Make mutable PendingIntents explicit
Starting from target SDK U, we will block creation of mutable PendingIntents with implicit Intents because attackers can mutate the Intent object within and launch altered behavior on behalf of victim apps. For more details on the vulnerability, see go/pendingintent-rca. From a quick analysis, we concluded that the PendingIntents here were only destined to the test app/to the app, so they were made explicit. Reviewers, please call out if this is not the case. Bug: 236704164 Bug: 229362273 Test: atest FrameworksTelephonyTests Change-Id: I71e4130d2139a2ac1c73c2fe67c8b0d71b1f928c
Loading
Please register or sign in to comment