Fix the potential DOS issue for the Settings Apps page
The usage access permission of Settings app could be turned off by starting the activity with USAGE_ACCESS_SETTINGS. Once the Settings app loses the usage access permission, it will crash the Apps page which depends on the usage to show recent apps. And this symptom will persist even with device reboot. To fix this vulnerability, we can add a package check in onCreate() to avoid someone trying to start USAGE_ACCESS_SETTINGS with the Settings package from third party apps. Bug: 264260808 Test: Manually verify solution with the repro steps and also test the normal visiting behavior. Change-Id: If7cb0880e706369504e432b1f1104d06b1fcfa26 Change-Id: I70871aed763d14a79e474547c77c20a9677af6ff
Loading
Please register or sign in to comment