Merge "Fix isAutoRevokeWhitelisted vulnerability" into sc-dev am: c567ac9165
Original change: https://googleplex-android-review.googlesource.com/c/platform/frameworks/base/+/15102869 Change-Id: I43308940cc1bc9b13624b91ed6e40556348735fc
This commit is contained in:
@@ -1384,12 +1384,16 @@ public class PermissionManagerService extends IPermissionManager.Stub {
|
||||
|
||||
final AndroidPackage pkg = mPackageManagerInt.getPackage(packageName);
|
||||
final int callingUid = Binder.getCallingUid();
|
||||
final int packageUid = UserHandle.getUid(userId, pkg.getUid());
|
||||
if (mPackageManagerInt.filterAppAccess(packageName, callingUid, userId)) {
|
||||
return false;
|
||||
}
|
||||
|
||||
if (!checkAutoRevokeAccess(pkg, callingUid)) {
|
||||
return false;
|
||||
}
|
||||
|
||||
final int packageUid = UserHandle.getUid(userId, pkg.getUid());
|
||||
|
||||
final long identity = Binder.clearCallingIdentity();
|
||||
try {
|
||||
return mAppOpsManager.checkOpNoThrow(
|
||||
|
||||
Reference in New Issue
Block a user