Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit e45ca723 authored by Joanne Chung's avatar Joanne Chung Committed by Automerger Merge Worker
Browse files

Merge "Validate checkInstallConstraints() installer package name" into udc-dev am: d359469b 

Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/23053819



Change-Id: I0a4e26257e857207a6866d4f30dd30434654a02c
Signed-off-by: default avatarAutomerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
parents 07d71516 d359469b

services/core/java/com/android/server/pm/PackageInstallerService.java

+5 −0
Original line number Diff line number Diff line
@@ -1316,6 +1316,11 @@ public class PackageInstallerService extends IPackageInstaller.Stub implements 


        final var snapshot = mPm.snapshotComputer();

        final int callingUid = Binder.getCallingUid();

        final var callingPackageName = snapshot.getNameForUid(callingUid);

        if (!TextUtils.equals(callingPackageName, installerPackageName)) {

            throw new SecurityException("The installerPackageName set by the caller doesn't match "

                    + "the caller's own package name.");

        }

        if (!PackageManagerServiceUtils.isSystemOrRootOrShell(callingUid)) {

            for (var packageName : packageNames) {

                var ps = snapshot.getPackageStateInternal(packageName);