Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Unverified Commit 7d01d7f9 authored by Kevin F. Haggerty's avatar Kevin F. Haggerty
Browse files

Merge tag 'android-8.1.0_r69' into staging/lineage-15.1_merge-android-8.1.0_r69 

Android 8.1.0 Release 69 (5794017)

* tag 'android-8.1.0_r69':
  [RESTRICT AUTOMERGE] Pass correct realCallingUid to startActivity() if provided by PendingIntentRecord#sendInner()
  OP_REQUEST_INSTALL_PACKAGES denied by default
  Fix Layout.primaryIsTrailingPreviousAllLineOffsets
  HidProfile: sync isPreferred() with HidHostService

Change-Id: I3a921f5c9c1ab64e5b4c4f0d4afd6adda5d35e2e
parents 07645c9d dcd427cc

services/core/java/com/android/server/am/ActivityManagerService.java

+12 −5
Original line number Diff line number Diff line
@@ -4996,9 +4996,9 @@ public class ActivityManagerService extends IActivityManager.Stub 
                userId, false, ALLOW_FULL_ONLY, "startActivityInPackage", null);















        // TODO: Switch to user app stacks here.













        return mActivityStarter.startActivityMayWait(null, uid, callingPackage, intent,













                resolvedType, null, null, resultTo, resultWho, requestCode, startFlags,













                null, null, null, bOptions, false, userId, inTask, reason);













        return mActivityStarter.startActivityMayWait(null, uid, ActivityStarter.PID_NULL, uid,













                callingPackage, intent, resolvedType, null, null, resultTo, resultWho, requestCode,













                startFlags, null, null, null, bOptions, false, userId, inTask, reason);















    }





























    @Override









@@ -5018,13 +5018,20 @@ public class ActivityManagerService extends IActivityManager.Stub













    final int startActivitiesInPackage(int uid, String callingPackage,















            Intent[] intents, String[] resolvedTypes, IBinder resultTo,















            Bundle bOptions, int userId) {













        return startActivitiesInPackage(uid, ActivityStarter.PID_NULL, UserHandle.USER_NULL,













                callingPackage, intents, resolvedTypes, resultTo, bOptions, userId);













    }

























    final int startActivitiesInPackage(int uid, int realCallingPid, int realCallingUid,













                                       String callingPackage, Intent[] intents, String[] resolvedTypes,













                                       IBinder resultTo, Bundle bOptions, int userId) {





























        final String reason = "startActivityInPackage";















        userId = mUserController.handleIncomingUser(Binder.getCallingPid(), Binder.getCallingUid(),















                userId, false, ALLOW_FULL_ONLY, reason, null);















        // TODO: Switch to user app stacks here.













        int ret = mActivityStarter.startActivities(null, uid, callingPackage, intents, resolvedTypes,













                resultTo, bOptions, userId, reason);













        int ret = mActivityStarter.startActivities(null, uid, realCallingPid, realCallingUid,













                callingPackage, intents, resolvedTypes, resultTo, bOptions, userId, reason);















        return ret;















    }







































services/core/java/com/android/server/am/ActivityStarter.java



+39
−4




























Original line number
Diff line number
Diff line








@@ -136,6 +136,8 @@ import java.util.Date;













 * an activity and associated task and stack.















 */















class ActivityStarter {













    public static final int PID_NULL = 0;





























    private static final String TAG = TAG_WITH_CLASS_NAME ? "ActivityStarter" : TAG_AM;















    private static final String TAG_RESULTS = TAG + POSTFIX_RESULTS;















    private static final String TAG_FOCUS = TAG + POSTFIX_FOCUS;










@@ -677,6 +679,20 @@ class ActivityStarter {













            ProfilerInfo profilerInfo, WaitResult outResult,















            Configuration globalConfig, Bundle bOptions, boolean ignoreTargetSecurity, int userId,















            TaskRecord inTask, String reason) {













        return startActivityMayWait(caller, callingUid, PID_NULL, UserHandle.USER_NULL,













             callingPackage, intent, resolvedType, voiceSession, voiceInteractor, resultTo,













             resultWho, requestCode, startFlags, profilerInfo, outResult, globalConfig, bOptions,













             ignoreTargetSecurity, userId, inTask, reason);













