Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Skip to content
Commit f71af6af authored by Thomas Stuart's avatar Thomas Stuart
Browse files

enforceCallingPackage for getCallStateUsingPackage

It was pointed out that getCallStateUsingPackage was vulnerable
to the exploit where the callingPackage can be replaced.  This had
been fixed once before but was reverted because the change was
causing test failures.

Turns out the Android shell UID (2000 group) was not permitted
to call getCallStateUsingPackage.  This was causing a Security
Exception to be thrown and ultimately what caused the p0 test
failures.

To allow the enforceCallingPackage to be called within the
getCallStateUsingPackage, Process.SHELL_UID is now on the
telecom allow list.

bug: 236813210
Test: manual.  CTS test would be too fragile.
Change-Id: I8c7ba07240fee51312557d7c3411f7603aace613
parent 106ad531
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment