Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit d79ab2c8 authored by Piyush Mehrotra's avatar Piyush Mehrotra Committed by Automerger Merge Worker
Browse files

[DO NOT MERGE] Check caller's uid in backupAgentCreated callback am: 859abb58 am: d9702123 

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/24308899



Change-Id: Ic69e13bf3aad8a76b8b8236422c0fba38ef872fd
Signed-off-by: default avatarAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
parents a8a801a4 d9702123

services/core/java/com/android/server/am/ActivityManagerService.java

+21 −2
Original line number Diff line number Diff line
@@ -3074,6 +3074,22 @@ public class ActivityManagerService extends IActivityManager.Stub 
        }

    }













    /**













     * Enforces that the uid of the caller matches the uid of the package.













     *













     * @param packageName the name of the package to match uid against.













     * @param callingUid the uid of the caller.













     * @throws SecurityException if the calling uid doesn't match uid of the package.













     */













    private void enforceCallingPackage(String packageName, int callingUid) {













        final int userId = UserHandle.getUserId(callingUid);













        final int packageUid = getPackageManagerInternal().getPackageUid(packageName,













                /*flags=*/ 0, userId);













        if (packageUid != callingUid) {













            throw new SecurityException(packageName + " does not belong to uid " + callingUid);













        }













    }



























    @Override















    public void setPackageScreenCompatMode(String packageName, int mode) {















        mActivityTaskManager.setPackageScreenCompatMode(packageName, mode);










@@ -13629,13 +13645,16 @@ public class ActivityManagerService extends IActivityManager.Stub













    // A backup agent has just come up















    @Override















    public void backupAgentCreated(String agentPackageName, IBinder agent, int userId) {













        final int callingUid = Binder.getCallingUid();













        enforceCallingPackage(agentPackageName, callingUid);



























        // Resolve the target user id and enforce permissions.













        userId = mUserController.handleIncomingUser(Binder.getCallingPid(), Binder.getCallingUid(),













        userId = mUserController.handleIncomingUser(Binder.getCallingPid(), callingUid,















                userId, /* allowAll */ false, ALLOW_FULL_ONLY, "backupAgentCreated", null);















        if (DEBUG_BACKUP) {















            Slog.v(TAG_BACKUP, "backupAgentCreated: " + agentPackageName + " = " + agent















                    + " callingUserId = " + UserHandle.getCallingUserId() + " userId = " + userId













                    + " callingUid = " + Binder.getCallingUid() + " uid = " + Process.myUid());













                    + " callingUid = " + callingUid + " uid = " + Process.myUid());















        }





























        synchronized(this) {