    }



























    final int startActivityMayWait(IApplicationThread caller, int callingUid,













            int requestRealCallingPid, int requestRealCallingUid,













            String callingPackage, Intent intent, String resolvedType,













            IVoiceInteractionSession voiceSession, IVoiceInteractor voiceInteractor,













            IBinder resultTo, String resultWho, int requestCode, int startFlags,













            ProfilerInfo profilerInfo, WaitResult outResult,













            Configuration globalConfig, Bundle bOptions, boolean ignoreTargetSecurity, int userId,













            TaskRecord inTask, String reason) {















        // Refuse possible leaked file descriptors















        if (intent != null && intent.hasFileDescriptors()) {















            throw new IllegalArgumentException("File descriptors passed in Intent");










@@ -730,8 +746,14 @@ class ActivityStarter {





























        ActivityOptions options = ActivityOptions.fromBundle(bOptions);















        synchronized (mService) {













            final int realCallingPid = Binder.getCallingPid();













            final int realCallingUid = Binder.getCallingUid();



























            final int realCallingPid = requestRealCallingPid != PID_NULL













                ? requestRealCallingPid













                : Binder.getCallingPid();













            final int realCallingUid = requestRealCallingUid != UserHandle.USER_NULL













                ? requestRealCallingUid













                : Binder.getCallingUid();





























            int callingPid;















            if (callingUid >= 0) {















                callingPid = -1;










@@ -883,6 +905,14 @@ class ActivityStarter {













    final int startActivities(IApplicationThread caller, int callingUid, String callingPackage,















            Intent[] intents, String[] resolvedTypes, IBinder resultTo,















            Bundle bOptions, int userId, String reason) {













        return startActivities(caller, callingUid, PID_NULL, UserHandle.USER_NULL, callingPackage,













             intents, resolvedTypes, resultTo, bOptions, userId, reason);













    }



























    final int startActivities(IApplicationThread caller, int callingUid,













            int incomingRealCallingPid, int incomingRealCallingUid, String callingPackage,













            Intent[] intents, String[] resolvedTypes, IBinder resultTo,













            Bundle bOptions, int userId, String reason) {















        if (intents == null) {















            throw new NullPointerException("intents is null");















        }









@@ -893,8 +923,13 @@ class ActivityStarter {













            throw new IllegalArgumentException("intents are length different than resolvedTypes");















        }





























        final int realCallingPid = Binder.getCallingPid();













        final int realCallingUid = Binder.getCallingUid();













        final int realCallingPid = incomingRealCallingPid != PID_NULL













                     ? incomingRealCallingPid













                     : Binder.getCallingPid();



























        final int realCallingUid = incomingRealCallingUid != UserHandle.USER_NULL













                     ? incomingRealCallingUid













                     : Binder.getCallingUid();































        int callingPid;















        if (callingUid >= 0) {

































services/core/java/com/android/server/am/PendingIntentRecord.java



+3
−2




























Original line number
Diff line number
Diff line








@@ -332,8 +332,9 @@ final class PendingIntentRecord extends IIntentSender.Stub {













                                }















                                allIntents[allIntents.length-1] = finalIntent;















                                allResolvedTypes[allResolvedTypes.length-1] = resolvedType;













                                owner.startActivitiesInPackage(uid, key.packageName, allIntents,













                                        allResolvedTypes, resultTo, options, userId);













                                owner.startActivitiesInPackage(uid, callingPid, callingUid,













                                        key.packageName, allIntents, allResolvedTypes, resultTo,













                                        options, userId);















                            } else {















                                owner.startActivityInPackage(uid, key.packageName, finalIntent,















                                        resolvedType, resultTo, resultWho, requestCode, 0,

































services/core/java/com/android/server/pm/PackageManagerService.java



+2
−4




























Original line number
Diff line number
Diff line








@@ -25935,11 +25935,9 @@ Slog.v(TAG, ":: stepped forward, applying functor at tag " + parser.getName());













        }















        if (mExternalSourcesPolicy != null) {















            int isTrusted = mExternalSourcesPolicy.getPackageTrustedToInstallApps(packageName, uid);













            if (isTrusted != PackageManagerInternal.ExternalSourcesPolicy.USER_DEFAULT) {















            return isTrusted == PackageManagerInternal.ExternalSourcesPolicy.USER_TRUSTED;















        }













        }













        return checkUidPermission(appOpPermission, uid) == PERMISSION_GRANTED;













        return false;















    }





























    @Override