManagerService extends IActivityManager.Stub 
                            + ") when registering receiver " + receiver);

                }

                if (callerApp.info.uid != SYSTEM_UID

                        && !callerApp.getPkgList().containsKey(callerPackage)

                        && !"android".equals(callerPackage)) {

                        && !callerApp.getPkgList().containsKey(callerPackage)) {

                    throw new SecurityException("Given caller package " + callerPackage

                            + " is not running in process " + callerApp);

                }