Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit f00e7d5c authored by William Leshner's avatar William Leshner Committed by Android (Google) Code Review
Browse files

Merge "Fix vulnerability that allowed attackers to start arbitary activities" into tm-dev

parents 2335fc14 bf8ff047
Loading
Loading
Loading
Loading
+11 −2
Original line number Diff line number Diff line
@@ -1192,8 +1192,17 @@ public class DreamService extends Service implements Window.Callback {
        if (!flattenedString.contains("/")) {
            return new ComponentName(serviceInfo.packageName, flattenedString);
        }

        return ComponentName.unflattenFromString(flattenedString);
        // Ensure that the component is from the same package as the dream service. If not,
        // treat the component as invalid and return null instead.
        final ComponentName cn = ComponentName.unflattenFromString(flattenedString);
        if (cn == null) return null;
        if (!cn.getPackageName().equals(serviceInfo.packageName)) {
            Log.w(TAG,
                    "Inconsistent package name in component: " + cn.getPackageName()
                            + ", should be: " + serviceInfo.packageName);
            return null;
        }
        return cn;
    }

    /**