Merge "MidiService: check UID in getDeviceStatus()"

2022-01-24 16:56:41 +00:00
parent 71cadb9480 5438955940
commit 230b32ceb6
1 changed files with 9 additions and 1 deletions
--- a/services/midi/java/com/android/server/midi/MidiService.java
+++ b/services/midi/java/com/android/server/midi/MidiService.java
@@ -864,7 +864,15 @@ public class MidiService extends IMidiManager.Stub {
        if (device == null) {
            throw new IllegalArgumentException("no such device for " + deviceInfo);
        }
-        return device.getDeviceStatus();
+        int uid = Binder.getCallingUid();
+        if (device.isUidAllowed(uid)) {
+            return device.getDeviceStatus();
+        } else {
+            Log.e(TAG, "getDeviceStatus() invalid UID = " + uid);
+            EventLog.writeEvent(0x534e4554, "203549963",
+                    uid, "getDeviceStatus: invalid uid");
+            return null;
+        }
    }

    @Override