Android/frameworks_base
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Don't export HeapDumpProvider.

Browse Source 
Stop exporting HeapDumpProvider so apps can only access generated dumps
when the user explicitly shares them.

Bug: 184046948
Test: capture system heap dump in developer options and confirm test app
get SecurityException if it tries to access the dump directly, but gets
access when the dump is shared through the notification flow

Change-Id: Ibdca7cde4f563baa39163869289da5b79fc3a6db
(cherry picked from commit a60c62bcb7)
This commit is contained in:
Kweku Adams
2021-06-03 16:07:56 -07:00
parent 8709fbb945
commit 260d0a85dd
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
packages/Shell/AndroidManifest.xml
View File

@@ -346,7 +346,7 @@
<provider android:name=".HeapDumpProvider"
android:authorities="com.android.shell.heapdump"
android:grantUriPermissions="true"
android:exported="true" />
android:exported="false" />
<activity
android:name=".BugreportWarningActivity"