[pm] restrict PackageInstaller getMySessions() results based on calling UIDs

BUG: 188765544
Test: atest android.content.pm.cts.InstallSessionTransferTest
Change-Id: I51d65c315db91d4d79c38bed487180ea81661ccf
Merged-In: I51d65c315db91d4d79c38bed487180ea81661ccf

services/core/java/com/android/server/pm/PackageInstallerService.java

@@ -989,7 +989,8 @@ public class PackageInstallerService extends IPackageInstaller.Stub implements
                 SessionInfo info =
                         session.generateInfoForCaller(false /*withIcon*/, Process.SYSTEM_UID);
                 if (Objects.equals(info.getInstallerPackageName(), installerPackageName)
-                        && session.userId == userId && !session.hasParentSessionId()) {
+                        && session.userId == userId && !session.hasParentSessionId()
+                        && isCallingUidOwner(session)) {
                     result.add(info);
                 }
             }