Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit c567ac91 authored by Jay Sullivan's avatar Jay Sullivan Committed by Android (Google) Code Review
Browse files

Merge "Fix isAutoRevokeWhitelisted vulnerability" into sc-dev

parents 9b1891b4 287e22a9

services/core/java/com/android/server/pm/permission/PermissionManagerService.java

+5 −1
Original line number Diff line number Diff line
@@ -1384,12 +1384,16 @@ public class PermissionManagerService extends IPermissionManager.Stub { 


        final AndroidPackage pkg = mPackageManagerInt.getPackage(packageName);

        final int callingUid = Binder.getCallingUid();

        final int packageUid = UserHandle.getUid(userId, pkg.getUid());

        if (mPackageManagerInt.filterAppAccess(packageName, callingUid, userId)) {

            return false;

        }



        if (!checkAutoRevokeAccess(pkg, callingUid)) {

            return false;

        }



        final int packageUid = UserHandle.getUid(userId, pkg.getUid());



        final long identity = Binder.clearCallingIdentity();

        try {

            return mAppOpsManager.checkOpNoThrow(