Merge "Checking if package belongs to UID before registering broadcast receiver" into rvc-qpr-dev (d630a527) · Commits · e / os / android_frameworks_base

services/core/java/com/android/server/am/ActiveServices.java

+5 −0

Original line number	Original line	Diff line number	Diff line
	@@ -2517,6 +2517,11 @@ public final class ActiveServices {
	throw new SecurityException("BIND_EXTERNAL_SERVICE failed, "		throw new SecurityException("BIND_EXTERNAL_SERVICE failed, "
	+ className + " is not an isolatedProcess");		+ className + " is not an isolatedProcess");
	}		}
			if (AppGlobals.getPackageManager().getPackageUid(callingPackage,
			0, userId) != callingUid) {
			throw new SecurityException("BIND_EXTERNAL_SERVICE failed, "
			+ "calling package not owned by calling UID ");
			}
	// Run the service under the calling package's application.		// Run the service under the calling package's application.
	ApplicationInfo aInfo = AppGlobals.getPackageManager().getApplicationInfo(		ApplicationInfo aInfo = AppGlobals.getPackageManager().getApplicationInfo(
	callingPackage, ActivityManagerService.STOCK_PM_FLAGS, userId);		callingPackage, ActivityManagerService.STOCK_PM_FLAGS, userId);