Add the check for authority access on related APIs.
Several sync-related APIs in ContentService leave the possibility that malicious code could do a side channel attack. Apply the app visibility check to mitigate this. Bug: 207133734 Bug: 207670653 Bug: 207671082 Bug: 208257015 Bug: 208257145 Bug: 208258815 Bug: 208258924 Test: atest CtsContentTestCases Test: atest CtsProviderTestCases Test: atest CtsSyncManagerTestsCases Test: atest FrameworksCoreTests:ContentResolverTest Test: atest FrameworksCoreTests:ManagedUserContentResolverTest Test: atest FrameworksCoreTests:SecondaryUserContentResolverTest Test: manually using the PoC in the buganizer to ensure the symptom no longer exists. Change-Id: I56f40560b7d7546e50107b76a4800f0716dfe40f
Loading
Please register or sign in to comment