Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 991c90cd authored by Joanne Chung's avatar Joanne Chung Committed by Automerger Merge Worker
Browse files

Merge "Validate checkInstallConstraints() installer package name" into udc-dev... 

Merge "Validate checkInstallConstraints() installer package name" into udc-dev am: d359469b am: b0e1bb57

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/23053819



Change-Id: Icac59cb4e7dffce0388e096ab18f912621d55741
Signed-off-by: default avatarAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
parents 58f6d421 b0e1bb57

services/core/java/com/android/server/pm/PackageInstallerService.java

+5 −0
Original line number Diff line number Diff line
@@ -1316,6 +1316,11 @@ public class PackageInstallerService extends IPackageInstaller.Stub implements 


        final var snapshot = mPm.snapshotComputer();

        final int callingUid = Binder.getCallingUid();

        final var callingPackageName = snapshot.getNameForUid(callingUid);

        if (!TextUtils.equals(callingPackageName, installerPackageName)) {

            throw new SecurityException("The installerPackageName set by the caller doesn't match "

                    + "the caller's own package name.");

        }

        if (!PackageManagerServiceUtils.isSystemOrRootOrShell(callingUid)) {

            for (var packageName : packageNames) {

                var ps = snapshot.getPackageStateInternal(packageName);