Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit e541127e authored by Julia Reynolds's avatar Julia Reynolds Committed by Nishith Khanna
Browse files

Be more strict about content types for message array 

Now with fewer class cast exceptions

Test: ConversationNotification
Test: NotificationManagerServiceTest
Bug: 433746973
Flag: EXEMPT BUGFIX
(cherry picked from commit 71d4afae00c7d6d9238f8ec82303e1e13da50fbb)
Cherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:01326d2f6a1b80825b85992b35ce6d43af21a5c7
Merged-In: I3022e010de95f14dcd0d09d123684ee265101e0a
Change-Id: I3022e010de95f14dcd0d09d123684ee265101e0a
parent 28342820

core/java/android/app/Notification.java

+9 −9
Original line number Diff line number Diff line
@@ -2972,8 +2972,8 @@ public class Notification implements Parcelable 
                person.visitUris(visitor);

            }













            final Parcelable[] messages = extras.getParcelableArray(EXTRA_MESSAGES,













                    Parcelable.class);













            final Bundle[] messages =













                    getParcelableArrayFromBundle(extras, EXTRA_MESSAGES, Bundle.class);















            if (!ArrayUtils.isEmpty(messages)) {















                for (MessagingStyle.Message message : MessagingStyle.Message















                        .getMessagesFromBundleArray(messages)) {









@@ -2981,8 +2981,8 @@ public class Notification implements Parcelable













                }















            }



























            final Parcelable[] historic = extras.getParcelableArray(EXTRA_HISTORIC_MESSAGES,













                    Parcelable.class);













            final Parcelable[] historic =













                    getParcelableArrayFromBundle(extras, EXTRA_HISTORIC_MESSAGES, Bundle.class);















            if (!ArrayUtils.isEmpty(historic)) {















                for (MessagingStyle.Message message : MessagingStyle.Message















                        .getMessagesFromBundleArray(historic)) {










@@ -7306,8 +7306,8 @@ public class Notification implements Parcelable













     */















    public boolean hasImage() {















        if (isStyle(MessagingStyle.class) && extras != null) {













            final Parcelable[] messages = extras.getParcelableArray(EXTRA_MESSAGES,













                    Parcelable.class);













            final Bundle[] messages =













                    getParcelableArrayFromBundle(extras, EXTRA_MESSAGES, Bundle.class);















            if (!ArrayUtils.isEmpty(messages)) {















                for (MessagingStyle.Message m : MessagingStyle.Message















                        .getMessagesFromBundleArray(messages)) {










@@ -8522,10 +8522,10 @@ public class Notification implements Parcelable













                mUser = user;















            }















            mConversationTitle = extras.getCharSequence(EXTRA_CONVERSATION_TITLE);













            Parcelable[] messages = extras.getParcelableArray(EXTRA_MESSAGES, Parcelable.class);













            Bundle[] messages = getParcelableArrayFromBundle(extras, EXTRA_MESSAGES, Bundle.class);















            mMessages = Message.getMessagesFromBundleArray(messages);













            Parcelable[] histMessages = extras.getParcelableArray(EXTRA_HISTORIC_MESSAGES,













                    Parcelable.class);













            Bundle[] histMessages = getParcelableArrayFromBundle(













                    extras, EXTRA_HISTORIC_MESSAGES, Bundle.class);















            mHistoricMessages = Message.getMessagesFromBundleArray(histMessages);















            mIsGroupConversation = extras.getBoolean(EXTRA_IS_GROUP_CONVERSATION);















            mUnreadMessageCount = extras.getInt(EXTRA_CONVERSATION_UNREAD_MESSAGE_COUNT);

































services/tests/uiservicestests/src/com/android/server/notification/NotificationManagerServiceTest.java



+93
−1




























Original line number
Diff line number
Diff line








@@ -187,11 +187,13 @@ import android.companion.ICompanionDeviceManager;













import android.compat.testing.PlatformCompatChangeRule;















import android.content.BroadcastReceiver;















import android.content.ComponentName;













import android.content.ContentProvider;















import android.content.ContentUris;















import android.content.Context;















import android.content.IIntentSender;















import android.content.Intent;















import android.content.IntentFilter;













import android.content.UriPermission;















import android.content.pm.ActivityInfo;















import android.content.pm.ApplicationInfo;















import android.content.pm.IPackageManager;









@@ -205,6 +207,7 @@ import android.content.pm.VersionedPackage;













import android.content.res.Resources;















import android.graphics.Bitmap;















import android.graphics.Color;













import android.graphics.Rect;















import android.graphics.drawable.Icon;















import android.media.AudioManager;















import android.media.IRingtonePlayer;










