Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 94368ff5 authored by Joanne Chung's avatar Joanne Chung Committed by Automerger Merge Worker
Browse files

Merge "Validate checkInstallConstraints() installer package name" into udc-dev... 

Merge "Validate checkInstallConstraints() installer package name" into udc-dev am: d359469b am: e45ca723

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/23053819



Change-Id: Idc8085d66fd69c24a1da7f3bc658d90fab1191c0
Signed-off-by: default avatarAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
parents 6dd6ee29 e45ca723

services/core/java/com/android/server/pm/PackageInstallerService.java

+5 −0
Original line number Diff line number Diff line
@@ -1316,6 +1316,11 @@ public class PackageInstallerService extends IPackageInstaller.Stub implements 


        final var snapshot = mPm.snapshotComputer();

        final int callingUid = Binder.getCallingUid();

        final var callingPackageName = snapshot.getNameForUid(callingUid);

        if (!TextUtils.equals(callingPackageName, installerPackageName)) {

            throw new SecurityException("The installerPackageName set by the caller doesn't match "

                    + "the caller's own package name.");

        }

        if (!PackageManagerServiceUtils.isSystemOrRootOrShell(callingUid)) {

            for (var packageName : packageNames) {

                var ps = snapshot.getPackageStateInternal(packageName);