Unbind CS if connection is not created within 15 seconds.
This CL adds a check to ensure that connection creation occurs within 15 seconds after binding to that ConnectionService. If the connection/conference is not created in that timespan, this CL adds logic to manually unbind the ConnectionService at that point in time. This prevents malicious apps from keeping a declared permission in forever even in the background. This updated CL includes a null check to avoid a NPE that occurred in the first iteration of this change. Bug: 293458004 Test: manually using the provided apk + atest CallsManagerTest Flag: EXEMPT Security High/Critical Severity CVE Change-Id: If46cfa26278f09854c10266af6eaa73382f20296 (cherry picked from commit 48d6b0df) Merged-In: If46cfa26278f09854c10266af6eaa73382f20296
Loading
-
mentioned in commit b32da758
-
mentioned in commit daa23162
-
mentioned in commit eade481e
-
mentioned in commit fa374bfe
-
mentioned in commit ca9186bc
-
mentioned in commit 30c5f5d7
-
mentioned in commit 92420c86
-
mentioned in commit 96e25491
-
mentioned in commit eb5d0207
-
mentioned in commit 47561e8c
-
mentioned in commit d873b888
-
mentioned in commit 29a63ee0
-
mentioned in commit e3e24183
-
mentioned in commit 557b9b2a
-
mentioned in commit 6b4d9b99
Please register or sign in to comment