@@ -1266,6 +1269,95 @@ public class NotificationManagerServiceTest extends UiServiceTestCase {













                captor.getValue().getIntent().getPackage());















    }



























    public void testNoUriGrantsForBadMessagesList() throws RemoteException {













        Uri targetUri = Uri.parse("content://com.android.contacts/display_photo/1");

























        // create message person













        Person person = new Person.Builder()













                .setName("Name")













                .setIcon(Icon.createWithContentUri(targetUri))













                .setKey("user_123")













                .setBot(false)













                .build();

























        // create MessagingStyle













        Notification.MessagingStyle messagingStyle = new Notification.MessagingStyle(person)













                .setConversationTitle("Bug discussion")













                .setGroupConversation(true)













                .addMessage("Hi，look my photo", System.currentTimeMillis() - 60000, person)













                .addMessage("Oho, you used my contacts photo",













                        System.currentTimeMillis() - 30000, "Friend");

























        // create Notification













        Notification notification = new Notification.Builder(mContext, TEST_CHANNEL_ID)













                .setSmallIcon(R.drawable.sym_def_app_icon)













                .setContentTitle("")













                .setContentText("")













                .setAutoCancel(true)













                .setStyle(messagingStyle)













                .setCategory(Notification.CATEGORY_MESSAGE)













                .setFlag(Notification.FLAG_GROUP_SUMMARY, true)













                .build();













        notification.contentIntent = createPendingIntent("open");

























        notification.extras.remove(EXTRA_MESSAGING_PERSON);

























        // add BadClipDescription to avoid visitUri check uris in EXTRA_MESSAGES value













        ArrayList<Parcelable> parcelableArray =













                new ArrayList<>(List.of(notification.extras.getParcelableArray(EXTRA_MESSAGES)));













        parcelableArray.add(new MyParceledListSlice());













        notification.extras.putParcelableArray(













                EXTRA_MESSAGES, parcelableArray.toArray(new Parcelable[0]));













        try {













            mBinderService.enqueueNotificationWithTag(mPkg, mPkg,













                    "testNoUriGrantsForBadMessagesList",













                    1, notification, mContext.getUserId());













            waitForIdle();













            fail("should have failed to parse messages");













        } catch (java.lang.ArrayStoreException e) {













            verify(mUgmInternal, never()).checkGrantUriPermission(













                    anyInt(), any(), eq(ContentProvider.getUriWithoutUserId(targetUri)),













                    anyInt(), anyInt());













        }













    }

























    private class MyParceledListSlice extends Intent {













        @Override













        public void writeToParcel(Parcel dest, int i) {













            Parcel test = Parcel.obtain();













            test.writeString(this.getClass().getName());













            int strLength = test.dataSize();













            test.recycle();













            dest.setDataPosition(dest.dataPosition() - strLength);













            dest.writeString("android.content.pm.ParceledListSlice");

























            dest.writeInt(1);













            dest.writeString(UriPermission.class.getName());













            dest.writeInt(0); // use binder













            dest.writeStrongBinder(new Binder() {













                private int callingPid = -1;













                @Override













                public boolean onTransact(int code, Parcel data, Parcel reply, int flags)













                        throws RemoteException {













                    if (code == 1) {













                        reply.writeNoException();













                        reply.writeInt(1);













                        if (getCallingUid() == 1000 && callingPid == -1) {













                            reply.writeParcelable(new Rect(), 0);













                            callingPid = getCallingPid();













                        } else {













                            reply.writeInt(-1);













                            reply.writeInt(-1);













                            reply.writeLong(0);













                        }













                        return true;













                    }













                    return super.onTransact(code, data, reply, flags);













                }













            });













        }













    }



























    @Test















    public void testDefaultAssistant_overrideDefault() {















        final int userId = mContext.getUserId();










@@ -6565,7 +6657,7 @@ public class NotificationManagerServiceTest extends UiServiceTestCase {













        Bundle extras = new Bundle();















        extras.putParcelable(Notification.EXTRA_AUDIO_CONTENTS_URI, audioContents);















        extras.putString(Notification.EXTRA_BACKGROUND_IMAGE_URI, backgroundImage.toString());













        extras.putParcelable(Notification.EXTRA_MESSAGING_PERSON, person1);













        extras.putParcelable(EXTRA_MESSAGING_PERSON, person1);















        extras.putParcelableArrayList(Notification.EXTRA_PEOPLE_LIST,















                new ArrayList<>(Arrays.asList(person2, person3)));















        extras.putParcelableArray(Notification.EXTRA_REMOTE_INPUT_HISTORY_ITEMS,