Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit e5ad41bc authored by Dianne Hackborn's avatar Dianne Hackborn
Browse files

Fix issue #27317952: PendingIntent.getIntent() should be protected 

Change-Id: Ib05135cd94f5251942a6fc6df542ed39083f7827
parent 72041bb2

core/res/AndroidManifest.xml

+5 −0
Original line number Diff line number Diff line
@@ -1598,6 +1598,11 @@ 
    <permission android:name="android.permission.GET_PACKAGE_IMPORTANCE"

        android:protectionLevel="signature|privileged" />



    <!-- Allows use of PendingIntent.getIntent().

         @hide -->

    <permission android:name="android.permission.GET_INTENT_SENDER_INTENT"

        android:protectionLevel="signature" />



    <!-- ================================== -->

    <!-- Permissions affecting the display of other applications  -->

    <!-- ================================== -->

packages/SystemUI/AndroidManifest.xml

+1 −0
Original line number Diff line number Diff line
@@ -82,6 +82,7 @@ 
    <uses-permission android:name="android.permission.GET_TOP_ACTIVITY_INFO" />

    <uses-permission android:name="android.permission.MANAGE_ACTIVITY_STACKS" />

    <uses-permission android:name="android.permission.START_TASKS_FROM_RECENTS" />

    <uses-permission android:name="android.permission.GET_INTENT_SENDER_INTENT" />



    <!-- WindowManager -->

    <uses-permission android:name="android.permission.INTERNAL_SYSTEM_WINDOW" />

services/core/java/com/android/server/am/ActivityManagerService.java

+2 −0
Original line number Diff line number Diff line
@@ -6984,6 +6984,8 @@ public final class ActivityManagerService extends ActivityManagerNative 














    @Override















    public Intent getIntentForIntentSender(IIntentSender pendingResult) {













        enforceCallingPermission(Manifest.permission.GET_INTENT_SENDER_INTENT,













                "getIntentForIntentSender()");















        if (!(pendingResult instanceof PendingIntentRecord)) {















            return null;















        }