Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Skip to content
Commit 692a877d authored by Grace Jia's avatar Grace Jia
Browse files

Check calling package before checking permission protection 

Using the name of a third-party package targeting a lower API level can
bypass the whole permission check in
TelecomServiceImpl#getCallStateUsingPackage. Check the calling package
first to avoid this.

Bug: 190400974
Test: Unit test, test with debug app
Change-Id: I2b0bfde41f006c2010381a85100ce931366abf57
parent eafcfb2f
Show whitespace changes
Inline Side-by-side
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment