Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[pm] restrict PackageInstaller getMySessions() results based on calling UIDs

Browse Source 
BUG: 188765544
Test: atest android.content.pm.cts.InstallSessionTransferTest
Change-Id: I51d65c315db91d4d79c38bed487180ea81661ccf
Merged-In: I51d65c315db91d4d79c38bed487180ea81661ccf
This commit is contained in:
Songchun Fan
2021-06-29 14:28:39 -07:00
parent 75f7a2894b
commit 222a6b43a5
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
services/core/java/com/android/server/pm/PackageInstallerService.java
View File

@@ -989,7 +989,8 @@ public class PackageInstallerService extends IPackageInstaller.Stub implements
SessionInfo info = SessionInfo info =
session.generateInfoForCaller(false /*withIcon*/, Process.SYSTEM_UID); session.generateInfoForCaller(false /*withIcon*/, Process.SYSTEM_UID);
if (Objects.equals(info.getInstallerPackageName(), installerPackageName) if (Objects.equals(info.getInstallerPackageName(), installerPackageName)
&& session.userId == userId && !session.hasParentSessionId()) { && session.userId == userId && !session.hasParentSessionId()
&& isCallingUidOwner(session)) {
result.add(info); result.add(info);
} }
} }