Unbind CS if connection is not created within 15 seconds.
This CL adds a check to ensure that connection creation occurs within 15 seconds after binding to that ConnectionService. If the connection/conference is not created in that timespan, this CL adds logic to manually unbind the ConnectionService at that point in time. This prevents malicious apps from keeping a declared permission in forever even in the background. This updated CL includes a null check to avoid a NPE that occurred in the first iteration of this change. Bug: 293458004 Test: manually using the provided apk + atest CallsManagerTest Flag: EXEMPT Security High/Critical Severity CVE Change-Id: If46cfa26278f09854c10266af6eaa73382f20296 (cherry picked from commit 48d6b0df) Merged-In: If46cfa26278f09854c10266af6eaa73382f20296
Loading
-
mentioned in commit 6a5b88e2
-
mentioned in commit 52c5978b
-
mentioned in commit 02722a17
-
mentioned in commit f86000cd
-
mentioned in commit e9a4ffeb
-
mentioned in commit 7ffd5723
-
mentioned in commit 72b5b312
-
mentioned in commit 30430026
-
mentioned in commit 386928a3
-
mentioned in commit e2d4990d
-
mentioned in commit 3902f8ab
Please register or sign in to comment