Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit d7a94a8e authored by Jim Miller's avatar Jim Miller Committed by gitbuildkicker
Browse files

Fix vulnerability in LockSettings service 

Fixes bug 30003944

Change-Id: I8700d4424c6186c8d5e71d2fdede0223ad86904d
(cherry picked from commit 2d71384a)
parent 97a619d4

core/java/com/android/internal/widget/LockPatternUtils.java

+2 −2
Original line number Diff line number Diff line
@@ -354,7 +354,7 @@ public class LockPatternUtils { 
                return false;

            }

        } catch (RemoteException re) {

            return true;

            return false;

        }

    }
@@ -435,7 +435,7 @@ public class LockPatternUtils { 
                return false;

            }

        } catch (RemoteException re) {

            return true;

            return false;

        }

    }

services/core/java/com/android/server/LockSettingsService.java

+6 −0
Original line number Diff line number Diff line
@@ -1215,6 +1215,9 @@ public class LockSettingsService extends ILockSettings.Stub { 
    private VerifyCredentialResponse doVerifyPattern(String pattern, boolean hasChallenge,

            long challenge, int userId) throws RemoteException {

       checkPasswordReadPermission(userId);

       if (TextUtils.isEmpty(pattern)) {

           throw new IllegalArgumentException("Pattern can't be null or empty");

       }

       CredentialHash storedHash = mStorage.readPatternHash(userId);

       return doVerifyPattern(pattern, storedHash, hasChallenge, challenge, userId);

    }
@@ -1306,6 +1309,9 @@ public class LockSettingsService extends ILockSettings.Stub { 
    private VerifyCredentialResponse doVerifyPassword(String password, boolean hasChallenge,

            long challenge, int userId) throws RemoteException {

       checkPasswordReadPermission(userId);

       if (TextUtils.isEmpty(password)) {

           throw new IllegalArgumentException("Password can't be null or empty");

       }

       CredentialHash storedHash = mStorage.readPasswordHash(userId);

       return doVerifyPassword(password, storedHash, hasChallenge, challenge, userId);

    }