Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Skip to content
Commit ff59f5b5 authored by William Loh's avatar William Loh
Browse files

Add manifest attr length and tag count checks

There are multiple security vulnerabilites related to a lack of any
restrictions on manifest attribute lengths and tag counts. These
restrictions will now be added to the parser to prevent installation of
any malicious apps with excessivly large string attributes and/or large
number of repeated tags in the manifest.

Bug: 267185315
Test: Manually tried to install malicious apps to check that it fails
install
Test: atest com.android.server.pm.parsing

Change-Id: I00d4c5eea60a8ae01f8620a53412a9f9cfadc1bc
parent 30501e86
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment