Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 7a697439 authored by Pranav Madapurmath's avatar Pranav Madapurmath Committed by Android (Google) Code Review
Browse files

Merge "Resolve cross-user image exploit for conference status hints" into sc-dev

parents d57f2531 a8e2bf9c

src/com/android/server/telecom/ConnectionServiceWrapper.java

+7 −0
Original line number Diff line number Diff line
@@ -136,10 +136,17 @@ public class ConnectionServiceWrapper extends ServiceBinder implements 
                ParcelableConference conference, Session.Info sessionInfo) {

            Log.startSession(sessionInfo, LogUtils.Sessions.CSW_HANDLE_CREATE_CONNECTION_COMPLETE,

                    mPackageAbbreviation);

            UserHandle callingUserHandle = Binder.getCallingUserHandle();

            long token = Binder.clearCallingIdentity();

            try {

                synchronized (mLock) {

                    logIncoming("handleCreateConferenceComplete %s", callId);

                    // Check status hints image for cross user access

                    if (conference.getStatusHints() != null) {

                        Icon icon = conference.getStatusHints().getIcon();

                        conference.getStatusHints().setIcon(StatusHints.

                                validateAccountIconUserBoundary(icon, callingUserHandle));

                    }

                    Call call = mCallIdMapper.getCall(callId);

                    if (mScheduledFutureMap.containsKey(call)) {

                        ScheduledFuture<?> existingTimeout = mScheduledFutureMap.get(call);